summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-06-16Merge pull request #3661 from vyos/update-sonarcloud-settingsYuriy Andamasov
T6494: Update sonarcloud.yml and add more branches for scanning
2024-06-16T6494: Update sonarcloud.yml and add more branches for scanningYuriy Andamasov
2024-06-16Merge pull request #3659 from natali-rs1985/openvpn-fix-smoketestsChristian Breunig
openvpn: T5487: Fix migration smoketests commands
2024-06-16openvpn: T5487: Fix migration smoketests commandsNataliia Solomko
2024-06-15Merge pull request #3653 from c-po/openvpn-migration-permission-fixChristian Breunig
openvpn: T5487: make migration script executable
2024-06-15openvpn: T5487: make migration script executableChristian Breunig
Migration script introduced in commit 0f669a226 ("openvpn: T5487: Remove eprecated option --cipher for server and client mode") lacked executable permission.
2024-06-14Merge pull request #3645 from c-po/pki-T6480Christian Breunig
op-mode: T6480: must call pki.py helper as root to work with ACME certificates
2024-06-14Merge pull request #3646 from c-po/pki-T6407Christian Breunig
op-mode: T6407: "generate pki" missed to mangle in ACME certificates when required
2024-06-14Merge pull request #3647 from vyos/T6487-update-central-workflow-branchChristian Breunig
T6487: updated central workflows to use current branch
2024-06-14T6487: updated central workflows to use current branchkumvijaya
2024-06-14op-mode: T6407: "generate pki" missed to mangle in ACME certificates when ↵Christian Breunig
required If the requested certificate to generate an Apple IOS profile was based on an ACME certificate, we also need to mangle in the ACME certs content to retrieve the certificates issuer name.
2024-06-14op-mode: T6480: must call pki.py helper as root to work with ACME certificatesChristian Breunig
This is an addition to commit 65fba1cd2 ("op-mode: T6377: must call pki.py helper as root to work with ACME certificates") which missed out the basic "show pki" command, as the <command> XML node was deep down in the view.
2024-06-13Merge pull request #3639 from natali-rs1985/T5487-currentDaniil Baturin
openvpn: T5487: Remove deprecated option --cipher for server and client mode
2024-06-13Merge pull request #3601 from talmakion/bugfix/T6456Daniil Baturin
T6456: Convert "monitor traffic" to modern op-mode wrapper
2024-06-13Merge pull request #3590 from talmakion/feature/T6045Daniil Baturin
T6045: Recreate show lldp detail views & improve remote port selection
2024-06-13Merge pull request #3644 from natali-rs1985/T6227-currentChristian Breunig
op_mode: T6227: Rewrite show conntrack-sync cache internal to use tabulate output
2024-06-12Merge pull request #3642 from vyos/T6476-sonar-cloud-workflowChristian Breunig
T6476: added sonarcloud workflow
2024-06-12op_mode: T6227: Rewrite show conntrack-sync cache internal to use tabulate ↵Nataliia Solomko
output
2024-06-12T6476: added sonarcloud workflowVijayakumar A
2024-06-12Merge pull request #3638 from c-po/bgp-vrf-completion-helperChristian Breunig
bgp: T6473: missing completion helper for peer-groups inside a VRF
2024-06-11bgp: T6473: missing completion helper for peer-groups inside a VRFChristian Breunig
Using BGP peer-groups inside a VRF instance will make use if the global VRFs peer-group list during tab-completion and not the peer-groups defined within the BGP instance of the given VRF.
2024-06-11openvpn: T5487: Remove eprecated option --cipher for server and client modeNataliia Solomko
2024-06-11T6456: Convert "monitor traffic" to modern op-mode wrapperAndrew Topp
The old "monitor traffic" definition had misaligned arguments under the verbose node and manually offered the same parameter keyword in multiple positions to emulate flexible parameters. I've wrapped tcpdump for op-mode and replicated the "varargs" style from mtr.py/mtr.xml.in to present a few more parameters in a more flexible manner. Changes to the Makefile were required for recursive varargs lookup.
2024-06-11T6045: Recreate show lldp detail views & improve remote port selectionAndrew Topp
If the remote device has explicitly sent the interface name as the portID, we should use that first as the interface name, before working through the previous priority order. I've brought back LLDP detail views directly calling lldpcli. This can be extended to render a template from op_mode/lldp.py, but lldpcli isn't bad at rendering readable info. Raw mode (including detailed raw) is still accessible for programmatic access.
2024-06-11Merge pull request #3632 from c-po/fixup-firewallChristian Breunig
firewall: T3900: fix migration and smoketests
2024-06-11Merge pull request #3611 from c-po/op-mode-wifiChristian Breunig
wireless: T6462: add op-mode command for hostapd and wpa_supplicant logs
2024-06-11Merge pull request #3628 from jestabro/op-mode-config-dictChristian Breunig
op-mode: T6471: add optimized get_config_dict
2024-06-11firewall: T3900: fix migration and smoketestsChristian Breunig
Commit 770edf016838523 ("T3900: T6394: extend functionalities in firewall") changed the position in the CLI for conntrack timeout. This lead to failing smoketests because of a regression in the migrator.
2024-06-10op-mode: T6471: add optimized get_config_dictJohn Estabrook
2024-06-11T6469: remove j2 lint workflow (#3626)Vijayakumar A
2024-06-10Merge pull request #3621 from sever-sever/T6442Christian Breunig
T6442: CGNAT add log for address allocation
2024-06-10Merge pull request #3606 from c-po/utils-cpu-T5195Christian Breunig
vyos.utils: T5195: import vyos.cpu to this package
2024-06-10Merge pull request #3615 from vyos/T6467-add-workflow-sagittaDaniil Baturin
T6467: add PR checks workflows for sagitta branch
2024-06-10T6442: CGNAT add log for address allocationViacheslav Hletenko
Add the configuration command to log current CGNAT allocation set nat cgnat log-allocation
2024-06-10Merge pull request #3614 from nvollmar/T6219Christian Breunig
T6219: Add support for container sysctl parameter
2024-06-10T6219: align with system sysctl and limit parameters to supportedNicolas Vollmar
2024-06-10container: T6219: Add support for container sysctl / kernel parametersBen Pilgrim
2024-06-10wireless: T6462: add op-mode command for hostapd and wpa_supplicant logsChristian Breunig
* monitor log wireless hostapd [interface <name>] * monitor log wireless wpa-supplicant [interface <name>] * show log wireless hostapd [interface <name>] * show log wireless wpa-supplicant [interface <name>]
2024-06-10vyos.utils: T5195: import vyos.cpu to this packageChristian Breunig
The intention of vyos.utils package is to have a common ground for repeating actions/helpers. This is also true for number of CPUs and their respective core count. Move vyos.cpu to vyos.utils.cpu
2024-06-10Merge pull request #3610 from c-po/ipsec-profile-T6424Christian Breunig
op-mode: T6424: ipsec: honor certificate CN and CA chain during profile generation
2024-06-10Merge pull request #3612 from c-po/haproxy-pki-T6463Christian Breunig
pki: T6463: reverse-proxy service not reloaded when updating SSL certificate(s)
2024-06-10Merge pull request #3613 from c-po/sstpc-T6464Christian Breunig
pki: T6464: sstpc interface not reloaded when updating SSL certificate(s)
2024-06-10Merge pull request #3607 from c-po/firewall-unused-importChristian Breunig
firewall: T3900: T6394: remove unused import
2024-06-10T6467: add PR checks workflows for sagittaVijayakumar A
2024-06-10T6467: add PR checks workflows for sagittaVijayakumar A
2024-06-10T6467: add PR checks workflows for sagittaVijayakumar A
2024-06-09op-mode: T6424: ipsec: filter out duplicate CA certificates in Apple IOS profileChristian Breunig
2024-06-09op-mode: T6424: ipsec: honor certificate CN and CA chain during profile ↵Christian Breunig
generation In e6fe6e50a5c ("op-mode: ipsec: T6407: fix profile generation") we fixed support for multiple CAs when dealing with the generation of Apple IOS profiles. This commit extends support to properly include the common name of the server certificate issuer and all it's paren't CAs. A list of parent CAs is automatically generated from the "PKI" subsystem content and embedded into the resulting profile.
2024-06-09pki: T6464: sstpc interface not reloaded when updating SSL certificate(s)Christian Breunig
The SSTPC client was not reloaded/restarted with the new SSL certificate(s) after a change in the PKI subsystem. This was due to missing dependencies.
2024-06-09pki: T6463: reverse-proxy service not reloaded when updating SSL certificate(s)Christian Breunig
The haproxy reverse proxy was not reloaded/restarted with the new SSL certificate(s) after a change in the PKI subsystem. This was due to missing dependencies.
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-23 00:41:21 +0000