Page MenuHomeVyOS Platform
Create Task
Maniphest T3461

OpenConnect Server redundancy check
Closed, ResolvedPublicBUG
Actions

Description

VyOS should not check the existence of` ca-cert-file` in config when using not self-signed certificates like certificates provided LetsEncrypt.

set vpn openconnect authentication local-users username user1 password 'user1'
set vpn openconnect authentication mode 'local'
set vpn openconnect network-settings client-ip-settings subnet '100.64.0.0/24'
set vpn openconnect network-settings name-server '1.1.1.1'
set vpn openconnect ssl cert-file '/etc/letsencrypt/live/domain.example.com/fullchain.pem'
set vpn openconnect ssl key-file '/etc/letsencrypt/live/domain.example.com/privkey.pem'
commit
[ vpn openconnect ]
openconnect ssl ca-cert-file required

[[vpn openconnect]] failed
Commit failed

https://github.com/vyos/vyos-1x/blob/current/src/conf_mode/vpn_openconnect.py#L76
Propose to exlude ca_cert_file from this list

Details

Difficulty level
Easy (less than an hour)
Version
1.4-rolling-202104061641
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Event Timeline

Unknown Object (User) created this task.Apr 7 2021, 7:55 PM
pasik added a subscriber: pasik.Apr 8 2021, 1:22 PM
Viacheslav added a subscriber: Viacheslav.Apr 30 2021, 3:35 PM

PR https://github.com/vyos/vyos-1x/pull/827

Unknown Object (User) changed the task status from Open to In progress.May 18 2021, 7:40 PM
Unknown Object (User) assigned this task to Viacheslav.
Unknown Object (User) changed the task status from In progress to Backport candidate.May 18 2021, 7:50 PM

Tested on 1.4-rolling-202105170417 works correct. Propose to backport this to 1.3

Viacheslav closed this task as Resolved.Jun 7 2021, 11:10 PM
c-po moved this task from Need Triage to Finished on the VyOS 1.4 Sagitta board.Jun 13 2021, 11:24 AM
SrividyaA set Issue type to Bug (incorrect behavior).Aug 31 2021, 5:27 PM
syncer moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus board.Nov 6 2021, 11:43 AM
syncer edited projects, added VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus.Aug 29 2022, 12:16 PM
syncer moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0) board.