vyatta-cfg-vpn.git - Vyatta VPN configuration (mirror of https://github.com/vyos/vyatta-cfg-vpn.git)

Age	Commit message (Collapse)	Author
2009-11-28	0.12.23debian/0.12.23	Mohit Mehta

2009-11-28	add comment to identify end of connection description	Mohit Mehta

2009-11-25	0.12.22debian/0.12.22	Mohit Mehta

2009-11-25	0.12.21	Mohit Mehta

2009-11-25	no need to maintain state of connections and take state-specific actions for	Mohit Mehta
	each connection when config changes. `ipsec update` in strongswan determines any changes in ipsec.conf and updates the configuration on running daemon
2009-11-24	0.12.20debian/0.12.20	Mohit Mehta

2009-11-24	First pass code changes to vyatta-cfg-vpn for migration to strongswan :	Mohit Mehta
	Remove CLI support and back-end code for unsupported parameters * No aggressive mode support in strongswan * remove syslog facility.level CLI. strongswan uses authpriv facility by default, no syslog parameter support * remove Robert's disable-uniqreqids option for now. need to get strongswan to do the same thing first Remove Openswan specific parameters added to workaroung bugs * remove plutowait, this was added to workaround Openswan Bug 412 * remove nhelpers, this was added to workaround Openswan Bug 198 Other Changes * add '!' at the end of ike and esp proposal list to signify end of list * replace `ipsec start` commands with built-in commands for `ipsec starter` control utility * replace `ipsec auto` with `ipsec whack` commands. Still need to figure out if `ipsec auto --add\|--up $connection` could be replaces by simply using `ipsec update` in stronswan * change pluto.ctl path
2009-11-20	0.12.19debian/0.12.19	Mohit Mehta

2009-11-20	vyatta-cfg-vpn depends on vyatta-ipsec provided by vyatta-strongswan	Mohit Mehta

2009-11-13	0.12.18debian/0.12.18	Michael Larson

2009-11-13	dependency update	Michael Larson

2009-11-06	0.12.17debian/0.12.17	An-Cheng Huang

2009-11-06	use vyatta openswan	An-Cheng Huang

2009-11-02	0.12.16debian/0.12.16	Mohit Mehta

2009-11-02	more formatting clean-up	Mohit Mehta

2009-11-02	indent and reformat script using perltidy in hope of making it easier to read	Mohit Mehta

2009-10-27	add support for same reqids to openswan cfg	Robert Bays

2009-10-20	0.12.15debian/0.12.15	slioch

2009-10-20	add priority to project node.	slioch

2009-10-09	0.12.14debian/0.12.14	Mohit Mehta

2009-10-09	add allowed values for ike, esp groups	Mohit Mehta

2009-10-06	0.12.13debian/0.12.13	Mohit Mehta

2009-10-06	Fix Bug 3011 Remote VPN configuration issues site-to-site warning	Mohit Mehta
	* issue warning when none of site-to-site peers, remote access l2tp/pptp set
2009-09-04	0.12.12debian/0.12.12	Stig Thormodsrud

2009-09-04	Fix 4902: setting ipsec site-to-site tunnel with authentication id <> and ↵	Stig Thormodsrud
	local-ip 0.0.0.0 got "no connection named <>"
2009-08-27	0.12.11debian/0.12.11	slioch

2009-08-20	manage state of add\|delete\|restart on connections for vpn given disable node.	slioch

2009-08-20	added support in configuration script to support tunnel disable node.	slioch

2009-08-14	convert enable to disable node for vpn tunnel	slioch

2009-08-14	add enable node below tunnel with default flag = true	slioch

2009-08-13	0.12.10debian/0.12.10	slioch

2009-08-13	Merge branch 'kenwood' of http://git.vyatta.com/vyatta-cfg-vpn into kenwood	slioch

2009-08-13	added description field to site-to-site peer.	slioch

2009-07-10	0.12.9debian/0.12.9	Stig Thormodsrud

2009-07-10	Fix 4623: Removing IPSEC VPN config without removing cluster ipsec config ↵	Stig Thormodsrud
	drops all interfaces. Add a check to prevent deleting ipsec if it's referenced by cluster. (cherry picked from commit b17d768af5845cb5b74e9ba8c6d8f8e2701bb0f6)
2009-05-29	0.12.8debian/0.12.8	An-Cheng Huang

2009-05-26	0.12.7debian/0.12.7	Stig Thormodsrud

2009-05-26	Fix 3836: Allow VPN authentication ID to accept values of IP address, domain ↵	Stig Thormodsrud
	name and "" enclosed phrases
2009-04-08	0.12.6debian/0.12.6	Bob Gilligan

2009-04-08	Bugfix 3284: Allow commit to succeed if local-ip is not configured.	Bob Gilligan
	Previously, the ipsec setup script would fail the commit if the IPv4 address given in the local-ip parameter was not configured on one of the ipsec-interfaces at the time that the commit took place. This causes problems for PPP interfaces that may be configured, but down for operational reasons. This change makes the setup script more liberal. It will allow the commit to complete, but issue a warning the address, they can restart ipsec. PPP has logic to restart ipsec when a link comes up.
2009-04-06	0.12.5debian/0.12.5	Bob Gilligan

2009-04-06	Bugfix 2387: Don't list interfaces in ipsec config file.	Bob Gilligan
	The "interfaces=..." entry in the /etc/ipsec.conf file needs to list the actual interfaces we are using only if the underlying kernel IPsec support is provided by KLIPS. In our case, we are using NETKEY, so we don't need to list our interfaces there. Not listing them makes ipsec startup a bit more robust.
2009-03-26	0.12.4debian/0.12.4	Stig Thormodsrud

2009-03-26	Change "ipsec-interfaces" to use vyatta-interfaces.pl for allowed tag.	Stig Thormodsrud

2009-03-16	0.12.3debian/0.12.3	Stig Thormodsrud

2009-03-16	Fix 4219: IPsec VPN does not launch on boot, error "The local-ip address ↵	Stig Thormodsrud
	X.X.X.X of peer "X.X.X.X" has not been configured in any of the local.
2009-02-12	0.12.2debian/0.12.2	Stephen Hemminger

2009-02-12	Fix ambiguous use of $log	Stephen Hemminger
	There were two definitions of $log
2009-02-11	Fix use of unitialized value	Stephen Hemminger
	Bug 4021 Don't die if local ip not configured.
2009-02-11	Remove perlcritic warnings	Stephen Hemminger
	Use 3 argument open