Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-07-30 | vyos.util: drop custom implementations in favor of is_systemd_service_running() | Christian Poessinger | |
Commit f520182b ("vyos.util: add is_systemd_service_running() helper function") added a new helper function that can be used to check if a systemd service is running. Drop all custom implementations in favor of this library call. | |||
2021-07-29 | ipsec: T1210: add op-mode command to print Windows connection profile | Christian Poessinger | |
2021-07-26 | ipsec: T1210: extend support for iOS profile generation | Christian Poessinger | |
$ generate ipsec mac-ios-profile <connection> remote <ip> | |||
2021-07-23 | pki: T3642: Add ability to write generated certificates/keys to specified ↵ | sarthurdev | |
filenames | |||
2021-07-22 | pki: wireguard: T3642: remove obsolete op-mode script | Christian Poessinger | |
As the keys are now stored inside the CLI configuration and no longer in a file on the filesystem, this command is no longer required. Also there are dedicated CLI commands available to display the additional Wireguard information. - show interfaces wireguard wg10 - show interfaces wireguard wg10 summary | |||
2021-07-20 | ipsec: T1210: add op-mode command for macOS and iOS profile generation | Christian Poessinger | |
generate ipsec mac-ios-profile <connection> remote <ip|fqdn> will generate a matching IPSec profile which can be loaded on an iOS device. | |||
2021-07-19 | pki: wireguard: T3642: Replace/remove old Wireguard op-mode commands | sarthurdev | |
2021-07-19 | pki: wireguard: T3642: Migrate Wireguard private key directly into CLI | sarthurdev | |
Also renames peer pubkey to public-key for consistency | |||
2021-07-12 | vrf: T31: remove supefluous new-lines for each VRF instance | Christian Poessinger | |
2021-07-07 | pki: T3642: Migrate rsa-keys to PKI configuration | sarthurdev | |
2021-07-05 | pki: T3642: Support for adding SANs on certificate requests | sarthurdev | |
2021-07-04 | pki: T3642: Add standard extensions to generated certificates | sarthurdev | |
2021-07-03 | pki: T3642: Fix for correct method on encoding certificate request | sarthurdev | |
2021-07-03 | pki: T3642: Add support for signing and revoking subordinate CAs | sarthurdev | |
2021-07-02 | ipsec: T3656: T3659: Fix pass-through with ipv6. Fix op-mode ipsec commands. ↵ | sarthurdev | |
Remove python3-crypto dependency. | |||
2021-06-29 | pki: ipsec: T3642: Migrate IPSec to use PKI configuration | sarthurdev | |
2021-06-29 | pki: T3642: New PKI config and management | sarthurdev | |
2021-06-27 | op-mode: bond: T2546: implement "show interface bond * slaves" command | Christian Poessinger | |
Add implementation with XML and Python. | |||
2021-06-26 | Revert "ipsec: T3643: move swanctl.conf to /run" | Christian Poessinger | |
This reverts commit 95bbbb8bed92a60a320ff255c8b8656145f3c540. | |||
2021-06-26 | nat: nat66: T3648: Fix script logic errors and missing logic handling | jack9603301 | |
2021-06-24 | ipsec: T3643: move swanctl.conf to /run | Christian Poessinger | |
This is the completion of commit 50a742b5 ("IPSec: T3643: Fix path for swanctl.conf file") that moves the generated swanctl file from non-volatile to a volatile (tmpfs backed) storage like we do for all out configuration files. Thus it is ensured after a reboot or service deprecation there are no accidential leftovers from previous configurations stored on the system. | |||
2021-06-23 | IPSec: T3643: Fix path for swanctl.conf file | Viacheslav | |
2021-06-22 | ipsec: T3643: T2816: Update IPSec VPN op-mode commands | sarthurdev | |
2021-06-20 | Merge pull request #889 from erkin/current | Christian Poessinger | |
T3506: loadkey: Add `generate public-key-command` command | |||
2021-06-20 | Add `save` line | erkin | |
2021-06-20 | ipsec: T3617: Correct typo on encryption variable | sarthurdev | |
2021-06-20 | T3506: loadkey: Add `generate public-key-command` command | erkin | |
2021-06-18 | Merge pull request #884 from sarthurdev/opmode_ike_sa | Christian Poessinger | |
ipsec: T2816: Fix 'show vpn ike sa' when key-size is not set | |||
2021-06-18 | ping: T3634: Adding do not fragment to Ping (#885) | Cheeze-It | |
In this commit we add the do not fragment capability for ping commands. Co-authored-by: Cheeze_It <none@none.com> | |||
2021-06-17 | ipsec: T2816: Fix 'show vpn ike sa' when key-size is not set | sarthurdev | |
2021-06-15 | ipsec: T2816: T645: T3613: Migrated IPsec to swanctl, includes multiple ↵ | sarthurdev | |
selectors, and selectors with VTI. | |||
2021-06-13 | wwan: T3620: rename "wirelessmodem wlm" interfaces to new wwan interface tree | Christian Poessinger | |
2021-06-01 | op-mode: T3384: support UDP bandwidth testing | JACK | |
2021-05-28 | ipsec: T2816: IPSec python rework, includes DMVPN and VTI support | Simon | |
2021-05-22 | nat66: T2518: op-mode typo fixup | JACK | |
2021-05-18 | openconnect-server: T3559: Add restart op-command | DmitriyEshenko | |
2021-05-18 | ddns: T3254: fix incorrect update time | FileGo | |
This fixes a bug when show dynamic dns status returned (formatted) UNIX time 0. I have changed the code to use ddclient's mtime value in the cache file, which is updated on every successful sync with DDNS service as opposed to atime, which was previously used. | |||
2021-05-17 | ddclient: T3557: fix FileNotFoundError when querying status information | Christian Poessinger | |
If ddclient is not problery configured it will start up but no status file is generated. This commit checks if the status file exists before reading it. | |||
2021-05-15 | conntrack: T3535: add op-mode commands for tracked connections" | Christian Poessinger | |
2021-05-14 | op-mode: conntrack: T3535: add XML command definitions | Christian Poessinger | |
2021-04-27 | op-mode: ospfv3: T3335: re-use common vtysh_wrapper.sh wrapper | Christian Poessinger | |
Instead of renaming the OSPFv3 commands for every individual XML invocation, also re-use the common helper shell script. One source, one truth! | |||
2021-04-27 | op-mode: T2946: only call 'stty size' if in terminal | John Estabrook | |
2021-04-27 | ipsec: T3473: Decode byte csa-name for op-mode | sever-sever | |
2021-04-26 | dhcpv6-server: T3494: Get address from network to correct sorting | DmitriyEshenko | |
2021-04-25 | wireguard: T1802: add client name to configuration | Christian Poessinger | |
2021-04-24 | wireguard: T1802: generate QR code for clients on CLI | Christian Poessinger | |
generate wireguard mobile-config wg0 server wg.vyos.net address 1.2.2.2/24 WireGuard client configuration for interface: wg0 [Interface] PrivateKey = AEXrZ4b3xFVLg1lql3hy/93+d43q3+3vPdSMUGI6/Fo= Address = 1.2.2.2/24 [Peer] PublicKey = h1HkYlSuHdJN6Qv4Hz4bBzjGg5WUty+U1L7DJsZy1iE= Endpoint = wg.vyos.net:41751 AllowedIPs = 0.0.0.0/0, ::/0 The servers public key and port are automatically extracter from the running config. | |||
2021-04-21 | container: T2216: Rewrite op-mode to python | sever-sever | |
2021-04-21 | containers: T2216: add op-mode "show container network" command | Christian Poessinger | |
2021-04-14 | ipsec: T3333: Fix status for SA state op-mode | sever-sever | |
2021-04-13 | Merge pull request #801 from sever-sever/T2216-pod | Christian Poessinger | |
containers: T2216: Add podman for containers |