openvpn: introduce proto handler
authorPaul Donald <redacted>
Mon, 16 Feb 2026 19:01:50 +0000 (20:01 +0100)
committerHannu Nyman <redacted>
Sun, 22 Feb 2026 09:54:13 +0000 (11:54 +0200)
commit2607b761549a4793eff91dcb60a287c05f631846
tree933cc5b08d1d69078ecb7b2f9facc4b4413aca8c
parent0814aba3b043fee9df5f43edcb965053acbfb631
openvpn: introduce proto handler

openvpn needs a proto handler. Here it is.

Removed all of the up/down scripts from the init handler
and made those entirely optional (with some ucode examples).

The config options have been updated to reflect v 2.6/2.7,
with a 'd' flag to denote deprecated. Deprecated flags are
gated behind an 'allow_deprecated' config flag, which must
be on to use them. Some flags will cease to work in the next
version.

Users should not be using compression. Openvpn has enough
security holes and pitfalls already without using
compression.

Updated the example configs (left in place as legacy
documentation) and removed older cryptos which do not exist
in ovpn any longer.

A migration script is included -x. /etc/config/openvpn
entries become interface entries in /etc/config/network
with proto='openvpn'. The source config is retained.

Signed-off-by: Paul Donald <redacted>
https://github.com/openwrt/packages/pull/28533
21 files changed:
net/openvpn/Makefile
net/openvpn/files/auth-user-pass-verify.uc [new file with mode: 0644]
net/openvpn/files/client-connect.uc [new file with mode: 0644]
net/openvpn/files/client-crresponse.uc [new file with mode: 0644]
net/openvpn/files/client-disconnect.uc [new file with mode: 0644]
net/openvpn/files/down.uc [new file with mode: 0644]
net/openvpn/files/etc/hotplug.d/openvpn/01-user [deleted file]
net/openvpn/files/etc/openvpn.user [deleted file]
net/openvpn/files/etc/uci-defaults/60_openvpn_migrate.sh [new file with mode: 0644]
net/openvpn/files/ipchange.uc [new file with mode: 0644]
net/openvpn/files/lib/functions/openvpn.sh [deleted file]
net/openvpn/files/lib/netifd/proto/openvpn.sh [new file with mode: 0755]
net/openvpn/files/openvpn.config
net/openvpn/files/openvpn.init [deleted file]
net/openvpn/files/openvpn.options
net/openvpn/files/openvpn.sysupgrade [moved from net/openvpn/files/openvpn.upgrade with 100% similarity]
net/openvpn/files/route-pre-down.uc [new file with mode: 0644]
net/openvpn/files/route-up.uc [new file with mode: 0644]
net/openvpn/files/tls-verify.uc [new file with mode: 0644]
net/openvpn/files/up.uc [new file with mode: 0644]
net/openvpn/files/usr/libexec/openvpn-hotplug [deleted file]
git clone https://git.99rst.org/PROJECT