summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2021-11-01Merge branch 'current' into T3350-sagittazdc
2021-10-31tunnel: T3956: GRE key check must not be run on our own interface instanceChristian Poessinger
(cherry picked from commit e482377b29df05e60dbdb31d6276ae2030ffa2f9)
2021-10-31netflow: T3953: use warning if "netflow source-ip" does not exist instead of ↵Christian Poessinger
error
2021-10-31openvpn: T3834: Support for Two Factor Authentication totpKim
2021-10-31console: udev: T3954: adjust rule script to new systemd-udev versionChristian Poessinger
We can no longer use bash veriable string code vor string manipulation. Move to a more robust "cut" implementation.
2021-10-31console: T3954: bugfix RuntimeError: dictionary keys changed during iterationChristian Poessinger
2021-10-29https: pki: T3642: embed CA certificate into chain if specifiedChristian Poessinger
2021-10-28Merge pull request #1048 from sever-sever/T3951Christian Poessinger
op-mode: T3951: Fix for reset IPSec tunnels
2021-10-28IPSec: T3941: Fix uptime for tunnels sa op-modeViacheslav
The current uptime for tunnels is getting from parent SA That incorrect as we should get value from child SA
2021-10-28op-mode: T3951: Fix for reset IPSec tunnelsViacheslav
Fix for correct resetting all child SA's of the tunnel
2021-10-27vrrp: T3944: reload daemon instead of restart when already runningChristian Poessinger
This prevents a failover from MASTER -> BACKUP when changing any MASTER related configuration.
2021-10-26Merge pull request #1044 from sever-sever/T3942Christian Poessinger
op-mode: T3942: Add feature Generate IPSec debug-archive
2021-10-25op-mode: T3942: Add feature Generate IPSec debug-archiveViacheslav
2021-10-25Merge pull request #1043 from zdc/T3940-sagittaChristian Poessinger
dhclient: T3940: Added lease file argument to the `dhclient -x` call
2021-10-25Merge pull request #1037 from sever-sever/T2683Christian Poessinger
hosts: T2683: Allow multiple entries for static-host-mapping
2021-10-25Merge pull request #1042 from sever-sever/T2763Christian Poessinger
snmp: T2763: Add protocol TCP for service snmp
2021-10-25Merge pull request #1040 from dmbaturin/T3937Christian Poessinger
T3937: rewrite the "show system memory" script in Python
2021-10-25dhclient: T3940: Added lease file argument to the `dhclient -x` callzsdc
When `dhclient` with the `-x` option is used to stop running DHCP client with a lease file that is not the same as in the new `dhclient` process, it requires a `-lf` argument with a path to the old lease file to find information about old/active leases and process them according to instructions and config. This commit adds the option to the `02-vyos-stopdhclient` hook, which allows to properly process `dhclient` instances started in different ways.
2021-10-25snmp: T2763: Add protocol TCP for service snmpViacheslav
2021-10-24T3938: rewrite the uptime script in PythonDaniil Baturin
2021-10-24T3937: rewrite the "show system memory" script in PythonDaniil Baturin
2021-10-22sstp: T2566: Fix verify section for pool ipv6 onlyViacheslav
(cherry picked from commit 3af310cb76d96d08151e4cdc83abcfe15484a556)
2021-10-22hosts: T2683: Allow multiple entries for static-host-mappingViacheslav
2021-10-21strip-private: T3926: strip cisco-authentication keyChristian Poessinger
2021-10-21ddclient: T3897: bugfix smoketestChristian Poessinger
2021-10-21dhclient hooks: T3920: avoid 'too many args' error when no vrfRoss Dougherty
(cherry picked from commit 67b3dd6b4715fef266eb47e68623944f8be617e0)
2021-10-21Merge pull request #1036 from sever-sever/T3610Christian Poessinger
dhcp-server: T3610: Allow configuration for non-primary ip address
2021-10-21Merge pull request #1035 from sever-sever/T3626Christian Poessinger
dhcp: T3626: Prevent to disable only one configured network
2021-10-21tunnel: T3925: dhcp-interface was of no use - use source-interface insteadChristian Poessinger
(cherry picked from commit c1015d8ce0013719eb898b60b14ffec192b8141c)
2021-10-21tunnel: T3925: shift migration scripts by oneChristian Poessinger
Required for the dhcp-interface migration
2021-10-21dhcp-server: T3610: Allow configuration for non-primary ip addressViacheslav
2021-10-21dhcp: T3626: Prevent to disable only one configured networkViacheslav
2021-10-21use vyos read_file and write_file functionsKim Hagen
2021-10-20mdns: T3917: move avahi configuration file to /runChristian Poessinger
2021-10-20tunnel: T3921: bugfix KeyError for source-addressChristian Poessinger
(cherry picked from commit 1312068cb9743dd4d16edd37dbed9c142724997e)
2021-10-20dhcpv6-server: T3918: Fix subnets verify raise ConfigErrorViacheslav
2021-10-20Merge pull request #1030 from sarthurdev/mdns-avahiChristian Poessinger
mdns: T3917: Change to avahi-daemon for IPv4 + IPv6 mDNS repeater
2021-10-19mdns: T3917: Change to avahi-daemon for IPv4 + IPv6 mDNS repeatersarthurdev
2021-10-18Merge pull request #1022 from sever-sever/T3897Christian Poessinger
ddclient: T3897: Add option for IPv6 Dynamic DNS
2021-10-18ddclient: T3897: Add option for IPv6 Dynamic DNSViacheslav
2021-10-16l2tp: T3724: allow setting accel-ppp l2tp host-nameMarek Isalski
2021-10-15containers: T3676: Allow to set capabilitiesViacheslav
2021-10-12validators: T3868: Allow asterisk symbol in bgp-large-community-listViacheslav
2021-10-11vyos.configdict: T2653: do not merge in defaults when interface is deletedChristian Poessinger
It makes less to zero sense to blend in the default values of an interface when it is about to be deleted from the system anyways - this makes the entire dict just cleaner and easier to debug.
2021-10-10do not use PathKim Hagen
2021-10-10update writer to nicer read writeKim Hagen
2021-10-08tunnel: T3893: harden logic when validating tunnel parametersChristian Poessinger
Different types of tunnels have different keys set in get_interface_config(). Thus it should be properly verified (by e.g. using dict_search()) that the key in question esits to not raise KeyError.
2021-10-07Merge branch 'current' into 2faKim
2021-10-07openvpn: T3642: Fix password_protected checkNicolas Riebesel
2021-10-07openvpn: T3805: fix bool logic in verify_pki() for client modeChristian Poessinger
Add support for OpenVPN client mode with only the CA certificate of the server installed.