diff options
| author | Antonio Quartulli <antonio@mandelbit.com> | 2026-10-01 15:41:53 +0200 |
|---|---|---|
| committer | Antonio Quartulli <antonio@mandelbit.com> | 2026-10-01 15:41:53 +0200 |
| commit | 8d99a2f6f81b225014d246dcf6c7bb03c641d4da (patch) | |
| tree | 9b8e29bddcc67288dedf5e9b71305a1a01032613 /src/tests | |
| parent | dfe2203a7fe7fa24de3fa2d8e82fa85dbb0eba52 (diff) | |
| download | vyos-1x-8d99a2f6f81b225014d246dcf6c7bb03c641d4da.tar.gz vyos-1x-8d99a2f6f81b225014d246dcf6c7bb03c641d4da.zip | |
openvpn: T9370: add chacha20poly1305 data cipher
Offer chacha20poly1305 in "encryption data-ciphers" and
"encryption data-ciphers-fallback", rendered as CHACHA20-POLY1305 and
allowed with DCO.
Diffstat (limited to 'src/tests')
| -rw-r--r-- | src/tests/test_template.py | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/src/tests/test_template.py b/src/tests/test_template.py index 7ac396b68..65266584e 100644 --- a/src/tests/test_template.py +++ b/src/tests/test_template.py @@ -208,3 +208,15 @@ class TestVyOSTemplate(TestCase): internal_ports['certbot_haproxy']) self.assertEqual(vyos.template.nft_accept_invalid('arp'), 'ct state invalid ether type arp counter accept') + + def test_openvpn_ciphers(self): + # CLI values map onto the names OpenVPN expects + self.assertEqual( + vyos.template.get_openvpn_data_ciphers(['chacha20poly1305', 'aes256gcm']), + 'CHACHA20-POLY1305:AES-256-GCM', + ) + self.assertEqual( + vyos.template.get_openvpn_data_ciphers_fallback('chacha20poly1305'), + 'CHACHA20-POLY1305', + ) + self.assertEqual(vyos.template.get_openvpn_cipher('aes128'), 'AES-128-CBC') |