Thu, Dec 11
Thu, Dec 11
c-po moved T8087: Smoketests: reorganize folderstructure for embedded configttests from Need Triage to Completed on the VyOS Rolling board.
c-po added a comment to T8090: sshd: add support for config test mode.
Wed, Dec 10
Wed, Dec 10
c-po changed the status of T8089: firewall: "geoip country-code" should get a completion helper from Open to In progress.
c-po added a comment to T8089: firewall: "geoip country-code" should get a completion helper.
c-po added a comment to T8087: Smoketests: reorganize folderstructure for embedded configttests.
c-po changed the status of T8087: Smoketests: reorganize folderstructure for embedded configttests from Open to In progress.
c-po updated the task description for T8087: Smoketests: reorganize folderstructure for embedded configttests.
c-po renamed T8086: login: replace getpwall() based user enumeration to avoid NSS/TACACS timeouts from Evaluate direct read of /etc/passwd over Python getpwall() to login: replace getpwall() based user enumeration to avoid NSS/TACACS timeouts.
c-po changed the status of T8086: login: replace getpwall() based user enumeration to avoid NSS/TACACS timeouts from Open to In progress.
Tue, Dec 9
Tue, Dec 9
Mon, Dec 8
Mon, Dec 8
c-po moved T8021: bgpd crashed, when BGP EVPN peers are changed/rebooted from Need Triage to Completed on the VyOS Rolling board.
dmbaturin changed Is it a breaking change? from none to compatible on T8038: xml: cleanup double CLI properties in NAT.
dmbaturin edited projects for T7485: DHCPv6 does not work on PPPoE interfaces, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS Rolling.
Fri, Dec 5
Fri, Dec 5
It seems that, even though this is technically true, the strongswan seems require hash for negotiation. So, it is probably better not to rock the boat.
Thu, Dec 4
Thu, Dec 4
dtoux updated the task description for T8071: AES-GCM algorithms in IPSEC do not need hash.
dtoux updated the task description for T8071: AES-GCM algorithms in IPSEC do not need hash.
dmbaturin renamed T8017: Virtual ethernet interfaces do not correctly check for the missing peer option from Virtual-Ethernet wrong setup error to Virtual ethernet interfaces do not correctly check for the missing peer option.
dmbaturin renamed T7485: DHCPv6 does not work on PPPoE interfaces from pppoe interfaces do not get assigned an ipv6 address with pppoe ipv6 enabled. ipv6 prefix delegation works. to DHCPv6 does not work on PPPoE interfaces.
Wed, Dec 3
Wed, Dec 3
a.kudientsov added a comment to T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".
Warning is not displayed in sagitta and circinus because a warning class import from vyos.base is missing in system_login.py
a.pidnebesny renamed T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system" from BP 1.4.4 not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system" to BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".
a.pidnebesny updated the task description for T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".
Tue, Dec 2
Tue, Dec 2
dmbaturin added a comment to T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part.
Cisco and Arista support such addresses as interface addresses, and the anycast bit doesn't preclude unicast usage, so we should allow that.
c-po added a comment to T7738: Improper OpenVPN certificates migration from 1.3 to 1.4.
Mon, Dec 1
Mon, Dec 1
c-po added a comment to T8021: bgpd crashed, when BGP EVPN peers are changed/rebooted.
c-po added a project to T7738: Improper OpenVPN certificates migration from 1.3 to 1.4: VyOS 1.4 Sagitta (1.4.4).
c-po changed the status of T7738: Improper OpenVPN certificates migration from 1.3 to 1.4 from Open to In progress.
Sun, Nov 30
Sun, Nov 30
sarthurdev added a subtask for T7926: Refactor and improve geoip handling: T5405: Add VRF support for "update geoip".
sarthurdev changed the status of T5746: Firewall extend GeoIP match ASN, a subtask of T7926: Refactor and improve geoip handling, from Open to In progress.
sarthurdev added a subtask for T7926: Refactor and improve geoip handling: T5746: Firewall extend GeoIP match ASN.
Fri, Nov 28
Fri, Nov 28
c-po moved T8039: snmp: trap target broken with SNMPv3 from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
dmbaturin added a comment to T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part.
This comment in ipaddrcheck explains why I disallowed all-zero host part addresses: https://github.com/vyos/ipaddrcheck/blob/current/src/ipaddrcheck_functions.c#L337-L346
