summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-11-02openvpn: T3214: specify nopool on --server line only if neededAntonio Quartulli
The --server directive will already create a pool automatically. For this reason noppol should be used only when an explicit client-ip-pool was configured by the user. If that's not the case, then the nopool flag should not be specified and no manual pool should be configured. Signed-off-by: Antonio Quartulli <antonio@mandelbit.com>
2022-11-02openvpn: T3214: warn when setting nopool and server-ipv6 is being usedAntonio Quartulli
Currently OpenVPN does not allow having an IPv6 subnet if 'nopool' was specified on the --server directive. For this eason warn if this specific configuration is being hit. This is probably something that should be fixed upstream, but for now we can't allow this combination of parameters. Signed-off-by: Antonio Quartulli <antonio@mandelbit.com>
2022-11-02openvpn: T3214: allow configuring server with v6 onlyAntonio Quartulli
Starting with v2.5.0 OpenVPN allows configuring a server with an IPv6 only tunnel. For this reason there is no need to depend on the existence of an IPv4 subnet anymore. Signed-off-by: Antonio Quartulli <antonio@mandelbit.com>
2022-11-01login: T4750: add ecdsa-sk and ed25519-sk as supported public key typeChristian Poessinger
2022-11-01Merge pull request #1632 from dmbaturin/vrrp-commit-in-progressViacheslav Hletenko
T4526: use informative error messages for keepalived-fifo with commit in progress
2022-10-31ipsec: T4787: add support for road-warrior/remote-access RADIUS timeoutChristian Poessinger
This enabled users to also use 2FA/MFA authentication with a radius backend as there is enough time to enter the second factor.
2022-10-31T4526: use informative error messages for keepalived-fifo with commit in ↵Daniil Baturin
progress
2022-10-31Merge pull request #1631 from sever-sever/T4786Christian Poessinger
T4786: Add package python3-pyhumps
2022-10-31T4786: Add package python3-pyhumpsViacheslav Hletenko
humps Convert strings (and dictionary keys) between snake case, camel case and pascal case in Python % decamelize('superTCPOption') 'super_tcp_option' % % decamelize({'ParamOption': 'one', 'fooBarBaz': True}) {'param_option': 'one', 'foo_bar_baz': True} %
2022-10-30snmp: T4785: allow @, * and # in SNMP community nameChristian Poessinger
2022-10-29Merge pull request #1621 from sarthurdev/T4774Christian Poessinger
wireguard: T4774: Prevent duplicate peer public keys
2022-10-29Merge pull request #1627 from dmbaturin/stunnel-packageChristian Poessinger
T4783: add stunnel to the image
2022-10-29Merge pull request #1628 from sarthurdev/T3903Christian Poessinger
containers: T3903: Use systemd to handle containers
2022-10-29snmp: T4785: allow ! in community nameChristian Poessinger
2022-10-29static: T4784: add description node for static route/route6 tagNodesChristian Poessinger
2022-10-29containers: T2216: Re-enable container smoketest using busybox imagesarthurdev
2022-10-29containers: T3903: Use systemd units for containerssarthurdev
* ExecStop action with defined timeout allows for quicker reboot/shutdown with containers
2022-10-29T4783: add stunnel to the imageDaniil Baturin
2022-10-28Merge pull request #1624 from dmbaturin/op-mode-bytesViacheslav Hletenko
T4779: output raw memory and storage values in bytes
2022-10-28Merge pull request #1619 from jestabro/component-version-stringJohn Estabrook
T4291: consolidate component version string read/write functions
2022-10-28Merge pull request #1625 from dmbaturin/op-mode-normalize-nonstring-fieldsJohn Estabrook
T4765: handle non-string fields in the raw op mode output normalizer
2022-10-28T4765: handle non-string fields in the raw op mode output normalizerDaniil Baturin
2022-10-28T4779: switch raw output of "show system storage" to bytesDaniil Baturin
2022-10-28T4779: add vyos.util.human_to_bytesDaniil Baturin
2022-10-28T4291: consolidate component version string read/write functionsJohn Estabrook
2022-10-28T4779: use bytes in the raw output of "show system memory"Daniil Baturin
2022-10-28wireguard: T4774: Prevent duplicate peer public keyssarthurdev
2022-10-27Merge pull request #1620 from jestabro/ipsec_show_saJohn Estabrook
ipsec: T4778: raise UnconfiguredSubsystem if IPsec not initialized
2022-10-27ipsec: T4778: raise UnconfiguredSubsystem if IPsec not initializedJohn Estabrook
2022-10-27Merge pull request #1606 from sever-sever/T4762Daniil Baturin
T4762: Add check for show nat if nat config does not exist
2022-10-26Merge pull request #1618 from sarthurdev/T4764Christian Poessinger
nat: T4764: Remove NAT tables on node deletion
2022-10-25Merge pull request #1617 from jestabro/camel_to_snake_caseJohn Estabrook
vyos.util: T4773: add camel_to_snake_case conversion
2022-10-25nat: T4706: Verify translation address or port existssarthurdev
2022-10-25nat: T4764: Remove tables on NAT deletionsarthurdev
2022-10-25vyos.util: T4773: add camel_to_snake_case conversionJohn Estabrook
2022-10-25ci: T4748: add dot to regex char class to allow 'vyos.util: Txxx: ...'John Estabrook
2022-10-25Merge pull request #1613 from jestabro/graphql-hybrid-authJohn Estabrook
graphql: T4574: add JWT token authentication
2022-10-25graphql: T4574: set byte length of shared secret from CLIJohn Estabrook
2022-10-25graphql: T4574: extend smoketest for token authenticationJohn Estabrook
2022-10-25graphql: T4574: set token expiration time in claimsJohn Estabrook
2022-10-25graphql: T4574: add context to read token in queries/mutationsJohn Estabrook
2022-10-25graphql: T4574: read config and generate schema with/without key authJohn Estabrook
2022-10-25graphql: T4574: add mutation for requesting JWT tokenJohn Estabrook
2022-10-25graphql: T4574: add interface definitions for authentication settingsJohn Estabrook
2022-10-25graphql: T4574: reorganize directory structure for clarityJohn Estabrook
2022-10-25graphql: T4574: call all schema definition generation on initJohn Estabrook
2022-10-24Merge pull request #1614 from jestabro/op-mode-route-outputJohn Estabrook
route: T4772: return list of dicts in 'raw' output
2022-10-24route: T4772: return list of dicts in 'raw' outputJohn Estabrook
2022-10-23T4762: Add check for show nat if nat config does not existViacheslav Hletenko
Add check for 'show nat xxx' if nat configuration does not exist
2022-10-21Merge pull request #1611 from dmbaturin/field-normalization-2John Estabrook
T4765: support list and primitives in op mode output normalization