It seems that, even though this is technically true, the strongswan seems require hash for negotiation. So, it is probably better not to rock the boat.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Today
Today
Yesterday
Yesterday
dmbaturin renamed T8017: Virtual ethernet interfaces do not correctly check for the missing peer option from Virtual-Ethernet wrong setup error to Virtual ethernet interfaces do not correctly check for the missing peer option.
dmbaturin renamed T7485: DHCPv6 does not work on PPPoE interfaces from pppoe interfaces do not get assigned an ipv6 address with pppoe ipv6 enabled. ipv6 prefix delegation works. to DHCPv6 does not work on PPPoE interfaces.
Wed, Dec 3
Wed, Dec 3
a.kudientsov added a comment to T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".
Warning is not displayed in sagitta and circinus because a warning class import from vyos.base is missing in system_login.py
a.pidnebesny renamed T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system" from BP 1.4.4 not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system" to BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".
a.pidnebesny updated the task description for T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".
Tue, Dec 2
Tue, Dec 2
dmbaturin added a comment to T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part.
Cisco and Arista support such addresses as interface addresses, and the anycast bit doesn't preclude unicast usage, so we should allow that.
Mon, Dec 1
Mon, Dec 1
c-po added a project to T7738: Improper OpenVPN certificates migration from 1.3 to 1.4: VyOS 1.4 Sagitta (1.4.4).
c-po changed the status of T7738: Improper OpenVPN certificates migration from 1.3 to 1.4 from Open to In progress.
Sun, Nov 30
Sun, Nov 30
sarthurdev added a subtask for T7926: Refactor and improve geoip handling: T5405: Add VRF support for "update geoip".
sarthurdev changed the status of T5746: Firewall extend GeoIP match ASN, a subtask of T7926: Refactor and improve geoip handling, from Open to In progress.
sarthurdev added a subtask for T7926: Refactor and improve geoip handling: T5746: Firewall extend GeoIP match ASN.
Fri, Nov 28
Fri, Nov 28
c-po moved T8039: snmp: trap target broken with SNMPv3 from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
dmbaturin added a comment to T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part.
This comment in ipaddrcheck explains why I disallowed all-zero host part addresses: https://github.com/vyos/ipaddrcheck/blob/current/src/ipaddrcheck_functions.c#L337-L346
Viacheslav changed the status of T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part from Confirmed to In progress.
sarthurdev changed the status of T6768: GeoIP database update does not work, a subtask of T7926: Refactor and improve geoip handling, from Open to In progress.
sarthurdev added a subtask for T7926: Refactor and improve geoip handling: T6768: GeoIP database update does not work.
Thu, Nov 27
Thu, Nov 27
c-po moved T8039: snmp: trap target broken with SNMPv3 from Need Triage to Completed on the VyOS Rolling board.
c-po moved T8038: xml: cleanup double CLI properties in NAT from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
c-po moved T8038: xml: cleanup double CLI properties in NAT from Need Triage to Completed on the VyOS Rolling board.
Wed, Nov 26
Wed, Nov 26
c-po moved T8035: Update Linux kernel to 6.6.117 from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
Viacheslav added a comment to T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part.
For dummy it works because it has the prefix /128 and it is allowed/validated https://github.com/vyos/ipaddrcheck/blob/c34294b7a18072c7bd4eaf8ec0f433bb374fad5c/src/ipaddrcheck.c#L577
Tue, Nov 25
Tue, Nov 25
c-po moved T8023: bond: missing validation of member interface MTU from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
c-po changed the status of T8038: xml: cleanup double CLI properties in NAT from Open to In progress.
c-po moved T8035: Update Linux kernel to 6.6.117 from Need Triage to Completed on the VyOS Rolling board.
Mon, Nov 24
Mon, Nov 24
c-po moved T8023: bond: missing validation of member interface MTU from Need Triage to Completed on the VyOS Rolling board.
Sun, Nov 23
Sun, Nov 23
Fri, Nov 21
Fri, Nov 21
Thu, Nov 20
Thu, Nov 20
Wed, Nov 19
Wed, Nov 19
c-po closed T8000: op-mode: "run generate pki wireguard key-pair install" returns error as Resolved.
Record some discusion in slack
c-po changed the status of T8021: bgpd crashed, when BGP EVPN peers are changed/rebooted from Open to In progress.
c-po moved T8017: Virtual ethernet interfaces do not correctly check for the missing peer option from Backlog - Bug to Completed on the VyOS Rolling board.
dmbaturin removed a project from T7738: Improper OpenVPN certificates migration from 1.3 to 1.4: VyOS 1.4 Sagitta (1.4.4).
dmbaturin removed a project from T7485: DHCPv6 does not work on PPPoE interfaces: VyOS 1.4 Sagitta (1.4.4).
dmbaturin removed a project from T7526: Adjust-mss not working on VLAN-aware bridge: VyOS 1.4 Sagitta (1.4.4).
dmbaturin removed a project from T7992: Remove references to OPAM in skel/.bashrc: VyOS 1.4 Sagitta (1.4.4).
dmbaturin removed a project from T4251: Add TLS functionality for rsyslog: VyOS 1.4 Sagitta (1.4.4).
c-po moved T8000: op-mode: "run generate pki wireguard key-pair install" returns error from Need Triage to Completed on the VyOS Rolling board.
Tue, Nov 18
Tue, Nov 18
dmbaturin removed a project from T7040: Losing configuration after a power failure/reset: VyOS 1.4 Sagitta (1.4.4).
dmbaturin renamed T7838: installer: installation takes very long for huge disks from installer: raid1 instalaltion takes very long for huge disks to installer: installation takes very long for huge disks.
c-po added a comment to T8000: op-mode: "run generate pki wireguard key-pair install" returns error.
c-po renamed T8000: op-mode: "run generate pki wireguard key-pair install" returns error from `run generate pki wireguard key-pair install` returns error to op-mode: "run generate pki wireguard key-pair install" returns error.
c-po added a comment to T8000: op-mode: "run generate pki wireguard key-pair install" returns error.
Bug does not appear in VyOS 1.4.3
c-po moved T8017: Virtual ethernet interfaces do not correctly check for the missing peer option from Need Triage to Backlog - Bug on the VyOS Rolling board.
Thu, Nov 13
Thu, Nov 13
sarthurdev changed the status of T7853: Kea will not offer address from subnet of secondary interface address from In progress to On hold.
Still waiting on Kea upstream PR
Tue, Nov 11
Tue, Nov 11
This is still a problem. We have found no suitable fixes, and I think we've tried "everything" without avail.
c-po moved T7485: DHCPv6 does not work on PPPoE interfaces from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
Fri, Nov 7
Fri, Nov 7
Confirmed - interesting
Thu, Nov 6
Thu, Nov 6
c-po moved T7976: pki: calls to node_changed_presence() must use unmangled config paths. from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.