Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-08-15 | smoketest: ospf: T3757: test interface area configuration | Christian Poessinger | |
2021-08-15 | smoketest: conntrack: Update smoketests for new conntrack modules syntax | erkin | |
2021-08-15 | Merge pull request #944 from sever-sever/T3702 | Christian Poessinger | |
pbr: T3702: Add rules match fwmark | |||
2021-08-14 | smoketest: shim: wait for commit to be completed | Christian Poessinger | |
This completes commit e7d841d285 ("smoketest: shim: remove superfluous sleep() in getFRRconfig()"). | |||
2021-08-14 | smoketest: shim: remove superfluous sleep() in getFRRconfig() | Christian Poessinger | |
The sleep was intended to handle a FRR issue where the config was/is somehow now available in vtysh even with the commit was done. This rather feels like a race-condition and is fixed in the subsequent commit. | |||
2021-08-11 | bgp: evpn: T3739: add prefix-list match support | Christian Poessinger | |
FRR 7.5.1 supports: vyos(config-route-map)# match evpn default-route default EVPN type-5 route rd Route Distinguisher route-type Match route-type vni Match VNI This commit adds a proper VyOS CLI abstraction. | |||
2021-08-11 | smoketest: ospf: add logger to passive-interface test | Christian Poessinger | |
2021-08-08 | smoketest: rpki: remporary disable SSH based connection testing due to FRR bug | Christian Poessinger | |
see: https://github.com/FRRouting/frr/issues/7978 | |||
2021-08-02 | pbr: T3702: Add rules match fwmark | Viacheslav | |
2021-07-30 | Merge pull request #949 from sever-sever/T1176-curr | Christian Poessinger | |
bgp: T1176: Add solo option for neighbor | |||
2021-07-30 | router-advert: T2745: use template common coding style in for loops | Christian Poessinger | |
2021-07-30 | bgp: T1176: Add solo option for neighbor | Viacheslav | |
2021-07-26 | smoketest: config: azure: also utilize "default-esp-group" feature | Christian Poessinger | |
2021-07-23 | login: T3699: verify system username does not conflict with Linux base users | Christian Poessinger | |
(cherry picked from commit 7292631373ea50f9908796ef2eda32e672d1df2e) | |||
2021-07-22 | ipsec: T2816: remove "auto-update" CLI option | Christian Poessinger | |
Update/refresh of DNS records is now handled internally by Strongswan. | |||
2021-07-22 | pki: https: T3642: Migrate HTTPS to use PKI configuration | sarthurdev | |
2021-07-21 | pki: openvpn: T3642: Migrate OpenVPN to PKI and refactor | sarthurdev | |
2021-07-20 | pki: eapol: T3642: Migrate EAPoL to use PKI configuration | sarthurdev | |
2021-07-20 | pki: sstp: T3642: Migrate SSTP to PKI configuration | sarthurdev | |
2021-07-20 | pki: openconnect: T3642: Migrate OpenConnect SSL to PKI configuration | sarthurdev | |
2021-07-19 | pki: wireguard: T3642: Migrate Wireguard private key directly into CLI | sarthurdev | |
Also renames peer pubkey to public-key for consistency | |||
2021-07-18 | smoketest: ospf: extend passive-interface debugging with kernel log | Christian Poessinger | |
2021-07-17 | ipsec: T2816: migrate "ipsec interfaces" to "interface" | Christian Poessinger | |
2021-07-15 | pki: ipsec: l2tp: T2816: T3642: Move IPSec/L2TP code into vpn_ipsec.py and ↵ | sarthurdev | |
update to use PKI. | |||
2021-07-11 | smoketest: ospf: change passive-interface debugging | Christian Poessinger | |
2021-07-07 | pki: T3642: Migrate rsa-keys to PKI configuration | sarthurdev | |
2021-07-04 | smoketest: pki: adjust to "type" node removal on CLI | Christian Poessinger | |
A certificate "type" can be auto derived from the certificate itself. | |||
2021-07-03 | ipsec: T2816: rework IKE and ESP key assignment | Christian Poessinger | |
Commit 2d79a500 ("ipsec: T2816: add Jinja2 converter for ESP/IKE groups to string") added a Jinja2 helper function which can be used to transform VyOS CLI ESP and IKE key proposals into a strongSwan compatible string cipher. This commit changes the IPSec implementation to make use of this new Jinja2 filter fubction/Python helper. This is required base work for better automated tests (smoketests) but also for an IKEv2 road-warrior setup. | |||
2021-07-02 | smoketest: ipam: add site2site x509 auth testcase | Christian Poessinger | |
2021-07-02 | smoketest: ipsec: place peer local-address into variable | Christian Poessinger | |
2021-07-02 | smoketest: ipsec: IKE and ESP settings can be done one time in setUp() | Christian Poessinger | |
2021-07-01 | Merge branch 'pki_ipsec' of https://github.com/sarthurdev/vyos-1x into pki-cli | Christian Poessinger | |
* 'pki_ipsec' of https://github.com/sarthurdev/vyos-1x: pki: ipsec: T3642: Update migration script to account for file permission issues pki: ipsec: T3642: Migrate IPSec to use PKI configuration pki: T3642: New PKI config and management | |||
2021-06-30 | smoketest: ipsec: add more re-usable variable definitions throughout the test | Christian Poessinger | |
2021-06-30 | dhcpdv6: T3658: add support for dhcpdv6 fixed-prefix6 | Brandon Stepler | |
2021-06-29 | pki: ipsec: T3642: Migrate IPSec to use PKI configuration | sarthurdev | |
2021-06-29 | pppoe-server: T3405: Add interface cache feature | DmitriyEshenko | |
2021-06-29 | smoketest: bgp: T3657: test ipv6 link-local peering | Christian Poessinger | |
2021-06-29 | pki: T3642: New PKI config and management | sarthurdev | |
2021-06-26 | Revert "ipsec: T3643: move swanctl.conf to /run" | Christian Poessinger | |
This reverts commit 95bbbb8bed92a60a320ff255c8b8656145f3c540. | |||
2021-06-25 | smoketest: ospf: sometimes the passive-interface-test fails - add debug code | Christian Poessinger | |
2021-06-25 | openvpn: T1704: drop deprecated disable-ncp option | Christian Poessinger | |
2021-06-25 | smoketest: bonding: T3649: fix typo in testcase name | Christian Poessinger | |
2021-06-25 | T3649: bonding: Add additional hash policies | DmitriyEshenko | |
2021-06-24 | ipsec: T3643: move swanctl.conf to /run | Christian Poessinger | |
This is the completion of commit 50a742b5 ("IPSec: T3643: Fix path for swanctl.conf file") that moves the generated swanctl file from non-volatile to a volatile (tmpfs backed) storage like we do for all out configuration files. Thus it is ensured after a reboot or service deprecation there are no accidential leftovers from previous configurations stored on the system. | |||
2021-06-21 | smoketest: ensure /config is a directory | Christian Poessinger | |
2021-06-20 | smoketest: T3637: add testcase for vrf bind-to-all option | Christian Poessinger | |
2021-06-17 | policy: T3631: migrate "set extcommunity-rt|soo" to "set extcommunity rt|soo" | Christian Poessinger | |
migrate "set extcommunity-rt" and "set extcommunity-soo" to "set extcommunity rt|soo" to match FRR syntax. This also makes it easier to implement the "bandwidth" extended community. | |||
2021-06-16 | bgp: T3624: add "bandwidth" bestpath option | Christian Poessinger | |
2021-06-16 | policy: T3624: add extended community bandwith support to route-map | Christian Poessinger | |
2021-06-16 | policy: T3631: migrate "set extcommunity-rt/soo" to "set extcommunity rt|soo" | Christian Poessinger | |
Thi adds a new configuration level "set extcommunity" which then holds rt and soo als leaf-nodes below. This is the foundational work required to properly implement T3624 ("BGP: add support for extended community bandwidth definition") |