vyos-1x.git/src/conf_mode/interfaces_openvpn.py, branch rolling

firewall: T8761: re-introduce VRF interface names in generated firewall config

2026-07-01T19:51:21+00:00

This change re-implements the intended behaviour from T4180 aswell as from T4506, it ensures that both the vrf-member interface aswell as the vrf itself is added as an oifname -> meaning that traffic traversing and originating from withing VyOS is matches outbound. Changes done by c-po: * re-sort dependency list to keep diff low * vyos.configdict.is_vrf_changed() should return early and not carry over the to-be return value * keep common coding style (dict by . separation) in nftables-zone.j2 Co-authored-by: Christian Breunig

template: T8923: fix typo in function argument "formater" -> "formatter"

2026-06-16T18:24:44+00:00

T8923: normalize "can not" to "cannot"

2026-06-16T18:24:44+00:00

Replace two-word "can not" / "Can not" with "cannot" across comments, ConfigError messages, CLI help text, and op-mode output. Standard SNMP MIB files under mibs/ are left unchanged.

openvpn: T6478: Skip restart service when only client config changed

2026-05-25T12:39:27+00:00

OpenVPN server reads per-client files from `--client-config-dir` at connect time. When only `interfaces openvpn vtunN server client ` entries are modified there is no need to send SIGHUP or restart the service - the new CCD files written by `generate()` will be picked up automatically on the next client connection.

Debian: T8147: remove out-of-tree OpenVPN DCO module - incl. in Kernel 6.18

2026-05-02T18:35:01+00:00

Move from the out-of-tree to an in-tree variant of the OpenVPN DCO module. As this was not available in the previous used LTS 6.6 Kernel it now is available while we upgrade to Linux 6.18.

T8410: Fix typos and mistakes for operational and configuration commands

2026-03-24T17:02:56+00:00

Fix typos and mistakes in the commands and comments No functional changes

openvpn: T8304: site-to-site VPN requires either cipher or data-ciphers-fallback

2026-03-06T19:14:56+00:00

openvpn: T7633: Add support for 'data-ciphers-fallback' in site-to-site tunnels

2026-01-12T13:44:32+00:00

- Introduced new CLI option 'data-ciphers-fallback' for OpenVPN interfaces (used as fallback cipher in site-to-site mode) - Adjust migration 1‑to‑2 to skip migrating 'cipher' for site‑to‑site interfaces

T7591: remove copyright years from source files

2025-06-28T21:16:52+00:00

The legal team says years are not necessary so we can go ahead with it, since it will simplify backporting. Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \ 's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors /g' In addition we will error-out during "make" if someone re-adds a legacy copyright notice

T6896: OpenVPN change CRL revoke without restart (#4245)

2024-12-31T10:48:54+00:00

Do not restart service when changed only CRL. Service still restart when cert revoke first time