Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-09-03 | Merge pull request #49 from hagbard-01/current | hagbard-01 | |
T793: wireguard: implement fwmark, pre-shared key | |||
2018-09-02 | Merge remote-tracking branch 'upstream/current' into T793 | hagbard | |
2018-09-02 | T793: wireguard preshared-key implementation | hagbard | |
- the psk is only read from a file, due to sudo it's redirection doesn't work file is created in /tmp (it's tmpfs), wg comand executed and the psk file is deleted again, to avoid leakage of the psk. It's create umaks(077) and root:root | |||
2018-09-02 | regex for endpoint removed | hagbard | |
2018-09-02 | T825: add system 8-to-9 migration script | Christian Poessinger | |
2018-09-02 | Merge branch 'current' of github.com:vyos/vyos-1x into current | Daniil Baturin | |
2018-09-02 | T824: add Python bindings for the rename_node function to vyos.configtree | Daniil Baturin | |
2018-09-02 | mdns_repeater: add 'disable' option | Christian Poessinger | |
2018-09-02 | mdns_repeater: cleanup python implementation | Christian Poessinger | |
2018-09-02 | T823: add a new DHCP op mode script, only capable of showing leases now. | Daniil Baturin | |
2018-09-02 | T823: add dependency on python3-six | Daniil Baturin | |
This is needed because this dependency is missing in the python3--isc-dhcp-leases package from stretch. When that issue is resolved, the dependency can be safely removed. | |||
2018-09-02 | T822: add sudo to tcpdump commands | Daniil Baturin | |
to make them use correct PATH now, and to enable getting rid of capabilities later. | |||
2018-09-01 | snmp.py: improve daemon startup | Christian Poessinger | |
The previous implementation used a hardcoded 2 seconds sleep until the daemon configuration was rendered by snmpd (user/password stuff). Waiting 2 seconds is error prone and was replaced by reading the configuration file until it shows a marker indicating that the file was properly processed by snmpd. | |||
2018-09-01 | T427,T793 wireguard support | hagbard | |
- regex added to check endpoint as pattern IP:port - T793: preparation for the use preshared key | |||
2018-09-01 | T427: wireguard support | hagbard | |
* renamed opmode script wireguard_key.py to wireguard.py | |||
2018-09-01 | Merge remote-tracking branch 'upstream/current' into T793 | hagbard | |
2018-09-01 | snmp.py: beautify generated snmp.conf #2 | Christian Poessinger | |
2018-09-01 | snmp.py: bugfix - CLI client community node was not processed | Christian Poessinger | |
2018-09-01 | snmp.py: bugfix writing rocommunity string in config | Christian Poessinger | |
2018-09-01 | snmp.py: beautify generated snmp.conf | Christian Poessinger | |
2018-09-01 | T771: snmp.px: reduce syslog noise | Christian Poessinger | |
2018-08-31 | Merge branch 'dhcpv6-server-rewrite' into current | Christian Poessinger | |
* dhcpv6-server-rewrite: T811: dhcpv6_server.py: add missing validators when comitting config changes dhcp_server.py: cleanup bcast_relay.py: remove obsolete import statement vyos: package: bugfix in validate.py for is_subnet_connected() T778: dhcpv6-server: XML and Python rewrite | |||
2018-08-31 | T811: dhcpv6_server.py: add missing validators when comitting config changes | Christian Poessinger | |
2018-08-31 | dhcp_server.py: cleanup | Christian Poessinger | |
2018-08-31 | bcast_relay.py: remove obsolete import statement | Christian Poessinger | |
2018-08-31 | vyos: package: bugfix in validate.py for is_subnet_connected() | Christian Poessinger | |
2018-08-31 | Merge remote-tracking branch 'upstream/current' into T793 | hagbard | |
2018-08-31 | T793: preshared key op-mode parts | hagbard | |
2018-08-30 | T778: dhcpv6-server: XML and Python rewrite | Christian Poessinger | |
2018-08-30 | dhcp_server.py: rework verify() error messages/error checking | Christian Poessinger | |
Commit 067a6b1524 ("vyos: package: extend validator by is_subnet_connected()") added a mechanism to probe if a given IPv4/IPv6 address is connected to any interface on the subnet - or is part of this subnet. We now use this call instead of producing more and more biler-plate code! | |||
2018-08-30 | vyos: package: extend validator by is_subnet_connected() | Christian Poessinger | |
Verify given IPv4/IPv6 subnet is connected to any interface on this system. Required by e.g. DHCP server that we have for IPv4 and IPv6. | |||
2018-08-30 | T813: fix the check for duplicate VRIDs on the same interface (patch by ↵ | Daniil Baturin | |
Watcher7). | |||
2018-08-29 | snmp.py: only write 'oldEngineID' to config if v3 is enabled | Christian Poessinger | |
2018-08-29 | T733: snmp.py: switch to new IP address validators | Christian Poessinger | |
Commit a30dac7c2 ("vyos package: add IP address validators") added system wide Python validators for IP addresses. Remove duplicated code and switch to single source. | |||
2018-08-29 | tftp_server.py: switch to new IP address validators | Christian Poessinger | |
Commit a30dac7c2 ("vyos package: add IP address validators") added system wide Python validators for IP addresses. Remove duplicated code and switch to a single source. | |||
2018-08-29 | vyos package: add IP address validators | Christian Poessinger | |
* is_addr_assigned(addr) - Test if address is assigned to ANY interface on the system * is_ipv4(addr) - Test if it is an IPv4 address, both network and host * is_ipv6(addr) - Test if it is an IPv6 address, both network and host | |||
2018-08-29 | dhcp_server.py: beautify error messages generated in verify() | Christian Poessinger | |
2018-08-29 | dhcp_server.py: check if AF_INET address is configure before using it in ↵ | Christian Poessinger | |
verify() | |||
2018-08-29 | dhcp_server.py: fix KeyError in verify() | Christian Poessinger | |
2018-08-29 | dhcp_server.py: improve handling of 'dhcpd.leases' file | Christian Poessinger | |
If there was yet no lease file present, dhcpd refused to start. Lease file is created if required. Ususally this is handeled by the isc-dhcp-server init script but we use our own path (for persistance) of that file. | |||
2018-08-28 | bcast-relay.xml: move priority from tagNode to base node | Christian Poessinger | |
2018-08-28 | T778: harden dhcp_server.py for non existing files | Christian Poessinger | |
2018-08-28 | T810: bugfix broadcast-relay address validator, add 'disable' functionality | Christian Poessinger | |
Whole broadcast relay service can be temporary disabled via set service broadcast-relay disable Individual instances of the broadcast relay service can be disabled set service broadcast-relay id <n> disable | |||
2018-08-28 | T793: changed op-mode script from wireguard_key.py to wireguard.py | hagbard | |
2018-08-28 | dhcp_server.py: issue warning and don't generate config if service is disabled | Christian Poessinger | |
2018-08-28 | dhcp_server.py: rename dictionary key 'disable' to 'disabled' | Christian Poessinger | |
2018-08-27 | Merge branch 'dhcp-server-rewrite' into current | Christian Poessinger | |
2018-08-27 | T778: T782: dhcp-server: XML and Python rewrite | Christian Poessinger | |
This commit changes in addtion the DHCP server config syntax as defined in "T782: Cleanup dhcp-server configuration". Replace boolean parameter from the folowing nodes and make it valueless. This requires a migration script which is tracked with this task * set service dhcp-server shared-network-name <xyz> subnet 172.31.0.0/24 ip-forwarding enable (true|false) * set service dhcp-server shared-network-name <xyz> authoritative (true|false) * set service dhcp-server disabled (true|false) * set service dhcp-server dynamic-dns-update enable (true|fals) * set service dhcp-server hostfile-update (enable|disable) Replace the nested start/stop ip address from "subnet 172.31.0.0/24 start 172.31.0.101 stop 172.31.0.149" to "subnet 172.31.0.0/24 range <foo> start" and "subnet 172.31.0.0/24 range <foo> stop" where foo can be any character or number. In addition the vyatta-cfg-dhcp-server package used it's own init/config file for service startup. This has been migrated to the vanilla Debian files. Copy 'on-dhcp-event.sh' from vyatta-cfg-shcp-server package commit 4749e648bca6. | |||
2018-08-27 | T793: wiregurard preshared-key op-mode script and interface implementation | hagbard | |
2018-08-27 | T793: generate and show psk implemented in python script | hagbard | |