vyos-1x.git/src/op_mode, branch 1.4.0

op-mode: T683: remove superfluous debug print in snmpv3 display code

2024-05-31T09:00:02+00:00

This was a leftover from the early days. (cherry picked from commit d5271e084cca8af54f425816916a821b0eab1a5a)

op-mode: ipsec: T6407: fix profile generation

2024-05-30T14:36:40+00:00

Commit 952b1656f51 ("ipsec: T5606: T5871: Use multi node for CA certificates") added support for multiple CA certificates which broke the OP mode command to generate the IPSec profiles as it did not expect a list and was rather working on a string. Now multiple CAs can be rendered into the Apple IOS profile. (cherry picked from commit e6fe6e50a5c817e18c453e7bc42bb2e1c4b17671)

nat: T6371: fix op mode display of configured ports when comma separated list of ports/ranges exists

2024-05-29T18:29:00+00:00

Before: Issuing the op mode command "show nat source rules" will throw an exception if the user has configured NAT rules using a list of ports as a comma-separated list (e.g. '!22,telnet,http,123,1001-1005'). Also there was no handling for the "!" rule and so '!53' would display as '53'. With this PR: Introduced iteration to capture all configured ports and append to the appropriate string for display to the user as well as handling of '!' if present in user's configuration. (cherry picked from commit b7595ee9d328778105c70e3d4399ac45f555b304)

op-mode: T6400: pki: unable to generate fingerprint for ACME issued certificates

2024-05-26T12:03:57+00:00

This fixes (for and ACME generated certificate) vyos@vyos:~$ show pki certificate vyos fingerprint sha512 Traceback (most recent call last): File "/usr/libexec/vyos/op_mode/pki.py", line 1081, in show_certificate_fingerprint(args.certificate, args.fingerprint) File "/usr/libexec/vyos/op_mode/pki.py", line 934, in show_certificate_fingerprint print(get_certificate_fingerprint(cert, hash)) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3/dist-packages/vyos/pki.py", line 76, in get_certificate_fingerprint fp = cert.fingerprint(hash_algorithm) ^^^^^^^^^^^^^^^^ AttributeError: 'bool' object has no attribute 'fingerprint' After the fix: vyos@vyos# run show pki certificate vyos fingerprint sha256 10:2C:EF:2C:DA:7A:EE:C6:D7:8E:53:12:F0:F5:DE:B9:E9:D0:6C:B4:49:1C:8B:70:2B:D9:AF:FC:9B:75:A3:D2 (cherry picked from commit b6ee07c7efbb818787deba20116f4289853fb5c9)

op mode: T6348: SNAT op-mode fails with flowtable offload entries

2024-05-17T13:38:53+00:00

(cherry picked from commit 1cba74f91a67348bc8e8ad3e2ef4325dc9f9d6e0)

T6335: Add/Update EVPN op commands

2024-05-16T18:41:53+00:00

Added the following commands: show evpn show evpn es show evpn es show evpn es detail show evpn es-evi show evpn es-evi detail show evpn es-evi vni show evpn vni show evpn vni detail show evpn vni Updated the following commands: show evpn access-vlan show evpn arp-cache show evpn mac show evpn next-hops show evpn rmac (cherry picked from commit c6be441c86bc8fe2e938e2bd3c85f99071cbfb49)

Merge pull request #3462 from nvollmar/T4519

2024-05-16T18:10:06+00:00

op mode: T4519: Show DUID instead of IAID_DUID

T4519: Switch to display DUID

2024-05-16T07:00:49+00:00

op mode: T6339: display build flavor and comment in "show version"

2024-05-16T05:15:37+00:00

(cherry picked from commit cc0573a78aac4d6ac4479fdf951d151a36b88cbc)

T6329: firewall: use isinstance() in op-mode script

2024-05-12T06:57:41+00:00

(cherry picked from commit b705adc40b761e338026b938d80398fdb281a197)