Age | Commit message (Collapse) | Author | |
---|---|---|---|
2011-05-05 | Merge branch 'napa' of git.vyatta.com:/git/vyatta-op-vpn into napa | John Southworth | |
2011-05-05 | Add ability to generate an x509 key pair (certificate signing request, ↵ | John Southworth | |
private key) | |||
2011-05-04 | Fix Bug 7010 Update commands to save/retrieve files from /config | Mohit Mehta | |
* use shorter /config path when presenting configuration directory to users | |||
2011-03-08 | Fix perlcritic error | John Southworth | |
2011-02-25 | Fix 'show vpn ike status' | John Southworth | |
2011-02-24 | Make 'show vpn ipsec status' aware of the dhcp-interface option | John Southworth | |
2011-02-07 | Bugfix 5802: add auto-update feature, for Dynamic DNS peers | John Southworth | |
2011-02-07 | Fix filehandlers to conform to perl style guidelines | John Southworth | |
2011-02-02 | Work on new IPsec operational mode script. Split into perl module; ↵ | John Southworth | |
Adjustments for showing per tunnel information; Fix parsing of ipsecstatus all when using GRE matching | |||
2011-02-01 | Work on new IPsec operational mode script. Removed calls to external ↵ | John Southworth | |
functions; Cleaned up formatting | |||
2011-02-01 | Work on new IPsec operational mode script. Removed calls to external ↵ | John Southworth | |
functions; Processes 6000 tunnel configuration in approx 2 sec. | |||
2011-02-01 | Work on new IPsec operational mode script. Fix 'show vpn ipsec sa ↵ | John Southworth | |
nat-traversal'; Clean up formatting | |||
2011-02-01 | Work on new IPsec operational mode script. Add more relevent information to ↵ | John Southworth | |
'show vpn ipsec sa' | |||
2011-02-01 | Work on new IPsec operational mode script. Make processing of natt and ↵ | John Southworth | |
static values more efficient | |||
2011-01-31 | Work on new IPsec operational mode script. Added sorting and fixed cases ↵ | John Southworth | |
where peer is set to '@<id>' | |||
2011-01-31 | Work on new IPsec operational mode script. Rework to reduce the amount of ↵ | John Southworth | |
redundant information in 'show vpn ipsec sa detail' | |||
2011-01-31 | Work on new IPsec operational mode script. Fix some syntax; make show based ↵ | John Southworth | |
on peer better; Add show ike secrets | |||
2011-01-31 | Work on new IPsec operational mode script. Integrate with more CLI commands | John Southworth | |
2011-01-31 | Work on new IPsec operational mode script. New format for commands for the ↵ | John Southworth | |
pending addition of ipv6 | |||
2011-01-28 | Work on new IPsec operational mode script. Clean up capitalization; New ↵ | John Southworth | |
format for 'show vpn ipsec sa' for pending addition of ipv6 | |||
2011-01-28 | Work on new IPsec operational mode script. Fixed some output bugs | John Southworth | |
2011-01-28 | Work on new IPsec operational mode script. Fixed script to work when not in ↵ | John Southworth | |
configure mode | |||
2011-01-27 | Work on new IPsec operational mode script. setkey is deprecated so switched ↵ | John Southworth | |
NAT-T detection to 'ip xfrm' | |||
2011-01-27 | Work on new IPsec operational mode script. Made processing of NAT-T ↵ | John Southworth | |
information more efficient | |||
2011-01-27 | Work on new IPsec operational mode script. Cleaned up some un-need output | John Southworth | |
2011-01-27 | Work on new IPsec operational mode script. Better NAT-T detection | John Southworth | |
2011-01-27 | Work on new IPsec operational mode script. Fixed inverted SPIs | John Southworth | |
2011-01-27 | Work on new IPsec operational mode script. Initial NAT-T detection code | John Southworth | |
2011-01-27 | Work on new IPsec operational mode script. Still needs a way to detect NAT-T | John Southworth | |
2011-01-24 | Add new operational mode script, doesn't replace current programs yet but ↵ | John Southworth | |
included in package; Related to bugs: 5305 and 6228 | |||
2011-01-20 | Make adjustment so OP mode can deal with new secrets file format | John Southworth | |
(cherry picked from commit 35fa51ef099248991ab79d562462c3be6d2c8884) | |||
2010-03-31 | Fix Bug 5500 Unable to establish a VPN connection from a remote peer with a | Mohit Mehta | |
dynamic IP when using FQDN identifier for remote end * fix op-mode part | |||
2010-03-17 | Fix Bug 5464 "show vpn ipsec status" returns no interface and active tunnel ↵ | Mohit Mehta | |
number | |||
2010-01-12 | fix show vpn commands to work with strongswan | Mohit Mehta | |
(cherry picked from commit 32927e013922e1a79b0f214773e2500a1260871a) | |||
2010-01-12 | use correct path for ported newhostkey command | Mohit Mehta | |
(cherry picked from commit dfe4041f35fdfc7d9909c297396cd40bcf3d2d21) | |||
2010-01-12 | fix op-mode commands for migration to strongswan | Mohit Mehta | |
* use `ipsec update` instead of openswan's `ipsec auto` commands to make 'clear vpn ipsec-peer <> tunnel <>' work * no `ipsec barf` in strongswan. instead use detailed version of the command status i.e. `ipsec statusall` for 'show vpn debug detail' * use strongswan's syntax for `ipsec rereadall` and `ipsec status` (cherry picked from commit 2c5e47cc7871bc7da84f3a14398b15cf3b1da352) | |||
2009-10-09 | * Fix Bug 4017 Add the ability to restart individual IPSec tunnels | Mohit Mehta | |
added new operational mode commands - clear vpn ipsec-peer peer <peer> # clear all tunnels for given peer clear vpn ipsec-peer peer <peer> tunnel <tunnel> # clear specific tunnel If peer is 0.0.0.0/any/@id then tunnel is brought down and loaded again but connection is not initiated as remote end could be multiple end-points The remote ends will bring up the tunnel when they get/detect tunnel down * don't call script with sudo from templates. use sudo in script where needed * script clean up | |||
2008-12-03 | Fix reference to Vyatta::VPNUtil | Stephen Hemminger | |
Should be Vyatta::VPN::Util | |||
2008-12-02 | Merge branch 'jenner' of suva.vyatta.com:/git/vyatta-op-vpn into jenner | Stephen Hemminger | |
Conflicts: scripts/gen_local_rsa_key.pl | |||
2008-12-01 | "vpn rsa-key generate" command broken - use new perl hierarchy. | Stig Thormodsrud | |
2008-11-21 | Convert to Vyatta:: | Stephen Hemminger | |
2008-07-07 | partial fix for bugs 3044, 3047, 3048: minor show command output header | An-Cheng Huang | |
changes. fix for bug 3440: regex now matches IP, hostname, or ID. | |||
2008-07-07 | Fix 3194: VPN: xml error in "show vpn ike" command output | Stig Thormodsrud | |
2008-03-17 | Fix 2838: Clearing VPN process starts VPN , even if not configured. | Stig Thormodsrud | |
- fix sloppy script which dies with "Unknown op" on valid ops. - use vyatta config rather than ipsec.conf to determine if running | |||
2008-03-10 | update scripts from VPL1.0 to GPLv2 | Stephen Hemminger | |
2008-02-26 | Query original/active runtime config rather than the new/pending config. | Marat Nepomnyashy | |
2008-02-22 | Initialize variable and check for invalid args. | Marat Nepomnyashy | |
2008-02-22 | Fixed-up operator commands 'clear vpn ipsec-process' and 'show vpn debug ↵ | Marat Nepomnyashy | |
detail' so that they no longer require sudo password. | |||
2008-02-21 | Moved execution of 'show vpn' commands to '/opt/vyatta/bin/sudo-users' so ↵ | Marat Nepomnyashy | |
that operator users can execute them. Bug 2865 fix. | |||
2008-01-03 | Initial VPN op template migration. | Marat Nepomnyashy | |