luci-app-openvpn: DH=none feature request #22031

[timur-davletshin]

Add support for dh=none in luci-app-openvpn. ECC is no longer an experimental feature. At this moment user can't specify it in GUI, only by direct editing of /etc/config/openvpn.

[systemcrash]

PR is welcome

[egc112]

I made this clumsy workaround a long time ago but have insufficient lua knowledge:

diff --git a/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua b/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua
index 03ce38e9d2..e0a046888b 100644
--- a/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua
+++ b/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua
@@ -658,8 +658,12 @@ local knownParams = {
 			translate("Certificate authority") },
 		{ FileUpload,
 			"dh",
-			"/etc/easy-rsa/keys/dh1024.pem",
-			translate("Diffie-Hellman parameters") },
+			"none",
+			translate("Diffie-Hellman parameters, use none for ecdh curves") },
+		{ ListValue,
+			"ecdh_curve",
+			{ "secp224r1", "secp256k1", "secp384r1", "secp521r1", "prime192v1", "prime192v2", "prime192v3", "prime239v1", "prime239v2", "prime239v3", "prime256v1" },
+			translate("Set Diffie Helmann (dh) elliptical curve (optional, when dh none is chosen)") },
 		{ FileUpload,
 			"cert",
 			"/etc/easy-rsa/keys/some-client.crt",
 
diff --git a/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-basic.lua b/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-basic.lua
index 9265cd61cc..b9fcaf4969 100644
--- a/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-basic.lua
+++ b/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-basic.lua
@@ -77,8 +77,8 @@ local basicParams = {
 		translate("Certificate authority") },
 	{ FileUpload,
 		"dh",
-		"/etc/easy-rsa/keys/dh1024.pem",
-		translate("Diffie-Hellman parameters") },
+		"none",
+		translate("Diffie-Hellman parameters, use none for ecdh curves") },
 	{ FileUpload,
 		"cert",
 		"/etc/easy-rsa/keys/some-client.crt",

[Neustradamus]

Any progress on it?

For example, you can see here:

• https://www.digitalocean.com/community/tutorials/how-to-set-up-and-configure-an-openvpn-server-on-ubuntu-22-04

[stokito]

The entire OpenVPN app needs to be rewritten to JS but there is currently no one to do this https://github.com/openwrt/luci/issues/7310#issuecomment-2433599258

So if you guys do have a time then you are welcome to contribute.