Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-09-04 | T3697: do not try to restart charon if it's not required | Daniil Baturin | |
The root cause is that the ipsec-settings.py script is run _twice_: first from "vpn ipsec options", then from the top level "vpn" node. The case when it's not required is when: * "vpn ipsec" configuration doesn't exist yet * user configured it with "vpn ipsec options" * the ipsec-settings.py script is run first time, from "vpn ipsec options" Trying to restart charon at that stage leads to a deadlock. | |||
2021-08-12 | T3697: check config.exists rather than exists_effective | Daniil Baturin | |
2021-08-02 | T3697: explicitly wait for the charon process to respond to strokes | Daniil Baturin | |
2021-07-27 | T3697: wait for charon to get started before trying to restart it. | Daniil Baturin | |
2021-07-24 | T3697: fix a conditional. | Daniil Baturin | |
2021-07-24 | T3697: hopefully complete fix for checking whether IPsec should start. | Daniil Baturin | |
2021-07-23 | T3697: return an empty dict when IPsec isn't fully configured | Daniil Baturin | |
to avoid trying to wait for a daemon that shouldn't even be running. | |||
2021-07-22 | T3697: check if strongswan should be running before attempting to restart it. | Daniil Baturin | |
2021-07-13 | T3663: use inotify-based watching for the IPsec process restart. | Daniil Baturin | |
2020-11-27 | vyos.template: T2720: always enable Jinja2 trim_blocks feature | Christian Poessinger | |
2020-08-31 | configd: T2582: add scripts to include list for daemon | John Estabrook | |
2020-05-29 | airbag: T2088: explicit enabling of the feature | Thomas Mangin | |
airbag must now be explicitly installed. the patch also allow to fully disables the installation of the logging code at setup (and not just installing and doing nothing) | |||
2020-05-18 | flake8: T2475: fix a number of issue reported by flake8 | Thomas Mangin | |
2020-04-21 | ipsec: T2317: pass proper content variable to render() | Christian Poessinger | |
2020-04-18 | ipsec: T2317: Fix typo with delimiter | DmitriyEshenko | |
2020-04-18 | ipsec: T2317: Fix adding params to ipsec configuration files | DmitriyEshenko | |
2020-04-12 | template: T2230: use render to generate templates | Thomas Mangin | |
convert all call to jinja to use template.render | |||
2020-04-09 | util: T2226: os.system was wrongly converted to run | Thomas Mangin | |
os.system does print the ouput of the command, run() does not. A new function called call() does the printing and return the error code. | |||
2020-04-06 | util: T2226: covert most calls from os.system to util | Thomas Mangin | |
As little change a possible but the function call The behaviour should be totally unchanged. | |||
2020-04-06 | ipsec: T2230: bugfix code cleanup | Christian Poessinger | |
Commit dbc174d ("ipsec: T2230: move inlined templates to dedicated files") did not remove an inlined function. | |||
2020-04-06 | ipsec: T2230: bugfix rewriting Jinja2 code | Christian Poessinger | |
Commit dbc174d ("ipsec: T2230: move inlined templates to dedicated files") did not alter existing code which was used for template processing. | |||
2020-04-05 | ipsec: T2230: move inlined templates to dedicated files | Christian Poessinger | |
2020-01-14 | ipsec: T1959: Check file existence before changes | DmitriyEshenko | |
2019-12-29 | l2tp: T1918: Add check and create tunnels folder | DmitriyEshenko | |
2019-12-05 | dmvpn: T1784: Add swanctl load call | DmitriyEshenko | |
2019-08-31 | [l2tp ipsec] T1605: Changed ipsec marking only for inbound policy, all ↵ | DmitriyEshenko | |
functionality must saved | |||
2019-07-25 | [accel-l2tp] - T834: l2tp implementation | hagbard | |
- node.def deletion for show remote-access - IPSec interface checking for L2TP - IPSec x509 for l2tp - verification of outside-address to warning since it was optional in the previous config | |||
2018-08-05 | T71: rename IPsec "settings" to "options" for consistency with the rest of ↵ | Daniil Baturin | |
the system. | |||
2018-08-05 | T71: initial implementation of global IPsec settings. | Daniil Baturin | |
Only disable-route-autoinstall (install_routes = yes/no) for now. |