This error won't be fixed as the new Python/XML implementation of OpenVPN has been merged into current and will appear in the next rolling release.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Aug 17 2019
Aug 17 2019
c-po moved T1569: interfaceconfig class documetation from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1556: Rewrite Bridge in new style XML syntax from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1589: OpenVPN configuration error: Must specify “local-address” or “bridge-group” from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1592: Update Linux Kernel to v4.19.67 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1551: Error when creating QinQ interface without earlier sets firewall name, if it used from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po removed a parent task for T1586: OpenVPN add IPv6 support to tunnels: T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python.
c-po closed T1589: OpenVPN configuration error: Must specify “local-address” or “bridge-group”, a subtask of T1556: Rewrite Bridge in new style XML syntax, as Wontfix.
c-po added a comment to T1589: OpenVPN configuration error: Must specify “local-address” or “bridge-group”.
c-po changed the status of T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python, a subtask of T1579: Rewrite all interface types in new XML/Python style, from In progress to Needs testing.
c-po changed the status of T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python from In progress to Needs testing.
Aug 16 2019
Aug 16 2019
alkersan changed the status of T1590: Convert 'show system' operations from vyatta-op to python/xml syntax, a subtask of T689: Converting simple op-mode commands from vyatta-op to new syntax, from Open to In progress.
alkersan changed the status of T1590: Convert 'show system' operations from vyatta-op to python/xml syntax from Open to In progress.
alkersan triaged T1590: Convert 'show system' operations from vyatta-op to python/xml syntax as Normal priority.
Maybe you could comment on this @zx2c4 ?
I think we should use it as a chance to improve it. The nesting does not do anyone any favors, tcpdump applies to all interface type, so a single level "monitor interface $intf" command is going to be easier to use.
dmbaturin renamed T1587: New implementation of "monitor interface" from Op mode command 'monitor interfaces' is missing to New implementation of "monitor interface".
Aug 15 2019
Aug 15 2019
c-po added a comment to T1582: OpenVPN CLI supports setting local-address multiple times but only the first makes it to the config.
This is actually invalid. There is no way with the current CLI design to specify the local address node with an optional subnet-mask leaf node.
[e]ach network interface has a private key [...]
Harliff updated the task description for T1588: VRRP failed to start if any of its interaces not exist.
Harliff updated the task description for T1588: VRRP failed to start if any of its interaces not exist.
Harliff updated the task description for T1588: VRRP failed to start if any of its interaces not exist.
Harliff updated the task description for T1588: VRRP failed to start if any of its interaces not exist.
@hagbard It's not stated that you MUST use a new private key for each interface. But it states that
[e]ach network interface has a private key [...]
https://www.wireguard.com/#simple-network-interface ⇒ Cryptokey Routing
to set a private key for each interface only makes sense when you are allowed to use different keys for different interfaces. If there would be any withdraw in using multiple keys they would have just omitted the "privateKey" in the config file and set i globally. Since they didn't do that I can't imagine there is one. But I would be interested in learning what withdraws you see that the developers don't see.
Aug 14 2019
Aug 14 2019
jestabro added a parent task for T1585: Add letsencrypt/certbot support for 'service https': T1443: New "service https" implementation.
jestabro changed the status of T1585: Add letsencrypt/certbot support for 'service https' from Open to In progress.