summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-08-25T6671: add smoketest for dependency deferred to priorityJohn Estabrook
2024-08-25configdep: T6671: run dependency only if not scheduled by priorityJohn Estabrook
2024-08-25configd: T6671: track scripts proposed and scripts calledJohn Estabrook
2024-08-25configdiff: T5666: provide list of scripts scheduled for proposed commitJohn Estabrook
2024-08-25xml: T5666: add with_tag keyword arg to ownerJohn Estabrook
2024-08-24dhclient: T6667: Added workaround for communication with FRRzsdc
To increase the chance for dhclient to configure routes in FRR, added a workaround. Now 10 attempts are performed with 1 second delay and only after this dhclient gives up.
2024-08-22T6561: Add vrf aware for show ntpViacheslav Hletenko
2024-08-22Merge pull request #4001 from fett0/T6668Christian Breunig
op_mode: T6668: Add detailed statistics infomartion about MACsec
2024-08-22Merge pull request #4000 from sever-sever/T6672Christian Breunig
T6672: Fix system option ssh-client source-interface
2024-08-21op_mode: T6668: Add detailed statistics infomartion about MACsec interfacesfett0
2024-08-21T6672: Fix system option ssh-client source-interfaceViacheslav Hletenko
Fix for system option ssh-client source-interface For the `verify_source_interface` the key `ifname` if required
2024-08-20Merge pull request #3975 from lucasec/t6183Christian Breunig
T6183: interfaces openvpn: suppport specifying IP protocol version
2024-08-20Merge pull request #3977 from natali-rs1985/T5743-currentChristian Breunig
T5743: HTTPS API ability to import PKI certificates
2024-08-18Merge pull request #3997 from natali-rs1985/T3961-currentChristian Breunig
op_mode: T3961: Generate PKI expect 2 character country code
2024-08-18op_mode: T3961: Generate PKI expect 2 character country codeNataliia Solomko
2024-08-18xml: T6650: fix unused ArgumentTypeError imported from argparseChristian Breunig
2024-08-16T6659: suricata: use unique cluster_id per interface (#3992)Lucas Christian
2024-08-16Merge pull request #3987 from natali-rs1985/T6649-currentDaniil Baturin
ipoe_server: T6649: Accel-ppp separate vlan-mon from listen interfaces
2024-08-16Merge pull request #3989 from jestabro/write_file-errChristian Breunig
utils: T6658: fix write_file check in case of empty directory path
2024-08-16Merge pull request #3988 from nicolas-fort/T5794Christian Breunig
T5794: firewall: change firewall priority in oder to be loaded after all interfaces
2024-08-15utils: T6658: fix write_file check in case of empty directory pathJohn Estabrook
2024-08-15T5794: change firewall priority in oder to be loaded after all interfaces.nicolas
2024-08-15T6649: Accel-ppp separate vlan-mon from listen interfacesNataliia Solomko
2024-08-15Merge pull request #3982 from nicolas-fort/T6636Christian Breunig
T6636: firewall: fix firewall template in order print logs for default-action
2024-08-14Merge pull request #3980 from natali-rs1985/T6651-currentChristian Breunig
op_mode: T6651: Add a top level op mode word "execute"
2024-08-14Merge pull request #3981 from nicolas-fort/T6646Daniil Baturin
T6646: conntrack: in ignore rules, if protocols=all, do not append it to the rule
2024-08-14Merge pull request #3971 from jestabro/op-mode-cacheDaniil Baturin
xml: T6650: add initial op-mode cache support
2024-08-14T6636: firewall: fix firewall template in order to write logs for ↵Nicolas Fort
default-action in order to match same structure as in rules. This way op-mode command for showing firewall log prints logs for default-actions too
2024-08-14T6646: conntrack: in ignore rules, if protocols=all, do not append it to the ↵Nicolas Fort
rule
2024-08-14op_mode: T6651: Add a top level op mode word "execute"Nataliia Solomko
2024-08-13T6183: interfaces openvpn: suppport specifying IP protocol versionLucas Christian
2024-08-13T5743: HTTPS API ability to import PKI certificatesNataliia Solomko
2024-08-12Merge pull request #3958 from natali-rs1985/T6624-currentChristian Breunig
suricata: T6624: Make it possible for suricata address groups to reference each other
2024-08-12suricata: T6624: Fix for service suricata address-groups cannot be used in ↵Nataliia Solomko
each other
2024-08-12Merge pull request #3970 from lucasec/t6648Christian Breunig
T6648: dhcpv6-server: align stateless DHCPv6 options with stateful
2024-08-12T6648: dhcpv6-server: align stateless DHCPv6 options with statefulLucas Christian
2024-08-12Merge pull request #3937 from jestabro/env-set-alternativeChristian Breunig
configd: T6633: inject missing env vars for configfs utility
2024-08-12configd: T6633: inject missing env vars for configfs utilityJohn Estabrook
2024-08-12Merge pull request #3961 from jestabro/verify-interface-exists-configJohn Estabrook
configverify: T6642: verify_interface_exists requires config_dict arg
2024-08-12configverify: T6642: verify_interface_exists requires config_dict argJohn Estabrook
The function verify_interface_exists requires a reference to the ambient config_dict rather than creating an instance. As access is required to the 'interfaces' path, provide as attribute of class ConfigDict, so as not to confuse path searches of script-specific config_dict instances.
2024-08-12xml: T6650: add initial op-mode cache supportJohn Estabrook
2024-08-11Merge pull request #3965 from kumvijaya/currentChristian Breunig
T6637: add pr commenting back in un-used import check
2024-08-11Merge branch 'current' into currentVijayakumar A
2024-08-10Merge pull request #3964 from nicolas-fort/T6643Christian Breunig
T6643: firewall: fix ip address range parsing on firewall rules.
2024-08-10T6637: add pr commenting back in un-used import checkVijayakumar A
2024-08-09T6643: firewall: fix ip address range parsing on firewall rules.Nicolas Fort
2024-08-09Merge pull request #3960 from jestabro/verify-interface-state-existsDaniil Baturin
qos: T6638: require interface state existence in verify conditional
2024-08-08qos: T6638: require interface state existence in verify conditionalJohn Estabrook
2024-08-08Merge pull request #3955 from jestabro/configd-in-session-falseDaniil Baturin
configd: T6640: enforce in_session returns False under configd
2024-08-07configd: T6640: enforce in_session returns False under configdJohn Estabrook
The CStore in_session check is a false positive outside of a config session if a specific environment variable is set with an existing referent in unionfs. To allow extensions when running under configd and avoid confusion, enforce in_session returns False.