openvpn servers/clients [legacy] - change in opnsense 24.1

[tedly]

I believe it was the upgrade between 23.7 and 24.1 that openvpn servers/clients now says [legacy] next to them.

Does this mean they're going to go EOL/discontinue at some point?

I looked at the roadmap link here but it doesn't mention this change. Nor a mention of this in the future. Is there somewhere that details the future of openvpn client/server for opnsense? I don't want to be caught with my pants down if it suddenly stops working when I patch to a new release.

[legacy] is scary wording for someone who relies on it.

Thanks.

[franco]

Reality may be scary sometimes. I think all your worst nightmares are true, but not before a number of years will have passed.

And even then nowadays we have a pre-upgrade hook so we can abort the upgrade to the next major version if you have your legacy VPNs enabled. That should give enough protection for the worst case... well, actually avoid it.


Cheers,
Franco

[tedly]

Whew!

I wasn't aware of the pre-upgrade hook, that's fantastic!

I've tried to move to the newer certificate-based authentication but have yet to get it 100% working. Sounds like I have a big window to work that out.

Thanks for the reply.