vyos-documentation.git/docs/configuration/interfaces/openvpn.md, branch secure-boot

openvpn: T9386: AEAD fallback ciphers can't be used with shared-secret-key

2026-10-09T13:41:29+00:00

Note that "encryption data-ciphers-fallback" only takes CBC ciphers together with "shared-secret-key".

Merge pull request #2324 from mandelbitdev/T9370-openvpn-chacha20poly1305

2026-10-07T18:05:14+00:00

openvpn: T9370: document the chacha20poly1305 data cipher

2026-10-01T13:45:07+00:00

Add chacha20poly1305 to "encryption data-ciphers" and "encryption data-ciphers-fallback".

openvpn: T9364: document the mtu option

2026-09-28T19:56:15+00:00

Document "interfaces openvpn mtu", its 1420 bytes default with DCO and its constraints.

feat: flip swap mechanism — MD as primary, RST as override (Phase 1)

2026-05-06T17:42:32+00:00

This is the first of three phases inverting the per-page swap mechanism so MD becomes the canonical primary and RST becomes the rare override. Phase 1 — file renames + conf.py exclude_patterns flip only: - Rename docs/**/md-.md to docs/**/.md (drop md- prefix) for all 254 stems previously listed in docs/_swap.txt - Rename docs/**/.rst to docs/**/rst-.rst (add rst- prefix) for the same 254 stems - Repurpose docs/_swap.txt as docs/_rst_overrides.txt; initially empty comment-only since no pages need the RST fallback right now - conf.py exclude_patterns flipped: rst-*.rst is now excluded by default instead of md-*.md - conf.py runtime-artifact references updated to _rst_override_state.json and _md_exclude.txt (Phase 2 will rewrite swap_sources.py to produce these names; for now no swap script runs because overrides list is empty) Phase 2 (next commit on this branch) will rewrite scripts/swap_sources.py with inverted rename direction, delete scripts/import_myst.py + tests, and update tests/test_swap_sources.py for the new semantics. Phase 3 will be the cleanup pass and ready-for-review flip. Generated by robots https://vyos.io