Just dont, please see my comment fro april 2024.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
May 28 2024
May 28 2024
Unknown Object (User) added a comment to T6181: A feature for checking popular ports..
@sever what about it?
May 27 2024
May 27 2024
tested new cli structure, it combine the new mach-group and old syntax :
dmbaturin edited projects for T6402: Invalid variables referenced in reverse proxy validation, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0).
May 26 2024
May 26 2024
alainlamar changed the status of T6320: WiFi: Enable support for 6GHz AccesPoints from Open to Needs testing.
c-po closed T6377: PermissionError on /config/auth/letsencrypt/live/ when running show pki as Resolved.
c-po moved T6377: PermissionError on /config/auth/letsencrypt/live/ when running show pki from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
c-po moved T6400: pki: unable to generate fingerprint for ACME issued certificates from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
This is actually a "wrong" error, or a real error with a wrong fix.
May 25 2024
May 25 2024
c-po moved T6377: PermissionError on /config/auth/letsencrypt/live/ when running show pki from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T6400: pki: unable to generate fingerprint for ACME issued certificates from Open to Finished on the VyOS 1.5 Circinus board.
c-po changed the status of T6400: pki: unable to generate fingerprint for ACME issued certificates from Open to In progress.
c-po changed the status of T6377: PermissionError on /config/auth/letsencrypt/live/ when running show pki from Open to In progress.
c-po added a comment to T6377: PermissionError on /config/auth/letsencrypt/live/ when running show pki.
cpo@LR5.wue4:~$ show configuration commands | match pki set pki ca STAGING-PEM certificate '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' set pki certificate vyos acme domain-name 'lr5.wue4.mybll.net' set pki certificate vyos acme email 'vyos@vyos.net' set pki certificate vyos acme url 'https://acme-staging-v02.api.letsencrypt.org/directory'
talmakion added a comment to T6157: Can not create two GRE tunnels to the same DST but from different SRC addresses.
As far as I can tell the test will always error if the remote matches and neither source-interface and source-address are configured differently, including the case where they're both blank (source-interface == None on both tunnels triggers this particular case).
c-po moved T6345: Source NAT Port Mapping setting of Fully-Random is superfluous in Kernels 5.0 onwards from Open to 1.4.0-GA on the VyOS 1.4 Sagitta board.
May 24 2024
May 24 2024
talmakion added a comment to T5049: Configure GRE over IPsec tunnel when source port is in VRF, OSPF causes GRE tunnel broken..
I've just been picking at this one tonight because it's close to some areas of interest (DMVPNs in VRFs), so hopefully this input is useful and appropriate:
Viacheslav moved T6391: load-balancing reverse-proxy: typo in timeout help from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
May 23 2024
May 23 2024
c-po moved T6293: add Mediatek MT7921 to defconfig from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
c-po moved T6293: add Mediatek MT7921 to defconfig from In Progress to Finished on the VyOS 1.5 Circinus board.
HollyGurza moved T4576: vpn l2tp logging level configuration from Open to In Progress on the VyOS 1.5 Circinus board.
HollyGurza changed the status of T4576: vpn l2tp logging level configuration from Open to In progress.
May 22 2024
May 22 2024
c-po added a comment to T6365: Negating interface names in NAT configuration causes invalid warnings.
Same issue applies to NAT66, too
c-po added a comment to T6365: Negating interface names in NAT configuration causes invalid warnings.
c-po changed the status of T6365: Negating interface names in NAT configuration causes invalid warnings from Open to In progress.
jestabro closed T5940: [1.3.5 -> 1.4.0-RC1 Migration] commit-archive Fails to Migrate, a subtask of T5938: Migration fail root task for 1.4-rc, as Resolved.
Viacheslav moved T6384: rollback-soft should tell the user to compare and commit from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
In T3493#189273, @Viacheslav wrote:Does 1.5 has the same bug?
Viacheslav edited projects for T6373: QoS Policy Limiter - classes for marked traffic do not work, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
Viacheslav moved T3493: DHCPv6 does not have prefix range validation from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
Does 1.5 has the same bug?
Viacheslav triaged T6379: "generate openvpn" uses "comp-lzo no", which leads to problems on Android-Clients as Normal priority.
PR merged: https://github.com/vyos/vyos-1x/pull/3499/
May 21 2024
May 21 2024
PR merged into vyos-utils:
https://github.com/vyos/vyos-utils/pull/20
and backported. The fix has been tested with migration from 1.3.x with settings as suggested by @trae32566
jestabro updated subscribers of T5940: [1.3.5 -> 1.4.0-RC1 Migration] commit-archive Fails to Migrate.
The argument would be to relax the url validator regex for compatibility with 1.3: since the plan is to replace this mechanism in 1.5 with something similar to @trae32566 suggestion above (brought up for discussion by @Viacheslav recently), and since it is deprecated/not advised anyway (RFC 3986). The simple change will be made to the validator.
HollyGurza moved T5307: QoS - traffic-class-map services from Open to In Progress on the VyOS 1.5 Circinus board.
HollyGurza moved T5307: QoS - traffic-class-map services from Need Triage to In Progress on the VyOS 1.4 Sagitta (1.4.0-GA) board.
HollyGurza moved T6225: Unhandled exception when configuring random-detect QoS policy from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
May 20 2024
May 20 2024
c-po moved T6367: op-mode: commit-archive: TypeError: attribute name must be string, not 'NoneType' from Open to Finished on the VyOS 1.5 Circinus board.
jestabro changed the status of T6076: [1.3.3->1.4.0-epa1 Migration] Most of config missing from Needs testing to Needs reporter action.
@jestabro could it be that the validator needs an update to allow special characters in the user/password field?
https://github.com/vyos/vyos-utils/blob/0d57cc9a266fe8d6fc87df5a769f42b4a45c7221/src/url.ml
It seems to work basically
Can you manually edit the node and re-check if it will work for acme
sudo nano -c /opt/vyatta/share/vyatta-cfg/templates/pki/certificate/node.tag/acme/listen-address/node.def
replace:
type: txt
help: Local IPv4 addresses to listen on
val_help: ipv4; IPv4 address to listen for incoming connections
allowed: sh -c "${vyos_completion_dir}/list_local_ips.sh --ipv4"
syntax:expression: exec "${vyos_libexec_dir}/validate-value --exec \"${vyos_validators_dir}/ipv4-address \" --value \'$VAR(@)\'"; "Invalid value"to
type: txt help: Local IPv4 addresses to listen on val_help: ipv4; IPv4 address to listen for incoming connections
May 19 2024
May 19 2024
@Giggum sure, much appreciated
c-po edited projects for T1981: Allow route-map 'set src' to reference both IPv4 and IPv6, added: VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus; removed vyatta-cfg-quagga.
Using DHCPv6-PD on 1.5 and 1.4-epa3 and confirmed working
syncer lowered the priority of T5069: BGP large-community-list regex validation is incomplete from High to Wishlist.
syncer renamed T5878: Make the list of SSH server ciphers configurable from SSH certificate issue with 1.4rc1 to Add option to allow unsecure ciphers in SSH.
syncer lowered the priority of T5878: Make the list of SSH server ciphers configurable from High to Normal.
syncer added a project to T6076: [1.3.3->1.4.0-epa1 Migration] Most of config missing: VyOS 1.5 Circinus.