vyos-1x.git - VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git)

Age	Commit message (Collapse)	Author
2021-12-31	smoketest: ipsec: T4126: verify configured priority	Christian Poessinger

2021-12-31	smoketest: ipsec: make use of setUpClass()	Christian Poessinger

2021-11-21	smoketest: ipsec: T4010: fix dmvpn template profile rekey_time	Christian Poessinger
	Commit d75403f78aef0 ("dmvpn: T4010: Fix template ipsec profile rekey_time") fixed an issue where the old IKE life_time config option was used. This no longer exists and us named rekey_time for IKE. This commit fixes the expected smoketest result.
2021-09-21	smoketest: ipsec: T1441: adjust to latest VTI/XFRM interface changes	Christian Poessinger
	Commit d768aee9 ("ipsec: T1441: Clean up vti-up-down script for XFRM interfaces") removed a parameter from the updown scripts which is no longer necessary as XFRM interfaces are superior to VTI interfaces b/c they use dynamic endpoints by default.
2021-09-18	smoketest: ipsec: only delete nhrp path where it is used	Christian Poessinger

2021-09-18	ipsec: vti: T3831: avoid usinf xfrm if_id 0 - implement shift by one	Christian Poessinger
	The key defaults to 0 and will match any policies which similarly do not have a lookup key configuration. This means that a vti0 named interface will pull in all traffic and others will stop working. Thus we simply shift the key by one to also support a vti0 interface.
2021-08-19	smoketest: ipsec: T3764: extend testcases for IKE/ESP lifetime	Christian Poessinger

2021-07-17	ipsec: T2816: migrate "ipsec interfaces" to "interface"	Christian Poessinger

2021-07-03	ipsec: T2816: rework IKE and ESP key assignment	Christian Poessinger
	Commit 2d79a500 ("ipsec: T2816: add Jinja2 converter for ESP/IKE groups to string") added a Jinja2 helper function which can be used to transform VyOS CLI ESP and IKE key proposals into a strongSwan compatible string cipher. This commit changes the IPSec implementation to make use of this new Jinja2 filter fubction/Python helper. This is required base work for better automated tests (smoketests) but also for an IKEv2 road-warrior setup.
2021-07-02	smoketest: ipam: add site2site x509 auth testcase	Christian Poessinger

2021-07-02	smoketest: ipsec: place peer local-address into variable	Christian Poessinger

2021-07-02	smoketest: ipsec: IKE and ESP settings can be done one time in setUp()	Christian Poessinger

2021-06-30	smoketest: ipsec: add more re-usable variable definitions throughout the test	Christian Poessinger

2021-06-26	Revert "ipsec: T3643: move swanctl.conf to /run"	Christian Poessinger
	This reverts commit 95bbbb8bed92a60a320ff255c8b8656145f3c540.
2021-06-24	ipsec: T3643: move swanctl.conf to /run	Christian Poessinger
	This is the completion of commit 50a742b5 ("IPSec: T3643: Fix path for swanctl.conf file") that moves the generated swanctl file from non-volatile to a volatile (tmpfs backed) storage like we do for all out configuration files. Thus it is ensured after a reboot or service deprecation there are no accidential leftovers from previous configurations stored on the system.
2021-06-15	ipsec: T2816: T645: T3613: Migrated IPsec to swanctl, includes multiple ↵	sarthurdev
	selectors, and selectors with VTI.
2021-06-13	smoketest: ipsec: T1501: Use VLAN in smoketest to avoid lease from QEMU ↵	sarthurdev
	built-in DHCP server
2021-06-12	smoketest: ipsec: T1501: Add smoketest for failed dhcp-interface scenario	sarthurdev

2021-06-07	smoketest: ipsec: chmod +x testcase	Christian Poessinger

2021-05-28	ipsec: T2816: IPSec python rework, includes DMVPN and VTI support	Simon