Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-08-02 | OPENVPN: T6555: fix name to bridge | fett0 | |
2024-07-31 | OPENVPN: T6555: add server-bridge options in mode server | fett0 | |
2024-07-25 | OpenVPN CLI-option: T6571: rename ncp-ciphers with data-ciphers | srividya0208 | |
2023-12-31 | T5474: establish common file name pattern for XML conf mode commands | Christian Breunig | |
We will use _ as CLI level divider. The XML definition filename and also the Python helper should match the CLI node. Example: set interfaces ethernet -> interfaces_ethernet.xml.in set interfaces bond -> interfaces_bond.xml.in set service dhcp-server -> service_dhcp-server-xml.in | |||
2023-11-12 | T5728: OpenVPN server replace first_host_address to vpn_gateway | Viacheslav Hletenko | |
Some OpenVPN clients (OpenVPN3) do not understand address of gateway for the pushed networks. It leads that pushed routes are not installed at all. Replace `subnet | first_host_address` to the `vpn_gateway` to fix it | |||
2023-10-12 | openvpn: T5634: Remove support for insecure DES and Blowfish ciphers | Daniil Baturin | |
2023-09-14 | Merge pull request #1637 from ordex/T3214 | Daniil Baturin | |
openvpn: T3214: fix server-ipv6 and nopool handling | |||
2023-08-15 | T5271: correct dict path in the template for OpenVPN peer fingerprint | Daniil Baturin | |
2023-08-15 | T5270: generate 'dh none' unconditionally when dh-params is no present | Daniil Baturin | |
The condition is useless since OpenVPN simply switches to ECDH in all modes when the classic DH prime is not specified | |||
2023-08-09 | openvpn: T5271: add peer certificate fingerprint option | Daniil Baturin | |
2023-07-27 | openvpn: T4974: move CLI node "enable-dco" -> "offload dco" to match other ↵ | Christian Breunig | |
inetfaces Keep a common CLI structure by re-using the already established offload node from ethernet. | |||
2023-07-21 | T4974:add/fixed enable ovpn-dco by default | fett0 | |
2023-04-24 | OpenVPN: T4402: Update OpenVPN server.conf.j2 template | Nicolas Riebesel | |
The ifconfig-pool command requires the arguments separated by a space. Hence the space was added before the subnet mask. | |||
2023-02-23 | T5027: Enable legacy provider to support current ciphers | Viacheslav Hletenko | |
* We will need to remove insecure ciphers as a long-term solution (BF-CBC, DES...) | |||
2022-11-02 | openvpn: T3214: specify nopool on --server line only if needed | Antonio Quartulli | |
The --server directive will already create a pool automatically. For this reason noppol should be used only when an explicit client-ip-pool was configured by the user. If that's not the case, then the nopool flag should not be specified and no manual pool should be configured. Signed-off-by: Antonio Quartulli <antonio@mandelbit.com> | |||
2022-04-18 | openvpn: T4353: fix Jinja2 linting errors | Christian Poessinger | |