Age | Commit message (Collapse) | Author |
|
After command "restart vpn" nhrp/IPSec configuration not loaded
Add checks if nhrp exist in the configuration and help to load it
via swanctl.
(cherry picked from commit 49ebd98d580c8cea83da510ded19d7bc163218c4)
|
|
ipsec-op: T3341: Fix for resetting peer tunnel
|
|
The current resetting is affected for parent SA, in that case
all child SA's are resetting (if one peer have a several tunnels)
This commit fixes such behavior for correct resetting child SA's
|
|
IPv6 regex is not only made up of digits
This change allows a correct display of the command 'show vpn ike sa' with IPv6 remote peer
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
StrongSWAN no longer provides.
|
|
|
|
|
|
Fixes for show vpn ike sa and show vpn ipsec sa
|
|
Fixed 'show vpn ike sa' to actually show output when the tunnel isn't up.
Foxed 'show vpn ipsec sa' to actually use the pretty-printing code, rather than swanctl --list-sas, which is pretty unpleasant.
|
|
Re-fix for T303, and a big update against T346 - Fixes for 'show ipsec vpn' commands
|
|
... by suggestions from TomJepp
|
|
|
|
|
|
Largely revamped process_tunnels
Make IKE tunnels information work again.
Added initial support for IKEv2 status.
|
|
Typo, sadly. Resolved this time.
|
|
Two fixes - for T319 and T303
|
|
is deprecated'
Newer version of perl doesn't like %hash->{item} syntax. Prefers $hash{item} instead.
|
|
Strongswan 'ipsec status' command changed output format.
|
|
|
|
|
|
commit:578688a25ba784d839512fefafab4cabdaf32fc5.
Simpilfy the operational commands
Instead of trying to parse the outout of ipsec or swanctl, just dump
whatever swanctl outputs.
|
|
|
|
vyatta-op-vpn (0.15.0+vyos2+current2+nmu1) UNRELEASED; urgency=low
|
|
Conflicts:
templates/show/vpn/ipsec/sa/nat-traversal/node.def.in
templates/show/vpn/ipsec/sa/node.def
templates/show/vpn/ipsec/status/node.def.in
|
|
|
|
* Non-maintainer upload.
* address lintian issues
- script-not-executable: removed #!/usr/bin/perl from .pm files
- debhelper-but-no-misc-depends: added ${misc:Depends} to Depends: field
- debian-rules-missing-recommended-target: added build-arch build-indep
- out-of-date-standards-version: updated standards version to 3.9.4
- package-contains-linda-override: removed linda override
- file-in-unusual-dir: not triggering, removed from override
- script-with-language-extension: renamed vyatta-gen-x509-keypair.sh
vyatta-gen-x509-keypair
* address dpkg-gencontrol issue:
- unknown substitution variable ${shlibs:Depends} - removed
* address dpkg-source issue:
- debian/source/format set to "3.0 (native)"
* removed all references to /opt/vyatta but one from source
Signed-off-by: C.J. Collier <cjcollier@linuxfoundation.org>
|
|
Address debconf warnings
|
|
Address autoreconf warnings
|
|
Since pluto doesn't exist anymore in strongSwan 5.0 and later series,
we are updating references from pluto* to charon*.
|
|
ipsec.conf file
Commenting out the tunnel and restoring it does not reset the tunnel.
Use the ipsec commands to actually bring it down and back up to properly
reset the tunnel.
|
|
Instead of trying to parse the outout of ipsec or swanctl, just dump
whatever swanctl outputs.
|
|
* Non-maintainer upload.
* address lintian issues
- script-not-executable: removed #!/usr/bin/perl from .pm files
- debhelper-but-no-misc-depends: added ${misc:Depends} to Depends: field
- debian-rules-missing-recommended-target: added build-arch build-indep
- out-of-date-standards-version: updated standards version to 3.9.4
- package-contains-linda-override: removed linda override
- file-in-unusual-dir: not triggering, removed from override
- script-with-language-extension: renamed vyatta-gen-x509-keypair.sh
vyatta-gen-x509-keypair
* address dpkg-gencontrol issue:
- unknown substitution variable ${shlibs:Depends} - removed
* address dpkg-source issue:
- debian/source/format set to "3.0 (native)"
Signed-off-by: C.J. Collier <cjcollier@linuxfoundation.org>
|
|
github.com:LLC-Technologies-Collier/vyatta-op-vpn into address-autoreconf-warnings
|
|
* add /m4 to .gitignore
* set ACLOCAL_AMFLAGS in Makefile.am
* set AC_CONFIG_MACRO_DIR in configure.ac
* remove and re-create m4 directory before running autoreconf
Signed-off-by: C.J. Collier <cjcollier@linuxfoundation.org>
|
|
github.com:LLC-Technologies-Collier/vyatta-op-vpn into address-autoreconf-warnings
Conflicts:
configure.ac
|
|
* add /m4 to .gitignore
* set ACLOCAL_AMFLAGS in Makefile.am
* set AC_CONFIG_MACRO_DIR in configure.ac
Signed-off-by: C.J. Collier <cjcollier@linuxfoundation.org>
|
|
* add /m4 to .gitignore
* set ACLOCAL_AMFLAGS in Makefile.am
* set AC_CONFIG_MACRO_DIRS in configure.ac
Signed-off-by: C.J. Collier <cjcollier@linuxfoundation.org>
|
|
|
|
|
|
Explicitly close the IPSECCONF pipe
|