FortiOS changes private key encryption every time config is downloaded

[anubisg1]

This is very similar to https://github.com/ytti/oxidized/issues/931 and https://github.com/ytti/oxidized/issues/1199

the following lines are not excluded from configurations and they change every time the config is pulled

set password ENC
set passphrase ENC
set key ENC
set secondary-key ENC
set server-key ENC

i'm running 0.30.1 (probalby newer, i have latest docker image)

[systeembeheerder]

config:

...
models:
  fortios:
    vars:
      remove_secret: true
...

works for me

[github-actions[bot]]

This issue is stale because it has been open 90 days with no activity.

[robertcheramy]

I also have this problem, although it is more a problem of fortios generating new hashes every time we save the configuration.

I considered adding a command to models to tell Output::store not to save the config if nothing other than certain lines (/^set password .*$/) has changed.

[github-actions[bot]]

This issue is stale because it has been open 90 days with no activity.

[robertcheramy]

As @systeembeheerder wrote, if you want to remove the secrets, use remove_secret: true. The issue that fortigates updates the seed of the passwords at every backup can't be solved in oxidized.