From 8d99a2f6f81b225014d246dcf6c7bb03c641d4da Mon Sep 17 00:00:00 2001
From: Antonio Quartulli <antonio@mandelbit.com>
Date: Thu, 1 Oct 2026 15:41:53 +0200
Subject: openvpn: T9370: add chacha20poly1305 data cipher

Offer chacha20poly1305 in "encryption data-ciphers" and
"encryption data-ciphers-fallback", rendered as CHACHA20-POLY1305 and
allowed with DCO.
---
 interface-definitions/interfaces_openvpn.xml.in | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

(limited to 'interface-definitions/interfaces_openvpn.xml.in')

diff --git a/interface-definitions/interfaces_openvpn.xml.in b/interface-definitions/interfaces_openvpn.xml.in
index 26b004520..ff16a5610 100644
--- a/interface-definitions/interfaces_openvpn.xml.in
+++ b/interface-definitions/interfaces_openvpn.xml.in
@@ -91,7 +91,7 @@
                 <properties>
                   <help>Cipher negotiation list for use in server or client mode</help>
                   <completionHelp>
-                    <list>none 3des aes128 aes128gcm aes192 aes192gcm aes256 aes256gcm</list>
+                    <list>none 3des aes128 aes128gcm aes192 aes192gcm aes256 aes256gcm chacha20poly1305</list>
                   </completionHelp>
                   <valueHelp>
                     <format>none</format>
@@ -125,8 +125,12 @@
                     <format>aes256gcm</format>
                     <description>AES algorithm with 256-bit key GCM</description>
                   </valueHelp>
+                  <valueHelp>
+                    <format>chacha20poly1305</format>
+                    <description>ChaCha20 stream cipher with Poly1305 authenticator</description>
+                  </valueHelp>
                   <constraint>
-                    <regex>(none|3des|aes128|aes128gcm|aes192|aes192gcm|aes256|aes256gcm)</regex>
+                    <regex>(none|3des|aes128|aes128gcm|aes192|aes192gcm|aes256|aes256gcm|chacha20poly1305)</regex>
                   </constraint>
                   <multi/>
                 </properties>
@@ -135,7 +139,7 @@
                 <properties>
                   <help>Fallback cipher to use for site-to-site tunnels</help>
                   <completionHelp>
-                    <list>none 3des aes128 aes128gcm aes192 aes192gcm aes256 aes256gcm</list>
+                    <list>none 3des aes128 aes128gcm aes192 aes192gcm aes256 aes256gcm chacha20poly1305</list>
                   </completionHelp>
                   <valueHelp>
                     <format>none</format>
@@ -169,8 +173,12 @@
                     <format>aes256gcm</format>
                     <description>AES algorithm with 256-bit key GCM</description>
                   </valueHelp>
+                  <valueHelp>
+                    <format>chacha20poly1305</format>
+                    <description>ChaCha20 stream cipher with Poly1305 authenticator</description>
+                  </valueHelp>
                   <constraint>
-                    <regex>(none|3des|aes128|aes128gcm|aes192|aes192gcm|aes256|aes256gcm)</regex>
+                    <regex>(none|3des|aes128|aes128gcm|aes192|aes192gcm|aes256|aes256gcm|chacha20poly1305)</regex>
                   </constraint>
                 </properties>
               </leafNode>
-- 
cgit v1.2.3