Diffusion vyos-1x 952b1656f516

ipsec: T5606: T5871: Use multi node for CA certificates
952b1656f516
Actions

Description

ipsec: T5606: T5871: Use multi node for CA certificates

This changes behaviour from fetching CA chain in PKI, to the user manually setting CA certificates.

Prevents unwanted parent CAs existing in PKI from being auto-included as may not be desired/intended.

Details

Provenance

sarthurdev

Authored on Mar 28 2024, 1:06 PM

Parents

rVYOSONEX889c1a81a9e2: Merge pull request #3194 from c-po/dhclient-T6175

Branches

Tags

Event Timeline

sarthurdev committed rVYOSONEX952b1656f516: ipsec: T5606: T5871: Use multi node for CA certificates (authored by sarthurdev).Mar 28 2024, 1:34 PM

Restricted Repository Identity mentioned this in rVYOSONEX557694e1ab61: ipsec: T5606: T5871: Use multi node for CA certificates.Mar 28 2024, 4:11 PM

c-po mentioned this in rVYOSONEXe6fe6e50a5c8: op-mode: ipsec: T6407: fix profile generation.May 30 2024, 2:35 PM

Restricted Repository Identity mentioned this in rVYOSONEX55ae2ca0b17f: op-mode: ipsec: T6407: fix profile generation.May 30 2024, 2:36 PM

Changes (3)

Path

Size

interface-definitions/

include/

ipsec/

authentication-x509.xml.i

smoketest/

scripts/

cli/

test_vpn_ipsec.py

src/

conf_mode/

vpn_ipsec.py

rVYOSONEX952b1656f516

View Options

interface-definitions/include/ipsec/authentication-x509.xml.i

View Options

smoketest/scripts/cli/test_vpn_ipsec.py

View Options

src/conf_mode/vpn_ipsec.py

ipsec: T5606: T5871: Use multi node for CA certificates952b1656f516Actions

Description

Details

Event Timeline

Changes (3)

rVYOSONEX952b1656f516

interface-definitions/include/ipsec/authentication-x509.xml.i

smoketest/scripts/cli/test_vpn_ipsec.py

src/conf_mode/vpn_ipsec.py

ipsec: T5606: T5871: Use multi node for CA certificates
952b1656f516
Actions