<feed xmlns='http://www.w3.org/2005/Atom'>
<title>vyos-1x.git/data/templates/openvpn, branch vyos/1.5dev0</title>
<subtitle>VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git)
</subtitle>
<id>https://git.amelek.net/marekm72/vyos-1x.git/atom?h=vyos%2F1.5dev0</id>
<link rel='self' href='https://git.amelek.net/marekm72/vyos-1x.git/atom?h=vyos%2F1.5dev0'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/'/>
<updated>2023-08-15T19:11:35+00:00</updated>
<entry>
<title>T5271: correct dict path in the template for OpenVPN peer fingerprint</title>
<updated>2023-08-15T19:11:35+00:00</updated>
<author>
<name>Daniil Baturin</name>
<email>daniil@baturin.org</email>
</author>
<published>2023-08-15T19:11:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=1d6180b74cff43ddc73a0f708b348cade5a9f12d'/>
<id>urn:sha1:1d6180b74cff43ddc73a0f708b348cade5a9f12d</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T5270: generate 'dh none' unconditionally when dh-params is no present</title>
<updated>2023-08-15T18:47:26+00:00</updated>
<author>
<name>Daniil Baturin</name>
<email>daniil@baturin.org</email>
</author>
<published>2023-08-15T18:47:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=4bc012d2b2418ad3313fe5476b1e18a057cc6b7d'/>
<id>urn:sha1:4bc012d2b2418ad3313fe5476b1e18a057cc6b7d</id>
<content type='text'>
The condition is useless since OpenVPN simply switches to ECDH in all modes
when the classic DH prime is not specified
</content>
</entry>
<entry>
<title>openvpn: T5271: add peer certificate fingerprint option</title>
<updated>2023-08-09T19:21:44+00:00</updated>
<author>
<name>Daniil Baturin</name>
<email>daniil@baturin.org</email>
</author>
<published>2023-08-09T18:59:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=fa2518576638532aa3b23d4d72d77abc0c3f21d3'/>
<id>urn:sha1:fa2518576638532aa3b23d4d72d77abc0c3f21d3</id>
<content type='text'>
</content>
</entry>
<entry>
<title>openvpn: T4974: move CLI node "enable-dco" -&gt; "offload dco" to match other inetfaces</title>
<updated>2023-07-27T09:16:40+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2023-07-27T09:16:40+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=32b9ac3653fa27e90c0a6b16c3ab141fd4237cb7'/>
<id>urn:sha1:32b9ac3653fa27e90c0a6b16c3ab141fd4237cb7</id>
<content type='text'>
Keep a common CLI structure by re-using the already established offload
node from ethernet.
</content>
</entry>
<entry>
<title> T4974:add/fixed enable ovpn-dco by default</title>
<updated>2023-07-21T21:23:25+00:00</updated>
<author>
<name>fett0</name>
<email>fernando.gmaidana@gmail.com</email>
</author>
<published>2023-07-21T21:23:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=b805b9950b63a43591799804cc2cacb0fbfb568a'/>
<id>urn:sha1:b805b9950b63a43591799804cc2cacb0fbfb568a</id>
<content type='text'>
</content>
</entry>
<entry>
<title>OpenVPN: T4402: Update OpenVPN server.conf.j2 template</title>
<updated>2023-04-23T22:05:49+00:00</updated>
<author>
<name>Nicolas Riebesel</name>
<email>nagua@users.noreply.github.com</email>
</author>
<published>2023-04-22T12:48:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=c60e364c9c8267e2e2b3598a8eec5633f9fa78f9'/>
<id>urn:sha1:c60e364c9c8267e2e2b3598a8eec5633f9fa78f9</id>
<content type='text'>
The ifconfig-pool command requires the arguments separated by a space.
Hence the space was added before the subnet mask.
</content>
</entry>
<entry>
<title>T5027: Enable legacy provider to support current ciphers</title>
<updated>2023-02-23T11:07:46+00:00</updated>
<author>
<name>Viacheslav Hletenko</name>
<email>v.gletenko@vyos.io</email>
</author>
<published>2023-02-23T11:07:46+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=3fd4d5b9c595b43dddbb75cf0748450b36a5610a'/>
<id>urn:sha1:3fd4d5b9c595b43dddbb75cf0748450b36a5610a</id>
<content type='text'>
* We will need to remove insecure ciphers as a long-term solution (BF-CBC, DES...)
</content>
</entry>
<entry>
<title>openvpn: T4351: bugfix of initial value on Jinja2 namespace</title>
<updated>2022-04-18T10:25:31+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2022-04-18T10:25:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=297fd814528bb1a8c570174a9bac0f2d7dd69351'/>
<id>urn:sha1:297fd814528bb1a8c570174a9bac0f2d7dd69351</id>
<content type='text'>
Commit f2b722a8 ("openvpn: T4353: T4351: fix generation of openvpn-option
string passed to daemon") changed how the openvpn-option CLI node is processed.
Unfortunantely the initial value of the namespace must be '' instead of 0.
</content>
</entry>
<entry>
<title>openvpn: T4353: T4351: fix generation of openvpn-option string passed to daemon</title>
<updated>2022-04-18T10:09:54+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2022-04-18T10:09:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=f2b722a8879231383f8b0eaf92fda09eb121d78d'/>
<id>urn:sha1:f2b722a8879231383f8b0eaf92fda09eb121d78d</id>
<content type='text'>
</content>
</entry>
<entry>
<title>openvpn: T4353: fix Jinja2 linting errors</title>
<updated>2022-04-18T10:09:50+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2022-04-18T10:09:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=217f5d42e17ae5dd55adaab1114cacc7f5a2e280'/>
<id>urn:sha1:217f5d42e17ae5dd55adaab1114cacc7f5a2e280</id>
<content type='text'>
</content>
</entry>
</feed>
