summaryrefslogtreecommitdiffstats
path: root/usr/local/www/vpn_ipsec_phase2.php
diff options
context:
space:
mode:
authorErmal LUÇI <eri@pfsense.org>2015-01-13 16:38:12 +0100
committerErmal LUÇI <eri@pfsense.org>2015-01-13 19:57:23 +0100
commit1fe208ec9e3bf05dd78ccf1e80b89e4be1a372d6 (patch)
treed9dad3aabecdd70a6f9b9bc4710bfe3a57c48f9a /usr/local/www/vpn_ipsec_phase2.php
parent5a5615ce07272b4d79449f224c81d1114169d981 (diff)
downloadpfsense-1fe208ec9e3bf05dd78ccf1e80b89e4be1a372d6.zip
pfsense-1fe208ec9e3bf05dd78ccf1e80b89e4be1a372d6.tar.gz
To avoid issues with clashing SAIDs go back to specifying the reqid in strongswan config.
To be able to manage this first upgrade the config to assign each phase2 an reqid Second use that during config generation Ticket #4208
Diffstat (limited to 'usr/local/www/vpn_ipsec_phase2.php')
-rw-r--r--usr/local/www/vpn_ipsec_phase2.php8
1 files changed, 8 insertions, 0 deletions
diff --git a/usr/local/www/vpn_ipsec_phase2.php b/usr/local/www/vpn_ipsec_phase2.php
index 6f07408..160b264 100644
--- a/usr/local/www/vpn_ipsec_phase2.php
+++ b/usr/local/www/vpn_ipsec_phase2.php
@@ -93,6 +93,7 @@ if ($ph2found === true)
$pconfig['pfsgroup'] = $ph2['pfsgroup'];
$pconfig['lifetime'] = $ph2['lifetime'];
$pconfig['pinghost'] = $ph2['pinghost'];
+ $pconfig['reqid'] = $ph2['reqid'];
if (isset($ph2['mobile']))
$pconfig['mobile'] = true;
@@ -320,6 +321,10 @@ if ($_POST) {
$ph2ent['uniqid'] = $pconfig['uniqid'];
$ph2ent['mode'] = $pconfig['mode'];
$ph2ent['disabled'] = $pconfig['disabled'] ? true : false;
+ if (!isset($pconfig['reqid']))
+ $ph2ent['reqid'] = ipsec_new_reqid();
+ else
+ $ph2ent['reqid'] = $pconfig['reqid'];
if(($ph2ent['mode'] == "tunnel") || ($ph2ent['mode'] == "tunnel6")){
if (!empty($pconfig['natlocalid_address']))
@@ -832,6 +837,9 @@ function change_protocol() {
<?php endif; ?>
<input name="Submit" type="submit" class="formbtn" value="<?=gettext("Save"); ?>" />
<input name="ikeid" type="hidden" value="<?=htmlspecialchars($pconfig['ikeid']);?>" />
+ <?php if (!empty($pconfig['reqid'])): ?>
+ <input name="reqid" type="hidden" value="<?=htmlspecialchars($pconfig['reqid']);?>" />
+ <?php endif; ?>
<input name="uniqid" type="hidden" value="<?=htmlspecialchars($pconfig['uniqid']);?>" />
</td>
</tr>
OpenPOWER on IntegriCloud