Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-07-22 | pki: https: T3642: Migrate HTTPS to use PKI configuration | sarthurdev | |
2021-07-21 | pki: openvpn: T3642: Migrate OpenVPN to PKI and refactor | sarthurdev | |
2021-07-20 | pki: eapol: T3642: Migrate EAPoL to use PKI configuration | sarthurdev | |
2021-07-20 | pki: sstp: T3642: Migrate SSTP to PKI configuration | sarthurdev | |
2021-07-20 | pki: openconnect: T3642: Migrate OpenConnect SSL to PKI configuration | sarthurdev | |
2021-07-19 | pki: wireguard: T3642: Migrate Wireguard private key directly into CLI | sarthurdev | |
Also renames peer pubkey to public-key for consistency | |||
2021-07-18 | smoketest: ospf: extend passive-interface debugging with kernel log | Christian Poessinger | |
2021-07-17 | ipsec: T2816: migrate "ipsec interfaces" to "interface" | Christian Poessinger | |
2021-07-15 | pki: ipsec: l2tp: T2816: T3642: Move IPSec/L2TP code into vpn_ipsec.py and ↵ | sarthurdev | |
update to use PKI. | |||
2021-07-11 | smoketest: ospf: change passive-interface debugging | Christian Poessinger | |
2021-07-07 | pki: T3642: Migrate rsa-keys to PKI configuration | sarthurdev | |
2021-07-04 | smoketest: pki: adjust to "type" node removal on CLI | Christian Poessinger | |
A certificate "type" can be auto derived from the certificate itself. | |||
2021-07-03 | ipsec: T2816: rework IKE and ESP key assignment | Christian Poessinger | |
Commit 2d79a500 ("ipsec: T2816: add Jinja2 converter for ESP/IKE groups to string") added a Jinja2 helper function which can be used to transform VyOS CLI ESP and IKE key proposals into a strongSwan compatible string cipher. This commit changes the IPSec implementation to make use of this new Jinja2 filter fubction/Python helper. This is required base work for better automated tests (smoketests) but also for an IKEv2 road-warrior setup. | |||
2021-07-02 | smoketest: ipam: add site2site x509 auth testcase | Christian Poessinger | |
2021-07-02 | smoketest: ipsec: place peer local-address into variable | Christian Poessinger | |
2021-07-02 | smoketest: ipsec: IKE and ESP settings can be done one time in setUp() | Christian Poessinger | |
2021-07-01 | Merge branch 'pki_ipsec' of https://github.com/sarthurdev/vyos-1x into pki-cli | Christian Poessinger | |
* 'pki_ipsec' of https://github.com/sarthurdev/vyos-1x: pki: ipsec: T3642: Update migration script to account for file permission issues pki: ipsec: T3642: Migrate IPSec to use PKI configuration pki: T3642: New PKI config and management | |||
2021-06-30 | smoketest: ipsec: add more re-usable variable definitions throughout the test | Christian Poessinger | |
2021-06-30 | dhcpdv6: T3658: add support for dhcpdv6 fixed-prefix6 | Brandon Stepler | |
2021-06-29 | pki: ipsec: T3642: Migrate IPSec to use PKI configuration | sarthurdev | |
2021-06-29 | pppoe-server: T3405: Add interface cache feature | DmitriyEshenko | |
2021-06-29 | smoketest: bgp: T3657: test ipv6 link-local peering | Christian Poessinger | |
2021-06-29 | pki: T3642: New PKI config and management | sarthurdev | |
2021-06-26 | Revert "ipsec: T3643: move swanctl.conf to /run" | Christian Poessinger | |
This reverts commit 95bbbb8bed92a60a320ff255c8b8656145f3c540. | |||
2021-06-25 | smoketest: ospf: sometimes the passive-interface-test fails - add debug code | Christian Poessinger | |
2021-06-25 | openvpn: T1704: drop deprecated disable-ncp option | Christian Poessinger | |
2021-06-25 | smoketest: bonding: T3649: fix typo in testcase name | Christian Poessinger | |
2021-06-25 | T3649: bonding: Add additional hash policies | DmitriyEshenko | |
2021-06-24 | ipsec: T3643: move swanctl.conf to /run | Christian Poessinger | |
This is the completion of commit 50a742b5 ("IPSec: T3643: Fix path for swanctl.conf file") that moves the generated swanctl file from non-volatile to a volatile (tmpfs backed) storage like we do for all out configuration files. Thus it is ensured after a reboot or service deprecation there are no accidential leftovers from previous configurations stored on the system. | |||
2021-06-21 | smoketest: ensure /config is a directory | Christian Poessinger | |
2021-06-20 | smoketest: T3637: add testcase for vrf bind-to-all option | Christian Poessinger | |
2021-06-17 | policy: T3631: migrate "set extcommunity-rt|soo" to "set extcommunity rt|soo" | Christian Poessinger | |
migrate "set extcommunity-rt" and "set extcommunity-soo" to "set extcommunity rt|soo" to match FRR syntax. This also makes it easier to implement the "bandwidth" extended community. | |||
2021-06-16 | bgp: T3624: add "bandwidth" bestpath option | Christian Poessinger | |
2021-06-16 | policy: T3624: add extended community bandwith support to route-map | Christian Poessinger | |
2021-06-16 | policy: T3631: migrate "set extcommunity-rt/soo" to "set extcommunity rt|soo" | Christian Poessinger | |
Thi adds a new configuration level "set extcommunity" which then holds rt and soo als leaf-nodes below. This is the foundational work required to properly implement T3624 ("BGP: add support for extended community bandwidth definition") | |||
2021-06-15 | ipsec: T2816: T645: T3613: Migrated IPsec to swanctl, includes multiple ↵ | sarthurdev | |
selectors, and selectors with VTI. | |||
2021-06-13 | pppoe: T3621: validate that both username and password are set | Christian Poessinger | |
A validator is missing checking that if authentication is used on a PPPoE interface, both username and password are set. (cherry picked from commit 0361c3ac449f183476f7aee31439417d9f7f8012) | |||
2021-06-13 | Merge pull request #878 from sarthurdev/ipsec_dhcp_smoketest | Christian Poessinger | |
smoketest: ipsec: T1501: Use VLAN in smoketest to avoid lease from QEMU built-in DHCP server | |||
2021-06-13 | smoketest: ipsec: T1501: Use VLAN in smoketest to avoid lease from QEMU ↵ | sarthurdev | |
built-in DHCP server | |||
2021-06-13 | wwan: T3620: rename "wirelessmodem wlm" interfaces to new wwan interface tree | Christian Poessinger | |
2021-06-12 | smoketest: ipsec: T1501: Add smoketest for failed dhcp-interface scenario | sarthurdev | |
2021-06-07 | smoketest: ipsec: chmod +x testcase | Christian Poessinger | |
2021-06-06 | nhrp: T3599: Migrate NHRP to XML/Python | sarthurdev | |
2021-06-02 | tunnels: T3592: Set default TTL to 64 | sever-sever | |
Set default TTL value for tunnels from 0 to 64 There are a lot of situation when default value 0 (inherit) not work properly when you have routing configuration for OSPF or BGP over the tunnels. To fix it you need explicit set TTL value other then 0. Or hardcode another value as default. | |||
2021-05-28 | ipsec: T2816: IPSec python rework, includes DMVPN and VTI support | Simon | |
2021-05-25 | smoketest: conntrack: extend tests by parsing iptables rules for nfs/sqlnet | Christian Poessinger | |
2021-05-25 | smoketest: add initial test for "system conntrack" subsystem | Christian Poessinger | |
2021-05-24 | isis: T3576: add IPv6 support | Christian Poessinger | |
2021-05-24 | isis: T3417: add CLI node to enable "log-adjacency-changes" | Christian Poessinger | |
2021-05-24 | smoketest: isis: T3417: test domain and area-password settings | Christian Poessinger | |