summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Expand)AuthorAgeFilesLines
* remove old unused nopccard_platformsChris Buechler2015-07-291-1/+0
* remove wrap and net4501 platforms, they haven't existed for years.Chris Buechler2015-07-291-19/+0
* Check both greater and less than for the configuration version in XMLRPC sync...jim-p2015-07-291-3/+4
* Use an alternate method to find VIP targets that should be allowed for Captiv...jim-p2015-07-292-20/+14
* Merge pull request #1797 from phil-davis/patch-10Renato Botelho2015-07-271-1/+1
|\
| * Strip any \r when parsing URL table ports filePhil Davis2015-07-271-1/+1
* | Fix typo in variable name, spotted by Phil DavisRenato Botelho2015-07-271-1/+1
|/
* Consider url_port alias type when checking port-type aliases V2Phil Davis2015-07-271-1/+1
* add a check to avoid foreach on non-arrayChris Buechler2015-07-271-0/+4
* Bring back the ability to specify file and URL as command line arguments. Cle...Chris Buechler2015-07-261-15/+21
* Upgrade config to 11.9. Changes IPsec peer ID for EAP types to "any", to reta...Chris Buechler2015-07-251-0/+13
* Change the log for CRLs with no data (exists but no certs revoked) to a warni...Chris Buechler2015-07-251-1/+1
* Add 'any' option for peer ID, for mobile IPsec scenarios where you can't or d...Chris Buechler2015-07-252-1/+4
* Lower LoginGraceTime to 30s, should be plenty long for users, and mitigates t...Chris Buechler2015-07-231-0/+1
* Only omit rightid for PSK mobile types. Flip the logic here as the 2_1 !Chris Buechler2015-07-231-2/+3
* change iketype auto to ikev2 on upgrade. Ticket #4873Chris Buechler2015-07-231-0/+5
* Remove "auto", it's just a synonym for IKEv2. Ticket #4873Chris Buechler2015-07-231-3/+1
* include vpn.inc so IPsec CRL reload works. require_once filter.inc inChris Buechler2015-07-231-0/+1
* Obsolete device.hints_wrap, it's not being usedRenato Botelho2015-07-231-0/+1
* Move mfs related rc.d scripts from tools to main repoRenato Botelho2015-07-233-0/+208
* Obsolete /etc/rc.d/uzip and stop using itRenato Botelho2015-07-233-6/+1
* make the IPsec bypass LAN from LAN subnet to LAN subnet rather than fromChris Buechler2015-07-221-1/+1
* Add IPsec advanced option for strict CRL checkingChris Buechler2015-07-221-0/+4
* write out built-in CRLs for strongswanChris Buechler2015-07-221-2/+18
* Merge pull request #1770 from phil-davis/patch-1Chris Buechler2015-07-211-0/+10
|\
| * Unset old CA and Cert in left system configPhil Davis2015-07-211-0/+8
| * Unset old CA and Cert in system configPhil Davis2015-07-211-0/+2
* | Merge pull request #1771 from phil-davis/patch-2Renato Botelho2015-07-211-3/+4
|\ \
| * | Allocate dnpipe and dnqueue numbers even if no filter rulesPhil Davis2015-07-211-3/+4
| |/
* | Captive Portal zoneid upgrade fix var name typoPhil Davis2015-07-211-1/+1
|/
* Reverting this for master, needs review in context of uniqid changes. Opening...Chris Buechler2015-07-211-47/+33
* Going back to prior to earlier commit. Revert "fix indent my editor broke in ...Chris Buechler2015-07-211-26/+26
* fix indent my editor broke in an earlier commit.Chris Buechler2015-07-211-26/+26
* Add IPsec IKE Intermediate EKU to server certificates. The serverAuth EKU alr...Chris Buechler2015-07-201-2/+2
* Specify keyUsage and extendedKeyUsage in openssl.cnf, use crl_ext.Chris Buechler2015-07-201-6/+6
* Merge pull request #1738 from phil-davis/Static-RoutesRenato Botelho2015-07-181-5/+5
|\
| * Fix #4813 validation of enable/disable of gateways and static routesPhil Davis2015-07-051-5/+5
* | Merge pull request #1763 from doktornotor/patch-4Renato Botelho2015-07-181-4/+4
|\ \
| * | Add labels to some default firewall rulesdoktornotor2015-07-181-4/+4
* | | Merge pull request #1759 from phil-davis/patch-2Renato Botelho2015-07-181-1/+2
|\ \ \ | |/ / |/| |
| * | Really avoid error loading rules for numeric host name in aliasPhil Davis2015-07-171-1/+2
* | | sync up rc.carpmaster with RELENG_2_2. Ticket #4854, plus removal of unnecess...Chris Buechler2015-07-181-33/+47
* | | Fixes for IPSec ASN1.DN, ticket #4792Renato Botelho2015-07-171-7/+17
* | | only add outgoing-interface if it's an IP. Ticket #4852Chris Buechler2015-07-171-2/+2
|/ /
* | Fix #4794:Renato Botelho2015-07-172-2/+23
* | Add leftid and rightid value between double quotes on ipsec config when type ...Renato Botelho2015-07-162-3/+8
* | Remove old, unused NetUtils.jsChris Buechler2015-07-161-0/+1
* | Revert "Avoid error loading rules for numeric host name in alias"Renato Botelho2015-07-151-1/+1
* | Merge pull request #1741 from phil-davis/patch-2Renato Botelho2015-07-151-6/+6
|\ \
| * | Fix issue_ip_type var name spellingPhil Davis2015-07-121-6/+6
OpenPOWER on IntegriCloud