Age | Commit message (Collapse) | Author |
|
(cherry picked from commit 358831c18fcf2937f4bf85a55fa0c8bdc802d817)
|
|
(cherry picked from commit f2bdd26c36e7074d093e001656bc649b7c7426d3)
|
|
(cherry picked from commit 9f6ca1e489c0498bfa90ca027d1d7419d4e422b8)
|
|
Note that one can also use the mutation Show, with path
["configuration", "json", "pretty"]; that command will obscure passwords
and keys, and we may want to disallow this version.
(cherry picked from commit a05866e5301934f61a3c83550f91926e03bfc7b0)
|
|
(cherry picked from commit 1f926e1b1fe7d82113be55916a55ca7e3cceac76)
|
|
(cherry picked from commit f36ac55e5355b170b181eef999be616700edffc1)
|
|
(cherry picked from commit b675c8b6187c4b77759e3f96c9c92dd382dabeae)
|
|
filesystem: T3946: root partition auto resize as a service
|
|
|
|
|
|
sstp: T2661: Delete certificate files redundancy check
|
|
(cherry picked from commit ee53af35eb1edb6167a65b290f25a95b2a586498)
|
|
(cherry picked from commit ef7f5ca2fd2c0113875dbd9143342e925cf00621)
|
|
(cherry picked from commit fb2dc58d91bd93ba3aaa63d46e49e6609c18d46f)
|
|
(cherry picked from commit 6de15a4162224dbf2d911bce0a9d4eaa396071a3)
|
|
(cherry picked from commit f4ec1a88b655e64372d30166b69021e2a17b2a90)
|
|
|
|
(cherry picked from commit 82ea3b4f3c12023ce17f1062785b6238f457673d)
|
|
|
|
|
|
interfaces
|
|
ipsec: T3643: Fix for show tunnels with state down
|
|
We need to use a temporary variable when validating the tuple if address
is used. If not the else branch will always add the tuple to the list of
addresses used for listen-address.
(cherry picked from commit d13b91462487e090b32c0d1ecf9139a2271b4837)
|
|
(cherry picked from commit eceaa3a787929f5a514b9c45da52936c0d4d4a54)
|
|
Custom OpenVPN options moved back to the command line from a
configuration file. This should keep full compatibility with the
`crux` branch, and allows to avoid mistakes with parsing options
that contain `--` in the middle.
The only smart part of this - handling a `push` option. Because
of internal changes in OpenVPN, previously it did not require an
argument in the double-quotes, but after version update in
`equuleus` and `sagitta` old syntax became invalid. So, all the
`push` options are processed to add quotes. The solution is still
not complete, because if a single config line contains `push` with
other options, it will not work, but it is better than nothing.
(cherry picked from commit 3fd2ff423b6c6e992b2ed531c7ba99fb9e1a2123)
|
|
(cherry picked from commit 77eca49bffede005f546b7d9d3660bf2e32c7e8e)
|
|
(cherry picked from commit 8915a19f7761253b7bdf6ca847069539ee33851d)
|
|
(cherry picked from commit 9e2694b24b06d928240522322c9a6d60c7a7d290)
|
|
(cherry picked from commit 3d00140453b3967370c77ddd9dac4af223a7ddce)
|
|
(cherry picked from commit 73be449b1cd09f3ca86400753630fb4804fbeca7)
|
|
(cherry picked from commit dc9a2821d063a96681d6cb1d962618829b71937d)
|
|
(cherry picked from commit 889e16a77517549fb833a90d047455533be02f06)
|
|
(cherry picked from commit 5b69aad5bfe1fd1dfc51afb1d4b6323028009deb)
|
|
(cherry picked from commit b168b4cc7da456f14714d917cdc7a1c6b8df9af5)
|
|
FastAPI 0.65.2 checks content-type request header before assuming JSON,
closing a well-known loophole. This requires a modification of the code
providing backwards compatibility of multipart forms.
(cherry picked from commit 3a9041e2d4d4a48ba7c01439e69c5f86a4a850c2)
|
|
Replace the Flask micro-framework with FastAPI, in order to support
extensions to the API and OpenAPI 3.* generation. This change will
remain backwards compatible with previous versions. Notably, the
multipart forms version of requests remain supported; in addition
application/json requests are now natively supported.
(cherry picked from commit 0125fff200efe3259aa25953e7505f69679261f8)
|
|
(cherry picked from commit 5d39a113bdef82e201aa43f848217c30db2f6fd9)
|
|
When `dhclient` with the `-x` option is used to stop running DHCP client
with a lease file that is not the same as in the new `dhclient` process,
it requires a `-lf` argument with a path to the old lease file to find
information about old/active leases and process them according to
instructions and config.
This commit adds the option to the `02-vyos-stopdhclient` hook, which
allows to properly process `dhclient` instances started in different
ways.
(cherry picked from commit 393970f9ee5b3dfc58e0e999d3d5941a198b2c6f)
|
|
|
|
error
(cherry picked from commit 17215846b512851e7df8cdfcfc06c18b1d27f763)
|
|
We can no longer use bash veriable string code vor string manipulation. Move to
a more robust "cut" implementation.
(cherry picked from commit 513e951f3e1358ec6ff5424d03e8f4e9aa7c3388)
|
|
(cherry picked from commit f227987ccf41e01d4ddafb6db7b36ecf13148c78)
|
|
The current op-mode for "show vpn ipsec sa" shows only tunnels
which established (parent SA) and installed (child SA)
If tunnel not installed it can't show correct information about
this tunnel, in that case it can shows only parent sa state
Get codebase for "show_ipsec_sa.py" (op-mode) from 1.4 branch
where it was fixed.
|
|
The current uptime for tunnels is getting from parent SA
That is incorrect as we should get value from child SA
|
|
This prevents a failover from MASTER -> BACKUP when changing any MASTER related
configuration.
(cherry picked from commit 2c82c9acbde2ccca9c7bb5e646a45fd646463afe)
|
|
|
|
|
|
dhclient hooks: T3920: avoid 'too many args' error when no vrf
|
|
(cherry picked from commit 78cfb949cc6bceab744271cf23f269276b178182)
|
|
(cherry picked from commit 9c825a3457a88a4eebc6475f92332822e5102889)
|