VPN: OpenVPN: Servers [legacy] - disable DCO, only supported for new …

…instances (and prevents server startup for tun devices).
opnsense · Jul 25, 2024 · 89135cd · 89135cd
1 parent c95f42b
commit 89135cd
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/etc/inc/plugins.inc.d/openvpn.inc b/src/etc/inc/plugins.inc.d/openvpn.inc
@@ -530,6 +530,10 @@ function openvpn_reconfigure($mode, $settings, $device_only = false)
     }
 
     $conf .= "dev-type {$settings['dev_mode']}\n";
+    if ($settings['dev_mode'] == 'tun') {
+        /* legacy does not support DCO */
+        $conf .= "disable-dco\n";
+    }
     $conf .= "dev-node /dev/{$devnode}\n";
     $conf .= "writepid /var/run/openvpn_{$mode_id}.pid\n";
     $conf .= "script-security 3\n";