The no-verify options exists
vyos@vyos# set load-balancing reverse-proxy backend bk01 ssl Possible completions: ca-certificate Certificate Authority in PKI configuration no-verify Do not attempt to verify SSL certificates for backend servers
Added in the T6242
Now we have:
can you elaborate more your inquire?
@part1cleth1ef you will need to create PR
PR for 1 and 3: https://github.com/vyos/vyos-1x/pull/3700
Consideration: adding this new command to the show tech-support report op command when available.
@Viacheslav Fabse started working on it and I did have a look at the changes last week.
Provide a minimal example of configuration (set commands) to reproduce.
This is not resolved on my side.
Created PR https://github.com/vyos/vyos-1x/pull/3698
My current understanding, and memory of its introduction, is that the settings os.environ[SUDO_*] were more than needed at the time, with a possible later use in mind: the only critical setting for vyos-configd as a dispatcher of config mode scripts is the preceding line: setgid(cfg_group.gid), allowing the config group access to generated files. Note that the environment variables are not currently used by conf-mode scripts, other than system_login.py, leading to the above bug.
Draft PR passes configtests; dramatically faster:
https://github.com/vyos/vyos-1x/pull/3692
Minor integration and other testing remain before ready for review.
Just some quick testing with 2 VyOS instances connected via 2 straight ethernet into a virtual switch. eth0 on the remote has been given a description of "ETHZERO".