summaryrefslogtreecommitdiff
path: root/scripts
AgeCommit message (Collapse)Author
2023-08-29T3577: Fix permissions and template path for x509 vpn key-pairViacheslav Hletenko
Current permission is not executable $ ls -la /opt/vyatta/sbin//vyatta-gen-x509-keypair -rw-r--r-- 1 root root 345 May 11 2016 /opt/vyatta/sbin//vyatta-gen-x509-keypair Fix template path $ sudo /opt/vyatta/sbin//vyatta-gen-x509-keypair foo Can't open /etc/key-pair.template for reading, No such file or directory Expected path '/opt/vyatta/etc/key-pair.template'
2022-01-12op-vpn: T4168: Add timeout for restart vpn with nhrpViacheslav
With command "restart vpn" in some cases charon process is not fully loaded when is used DMVPN. It is impossible to load "swanctl -q" configuration while "charon" not loaded Add timeout and wait until charon will be available, after that load swanctl configuration
2021-10-31vpn-op: T3846: Fix for restart vpn with nhrp configViacheslav
After command "restart vpn" nhrp/IPSec configuration not loaded Add checks if nhrp exist in the configuration and help to load it via swanctl.
2021-10-25ipsec-op: T3341: Fix for resetting peer tunnelViacheslav
The current resetting is affected for parent SA, in that case all child SA's are ressetting This commit fix such behaviour for correct resetting child SA's.
2020-03-14T2120: remove @ from peer name when pasing names to /usr/bin/ipsecDaniil Baturin
2017-07-03Fix for T319 - show vpn ipsec status returns incorrect informationjules-vyos
Strongswan 'ipsec status' command changed output format.
2017-02-08change ipsec newhostkey command with openssl commandKim Hagen
2016-05-11Merge branch 'current' into address-debconf-warningsC.J. Collier
Conflicts: templates/show/vpn/ipsec/sa/nat-traversal/node.def.in templates/show/vpn/ipsec/sa/node.def templates/show/vpn/ipsec/status/node.def.in
2016-05-11vyatta-op-vpn (0.15.0+vyos2+current2+nmu1) UNRELEASED; urgency=lowC.J. Collier
* Non-maintainer upload. * address lintian issues - script-not-executable: removed #!/usr/bin/perl from .pm files - debhelper-but-no-misc-depends: added ${misc:Depends} to Depends: field - debian-rules-missing-recommended-target: added build-arch build-indep - out-of-date-standards-version: updated standards version to 3.9.4 - package-contains-linda-override: removed linda override - file-in-unusual-dir: not triggering, removed from override - script-with-language-extension: renamed vyatta-gen-x509-keypair.sh vyatta-gen-x509-keypair * address dpkg-gencontrol issue: - unknown substitution variable ${shlibs:Depends} - removed * address dpkg-source issue: - debian/source/format set to "3.0 (native)" * removed all references to /opt/vyatta but one from source Signed-off-by: C.J. Collier <cjcollier@linuxfoundation.org>
2016-05-11Merge pull request #16 from LLC-Technologies-Collier/address-debconf-warningsKim
Address debconf warnings
2016-05-11Update pluto.pid references to charon.pidJeff Leung
Since pluto doesn't exist anymore in strongSwan 5.0 and later series, we are updating references from pluto* to charon*.
2016-05-11Bring the VPN tunnel down and up as opposed to commenting it out in the ↵Jeff Leung
ipsec.conf file Commenting out the tunnel and restoring it does not reset the tunnel. Use the ipsec commands to actually bring it down and back up to properly reset the tunnel.
2016-05-11vyatta-op-vpn (0.15.0+vyos2+current2+nmu1) UNRELEASED; urgency=lowC.J. Collier
* Non-maintainer upload. * address lintian issues - script-not-executable: removed #!/usr/bin/perl from .pm files - debhelper-but-no-misc-depends: added ${misc:Depends} to Depends: field - debian-rules-missing-recommended-target: added build-arch build-indep - out-of-date-standards-version: updated standards version to 3.9.4 - package-contains-linda-override: removed linda override - file-in-unusual-dir: not triggering, removed from override - script-with-language-extension: renamed vyatta-gen-x509-keypair.sh vyatta-gen-x509-keypair * address dpkg-gencontrol issue: - unknown substitution variable ${shlibs:Depends} - removed * address dpkg-source issue: - debian/source/format set to "3.0 (native)" Signed-off-by: C.J. Collier <cjcollier@linuxfoundation.org>
2016-04-19defined(@array) is deprecated, omit the defined()UnicronNL
2014-10-08Fix 'show vpn ipsec status'Patrick van Staveren
Look for addresses using the local-address node rather than the local-ip node. VyOS Bug #331 http://bugzilla.vyos.net/show_bug.cgi?id=331
2014-08-09vyatta-op-vpn: display the config path location for the rsa key fileAlex Harpin
The command "show vpn ike rsa-keys" currently displays the full system file path rather than using the shorter config path. This sets it to display the config path instead. Bug #278 http://bugzilla.vyos.net/show_bug.cgi?id=278
2014-08-09vyatta-op-vpn: prevent invalid rsa key file from being generatedAlex Harpin
If the command "generate vpn rsa-key" is aborted during key generation it leaves behind a temporary file. If the command is then executed again, this temporary file is appended to rather than being replaced, resulting in a key file with an extra : RSA { line at the beginning. This patch checks if this temporary file exists, deleting it if it does. Bug #262 http://bugzilla.vyos.net/show_bug.cgi?id=262
2013-02-19perltidy run for vyatta-op-vpnSaurabh Mohan
2013-02-05Merge + support show vpn ipsec sa detail/statistics profileSaurabh Mohan
2013-01-29Support for reset vpn ipsec-profileSaurabh Mohan
2013-01-22Dmvpn merge with mirantis jan22-2013Saurabh Mohan
2012-09-19Bugfix 8376: Add vti as an option under 'reset vpn ipsec-peer'Saurabh Mohan
Add a new cli 'reset vpn ipsec-peer <peer-ip> vti'.
2011-10-27Bugfix 7574: Fix output to match command structure for restart vpn and reset vpnJohn Southworth
(cherry picked from commit dc6d6a389a1648ebd3240691d76edf7fa523d05d)
2011-05-05Merge branch 'napa' of git.vyatta.com:/git/vyatta-op-vpn into napaJohn Southworth
2011-05-05Add ability to generate an x509 key pair (certificate signing request, ↵John Southworth
private key)
2011-05-04Fix Bug 7010 Update commands to save/retrieve files from /configMohit Mehta
* use shorter /config path when presenting configuration directory to users
2011-03-08Fix perlcritic errorJohn Southworth
2011-02-25Fix 'show vpn ike status'John Southworth
2011-02-24Make 'show vpn ipsec status' aware of the dhcp-interface optionJohn Southworth
2011-02-07Bugfix 5802: add auto-update feature, for Dynamic DNS peersJohn Southworth
2011-02-07Fix filehandlers to conform to perl style guidelinesJohn Southworth
2011-02-02Work on new IPsec operational mode script. Split into perl module; ↵John Southworth
Adjustments for showing per tunnel information; Fix parsing of ipsecstatus all when using GRE matching
2011-02-01Work on new IPsec operational mode script. Removed calls to external ↵John Southworth
functions; Cleaned up formatting
2011-02-01Work on new IPsec operational mode script. Removed calls to external ↵John Southworth
functions; Processes 6000 tunnel configuration in approx 2 sec.
2011-02-01Work on new IPsec operational mode script. Fix 'show vpn ipsec sa ↵John Southworth
nat-traversal'; Clean up formatting
2011-02-01Work on new IPsec operational mode script. Add more relevent information to ↵John Southworth
'show vpn ipsec sa'
2011-02-01Work on new IPsec operational mode script. Make processing of natt and ↵John Southworth
static values more efficient
2011-01-31Work on new IPsec operational mode script. Added sorting and fixed cases ↵John Southworth
where peer is set to '@<id>'
2011-01-31Work on new IPsec operational mode script. Rework to reduce the amount of ↵John Southworth
redundant information in 'show vpn ipsec sa detail'
2011-01-31Work on new IPsec operational mode script. Fix some syntax; make show based ↵John Southworth
on peer better; Add show ike secrets
2011-01-31Work on new IPsec operational mode script. Integrate with more CLI commandsJohn Southworth
2011-01-31Work on new IPsec operational mode script. New format for commands for the ↵John Southworth
pending addition of ipv6
2011-01-28Work on new IPsec operational mode script. Clean up capitalization; New ↵John Southworth
format for 'show vpn ipsec sa' for pending addition of ipv6
2011-01-28Work on new IPsec operational mode script. Fixed some output bugsJohn Southworth
2011-01-28Work on new IPsec operational mode script. Fixed script to work when not in ↵John Southworth
configure mode
2011-01-27Work on new IPsec operational mode script. setkey is deprecated so switched ↵John Southworth
NAT-T detection to 'ip xfrm'
2011-01-27Work on new IPsec operational mode script. Made processing of NAT-T ↵John Southworth
information more efficient
2011-01-27Work on new IPsec operational mode script. Cleaned up some un-need outputJohn Southworth
2011-01-27Work on new IPsec operational mode script. Better NAT-T detectionJohn Southworth
2011-01-27Work on new IPsec operational mode script. Fixed inverted SPIsJohn Southworth
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-15 06:07:18 +0000