summaryrefslogtreecommitdiffstats
path: root/src/usr
diff options
context:
space:
mode:
authorRenato Botelho <renato@netgate.com>2015-11-26 10:03:36 -0200
committerRenato Botelho <renato@netgate.com>2015-11-26 10:03:36 -0200
commit20ae62bfdad88b2930a1e49d77c0c18e7b674b60 (patch)
tree4a42491e7ab57457f96a5d5c3d375de0f0533b7b /src/usr
parent5176e08fbbe7c625020acf70df3f42636048a55e (diff)
parentf4eec2507cb912290cbf156a49d790139e08f13d (diff)
downloadpfsense-20ae62bfdad88b2930a1e49d77c0c18e7b674b60.zip
pfsense-20ae62bfdad88b2930a1e49d77c0c18e7b674b60.tar.gz
Merge pull request #2122 from phil-davis/ovpn
Diffstat (limited to 'src/usr')
-rw-r--r--src/usr/local/www/vpn_openvpn_client.php72
-rw-r--r--src/usr/local/www/vpn_openvpn_server.php126
2 files changed, 8 insertions, 190 deletions
diff --git a/src/usr/local/www/vpn_openvpn_client.php b/src/usr/local/www/vpn_openvpn_client.php
index d249e07..806eb9d 100644
--- a/src/usr/local/www/vpn_openvpn_client.php
+++ b/src/usr/local/www/vpn_openvpn_client.php
@@ -406,72 +406,6 @@ if ($_POST) {
include("head.inc");
-function build_if_list() {
- $list = array();
-
- $interfaces = get_configured_interface_with_descr();
- $carplist = get_configured_carp_interface_list();
-
- foreach ($carplist as $cif => $carpip)
- $interfaces[$cif.'|'.$carpip] = $carpip." (".get_vip_descr($carpip).")";
-
- $aliaslist = get_configured_ip_aliases_list();
-
- foreach ($aliaslist as $aliasip => $aliasif)
- $interfaces[$aliasif.'|'.$aliasip] = $aliasip." (".get_vip_descr($aliasip).")";
-
- $grouplist = return_gateway_groups_array();
-
- foreach ($grouplist as $name => $group) {
- if($group['ipprotocol'] != inet)
- continue;
-
- if($group[0]['vip'] != "")
- $vipif = $group[0]['vip'];
- else
- $vipif = $group[0]['int'];
-
- $interfaces[$name] = "GW Group {$name}";
- }
-
- $interfaces['lo0'] = "Localhost";
- $interfaces['any'] = "any";
-
- foreach ($interfaces as $iface => $ifacename)
- $list[$iface] = $ifacename;
-
- return($list);
-}
-
-function build_cert_list() {
- global $a_cert;
-
- $list = array('' => 'None (Username and/or Password required)');
-
- foreach ($a_cert as $cert) {
- $caname = "";
- $inuse = "";
- $revoked = "";
- $ca = lookup_ca($cert['caref']);
-
- if ($ca)
- $caname = " (CA: {$ca['descr']})";
-
- if ($pconfig['certref'] == $cert['refid'])
- $selected = "selected=\"selected\"";
-
- if (cert_in_use($cert['refid']))
- $inuse = " *In Use";
-
- if (is_cert_revoked($cert))
- $revoked = " *Revoked";
-
- $list[$cert['refid']] = $cert['descr'] . $caname . $inuse . $revoked;
- }
-
- return($list);
-}
-
if (!$savemsg)
$savemsg = "";
@@ -526,7 +460,7 @@ if($act=="new" || $act=="edit") :
'interface',
'Interface',
$pconfig['interface'],
- build_if_list()
+ openvpn_build_if_list()
));
$section->addInput(new Form_Input(
@@ -660,7 +594,7 @@ if($act=="new" || $act=="edit") :
'crlref',
'Peer Certificate Revocation list',
$pconfig['crlref'],
- build_crl_list()
+ openvpn_build_crl_list()
));
} else {
$section->addInput(new Form_StaticText(
@@ -686,7 +620,7 @@ if($act=="new" || $act=="edit") :
'certref',
'Client Certificate',
$pconfig['certref'],
- build_cert_list()
+ openvpn_build_cert_list(true)
));
$section->addInput(new Form_Select(
diff --git a/src/usr/local/www/vpn_openvpn_server.php b/src/usr/local/www/vpn_openvpn_server.php
index 48c66c5..d0ef97c 100644
--- a/src/usr/local/www/vpn_openvpn_server.php
+++ b/src/usr/local/www/vpn_openvpn_server.php
@@ -585,122 +585,6 @@ $shortcut_section = "openvpn";
include("head.inc");
-function build_mode_list() {
- global $openvpn_server_modes;
-
- $list = array();
-
- foreach ($openvpn_server_modes as $name => $desc)
- $list[$name] = $desc;
-
- return($list);
-}
-
-function build_if_list() {
- $list = array();
-
- $interfaces = get_configured_interface_with_descr();
- $carplist = get_configured_carp_interface_list();
-
- foreach ($carplist as $cif => $carpip)
- $interfaces[$cif.'|'.$carpip] = $carpip." (".get_vip_descr($carpip).")";
-
- $aliaslist = get_configured_ip_aliases_list();
-
- foreach ($aliaslist as $aliasip => $aliasif)
- $interfaces[$aliasif.'|'.$aliasip] = $aliasip." (".get_vip_descr($aliasip).")";
-
- $grouplist = return_gateway_groups_array();
-
- foreach ($grouplist as $name => $group) {
- if($group['ipprotocol'] != inet)
- continue;
-
- if($group[0]['vip'] != "")
- $vipif = $group[0]['vip'];
- else
- $vipif = $group[0]['int'];
-
- $interfaces[$name] = "GW Group {$name}";
- }
-
- $interfaces['lo0'] = "Localhost";
- $interfaces['any'] = "any";
-
- foreach ($interfaces as $iface => $ifacename)
- $list[$iface] = $ifacename;
-
- return($list);
-}
-
-function build_crl_list() {
- global $a_crl;
-
- $list = array('' => 'None');
-
- foreach ($a_crl as $crl) {
- $caname = "";
- $ca = lookup_ca($crl['caref']);
-
- if ($ca)
- $caname = " (CA: {$ca['descr']})";
-
- $list[$crl['refid']] = $crl['descr'] . $caname;
- }
-
- return($list);
-}
-
-function build_cert_list() {
- global $a_cert;
-
- $list = array();
-
- foreach ($a_cert as $cert) {
- $caname = "";
- $inuse = "";
- $revoked = "";
- $ca = lookup_ca($cert['caref']);
-
- if ($ca)
- $caname = " (CA: {$ca['descr']})";
-
- if ($pconfig['certref'] == $cert['refid'])
- $selected = "selected=\"selected\"";
-
- if (cert_in_use($cert['refid']))
- $inuse = " *In Use";
-
- if (is_cert_revoked($cert))
- $revoked = " *Revoked";
-
- $list[$cert['refid']] = $cert['descr'] . $caname . $inuse . $revoked;
- }
-
- return($list);
-}
-
-function build_bridge_list() {
- $list = array();
-
- $serverbridge_interface['none'] = "none";
- $serverbridge_interface = array_merge($serverbridge_interface, get_configured_interface_with_descr());
- $carplist = get_configured_carp_interface_list();
-
- foreach ($carplist as $cif => $carpip)
- $serverbridge_interface[$cif.'|'.$carpip] = $carpip." (".get_vip_descr($carpip).")";
-
- $aliaslist = get_configured_ip_aliases_list();
-
- foreach ($aliaslist as $aliasip => $aliasif)
- $serverbridge_interface[$aliasif.'|'.$aliasip] = $aliasip." (".get_vip_descr($aliasip).")";
-
- foreach ($serverbridge_interface as $iface => $ifacename)
- $list[$iface] = htmlspecialchars($ifacename);
-
- return($list);
-}
-
if (!$savemsg)
$savemsg = "";
@@ -736,7 +620,7 @@ if($act=="new" || $act=="edit") :
'mode',
'Server mode',
$pconfig['mode'],
- build_mode_list()
+ openvpn_build_mode_list()
));
$options = array();
@@ -778,7 +662,7 @@ if($act=="new" || $act=="edit") :
'interface',
'Interface',
$pconfig['interface'],
- build_if_list()
+ openvpn_build_if_list()
));
$section->addInput(new Form_Input(
@@ -845,7 +729,7 @@ if($act=="new" || $act=="edit") :
'crlref',
'Peer Certificate Revocation list',
$pconfig['crlref'],
- build_crl_list()
+ openvpn_build_crl_list()
));
} else {
$section->addInput(new Form_StaticText(
@@ -858,7 +742,7 @@ if($act=="new" || $act=="edit") :
'certref',
'Server certificate',
$pconfig['certref'],
- build_cert_list()
+ openvpn_build_cert_list()
))->setHelp(count($a_cert) ? '':sprintf('No Certificates defined. You may create one here: %s', '<a href="system_camanager.php">System &gt; Cert Manager</a>'));
$section->addInput(new Form_Select(
@@ -954,7 +838,7 @@ if($act=="new" || $act=="edit") :
'serverbridge_interface',
'Bridge Interface',
$pconfig['serverbridge_interface'],
- build_bridge_list()
+ openvpn_build_bridge_list()
))->setHelp('The interface to which this tap instance will be bridged. This is not done automatically. You must assign this ' .
'interface and create the bridge separately. This setting controls which existing IP address and subnet ' .
'mask are used by OpenVPN for the bridge. Setting this to "none" will cause the Server Bridge DHCP settings below to be ignored.');
OpenPOWER on IntegriCloud