summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* add a check to avoid foreach on non-arrayRELENG_2_2_4Chris Buechler2015-07-271-0/+4
* Upgrade config to 11.9. Changes IPsec peer ID for EAP types to "any", to reta...Chris Buechler2015-07-253-2/+15
* Change the log for CRLs with no data (exists but no certs revoked) to a warni...Chris Buechler2015-07-251-1/+1
* Add 'any' option for peer ID, for mobile IPsec scenarios where you can't or d...Chris Buechler2015-07-253-5/+11
* Lower LoginGraceTime to 30s, should be plenty long for users, and mitigates t...Chris Buechler2015-07-231-0/+1
* Bump to 2.2.4-RELEASEChris Buechler2015-07-231-1/+1
* Only omit rightid for PSK mobile types. Flip the logic here as the 2_1 !Chris Buechler2015-07-231-2/+3
* change iketype auto to ikev2 on upgrade. Ticket #4873Chris Buechler2015-07-231-0/+5
* Remove "auto", it's just a synonym for IKEv2. Ticket #4873Chris Buechler2015-07-232-6/+4
* include vpn.inc so IPsec CRL reload works. require_once filter.inc inChris Buechler2015-07-232-1/+3
* Most of the flowtable bits were removed some time ago, take out the last of t...Chris Buechler2015-07-231-30/+0
* When a CRL is updated, refresh strongswan's CRLs.Chris Buechler2015-07-231-0/+6
* Merge pull request #1775 from phil-davis/Interfaces-Widget-2-2Chris Buechler2015-07-222-5/+5
|\
| * Interfaces widget use more obscure separator RELENG_2_2Phil Davis2015-07-222-5/+5
* | Add isset check for strictcrlpolicyPhil Davis2015-07-221-1/+1
* | make the IPsec bypass LAN from LAN subnet to LAN subnet rather than fromChris Buechler2015-07-221-1/+1
* | Add IPsec advanced option for strict CRL checkingChris Buechler2015-07-222-0/+20
* | fix typoChris Buechler2015-07-222-2/+2
* | Handle IPsec Advanced Settings save before IPsec is enabledPhil Davis2015-07-221-12/+18
* | write out built-in CRLs for strongswanChris Buechler2015-07-221-2/+18
|/
* Unset old CA and Cert in left system configPhil Davis2015-07-211-0/+8
* Allocate dnpipe and dnqueue numbers even if no filter rulesPhil Davis2015-07-211-2/+3
* Captive Portal zoneid upgrade fix var name typoPhil Davis2015-07-211-1/+1
* Add "netstat -ni" to status.phpjim-p2015-07-211-0/+1
* Allow pre-filling (but no automatic action) of the download filename on exec....jim-p2015-07-212-2/+3
* fix indent my editor broke in my earlier commitChris Buechler2015-07-211-26/+26
* Add IPsec IKE Intermediate EKU to server certificates. The serverAuth EKU alr...Chris Buechler2015-07-201-2/+2
* Specify keyUsage and extendedKeyUsage in openssl.cnf, use crl_ext.Chris Buechler2015-07-201-6/+6
* Fix capsdoktornotor2015-07-191-1/+1
* Bug #4551 - consistent usage of Forwarder/Resolver across the WebGUIdoktornotor2015-07-191-2/+2
* Bug #4551 - consistent usage of Forwarder/Resolver across the WebGUIdoktornotor2015-07-191-1/+1
* Bug #4551 - consistent usage of Forwarder/Resolver across the WebGUIdoktornotor2015-07-191-1/+1
* Merge pull request #1762 from doktornotor/patch-3Renato Botelho2015-07-181-4/+4
|\
| * Add labels to some default firewall rules doktornotor2015-07-181-4/+4
* | Merge pull request #1756 from phil-davis/traffic-graph-widget-2-2Renato Botelho2015-07-182-24/+39
|\ \
| * | Only process Traffic Graph object if it is openPhil Davis2015-07-012-24/+39
* | | Really avoid error loading rules for numeric host name in aliasPhil Davis2015-07-181-1/+2
* | | Merge pull request #1761 from doktornotor/patch-2Renato Botelho2015-07-181-4/+4
|\ \ \ | |_|/ |/| |
| * | Fix Firewall - Aliases GUI inconsistencies for URL Table type aliasesdoktornotor2015-07-171-4/+4
* | | Handle OpenVPN bound to gateway groups using CARP IPs in rc.carpmaster/backup...Chris Buechler2015-07-182-2/+31
|/ /
* | Fixes for IPSec ASN1.DN, ticket #4792Renato Botelho2015-07-171-7/+17
* | Only add outgoing-interface if IP. Ticket #4852Chris Buechler2015-07-171-2/+2
* | Fix #4794:Renato Botelho2015-07-173-2/+23
* | Contrary to some reports this is actually usable in some cases, just notChris Buechler2015-07-161-14/+8
* | myid_data and peerid_data fields are not relevant with asn1dn.Chris Buechler2015-07-161-8/+14
* | Restrict serial ports glob to cua followed by alphaPhil Davis2015-07-161-3/+3
* | Make serial ports glob cope with many more possibilitiesPhil Davis2015-07-161-3/+3
* | Add leftid and rightid value between double quotes on ipsec config when type ...Renato Botelho2015-07-162-3/+8
* | Remove old, unused NetUtils.jsChris Buechler2015-07-162-114/+1
* | Revert "Avoid error loading rules for numeric host name in alias"Renato Botelho2015-07-151-1/+1
OpenPOWER on IntegriCloud