From e08583f46b1d40feefa386bb9d8f8ab759594fd0 Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Sun, 20 Jul 2025 17:14:15 +0200
Subject: [PATCH] security/stunnel - use configd caching to ease priv
 separation.

---
 .../src/opnsense/mvc/app/models/OPNsense/Stunnel/Stunnel.xml    | 2 --
 .../src/opnsense/service/conf/actions.d/actions_stunnel.conf    | 1 +
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/security/stunnel/src/opnsense/mvc/app/models/OPNsense/Stunnel/Stunnel.xml b/security/stunnel/src/opnsense/mvc/app/models/OPNsense/Stunnel/Stunnel.xml
index c5197419e..0b851ec5d 100644
--- a/security/stunnel/src/opnsense/mvc/app/models/OPNsense/Stunnel/Stunnel.xml
+++ b/security/stunnel/src/opnsense/mvc/app/models/OPNsense/Stunnel/Stunnel.xml
@@ -74,8 +74,6 @@
                     <Required>Y</Required>
                     <Multiple>Y</Multiple>
                     <ConfigdPopulateAct>stunnel ssl ciphers</ConfigdPopulateAct>
-                    <SourceFile>/tmp/stunnel_ciphers_list.json</SourceFile>
-                    <ConfigdPopulateTTL>360</ConfigdPopulateTTL>
                     <ValidationMessage>Please specify valid tls ciphers.</ValidationMessage>
                 </ciphers>
                 <servercert type="CertificateField">
diff --git a/security/stunnel/src/opnsense/service/conf/actions.d/actions_stunnel.conf b/security/stunnel/src/opnsense/service/conf/actions.d/actions_stunnel.conf
index e869be423..142f0d18a 100644
--- a/security/stunnel/src/opnsense/service/conf/actions.d/actions_stunnel.conf
+++ b/security/stunnel/src/opnsense/service/conf/actions.d/actions_stunnel.conf
@@ -2,6 +2,7 @@
 command:/usr/local/opnsense/scripts/system/ssl_ciphers.py  --format=key_value
 parameters:
 type:script_output
+cache_ttl:360
 message:List SSL ciphers
 
 [start]