From mboxrd@z Thu Jan  1 00:00:00 1970
From: ummeegge <ummeegge@ipfire.org>
To: development@lists.ipfire.org
Subject:
 Re: [PATCH 4/4] update.sh: Add and change new directives for OpenVPN 2.6.x .
Date: Thu, 21 Mar 2024 13:29:56 +0100
Message-ID: <0809af3df7b855856b99a09f5d63d9a36a75992a.camel@ipfire.org>
In-Reply-To: <20240321122511.3287692-4-erik.kapfer@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1681447684782015126=="
List-Id: <development.lists.ipfire.org>

--===============1681447684782015126==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

Hi all,
this is a minimal solution of an update to OpenVPN 2.6.x IMO . This
patch series should be a help for mainly Adolf (might be great if you
go for a checkout) but please give it all a try and test it if it
reaches the goal.

Best,

Erik

Am Donnerstag, dem 21.03.2024 um 13:24 +0100 schrieb Erik Kapfer:
> This process may should be continued with some of the following
> updates to make sure the directives are
> included even the update with this changes has over jumped ?!
> otherwise, the "Advanced server options" page
> needs to be saved via WUI to bring OpenVPN to life.
> 
> Signed-off-by: Erik Kapfer <erik.kapfer(a)ipfire.org>
> ---
>  config/rootfiles/core/185/update.sh | 11 +++++++++++
>  1 file changed, 11 insertions(+)
> 
> diff --git a/config/rootfiles/core/185/update.sh
> b/config/rootfiles/core/185/update.sh
> index 2c95c4102..247661481 100644
> --- a/config/rootfiles/core/185/update.sh
> +++ b/config/rootfiles/core/185/update.sh
> @@ -35,6 +35,17 @@ done
>  /etc/init.d/ntp stop
>  /etc/init.d/squid stop
>  
> +# OpenVPN add and change new 2.6.x directives for NCP.
> +if pgrep openvpn > /dev/null; then
> +	/usr/local/bin/openvpnctrl -k > /dev/null
> +	sed -i 's/^ncp-disable/data-ciphers ChaCha20-Poly1305:AES-
> 256-GCM/' /var/ipfire/ovpn/server.conf
> +	sed -i 's/^cipher/data-ciphers-fallback/'
> /var/ipfire/ovpn/server.conf
> +	/usr/local/bin/openvpnctrl -s > /dev/null
> +else
> +	sed -i 's/^ncp-disable/data-ciphers ChaCha20-Poly1305:AES-
> 256-GCM/' /var/ipfire/ovpn/server.conf
> +	sed -i 's/^cipher/data-ciphers-fallback/'
> /var/ipfire/ovpn/server.conf
> +fi
> +
>  # Extract files
>  extract_files
>  


--===============1681447684782015126==--