summaryrefslogtreecommitdiff
path: root/src/conf_mode/interfaces_openvpn.py
diff options
context:
space:
mode:
authorNataliia Solomko <natalirs1985@gmail.com>2024-06-11 18:04:18 +0300
committerNataliia Solomko <natalirs1985@gmail.com>2024-06-11 18:04:18 +0300
commit0f669a22615a18c3cd8da2f65f3ed79686992320 (patch)
tree217d18dbb2a6dfa4c0b431d9196110c8a1daee99 /src/conf_mode/interfaces_openvpn.py
parent82607438d6df5291c581d802c7a2a98eabe084ff (diff)
downloadvyos-1x-0f669a22615a18c3cd8da2f65f3ed79686992320.tar.gz
vyos-1x-0f669a22615a18c3cd8da2f65f3ed79686992320.zip
openvpn: T5487: Remove eprecated option --cipher for server and client mode
Diffstat (limited to 'src/conf_mode/interfaces_openvpn.py')
-rwxr-xr-xsrc/conf_mode/interfaces_openvpn.py4
1 files changed, 4 insertions, 0 deletions
diff --git a/src/conf_mode/interfaces_openvpn.py b/src/conf_mode/interfaces_openvpn.py
index 627cc90ba..017010a61 100755
--- a/src/conf_mode/interfaces_openvpn.py
+++ b/src/conf_mode/interfaces_openvpn.py
@@ -515,6 +515,10 @@ def verify(openvpn):
print('Warning: using dh-params and EC keys simultaneously will ' \
'lead to DH ciphers being used instead of ECDH')
+ if dict_search('encryption.cipher', openvpn):
+ raise ConfigError('"encryption cipher" option is deprecated for TLS mode. '
+ 'Use "encryption ncp-ciphers" instead')
+
if dict_search('encryption.cipher', openvpn) == 'none':
print('Warning: "encryption none" was specified!')
print('No encryption will be performed and data is transmitted in ' \