VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling 2026-05-13T16:52:04+00:00 2026-05-13T16:52:04+00:00 Nataliia Solomko natalirs1985@gmail.com 2026-05-13T14:10:46+00:00 urn:sha1:0284f31bb99bbe2fad9fda9cf99d73e4fa3d2dfd Previously generated CRLs were missing the Authority Key Identifier and CRL Number extensions required by strongSwan for certificate revocation validation. Without these extensions, strongSwan silently ignores the CRL, allowing revoked certificates to authenticate successfully. The migration regenerates existing CRLs for all CAs that have a private key available. CAs with passphrase-protected keys are skipped with a warning, as the passphrase cannot be provided non-interactively