summaryrefslogtreecommitdiffstats
path: root/src/etc/inc/ipsec.inc
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #3414 from phil-davis/ipv6-compressRenato Botelho2017-01-231-1/+1
|\
| * Always force compress when calling Net_IPv6Phil Davis2017-01-221-1/+1
| |
* | Fixed #6967Steve Beaver2017-01-231-1/+4
|/
* Rework how IPsec log settings are stored/retreived, adjust the default ↵jim-p2017-01-071-0/+17
| | | | values. Implements #7007
* ipsec mobile clients, don't check mobile leases if mobile client isn't ↵PiBa-NL2016-10-301-1/+5
| | | | enabled to begin with
* Move copyright from ESF to NetgateRenato Botelho2016-09-061-1/+1
|
* Allow AES-GCM for P1 where using IKEv2. Ticket #5990Chris Buechler2016-07-171-0/+3
|
* Move to Apache License 2.0Renato Botelho2016-07-151-41/+9
|
* Review license / copyright on all files (final round)Renato Botelho2016-07-151-1/+1
|
* Review license / copyright on all files (1st round)Renato Botelho2016-07-141-51/+51
|
* Internationalize etc inc i through sPhil Davis2016-02-181-60/+80
|
* Fix style issues.Chris Buechler2016-02-091-5/+8
|
* Review of CARP uniqid changes.Luiz Otavio O Souza2016-02-091-21/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It turns out that current CARP implementation is not much different from an IP alias. This commit converts the IP alias to also use the CARP uniqid scheme, this simplify the code in all other places because now we have only two different cases to deal with: - A friendly interface name (lan, wan, opt1, etc.); - A Virtual IP - VIP alias (_vip{$uniqid}) - CARP or IP Alias. The parent of a CARP is always a friendly interface. The parent of an IP alias can be a friendly interface or a CARP (this is the only case of recursion of a VIP). This commit removes a few cases where CARP were still considered a interface (the old CARP implementation), fixes all the wrong cases of strpos() being used to detect a VIP address (wont work as it returns '0' which fails when tested as 'TRUE'), review the usage of CARP and IP alias as services bind addresses, fixes general issues of adding and editing VIP addresses. The following subsystems were affected by this changes: - IPSEC; - OpenVPN; - dnsmasq; - NTP; - gateways and gateway groups; - IPv6 RA; - GRE interfaces; - CARP status; - Referrer authentication. Fixes (and/or revisit) the following tickets: - Ticket #3257 - Ticket #3716 - Ticket #4450 - Ticket #4858 - Ticket #5441 - Ticket #5442 - Ticket #5500 - Ticket #5783 - Ticket #5844
* Update license on files from /etc/incRenato Botelho2016-01-151-18/+40
|
* Remove all pfSense_MODULE and pfSense_BUILDER_BINARIES definitions, whatever ↵Renato Botelho2015-12-151-4/+0
| | | | was the reason they were added, it was never finished and it's not being used
* Code style and white space in etcPhil Davis2015-12-101-3/+6
|
* Fix what I broke removing DES. pointy-hat-to: meChris Buechler2015-11-251-2/+2
|
* Remove GCM options from phase 1, it's only supported in P2. Remove DES while ↵Chris Buechler2015-11-251-5/+0
| | | | here.
* Fix ipsec_enabled() to return true only when at least one of the phase 1 ↵Luiz Otavio O Souza2015-11-221-1/+7
| | | | entries are enabled.
* Convert all the occurrences of $config['ipsec']['enable'] in filter.inc, ↵Luiz Otavio O Souza2015-11-221-3/+1
| | | | | | | | ipsec.inc and service-utils.inc Fix ruleset when IPSEC is enabled but there are no Phase 1 entries. Issue: #5487
* Fix #5350. Correct issues with strongswan logging (setting changes did not ↵Matt Smith2015-11-111-0/+30
| | | | persist across reboots, setting silent did not work).
* Change ipsec_dump_mobile() to parse regular output of ipsec leases, we are ↵Renato Botelho2015-11-101-18/+38
| | | | removing patch that made it to output xml
* Add a new function that returns the current state of IPSEC.Luiz Otavio O Souza2015-11-101-0/+15
| | | | Whenever we have phase1 entries, IPSEC is considered enabled.
* A new fix for #4130:Renato Botelho2015-11-031-2/+10
| | | | | | | | | | | | The fix added for this bug, that check xml file size is < 200 to decide if file must or not be read created a new issue, single entry is not showed. Instead of doing this, check parse_xml_config() return and return empty array when it's -1 While here, prevent errors saying parse_xml_config() doesn't exist and make sure xmlparse.inc is required
* Only call pfSense_ipsec_list_sa() when IPsec is enabledRenato Botelho2015-11-031-0/+13
|
* Restore ipsec_dump_spd() accidentally removed on ↵Renato Botelho2015-11-031-0/+54
| | | | 7fcd5ea8bb2e7c9c94e1f38008fc3da440eb14e8. Pointy hat to: garga
* Retire ipsec_smp_dump_status()Renato Botelho2015-11-031-101/+0
|
* Move main pfSense content to src/Renato Botelho2015-08-251-0/+777
OpenPOWER on IntegriCloud