summaryrefslogtreecommitdiff
path: root/src/conf_mode/wireguard.py
AgeCommit message (Collapse)Author
2019-06-10[wireguard] T1428: Add handling of fwmark setting (#70)Matthias Fetzer
[wireguard] T1428: correct handling of the fwmark option
2019-02-04enhancement: T1225 - wireguard implement 'set int wireguard wg0 peer name ↵hagbard
disable' to disable single peers
2019-01-30Fix: T1217 - cant delete wireguard wg0 interfacehagbard
2019-01-06Fix: T1162 - WireGuard: Unable to modify tunnels - KeyError: 'state'hagbard
2018-12-16Revert "T1087: Firewall on Wireguard Interface implementation"Daniil Baturin
This reverts commit 51f61991092a163f680e4ec8f122e73f4074ddf9. It's not how it's done, those templates are generated by a script in vyatta-cfg-firewall. If we are planning a firewall overhaul in 1.3.x, there's no reason to transplant the old approach to new code.
2018-12-11T1087: Firewall on Wireguard Interface implementationhagbard
2018-11-30Fixes: T1061: Wireguard: Missing option to administrativly shutdown interfacehagbard
2018-11-05T965: Fix Wireguard configuration inconsistencieshagbard
- pubkey updates now work - removing peers or interfaces work, was related tothe fact that tag nodes are called multiple times
2018-11-05T966: Traceback when deleting wireguard interfacehagbard
2018-11-02T949: config issue when creating multiple wg interfaces at the same time.hagbard
2018-09-02T793: wireguard preshared-key implementationhagbard
- the psk is only read from a file, due to sudo it's redirection doesn't work file is created in /tmp (it's tmpfs), wg comand executed and the psk file is deleted again, to avoid leakage of the psk. It's create umaks(077) and root:root
2018-08-26T427: changed option listen-port to only porthagbard
2018-08-25idents fixed (sonarcloud complains)hagbard
2018-08-24T791: endpoint pattern doesn't need to be checked, wg returns an error ↵hagbard
message if it's not IP:port
2018-08-24T791: mtu size implementationhagbard
2018-08-23T793: fwmark implementationhagbard
2018-08-23listen-port for update mode needs to be 0 to switch back to randomly chosen ↵hagbard
if previously configured
2018-08-23T791: implementationhagbard
TODO: fwmark, mtu and pre-shared key
2018-08-20bugfix: if config and effective value are equal, there is no change ↵hagbard
required, deleting it from the dict will result in a keyerror if not aset at all
2018-08-17T783: to disable keepalive is has to be set to 0.hagbard
2018-08-17T783: conf mode persistent-keepalive implementationhagbard
2018-08-17T427: endpoint is only required for client mode, it's now an optional parameterhagbard
2018-08-17remove endpoint check, which is optional. server mode find the endpoint from ↵hagbard
an authenticated package.
2018-08-12T427: wireguard supporthagbard