For the parameters tls-cipher and ncp-ciphers more than one option can
be used in the OpenVPN configuration, separated by a colon, which should
be implemented as a list in order to configure it more clearly. By
adding the new OPENVPN_LIST option to the openvpn.options file with the
tls-cipher and ncp-cipher parameters, uci can now add this option as a
"list" and the init script will generate the appropriate OpenVPN
configuration from it.
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
PKG_NAME:=openvpn
PKG_VERSION:=2.4.6
-PKG_RELEASE:=1
+PKG_RELEASE:=2
PKG_SOURCE_URL:=\
https://build.openvpn.net/downloads/releases/ \
done
}
+append_list() {
+ local p; local v; local s="$1"; shift
+
+ list_cb_append() {
+ v="$1:${v}"
+ }
+
+ for p in $*; do
+ config_list_foreach "$s" "$p" list_cb_append
+ done
+ [ -n "$v" ] && append_param "$s" "$p" && echo " ${v%*:}" >> "/var/etc/openvpn-$s.conf"
+}
+
section_enabled() {
config_get_bool enable "$1" 'enable' 0
config_get_bool enabled "$1" 'enabled' 0
append_bools "$s" $OPENVPN_BOOLS
append_params "$s" $OPENVPN_PARAMS
+ append_list "$s" $OPENVPN_LIST
openvpn_add_instance "$s" "/var/etc" "openvpn-$s.conf"
}
mssfix
mtu_disc
mute
-ncp_ciphers
nice
ns_cert_type
ping
syslog
tcp_queue_limit
tls_auth
-tls_cipher
tls_crypt
tls_timeout
tls_verify
up_restart
username_as_common_name
'
+
+OPENVPN_LIST='
+tls_cipher
+ncp_ciphers
+'