diff options
| author | John Estabrook <jestabro@vyos.io> | 2026-03-12 13:30:35 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-03-12 13:30:35 -0500 |
| commit | e9f4d103284a456e10fb3776d26b9ff041f9352f (patch) | |
| tree | 185b82b6d02406a329f54a5c4f00722137a6c99a /src/conf_mode | |
| parent | c9cb691a2881a6bbd958d6ab35f9f24b08386e74 (diff) | |
| parent | 0122baeac73dbd26d1461aadd502d8fa2ba3b827 (diff) | |
| download | vyos-1x-e9f4d103284a456e10fb3776d26b9ff041f9352f.tar.gz vyos-1x-e9f4d103284a456e10fb3776d26b9ff041f9352f.zip | |
Merge pull request #5029 from c-po/openvpn-t8304
openvpn: T8304: fix migration for des, bf128 or bf256 cipher; use 3des instead
Diffstat (limited to 'src/conf_mode')
| -rwxr-xr-x | src/conf_mode/interfaces_openvpn.py | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/conf_mode/interfaces_openvpn.py b/src/conf_mode/interfaces_openvpn.py index bb9d06389..861f2e679 100755 --- a/src/conf_mode/interfaces_openvpn.py +++ b/src/conf_mode/interfaces_openvpn.py @@ -367,6 +367,11 @@ def verify(openvpn): if dict_search('encryption.data_ciphers', openvpn): raise ConfigError('Cipher negotiation can only be used in client or server mode') + if not dict_search('encryption.cipher', openvpn) and \ + not dict_search('encryption.data_ciphers_fallback', openvpn): + raise ConfigError('Must define "encryption cipher" or "encryption ' \ + 'data-ciphers-fallback" for site-to-site encryption!') + else: # checks for client-server or site-to-site bridged if 'local_address' in openvpn or 'remote_address' in openvpn: |