Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-02-27 | openvpn: T2075: add support for OpenVPN tls-crypt file option | Christian Poessinger | |
Encrypt and authenticate all control channel packets with the key from keyfile. Encrypting (and authenticating) control channel packets: * provides more privacy by hiding the certificate used for the TLS connection * makes it harder to identify OpenVPN traffic as such * provides "poor-man's" post-quantum security, against attackers who will never know the pre-shared key (i.e. no forward secrecy) | |||
2020-01-26 | Interfaces: unify interface help text | Christian Poessinger | |
2019-12-22 | interfaces: fix tagNode regex constraint (remove ^) | Christian Poessinger | |
2019-12-06 | T1843: use include files to disable interface (admin down) | Christian Poessinger | |
2019-12-06 | T1843: use include files for interface description | Christian Poessinger | |
2019-12-06 | T1843: run interface-definitions though GCC preprocessor | Christian Poessinger | |
A lot of XML code is duplicated (VLAN, interface address) for instance. Such XML definitions should be moved to feature.xml.i files and then just pulled in via GCC preprocessor #include definition in e.g. bond or ethernet definitions. This will give us the ability to single-source repeating node definitions as: * Interface Address * Interface Description * Interface Disable * VLAN (both vif-s and vif-c) The .in suffix of the interface-definitions is a marker that those files are input files to the GCC preprocessor. They will be rendered into proper XML files in the build directory. Some node definitions have been reworder to remove escaped double quote occurances which would have been warned about by the GCC preprocessor. |