| Commit message (Expand) | Author | Age | Files | Lines |
* | Add 'any' option for peer ID, for mobile IPsec scenarios where you can't or d... | Chris Buechler | 2015-07-25 | 2 | -1/+4 |
* | Lower LoginGraceTime to 30s, should be plenty long for users, and mitigates t... | Chris Buechler | 2015-07-23 | 1 | -0/+1 |
* | Only omit rightid for PSK mobile types. Flip the logic here as the 2_1 ! | Chris Buechler | 2015-07-23 | 1 | -2/+3 |
* | change iketype auto to ikev2 on upgrade. Ticket #4873 | Chris Buechler | 2015-07-23 | 1 | -0/+5 |
* | Remove "auto", it's just a synonym for IKEv2. Ticket #4873 | Chris Buechler | 2015-07-23 | 1 | -3/+1 |
* | include vpn.inc so IPsec CRL reload works. require_once filter.inc in | Chris Buechler | 2015-07-23 | 1 | -0/+1 |
* | Obsolete device.hints_wrap, it's not being used | Renato Botelho | 2015-07-23 | 1 | -0/+1 |
* | Move mfs related rc.d scripts from tools to main repo | Renato Botelho | 2015-07-23 | 3 | -0/+208 |
* | Obsolete /etc/rc.d/uzip and stop using it | Renato Botelho | 2015-07-23 | 3 | -6/+1 |
* | make the IPsec bypass LAN from LAN subnet to LAN subnet rather than from | Chris Buechler | 2015-07-22 | 1 | -1/+1 |
* | Add IPsec advanced option for strict CRL checking | Chris Buechler | 2015-07-22 | 1 | -0/+4 |
* | write out built-in CRLs for strongswan | Chris Buechler | 2015-07-22 | 1 | -2/+18 |
* | Merge pull request #1770 from phil-davis/patch-1 | Chris Buechler | 2015-07-21 | 1 | -0/+10 |
|\ |
|
| * | Unset old CA and Cert in left system config | Phil Davis | 2015-07-21 | 1 | -0/+8 |
| * | Unset old CA and Cert in system config | Phil Davis | 2015-07-21 | 1 | -0/+2 |
* | | Merge pull request #1771 from phil-davis/patch-2 | Renato Botelho | 2015-07-21 | 1 | -3/+4 |
|\ \ |
|
| * | | Allocate dnpipe and dnqueue numbers even if no filter rules | Phil Davis | 2015-07-21 | 1 | -3/+4 |
| |/ |
|
* | | Captive Portal zoneid upgrade fix var name typo | Phil Davis | 2015-07-21 | 1 | -1/+1 |
|/ |
|
* | Reverting this for master, needs review in context of uniqid changes. Opening... | Chris Buechler | 2015-07-21 | 1 | -47/+33 |
* | Going back to prior to earlier commit. Revert "fix indent my editor broke in ... | Chris Buechler | 2015-07-21 | 1 | -26/+26 |
* | fix indent my editor broke in an earlier commit. | Chris Buechler | 2015-07-21 | 1 | -26/+26 |
* | Add IPsec IKE Intermediate EKU to server certificates. The serverAuth EKU alr... | Chris Buechler | 2015-07-20 | 1 | -2/+2 |
* | Specify keyUsage and extendedKeyUsage in openssl.cnf, use crl_ext. | Chris Buechler | 2015-07-20 | 1 | -6/+6 |
* | Merge pull request #1738 from phil-davis/Static-Routes | Renato Botelho | 2015-07-18 | 1 | -5/+5 |
|\ |
|
| * | Fix #4813 validation of enable/disable of gateways and static routes | Phil Davis | 2015-07-05 | 1 | -5/+5 |
* | | Merge pull request #1763 from doktornotor/patch-4 | Renato Botelho | 2015-07-18 | 1 | -4/+4 |
|\ \ |
|
| * | | Add labels to some default firewall rules | doktornotor | 2015-07-18 | 1 | -4/+4 |
* | | | Merge pull request #1759 from phil-davis/patch-2 | Renato Botelho | 2015-07-18 | 1 | -1/+2 |
|\ \ \
| |/ /
|/| | |
|
| * | | Really avoid error loading rules for numeric host name in alias | Phil Davis | 2015-07-17 | 1 | -1/+2 |
* | | | sync up rc.carpmaster with RELENG_2_2. Ticket #4854, plus removal of unnecess... | Chris Buechler | 2015-07-18 | 1 | -33/+47 |
* | | | Fixes for IPSec ASN1.DN, ticket #4792 | Renato Botelho | 2015-07-17 | 1 | -7/+17 |
* | | | only add outgoing-interface if it's an IP. Ticket #4852 | Chris Buechler | 2015-07-17 | 1 | -2/+2 |
|/ / |
|
* | | Fix #4794: | Renato Botelho | 2015-07-17 | 2 | -2/+23 |
* | | Add leftid and rightid value between double quotes on ipsec config when type ... | Renato Botelho | 2015-07-16 | 2 | -3/+8 |
* | | Remove old, unused NetUtils.js | Chris Buechler | 2015-07-16 | 1 | -0/+1 |
* | | Revert "Avoid error loading rules for numeric host name in alias" | Renato Botelho | 2015-07-15 | 1 | -1/+1 |
* | | Merge pull request #1741 from phil-davis/patch-2 | Renato Botelho | 2015-07-15 | 1 | -6/+6 |
|\ \ |
|
| * | | Fix issue_ip_type var name spelling | Phil Davis | 2015-07-12 | 1 | -6/+6 |
* | | | Merge pull request #1744 from phil-davis/patch-5 | Renato Botelho | 2015-07-15 | 1 | -1/+1 |
|\ \ \ |
|
| * | | | Avoid error loading rules for numeric host name in alias | Phil Davis | 2015-07-12 | 1 | -1/+1 |
| |/ / |
|
* | | | Fix GratisDNS support | mortencombat | 2015-07-14 | 1 | -2/+2 |
|/ / |
|
* | | fix fsync, thanks Phil Davis for noticing | Chris Buechler | 2015-07-10 | 1 | -1/+1 |
* | | fix fsync | Chris Buechler | 2015-07-10 | 1 | -1/+1 |
* | | fsync after fclose here, clean up some white space while here. | Chris Buechler | 2015-07-10 | 1 | -2/+9 |
* | | fsync conf_path here too | Chris Buechler | 2015-07-10 | 1 | -0/+1 |
* | | fix typo | Chris Buechler | 2015-07-10 | 1 | -1/+1 |
* | | Make sure config.xml is safe on disk when restoring a backup, ticket #4803 | Renato Botelho | 2015-07-06 | 1 | -0/+1 |
* | | Make sure temporary config file is safe on disk before rename, ticket #4803 | Renato Botelho | 2015-07-06 | 1 | -1/+1 |
* | | Remove reference to vfs.forcesync | Renato Botelho | 2015-07-06 | 1 | -1/+0 |
* | | Use right function pfSense_fsync to make sure config file is safe on disk, ti... | Renato Botelho | 2015-07-06 | 1 | -4/+2 |