Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-04-18 | openvpn: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-13 | openvpn: T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-02-09 | openvpn: T3686: Fix for check local-address in script and tmpl | Viacheslav Hletenko | |
Local-address should be checked/executed only if it exists in the openvpn configuration, dictionary, jinja2 template | |||
2021-11-01 | Merge branch 'current' into T3350-sagitta | zdc | |
2021-10-07 | Merge branch 'current' into 2fa | Kim | |
2021-10-07 | openvpn: T3805: drop privileges using systemd - required for rtnetlink | Christian Poessinger | |
2021-10-07 | pull request fixes | Kim Hagen | |
2021-10-04 | OpenVPN: T3350: Changed custom options for OpenVPN processing | zsdc | |
Custom OpenVPN options moved back to the command line from a configuration file. This should keep full compatibility with the `crux` branch, and allows to avoid mistakes with parsing options that contain `--` in the middle. The only smart part of this - handling a `push` option. Because of internal changes in OpenVPN, previously it did not require an argument in the double-quotes, but after version update in `equuleus` and `sagitta` old syntax became invalid. So, all the `push` options are processed to add quotes. The solution is still not complete, because if a single config line contains `push` with other options, it will not work, but it is better than nothing. | |||
2021-09-27 | openvpn: T690: Fix template for gateway and metric | Viacheslav | |
Some OpenVPN clients doesnt support option gateway and metric. Set metric option only when 'metric' was added in config explicity. (cherry picked from commit 96681d8bf1ede069b573a4cbe3a2493c374d048e) | |||
2021-09-23 | openvpn: T3642: Openvpn does not work without dh parameter in EC mode | Nicolas Riebesel | |
2021-09-17 | Revert "openvpn: T3736: openvpn-option keeps and adds double dashes (--)" | Kim Hagen | |
This reverts commit 415e572dfba776a981e2ec1e4331c30cd5cb59f3. | |||
2021-09-17 | update the location of the openvpn-otp.so plugin | Kim Hagen | |
2021-09-08 | openvpn: T3805: drop privileges using systemd - required for rtnetlink | Christian Poessinger | |
2021-09-03 | do not use capitals in opmode | Kim Hagen | |
rename t0 to drift add subnemu for 2fa to make it more readable | |||
2021-09-03 | fix configure error if 2fa is defined but no option is defined | Kim Hagen | |
2021-09-03 | change secret file location in template | Kim Hagen | |
2021-09-03 | fix file location and use correct variable | Kim Hagen | |
2021-09-02 | add 2fa op files and update template | Kim Hagen | |
2021-08-17 | add part 2fa | Kim Hagen | |
2021-08-16 | openvpn: T690: Add metric for pushed routes | Viacheslav | |
2021-08-11 | openvpn: T3736: openvpn-option keeps and adds double dashes (--) | Kim Hagen | |
2021-07-21 | pki: openvpn: T3642: Migrate OpenVPN to PKI and refactor | sarthurdev | |
2021-06-25 | openvpn: T1704: drop deprecated disable-ncp option | Christian Poessinger | |
2021-06-24 | openvpn: T1512: T3641: drop deprecated "compat-names" option | Christian Poessinger | |
2021-06-24 | openvpn: T3641: remove deprecated iproute option | Christian Poessinger | |
Executing iproute2 commands as unprivileged member of the openvpn group is now handled via a sudoers file. | |||
2021-01-17 | openvpn: T2381: bugfix rendering multiple openvpn-options from CLI | Christian Poessinger | |
The CLI statement "set interfaces openvpn vtun10 openvpn-option '--tun-mtu 1500 --fragment 1300 --mssfix'" will render in vtun10.conf to: --tun-mtu 1500 --fragment 1300 --mssfix On startup OpenVPN complains about: openvpn-vtun10: Options error: Unrecognized option or missing or extra parameter(s) in vtun10.conf:76: tun-mtu (2.4.7) The options must be split on -- to a new configuration line. | |||
2020-12-31 | openvpn: T2994: fix ipv6 server mode | Christian Poessinger | |
2020-12-21 | openvpn: T3143: Push routes in correct format <IP> <NETMASK> | DmitriyEshenko | |
2020-12-08 | openvpn: T3117: fix generated ncp-ciphers in server config | Christian Poessinger | |
2020-11-23 | openvpn: T3074: fix site-2-site operation mode | Christian Poessinger | |
When rendering the configs "ifconfig" statement wrong IP addresses have been used for the "tun" operating mode. This has been corrected. | |||
2020-11-22 | openvpn: T3080: add missing multiplication on keepalive config option | Christian Poessinger | |
2020-11-21 | openvpn: T3060: always listen op IPv4 and IPv6 sockets | Christian Poessinger | |
2020-11-14 | openvpn: T2550: default connection protocol to udp | Christian Poessinger | |
setting this to udp will allow both IPv4 and IPv6 connections. According to the MAN page: proto indicates the protocol to use when connecting with the remote, and may be "tcp" or "udp". For forcing IPv4 or IPv6 connection suffix tcp or udp with 4/6 like udp4/udp6/tcp4/tcp6. | |||
2020-11-13 | openvpn: T3060: fix CLI to real config mapping for protocol node | Christian Poessinger | |
2020-11-13 | vyos.template: provide general is_ip(v4|v6) helpers | Christian Poessinger | |
We had two places were the is_ip, is_ipv4 and is_ipv6 helpers had been defined. All places now have been converged into vyos.template as they are used both in the Jinja2 templates and also in our scripts. | |||
2020-11-13 | openvpn: T3051: fix creation of ifconfig-pool for client communication | Christian Poessinger | |
2020-11-01 | openvpn: T2994: re-add ifconfig-pool statement in server config | Christian Poessinger | |
Re-organize the template code and add addtitional Jinja2 filters for processing the ifconfig-pool statement. This reverts the changes from commit 7e546be9 ("openvpn: T2994: temporary revert to 1.2 crux behavior for client pools"). | |||
2020-11-01 | openvpn: T2994: remove workarounds for individual ipv4 and ipv6 keys | Christian Poessinger | |
Remove workaround which split (local|remote)_address and also subnet keys into individual keys for the assigned IP address family (4/6). During template rendering check IP version by introducing new ipv4 and ipv6 Jinja2 filters {% if foo | ipv4 %} or {% if bar | ipv6 %} options. | |||
2020-10-31 | openvpn: T2994: temporary revert to 1.2 crux behavior for client pools | Christian Poessinger | |
2020-10-31 | openvpn: T2994: bugfix evaluating replace-default-route in template | Christian Poessinger | |
2020-10-30 | openvpn: T2994: migrate to get_config_dict() | Christian Poessinger | |
2020-09-22 | openvpn: T2906: tls-auth missing key direction | Marcus Hoff | |
2020-09-22 | openvpn: T2907: add 'none' encryption option to not encrypt any data | Marcus Hoff | |
2020-05-04 | openvpn: T2241: remove redundant bridge_member variable | Jernej Jakob | |
2020-04-20 | openvpn: T2339: fix for IPv4 local-host addresses | Jernej Jakob | |
Commit bb9f998 introduced a bug where openvpn fails to start if 'local-host' is an IPv4 address due to 'proto' wanting a IPv6 socket. This adds a conditional check and uses normal proto if it's IPv4. | |||
2020-04-19 | openvpn: T2308: fix path to UNIX control socket | Christian Poessinger | |
Bug introduced in commit b36e6e6 ("openvpn: T2273: migrate from SysVinit to systemd") as not all relevant configuration files have been re-rendered into /run/openvpn. | |||
2020-04-19 | openvpn: T2336: fix auth-user-pass file generation | Christian Poessinger | |
Bug introduced in commit b36e6e6 ("openvpn: T2273: migrate from SysVinit to systemd") as not all relevant configuration files have been re-rendered into /run/openvpn | |||
2020-04-16 | openvpn: T149: IPv6 support | Jernej Jakob | |
- allow configuring IPv6 server addresses and push options - add IPv6 server client IP pool - add IPv6 push dhcp-option DNS6 - allow configuring IPv6 server client addresses - allow configuring IPv6 site-to-site addresses - validate all IPv6 options and addresses - use protos that explicitely open an IPv6 listening socket (tcp6-server, tcp6-client, udp6) as the default on Linux listens on IPv4 only (https://community.openvpn.net/openvpn/ticket/360) - add validator for any IPv6 address, host or network (used by pool) | |||
2020-04-15 | openvpn: T2335: allow disabling client-ip-pool | Jernej Jakob | |
2020-04-13 | Merge pull request #325 from jjakob/openvpn-pool | Christian Poessinger | |
openvpn: T2235: add custom server pool handling |