summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-11-01vpn-op: T3846: Fix for restart vpn with nhrp config1.2.9-S1cruxViacheslav
After command "restart vpn" nhrp/IPSec configuration not loaded Add checks if nhrp exist in the configuration and help to load it via swanctl. (cherry picked from commit 49ebd98d580c8cea83da510ded19d7bc163218c4)
2021-10-31Merge pull request #29 from sever-sever/T3341-cruxDaniil Baturin
ipsec-op: T3341: Fix for resetting peer tunnel
2021-10-31ipsec-op: T3341: Fix for resetting peer tunnelViacheslav
The current resetting is affected for parent SA, in that case all child SA's are resetting (if one peer have a several tunnels) This commit fixes such behavior for correct resetting child SA's
2021-05-27Update OPMode.pmlsenecaux
IPv6 regex is not only made up of digits This change allows a correct display of the command 'show vpn ike sa' with IPv6 remote peer
2021-05-27vpn: T1995: Fix op-mode for ike sasever-sever
2021-02-24Update JenkinsfileDaniil Baturin
2020-09-11New release.vyos/1.2.6VyOS Maintainers
2020-03-14T2120: remove @ from peer name when pasing names to /usr/bin/ipsecDaniil Baturin
2020-03-09New release.VyOS Maintainers
2019-12-10New release.vyos/1.2.4VyOS Maintainers
2019-09-28Jenkins: import Pipeline from vyos-1x commit bd00ec7Christian Poessinger
2019-05-22Create Jenkinsfile cruxKim Hagen
2018-11-19Remove unused file from configure.acDaniil Baturin
2018-11-18T956: add a new script for displaying IPsec SAs.Daniil Baturin
2018-11-05T304: remove the "show vpn debug detail" command that was based on a script ↵Daniil Baturin
StrongSWAN no longer provides.
2018-11-05T930: add missing sudo to ip xfrm commands.Daniil Baturin
2018-09-28New branch.Daniil Baturin
2017-09-04Merge pull request #22 from jules-vyos/currentDaniil Baturin
Fixes for show vpn ike sa and show vpn ipsec sa
2017-09-03Fixes for show vpn ike sa and show vpn ipsec sajules-vyos
Fixed 'show vpn ike sa' to actually show output when the tunnel isn't up. Foxed 'show vpn ipsec sa' to actually use the pretty-printing code, rather than swanctl --list-sas, which is pretty unpleasant.
2017-08-28Merge pull request #21 from jules-vyos/currentDaniil Baturin
Re-fix for T303, and a big update against T346 - Fixes for 'show ipsec vpn' commands
2017-07-27Formatting of show vpn ike sa modifiedjules-vyos
... by suggestions from TomJepp
2017-07-27Move into the CORRECT tree location.jules-vyos
2017-07-27Add templates for extended commandsjules-vyos
2017-07-27Fix various bits for newer StrongSwan supportjules-vyos
Largely revamped process_tunnels Make IKE tunnels information work again. Added initial support for IKEv2 status.
2017-07-05T303 - Re-fix - broke that the first timejules-vyos
Typo, sadly. Resolved this time.
2017-07-03Merge pull request #19 from jules-vyos/currentDaniil Baturin
Two fixes - for T319 and T303
2017-07-03Fix for T303 - 'show vpn ike status per warning: Using a hash as a reference ↵jules-vyos
is deprecated' Newer version of perl doesn't like %hash->{item} syntax. Prefers $hash{item} instead.
2017-07-03Fix for T319 - show vpn ipsec status returns incorrect informationjules-vyos
Strongswan 'ipsec status' command changed output format.
2017-02-08remove reference to deleted filesUnicronNL
2017-02-08change ipsec newhostkey command with openssl commandKim Hagen
2016-09-15Reimplementation of TriJetScud's ↵Kim Hagen
commit:578688a25ba784d839512fefafab4cabdaf32fc5. Simpilfy the operational commands Instead of trying to parse the outout of ipsec or swanctl, just dump whatever swanctl outputs.
2016-09-15prefix is set in "configure.ac" file, so is removed from "debian/rules"Kim Hagen
2016-05-11Merge pull request #17 from LLC-Technologies-Collier/address-debconf-warningsKim
vyatta-op-vpn (0.15.0+vyos2+current2+nmu1) UNRELEASED; urgency=low
2016-05-11Merge branch 'current' into address-debconf-warningsC.J. Collier
Conflicts: templates/show/vpn/ipsec/sa/nat-traversal/node.def.in templates/show/vpn/ipsec/sa/node.def templates/show/vpn/ipsec/status/node.def.in
2016-05-11oops missed a fileC.J. Collier
2016-05-11vyatta-op-vpn (0.15.0+vyos2+current2+nmu1) UNRELEASED; urgency=lowC.J. Collier
* Non-maintainer upload. * address lintian issues - script-not-executable: removed #!/usr/bin/perl from .pm files - debhelper-but-no-misc-depends: added ${misc:Depends} to Depends: field - debian-rules-missing-recommended-target: added build-arch build-indep - out-of-date-standards-version: updated standards version to 3.9.4 - package-contains-linda-override: removed linda override - file-in-unusual-dir: not triggering, removed from override - script-with-language-extension: renamed vyatta-gen-x509-keypair.sh vyatta-gen-x509-keypair * address dpkg-gencontrol issue: - unknown substitution variable ${shlibs:Depends} - removed * address dpkg-source issue: - debian/source/format set to "3.0 (native)" * removed all references to /opt/vyatta but one from source Signed-off-by: C.J. Collier <cjcollier@linuxfoundation.org>
2016-05-11Merge pull request #16 from LLC-Technologies-Collier/address-debconf-warningsKim
Address debconf warnings
2016-05-11Merge pull request #15 from LLC-Technologies-Collier/address-autoreconf-warningsKim
Address autoreconf warnings
2016-05-11Update pluto.pid references to charon.pidJeff Leung
Since pluto doesn't exist anymore in strongSwan 5.0 and later series, we are updating references from pluto* to charon*.
2016-05-11Bring the VPN tunnel down and up as opposed to commenting it out in the ↵Jeff Leung
ipsec.conf file Commenting out the tunnel and restoring it does not reset the tunnel. Use the ipsec commands to actually bring it down and back up to properly reset the tunnel.
2016-05-11Simpilfy the operational commandsJeff Leung
Instead of trying to parse the outout of ipsec or swanctl, just dump whatever swanctl outputs.
2016-05-11vyatta-op-vpn (0.15.0+vyos2+current2+nmu1) UNRELEASED; urgency=lowC.J. Collier
* Non-maintainer upload. * address lintian issues - script-not-executable: removed #!/usr/bin/perl from .pm files - debhelper-but-no-misc-depends: added ${misc:Depends} to Depends: field - debian-rules-missing-recommended-target: added build-arch build-indep - out-of-date-standards-version: updated standards version to 3.9.4 - package-contains-linda-override: removed linda override - file-in-unusual-dir: not triggering, removed from override - script-with-language-extension: renamed vyatta-gen-x509-keypair.sh vyatta-gen-x509-keypair * address dpkg-gencontrol issue: - unknown substitution variable ${shlibs:Depends} - removed * address dpkg-source issue: - debian/source/format set to "3.0 (native)" Signed-off-by: C.J. Collier <cjcollier@linuxfoundation.org>
2016-05-11Merge branch 'address-autoreconf-warnings' of ↵C.J. Collier
github.com:LLC-Technologies-Collier/vyatta-op-vpn into address-autoreconf-warnings
2016-05-11Address autoreconf warningsC.J. Collier
* add /m4 to .gitignore * set ACLOCAL_AMFLAGS in Makefile.am * set AC_CONFIG_MACRO_DIR in configure.ac * remove and re-create m4 directory before running autoreconf Signed-off-by: C.J. Collier <cjcollier@linuxfoundation.org>
2016-05-11Merge branch 'address-autoreconf-warnings' of ↵C.J. Collier
github.com:LLC-Technologies-Collier/vyatta-op-vpn into address-autoreconf-warnings Conflicts: configure.ac
2016-05-11Address autoreconf warningsC.J. Collier
* add /m4 to .gitignore * set ACLOCAL_AMFLAGS in Makefile.am * set AC_CONFIG_MACRO_DIR in configure.ac Signed-off-by: C.J. Collier <cjcollier@linuxfoundation.org>
2016-05-10Address autoreconf warningsC.J. Collier
* add /m4 to .gitignore * set ACLOCAL_AMFLAGS in Makefile.am * set AC_CONFIG_MACRO_DIRS in configure.ac Signed-off-by: C.J. Collier <cjcollier@linuxfoundation.org>
2016-05-10Show some tunnel information.UnicronNL
2016-04-19defined(@array) is deprecated, omit the defined()UnicronNL
2016-03-31Merge pull request #14 from wzur/patch-1Daniil Baturin
Explicitly close the IPSECCONF pipe