Your problem is that this is not a CA certificate, it's the servers certificate.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Sep 9 2021
Sep 9 2021
Sep 8 2021
Sep 8 2021
Can you share your CAs public cert for testing?
c-po added a comment to T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface.
A new ISO 1.4-rolling-202109081242 is currently build - you may check in 30 minutes and try if this works for you - it did in my example config.
That would only work if accept_local will be added as proper CLI node on the tunnel interface, or use set system sysctl parameter net.ipv4.conf.default.accept_local value '1'
c-po moved T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface from Open to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface from Confirmed to Needs testing.
c-po changed the status of T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface from Open to Confirmed.
Sep 7 2021
Sep 7 2021
c-po edited projects for T3796: Wireguard interfaces are not shown in op-mode, added: VyOS 1.2 Crux (VyOS 1.2.9); removed VyOS 1.2 Crux.
@absolutesantaja this is definately a bug in the 1.2.9 op-mode commands
c-po added a comment to T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface.
Can you please share a version of your anonymized client configuration?
c-po edited a custom field on T3807: Op Command "show interfaces wireguard" does not show the output.
c-po moved T3807: Op Command "show interfaces wireguard" does not show the output from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3807: Op Command "show interfaces wireguard" does not show the output from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3807: Op Command "show interfaces wireguard" does not show the output from Need Triage to 1.3.0-epa1 on the VyOS 1.3 Equuleus board.
Same happens to other op-mode commands:
please refer to the PKI documentation at https://docs.vyos.io/en/latest/configuration/pki/index.html or https://blog.vyos.io/pki-and-ipsec-ikev2-remote-access-vpn about how the PKI feature is used.
c-po committed rVYOSONEXd9f20383323a: login: T971 allow quoting in public-keys options (authored by plett).
I tested it on ESXi
Sep 6 2021
Sep 6 2021
Works as designed. Note that the MACSec interface will only change its state to u/u after a successful key-exchange.
c-po moved T3800: DHCPv6 client get incorrect mask /128 from Open to In Progress on the VyOS 1.4 Sagitta board.
c-po moved T3803: Add source-address option to the ping CLI from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3803: Add source-address option to the ping CLI from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3806: Don't set link local ipv6 address if MTU less then 1280 from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3806: Don't set link local ipv6 address if MTU less then 1280 from Open to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T3806: Don't set link local ipv6 address if MTU less then 1280 from Open to In progress.
c-po added a comment to T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface.
Does it work if you grand the capabilities to the openvpn group in /etc/security/capability.conf?
c-po committed rVYOSONEX591eee82296b: T3803: add source-address option to the op mode ping CLI. (authored by dmbaturin).
Sep 5 2021
Sep 5 2021
c-po moved T1176: FRR - BGP replicating routes from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T1350: VRRP transition script will be executed once only from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T2161: snmpd cannot start if ipv6 disabled from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T2328: dhcpv6 server not starting (disable check reversed?) from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T2430: cannot delete specific route static next-hop from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T2432: dhcpd: Can't create new lease file: Permission denied from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T2525: OSPFv3 missing route map, not establishing from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3601: Error in ssh keys for vmware cloud-init if ssh keys is left empty. from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3634: Add op command option for ping for do not fragment bit to be set from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3574: Add constraintGroup for combining validators with logical AND from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T2931: Unicode decode error causes vyos.configd service to restart from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T2727: Add a dotted decimal value validator from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T2434: Duplicate Address Detection Breaks Interfaces from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T2776: QAT acceleration not working for IPSec AES-128 (CBC) / SHA256 tunnel from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T2127: restart dhcp server reports a failure from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3196: No NAT translations showing up from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3275: Disable conntrack helpers by default from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3788: Keys are not allowed with ipip and sit tunnels from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3738: openvpn fails if server and authentication are configured from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3756: VyOS generates invalid QR code for wireguard clients from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3794: MACsec interfaces in down state after create from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3708: isisd and gre-bridge commit error from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3730: op-mode conntrack-sync miss some functions from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3736: openvpn-option keeps and adds double dashes ''--" from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3768: Remove early syntaxVersion implementation from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3731: verify_accel_ppp_base_service return wrong config error for SSP from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3740: HTTPs API breaks when the address is IPv6 from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3776: Rename FRR daemon restart op-mode commands from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3772: VRRP virtual interfaces are not shown in show interfaces from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.