From 01223a0a3a39ddf8e29f11ecb1c87c65c606757e Mon Sep 17 00:00:00 2001 From: Jan-Frederik Rieckers Date: Sun, 19 Jul 2026 10:41:03 +0200 Subject: [PATCH] radsecproxy: add more config options for UCI This adds more config options for use in UCI, esp. new configuration options that were introduced in newer radsecproxy versions Signed-off-by: Jan-Frederik Rieckers --- net/radsecproxy/files/radsecproxy.init | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/net/radsecproxy/files/radsecproxy.init b/net/radsecproxy/files/radsecproxy.init index f070f2aadd5e4a..c2e41732705de5 100644 --- a/net/radsecproxy/files/radsecproxy.init +++ b/net/radsecproxy/files/radsecproxy.init @@ -87,9 +87,10 @@ client_block() { append_params "$cfg" \ Include host type secret tls matchCertificateAttribute duplicateInterval \ AddTTL fticksVISCOUNTRY fticksVISINST rewrite rewriteIn rewriteOut \ - rewriteAttribute + rewriteAttribute serverName PSKkey PSKidentity append_bools "$cfg" \ - IPv4Only IPv6Only certificateNameCheck + IPv4Only IPv6Only certificateNameCheck requireMessageAuthenticator \ + requireMessageAuthenticatorProxy echo "}" >> "$CONFFILE" } @@ -101,9 +102,11 @@ server_block() { append_params "$cfg" \ Include host port type secret tls matchCertificateAttribute \ AddTTL rewrite rewriteIn rewriteOut retryCount dynamicLookupCommand \ - retryInterval + retryInterval serverName SNIservername PSKkey PSKidentity DTLSForceMTU \ + source append_bools "$cfg" \ - IPv4Only IPv6Only certificateNameCheck statusServer LoopPrevention + IPv4Only IPv6Only certificateNameCheck statusServer LoopPrevention SNI \ + requireMessageAuthenticator blockingStartup echo "}" >> "$CONFFILE" }