Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-07-05 | pki: T3642: Support for adding SANs on certificate requests | sarthurdev | |
2021-07-04 | pki: T3642: Add standard extensions to generated certificates | sarthurdev | |
2021-07-03 | pki: T3642: Fix for correct method on encoding certificate request | sarthurdev | |
2021-07-03 | pki: T3642: Add support for signing and revoking subordinate CAs | sarthurdev | |
2021-07-02 | ipsec: T3656: T3659: Fix pass-through with ipv6. Fix op-mode ipsec commands. ↵ | sarthurdev | |
Remove python3-crypto dependency. | |||
2021-06-29 | pki: ipsec: T3642: Migrate IPSec to use PKI configuration | sarthurdev | |
2021-06-29 | pki: T3642: New PKI config and management | sarthurdev | |
2021-06-27 | op-mode: bond: T2546: implement "show interface bond * slaves" command | Christian Poessinger | |
Add implementation with XML and Python. | |||
2021-06-26 | Revert "ipsec: T3643: move swanctl.conf to /run" | Christian Poessinger | |
This reverts commit 95bbbb8bed92a60a320ff255c8b8656145f3c540. | |||
2021-06-26 | nat: nat66: T3648: Fix script logic errors and missing logic handling | jack9603301 | |
2021-06-24 | ipsec: T3643: move swanctl.conf to /run | Christian Poessinger | |
This is the completion of commit 50a742b5 ("IPSec: T3643: Fix path for swanctl.conf file") that moves the generated swanctl file from non-volatile to a volatile (tmpfs backed) storage like we do for all out configuration files. Thus it is ensured after a reboot or service deprecation there are no accidential leftovers from previous configurations stored on the system. | |||
2021-06-23 | IPSec: T3643: Fix path for swanctl.conf file | Viacheslav | |
2021-06-22 | ipsec: T3643: T2816: Update IPSec VPN op-mode commands | sarthurdev | |
2021-06-20 | Merge pull request #889 from erkin/current | Christian Poessinger | |
T3506: loadkey: Add `generate public-key-command` command | |||
2021-06-20 | Add `save` line | erkin | |
2021-06-20 | ipsec: T3617: Correct typo on encryption variable | sarthurdev | |
2021-06-20 | T3506: loadkey: Add `generate public-key-command` command | erkin | |
2021-06-18 | Merge pull request #884 from sarthurdev/opmode_ike_sa | Christian Poessinger | |
ipsec: T2816: Fix 'show vpn ike sa' when key-size is not set | |||
2021-06-18 | ping: T3634: Adding do not fragment to Ping (#885) | Cheeze-It | |
In this commit we add the do not fragment capability for ping commands. Co-authored-by: Cheeze_It <none@none.com> | |||
2021-06-17 | ipsec: T2816: Fix 'show vpn ike sa' when key-size is not set | sarthurdev | |
2021-06-15 | ipsec: T2816: T645: T3613: Migrated IPsec to swanctl, includes multiple ↵ | sarthurdev | |
selectors, and selectors with VTI. | |||
2021-06-13 | wwan: T3620: rename "wirelessmodem wlm" interfaces to new wwan interface tree | Christian Poessinger | |
2021-06-01 | op-mode: T3384: support UDP bandwidth testing | JACK | |
2021-05-28 | ipsec: T2816: IPSec python rework, includes DMVPN and VTI support | Simon | |
2021-05-22 | nat66: T2518: op-mode typo fixup | JACK | |
2021-05-18 | openconnect-server: T3559: Add restart op-command | DmitriyEshenko | |
2021-05-18 | ddns: T3254: fix incorrect update time | FileGo | |
This fixes a bug when show dynamic dns status returned (formatted) UNIX time 0. I have changed the code to use ddclient's mtime value in the cache file, which is updated on every successful sync with DDNS service as opposed to atime, which was previously used. | |||
2021-05-17 | ddclient: T3557: fix FileNotFoundError when querying status information | Christian Poessinger | |
If ddclient is not problery configured it will start up but no status file is generated. This commit checks if the status file exists before reading it. | |||
2021-05-15 | conntrack: T3535: add op-mode commands for tracked connections" | Christian Poessinger | |
2021-05-14 | op-mode: conntrack: T3535: add XML command definitions | Christian Poessinger | |
2021-04-27 | op-mode: ospfv3: T3335: re-use common vtysh_wrapper.sh wrapper | Christian Poessinger | |
Instead of renaming the OSPFv3 commands for every individual XML invocation, also re-use the common helper shell script. One source, one truth! | |||
2021-04-27 | op-mode: T2946: only call 'stty size' if in terminal | John Estabrook | |
2021-04-27 | ipsec: T3473: Decode byte csa-name for op-mode | sever-sever | |
2021-04-26 | dhcpv6-server: T3494: Get address from network to correct sorting | DmitriyEshenko | |
2021-04-25 | wireguard: T1802: add client name to configuration | Christian Poessinger | |
2021-04-24 | wireguard: T1802: generate QR code for clients on CLI | Christian Poessinger | |
generate wireguard mobile-config wg0 server wg.vyos.net address 1.2.2.2/24 WireGuard client configuration for interface: wg0 [Interface] PrivateKey = AEXrZ4b3xFVLg1lql3hy/93+d43q3+3vPdSMUGI6/Fo= Address = 1.2.2.2/24 [Peer] PublicKey = h1HkYlSuHdJN6Qv4Hz4bBzjGg5WUty+U1L7DJsZy1iE= Endpoint = wg.vyos.net:41751 AllowedIPs = 0.0.0.0/0, ::/0 The servers public key and port are automatically extracter from the running config. | |||
2021-04-21 | container: T2216: Rewrite op-mode to python | sever-sever | |
2021-04-21 | containers: T2216: add op-mode "show container network" command | Christian Poessinger | |
2021-04-14 | ipsec: T3333: Fix status for SA state op-mode | sever-sever | |
2021-04-13 | Merge pull request #801 from sever-sever/T2216-pod | Christian Poessinger | |
containers: T2216: Add podman for containers | |||
2021-04-12 | containers: T2216: Add podman for containers | sever-sever | |
2021-04-04 | nat: op-mode: T3435: Improved validation logic for the output of operational ↵ | jack9603301 | |
mode rules | |||
2021-04-04 | nat: op-mode: T3435: Filter extra rules that should not be processed | jack9603301 | |
2021-03-27 | op-mode: ipsec: T3055: Fixed parsing peer name error | jack9603301 | |
2021-03-21 | Merge pull request #778 from sever-sever/T3403 | Christian Poessinger | |
op-mode: T3403: Fix show pppoe sessions interupt | |||
2021-03-21 | ntp: T3416: fix op-mode commands when running inside VRF | Christian Poessinger | |
When NTP is executed inside a VRF context, we also must execute the op-mode commands inside the given VRF. This is a workaround until the op-mode programming library from T3402 is available. | |||
2021-03-20 | op-mode: T3403: Fix show pppoe sessions interupt | sever-sever | |
2021-03-17 | nat66: T2518: Modify NAT ruleid acquisition method | jack9603301 | |
2021-03-17 | nat66: T2518: use Python3 format identifiers | jack9603301 | |
2021-03-17 | nat66: T2518: Correct the wrong logic | jack9603301 | |
For nat66, the previous processing of f0d0a572 (NAT: nat66: t2518: support operation...) has errors. If there is no index 3, we think that this is not the record we need |