<feed xmlns='http://www.w3.org/2005/Atom'>
<title>vyos-1x.git/data/templates/ocserv, branch rolling</title>
<subtitle>VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
</subtitle>
<id>https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling</id>
<link rel='self' href='https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/'/>
<updated>2026-05-21T23:15:49+00:00</updated>
<entry>
<title>openconnect: T7654: OpenConnect Script Execution</title>
<updated>2026-05-21T23:15:49+00:00</updated>
<author>
<name>Giga Murphy</name>
<email>giga1699@gmail.com</email>
</author>
<published>2026-05-21T23:15:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=81ad0d10ad1df093cb19f715d39696e50f75411a'/>
<id>urn:sha1:81ad0d10ad1df093cb19f715d39696e50f75411a</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T7635: OpenConnect Certificate Authentication</title>
<updated>2025-12-29T06:11:33+00:00</updated>
<author>
<name>Giga Murphy</name>
<email>giga1699@gmail.com</email>
</author>
<published>2025-07-24T00:18:27+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=bb7476e1a2f61504f274823ced93c5bb608a76c6'/>
<id>urn:sha1:bb7476e1a2f61504f274823ced93c5bb608a76c6</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T6757: Openconnect: fix template for correct config parsing while configuring source address for radius authentication.</title>
<updated>2024-10-02T13:26:37+00:00</updated>
<author>
<name>Nicolas Fort</name>
<email>nicolasfort1988@gmail.com</email>
</author>
<published>2024-10-02T13:22:27+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=289ca9987b14f7b0d94f528c131d080f51b1a0db'/>
<id>urn:sha1:289ca9987b14f7b0d94f528c131d080f51b1a0db</id>
<content type='text'>
</content>
</entry>
<entry>
<title>openconnect: T4982: Support defining minimum TLS version in openconnect VPN</title>
<updated>2024-04-29T19:53:51+00:00</updated>
<author>
<name>Alex W</name>
<email>embezzle.dev@proton.me</email>
</author>
<published>2024-04-29T19:53:51+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=9ff74d4370f0a5f66c303074796dab8b1ca5c4a5'/>
<id>urn:sha1:9ff74d4370f0a5f66c303074796dab8b1ca5c4a5</id>
<content type='text'>
</content>
</entry>
<entry>
<title>ocserv: T5796: add smoketest for new "http-security-headers" feature</title>
<updated>2023-12-16T07:39:57+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2023-12-16T07:35:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=1c82e661e04e0979e09e487a58a801ffa9f438e8'/>
<id>urn:sha1:1c82e661e04e0979e09e487a58a801ffa9f438e8</id>
<content type='text'>
</content>
</entry>
<entry>
<title>ocserv: T5796: add CLI knob "http-security-headers"</title>
<updated>2023-12-16T07:27:49+00:00</updated>
<author>
<name>fett0</name>
<email>fernando.gmaidana@gmail.com</email>
</author>
<published>2023-12-15T18:39:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=24f449cc099703df95646c719e9d3f308ed1a3f0'/>
<id>urn:sha1:24f449cc099703df95646c719e9d3f308ed1a3f0</id>
<content type='text'>
OCserv manual recommended HTTP headers tobe included in the configuration.

(cherry picked from commit ad65d37ddf92ec8416c84707d7d41e63346b550c)
</content>
</entry>
<entry>
<title> T5796:add/fixed OCSERV HTTP security headers</title>
<updated>2023-12-02T12:11:56+00:00</updated>
<author>
<name>fett0</name>
<email>fernando.gmaidana@gmail.com</email>
</author>
<published>2023-12-02T12:11:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=db51546edd653d3637cb26d6957ce5222d44d395'/>
<id>urn:sha1:db51546edd653d3637cb26d6957ce5222d44d395</id>
<content type='text'>
</content>
</entry>
<entry>
<title>ocserv: T3896: improve XML definition and add warning about 3rd party configs</title>
<updated>2023-05-12T19:06:56+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2023-05-12T19:03:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=d1abba03229128c3f2a6f718e9f14f4d7285e74d'/>
<id>urn:sha1:d1abba03229128c3f2a6f718e9f14f4d7285e74d</id>
<content type='text'>
When enabling identity-based-config, users can add arbitrary config keys
that are processed by ocserv. The user "must know" what he is been doing, as
invalid config option will make the ocserv daemon go ... whoop!

Thus add a warning and inform the user about this setting.
</content>
</entry>
<entry>
<title>Merge pull request #1783 from PeppyH/T3896-ocserv-config-per-x</title>
<updated>2023-05-12T18:14:56+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2023-05-12T18:14:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=c60e9c932cab24bcc324f45752f0528332cc69a4'/>
<id>urn:sha1:c60e9c932cab24bcc324f45752f0528332cc69a4</id>
<content type='text'>
ocserv: T3896: add CLI options to configure ocserv config-per-user/group</content>
</entry>
<entry>
<title>ocserv: T3896: refactor: change ocserv config-per-x node name</title>
<updated>2023-04-20T07:10:27+00:00</updated>
<author>
<name>Jamie Austin</name>
<email>jamiea@opusv.com.au</email>
</author>
<published>2023-04-20T07:07:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=93de3abe1368cab5ab8cd292689466d7af8e86bc'/>
<id>urn:sha1:93de3abe1368cab5ab8cd292689466d7af8e86bc</id>
<content type='text'>
Changes the node name from config-per-x to identity-based-config, as a result the j2 templates and vpn_openeconnect.py has been refactored to update the node name when accessing it's child nodes.
</content>
</entry>
</feed>
