summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2020-04-21Merge pull request #363 from jjakob/dhcpv6-server-fixChristian Poessinger
dhcpv6-server: T2328: fix for service not starting
2020-04-20dhcpv6-server: T2328: fix for service not startingJernej Jakob
- fix wrong unindent - add missing 'else:' - add check for all shared-networks disabled
2020-04-20Merge pull request #361 from jjakob/openvpn-ipv6-proto-fixChristian Poessinger
openvpn: T2339: fix for IPv4 local-host addresses
2020-04-20bridge: T2320: fix to tunnelThomas Mangin
2020-04-20openvpn: T2339: fix for IPv4 local-host addressesJernej Jakob
Commit bb9f998 introduced a bug where openvpn fails to start if 'local-host' is an IPv4 address due to 'proto' wanting a IPv6 socket. This adds a conditional check and uses normal proto if it's IPv4.
2020-04-20op-mode: dhcp: T2316: bugfix TypeErrorChristian Poessinger
Commit d4b1bc0b ("op-mode: dhcp/dhcpv6: T2268: prettify output for invalid input") uses a different API which caused a TypeError. TypeError: get_leases() missing 1 required positional argument: 'leases'
2020-04-20Merge pull request #359 from sever-sever/dns-for-statChristian Poessinger
dns-forwarding: T2255: Fix op-mode error
2020-04-20Merge pull request #358 from thomas-mangin/T2320Christian Poessinger
bridge: T2320: add to tunnel
2020-04-20dns-forwarding: T2255: Fix op-mode errorsever-sever
2020-04-20bridge: T2320: add to tunnelThomas Mangin
2020-04-20http api: T2292: handle SIGTERM from systemd restart; raise SIGINTJohn Estabrook
2020-04-19l2tpv3: fix missing "," within default_config_dataChristian Poessinger
Commit 0e19d622a0410 ("bridge: T2232: move helper to vyos.validate") added a new key to the dictionary but missed out the required "," at the end.
2020-04-19openvpn: T2336: delete auth-user-pass file when interface is unused #2Christian Poessinger
2020-04-19Revert "openvpn: T2336: delete auth-user-pass file when interface is unused"Christian Poessinger
This reverts commit 26adfd6d0d03af44a03f327478199f3009f2ad3c.
2020-04-19openvpn: T2336: delete auth-user-pass file when interface is unusedChristian Poessinger
Unused means disabled or even deleted - there should be no secrets left-over.
2020-04-19openvpn: T2336: fix auth-user-pass file generationChristian Poessinger
Bug introduced in commit b36e6e6 ("openvpn: T2273: migrate from SysVinit to systemd") as not all relevant configuration files have been re-rendered into /run/openvpn
2020-04-19bridge: T2232: bugfix - remove double colon (:)Christian Poessinger
2020-04-19bridge: T2232: move helper to vyos.validateChristian Poessinger
2020-04-19ipoe-server: T2324: bugfix name-server migrationChristian Poessinger
... sometimes it seems to have been called dns-server or dns-servers :/ ... lucky me!
2020-04-19{pppoe,ipoe}-server: T2324: T2314: migrate CoA serverChristian Poessinger
2020-04-19pppoe-server: T2314: add common accel-radius-additions XML fileChristian Poessinger
2020-04-18{pppoe,ipoe}-server: rename RADIUS keyChristian Poessinger
2020-04-18ipoe-server: T2324: move template files to common accel-ppp template directoryChristian Poessinger
2020-04-18ipoe-server: T2324: migrate IPv6 client IP pool to common CLI nodesChristian Poessinger
2020-04-18Merge branch 'ipoe-server' of github.com:c-po/vyos-1x into currentChristian Poessinger
* 'ipoe-server' of github.com:c-po/vyos-1x: pppoe-server: T2314: fix RADIUS migration vyos.configtree: bugfix exception message used non existent variable ipoe-server: T2324: migrate RADIUS configuration to common CLI syntax ipoe-server: T2324: migrate IPv4/IPv6 name-servers to common node ipoe-server: T2324: remove boilerplate code and adjust to other accel implementations router-advert: rename XML/Python files for a common pattern ipoe-server: rename XML/Python files for a common pattern
2020-04-18pppoe-server: T2314: fix RADIUS migrationChristian Poessinger
2020-04-18ipoe-server: T2324: migrate RADIUS configuration to common CLI syntaxChristian Poessinger
2020-04-18Merge pull request #356 from jjakob/dhcp-op-fixChristian Poessinger
op-mode: dhcp/dhcpv6: T2268: prettify output for invalid input
2020-04-18ipoe-server: T2324: migrate IPv4/IPv6 name-servers to common nodeChristian Poessinger
2020-04-18interfaces: T2320: correctly honour create and debug optionsThomas Mangin
2020-04-18ipoe-server: T2324: remove boilerplate code and adjust to other accel ↵Christian Poessinger
implementations
2020-04-18op-mode: dhcp/dhcpv6: T2268: prettify output for invalid inputJernej Jakob
2020-04-18router-advert: rename XML/Python files for a common patternChristian Poessinger
2020-04-18ipoe-server: rename XML/Python files for a common patternChristian Poessinger
2020-04-18pppoe-server: T2314: remove debug code from migration scriptChristian Poessinger
2020-04-18Merge branch 'pppoe-server-update' of github.com:c-po/vyos-1x into currentChristian Poessinger
* 'pppoe-server-update' of github.com:c-po/vyos-1x: accel-ppp: T2314: use common tempplate for chap-secrets pppoe-server: T2314: migrate IPv6 to common CLI nodes with embeeded validation pppoe-server: T2313: bugfix Floating Point Exception pppoe-server: T2314: migrate RADIUS configuration to common CLI syntax vpn: l2tp: pptp: sstp: rename files to common pattern pppoe-server: T2314: migrate IPv4/IPv6 name-servers to common node vpn: l2tp: sstp: ease unlinking of configuration files pppoe-server: T2314: remove boilerplate code and adjust pppoe-server: T2185: migrate from SysVinit to systemd
2020-04-18accel-ppp: T2314: use common tempplate for chap-secretsChristian Poessinger
2020-04-18pppoe-server: T2314: migrate IPv6 to common CLI nodes with embeeded validationChristian Poessinger
2020-04-18Merge pull request #355 from DmitriyEshenko/fix-ipsec-sts-l2tpChristian Poessinger
ipsec: T2317: Fix typo with delimiter
2020-04-18ipsec: T2317: Fix typo with delimiterDmitriyEshenko
2020-04-18Merge pull request #354 from DmitriyEshenko/fix-ipsec-sts-l2tpChristian Poessinger
ipsec: T2317: Fix adding params to ipsec configuration files
2020-04-18pppoe-server: T2314: migrate RADIUS configuration to common CLI syntaxChristian Poessinger
2020-04-18vpn: l2tp: pptp: sstp: rename files to common patternChristian Poessinger
2020-04-18pppoe-server: T2314: migrate IPv4/IPv6 name-servers to common nodeChristian Poessinger
Instead of having "dns-server server-1|server-2" nodes and the same for IPv6 all DNS nameservers are migrated to a common name-servers node.
2020-04-18vpn: l2tp: sstp: ease unlinking of configuration filesChristian Poessinger
2020-04-18pppoe-server: T2314: remove boilerplate code and adjustChristian Poessinger
2020-04-18pppoe-server: T2185: migrate from SysVinit to systemdChristian Poessinger
2020-04-18dns-forwarding: T2318: bugfix migration scriptChristian Poessinger
Commit bbea850ea5f ("ifconfig: T2057: remove need for interface-types.json") called the Interface() class with a wrong input variable, this caused the following error: Traceback (most recent call last): File "/opt/vyatta/etc/config-migrate/migrate/dns-forwarding/1-to-2", line 64, in <module> raise ValueError(f'Invalid interface name {intf}') ValueError: Invalid interface name eth0 vif 202
2020-04-18ipsec: T2317: Fix adding params to ipsec configuration filesDmitriyEshenko
2020-04-17wireless: T2306: Add new cipher suites to the WiFi configurationAlain Lamar
Yet, VyOS knows these two encryption schemes for WiFi: 1. CCMP = AES in Counter mode with CBC-MAC (CCMP-128) 2. TKIP = Temporal Key Integrity Protocol These encryption schemes are new and especially the Galois counter mode cipher suites are very desirable! 1. CCMP-256 = AES in Counter mode with CBC-MAC with 256-bit key 2. GCMP = Galois/counter mode protocol (GCMP-128) 3. GCMP-256 = Galois/counter mode protocol with 256-bit key CCMP is supported by all WPA2 compatible NICs, so this remains the default cipher for bidirectional and group packets while using WPA2. Use 'iw list' to figure out which cipher suites your cards support prior to configuring other cipher suites than CCMP. AP NICs and STA NICs must both support at least one common cipher in a given list in order to associate successfully.