openwisp-controller 1.1.1__tar.gz → 1.1.2__tar.gz

{openwisp_controller-1.1.1 → openwisp_controller-1.1.2}/CHANGES.rst

@@ -1,6 +1,41 @@
 Changelog
 =========
 
+Version 1.1.2 [2025-08-01]
+--------------------------
+
+Bugfixes
+~~~~~~~~
+
+- Fixed `compatibility of OpenWrt.update_config with openwisp-config >=
+  1.1.0 <https://github.com/openwisp/openwisp-controller/issues/964>`__.
+- Fixed `VPN-client template switch issue when switching between VPN
+  servers with the same address
+  <https://github.com/openwisp/openwisp-controller/issues/973>`__.
+- Fixed `missing config_changed signal when reverting a template
+  <https://github.com/openwisp/openwisp-controller/issues/836>`__.
+- Fixed `Zerotier network name being set to "ow_zt" instead of "global"
+  <https://github.com/openwisp/openwisp-controller/issues/982>`__.
+- Fixed error in preview when device has no name set.
+- Fixed live updates for "Send commands" when multiple websocket
+  connections are open for the same device.
+- Limited command results in the device admin to 30 entries to avoid
+  loading issues.
+- Fixed uncaught exception in ``leaflet.draw.i18n.js``.
+- Fixed `handling of devices without a DeviceConnection when creating
+  commands
+  <https://github.com/openwisp/openwisp-controller/issues/1016>`__.
+- Prevented `adding multiple VPN client templates pointing to the same VPN
+  server <https://github.com/openwisp/openwisp-controller/issues/832>`__.
+- Fixed timeout issues in VPN checksum and download configuration views
+  for large VPN setups (e.g., 2000+ WireGuard peers) by caching the
+  checksum and generated configuration.
+- Fixed an issue where enforcing required templates was accidentally
+  deleting `VpnClient` objects, causing them to be recreated whenever
+  device templates were modified in the Django admin.
+- Fixed ``HTTP 500 Server Error`` when geographic REST API endpoints
+  receive a malformed resource ID.
+
 Version 1.1.1 [2025-01-31]
 --------------------------
 
@@ -9,7 +44,7 @@ Bugfixes
 
 - Fixed `recovering deleted device with related location
   <https://github.com/openwisp/openwisp-controller/issues/936>`__.
-- Fixed `deleting device with “deactivating” config status
+- Fixed `deleting device with "deactivating" config status
   <https://github.com/openwisp/openwisp-controller/issues/949>`__.
 - Fixed `conversion of MAC address to uppercase format
   <https://github.com/openwisp/openwisp-controller/issues/922>`__ with the

{openwisp_controller-1.1.1/openwisp_controller.egg-info → openwisp_controller-1.1.2}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.2
+Metadata-Version: 2.4
 Name: openwisp-controller
-Version: 1.1.1
+Version: 1.1.2
 Summary: OpenWISP Controller
 Home-page: http://openwisp.org
 Download-URL: https://github.com/openwisp/openwisp-controller/releases
@@ -45,6 +45,7 @@ Dynamic: download-url
 Dynamic: home-page
 Dynamic: keywords
 Dynamic: license
+Dynamic: license-file
 Dynamic: platform
 Dynamic: requires-dist
 Dynamic: summary
@@ -106,10 +107,10 @@ Other popular building blocks that are part of the OpenWISP ecosystem are:
 - `openwisp-firmware-upgrader
   <https://openwisp.io/docs/stable/firmware-upgrader/>`_: automated
   firmware upgrades (single devices or mass network upgrades)
-- `openwisp-radius <https://openwisp.io/docs/stable/user/radius.html>`_:
-  based on FreeRADIUS, allows to implement network access authentication
-  systems like 802.1x WPA2 Enterprise, captive portal authentication,
-  Hotspot 2.0 (802.11u)
+- `openwisp-radius <https://openwisp.io/docs/stable/radius/>`_: based on
+  FreeRADIUS, allows to implement network access authentication systems
+  like 802.1x WPA2 Enterprise, captive portal authentication, Hotspot 2.0
+  (802.11u)
 - `openwisp-network-topology
   <https://openwisp.io/docs/stable/network-topology/>`_: provides way to
   collect and visualize network topology data from dynamic mesh routing

{openwisp_controller-1.1.1 → openwisp_controller-1.1.2}/README.rst

@@ -55,10 +55,10 @@ Other popular building blocks that are part of the OpenWISP ecosystem are:
 - `openwisp-firmware-upgrader
   <https://openwisp.io/docs/stable/firmware-upgrader/>`_: automated
   firmware upgrades (single devices or mass network upgrades)
-- `openwisp-radius <https://openwisp.io/docs/stable/user/radius.html>`_:
-  based on FreeRADIUS, allows to implement network access authentication
-  systems like 802.1x WPA2 Enterprise, captive portal authentication,
-  Hotspot 2.0 (802.11u)
+- `openwisp-radius <https://openwisp.io/docs/stable/radius/>`_: based on
+  FreeRADIUS, allows to implement network access authentication systems
+  like 802.1x WPA2 Enterprise, captive portal authentication, Hotspot 2.0
+  (802.11u)
 - `openwisp-network-topology
   <https://openwisp.io/docs/stable/network-topology/>`_: provides way to
   collect and visualize network topology data from dynamic mesh routing

{openwisp_controller-1.1.1 → openwisp_controller-1.1.2}/openwisp_controller/__init__.py

@@ -1,4 +1,4 @@
-VERSION = (1, 1, 1, 'final')
+VERSION = (1, 1, 2, 'final')
 __version__ = VERSION  # alias
 
 

{openwisp_controller-1.1.1 → openwisp_controller-1.1.2}/openwisp_controller/config/admin.py

@@ -311,7 +311,8 @@ class BaseConfigAdmin(BaseAdmin):
             config = instance.config
         else:
             raise Http404()
-        config_archive = config.generate()
+        get_configuration = getattr(config, "get_cached_configuration", config.generate)
+        config_archive = get_configuration()
         return send_file(
             filename='{0}.tar.gz'.format(config.name),
             contents=config_archive.getvalue(),

{openwisp_controller-1.1.1 → openwisp_controller-1.1.2}/openwisp_controller/config/apps.py

@@ -55,6 +55,7 @@ class ConfigConfig(AppConfig):
 
     def __setmodels__(self):
         self.device_model = load_model('config', 'Device')
+        self.template_model = load_model('config', 'Template')
         self.devicegroup_model = load_model('config', 'DeviceGroup')
         self.config_model = load_model('config', 'Config')
         self.vpn_model = load_model('config', 'Vpn')
@@ -135,11 +136,21 @@ class ConfigConfig(AppConfig):
             sender=self.config_model,
             dispatch_uid='devicegroup_templates_change_handler.backend_changed',
         )
+        pre_save.connect(
+            self.template_model.pre_save_handler,
+            sender=self.template_model,
+            dispatch_uid='template_pre_save_handler',
+        )
         pre_save.connect(
             handlers.organization_disabled_handler,
             sender=self.org_model,
             dispatch_uid='organization_disabled_pre_save_clear_device_checksum_cache',
         )
+        post_save.connect(
+            self.template_model.post_save_handler,
+            sender=self.template_model,
+            dispatch_uid='template_post_save_handler',
+        )
         post_save.connect(
             self.org_limits.post_save_handler,
             sender=self.org_model,
@@ -294,7 +305,7 @@ class ConfigConfig(AppConfig):
         Triggers the cache invalidation for the
         device config checksum (view and model method)
         """
-        from .controller.views import DeviceChecksumView
+        from .controller.views import DeviceChecksumView, GetVpnView
         from .handlers import (
             device_cache_invalidation_handler,
             devicegroup_change_handler,
@@ -323,6 +334,21 @@ class ConfigConfig(AppConfig):
             DeviceChecksumView.invalidate_checksum_cache,
             dispatch_uid='invalidate_checksum_cache',
         )
+        # VPN cache invalidation
+        post_save.connect(
+            GetVpnView.invalidate_get_vpn_cache,
+            sender=self.vpn_model,
+            dispatch_uid="invalidate_get_vpn_cache",
+        )
+        pre_delete.connect(
+            GetVpnView.invalidate_get_vpn_cache,
+            sender=self.vpn_model,
+            dispatch_uid="vpn_server_pre_delete_invalidate_get_vpn_cache",
+        )
+        vpn_server_modified.connect(
+            GetVpnView.invalidate_get_vpn_cache,
+            dispatch_uid="vpn_server_modified_invalidate_get_vpn_cache",
+        )
         device_group_changed.connect(
             devicegroup_change_handler,
             sender=self.device_model,

{openwisp_controller-1.1.1 → openwisp_controller-1.1.2}/openwisp_controller/config/base/base.py

@@ -1,8 +1,10 @@
 import collections
 import hashlib
 import json
+import logging
 from copy import deepcopy
 
+from cache_memoize import cache_memoize
 from django.core.exceptions import ValidationError
 from django.db import models
 from django.utils.functional import cached_property
@@ -15,6 +17,82 @@ from openwisp_utils.base import TimeStampedEditableModel
 
 from .. import settings as app_settings
 
+logger = logging.getLogger(__name__)
+
+
+def get_cached_args_rewrite(instance):
+    """
+    Use only the PK parameter for calculating the cache key
+    """
+    return instance.pk.hex
+
+
+class ChecksumCacheMixin:
+    """
+    Mixin that provides caching for checksum.
+    """
+
+    _CHECKSUM_CACHE_TIMEOUT = 60 * 60 * 24 * 30  # 30 days
+
+    @cache_memoize(
+        timeout=_CHECKSUM_CACHE_TIMEOUT, args_rewrite=get_cached_args_rewrite
+    )
+    def get_cached_checksum(self):
+        """
+        Handles caching,
+        timeout=None means value is cached indefinitely
+        (invalidation handled on post_save/post_delete signal)
+        """
+        logger.debug(f"calculating checksum for {self.__class__.__name__} ID {self.pk}")
+        return self.checksum
+
+    @classmethod
+    def bulk_invalidate_get_cached_checksum(cls, query_params):
+        """
+        Bulk invalidate checksum cache for multiple instances
+        """
+        for instance in cls.objects.only("id").filter(**query_params).iterator():
+            instance.get_cached_checksum.invalidate(instance)
+
+    def invalidate_checksum_cache(self):
+        """
+        Invalidate the checksum cache for this instance
+        """
+        self.get_cached_checksum.invalidate(self)
+        logger.debug(
+            f"invalidated checksum cache for {self.__class__.__name__} ID {self.pk}"
+        )
+
+
+class ConfigChecksumCacheMixin(ChecksumCacheMixin):
+    """
+    Mixin that provides caching for both checksum and configuration.
+    """
+
+    @cache_memoize(
+        timeout=ChecksumCacheMixin._CHECKSUM_CACHE_TIMEOUT,
+        args_rewrite=get_cached_args_rewrite,
+    )
+    def get_cached_configuration(self):
+        """
+        Returns cached configuration
+        """
+        return self.generate()
+
+    def invalidate_configuration_cache(self):
+        """
+        Invalidate the configuration cache for this instance
+        """
+        self.get_cached_configuration.invalidate(self)
+        logger.debug(
+            f"invalidated configuration cache for {self.__class__.__name__}"
+            f" ID {self.pk}"
+        )
+
+    def invalidate_checksum_cache(self):
+        super().invalidate_checksum_cache()
+        self.invalidate_configuration_cache()
+
 
 class BaseModel(TimeStampedEditableModel):
     """
@@ -89,7 +167,7 @@ class BaseConfig(BaseModel):
             return config
         c = deepcopy(config)
         is_config = not any([self.__template__, self.__vpn__])
-        if 'hostname' not in c.get('general', {}) and is_config:
+        if all(('hostname' not in c.get('general', {}), is_config, self.name)):
             c.setdefault('general', {})
             c['general']['hostname'] = self.name.replace(':', '-')
         return c

{openwisp_controller-1.1.1 → openwisp_controller-1.1.2}/openwisp_controller/config/base/config.py

@@ -1,8 +1,8 @@
 import collections
 import logging
 import re
+from collections import defaultdict
 
-from cache_memoize import cache_memoize
 from django.core.exceptions import ObjectDoesNotExist, PermissionDenied, ValidationError
 from django.db import models, transaction
 from django.utils.translation import gettext_lazy as _
@@ -23,11 +23,20 @@ from ..signals import (
 )
 from ..sortedm2m.fields import SortedManyToManyField
 from ..utils import get_default_templates_queryset
-from .base import BaseConfig
+from .base import BaseConfig, ChecksumCacheMixin, get_cached_args_rewrite
 
 logger = logging.getLogger(__name__)
 
 
+def get_cached_checksum_args_rewrite(config):
+    """
+    DEPRECATED: Use get_cached_args_rewrite instead.
+
+    TODO: Remove this in 1.2.0 release.
+    """
+    return get_cached_args_rewrite(config)
+
+
 class TemplatesThrough(object):
     """
     Improves string representation of m2m relationship objects
@@ -37,14 +46,7 @@ class TemplatesThrough(object):
         return _('Relationship with {0}').format(self.template.name)
 
 
-def get_cached_checksum_args_rewrite(config):
-    """
-    Use only the PK parameter for calculating the cache key
-    """
-    return config.pk.hex
-
-
-class AbstractConfig(BaseConfig):
+class AbstractConfig(ChecksumCacheMixin, BaseConfig):
     """
     Abstract model implementing the
     NetJSON DeviceConfiguration object
@@ -149,23 +151,6 @@ class AbstractConfig(BaseConfig):
         """
         return self.device.key
 
-    @cache_memoize(
-        timeout=_CHECKSUM_CACHE_TIMEOUT, args_rewrite=get_cached_checksum_args_rewrite
-    )
-    def get_cached_checksum(self):
-        """
-        Handles caching,
-        timeout=None means value is cached indefinitely
-        (invalidation handled on post_save/post_delete signal)
-        """
-        logger.debug(f'calculating checksum for config ID {self.pk}')
-        return self.checksum
-
-    @classmethod
-    def bulk_invalidate_get_cached_checksum(cls, query_params):
-        for config in cls.objects.only('id').filter(**query_params).iterator():
-            config.get_cached_checksum.invalidate(config)
-
     @classmethod
     def get_template_model(cls):
         return cls.templates.rel.model
@@ -185,6 +170,60 @@ class AbstractConfig(BaseConfig):
             templates = pk_set
         return templates
 
+    @classmethod
+    def clean_duplicate_vpn_client_templates(
+        cls, action, instance, templates, raw_data=None
+    ):
+        """
+        Multiple VPN client templates related to the same VPN server are not allowed:
+        it hardly makes sense, preventing it keeps things simple and avoids headaches.
+        Raises a ValidationError if duplicates are found.
+        """
+        if action != "pre_add":
+            return
+
+        def format_template_list(names):
+            quoted = [f'"{name}"' for name in names]
+            if len(quoted) == 2:
+                return " and ".join(quoted)
+            return ", ".join(quoted[:-1]) + " and " + quoted[-1]
+
+        def add_vpn_templates(templates_queryset):
+            for template in templates_queryset.filter(type="vpn"):
+                if template.name not in vpn_templates[template.vpn.name]:
+                    vpn_templates[template.vpn.name].append(template.name)
+
+        raw_data = raw_data or {}
+        vpn_templates = defaultdict(list)
+        if not raw_data:
+            # When raw_data is present, validation is triggered by a
+            # ConfigForm submission.
+            # In this case, the "templates" queryset already contains only the templates
+            # that are intended to be assigned. Templates that would be removed
+            # (e.g., in a pre_clear action) have already been excluded from the
+            # queryset.
+            add_vpn_templates(instance.templates)
+        add_vpn_templates(templates)
+
+        error_lines = [
+            _(
+                "You cannot select multiple VPN client templates related to"
+                " the same VPN server."
+            )
+        ]
+        for vpn_name, template_names in vpn_templates.items():
+            if len(template_names) < 2:
+                continue
+            template_list = format_template_list(sorted(template_names))
+            error_lines.append(
+                _(
+                    "The templates {template_list} are all linked"
+                    ' to the same VPN server: "{vpn_name}".'
+                ).format(template_list=template_list, vpn_name=vpn_name)
+            )
+        if len(error_lines) > 1:
+            raise ValidationError("\n".join(str(line) for line in error_lines))
+
     @classmethod
     def clean_templates(cls, action, instance, pk_set, raw_data=None, **kwargs):
         """
@@ -203,6 +242,9 @@ class AbstractConfig(BaseConfig):
         )
         if not templates:
             return
+        cls.clean_duplicate_vpn_client_templates(
+            action, instance, templates, raw_data=raw_data
+        )
         backend = instance.get_backend_instance(template_instances=templates)
         try:
             cls.clean_netjsonconfig_backend(backend)
@@ -256,7 +298,7 @@ class AbstractConfig(BaseConfig):
 
         if action == 'post_clear':
             if instance.is_deactivating_or_deactivated():
-                # If the device is deactivated or in the process of deactivatiing, then
+                # If the device is deactivated or in the process of deactivating, then
                 # delete all vpn clients and return.
                 instance.vpnclient_set.all().delete()
             return
@@ -265,37 +307,48 @@ class AbstractConfig(BaseConfig):
         # coming from signal
         if isinstance(pk_set, set):
             template_model = cls.get_template_model()
-            # Ordering the queryset here doesn't affect the functionality
-            # since pk_set is a set. Though ordering the queryset is required
-            # for tests.
             templates = template_model.objects.filter(pk__in=list(pk_set)).order_by(
                 'created'
             )
         # coming from admin ModelForm
         else:
             templates = pk_set
-        # delete VPN clients which have been cleared
-        # by sortedm2m and have not been added back
-        if action == 'post_add':
-            vpn_list = instance.templates.filter(type='vpn').values_list('vpn')
-            instance.vpnclient_set.exclude(vpn__in=vpn_list).delete()
-        # when adding or removing specific templates
+
+        # Handle template actions
         for template in templates.filter(type='vpn'):
             if action == 'post_add':
-                if vpn_client_model.objects.filter(
+                # Create VPN client if needed
+                if not vpn_client_model.objects.filter(
                     config=instance, vpn=template.vpn
                 ).exists():
-                    continue
-                client = vpn_client_model(
-                    config=instance,
-                    vpn=template.vpn,
-                    auto_cert=template.auto_cert,
-                )
-                client.full_clean()
-                client.save()
-            elif action == 'post_remove':
-                for client in instance.vpnclient_set.filter(vpn=template.vpn):
-                    client.delete()
+                    client = vpn_client_model(
+                        config=instance,
+                        vpn=template.vpn,
+                        auto_cert=template.auto_cert,
+                    )
+                    client.full_clean()
+                    client.save()
+
+        if len(pk_set) != templates.filter(required=True).count():
+            # Explanation:
+            # SortedManyToManyField clears all existing templates before adding
+            # new ones. This triggers an m2m_changed signal with the "post_clear"
+            # action, which is handled by the "enforce_required_templates" signal
+            # receiver. That receiver re-adds the required templates.
+            #
+            # Re-adding required templates triggers another m2m_changed signal
+            # with the "post_add" action. At this stage, only required templates
+            # exist in the DB, so we cannot yet determine which VpnClient objects
+            # should be deleted based on the new selection.
+            #
+            # Therefore, we defer deletion of VpnClient objects until the "post_add"
+            # signal is triggered again—after all templates, including the required
+            # ones, have been fully added. At that point, we can identify and
+            # delete VpnClient objects not linked to the final template set.
+            current_vpns = set(
+                instance.templates.filter(type='vpn').values_list('vpn_id', flat=True)
+            )
+            instance.vpnclient_set.exclude(vpn_id__in=current_vpns).delete()
 
     @classmethod
     def clean_templates_org(cls, action, instance, pk_set, raw_data=None, **kwargs):
@@ -428,7 +481,7 @@ class AbstractConfig(BaseConfig):
 
         # Check if the device is using stock OpenWrt.
         openwrt_match = re.search(
-            '[oO][pP][eE][nN][wW][rR][tT]\s*([\d.]+)', self.device.os
+            r'[oO][pP][eE][nN][wW][rR][tT]\s*([\d.]+)', self.device.os
         )
         if openwrt_match:
             if version.parse(openwrt_match.group(1)) >= version.parse('21'):

{openwisp_controller-1.1.1 → openwisp_controller-1.1.2}/openwisp_controller/config/base/template.py

@@ -106,30 +106,31 @@ class AbstractTemplate(ShareableOrgMixinUniqueName, BaseConfig):
         verbose_name_plural = _('templates')
         unique_together = (('organization', 'name'),)
 
-    def save(self, *args, **kwargs):
+    @classmethod
+    def pre_save_handler(cls, instance, *args, **kwargs):
         """
-        modifies status of related configs
-        if key attributes have changed (queries the database)
+        Modifies status of related configs
         """
-        update_related_config_status = False
-        if not self._state.adding:
-            if hasattr(self, 'backend_instance'):
-                del self.backend_instance
-            current = self.__class__.objects.get(pk=self.pk)
-            try:
-                current_checksum = current.checksum
-            except NetjsonconfigValidationError:
-                # If the Netjsonconfig library upgrade changes the schema,
-                # the old configuration may become invalid, raising an exception.
-                # Setting the checksum to None forces related configurations to update.
-                current_checksum = None
-            update_related_config_status = self.checksum != current_checksum
-        # save current changes
-        super().save(*args, **kwargs)
-        # update relations
-        if update_related_config_status:
+        try:
+            current = cls.objects.get(id=instance.id)
+        except cls.DoesNotExist:
+            return
+        if hasattr(instance, 'backend_instance'):
+            del instance.backend_instance
+        try:
+            current_checksum = current.checksum
+        except NetjsonconfigValidationError:
+            # If the Netjsonconfig library upgrade changes the schema,
+            # the old configuration may become invalid, raising an exception.
+            # Setting the checksum to None forces related configurations to update.
+            current_checksum = None
+        instance._update_related_config_status = instance.checksum != current_checksum
+
+    @classmethod
+    def post_save_handler(cls, instance, created, *args, **kwargs):
+        if not created and getattr(instance, '_update_related_config_status', False):
             transaction.on_commit(
-                lambda: update_template_related_config_status.delay(self.pk)
+                lambda: update_template_related_config_status.delay(instance.pk)
             )
 
     def _update_related_config_status(self):

{openwisp_controller-1.1.1 → openwisp_controller-1.1.2}/openwisp_controller/config/base/vpn.py

@@ -34,7 +34,7 @@ from ..tasks_zerotier import (
     trigger_zerotier_server_update,
     trigger_zerotier_server_update_member,
 )
-from .base import BaseConfig
+from .base import BaseConfig, ConfigChecksumCacheMixin
 
 logger = logging.getLogger(__name__)
 
@@ -44,7 +44,7 @@ def _peer_cache_key(vpn):
     return str(vpn.pk)
 
 
-class AbstractVpn(ShareableOrgMixinUniqueName, BaseConfig):
+class AbstractVpn(ConfigChecksumCacheMixin, ShareableOrgMixinUniqueName, BaseConfig):
     """
     Abstract VPN model
     """
@@ -282,6 +282,7 @@ class AbstractVpn(ShareableOrgMixinUniqueName, BaseConfig):
         if create_dh:
             transaction.on_commit(lambda: create_vpn_dh.delay(self.id))
         if not created and self._send_vpn_modified_after_save:
+            self.invalidate_checksum_cache()
             self._send_vpn_modified_signal()
             self._send_vpn_modified_after_save = False
         # For ZeroTier VPN server, if the
@@ -309,10 +310,9 @@ class AbstractVpn(ShareableOrgMixinUniqueName, BaseConfig):
         ]
         current = self._meta.model.objects.only(*attrs).get(pk=self.pk)
         for attr in attrs:
-            if getattr(self, attr) == getattr(current, attr):
-                continue
-            self._send_vpn_modified_after_save = True
-            break
+            if getattr(self, attr) != getattr(current, attr):
+                self._send_vpn_modified_after_save = True
+                break
 
     def _send_vpn_modified_signal(self):
         vpn_server_modified.send(sender=self.__class__, instance=self)
@@ -634,7 +634,7 @@ class AbstractVpn(ShareableOrgMixinUniqueName, BaseConfig):
             # call auto_client and update the config
             elif self._is_backend_type('zerotier') and template_backend_class:
                 auto = getattr(template_backend_class, 'zerotier_auto_client')(
-                    name='ow_zt',
+                    name='global',
                     networks=[
                         {'id': self.network_id, 'ifname': f'owzt{self.network_id[-6:]}'}
                     ],
@@ -688,8 +688,10 @@ class AbstractVpn(ShareableOrgMixinUniqueName, BaseConfig):
         for backend in ['wireguard', 'vxlan']:
             if self._is_backend_type(backend):
                 getattr(self, f'_get_{backend}_peers').invalidate(self)
+                self.invalidate_checksum_cache()
                 if update:
                     getattr(self, f'_get_{backend}_peers')()
+                    self.get_cached_configuration()
                 # Send signal for peers changed
                 vpn_peers_changed.send(sender=self.__class__, instance=self)