summaryrefslogtreecommitdiff
path: root/src/conf_mode/ipsec-settings.py
AgeCommit message (Collapse)Author
2021-09-04T3697: do not try to restart charon if it's not requiredDaniil Baturin
The root cause is that the ipsec-settings.py script is run _twice_: first from "vpn ipsec options", then from the top level "vpn" node. The case when it's not required is when: * "vpn ipsec" configuration doesn't exist yet * user configured it with "vpn ipsec options" * the ipsec-settings.py script is run first time, from "vpn ipsec options" Trying to restart charon at that stage leads to a deadlock.
2021-08-12T3697: check config.exists rather than exists_effectiveDaniil Baturin
2021-08-02T3697: explicitly wait for the charon process to respond to strokesDaniil Baturin
2021-07-27T3697: wait for charon to get started before trying to restart it.Daniil Baturin
2021-07-24T3697: fix a conditional.Daniil Baturin
2021-07-24T3697: hopefully complete fix for checking whether IPsec should start.Daniil Baturin
2021-07-23T3697: return an empty dict when IPsec isn't fully configuredDaniil Baturin
to avoid trying to wait for a daemon that shouldn't even be running.
2021-07-22T3697: check if strongswan should be running before attempting to restart it.Daniil Baturin
2021-07-13T3663: use inotify-based watching for the IPsec process restart.Daniil Baturin
2020-11-27vyos.template: T2720: always enable Jinja2 trim_blocks featureChristian Poessinger
2020-08-31configd: T2582: add scripts to include list for daemonJohn Estabrook
2020-05-29airbag: T2088: explicit enabling of the featureThomas Mangin
airbag must now be explicitly installed. the patch also allow to fully disables the installation of the logging code at setup (and not just installing and doing nothing)
2020-05-18flake8: T2475: fix a number of issue reported by flake8Thomas Mangin
2020-04-21ipsec: T2317: pass proper content variable to render()Christian Poessinger
2020-04-18ipsec: T2317: Fix typo with delimiterDmitriyEshenko
2020-04-18ipsec: T2317: Fix adding params to ipsec configuration filesDmitriyEshenko
2020-04-12template: T2230: use render to generate templatesThomas Mangin
convert all call to jinja to use template.render
2020-04-09util: T2226: os.system was wrongly converted to runThomas Mangin
os.system does print the ouput of the command, run() does not. A new function called call() does the printing and return the error code.
2020-04-06util: T2226: covert most calls from os.system to utilThomas Mangin
As little change a possible but the function call The behaviour should be totally unchanged.
2020-04-06ipsec: T2230: bugfix code cleanupChristian Poessinger
Commit dbc174d ("ipsec: T2230: move inlined templates to dedicated files") did not remove an inlined function.
2020-04-06ipsec: T2230: bugfix rewriting Jinja2 codeChristian Poessinger
Commit dbc174d ("ipsec: T2230: move inlined templates to dedicated files") did not alter existing code which was used for template processing.
2020-04-05ipsec: T2230: move inlined templates to dedicated filesChristian Poessinger
2020-01-14ipsec: T1959: Check file existence before changesDmitriyEshenko
2019-12-29l2tp: T1918: Add check and create tunnels folderDmitriyEshenko
2019-12-05dmvpn: T1784: Add swanctl load callDmitriyEshenko
2019-08-31[l2tp ipsec] T1605: Changed ipsec marking only for inbound policy, all ↵DmitriyEshenko
functionality must saved
2019-07-25[accel-l2tp] - T834: l2tp implementationhagbard
- node.def deletion for show remote-access - IPSec interface checking for L2TP - IPSec x509 for l2tp - verification of outside-address to warning since it was optional in the previous config
2018-08-05T71: rename IPsec "settings" to "options" for consistency with the rest of ↵Daniil Baturin
the system.
2018-08-05T71: initial implementation of global IPsec settings.Daniil Baturin
Only disable-route-autoinstall (install_routes = yes/no) for now.