diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-01-15 16:36:53 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-01-15 16:36:53 +0100 |
| commit | 06eed816c29c11b1f1a8cfdd6b2116d5708a35eb (patch) | |
| tree | 992652c2e34b2838a8c961fc5f25d153e202b91a /interface-definitions | |
| parent | 0c373c7c9cf0fff573e5acc5642f6af63c311da2 (diff) | |
| parent | 61487b13da8dc270907633a3140bd0cc2aa0926a (diff) | |
| download | vyos-1x-06eed816c29c11b1f1a8cfdd6b2116d5708a35eb.tar.gz vyos-1x-06eed816c29c11b1f1a8cfdd6b2116d5708a35eb.zip | |
Merge pull request #4923 from alexandr-san4ez/T7633-current
openvpn: T7633: Add support for `data-ciphers-fallback` in site-to-site tunnels
Diffstat (limited to 'interface-definitions')
| -rw-r--r-- | interface-definitions/include/version/openvpn-version.xml.i | 2 | ||||
| -rw-r--r-- | interface-definitions/interfaces_openvpn.xml.in | 43 |
2 files changed, 44 insertions, 1 deletions
diff --git a/interface-definitions/include/version/openvpn-version.xml.i b/interface-definitions/include/version/openvpn-version.xml.i index 67ef21983..6bc2b2da6 100644 --- a/interface-definitions/include/version/openvpn-version.xml.i +++ b/interface-definitions/include/version/openvpn-version.xml.i @@ -1,3 +1,3 @@ <!-- include start from include/version/openvpn-version.xml.i --> -<syntaxVersion component='openvpn' version='4'></syntaxVersion> +<syntaxVersion component='openvpn' version='5'></syntaxVersion> <!-- include end --> diff --git a/interface-definitions/interfaces_openvpn.xml.in b/interface-definitions/interfaces_openvpn.xml.in index 6510ed733..9ce05db9c 100644 --- a/interface-definitions/interfaces_openvpn.xml.in +++ b/interface-definitions/interfaces_openvpn.xml.in @@ -131,6 +131,49 @@ <multi/> </properties> </leafNode> + <leafNode name="data-ciphers-fallback"> + <properties> + <help>Fallback cipher to use for site-to-site tunnels</help> + <completionHelp> + <list>none 3des aes128 aes128gcm aes192 aes192gcm aes256 aes256gcm</list> + </completionHelp> + <valueHelp> + <format>none</format> + <description>Disable encryption</description> + </valueHelp> + <valueHelp> + <format>3des</format> + <description>DES algorithm with triple encryption</description> + </valueHelp> + <valueHelp> + <format>aes128</format> + <description>AES algorithm with 128-bit key CBC</description> + </valueHelp> + <valueHelp> + <format>aes128gcm</format> + <description>AES algorithm with 128-bit key GCM</description> + </valueHelp> + <valueHelp> + <format>aes192</format> + <description>AES algorithm with 192-bit key CBC</description> + </valueHelp> + <valueHelp> + <format>aes192gcm</format> + <description>AES algorithm with 192-bit key GCM</description> + </valueHelp> + <valueHelp> + <format>aes256</format> + <description>AES algorithm with 256-bit key CBC</description> + </valueHelp> + <valueHelp> + <format>aes256gcm</format> + <description>AES algorithm with 256-bit key GCM</description> + </valueHelp> + <constraint> + <regex>(none|3des|aes128|aes128gcm|aes192|aes192gcm|aes256|aes256gcm)</regex> + </constraint> + </properties> + </leafNode> </children> </node> #include <include/interface/ipv4-options.xml.i> |