vyos-1x.git/data/templates/ipsec/swanctl/profile.tmpl, branch feature/T9082-codeql-cpp VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp 2022-05-01T17:44:52+00:00 ipsec: T4353: fix Jinja2 linting errors 2022-05-01T17:44:52+00:00 Christian Poessinger christian@poessinger.com 2022-05-01T17:44:52+00:00 urn:sha1:49b1afc25b73d9c5daae1c76edb88aab42afa83e ipsec: T4333: migrate to new vyos_defined Jinja2 test 2022-04-13T20:51:42+00:00 Christian Poessinger christian@poessinger.com 2022-04-13T20:51:42+00:00 urn:sha1:e8a637eec0cc398f78a877ece6b9c7cdca418970 dmvpn: T4010: Fix template ipsec profile rekey_time 2021-11-18T20:05:27+00:00 Viacheslav v.gletenko@vyos.io 2021-11-18T20:05:27+00:00 urn:sha1:d75403f78aef06356c6b6c20acdf6b932b02dd66 ipsec: T3828: Use IKE dh-group when ESP dh-group is set to `enable` 2021-09-13T12:23:54+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2021-09-13T11:51:49+00:00 urn:sha1:2e68b070f1531c87d5976213565d9b929c5589ab ipsec: dmvpn: T3764: bugfix mixed up IKE/ESP lifetime variable 2021-08-19T10:34:35+00:00 Christian Poessinger christian@poessinger.com 2021-08-19T10:34:35+00:00 urn:sha1:95955aa9a7294bdbb4fe9e5bd0c1d58512f894ec IKE lifetime is life_time, and ESP lifetime is rekey_time. ipsec: T2816: remove default values from Jinja2 template and place them in XML 2021-07-03T13:39:17+00:00 Christian Poessinger christian@poessinger.com 2021-07-03T13:39:17+00:00 urn:sha1:1e74c0df2179c60036e440e15ed9036163039b2a VyOS has a known to work mechanism in supplying CLI default values into the Python configuration scripts. This commit removes hardcoded default values from the Jinja2 template and places them into the appropriate XML definitions. The big advantage is that the default value itself and the corresponding help string are located in the exact same file. ipsec: T2816: rework IKE and ESP key assignment 2021-07-03T13:31:38+00:00 Christian Poessinger christian@poessinger.com 2021-07-03T13:31:38+00:00 urn:sha1:a1abb118c9eb413f3c78cfb2077f9c0d4b443c3a Commit 2d79a500 ("ipsec: T2816: add Jinja2 converter for ESP/IKE groups to string") added a Jinja2 helper function which can be used to transform VyOS CLI ESP and IKE key proposals into a strongSwan compatible string cipher. This commit changes the IPSec implementation to make use of this new Jinja2 filter fubction/Python helper. This is required base work for better automated tests (smoketests) but also for an IKEv2 road-warrior setup. ipsec: T2816: adjust Jinja2 template to coding style 2021-07-02T20:16:38+00:00 Christian Poessinger christian@poessinger.com 2021-07-02T20:16:38+00:00 urn:sha1:ff004bee54df0b298c56e91b5f41dda075d35220 * use indent = 2 * prefer 'if foo.bar is defined' over 'if "bar" in foo' ipsec: T2816: T645: T3613: Migrated IPsec to swanctl, includes multiple selectors, and selectors with VTI. 2021-06-14T22:16:42+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2021-06-14T11:04:04+00:00 urn:sha1:11b5636519b360074eb2877006f2d8d63d9f6610