summaryrefslogtreecommitdiff
path: root/src/conf_mode/vpn_openconnect.py
diff options
context:
space:
mode:
authorDemon_H <b@doubi.fun>2022-09-16 15:23:52 +0800
committerGitHub <noreply@github.com>2022-09-16 09:23:52 +0200
commitecb2a4077f90e6e4699c8250bcf8f7d6221d9fc6 (patch)
tree5e01b8ab57a97fda7e2fcca425c2d9b59a94cac7 /src/conf_mode/vpn_openconnect.py
parent28573ffe4fd939a266006840f999c99babe89dce (diff)
downloadvyos-1x-ecb2a4077f90e6e4699c8250bcf8f7d6221d9fc6.tar.gz
vyos-1x-ecb2a4077f90e6e4699c8250bcf8f7d6221d9fc6.zip
ocserv: openconnect: T4656: add listen-address CLI option
This will set the listen-host ocserv configuration option.
Diffstat (limited to 'src/conf_mode/vpn_openconnect.py')
-rwxr-xr-xsrc/conf_mode/vpn_openconnect.py3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/conf_mode/vpn_openconnect.py b/src/conf_mode/vpn_openconnect.py
index 23b1baf4d..e32d83b9e 100755
--- a/src/conf_mode/vpn_openconnect.py
+++ b/src/conf_mode/vpn_openconnect.py
@@ -80,8 +80,9 @@ def verify(ocserv):
return None
# Check if listen-ports not binded other services
# It can be only listen by 'ocserv-main'
+ listen_address = ocserv["listen_address"] if "listen_address" in ocserv else '0.0.0.0'
for proto, port in ocserv.get('listen_ports').items():
- if check_port_availability('0.0.0.0', int(port), proto) is not True and \
+ if check_port_availability(listen_address, int(port), proto) is not True and \
not is_listen_port_bind_service(int(port), 'ocserv-main'):
raise ConfigError(f'"{proto}" port "{port}" is used by another service')
# Check authentication