summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-11-04Merge pull request #595 from Cheeze-It/currentChristian Poessinger
mpls-conf: T915: Add TTL security for static LDP neighbors
2020-11-04mpls-conf: T915: Add TTL security for static LDP neighborsCheeze_It
The commit has to do with the addition of TTL security for LDP neighbors. The code was 90% done by Viascheslav. I modified it a little bit to get it to properly work. We added more parameters to the neighbors dynamic loop. Once this is merged then we should be able to add more for the dynamic neighbor statements. The way that this works is to have either TTL disabled, or to add the amount of hops accepted for the neighbor.
2020-11-04openvpn: T3046: create client config dir on-demandChristian Poessinger
This commit partially reverts commit eb1ed5e518 ("openvpn: T2994: re-add ifconfig-pool statement in server config").
2020-11-03Merge branch 'wifi-wpa3' of github.com:c-po/vyos-1x into currentChristian Poessinger
* 'wifi-wpa3' of github.com:c-po/vyos-1x: wireless: T3042: move wifi-regulatory-domain into individual interface definition wireless: T2653: reset wireless priority to crux state wireless: T3034: add WPA3 support wireless: T3043: rename "wpa mode both" to "wpa+wpa2" ifconfig: T2985: fix wireless-bridge creation
2020-11-03wireless: T3042: move wifi-regulatory-domain into individual interface ↵Christian Poessinger
definition
2020-11-03Merge pull request #579 from sever-sever/T2103Christian Poessinger
conf-mode: T2103: Delete value help match en[ospx]N for eth interfaces
2020-11-03Merge pull request #585 from Cheeze-It/currentChristian Poessinger
mpls-conf: T915: Separate IPv4 and IPv6 hello timers, add IPv6 timers
2020-11-03Merge pull request #592 from kroy-the-rabbit/dhcp-fixChristian Poessinger
T2465: Fixing permissions on socket so DHCP works
2020-11-03Merge pull request #593 from sever-sever/T2387Christian Poessinger
bgp-xml: T2387: Fix validators for neighbor update-source
2020-11-03bgp-xml: T2387: Fix validators for neighbor update-sourcesever-sever
2020-11-03T2465: Fixing permissions on socket so DHCP workskroy
2020-11-03wireless: T2653: reset wireless priority to crux stateChristian Poessinger
Now as we can dynamically create bridge interfaces we can also reset the interface priority back to the value it used to be in VyOS 1.2 crux.
2020-11-03wireless: T3034: add WPA3 supportChristian Poessinger
2020-11-03wireless: T3043: rename "wpa mode both" to "wpa+wpa2"Christian Poessinger
2020-11-03ifconfig: T2985: fix wireless-bridge creationChristian Poessinger
2020-11-03Merge pull request #591 from sever-sever/T2850Daniil Baturin
bgp: T2850: Fixing the priority of template processing and missing params
2020-11-03bgp: T2850: Fixing the priority of template processing and missing paramssever-sever
2020-11-02Merge pull request #589 from sever-sever/T2387Christian Poessinger
bgp-xml: T2387: Fix validators and add capability for new format bgp
2020-11-02bgp-xml: T2387: Fix validators and add capability for new format bgpsever-sever
2020-11-01smoketest: openvpn: remove debug code for faster test runsChristian Poessinger
There have been leftovers to bypass testcases by simply just "return True" on most of the testcases.
2020-11-01vyos.template: consolidate is_ipv(4|6) functionalityChristian Poessinger
2020-11-01openvpn: T2994: re-add ifconfig-pool statement in server configChristian Poessinger
Re-organize the template code and add addtitional Jinja2 filters for processing the ifconfig-pool statement. This reverts the changes from commit 7e546be9 ("openvpn: T2994: temporary revert to 1.2 crux behavior for client pools").
2020-11-01test: extend validate testcasesChristian Poessinger
Test additional network combinations of address and prefixes.
2020-11-01openvpn: T3036: support IPv6 remote-addressChristian Poessinger
2020-11-01openvpn: T2994: remove workarounds for individual ipv4 and ipv6 keysChristian Poessinger
Remove workaround which split (local|remote)_address and also subnet keys into individual keys for the assigned IP address family (4/6). During template rendering check IP version by introducing new ipv4 and ipv6 Jinja2 filters {% if foo | ipv4 %} or {% if bar | ipv6 %} options.
2020-11-01test: adjust testcase name for vyos.util.dict_search()Christian Poessinger
After renaming the function in commit 25551c5a ("vyos.util: T2995: rename vyos_dict_search() -> dict_search()"), the test case should be renamed, too.
2020-11-01test: vyos.validate: add unittestsChristian Poessinger
2020-11-01smoketest: VyOS config files do not ned +x optionChristian Poessinger
2020-10-31smoketest: openvpn: fix testcase for server statementChristian Poessinger
After commit 7e546be921 ("openvpn: T2994: temporary revert to 1.2 crux behavior for client pools") also adjust the testcase to not expect the "nopool" statement on the server command.
2020-10-31smoketest: openvpn: test server mode "replace-default-route"Christian Poessinger
2020-10-31openvpn: T2994: temporary revert to 1.2 crux behavior for client poolsChristian Poessinger
2020-10-31openvpn: T2994: bugfix evaluating replace-default-route in templateChristian Poessinger
2020-10-30openvpn: T2994: verify DH key lengthChristian Poessinger
2020-10-30Debian: add OpenSSL dependency, inherited by OpenVPNChristian Poessinger
2020-10-30openvpn: T2994: migrate to get_config_dict()Christian Poessinger
2020-10-30vyos.util: T2995: change comment style for "make test" outputChristian Poessinger
2020-10-30smoketest: openvpn: extend server verify() test with TLS auth keysChristian Poessinger
2020-10-30smoketest: openvpn: test server mode verify() stepsChristian Poessinger
2020-10-30smoketest: openvpn: test site2site mode verify() stepsChristian Poessinger
2020-10-30smoketest: openvpn: test client mode verify() stepsChristian Poessinger
2020-10-30Merge pull request #588 from sever-sever/T3031Christian Poessinger
conf-mode: T3031: Fix ValueHelp for ipv6 multipath
2020-10-30conf-mode: T3031: Fix ValueHelp for ipv6 multipathsever-sever
2020-10-30smoketest: ssh: add bond to vrf testcaseChristian Poessinger
Bind sshd to given VRF and check if it really runs in the VRF context.
2020-10-30ssh: T2635: reuse common verify_vrf() functionChristian Poessinger
2020-10-29verify: T2587: allow MTU < 1280 when IPv6 is disabled on an interfaceChristian Poessinger
2020-10-29Merge pull request #587 from sever-sever/T2850Christian Poessinger
bgp: T2850: Fix FRR template for new bgp scheme
2020-10-29bgp: T2850: Fix FRR template for new bgp schemesever-sever
2020-10-29Merge pull request #586 from cjeanneret/nginx-redirectJohn Estabrook
T3029 Correct generated nginx content
2020-10-29T3029 Correct generated nginx contentCédric Jeanneret
The redirection was using the wrong variable ($server_name), making the browser going to https://_ instead of the right variable.
2020-10-28smoketest: accel: T2631: check disable-accounting optionChristian Poessinger