security/tinc - use configd caching to ease priv separation.

This commit is contained in:
Ad Schellevis
2025-07-20 17:12:04 +02:00
parent 3b95aa598f
commit a2fbbbf665
2 changed files with 1 additions and 2 deletions
@@ -73,7 +73,6 @@
<cipher type="JsonKeyValueStoreField">
<Required>Y</Required>
<ConfigdPopulateAct>tinc list ciphers</ConfigdPopulateAct>
<SourceFile>/tmp/tinc_current_cipher_options.index</SourceFile>
<Default>aes-256-cbc</Default>
</cipher>
<mode type="OptionField">
@@ -164,7 +163,6 @@
<cipher type="JsonKeyValueStoreField">
<Required>Y</Required>
<ConfigdPopulateAct>tinc list ciphers</ConfigdPopulateAct>
<SourceFile>/tmp/tinc_current_cipher_options.index</SourceFile>
<Default>aes-256-cbc</Default>
</cipher>
<connectTo type="BooleanField">
@@ -8,6 +8,7 @@ message:generate new keypair
command:/usr/local/opnsense/scripts/OPNsense/Tinc/list_ciphers.py
parameters:
type:script_output
cache_ttl:360
message:list ciphers
[stop]