[pull] master from hwdsl2:master#18
Open
pull[bot] wants to merge 634 commits into
Open
Conversation
hwdsl2
force-pushed
the
master
branch
5 times, most recently
from
cf24874 to
5b1377d
Compare
hwdsl2
force-pushed
the
master
branch
3 times, most recently
from
e4fe2c8 to
d01cc0b
Compare
hwdsl2
force-pushed
the
master
branch
5 times, most recently
from
d1a3947 to
354c512
Compare
hwdsl2
force-pushed
the
master
branch
8 times, most recently
from
52baf70 to
d1f1568
Compare
hwdsl2
force-pushed
the
master
branch
7 times, most recently
from
4c45d91 to
1b2c251
Compare
- Add community link to IKEv2 setup output
- Update issue templates
- Add contribution and pull request guidance
- Fix CentOS NSS policy for legacy PKCS#12 export. Allow purpose-scoped SHA1 and 3DES PKCS#12 legacy decrypt on RHEL-compatible 9/10 systems so pk12util can read iOS-compatible PBE-SHA1-3DES client bundles after recent NSS/crypto-policy updates.
- Use new Libreswan version 5.3.1.
- Support upgrading to Libreswan 5.3.1.
[skip ci]
- Add Ubuntu 26.04 and Debian 13
- Remove Amazon Linux 2 (EOL 2026-06-30)
- Remove Amazon Linux 2 (EOL 2026-06-30)
[skip ci]
Fixes #1830. Use an nft-friendly IPv6 MASQUERADE rule for the IPsec IKEv2 pool on CentOS/RHEL nftables systems. This avoids saving an xtables policy match that nft cannot reload after reboot.
Closes #1829. Check standard modprobe configuration directories for explicit rules that disable esp4 or esp6 before continuing on CentOS/RHEL-family systems. Stop early when esp4 is disabled, and continue without IKEv2 IPv6 support when esp6 is disabled.
Broaden the nftables compatibility repair to rewrite IPv6 source MASQUERADE rules saved as xtables compat targets, including the default IKEv2 IPv6 pool and custom IPv6 pools. Suppress duplicate validation output while keeping the final nft load error visible if the saved rules are still invalid.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
7 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )