VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=fix%2FT8859-dh-keysize-validation 2026-09-26T17:09:05+00:00 2026-09-26T17:09:05+00:00 Yuriy Andamasov yuriy@vyos.io 2026-09-26T16:58:39+00:00 urn:sha1:d497c3b7a7504bb578874cc706dc75849ad84c2d The Diffie-Hellman length check stringified the requested minimum keysize into a variable it never used, then converted the original argument again for the comparison. A non-numeric value therefore escaped as an uncaught ValueError from the comparison rather than being reported where it was passed in. The argument is now typed and validated up front: a non-integer raises TypeError, booleans included, and a non-positive integer raises ValueError. Both indicate a logic error in the calling script and should fail loudly instead of silently reporting an undersized key. The only callers today are the unit tests, so the contract is free to change. A file that exists but holds no readable parameters is user input rather than a logic error, and now fails the check instead of propagating the error from openssl. The bit-count pattern becomes a raw string, and the tests pass integer keysizes and cover the new paths. 2026-09-25T14:55:23+00:00 Daniil Baturin daniil@vyos.io 2026-09-25T14:55:23+00:00 urn:sha1:430dda1e170576239d3580c1b7a6381525a05cbc vpp: T9146: Enable DPDK no-multi-seg when a full frame fits the buffer 2026-09-25T14:03:20+00:00 Nataliia S. 81954790+natali-rs1985@users.noreply.github.com 2026-09-25T14:03:20+00:00 urn:sha1:480f28781023d81f4be08524cecff172d1d55c3f T9274: Add more telegraf configuration 2026-09-24T18:30:37+00:00 Christian Breunig christian@breunig.cc 2026-09-24T18:30:37+00:00 urn:sha1:4e3e38a2e665bb2d8e9446116e02300bb38a2ab4 bgp: T9345: restore named-VRF AFI validation 2026-09-24T17:06:31+00:00 Christian Breunig christian@breunig.cc 2026-09-24T17:06:31+00:00 urn:sha1:990fa1569d3087842d8ff407d8c2ba4ead1d847e vxlan: T9319: add VXLAN-GBP support 2026-09-24T16:00:38+00:00 MichaelSonger michael.songer@infinitivegroup.co.uk 2026-09-24T16:00:38+00:00 urn:sha1:75781f0d9dbf0174dfbb55d5f0e8228a38b6f608 Added the ability to make several agent values configurable instead of hardcoded. 2026-09-24T15:36:52+00:00 Daniil Baturin daniil@vyos.io 2026-09-24T15:36:52+00:00 urn:sha1:e0ca5c66796337dd992d6572019ea6f4edb475dc frr: T9344: remove dead code path when vyos-configd is not running 2026-09-24T15:32:40+00:00 Daniil Baturin daniil@vyos.io 2026-09-24T15:32:40+00:00 urn:sha1:eef0eb852bdd92feb9164463f7f0909e13a54c60 ipsec: T9320: Add deprecation warning for IKEv1 key-exchange 2026-09-23T04:00:15+00:00 Takayuki Shiroma t.shiroma.oki@gmail.com 2026-09-23T04:00:15+00:00 urn:sha1:66729533f101180c63b5fe75e4d9d3e3a0635e24 2026-09-22T23:13:09+00:00 Haakon Nore haakon@nore.cloud 2026-09-15T08:28:01+00:00 urn:sha1:4fd9ad0ac3a79aba079b10f58ec897847eb271d5 Expose the Group Policy extension as a valueless gbp CLI node and pass it to iproute2 when creating VXLAN links. Recreate links when GBP changes and reject configurations combining GBP with GPE. Reject conflicting GBP settings on a shared UDP port, accounting for address families and underlay VRF socket bindings. Warn that external mode carries GBP in tunnel metadata instead of the packet mark. Add smoketest coverage for GBP creation, removal and re-enabling, retained interface settings, rejection without changing the running tunnel, shared ports, separate address families, and external mode.