From 3a723baa24946ff3c002e95f77882dcec49b2c8e Mon Sep 17 00:00:00 2001
From: Jared Hendrickson <jaredhendrickson13@gmail.com>
Date: Fri, 2 Jan 2026 18:14:53 -0700
Subject: [PATCH] fix(OpenVPNClientExportTraits): ensure legacy is always an
 array #808

---
 .../local/pkg/RESTAPI/ModelTraits/OpenVPNClientExportTraits.inc  | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pfSense-pkg-RESTAPI/files/usr/local/pkg/RESTAPI/ModelTraits/OpenVPNClientExportTraits.inc b/pfSense-pkg-RESTAPI/files/usr/local/pkg/RESTAPI/ModelTraits/OpenVPNClientExportTraits.inc
index db9f20a0..df787fe2 100644
--- a/pfSense-pkg-RESTAPI/files/usr/local/pkg/RESTAPI/ModelTraits/OpenVPNClientExportTraits.inc
+++ b/pfSense-pkg-RESTAPI/files/usr/local/pkg/RESTAPI/ModelTraits/OpenVPNClientExportTraits.inc
@@ -193,6 +193,7 @@ trait OpenVPNClientExportTraits {
     public function validate_legacy(bool $legacy): bool {
         if ($legacy) {
             global $legacy_incompatible_ciphers;
+            $legacy_incompatible_ciphers = $legacy_incompatible_ciphers ?? [];
             $settings = get_openvpnserver_by_id($this->server->value);
             if (in_array($settings['data_ciphers_fallback'], $legacy_incompatible_ciphers)) {
                 throw new ConflictError(