@Harliff , please create a new bug report and share your config.boot file and mention any messages printed on your console while upgrade in the task description

Jul 26 2024, 5:35 AM · VyOS 1.3 Equuleus (1.3.0)

Jul 23 2024

SrividyaA moved T4026: PKI: generate pki certificate sign <ca-name> is not working from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.1) board.

Jul 23 2024, 1:26 PM · VyOS 1.4 Sagitta (1.4.1)

SrividyaA closed T4026: PKI: generate pki certificate sign <ca-name> is not working as Resolved.

Jul 23 2024, 1:16 PM · VyOS 1.4 Sagitta (1.4.1)

SrividyaA added a comment to T4026: PKI: generate pki certificate sign <ca-name> is not working.

Tested in 1.4.0 version and did not receive the error:

Jul 23 2024, 1:14 PM · VyOS 1.4 Sagitta (1.4.1)

Jul 12 2024

SrividyaA claimed T6571: OpenVPN: Rename the CLI node option "ncp-ciphers" to "data-ciphers".

Jul 12 2024, 5:32 PM · VyOS 1.5 Circinus

SrividyaA created T6571: OpenVPN: Rename the CLI node option "ncp-ciphers" to "data-ciphers".

Jul 12 2024, 2:43 PM · VyOS 1.5 Circinus

SrividyaA added a comment to T6545: OpenVPN: Remove "none" option for ncp-cipher encryption.

@Viacheslav, Thank you for the hint. After further analysis, these are the findings from the tests done in the lab running 1.4.0 version on both sides with server/client setup.

Jul 12 2024, 12:02 PM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0)

Jul 10 2024

SrividyaA added a comment to T6545: OpenVPN: Remove "none" option for ncp-cipher encryption.

@Viacheslav, For site-to-site or server/client mode, when used cipher option as none then also issue is noticed. When you commit, it gives this warning:

Jul 10 2024, 3:15 PM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0)

Jul 3 2024

SrividyaA created T6545: OpenVPN: Remove "none" option for ncp-cipher encryption.

Jul 3 2024, 5:35 PM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0)

Jun 27 2024

SrividyaA triaged T6525: SNMP extension script paths relative to /config/user-data do not work as expected as Normal priority.

Jun 27 2024, 5:45 PM · Restricted Project, VyOS 1.5 Circinus, Restricted Project, VyOS 1.4 Sagitta (1.4.0)

SrividyaA created T6525: SNMP extension script paths relative to /config/user-data do not work as expected.

Jun 27 2024, 5:45 PM · Restricted Project, VyOS 1.5 Circinus, Restricted Project, VyOS 1.4 Sagitta (1.4.0)

SrividyaA triaged T6522: OpenVPN-options does not pass the quotes anymore as Low priority.

Jun 27 2024, 12:20 PM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus

SrividyaA created T6522: OpenVPN-options does not pass the quotes anymore.

Jun 27 2024, 12:19 PM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus

May 28 2024

SrividyaA claimed T6379: "generate openvpn" uses "comp-lzo no", which leads to problems on Android-Clients.

May 28 2024, 11:27 AM · VyOS 1.4 Sagitta (1.4.1)

May 13 2024

SrividyaA closed T6323: Correction of auto-completion description of "mfa totp digits" as Resolved.

May 13 2024, 6:19 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

May 9 2024

SrividyaA claimed T6323: Correction of auto-completion description of "mfa totp digits".

May 9 2024, 6:46 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

SrividyaA created T6323: Correction of auto-completion description of "mfa totp digits".

May 9 2024, 6:44 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Apr 25 2024

SrividyaA triaged T6267: Improve commit failure messages for wireless interface configuration as Normal priority.

Apr 25 2024, 12:16 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

SrividyaA created T6267: Improve commit failure messages for wireless interface configuration.

Apr 25 2024, 12:12 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

Apr 24 2024

SrividyaA added a comment to T6245: Unhandled exception in "show openvpn server".

I tested in the latest rolling version and the traceback error is not received anymore and the tunnel ip column shows n/a but with multiple entries.
It still shows the disconnected client and I assume it should not show disconnected clients

Apr 24 2024, 12:40 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

Apr 17 2024

SrividyaA added a comment to T6245: Unhandled exception in "show openvpn server".

vyos@test1:~$ sudo cat /run/openvpn/vtun20.status
OpenVPN CLIENT LIST
Updated,2024-04-17 16:40:05
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
GLOBAL STATS
Max bcast/mcast queue length,0
END

Apr 17 2024, 4:49 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

SrividyaA triaged T6245: Unhandled exception in "show openvpn server" as Normal priority.

Apr 17 2024, 10:18 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

SrividyaA created T6245: Unhandled exception in "show openvpn server".

Apr 17 2024, 10:17 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Apr 10 2024

SrividyaA closed T4734: Feature Request: openvpn: add OTP 2FA support as Resolved.

Apr 10 2024, 2:41 PM · VyOS 1.4 Sagitta

SrividyaA added a comment to T4734: Feature Request: openvpn: add OTP 2FA support.

The feature is present in 1.4 and 1.5:

Apr 10 2024, 2:41 PM · VyOS 1.4 Sagitta

Mar 28 2024

SrividyaA created T6183: OpenVPN IPv6 server: Unable to establish connection without local-host parameter.

Mar 28 2024, 10:20 AM · VyOS 1.5 Circinus

Mar 22 2024

SrividyaA created T6159: "show openvpn server" prints a superfluous "OpenVPN status on vtunx" message for every client connection.

Mar 22 2024, 5:18 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

Mar 7 2024

SrividyaA created T6106: Improve the commit error message for the case when route-reflector-client option is defined in a peer-group.

Mar 7 2024, 12:54 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

Mar 6 2024

SrividyaA added a comment to T6082: BGP doesn't allow the same local AS and remote AS in peer groups.

Tested in different possibilities:

Mar 6 2024, 3:33 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

SrividyaA changed the status of T6082: BGP doesn't allow the same local AS and remote AS in peer groups from Open to Confirmed.

Mar 6 2024, 11:35 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Mar 5 2024

SrividyaA created T6100: NAT config migration error in 1.4.0-epa1 if invalid address/network defined in 1.3.6 version.

Mar 5 2024, 6:30 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Feb 28 2024

SrividyaA closed T6055: PKI error: "failed to install x value" when executed the command from conf mode as Resolved.

Feb 28 2024, 6:51 AM · VyOS 1.4 Sagitta (1.4.0-epa2)

SrividyaA added a comment to T6055: PKI error: "failed to install x value" when executed the command from conf mode.

Tested in VyOS 1.5-rolling-202402280022 and it works now :

Feb 28 2024, 6:49 AM · VyOS 1.4 Sagitta (1.4.0-epa2)

Feb 23 2024

SrividyaA added a comment to T2468: Passwords with special characters fail in commit-archive.

The issue is raised in this forum query: https://forum.vyos.io/t/commit-archive-doesnt-accept-symbols-in-password/13817
Remote host having password with special character is not accepted using with scp command

Feb 23 2024, 4:22 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)

SrividyaA created T6055: PKI error: "failed to install x value" when executed the command from conf mode.

Feb 23 2024, 9:30 AM · VyOS 1.4 Sagitta (1.4.0-epa2)

Feb 22 2024

SrividyaA triaged T6052: Easy-rsa build-ca : Can't load /config/my-easy-rsa-config/pki/.rnd into RNG as Low priority.

Feb 22 2024, 11:45 AM · Restricted Project, VyOS 1.3 Equuleus (1.3.8)

SrividyaA created T6052: Easy-rsa build-ca : Can't load /config/my-easy-rsa-config/pki/.rnd into RNG.

Feb 22 2024, 11:44 AM · Restricted Project, VyOS 1.3 Equuleus (1.3.8)

Feb 16 2024

SrividyaA created T6044: OpenVPN revoke certificate does not work properly.

Feb 16 2024, 12:08 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)

SrividyaA closed T6015: "journalctl_charon" file does not contain data in the generated "ipsec debug-archive" file as Resolved.

Feb 16 2024, 9:34 AM · VyOS 1.4 Sagitta (1.4.0-epa1)

SrividyaA added a comment to T6015: "journalctl_charon" file does not contain data in the generated "ipsec debug-archive" file.

Works in this version 1.5-rolling-202402160022

Feb 16 2024, 9:33 AM · VyOS 1.4 Sagitta (1.4.0-epa1)

Feb 7 2024

SrividyaA added a comment to T6022: set system image default-boot.

I also see this behavior when switching between images in 1.4.0-rc3" and sometimes default-boot setting does not work.

Feb 7 2024, 4:46 PM · VyOS 1.4 Sagitta (1.4.0)

Feb 5 2024

SrividyaA created T6015: "journalctl_charon" file does not contain data in the generated "ipsec debug-archive" file.

Feb 5 2024, 11:21 AM · VyOS 1.4 Sagitta (1.4.0-epa1)

Jan 19 2024

SrividyaA added a comment to T5787: dhcp-server allows duplicate static-mapping for the same IP address.

Tested in latest 1.5-rolling-202401190024 release, the commit fails when duplicate static-mapping is configured as expected.

Jan 19 2024, 4:55 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus

Jan 12 2024

SrividyaA renamed T5914: CVE-2023-48795 - Terrapin vulnerability from CVE-2023-48795 to CVE-2023-48795 - Terrapin vulnerability.

Jan 12 2024, 7:18 AM · VyOS 1.3 Equuleus (1.3.6)

Dec 28 2023

SrividyaA added a comment to T5715: IPSec VPN: restart vpn is not working.

Tested in 1.3.5, the issue still exist as stated by @fernando

Dec 28 2023, 7:49 AM · VyOS 1.3 Equuleus (1.3.6)

Dec 22 2023

SrividyaA added a comment to T5721: Error in migrating configuration from VyOS 1.4.

@giuavo , can you please test in latest rolling release

Dec 22 2023, 5:30 AM · VyOS 1.5 Circinus

Dec 15 2023

SrividyaA added a comment to T5787: dhcp-server allows duplicate static-mapping for the same IP address.

This also breaks the dhcp service once duplicate ip address configured for two mac-address, tested in version: 1.5-rolling-202312110024

Dec 15 2023, 12:13 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus

Dec 11 2023

SrividyaA placed T5721: Error in migrating configuration from VyOS 1.4 up for grabs.

Dec 11 2023, 1:33 PM · VyOS 1.5 Circinus

SrividyaA claimed T5721: Error in migrating configuration from VyOS 1.4.

Dec 11 2023, 9:55 AM · VyOS 1.5 Circinus

SrividyaA changed the status of T5721: Error in migrating configuration from VyOS 1.4 from Open to Confirmed.

Dec 11 2023, 7:09 AM · VyOS 1.5 Circinus

Dec 8 2023

SrividyaA added a comment to T5802: ping (ip or hostname) interface <tab> produces error.

https://github.com/vyos/vyos-1x/pull/2594

Dec 8 2023, 6:27 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

SrividyaA added a project to T5802: ping (ip or hostname) interface <tab> produces error: VyOS 1.5 Circinus.

Dec 8 2023, 12:01 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

SrividyaA claimed T5802: ping (ip or hostname) interface <tab> produces error.

Dec 8 2023, 11:26 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Dec 7 2023

SrividyaA added a comment to T5808: op-mode: ipv6 ospfv3 graceful-restart description contains incorrect info.

https://github.com/vyos/vyos-1x/pull/2583

Dec 7 2023, 5:17 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus

SrividyaA claimed T5808: op-mode: ipv6 ospfv3 graceful-restart description contains incorrect info.

Dec 7 2023, 4:37 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus

SrividyaA created T5808: op-mode: ipv6 ospfv3 graceful-restart description contains incorrect info.

Dec 7 2023, 4:36 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus

SrividyaA added a comment to T5247: the bug of the command "show interfaces system".

Now we receive this error in 1.5-rolling-202312060024 when the command is executed:

Dec 7 2023, 3:49 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

SrividyaA added a project to T5247: the bug of the command "show interfaces system": VyOS 1.5 Circinus.

Dec 7 2023, 3:43 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Nov 8 2023

SrividyaA added a comment to T5715: IPSec VPN: restart vpn is not working.

submitted PR: https://github.com/vyos/vyatta-op-vpn/pull/37

Nov 8 2023, 10:13 AM · VyOS 1.3 Equuleus (1.3.6)

Nov 6 2023

SrividyaA added a comment to T5714: IPSec VPN: op-mode: "show log vpn" does not show results.

https://github.com/vyos/vyos-1x/pull/2442

Nov 6 2023, 4:09 PM · VyOS 1.3 Equuleus (1.3.6)

SrividyaA claimed T5714: IPSec VPN: op-mode: "show log vpn" does not show results.

Nov 6 2023, 12:25 PM · VyOS 1.3 Equuleus (1.3.6)

Nov 5 2023

SrividyaA created T5715: IPSec VPN: restart vpn is not working.

Nov 5 2023, 8:45 AM · VyOS 1.3 Equuleus (1.3.6)

SrividyaA created T5714: IPSec VPN: op-mode: "show log vpn" does not show results.

Nov 5 2023, 8:39 AM · VyOS 1.3 Equuleus (1.3.6)

Oct 26 2023

SrividyaA closed T5606: IPSec VPN: Allow multiple CAs certificates as Resolved.

Oct 26 2023, 12:52 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

SrividyaA added a comment to T5606: IPSec VPN: Allow multiple CAs certificates.

Yes, it does. thank you

Oct 26 2023, 12:52 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

Oct 19 2023

SrividyaA added a comment to T5642: op cmd: generate tech-support archive: does not work.

File gets generated but could be not extracted nor transferred as it tries to resolve it as hostname

Oct 19 2023, 11:56 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus

Oct 10 2023

SrividyaA created T5642: op cmd: generate tech-support archive: does not work.

Oct 10 2023, 7:35 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus

Oct 4 2023

SrividyaA created T5633: op-cmd: Interrupting the "tech-support report" command generates error.

Oct 4 2023, 11:37 AM · Restricted Project, Restricted Project, VyOS 1.5 Circinus

Sep 20 2023

SrividyaA created T5606: IPSec VPN: Allow multiple CAs certificates.

Sep 20 2023, 2:21 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

Sep 5 2023

SrividyaA claimed T5487: OPENVPN -DEPRECATED OPTION: --cipher.

Sep 5 2023, 6:03 PM · VyOS 1.5 Circinus, Restricted Project

Aug 17 2023

SrividyaA added projects to T5223: tunnel key doesn't clear : VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3).

Aug 17 2023, 6:45 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta

SrividyaA closed T5223: tunnel key doesn't clear as Resolved.

Aug 17 2023, 6:35 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta

Aug 10 2023

SrividyaA claimed T5223: tunnel key doesn't clear .

Aug 10 2023, 5:49 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta

Aug 7 2023

SrividyaA created T5446: bgp: validity check for bestpath med option.

Aug 7 2023, 6:56 AM · VyOS 1.4 Sagitta

Aug 1 2023

SrividyaA created T5423: ipsec: no output for op-cmd "show vpn ike secrets".

Aug 1 2023, 10:58 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Jul 21 2023

SrividyaA closed T5361: "monitor log" behaves like "show log" as Resolved.

Jul 21 2023, 5:53 AM · VyOS 1.4 Sagitta

Jul 20 2023

SrividyaA closed T5355: IPSec: OP cmd : "show vpn ike sa" does not show output as Resolved.

Jul 20 2023, 11:42 AM · VyOS 1.4 Sagitta

SrividyaA closed T4288: IPsec tunnel will break when ESP timeout as Resolved.

Jul 20 2023, 10:39 AM · VyOS 1.4 Sagitta

SrividyaA added a comment to T4288: IPsec tunnel will break when ESP timeout.

Tested in the latest rolling release with both ipsec configured as tunnel and transport mode . As suggested in the above comment, with the correct close-action setting configured in both the initiator and responder side, then no duplicate child_sa are noticed.

Jul 20 2023, 10:39 AM · VyOS 1.4 Sagitta