vyos-1x.git/src/conf_mode, branch 1.3.2

bonding: T4668: fix live bonding member add or remove

2022-09-02T11:36:45+00:00

Fixes several bugs around bonding member interface states not matching the committed configuration, including: - Disabled removed interfaces coming back up - Newly added disabled interfaces not staying down - Newly added interfaces not showing up in the bond

bonding: T4668: refactor configuration mode interface bonding script

2022-09-02T11:36:37+00:00

Refactor interfaces-bonding.py to simplify existing code and to remove potentially bugprone sections in preparation for member add/remove fixes for T4668.

ethernet: T4538: fix wrong systemd unit used for EAPoL

2022-08-19T18:04:00+00:00

When MACsec was bound to an ethernet interface and the underlaying source-interface got changed (even description only) this terminated the MACsec session running on top of it. The root cause is when EAPoL was implemented in commit d59354e52a8a7f we re-used the same systemd unit which is responsible for MACsec. That indeed lead to the fact that wpa_supplicant was always stopped when anything happened on the underlaying source-interface that was not related to EAPoL. (cherry picked from commit f92a23ef9ab8be59681e5b7ba627e399d89bce53)

openconnect: T4616: bugfix KeyError: 'local_users'

2022-08-15T18:54:46+00:00

To reproduce: set vpn openconnect authentication mode local commit Traceback (most recent call last): File "/usr/libexec/vyos/conf_mode/vpn_openconnect.py", line 147, in verify(c) File "/usr/libexec/vyos/conf_mode/vpn_openconnect.py", line 64, in verify if not ocserv["authentication"]["local_users"] or not ocserv["authentication"]["local_users"]["username"]: KeyError: 'local_users'

macsec: T4592: can not create two interfaces using the same source-interface

2022-08-15T16:00:56+00:00

(cherry picked from commit 993961f60ead2a18912eb577b1152463d4eb8b4e)

macsec: T4537: support online ciper and source-interface re-configuration

2022-08-15T16:00:54+00:00

(cherry picked from commit 82d8494d349edd7707c3811a71ca0e9c0648204e)

Fix missing dict_search import in interfaces-macsec.py

2022-08-13T11:43:07+00:00

Merge pull request #1450 from c-po/bridge-fixes-equuleus

2022-08-04T06:57:07+00:00

bridge: bugfixes for equuleus

macsec: T3368: check key length for gcm-aes-128/gcm-aes-256

2022-08-01T16:07:58+00:00

(cherry picked from commit a09359828e38c5b51a4579af16b5ea263a98233f)

router-advert: T4582: fix preferred cannot equal valid lifetime

2022-07-31T22:23:15+00:00

Allows preferred lifetime for prefix advertisements to equal the configured valid lifetime as per RFC 4861. (cherry picked from commit f6efe3035d352970dc492450c3c9ddf710dda5fe)