From 61487b13da8dc270907633a3140bd0cc2aa0926a Mon Sep 17 00:00:00 2001 From: Oleksandr Kuchmystyi Date: Wed, 31 Dec 2025 10:50:21 +0300 Subject: openvpn: T7633: Add support for 'data-ciphers-fallback' in site-to-site tunnels MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Introduced new CLI option 'data-ciphers-fallback' for OpenVPN interfaces (used as fallback cipher in site-to-site mode) - Adjust migration 1‑to‑2 to skip migrating 'cipher' for site‑to‑site interfaces --- data/templates/openvpn/server.conf.j2 | 3 +++ 1 file changed, 3 insertions(+) (limited to 'data') diff --git a/data/templates/openvpn/server.conf.j2 b/data/templates/openvpn/server.conf.j2 index be811f45e..19c8e226c 100644 --- a/data/templates/openvpn/server.conf.j2 +++ b/data/templates/openvpn/server.conf.j2 @@ -217,6 +217,9 @@ cipher {{ encryption.cipher | openvpn_cipher }} {% if encryption.data_ciphers is vyos_defined %} data-ciphers {{ encryption.data_ciphers | openvpn_data_ciphers }} {% endif %} +{% if encryption.data_ciphers_fallback is vyos_defined %} +data-ciphers-fallback {{ encryption.data_ciphers_fallback | openvpn_data_ciphers_fallback }} +{% endif %} {% endif %} providers default -- cgit v1.2.3