diff options
| author | Adam Rogers <arogers0311@gmail.com> | 2026-10-14 11:09:19 +1100 |
|---|---|---|
| committer | Adam Rogers <arogers0311@gmail.com> | 2026-10-14 11:11:45 +1100 |
| commit | fe50bd95889fbf4bd26fe0b177d3a9d9947a9024 (patch) | |
| tree | 16d329a51eb60e52b5767d88dc211fb37e7ad5b3 /src/migration-scripts/vrf | |
| parent | 79e78a499d06cb6cdfb3df22588099d3aa940505 (diff) | |
| download | vyos-1x-fe50bd95889fbf4bd26fe0b177d3a9d9947a9024.tar.gz vyos-1x-fe50bd95889fbf4bd26fe0b177d3a9d9947a9024.zip | |
vpn: T9462: fix PPTP not applying configured MPPE encryption policy
The PPTP config template read the MPPE setting from the wrong place
in the config dict, so the [pptp] section of the generated accel-ppp
config always got an empty value. The PPTP module reads MPPE from
that section alone, so any configured "require", "prefer" or "deny"
was silently ignored and accel-ppp fell back to its permissive
default - an admin setting "mppe require" got no enforcement, with
no error at commit or runtime.
Read the setting from the same place the L2TP template does, and add
a PPTP smoketest asserting the value in both the [pptp] and [ppp]
sections.
Diffstat (limited to 'src/migration-scripts/vrf')
0 files changed, 0 insertions, 0 deletions
