summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* | | Fix source address selection on Test Port to handle VIPs properly.jim-p2015-08-181-1/+9
* | | Fix a potential XSS in voucher testing.jim-p2015-08-181-2/+2
* | | Properly declare an error when a too-short voucher is submitted.jim-p2015-08-181-1/+5
* | | The "enableallowallwan" script should also allow bogons, or it makes running ...jim-p2015-08-131-0/+2
* | | Add support for LDAP RFC2307 style group membership. Implements #4923jim-p2015-08-132-9/+50
* | | Provide an LDAP server timeout field. Default to 25 seconds. Part of ticket #...jim-p2015-08-132-2/+28
* | | Don't lowercase the whole group namejim-p2015-08-121-2/+2
* | | Fix GUI auth from RADIUS to grab group names from the Class attribute. Implem...jim-p2015-08-125-9/+34
|/ /
* | only read file if it exists, and only foreach if an array.Chris Buechler2015-08-031-8/+13
* | Allow to create empty bogons on nanoBSDPhil Davis2015-08-031-4/+8
* | This is handled above now.jim-p2015-07-301-1/+0
* | More safety belts on CP DB openjim-p2015-07-301-0/+13
* | Take more care when attempting to open the CP database. Don't assume it's val...jim-p2015-07-301-0/+10
* | Reinitialize the captive portal database for a zone if it is corrupt/unreadab...jim-p2015-07-301-4/+19
* | remove the destination server's interface(s) from dhcrelay. Ticket #4908Chris Buechler2015-07-301-132/+6
* | remove more old, unused platform stuffChris Buechler2015-07-302-6/+0
* | Fix killing of individual states for IPv6. Ticket #4906Chris Buechler2015-07-301-11/+27
* | fix whitespaceChris Buechler2015-07-301-4/+4
* | Use the appropriate source and dest IPs for all state types. Ticket #4907Chris Buechler2015-07-301-2/+10
* | remove old unused nopccard_platformsChris Buechler2015-07-291-1/+0
* | sync rc.firmware_auto with masterChris Buechler2015-07-291-53/+40
* | Check both greater and less than for the configuration version in XMLRPC sync...jim-p2015-07-291-4/+6
* | Use an alternate method to find VIP targets that should be allowed for Captiv...jim-p2015-07-292-18/+14
* | Add "sockstat" output to status.phpjim-p2015-07-291-0/+1
* | Move cleargpt.sh and cleargmirror.sh scripts to main repoRenato Botelho2015-07-292-0/+39
* | Strip any \r when parsing URL table ports filePhil Davis2015-07-271-1/+1
* | Fix typo in variable name, spotted by Phil DavisRenato Botelho2015-07-271-1/+1
* | Change version to 2.2.5-DEVELOPMENTRenato Botelho2015-07-271-1/+1
* | Merge pull request #1794 from phil-davis/patch-8Renato Botelho2015-07-271-1/+1
|\ \
| * | Consider url_port alias type when checking port-type aliases V2Phil Davis2015-07-271-1/+1
|/ /
* | add a check to avoid foreach on non-arrayRELENG_2_2_4Chris Buechler2015-07-271-0/+4
* | Upgrade config to 11.9. Changes IPsec peer ID for EAP types to "any", to reta...Chris Buechler2015-07-253-2/+15
* | Change the log for CRLs with no data (exists but no certs revoked) to a warni...Chris Buechler2015-07-251-1/+1
* | Add 'any' option for peer ID, for mobile IPsec scenarios where you can't or d...Chris Buechler2015-07-253-5/+11
* | Lower LoginGraceTime to 30s, should be plenty long for users, and mitigates t...Chris Buechler2015-07-231-0/+1
|/
* Bump to 2.2.4-RELEASEChris Buechler2015-07-231-1/+1
* Only omit rightid for PSK mobile types. Flip the logic here as the 2_1 !Chris Buechler2015-07-231-2/+3
* change iketype auto to ikev2 on upgrade. Ticket #4873Chris Buechler2015-07-231-0/+5
* Remove "auto", it's just a synonym for IKEv2. Ticket #4873Chris Buechler2015-07-232-6/+4
* include vpn.inc so IPsec CRL reload works. require_once filter.inc inChris Buechler2015-07-232-1/+3
* Most of the flowtable bits were removed some time ago, take out the last of t...Chris Buechler2015-07-231-30/+0
* When a CRL is updated, refresh strongswan's CRLs.Chris Buechler2015-07-231-0/+6
* Merge pull request #1775 from phil-davis/Interfaces-Widget-2-2Chris Buechler2015-07-222-5/+5
|\
| * Interfaces widget use more obscure separator RELENG_2_2Phil Davis2015-07-222-5/+5
* | Add isset check for strictcrlpolicyPhil Davis2015-07-221-1/+1
* | make the IPsec bypass LAN from LAN subnet to LAN subnet rather than fromChris Buechler2015-07-221-1/+1
* | Add IPsec advanced option for strict CRL checkingChris Buechler2015-07-222-0/+20
* | fix typoChris Buechler2015-07-222-2/+2
* | Handle IPsec Advanced Settings save before IPsec is enabledPhil Davis2015-07-221-12/+18
* | write out built-in CRLs for strongswanChris Buechler2015-07-221-2/+18
|/
OpenPOWER on IntegriCloud