summaryrefslogtreecommitdiffstats
path: root/etc/inc/vpn.inc
Commit message (Expand)AuthorAgeFilesLines
* rereadall is not enough here, restore reload call to make sure everything wor...Renato Botelho2015-06-231-0/+1
* Replace ipsec rereadsecrets + reload by single rereadall, that will re-read a...Renato Botelho2015-06-231-2/+1
* Instead of sending USR1, just call ipsec reload. And before it, call ipsec re...Renato Botelho2015-06-231-1/+2
* Partially revert 019ee2bc8c, this workaround is not necessary. Real fix will ...Renato Botelho2015-06-231-8/+0
* Add a workaround for ticket #4785:Renato Botelho2015-06-231-4/+18
* Use $myid in ipsec.secrets. Ticket #4785Chris Buechler2015-06-221-2/+2
* Specify $myid rather than %any here, otherwise user manager and mobile PSKs w...Chris Buechler2015-06-211-3/+4
* Fixes #4537 On 32bit platform do not enable direct dispatch on IPsec since it...Ermal LUÇI2015-06-101-0/+3
* Seems strongswan 5.3.0 has improved the situation on putting multiple phase2 ...Ermal LUÇI2015-04-301-4/+4
* Revert "Use a dirty hack to make IKEv1 with multiple phase2 to work correctly...Ermal LUÇI2015-04-301-3/+0
* Revert "Provide a description for the dirty hack to not come back scratching....Ermal LUÇI2015-04-301-5/+0
* Provide a description for the dirty hack to not come back scratching.... on itErmal LUÇI2015-04-241-0/+5
* Use a dirty hack to make IKEv1 with multiple phase2 to work correctly with on...Ermal LUÇI2015-04-241-0/+3
* Is better to send the signal to starter rather than to charon directly. Start...Ermal LUÇI2015-04-241-4/+3
* This was meant to remove duplicates here, even though charon will do by itsel...Ermal LUÇI2015-04-231-1/+1
* Revert "Revert "Move to specifically specifying the ID type apart when an ip ...Ermal LUÇI2015-04-211-11/+13
* Allow to configure new modes for phase1 according to RFC 5903 by manually mer...Ermal LUÇI2015-04-201-0/+9
* Implement make bofre break feature avaliable on strongswan 5.3.0 useful for I...Ermal LUÇI2015-04-181-1/+7
* Merge pull request #1613 from ibauersachs/ipsec-mobile-eap-radius_2-2Ermal LUÇI2015-04-161-1/+35
|\
| * Add support for EAP-RADIUS to IKEv2 Mobile Clients (Rel. 2.2)Ingo Bauersachs2015-04-151-1/+35
* | Always do a filter reload in vpn_ipsec_configure to ensure the ruleset isChris Buechler2015-04-161-2/+3
|/
* Fix up Ticket #4504 implementation. Match config style with other areas. Use ...Chris Buechler2015-04-041-6/+6
* fix type. Ticket #4504Chris Buechler2015-04-041-1/+1
* Fixes #4504 Provide a newline to generate proper configErmal LUÇI2015-04-031-0/+1
* Fixes #4504 Allow the bypass policy for LAN to be enabled and prevent traffic...Ermal LUÇI2015-04-031-0/+19
* Only use mobile clients PFS config with mobile ph2ent. Ticket #4538Chris Buechler2015-04-031-1/+1
* enable ike_name for daemon facility as well, to add connection identifiers to...Chris Buechler2015-04-021-0/+1
* Merge manually pull request #1593Ermal LUÇI2015-03-311-1/+2
* If we bail not being able to find the P1 source, log an error.Chris Buechler2015-03-121-1/+3
* Move libstrongswan-unity.so when Unity plugin is disabled so it can't modify ...Chris Buechler2015-03-111-3/+13
* Need global $ipsec_idhandling here.Chris Buechler2015-03-101-2/+2
* Don't enable interfaces_use by default. Add checkbox to enable on AdvancedChris Buechler2015-03-101-3/+8
* Check if it's an array before call foreach(). TicketRenato Botelho2015-03-061-1/+1
* Stop trying to fix dns_split during strongswan config generation, we have an ...Renato Botelho2015-03-061-8/+0
* same change as previous commit, for IPv6. Ticket #4482Chris Buechler2015-03-061-1/+7
* Use the parent interface, not the _vip for interfaces_use. Part of Ticket #4482Chris Buechler2015-03-061-2/+11
* Remove "Prefer old SA" option, and ignore it in all existing configurations. ...Chris Buechler2015-03-031-10/+0
* Fix type (trime->trim)jim-p2015-02-261-1/+1
* Ticket #4418 Actually make each entry a clear token to strongswan parser for ...Ermal LUÇI2015-02-251-2/+3
* Ticket #4418 make sure the dns_split is separated with spaces rather than spa...Ermal LUÇI2015-02-251-7/+0
* Ticket #4418 Make the DNS names attr 28675 space separated as identified by J...Ermal LUÇI2015-02-251-1/+16
* Add GUI control for MOBIKE. Hide it when IKEv1 selected. Enable toggling of N...Chris Buechler2015-02-181-0/+6
* Surrond the some mobile clients attributes with " ( quote ) to help the stron...Ermal LUÇI2015-02-131-5/+5
* Use web-gui setting for pap or chap instead of having it hard-coded to chap.Sebastian Öhman2015-02-051-1/+1
* Allow IPseec clients to properly connect and not stomp over each other. Repor...Ermal LUÇI2015-02-021-1/+1
* Ticket #4353 fix typo on unset var spotted-by: Phil DavisErmal LUÇI2015-02-021-1/+1
* Fixes #4360 allow marking a connection as responder only, the same behviour a...Ermal LUÇI2015-01-311-0/+3
* Fixes #4359 Allow controlling uniqueidsErmal LUÇI2015-01-311-1/+6
* Fixes #4353 Identify when strongswan.conf needs a reload and restart ipsec se...Ermal LUÇI2015-01-311-7/+19
* Reload filter when IPsec is disabled, fixes #4245Renato Botelho2015-01-281-0/+2
OpenPOWER on IntegriCloud