VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=fix%2FT8859-dh-keysize-validation 2026-09-13T19:06:12+00:00 2026-09-13T19:06:12+00:00 Antonio Quartulli antonio@mandelbit.com 2026-08-30T17:43:51+00:00 urn:sha1:585c491b3ee5c02a0367bf2bd752fe4510200c6a "offload dco" was accepted next to tap, static keys, compression, CBC ciphers and raw options OpenVPN refuses to offload, because 2.6 ignored the module altogether. Those combinations now fail verify(), which would break config load on upgrade, so drop the request instead. The migration has to mirror verify_dco() exactly: anything it keeps that verify() turns away leaves a router unable to commit its own configuration. 2026-01-12T13:44:32+00:00 Oleksandr Kuchmystyi o.kuchmystyi@vyos.io 2025-12-31T07:50:21+00:00 urn:sha1:61487b13da8dc270907633a3140bd0cc2aa0926a - Introduced new CLI option 'data-ciphers-fallback' for OpenVPN interfaces (used as fallback cipher in site-to-site mode) - Adjust migration 1‑to‑2 to skip migrating 'cipher' for site‑to‑site interfaces 2024-07-25T10:07:02+00:00 srividya0208 a.srividya@vyos.io 2024-07-15T10:30:00+00:00 urn:sha1:b62b2f5f8a9c4f0a7dc26bce1f15843651119256 2024-07-18T18:33:24+00:00 Daniil Baturin daniil@vyos.io 2024-07-18T18:33:24+00:00 urn:sha1:e2b05343b30d2f989968532106e792cbaf75ecf6 2024-06-11T15:04:18+00:00 Nataliia Solomko natalirs1985@gmail.com 2024-06-11T15:04:18+00:00 urn:sha1:0f669a22615a18c3cd8da2f65f3ed79686992320 2023-10-12T13:17:31+00:00 John Estabrook jestabro@vyos.io 2023-10-12T13:17:31+00:00 urn:sha1:227e3f2876e504a4e3dc52b009d378b675e5ce51 2023-10-12T00:30:25+00:00 Daniil Baturin daniil@baturin.org 2023-10-09T16:30:12+00:00 urn:sha1:941c5adfaca2c7e3318b2ba0e7f36c37acaa53c1