diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-10-07 20:04:21 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-10-07 20:04:21 +0200 |
| commit | 58ccdee2d255f4e952322467902f7d69b4f828fa (patch) | |
| tree | 3b0a15a5241c413bad09e702ddc705bc9bf008f9 /src/conf_mode/interfaces_openvpn.py | |
| parent | fff4e828d2a7ec1549ca20db30906ff47396e374 (diff) | |
| parent | 8d99a2f6f81b225014d246dcf6c7bb03c641d4da (diff) | |
| download | vyos-1x-58ccdee2d255f4e952322467902f7d69b4f828fa.tar.gz vyos-1x-58ccdee2d255f4e952322467902f7d69b4f828fa.zip | |
Merge pull request #5523 from mandelbitdev/T9370-openvpn-chacha20poly1305
openvpn: T9370: add chacha20poly1305 data cipher
Diffstat (limited to 'src/conf_mode/interfaces_openvpn.py')
| -rwxr-xr-x | src/conf_mode/interfaces_openvpn.py | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/src/conf_mode/interfaces_openvpn.py b/src/conf_mode/interfaces_openvpn.py index 109e0f401..911b0f467 100755 --- a/src/conf_mode/interfaces_openvpn.py +++ b/src/conf_mode/interfaces_openvpn.py @@ -80,9 +80,8 @@ group = 'openvpn' cfg_dir = '/run/openvpn' cfg_file = '/run/openvpn/{ifname}.conf' # Ciphers implemented by the in-tree "ovpn" Kernel module. Any other cipher -# must be handled in userspace and thus rules out DCO. The module also does -# ChaCha20-Poly1305, which the CLI does not offer. -dco_ciphers = ['aes128gcm', 'aes192gcm', 'aes256gcm'] +# must be handled in userspace and thus rules out DCO. +dco_ciphers = ['aes128gcm', 'aes192gcm', 'aes256gcm', 'chacha20poly1305'] # Raw options that make OpenVPN fall back to the userspace data path, taken # from dco_check_option() and dco_check_option_ce() dco_incompatible_options = [ |