Can you please share your entire config and what to type to reproduce it? Happy to have a look later on.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Sep 10 2021
Sep 10 2021
Can you please retrst with the latest 1.4? the was a bug related to route-maps in bgpd
c-po changed Issue type from feature to upgrade on T3819: Upgrade Salt Stack 3002.3 -> 3003 release train.
c-po moved T3820: PowerDNS recursor - update from 4.3 -> 4.4 to sync with current from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po changed Issue type from feature to upgrade on T3820: PowerDNS recursor - update from 4.3 -> 4.4 to sync with current.
c-po moved T3819: Upgrade Salt Stack 3002.3 -> 3003 release train from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3819: Upgrade Salt Stack 3002.3 -> 3003 release train from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3819: Upgrade Salt Stack 3002.3 -> 3003 release train from Need Triage to 1.3.0-epa1 on the VyOS 1.3 Equuleus board.
c-po changed the status of T3819: Upgrade Salt Stack 3002.3 -> 3003 release train from Open to In progress.
Setting this to resolved as implementation is almost complete. Please file individual tasks for bugs so we can properly track them in the 1.3 release cycle.
Sep 9 2021
Sep 9 2021
Will be fixed in tomorrows rolling - thanks for reporting this.
c-po moved T3817: PKI: add "import" keyword when in "configure" mode from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po added a comment to T3815: pki : the file command 'generate pki wireguard key-pair file' is not working.
cpo@LR1.wue3:~$ generate pki wireguard key-pair file test Private key: QG039BeDoy2MXKxQwFRhYYea7B50crYvZ1RUn+N0c3A= Public key: iXVG4GSHc0O7NHgX47DhhNO/WWSTZS83/eF2z4GHYSE= File written to /config/auth/test_public.key File written to /config/auth/test_private.key
c-po moved T3816: Error after entering outbound-interface command in NAT from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po changed the status of T3816: Error after entering outbound-interface command in NAT from Open to In progress.
c-po edited a custom field on T3814: wireguard: commit error showing incorrect peer name from the configured name.
c-po moved T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface from Need Triage to 1.3.0-epa1 on the VyOS 1.3 Equuleus board.
c-po moved T3814: wireguard: commit error showing incorrect peer name from the configured name from Open to In Progress on the VyOS 1.4 Sagitta board.
Your problem is that this is not a CA certificate, it's the servers certificate.
Sep 8 2021
Sep 8 2021
Can you share your CAs public cert for testing?
c-po added a comment to T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface.
A new ISO 1.4-rolling-202109081242 is currently build - you may check in 30 minutes and try if this works for you - it did in my example config.
That would only work if accept_local will be added as proper CLI node on the tunnel interface, or use set system sysctl parameter net.ipv4.conf.default.accept_local value '1'
c-po moved T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface from Open to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface from Confirmed to Needs testing.
c-po changed the status of T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface from Open to Confirmed.
Sep 7 2021
Sep 7 2021
c-po edited projects for T3796: Wireguard interfaces are not shown in op-mode, added: VyOS 1.2 Crux (VyOS 1.2.9); removed VyOS 1.2 Crux.
@absolutesantaja this is definately a bug in the 1.2.9 op-mode commands
c-po added a comment to T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface.
Can you please share a version of your anonymized client configuration?
c-po edited a custom field on T3807: Op Command "show interfaces wireguard" does not show the output.
c-po moved T3807: Op Command "show interfaces wireguard" does not show the output from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3807: Op Command "show interfaces wireguard" does not show the output from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3807: Op Command "show interfaces wireguard" does not show the output from Need Triage to 1.3.0-epa1 on the VyOS 1.3 Equuleus board.
Same happens to other op-mode commands:
please refer to the PKI documentation at https://docs.vyos.io/en/latest/configuration/pki/index.html or https://blog.vyos.io/pki-and-ipsec-ikev2-remote-access-vpn about how the PKI feature is used.
c-po committed rVYOSONEXd9f20383323a: login: T971 allow quoting in public-keys options (authored by plett).
I tested it on ESXi
Sep 6 2021
Sep 6 2021
Works as designed. Note that the MACSec interface will only change its state to u/u after a successful key-exchange.
c-po moved T3800: DHCPv6 client get incorrect mask /128 from Open to In Progress on the VyOS 1.4 Sagitta board.
c-po moved T3803: Add source-address option to the ping CLI from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3803: Add source-address option to the ping CLI from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3806: Don't set link local ipv6 address if MTU less then 1280 from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3806: Don't set link local ipv6 address if MTU less then 1280 from Open to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T3806: Don't set link local ipv6 address if MTU less then 1280 from Open to In progress.
c-po added a comment to T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface.
Does it work if you grand the capabilities to the openvpn group in /etc/security/capability.conf?
c-po committed rVYOSONEX591eee82296b: T3803: add source-address option to the op mode ping CLI. (authored by dmbaturin).