diff options
author | Matthew Grooms <mgrooms@pfsense.org> | 2008-08-26 04:48:04 +0000 |
---|---|---|
committer | Matthew Grooms <mgrooms@pfsense.org> | 2008-08-26 04:48:04 +0000 |
commit | d799787e49e0a535acbc881b8e8944b860e25e47 (patch) | |
tree | cb1036a4ae588bc7e7312262d53596ff0e246400 /etc/inc/ipsec.inc | |
parent | 667725cea8c2b64ce6603aa93320e39f73bff8f3 (diff) | |
download | pfsense-d799787e49e0a535acbc881b8e8944b860e25e47.zip pfsense-d799787e49e0a535acbc881b8e8944b860e25e47.tar.gz |
Rework most of the OpenVPN support. The interfaces have been updated to
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this
commit were not being referenced.
This commit also splits out the certificate management components into a
new system menu item.
Diffstat (limited to 'etc/inc/ipsec.inc')
-rw-r--r-- | etc/inc/ipsec.inc | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/etc/inc/ipsec.inc b/etc/inc/ipsec.inc index 76ea0f8..2328e24 100644 --- a/etc/inc/ipsec.inc +++ b/etc/inc/ipsec.inc @@ -88,6 +88,29 @@ $p2_pfskeygroups = array( '5' => '5'); /* + * ikeid management functions + */ + +function ipsec_ikeid_used($ikeid) { + global $config; + + foreach ($config['ipsec']['phase1'] as $ph1ent) + if( $ikeid == $ph1ent['ikeid'] ) + return true; + + return false; +} + +function ipsec_ikeid_next() { + + $ikeid = 1; + while(ipsec_ikeid_used($ikeid)) + $ikeid++; + + return $ikeid; +} + +/* * Return phase1 local address */ function ipsec_get_phase1_src(& $ph1ent) { |