diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-10-26 22:11:09 +0100 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2026-10-26 22:11:09 +0100 |
| commit | 468c794bfb75cb577d8283bc7dae6bfaededc974 (patch) | |
| tree | 4f32ccf9ea01bd6dc2db019fb3171f384cb6576a /scripts | |
| parent | 089c767056910d1b89f72a97d96b1455d25e5bcd (diff) | |
| download | vyos-1x-468c794bfb75cb577d8283bc7dae6bfaededc974.tar.gz vyos-1x-468c794bfb75cb577d8283bc7dae6bfaededc974.zip | |
pki: T9149: fix broken OpenVPN shared-secret generated by op-mode
Since T9008, "generate pki openvpn shared-secret install" kept the comment
lines of the openvpn --genkey output as empty lines. The BEGIN marker of the
key was therefore stored as part of the key data, and the key file written
on commit carried it twice. OpenVPN refused to start every tunnel using it.
Comment-only lines are dropped again, as the previous grep -o pipeline did,
so only the hex key material is installed. Printed and file output lose the
leading blank lines as well.
The OpenVPN smoketest now installs a key through the op-mode command and
brings up a site-to-site tunnel with it, instead of only using a hardcoded
key.
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions
