github.com/vyos/vyatta-op-vpn commits | Ecosyste.ms: OpenCollective

T2816: migrated codebase to vyos-1x

75bce466430b88a9a39eff28d7cfce549f1c2056 authored over 3 years ago by Christian Poessinger <[email protected]>

Merge pull request #27 from sever-sever/T1995

vpn: T1995: Fix op-mode for ike sa

eed8b0fcaa75cbe2ca0784844febbc9a0dd27380 authored over 3 years ago by Daniil Baturin <[email protected]>

vpn: T1995: Fix op-mode for ike sa

61246089c787c231639b66ae903c933a339b5b68 authored over 3 years ago by sever-sever <[email protected]>

Merge pull request #26 from lsenecaux/patch-1

T3380: fix show vpn ike sa with IPv6 Peers

06522e435baff270c794da4aba21ff1e9ba72216 authored over 3 years ago by Daniil Baturin <[email protected]>

Update OPMode.pm

IPv6 regex is not only made up of digits
This change allows a correct display of the command 's...

8c879a23f9438f1d0d2acf56134be816ece69e05 authored over 3 years ago by lsenecaux <[email protected]>

Jenkins: T2625: migrate to build library

6f591c7b909cac87e1914fa644b3f3f3bd7ed763 authored over 4 years ago by Christian Poessinger <[email protected]>

Jenkins: T1870: support GitHub PullRequest builds

34d3dee32a37da255c7d3c25020311245a6fe9e1 authored over 4 years ago by Christian Poessinger <[email protected]>

T2120: remove @ from peer name when pasing names to /usr/bin/ipsec

9cfa3b3fec5331b11480794432f051085690fb14 authored over 4 years ago by Daniil Baturin <[email protected]>

Jenkins: make pipeline branch independent

274b4e7cf0e21fddf1b9b09d17f73487b7d81c15 authored almost 5 years ago by Christian Poessinger <[email protected]>

Merge branch 'equuleus' of github.com:vyos/vyatta-op-vpn into current

* 'equuleus' of github.com:vyos/vyatta-op-vpn:
Jenkins: import Pipeline from vyos-1x commit bd...

950593368310a6f2b5cd75bd0fe80bc5ef4ff075 authored almost 5 years ago by Christian Poessinger <[email protected]>

Merge pull request #24 from pkharat/current

Supporting aes-gcm-*/chacha encryption algos in " sh vpn * " commands output

8c9c10bfb8ce611ca51fc307c0110dc660cd460f authored about 5 years ago by Christian Poessinger <[email protected]>

[vyos vyatta-op-vpn] T1735: Code to handle "sh vpn *" commands output when

aes-gcm-*/chacha encryption algorithms are used for ike and esp proposal.

5ec160097d5b188aabe72d291a0f253967082f3c authored about 5 years ago by pkharat <[email protected]>

Jenkins: import Pipeline from vyos-1x commit bd00ec7

c6d933abb715e8fa92506a5fcbb8b47b58541936 authored about 5 years ago by Christian Poessinger <[email protected]>

Jenkins: import Pipeline from vyos-1x commit bd00ec7

49867c31ea372868937c59e79952f410207ef9b6 authored about 5 years ago by Christian Poessinger <[email protected]>

update Jenkins file for equuleus

9cf7370a7695bfe59d9e8564b353fc0adac436eb authored about 5 years ago by UnicronNL <[email protected]>

Create Jenkinsfile current

6c17a5813fb13371401a1ae507029fd5be907faa authored over 5 years ago by Kim Hagen <[email protected]>

Remove unused file from configure.ac

09645edbbfd102c1f59d8ce01c997da25e2b74bf authored almost 6 years ago by Daniil Baturin <[email protected]>

T956: add a new script for displaying IPsec SAs.

f6b64dcc7d038e1a0116f49582fa6ca3cb719a30 authored almost 6 years ago by Daniil Baturin <[email protected]>

T304: remove the "show vpn debug detail" command that was based on a script StrongSWAN no longer provides.

9de1d15636e98f53125cbe46c85be97ab915f967 authored almost 6 years ago by Daniil Baturin <[email protected]>

T930: add missing sudo to ip xfrm commands.

c993882e06349b30c55a9bfedc444dcdbfe186d6 authored almost 6 years ago by Daniil Baturin <[email protected]>

Merge pull request #22 from jules-vyos/current

Fixes for show vpn ike sa and show vpn ipsec sa

9324923d31d389110e2ab882a035982e2b269417 authored about 7 years ago by Daniil Baturin <[email protected]>

Fixes for show vpn ike sa and show vpn ipsec sa

Fixed 'show vpn ike sa' to actually show output when the tunnel isn't up.

Foxed 'show vpn ipsec...

f6f567b8b168dbe0d4bdb1b08c0f84faa0d362cb authored about 7 years ago by jules-vyos <[email protected]>

Merge pull request #21 from jules-vyos/current

Re-fix for T303, and a big update against T346 - Fixes for 'show ipsec vpn' commands

dc80f5eb559758fd999c70345d576e189f7f3afd authored about 7 years ago by Daniil Baturin <[email protected]>

Formatting of show vpn ike sa modified

... by suggestions from TomJepp

c322d07f1d1568ff1ea9a7a85efd825e42cba9d1 authored about 7 years ago by jules-vyos <[email protected]>

Move into the CORRECT tree location.

739d1c222a3c69d89bf299365c070f5bf7981232 authored about 7 years ago by jules-vyos <[email protected]>

Add templates for extended commands

24c7ff03646d73767df9a0b5e20c483fcf9708a6 authored about 7 years ago by jules-vyos <[email protected]>

Fix various bits for newer StrongSwan support

Largely revamped process_tunnels
Make IKE tunnels information work again.
Added initial support ...

4aba0c7e26b5336122e88ab2bba01c1c6066600e authored about 7 years ago by jules-vyos <[email protected]>

T303 - Re-fix - broke that the first time

Typo, sadly. Resolved this time.

367f00fe224ba76a43fb5ddebfcb0e0052a09075 authored over 7 years ago by jules-vyos <[email protected]>

Merge pull request #19 from jules-vyos/current

Two fixes - for T319 and T303

cce844b42a29bc00185555bbf7a2ec989eec8d8b authored over 7 years ago by Daniil Baturin <[email protected]>

Fix for T303 - 'show vpn ike status per warning: Using a hash as a reference is deprecated'

Newer version of perl doesn't like %hash->{item} syntax. Prefers $hash{item} instead.

46c10df71f00f215d6aaa15a3b00e946679a0328 authored over 7 years ago by jules-vyos <[email protected]>

Fix for T319 - show vpn ipsec status returns incorrect information

Strongswan 'ipsec status' command changed output format.

ce1c285359947d4af3c2713482ba4927c29b93cd authored over 7 years ago by jules-vyos <[email protected]>

remove reference to deleted files

b1159f96a27fa39b8b3b71940efff602b468cf65 authored over 7 years ago by UnicronNL <user.name>

change ipsec newhostkey command with openssl command

9608b691012160836fd0fdcc1c8f9357d89c4de1 authored over 7 years ago by Kim Hagen <user.name>

Reimplementation of TriJetScud's commit:578688a25ba784d839512fefafab4cabdaf32fc5.

Simpilfy the operational commands
Instead of trying to parse the outout of ipsec or swanctl, jus...

33e24e989996ec809e1be696866258ce987cc527 authored about 8 years ago by Kim Hagen <[email protected]>

prefix is set in "configure.ac" file, so is removed from "debian/rules"

8a80669f305983de512466e3e2bad0924d7f37a0 authored about 8 years ago by Kim Hagen <[email protected]>

Merge pull request #17 from LLC-Technologies-Collier/address-debconf-warnings

vyatta-op-vpn (0.15.0+vyos2+current2+nmu1) UNRELEASED; urgency=low

12f6e2a466fbed1d1385c0c5a91f89590e6e42bd authored over 8 years ago by Kim <[email protected]>

Merge branch 'current' into address-debconf-warnings

Conflicts:
templates/show/vpn/ipsec/sa/nat-traversal/node.def.in
templates/show/vpn/ipsec/sa/n...

b39936ffc4cf89da8fc442eb3ac8bdc7a130b877 authored over 8 years ago by C.J. Collier <[email protected]>

oops missed a file

23548e6931a763be01c43463aada7b0ba4d818c9 authored over 8 years ago by C.J. Collier <[email protected]>

vyatta-op-vpn (0.15.0+vyos2+current2+nmu1) UNRELEASED; urgency=low

* Non-maintainer upload.
* address lintian issues
- script-not-executable: removed #!/usr/...

020165ce5b9643ff3b9c96bd4a30c981a5d5d78d authored over 8 years ago by C.J. Collier <[email protected]>

Merge pull request #16 from LLC-Technologies-Collier/address-debconf-warnings

Address debconf warnings

62f949c33b285f9f5821ca9cc1dce2ab7a84aaf3 authored over 8 years ago by Kim <[email protected]>

Merge pull request #15 from LLC-Technologies-Collier/address-autoreconf-warnings

Address autoreconf warnings

8964fc30d269fa2537595eb93e1ead5489472920 authored over 8 years ago by Kim <[email protected]>

Update pluto.pid references to charon.pid

Since pluto doesn't exist anymore in strongSwan 5.0 and later series,
we are updating references...

12b2b88d03ce3527a46abc3c1e5cf9e8b8cd5238 authored over 8 years ago by Jeff Leung <[email protected]>

Bring the VPN tunnel down and up as opposed to commenting it out in the ipsec.conf file

Commenting out the tunnel and restoring it does not reset the tunnel.

Use the ipsec commands to...

6ed20a24270b1b33b9a5e4595938590a8d2a76fb authored over 8 years ago by Jeff Leung <[email protected]>

Simpilfy the operational commands

Instead of trying to parse the outout of ipsec or swanctl, just dump
whatever swanctl outputs.

578688a25ba784d839512fefafab4cabdaf32fc5 authored over 8 years ago by Jeff Leung <[email protected]>

vyatta-op-vpn (0.15.0+vyos2+current2+nmu1) UNRELEASED; urgency=low

* Non-maintainer upload.
* address lintian issues
- script-not-executable: removed #!/usr/...

286e4186e7185a49bd1be6bc0f7afe77dfcfcdad authored over 8 years ago by C.J. Collier <[email protected]>

Merge branch 'address-autoreconf-warnings' of github.com:LLC-Technologies-Collier/vyatta-op-vpn into address-autoreconf-warnings

4a8537ce41f924041b5ec65b999d1a0b00020a4e authored over 8 years ago by C.J. Collier <[email protected]>

Address autoreconf warnings

* add /m4 to .gitignore
* set ACLOCAL_AMFLAGS in Makefile.am
* set AC_CONFIG_MACRO_DIR in config...

d1beba186b096550075bbc5d1c8b5d745ac90641 authored over 8 years ago by C.J. Collier <[email protected]>

Merge branch 'address-autoreconf-warnings' of github.com:LLC-Technologies-Collier/vyatta-op-vpn into address-autoreconf-warnings

Conflicts:
configure.ac

57968e5395bb006340757062134fd202c372d76f authored over 8 years ago by C.J. Collier <[email protected]>

Address autoreconf warnings

* add /m4 to .gitignore
* set ACLOCAL_AMFLAGS in Makefile.am
* set AC_CONFIG_MACRO_DIR in config...

23579c359c5d1975c82e7e40c804fe453bea8f0b authored over 8 years ago by C.J. Collier <[email protected]>

Address autoreconf warnings

* add /m4 to .gitignore
* set ACLOCAL_AMFLAGS in Makefile.am
* set AC_CONFIG_MACRO_DIRS in confi...

ad86c37585a7a6f866f8d8e5cc123a60ab602355 authored over 8 years ago by C.J. Collier <[email protected]>

Show some tunnel information.

1f7528e003d6c1d3c061065fa44773caf74874a9 authored over 8 years ago by UnicronNL <[email protected]>

defined(@array) is deprecated, omit the defined()

397864e7371df953b0c5093493f49a5a2cd935c2 authored over 8 years ago by UnicronNL <[email protected]>

Merge pull request #14 from wzur/patch-1

Explicitly close the IPSECCONF pipe

cb57bb761d7aa6317aa7980c097e7d77590c4a51 authored over 8 years ago by Daniil Baturin <[email protected]>

Explicitly close the IPSECCONF pipe

This should avoid problems when `cat` commands finishes, but `sudo` doesn't.

a9a663c0b42db6563db8ac838d3451ca2e59a59e authored over 8 years ago by wzur <[email protected]>

0.15.0+vyos2+current2

100b1a52ebbc37ee69d9ed9f8d730c2cbaf99e81 authored over 8 years ago by Daniil Baturin <[email protected]>

Remove vyatta-ipsec dependency for migration to upstream strongswan.

Update descriptions and standard version.

beed3a41969a522571708cde21631db22d5c54a2 authored over 8 years ago by Daniil Baturin <[email protected]>

0.15.0+vyos2+current1

02c5540c29a347348a5a4d89ce432417f561d326 authored over 8 years ago by Kim Hagen <[email protected]>

Fix build depends.

b6697d98a5e0bd41907fb0049323845ea3780b8a authored almost 9 years ago by Thomas Jepp <[email protected]>

0.15.0+vyos2+lithium8

0ec07e891b0191b24185ea09c6f33f6502597df6 authored over 9 years ago by Alex Harpin <[email protected]>

vyatta-op-vpn: update dh_gencontrol with new development build flag

0335e01323a083743c2ae7e135ef5dbf4c4b2ee9 authored over 9 years ago by Alex Harpin <[email protected]>

0.15.0+vyos2+lithium7

4831ea779d82461051c330ff7e7062175cbe9d61 authored over 9 years ago by Alex Harpin <[email protected]>

Merge pull request #13 from jhendryUK/fix_order_of_esp_sa_array

Bug:540 correct the order of ESP SA array by removing the reverse direct...

d4ba8d8603aca58605e2bccd9d9b4b8dc91c9cd2 authored over 9 years ago by Jason Hendry <[email protected]>

Bug:540 correct the order of ESP SA array by removing the reverse directive

968e77119702765f9ec2859718bfa0fa443b2591 authored over 9 years ago by Jason Hendry <[email protected]>

0.15.0+vyos2+lithium6

6beb3ab0fc2c2480b421874864307f1c77307d6b authored almost 10 years ago by Alex Harpin <[email protected]>

Add missing changelog entries

f1a1c11fc04e82f45f0ed569b4484a8b7c6e6a13 authored almost 10 years ago by Alex Harpin <[email protected]>

Merge pull request #10 from jhendryUK/cleanse_esp_hash

Removing ESP SA's in esp_hash which do not have a last_used key

51ff1abe7f9407dd202089b7643facc36c41c4bc authored almost 10 years ago by Daniil Baturin <[email protected]>

Merge pull request #11 from jhendryUK/improve_detection_of_dead_tunnels

Improve detection of dead tunnels

1197241767474a885dfd1da5c2e345158fa7e584 authored almost 10 years ago by Daniil Baturin <[email protected]>

Improving dead IKE + ESP detection for IKEv1

9bb087e651f70723b3e15806ee0a81d224537760 authored almost 10 years ago by Jason Hendry <[email protected]>

Improving dead IKE detection for IKEv2

022775f1548ccfc83af53198a9b4b09fb9010f0a authored almost 10 years ago by Jason Hendry <[email protected]>

Improving detection of dead tunnels for IKEv2

48821ce60a95f1a5a0d22656ecae0af9924b52c3 authored almost 10 years ago by Jason Hendry <[email protected]>

Removing ESP SA's in esp_hash which do not have a last_used key

08b121778a138580b9f6a5b6b81180cb824968c9 authored almost 10 years ago by Jason Hendry <[email protected]>

0.15.0+vyos2+lithium5

8619ccd29d2d309e8be848b782833a600fbdf917 authored almost 10 years ago by Alex Harpin <[email protected]>

Update maintainer address

fa7e60e1a8475900ec749c1dec7d0f960e774cc7 authored almost 10 years ago by Alex Harpin <[email protected]>

0.15.0+vyos2+lithium4

0c70d863b01cec49628096abb7ae94adf13e60d9 authored almost 10 years ago by Alex Harpin <[email protected]>

Merge pull request #9 from jhendryUK/fix_ikev2_dh_group_detection

Fix detection of IKEv2 IKE DH Group

4390b1aa9bc6ae769d9f63661b7e66f81f968819 authored almost 10 years ago by Daniil Baturin <[email protected]>

Fix detection of IKEv2 IKE DH Group

73e1521804ced41b66933a11de1aabe667e5f61e authored almost 10 years ago by Jason Hendry <[email protected]>

0.15.0+vyos2+lithium3

c00c3d72cc980ab9cdfd958efd1d8c1484b680c3 authored almost 10 years ago by Alex Harpin <[email protected]>

Merge pull request #8 from jhendryUK/fix_ikev2_sa_info_when_rekeying_disabled

Bug #401: Fix "show vpn ipsec sa" for IKEv2 when rekeying is disabled

32336f949395e54007b15bb2aa404d93eda09241 authored almost 10 years ago by Daniil Baturin <[email protected]>

Fix "show vpn ipsec sa" for IKEv2 when rekeying is disabled

e6318ab674759c453b0e1971f476e2f55d6fe9f6 authored almost 10 years ago by Jason Hendry <[email protected]>

Merge pull request #6 from jhendryUK/fix_ikev2_ike_info_without_reauth

Bug 396: Fixing output of "show vpn ike sa" when reauth=no

05ff24760a908158a2deb1f545cb75590136044a authored almost 10 years ago by Daniil Baturin <[email protected]>

Merge pull request #7 from jhendryUK/ikev2_sa_info_without_proto

Fixing "show vpn ipsec sa" IKEv2 left/rgiht subnet info

1e26576c2364c2626dffbc9f2987c955de2bf5fb authored almost 10 years ago by Daniil Baturin <[email protected]>

Fixing "show vpn ipsec sa" left/rgiht subnet info when you do not specify a protocol in the IPSec tunnel config

008b1f0f79302a262ccc4d6bf5271e6052d8ec6f authored almost 10 years ago by Jason Hendry <[email protected]>

Fixing output of "show vpn ike sa" when reauth=no

79fbc6f7c770780507196c2ed2fe34547fc84428 authored almost 10 years ago by Jason Hendry <[email protected]>

Merge pull request #5 from jhendryUK/show_ikev2_sa

Bug #388: Add IKEv2 SA info to "show vpn ipsec *" options

164e703b1c1089fdf687e0e8449495821abf6d78 authored almost 10 years ago by Daniil Baturin <[email protected]>

Updating another typo, $ike_sa is now $esp_sa

ae70480c3a0def9dcb28e9e33e225e1e22273b0e authored almost 10 years ago by Jason Hendry <[email protected]>

Fixing typo in variable name, %ike_hash is now %esp_hash

b5a440dd38f8fa8b69ef7c109df0f771819127b6 authored almost 10 years ago by Jason Hendry <[email protected]>

Print ESP info from most recently used SPI. Fixed bug where tunnel with 0 bytes of traffic gets reported as down

fb9aa90b2d6f4e3a83e0785be517ef5feb2b8e35 authored almost 10 years ago by Jason Hendry <[email protected]>

Fixing detection of IKE SA info with IKEv2

59509fd6932087531d683f317f2669acdb56080e authored almost 10 years ago by Jason Hendry <[email protected]>

Add IKEv2 SA info to "show vpn ipsec *" options

928f5e3fe9157b04c90ddba7c64bae54f9ee2b01 authored almost 10 years ago by Jason Hendry <[email protected]>

0.15.0+vyos2+lithium2

5eae6d9b155e1fbdf02d950e829a89437835ca93 authored almost 10 years ago by Daniil Baturin <[email protected]>

Merge pull request #4 from trickv/helium

Fix 'show vpn ipsec status'

9ada57ebcda30e8400c0d6a276aaee453269646a authored about 10 years ago by Daniil Baturin <[email protected]>

Fix 'show vpn ipsec status'

Look for addresses using the local-address node rather than the local-ip node.

VyOS Bug #331 ht...

2c680cf8c0a6d6f19c6f20ba2c4e96b2c6e54a56 authored about 10 years ago by Patrick van Staveren <[email protected]>

Merge pull request #3 from cyclops8456/helium

vyatta-op-vpn: prevent invalid rsa key file from being generated & display the config path locat...

ecd21575b32541890346e911a7d9db69cd312c4a authored about 10 years ago by Daniil Baturin <[email protected]>

vyatta-op-vpn: display the config path location for the rsa key file

The command "show vpn ike rsa-keys" currently displays the full system
file path rather than usi...

3cd370e33c2261142946cbeb37dcdd4baa130944 authored about 10 years ago by Alex Harpin <[email protected]>

vyatta-op-vpn: prevent invalid rsa key file from being generated

If the command "generate vpn rsa-key" is aborted during key generation
it leaves behind a tempor...

56846d1ccd66051ad85a70329b1988de74301988 authored about 10 years ago by Alex Harpin <[email protected]>

Merge pull request #2 from ryanriske/helium-sha2

Bug 220: Add support for SHA2 hashes

960810b0b56d404b4abf275abfadfe3d77888ae5 authored over 10 years ago by Daniil Baturin <[email protected]>

Bug 220: Add support for SHA2 hashes

b9136d195651f8c9c3cbec2a7ec250d87962a0c0 authored over 10 years ago by Ryan Riske <[email protected]>

Merge pull request #1 from ryanriske/helium-dhgroups

Add support for DH groups 14-26

0640aecf6f8457b6bc3856d82a6ea6eb41afae11 authored over 10 years ago by Daniil Baturin <[email protected]>

Add support for DH groups 14-26

fc5365dae5b6db2b4770adec3c700ca8699797eb authored over 10 years ago by Ryan Riske <[email protected]>

0.14.0+vyos1+helium1

4a4ec4696529c58d7ece931509c0c5923bd06ac2 authored over 10 years ago by Daniil Baturin <[email protected]>