diff options
| author | Antonio Quartulli <antonio@mandelbit.com> | 2026-08-31 10:04:46 +0200 |
|---|---|---|
| committer | Antonio Quartulli <antonio@mandelbit.com> | 2026-09-15 10:05:28 +0200 |
| commit | 06dee60d87c6aa498cb43a7b3f43dd00e9b74ac6 (patch) | |
| tree | 17b56dcbbc8d1d97b854e1c3c502328a6f3b2f65 /src/migration-scripts/webproxy | |
| parent | 2c92731f1cfef0cd812754daf7dd4add6d165942 (diff) | |
| download | vyos-1x-06dee60d87c6aa498cb43a7b3f43dd00e9b74ac6.tar.gz vyos-1x-06dee60d87c6aa498cb43a7b3f43dd00e9b74ac6.zip | |
openvpn: T8264: only disturb the interface when the daemon restarts
A CRL or client-config only commit leaves the daemon running, so dropping
the interface there takes it away from underneath a live tunnel.
The operating mode has to be compared too: a "mode" change alone leaves an
"ovpn" device of the right kind but the wrong mode, which OpenVPN adopts
just the same and which then rejects every peer. So does the device type,
which the Kernel pins at creation - a "device-type" change otherwise left
the daemon a tun device it cannot open as tap.
Diffstat (limited to 'src/migration-scripts/webproxy')
0 files changed, 0 insertions, 0 deletions