Added 'cipher' option vor client config.

voxpupuli · Jun 12, 2014 · ff40c31 · ff40c31
1 parent 5a96f8e
commit ff40c31
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/manifests/client.pp b/manifests/client.pp
@@ -55,6 +55,10 @@
 #   String.  The IP or hostname of the openvpn server service
 #   Default: FQDN
 #
+# [*cipher*]
+#   String,  Cipher to use for packet encryption
+#   Default: None
+#
 # [*resolv_retry*]
 #   Integer/String. How many seconds should the openvpn client try to resolve
 #     the server's hostname
@@ -129,6 +133,7 @@
   $auth_retry = 'none',
   $verb = '3',
   $pam = false,
+  $cipher = '',
   $authuserpass = false,
 ) {
 

diff --git a/templates/client.erb b/templates/client.erb
@@ -19,6 +19,9 @@ persist-key
 <% if scope.lookupvar('persist_tun') -%>
 persist-tun
 <% end -%>
+<% if scope.lookupvar('cipher')  -%>
+cipher <%= scope.lookupvar('cipher') %>
+<% end %>
 <% if scope.lookupvar('mute_replay_warnings') -%>
 mute-replay-warnings
 <% end -%>