summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-01-14Merge pull request #38 from sever-sever/T57151.3.81.3.71.3.6equuleusDaniil Baturin
T5715: Fix for restart vpn
2024-01-12T5715: Fix for restart vpnViacheslav Hletenko
Fix for `restart vpn`
2023-09-29Merge pull request #36 from dmbaturin/T5625-restart-vpn1.3.51.3.4Daniil Baturin
T5625: allow "restart vpn" to work when ipsec-interfaces is not set
2023-09-29T5625: allow "restart vpn" to work when ipsec-interfaces is not setDaniil Baturin
2023-08-29Merge pull request #35 from sever-sever/T3577-eqChristian Breunig
T3577: Fix permissions and template path for x509 vpn key-pair
2023-08-29T3577: Fix permissions and template path for x509 vpn key-pairViacheslav Hletenko
Current permission is not executable $ ls -la /opt/vyatta/sbin//vyatta-gen-x509-keypair -rw-r--r-- 1 root root 345 May 11 2016 /opt/vyatta/sbin//vyatta-gen-x509-keypair Fix template path $ sudo /opt/vyatta/sbin//vyatta-gen-x509-keypair foo Can't open /etc/key-pair.template for reading, No such file or directory Expected path '/opt/vyatta/etc/key-pair.template'
2022-11-21Merge pull request #34 from sever-sever/T4812-eq-op1.3.3-epa11.3.3Christian Poessinger
T4812: Add op-mode show vpn ipsec connections
2022-11-21T4812: Add op-mode show vpn ipsec connectionsViacheslav Hletenko
Add new op-mode command to show all configured VPN connections show vpn ipsec connections
2022-04-26Merge pull request #33 from sever-sever/T4395-equ1.3.2Christian Poessinger
op-mode: T4395: Extend show vpn debug for IPSec
2022-04-26op-mode: T4395: Extend show vpn debug for IPSecViacheslav Hletenko
Op-mode 'show vpn debug' Old Perl code 'vyatta-vpn-op.pl --op=show-vpn-debug' doesn't give us enough debug information In fact it show only 'ipsec statusall' Add python script to get all required and useful debug info
2022-01-12Merge pull request #32 from sever-sever/T4168Daniil Baturin
op-vpn: T4168: Add timeout for restart vpn with nhrp
2022-01-12op-vpn: T4168: Add timeout for restart vpn with nhrpViacheslav
With command "restart vpn" in some cases charon process is not fully loaded when is used DMVPN. It is impossible to load "swanctl -q" configuration while "charon" not loaded Add timeout and wait until charon will be available, after that load swanctl configuration
2021-12-28Merge pull request #31 from sever-sever/T3380Daniil Baturin
vpn: T3380: Fix for op-mode regex for IPv6 IPSec IKE sa
2021-12-28vpn: T3380: Fix for op-mode regex for IPv6 IPSec IKE saViacheslav
Set correct regex to detect IKE statuses for IPv6 IPSec peers
2021-10-31Merge pull request #30 from sever-sever/T3846Daniil Baturin
vpn-op: T3846: Fix for restart vpn with nhrp config
2021-10-31vpn-op: T3846: Fix for restart vpn with nhrp configViacheslav
After command "restart vpn" nhrp/IPSec configuration not loaded Add checks if nhrp exist in the configuration and help to load it via swanctl.
2021-10-26Merge pull request #28 from sever-sever/T3341Christian Poessinger
ipsec-op: T3341: Fix for resetting peer tunnel
2021-10-25ipsec-op: T3341: Fix for resetting peer tunnelViacheslav
The current resetting is affected for parent SA, in that case all child SA's are ressetting This commit fix such behaviour for correct resetting child SA's.
2021-05-27vpn: T1995: Fix op-mode for ike sasever-sever
2021-04-04Jenkins: use build library from proper branch "equuleus"Christian Poessinger
2021-01-04Update debian version.Daniil Baturin
2020-06-23Jenkins: T2625: migrate to build libraryChristian Poessinger
2020-03-21Jenkins: T1870: support GitHub PullRequest buildsChristian Poessinger
2020-03-14T2120: remove @ from peer name when pasing names to /usr/bin/ipsecDaniil Baturin
2019-12-27Jenkins: make pipeline branch independentChristian Poessinger
2019-12-18Merge branch 'equuleus' of github.com:vyos/vyatta-op-vpn into currentChristian Poessinger
* 'equuleus' of github.com:vyos/vyatta-op-vpn: Jenkins: import Pipeline from vyos-1x commit bd00ec7 update Jenkins file for equuleus
2019-10-16Merge pull request #24 from pkharat/currentVyOS_1.2-2019Q4Christian Poessinger
Supporting aes-gcm-*/chacha encryption algos in " sh vpn * " commands output
2019-10-16[vyos vyatta-op-vpn] T1735: Code to handle "sh vpn *" commands output whenpkharat
aes-gcm-*/chacha encryption algorithms are used for ike and esp proposal.
2019-09-28Jenkins: import Pipeline from vyos-1x commit bd00ec7Christian Poessinger
2019-09-28Jenkins: import Pipeline from vyos-1x commit bd00ec7Christian Poessinger
2019-08-14update Jenkins file for equuleusUnicronNL
2019-05-22Create Jenkinsfile currentKim Hagen
2018-11-19Remove unused file from configure.acDaniil Baturin
2018-11-18T956: add a new script for displaying IPsec SAs.Daniil Baturin
2018-11-05T304: remove the "show vpn debug detail" command that was based on a script ↵Daniil Baturin
StrongSWAN no longer provides.
2018-11-05T930: add missing sudo to ip xfrm commands.Daniil Baturin
2017-09-04Merge pull request #22 from jules-vyos/currentDaniil Baturin
Fixes for show vpn ike sa and show vpn ipsec sa
2017-09-03Fixes for show vpn ike sa and show vpn ipsec sajules-vyos
Fixed 'show vpn ike sa' to actually show output when the tunnel isn't up. Foxed 'show vpn ipsec sa' to actually use the pretty-printing code, rather than swanctl --list-sas, which is pretty unpleasant.
2017-08-28Merge pull request #21 from jules-vyos/currentDaniil Baturin
Re-fix for T303, and a big update against T346 - Fixes for 'show ipsec vpn' commands
2017-07-27Formatting of show vpn ike sa modifiedjules-vyos
... by suggestions from TomJepp
2017-07-27Move into the CORRECT tree location.jules-vyos
2017-07-27Add templates for extended commandsjules-vyos
2017-07-27Fix various bits for newer StrongSwan supportjules-vyos
Largely revamped process_tunnels Make IKE tunnels information work again. Added initial support for IKEv2 status.
2017-07-05T303 - Re-fix - broke that the first timejules-vyos
Typo, sadly. Resolved this time.
2017-07-03Merge pull request #19 from jules-vyos/currentDaniil Baturin
Two fixes - for T319 and T303
2017-07-03Fix for T303 - 'show vpn ike status per warning: Using a hash as a reference ↵jules-vyos
is deprecated' Newer version of perl doesn't like %hash->{item} syntax. Prefers $hash{item} instead.
2017-07-03Fix for T319 - show vpn ipsec status returns incorrect informationjules-vyos
Strongswan 'ipsec status' command changed output format.
2017-02-08remove reference to deleted filesUnicronNL
2017-02-08change ipsec newhostkey command with openssl commandKim Hagen
2016-09-15Reimplementation of TriJetScud's ↵Kim Hagen
commit:578688a25ba784d839512fefafab4cabdaf32fc5. Simpilfy the operational commands Instead of trying to parse the outout of ipsec or swanctl, just dump whatever swanctl outputs.
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-09 06:25:04 +0000