Today
Today
It seems that, even though this is technically true, the strongswan seems require hash for negotiation. So, it is probably better not to rock the boat.
Yesterday
Yesterday
dtoux updated the task description for T8071: AES-GCM algorithms in IPSEC do not need hash.
dtoux updated the task description for T8071: AES-GCM algorithms in IPSEC do not need hash.
dmbaturin renamed T8017: Virtual ethernet interfaces do not correctly check for the missing peer option from Virtual-Ethernet wrong setup error to Virtual ethernet interfaces do not correctly check for the missing peer option.
dmbaturin renamed T7485: DHCPv6 does not work on PPPoE interfaces from pppoe interfaces do not get assigned an ipv6 address with pppoe ipv6 enabled. ipv6 prefix delegation works. to DHCPv6 does not work on PPPoE interfaces.
Wed, Dec 3
Wed, Dec 3
a.kudientsov added a comment to T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".
Warning is not displayed in sagitta and circinus because a warning class import from vyos.base is missing in system_login.py
a.pidnebesny renamed T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system" from BP 1.4.4 not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system" to BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".
a.pidnebesny updated the task description for T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".
Tue, Dec 2
Tue, Dec 2
dmbaturin added a comment to T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part.
Cisco and Arista support such addresses as interface addresses, and the anycast bit doesn't preclude unicast usage, so we should allow that.
c-po added a comment to T7738: Improper OpenVPN certificates migration from 1.3 to 1.4.
Mon, Dec 1
Mon, Dec 1
c-po added a comment to T8021: bgpd crashed, when BGP EVPN peers are changed/rebooted.
c-po added a project to T7738: Improper OpenVPN certificates migration from 1.3 to 1.4: VyOS 1.4 Sagitta (1.4.4).
c-po changed the status of T7738: Improper OpenVPN certificates migration from 1.3 to 1.4 from Open to In progress.
Sun, Nov 30
Sun, Nov 30
sarthurdev added a subtask for T7926: Refactor and improve geoip handling: T5405: Add VRF support for "update geoip".
sarthurdev changed the status of T5746: Firewall extend GeoIP match ASN, a subtask of T7926: Refactor and improve geoip handling, from Open to In progress.
sarthurdev added a subtask for T7926: Refactor and improve geoip handling: T5746: Firewall extend GeoIP match ASN.
Fri, Nov 28
Fri, Nov 28
c-po moved T8039: snmp: trap target broken with SNMPv3 from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
dmbaturin added a comment to T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part.
This comment in ipaddrcheck explains why I disallowed all-zero host part addresses: https://github.com/vyos/ipaddrcheck/blob/current/src/ipaddrcheck_functions.c#L337-L346
Viacheslav changed the status of T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part from Confirmed to In progress.
sarthurdev changed the status of T6768: GeoIP database update does not work, a subtask of T7926: Refactor and improve geoip handling, from Open to In progress.
sarthurdev added a subtask for T7926: Refactor and improve geoip handling: T6768: GeoIP database update does not work.
Thu, Nov 27
Thu, Nov 27
c-po moved T8039: snmp: trap target broken with SNMPv3 from Need Triage to Completed on the VyOS Rolling board.
c-po moved T8038: xml: cleanup double CLI properties in NAT from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
c-po moved T8038: xml: cleanup double CLI properties in NAT from Need Triage to Completed on the VyOS Rolling board.
Wed, Nov 26
Wed, Nov 26
c-po added a comment to T8039: snmp: trap target broken with SNMPv3.
c-po moved T8035: Update Linux kernel to 6.6.117 from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
Viacheslav added a comment to T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part.
For dummy it works because it has the prefix /128 and it is allowed/validated https://github.com/vyos/ipaddrcheck/blob/c34294b7a18072c7bd4eaf8ec0f433bb374fad5c/src/ipaddrcheck.c#L577
Tue, Nov 25
Tue, Nov 25
c-po moved T8023: bond: missing validation of member interface MTU from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
c-po added a comment to T8038: xml: cleanup double CLI properties in NAT.
c-po changed the status of T8038: xml: cleanup double CLI properties in NAT from Open to In progress.
c-po moved T8035: Update Linux kernel to 6.6.117 from Need Triage to Completed on the VyOS Rolling board.
Mon, Nov 24
Mon, Nov 24
c-po added a comment to T8035: Update Linux kernel to 6.6.117.