]> git.ipfire.org Git - ipfire-2.x.git/commitdiff
ovpnmain.cgi: remove persist-key as this is now default
authorAdolf Belka <adolf.belka@ipfire.org>
Sat, 11 Apr 2026 11:45:31 +0000 (13:45 +0200)
committerMichael Tremer <michael.tremer@ipfire.org>
Mon, 13 Apr 2026 09:12:20 +0000 (09:12 +0000)
- The persist-key option has been enabled by default.
    All the keys will be kept in memory across restart.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
html/cgi-bin/ovpnmain.cgi

index def043d9b0513b991c7504af17c74c7ec9b41654..3fb356acd2c1d6291830bee0c3695d7717bc8a02 100644 (file)
@@ -400,7 +400,6 @@ sub writeserverconf {
     print CONF "reneg-sec 86400\n";
     print CONF "user nobody\n";
     print CONF "group nobody\n";
-    print CONF "persist-key\n";
     print CONF "persist-tun\n";
        print CONF "verb 3\n";
 
@@ -1247,7 +1246,6 @@ unless(-d "${General::swroot}/ovpn/n2nconf/$cgiparams{'NAME'}"){mkdir "${General
   print SERVERCONF "user nobody\n";
   print SERVERCONF "group nobody\n";
   print SERVERCONF "persist-tun\n";
-  print SERVERCONF "persist-key\n";
   print SERVERCONF "script-security 2\n";
   print SERVERCONF "# IP/DNS for remote Server Gateway\n";
 
@@ -1346,7 +1344,6 @@ unless(-d "${General::swroot}/ovpn/n2nconf/$cgiparams{'NAME'}"){mkdir "${General
   print CLIENTCONF "user nobody\n";
   print CLIENTCONF "group nobody\n";
   print CLIENTCONF "persist-tun\n";
-  print CLIENTCONF "persist-key\n";
   print CLIENTCONF "script-security 2\n";
   print CLIENTCONF "# IP/DNS for remote Server Gateway\n";
   print CLIENTCONF "remote $cgiparams{'REMOTE'}\n";
@@ -2331,7 +2328,6 @@ END
                print CLIENTCONF "user nobody\n";
                print CLIENTCONF "group nobody\n";
                print CLIENTCONF "persist-tun\n";
-               print CLIENTCONF "persist-key\n";
                print CLIENTCONF "script-security 2\n";
                print CLIENTCONF "# IP/DNS for remote Server Gateway\n";
                print CLIENTCONF "remote $vpnsettings{'VPN_IP'}\n";