packages/net/openvpn/files/openvpn.init, branch master

openvpn: introduce proto handler

2026-02-22T09:54:13Z

openvpn needs a proto handler. Here it is. Removed all of the up/down scripts from the init handler and made those entirely optional (with some ucode examples). The config options have been updated to reflect v 2.6/2.7, with a 'd' flag to denote deprecated. Deprecated flags are gated behind an 'allow_deprecated' config flag, which must be on to use them. Some flags will cease to work in the next version. Users should not be using compression. Openvpn has enough security holes and pitfalls already without using compression. Updated the example configs (left in place as legacy documentation) and removed older cryptos which do not exist in ovpn any longer. A migration script is included -x. /etc/config/openvpn entries become interface entries in /etc/config/network with proto='openvpn'. The source config is retained. Signed-off-by: Paul Donald https://github.com/openwrt/packages/pull/28533

openvpn: fix startup with script-security lower than 2

2024-07-03T19:55:24Z

External scripts may only be specified with script-security 2 or higher, otherwise OpenVPN fails at tunnel startup with an error. This changes the previously hardcoded hotplug scripts to only be added if script-security is 2 or higher is used. Signed-off-by: Clemens Hopfer

openvpn: fix start_path_instance function

2024-02-20T20:35:16Z

Check the conffile existance (with .conf extension), before calling the function 'start_path_instance'. This fixes errors with non-existing and wrong spelling instances. Signed-off-by: Dirk Brenken - Update commit description Signed-off-by: Florian Eckert

openvpn: add missing script-security

2024-01-30T00:06:13Z

Maintainer: @mkrkn @neheb Compile tested: armv7, cortexA15, OpenWRT 23.05 Run tested: Linksys EA8500 Compile tested: armv8, cortexA53, OpenWRT main Run tested: Dynalink DL-WRX36 Description: Script-security is always 2 and cannot be changed from the openvpn config file due to a missing rule in openvpn.init. This is discussed in issue #23014 This patch adds the missing rule in openvpn.init to parse script-security from the openvpn config file. Signed-off-by: Erik Conijn

Openvpn: add missing script event options

2024-01-02T23:27:52Z

Maintainer: @mkrkn @neheb Compile tested: aarch64, cortex-a53, OpenWRT Master Run tested: Dynalink DL-WRX36 Description: [A previous commit](https://github.com/openwrt/packages/commit/f8a8b71e26b9bdbf86fbb7d4d1482637af7f3ba4) has added more script event options. However it looked like that commit was not complete as it stops the use of the script events route-up, route-pre-down, and ipchange when those are placed in the openvpn config file. This PR fixes a regression that makes it problematic to specify certain event options in the OpenVPN configuration file. Discussion in [this thread](https://forum.openwrt.org/t/openvpn-custom-route-up-script-in-23-05-rc2/167105/13) and [here](https://forum.openwrt.org/t/openvpn-route-up-and-route-pre-down-broken-in-23-05/176568) Please have a look and consider implementing or make it possible to use all script event options in the openvpn config file in another way. Pull request has been discussed and improved with the help of @AuthorReflex, see: https://github.com/openwrt/packages/pull/21732 Signed-off-by: Erik Conijn

openvpn: Added option to not start the native OpenVPN configurations on boot

2023-12-20T14:01:46Z

OpenVPN configurations that have a uci entry, the enable/enabled option can be used to control whether the OpenVPN connection should be started at system startup or not. OpenVPN configurations that are located under '/etc/openvpn/' are always started at system boot. To ensure that these connections can also be started later, they must 'not' be started automatically during system boot. This can be prevented with the following entry in the OpenVPN configuration. config globals 'globals' option autostart '0' These OpenVPN configurations can then be started later with the command. '/etc/init.d/openvpn start ' Signed-off-by: Florian Eckert

openvpn: add possibility to start openvpn_path_instance on request

2023-12-20T14:01:39Z

This commit adds the possibility that an OpenVPN instance located under '/etc/openvpn' can also be started with the command. '/etc/init.d/openvpn start ' Signed-off-by: Florian Eckert

openvpn: add start_path_instance function

2023-12-20T14:01:29Z

This commit moves the part for starting an instance to a sub function. Signed-off-by: Florian Eckert

openvpn: move path instances call to sub function

2023-12-20T14:01:24Z

Move the start of the OpenVPN configurations in '/etc/openvpn' in a function. Signed-off-by: Florian Eckert

openvpn: rename start_instance to start_uci_instance

2023-12-20T14:01:14Z

Preparation commit to make it clear that this is a uci configuration. Signed-off-by: Florian Eckert