netbird/plugins
0
0
Fork 0
mirror of https://github.com/netbirdio/plugins.git synced 2026-05-22 18:44:07 -07:00
Code Issues Packages Projects Releases Wiki Activity

os-openconnect: Added option to enable the use of insecure ciphers

Browse Source 
Committer: Robert Zaage <robert@zaage.it>
This commit is contained in:
Robert Zaage
2024-04-12 09:29:48 +02:00
committed by Ad Schellevis
parent cb2e7d3e6e
commit 971b4da0cf
3 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
security/openconnect/src/opnsense/mvc/app/controllers/OPNsense/Openconnect/forms/general.xml
+6
View File
@@ -59,6 +59,12 @@
<type>text</type>
<help>Enter a secret to use with one-time password generation.</help>
</field>
<field>
<id>general.allowinsecure</id>
<label>Allow Insecure Ciphers</label>
<type>checkbox</type>
<help>This option allows the use of insecure ciphers.</help>
</field>
<field>
<id>general.protocol</id>
<label>Protocol</label>
security/openconnect/src/opnsense/mvc/app/models/OPNsense/Openconnect/General.xml
+4
View File
@@ -58,6 +58,10 @@
<tokensecret type="TextField">
<Required>N</Required>
</tokensecret>
<allowinsecure type="BooleanField">
<Default>0</Default>
<Required>N</Required>
</allowinsecure>
<protocol type="OptionField">
<Default>anyconnect</Default>
<Required>Y</Required>
security/openconnect/src/opnsense/service/templates/OPNsense/Openconnect/openconnect.conf
+3
View File
@@ -25,6 +25,9 @@ token-mode={{ OPNsense.openconnect.general.tokenmode }}
token-secret={{ OPNsense.openconnect.general.tokensecret }}
{% endif %}
{% endif %}
{% if OPNsense.openconnect.general.allowinsecure|default('0') == '1' %}
allow-insecure-crypto
{% endif %}
{% if helpers.exists('OPNsense.openconnect.general.protocol') and OPNsense.openconnect.general.protocol != '' %}
protocol={{ OPNsense.openconnect.general.protocol }}
{% if OPNsense.openconnect.general.protocol == 'anyconnect' %}