vyos-1x.git/data/templates/ipsec, branch current-merge-commit-handlingVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=current-merge-commit-handling2024-08-01T11:08:36+00:00Merge pull request #3221 from lucasec/t58732024-08-01T11:08:36+00:00Christian Breunigchristian@breunig.cc2024-08-01T11:08:36+00:00urn:sha1:962ead698e191ff413aaa1585270dfed48100547
T5873: ipsec remote access VPN: support VTI interfaces.T6617: T6618: vpn ipsec remote-access: fix profile generators2024-07-30T07:16:59+00:00Lucas Christianlucas@lucasec.com2024-07-30T06:22:05+00:00urn:sha1:e97d86e619e134f4dfda06efb7df4a3296d17b95T5873: vpn ipsec remote-access: improve child ESP session naming2024-07-27T01:26:30+00:00Lucas Christianlucas@lucasec.com2024-07-07T10:19:02+00:00urn:sha1:50cf1746d3ab5e3666a3e502c67d7d853ae7f932T5873: vpn ipsec remote-access: support VTI interfaces2024-07-22T17:57:45+00:00Lucas Christianlucas@lucasec.com2023-12-29T06:26:56+00:00urn:sha1:4d2c89dcd50d3c158dc76ac5ab843dd66105bc02T6599: ipsec: support disabling rekey of CHILD_SA.2024-07-22T09:15:36+00:00Lucas Christianlucas@lucasec.com2024-07-21T02:29:14+00:00urn:sha1:fd5d7ff0b4fd69b248ecb29c6ec1f3cf844c41cf
Also adds support for life_bytes, life_packets, and DPD for
remote-access connections. Changes behavior of remote-access esp-group
lifetime setting to have parity with site-to-site connections.
op-mode: T6424: ipsec: honor certificate CN and CA chain during profile generation2024-06-09T20:03:50+00:00Christian Breunigchristian@breunig.cc2024-06-09T12:39:45+00:00urn:sha1:d65f43589612c30dfaa5ce30aca5b8b48bf73211
In e6fe6e50a5c ("op-mode: ipsec: T6407: fix profile generation") we fixed
support for multiple CAs when dealing with the generation of Apple IOS profiles.
This commit extends support to properly include the common name of the server
certificate issuer and all it's paren't CAs. A list of parent CAs is
automatically generated from the "PKI" subsystem content and embedded into the
resulting profile.
op-mode: ipsec: T6407: fix profile generation2024-05-30T09:20:56+00:00Christian Breunigchristian@breunig.cc2024-05-30T09:20:56+00:00urn:sha1:e6fe6e50a5c817e18c453e7bc42bb2e1c4b17671
Commit 952b1656f51 ("ipsec: T5606: T5871: Use multi node for CA certificates")
added support for multiple CA certificates which broke the OP mode command
to generate the IPSec profiles as it did not expect a list and was rather
working on a string.
Now multiple CAs can be rendered into the Apple IOS profile.
T6237: IPSec remote access VPN: ability to set EAP ID of clients2024-04-21T20:59:56+00:00Alex Wembezzle.dev@proton.me2024-04-21T20:59:56+00:00urn:sha1:78ea623df20b44309cc6ac9848ed18e97fc4ed03T5871: ipsec remote access VPN: specify "cacerts" for client auth.2024-04-12T04:12:34+00:00Lucas Christianlucas@lucasec.com2023-12-29T06:08:36+00:00urn:sha1:ecc83562b4d756cc50910561a3f52ec260aeb478T5872: re-write exit hook to always regenerate config2024-03-12T06:08:40+00:00Lucas Christianlucas@lucasec.com2024-03-10T18:39:19+00:00urn:sha1:679b78356cbda4de15f96a7f22d4a98037dbeea4