packages/net/openvpn/files/usr, branch master

openvpn: handler: refine netifd routing and config

2026-04-17T06:48:33Z

Introduce a new `ipv6` proto option for OpenVPN netifd integration and export it to the hotplug environment. IPv6 remains enabled by default, but can now be explicitly disabled per instance. Update the hotplug helper to apply IPv6 addresses and routes only when IPv6 is enabled, allowing cleaner IPv4-only tunnel deployments. Also improve route handling by: - ignoring invalid default gateway values (0.0.0.0 / ::) - replacing fixed `seq` loops with shell-safe while loops - keeping trusted peer host routes conditional on valid gateways Signed-off-by: Chen Minqiang

openvpn: handle netifd setup in hotplug script

2026-03-21T13:47:47Z

- Process 'up'/'down' events to manage interface status. - Add IPv4/IPv6 addresses and routes via netifd-proto. - Parse DNS/search domains from foreign options. - Convert netmasks and CIDR strings with new helpers. - Apply MTU settings from OpenVPN environment. Signed-off-by: Chen Minqiang

openvpn: change file/path types

2026-03-15T06:45:36Z

move file and path type values to FILE type params so they are better handled with quoting, in case paths contain spaces. Remove duplicate 'extra_certs'. Signed-off-by: Paul Donald

openvpn: shellcheck fixes

2026-03-15T06:45:36Z

correct spacing for [] if blocks and var quoting. use json_get_vars to get user-defined scripts so the setenv parameters are appended to the command line. handle ovpnproto as a PROTO_STRING so it is monitored and loaded. follow-up to 337a449c03c597b49f2e18a7fd241d8945288e80 and 647b67e18b6bf857e60e4e2e1874fd04d4138586 Signed-off-by: Paul Donald

openvpn: handling for 'push' and other array options

2026-03-15T06:45:36Z

remove duplicate 'push' entry from string types. push and other array values shall be "double quoted". we also must 'eval' so that the double-quoted array values don't get split on spaces. Also quote file paths in case they contain spaces. Signed-off-by: Paul Donald

openvpn: add hotplug handling back in

2026-03-11T13:22:41Z

This commit adds hotplug handling back in. Fixes: 2607b761 ("openvpn: introduce proto handler") Signed-off-by: Florian Eckert

openvpn: move usr/share/openvpn files into its own dir

2026-03-05T06:54:01Z

By moving the file to a subdirectory, it is easier to track where the file is located on the target without having to check the Makefile every time. Signed-off-by: Florian Eckert

openvpn: introduce proto handler

2026-02-22T09:54:13Z

openvpn needs a proto handler. Here it is. Removed all of the up/down scripts from the init handler and made those entirely optional (with some ucode examples). The config options have been updated to reflect v 2.6/2.7, with a 'd' flag to denote deprecated. Deprecated flags are gated behind an 'allow_deprecated' config flag, which must be on to use them. Some flags will cease to work in the next version. Users should not be using compression. Openvpn has enough security holes and pitfalls already without using compression. Updated the example configs (left in place as legacy documentation) and removed older cryptos which do not exist in ovpn any longer. A migration script is included -x. /etc/config/openvpn entries become interface entries in /etc/config/network with proto='openvpn'. The source config is retained. Signed-off-by: Paul Donald https://github.com/openwrt/packages/pull/28533

openvpn: import from base

2020-12-01T20:37:37Z

Signed-off-by: Rosen Penev