diff options
| author | Antonio Quartulli <antonio@mandelbit.com> | 2026-08-30 19:43:51 +0200 |
|---|---|---|
| committer | Antonio Quartulli <antonio@mandelbit.com> | 2026-09-13 21:06:12 +0200 |
| commit | 585c491b3ee5c02a0367bf2bd752fe4510200c6a (patch) | |
| tree | 04d82e00c077418c4ab9f14cac17cdf4d682c9b1 /src/migration-scripts/ipsec | |
| parent | b7e0a79b7c028cf604fb3becef3f74ae0f1f06cc (diff) | |
| download | vyos-1x-585c491b3ee5c02a0367bf2bd752fe4510200c6a.tar.gz vyos-1x-585c491b3ee5c02a0367bf2bd752fe4510200c6a.zip | |
openvpn: T8264: migrate away DCO the Kernel module cannot serve
"offload dco" was accepted next to tap, static keys, compression, CBC
ciphers and raw options OpenVPN refuses to offload, because 2.6 ignored the
module altogether. Those combinations now fail verify(), which would break
config load on upgrade, so drop the request instead.
The migration has to mirror verify_dco() exactly: anything it keeps that
verify() turns away leaves a router unable to commit its own configuration.
Diffstat (limited to 'src/migration-scripts/ipsec')
0 files changed, 0 insertions, 0 deletions