summaryrefslogtreecommitdiffstats
path: root/etc/inc/vpn.inc
Commit message (Expand)AuthorAgeFilesLines
* Only set i_dont_care_about_security_and_use_aggressive_mode_psk=yes where the...Chris Buechler2014-11-291-4/+10
* Rather than set the g['booting'] on globals provide a function to test for th...Ermal LUÇI2014-11-261-9/+9
* Ooops do the right things for a correct config and php syntaxErmal LUÇI2014-11-251-1/+1
* Put the aggressive line only during ikev1 configsErmal LUÇI2014-11-251-1/+2
* clean up tabs in strongswan.confChris Buechler2014-11-211-15/+15
* Matching bracket in vpn.incPhil Davis2014-11-191-1/+1
* Ticket #3987. Strongswan support autodetection of IKE version exchange. Suppo...Ermal2014-11-191-3/+6
* Ticket #3809 use the setting with number rather than string since the parser ...Ermal2014-11-191-1/+1
* Fix the generation of certificates for rsa type. strpos returns the pos as 0 ...Ermal2014-11-171-1/+1
* Oops wrong choice the checkbox is only for javascriptErmal2014-11-121-1/+1
* Remove redundant code and check for dpd_enable checkbox to be setErmal2014-11-121-3/+2
* Use leftcert for more options on IPsec authenticationErmal2014-11-111-0/+6
* Fixes #3995. Do not set rightsourceip on site-to-site VPNs but only on mobile...Ermal2014-11-071-1/+1
* Reload also the configuration not only the secrets before trying to apply exi...Ermal2014-11-071-0/+1
* fix text, PPPoE Server, not VPNChris Buechler2014-11-061-1/+1
* set install_routes=no for charon to avoid the issues noted in ticketChris Buechler2014-11-061-1/+2
* use tabs rather than spaces, as most of this already did.Chris Buechler2014-11-041-8/+6
* fix invalid ipsec.confChris Buechler2014-11-041-1/+1
* Restore 3 values back on NAT-T settings Just Enable now its Auto as per stron...Ermal2014-11-041-3/+5
* Properly configure NAT Tranversal setting.Ermal2014-11-011-21/+28
* Remove debugging codeErmal2014-11-011-3/+1
* Allow accept_unencrypted_mainmode_messages to be enabled if neededErmal2014-10-301-0/+5
* Enable unity plugin as per request from https://forum.pfsense.org/index.php?t...Ermal2014-10-241-3/+2
* This really does not need the =Ermal2014-09-121-1/+1
* Ooops restore thisErmal2014-09-121-1/+1
* Inverse the sense of the toggles to avoid configuration upgradesErmal2014-09-121-4/+4
* Actually use the new togglesErmal2014-09-121-2/+11
* Provide a first implementation of EAP-TLS authentication with IKEv2. It is a ...Ermal2014-09-121-42/+40
* Make this work properly and not throw out errors.Ermal2014-09-121-1/+1
* Put some tuning on number of half open connection possible in one time.Ermal2014-09-101-0/+1
* Provide some parallellizm on the IKESA lookups for heavy loaded boxes.Ermal2014-09-101-0/+2
* Actually roll this back since it was a testing glitchErmal2014-09-101-3/+3
* Correct generating loglevels for startup through ipsec.confErmal2014-09-091-2/+2
* Blah unconditionally set rightsourceip per https://forum.pfsense.org/index.ph...Ermal2014-09-091-3/+4
* Correct processing and assignment on ikeid variable so it does the right thingErmal2014-08-181-5/+5
* Allow HASH algorithms to be empty for phase2 in case the encryption one is AE...Ermal2014-08-181-9/+27
* Do not allow duplicate subnet entries on left|rightsubnet specification since...Ermal2014-08-181-6/+14
* Do not accept proposal out of that configured even for IKEv2 even though ther...Ermal2014-08-181-2/+1
* Restore behaviour as with racoon to trigger tunnel startup from traffic that ...Ermal2014-08-181-1/+2
* rightsourceip must be used with PSK+Xauth.Chris Buechler2014-08-141-2/+3
* This is required for PSK+Xauth. I'll commit that clarification in a bit.Chris Buechler2014-08-131-1/+6
* Revert "Fix assignment of tunnel IPs to mobile clients."Ermal2014-08-131-6/+1
* Actually disable this plugin for now. It was not really needed for solving th...Ermal2014-08-121-3/+0
* Fix assignment of tunnel IPs to mobile clients.Chris Buechler2014-08-111-1/+6
* Fix #3798 - 'IPsec phase 2 pinghost is not used if the source IP should be a ...Matt Smith2014-08-081-5/+17
* Correct this so the dpdaction is created properly as restartErmal2014-08-081-1/+1
* Do a reload on the cofniguration which is better than update. Also let the ke...Ermal2014-08-071-2/+1
* Change the logic of the vpn config generation to make connectivity more stabl...Ermal2014-08-071-161/+166
* Move the rekey to yes always to avoid issues.Ermal2014-08-071-1/+1
* Do not try to rekey for IKEv1.Ermal2014-08-011-1/+6
OpenPOWER on IntegriCloud