summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2011-01-27Work on new IPsec operational mode script. Fixed inverted SPIsJohn Southworth
2011-01-27Work on new IPsec operational mode script. Initial NAT-T detection codeJohn Southworth
2011-01-270.13.26debian/0.13.26John Southworth
2011-01-27Work on new IPsec operational mode script. Still needs a way to detect NAT-TJohn Southworth
2011-01-240.13.25debian/0.13.25John Southworth
2011-01-24Add new operational mode script, doesn't replace current programs yet but ↵John Southworth
included in package; Related to bugs: 5305 and 6228
2011-01-210.13.24debian/0.13.24John Southworth
2011-01-21Bugfix 2837: Change vpn rsa-key generate to generate vpn rsa-key to be more ↵John Southworth
consistent with the rest of the system
2011-01-200.13.23debian/0.13.23John Southworth
2011-01-20Make adjustment so OP mode can deal with new secrets file formatJohn Southworth
(cherry picked from commit 35fa51ef099248991ab79d562462c3be6d2c8884)
2010-12-280.13.22debian/0.13.22An-Cheng Huang
2010-12-28new branchAn-Cheng Huang
2010-09-020.13.21debian/0.13.21An-Cheng Huang
2010-08-270.13.20debian/0.13.20An-Cheng Huang
2010-08-27fix squeeze build issuesAn-Cheng Huang
2010-08-110.13.19debian/0.13.19An-Cheng Huang
2010-08-11remove CLI backend env variables usageAn-Cheng Huang
* use the new cli-shell-api instead.
2010-07-270.13.18debian/0.13.18An-Cheng Huang
2010-07-27fix incorrect types to work with 64-bitAn-Cheng Huang
2010-07-220.13.17debian/0.13.17An-Cheng Huang
2010-07-200.13.16debian/0.13.16Mohit Mehta
2010-07-20part of fix for BZ 5839 - move clear process cmds under restartMohit Mehta
2010-05-260.13.15debian/0.13.15Mohit Mehta
2010-05-26remove op-mode command to show vpn route in table 220Mohit Mehta
2010-04-190.13.14debian/0.13.14Mohit Mehta
2010-04-19Fix Bug 5542Mohit Mehta
* allow clear and show commands for IPsec even if site-to-site is not configured since l2tp might be using it
2010-03-310.13.13debian/0.13.13Mohit Mehta
2010-03-31Fix Bug 5500 Unable to establish a VPN connection from a remote peer with aMohit Mehta
dynamic IP when using FQDN identifier for remote end * fix op-mode part
2010-03-180.13.12debian/0.13.12Mohit Mehta
2010-03-18Part of fix for Bug 5067 to add PFS group supportMohit Mehta
2010-03-170.13.11debian/0.13.11Mohit Mehta
2010-03-17Fix Bug 5464 "show vpn ipsec status" returns no interface and active tunnel ↵Mohit Mehta
number
2010-02-170.13.10debian/0.13.10An-Cheng Huang
2010-01-290.13.9debian/0.13.9Mohit Mehta
2010-01-29add op-mode command to show routes added for VPN remote-subnetMohit Mehta
2010-01-120.13.8debian/0.13.8Mohit Mehta
2010-01-12fix show vpn commands to work with strongswanMohit Mehta
(cherry picked from commit 32927e013922e1a79b0f214773e2500a1260871a)
2010-01-12use correct path for ported newhostkey commandMohit Mehta
(cherry picked from commit dfe4041f35fdfc7d9909c297396cd40bcf3d2d21)
2010-01-12fix op-mode commands for migration to strongswanMohit Mehta
* use `ipsec update` instead of openswan's `ipsec auto` commands to make 'clear vpn ipsec-peer <> tunnel <>' work * no `ipsec barf` in strongswan. instead use detailed version of the command status i.e. `ipsec statusall` for 'show vpn debug detail' * use strongswan's syntax for `ipsec rereadall` and `ipsec status` (cherry picked from commit 2c5e47cc7871bc7da84f3a14398b15cf3b1da352)
2010-01-12vyatta-op-vpn depends on vyatta-ipsec provided by vyatta-strongswanMohit Mehta
(cherry picked from commit fe20c1de601e6f8f8d0269a737d6525500019b83)
2009-12-020.13.7debian/0.13.7An-Cheng Huang
2009-11-060.13.4debian/0.13.4An-Cheng Huang
2009-11-06use vyatta openswanAn-Cheng Huang
2009-10-090.13.3debian/0.13.3Mohit Mehta
2009-10-09* Fix Bug 4017 Add the ability to restart individual IPSec tunnelsMohit Mehta
added new operational mode commands - clear vpn ipsec-peer peer <peer> # clear all tunnels for given peer clear vpn ipsec-peer peer <peer> tunnel <tunnel> # clear specific tunnel If peer is 0.0.0.0/any/@id then tunnel is brought down and loaded again but connection is not initiated as remote end could be multiple end-points The remote ends will bring up the tunnel when they get/detect tunnel down * don't call script with sudo from templates. use sudo in script where needed * script clean up
2009-05-290.13.2debian/0.13.2An-Cheng Huang
2009-01-080.13.1debian/0.13.1An-Cheng Huang
2008-12-12"files" file should be removed before package buildAn-Cheng Huang
2008-12-12update maintainer informationAn-Cheng Huang
2008-12-03Merge branch 'jenner' of git:/git/vyatta-op-vpn into jennerRick Balocca