diff options
| author | Antonio Quartulli <antonio@mandelbit.com> | 2026-10-01 15:41:53 +0200 |
|---|---|---|
| committer | Antonio Quartulli <antonio@mandelbit.com> | 2026-10-01 15:41:53 +0200 |
| commit | 8d99a2f6f81b225014d246dcf6c7bb03c641d4da (patch) | |
| tree | 9b8e29bddcc67288dedf5e9b71305a1a01032613 /interface-definitions | |
| parent | dfe2203a7fe7fa24de3fa2d8e82fa85dbb0eba52 (diff) | |
| download | vyos-1x-8d99a2f6f81b225014d246dcf6c7bb03c641d4da.tar.gz vyos-1x-8d99a2f6f81b225014d246dcf6c7bb03c641d4da.zip | |
openvpn: T9370: add chacha20poly1305 data cipher
Offer chacha20poly1305 in "encryption data-ciphers" and
"encryption data-ciphers-fallback", rendered as CHACHA20-POLY1305 and
allowed with DCO.
Diffstat (limited to 'interface-definitions')
| -rw-r--r-- | interface-definitions/interfaces_openvpn.xml.in | 16 |
1 files changed, 12 insertions, 4 deletions
diff --git a/interface-definitions/interfaces_openvpn.xml.in b/interface-definitions/interfaces_openvpn.xml.in index 26b004520..ff16a5610 100644 --- a/interface-definitions/interfaces_openvpn.xml.in +++ b/interface-definitions/interfaces_openvpn.xml.in @@ -91,7 +91,7 @@ <properties> <help>Cipher negotiation list for use in server or client mode</help> <completionHelp> - <list>none 3des aes128 aes128gcm aes192 aes192gcm aes256 aes256gcm</list> + <list>none 3des aes128 aes128gcm aes192 aes192gcm aes256 aes256gcm chacha20poly1305</list> </completionHelp> <valueHelp> <format>none</format> @@ -125,8 +125,12 @@ <format>aes256gcm</format> <description>AES algorithm with 256-bit key GCM</description> </valueHelp> + <valueHelp> + <format>chacha20poly1305</format> + <description>ChaCha20 stream cipher with Poly1305 authenticator</description> + </valueHelp> <constraint> - <regex>(none|3des|aes128|aes128gcm|aes192|aes192gcm|aes256|aes256gcm)</regex> + <regex>(none|3des|aes128|aes128gcm|aes192|aes192gcm|aes256|aes256gcm|chacha20poly1305)</regex> </constraint> <multi/> </properties> @@ -135,7 +139,7 @@ <properties> <help>Fallback cipher to use for site-to-site tunnels</help> <completionHelp> - <list>none 3des aes128 aes128gcm aes192 aes192gcm aes256 aes256gcm</list> + <list>none 3des aes128 aes128gcm aes192 aes192gcm aes256 aes256gcm chacha20poly1305</list> </completionHelp> <valueHelp> <format>none</format> @@ -169,8 +173,12 @@ <format>aes256gcm</format> <description>AES algorithm with 256-bit key GCM</description> </valueHelp> + <valueHelp> + <format>chacha20poly1305</format> + <description>ChaCha20 stream cipher with Poly1305 authenticator</description> + </valueHelp> <constraint> - <regex>(none|3des|aes128|aes128gcm|aes192|aes192gcm|aes256|aes256gcm)</regex> + <regex>(none|3des|aes128|aes128gcm|aes192|aes192gcm|aes256|aes256gcm|chacha20poly1305)</regex> </constraint> </properties> </leafNode> |