From mboxrd@z Thu Jan 1 00:00:00 1970 From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH] backup.pl: Fixes Bug#13137 - Existing n2n client connection created with openssl-1.1.1x fails to start with openssl-3.x Date: Mon, 05 Jun 2023 13:55:29 +0200 Message-ID: <20230605115529.5601-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============6740659219724548445==" List-Id: --===============6740659219724548445== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable - This code adds the "providers legacy default" line into OpenVPN N2N Client = config files when restoring them in case it is missing from a backup earlier than CU175. Only adds the line if it is not already present. - Tested out on my vm testbed system Fixes: Bug#13137 Tested-by: Adolf Belka Signed-off-by: Adolf Belka --- config/backup/backup.pl | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/config/backup/backup.pl b/config/backup/backup.pl index 96e794439..8d990c0f1 100644 --- a/config/backup/backup.pl +++ b/config/backup/backup.pl @@ -189,6 +189,21 @@ restore_backup() { =20 # Update OpenVPN CRL /etc/fcron.daily/openvpn-crl-updater +=09 + # Update OpenVPN N2N Client Configs + ## Add providers legacy default line to n2n client config files + # Check if ovpnconfig exists and is not empty + if [ -s /var/ipfire/ovpn/ovpnconfig ]; then + # Identify all n2n connections + for y in $(awk -F',' '/net/ { print $3 }' /var/ipfire/ovpn/ovpnconfi= g); do + # Add the legacy option to all N2N client conf files if it does = not already exist + if [ $(grep -c "Open VPN Client Config" /var/ipfire/ovpn/n2nconf/${y}/${y= }.conf) -eq 1 ] ; then + if [ $(grep -c "providers legacy default" /var/ipfire/ovpn/n2nconf/${y}/= ${y}.conf) -eq 0 ] ; then + echo "providers legacy default" >> /var/ipfire/ovpn/n2nconf/${y}/${y}.c= onf + fi + fi + done + fi =20 return 0 } --=20 2.40.1 --===============6740659219724548445==--