| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2021-11-21 | smoketest: ipsec: T4010: fix dmvpn template profile rekey_time | Christian Poessinger | |
| Commit d75403f78aef0 ("dmvpn: T4010: Fix template ipsec profile rekey_time") fixed an issue where the old IKE life_time config option was used. This no longer exists and us named rekey_time for IKE. This commit fixes the expected smoketest result. | |||
| 2021-09-21 | smoketest: ipsec: T1441: adjust to latest VTI/XFRM interface changes | Christian Poessinger | |
| Commit d768aee9 ("ipsec: T1441: Clean up vti-up-down script for XFRM interfaces") removed a parameter from the updown scripts which is no longer necessary as XFRM interfaces are superior to VTI interfaces b/c they use dynamic endpoints by default. | |||
| 2021-09-18 | smoketest: ipsec: only delete nhrp path where it is used | Christian Poessinger | |
| 2021-09-18 | ipsec: vti: T3831: avoid usinf xfrm if_id 0 - implement shift by one | Christian Poessinger | |
| The key defaults to 0 and will match any policies which similarly do not have a lookup key configuration. This means that a vti0 named interface will pull in all traffic and others will stop working. Thus we simply shift the key by one to also support a vti0 interface. | |||
| 2021-08-19 | smoketest: ipsec: T3764: extend testcases for IKE/ESP lifetime | Christian Poessinger | |
| 2021-07-17 | ipsec: T2816: migrate "ipsec interfaces" to "interface" | Christian Poessinger | |
| 2021-07-03 | ipsec: T2816: rework IKE and ESP key assignment | Christian Poessinger | |
| Commit 2d79a500 ("ipsec: T2816: add Jinja2 converter for ESP/IKE groups to string") added a Jinja2 helper function which can be used to transform VyOS CLI ESP and IKE key proposals into a strongSwan compatible string cipher. This commit changes the IPSec implementation to make use of this new Jinja2 filter fubction/Python helper. This is required base work for better automated tests (smoketests) but also for an IKEv2 road-warrior setup. | |||
| 2021-07-02 | smoketest: ipam: add site2site x509 auth testcase | Christian Poessinger | |
| 2021-07-02 | smoketest: ipsec: place peer local-address into variable | Christian Poessinger | |
| 2021-07-02 | smoketest: ipsec: IKE and ESP settings can be done one time in setUp() | Christian Poessinger | |
| 2021-06-30 | smoketest: ipsec: add more re-usable variable definitions throughout the test | Christian Poessinger | |
| 2021-06-26 | Revert "ipsec: T3643: move swanctl.conf to /run" | Christian Poessinger | |
| This reverts commit 95bbbb8bed92a60a320ff255c8b8656145f3c540. | |||
| 2021-06-24 | ipsec: T3643: move swanctl.conf to /run | Christian Poessinger | |
| This is the completion of commit 50a742b5 ("IPSec: T3643: Fix path for swanctl.conf file") that moves the generated swanctl file from non-volatile to a volatile (tmpfs backed) storage like we do for all out configuration files. Thus it is ensured after a reboot or service deprecation there are no accidential leftovers from previous configurations stored on the system. | |||
| 2021-06-15 | ipsec: T2816: T645: T3613: Migrated IPsec to swanctl, includes multiple ↵ | sarthurdev | |
| selectors, and selectors with VTI. | |||
| 2021-06-13 | smoketest: ipsec: T1501: Use VLAN in smoketest to avoid lease from QEMU ↵ | sarthurdev | |
| built-in DHCP server | |||
| 2021-06-12 | smoketest: ipsec: T1501: Add smoketest for failed dhcp-interface scenario | sarthurdev | |
| 2021-06-07 | smoketest: ipsec: chmod +x testcase | Christian Poessinger | |
| 2021-05-28 | ipsec: T2816: IPSec python rework, includes DMVPN and VTI support | Simon | |
 |
index : vyos-1x.git | |
| VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git) |
| summaryrefslogtreecommitdiff |