summaryrefslogtreecommitdiffstats
path: root/src/etc/inc/openvpn.inc
Commit message (Collapse)AuthorAgeFilesLines
* Trim the OpenVPN tunnel network before use, and on save. Fixes #6198jim-p2016-04-181-7/+7
|
* Merge pull request #2829 from phil-davis/openvpn-widgetStephen Beaver2016-04-041-1/+0
| | | | (cherry picked from commit 1dae6c0f4184ac72c252fb934d2bfa4fd3a967fe)
* Only specify auth-user-pass for TLS mode. Ticket #5941Chris Buechler2016-03-011-1/+1
|
* Fix OpenVPN ifconfig. Ticket #5930Chris Buechler2016-02-261-1/+1
|
* Use high level functionsRenato Botelho2016-02-241-9/+9
|
* Internationalize etc inc i through sPhil Davis2016-02-181-29/+29
|
* Fix style issues.Chris Buechler2016-02-091-1/+2
|
* Review of CARP uniqid changes.Luiz Otavio O Souza2016-02-091-24/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It turns out that current CARP implementation is not much different from an IP alias. This commit converts the IP alias to also use the CARP uniqid scheme, this simplify the code in all other places because now we have only two different cases to deal with: - A friendly interface name (lan, wan, opt1, etc.); - A Virtual IP - VIP alias (_vip{$uniqid}) - CARP or IP Alias. The parent of a CARP is always a friendly interface. The parent of an IP alias can be a friendly interface or a CARP (this is the only case of recursion of a VIP). This commit removes a few cases where CARP were still considered a interface (the old CARP implementation), fixes all the wrong cases of strpos() being used to detect a VIP address (wont work as it returns '0' which fails when tested as 'TRUE'), review the usage of CARP and IP alias as services bind addresses, fixes general issues of adding and editing VIP addresses. The following subsystems were affected by this changes: - IPSEC; - OpenVPN; - dnsmasq; - NTP; - gateways and gateway groups; - IPv6 RA; - GRE interfaces; - CARP status; - Referrer authentication. Fixes (and/or revisit) the following tickets: - Ticket #3257 - Ticket #3716 - Ticket #4450 - Ticket #4858 - Ticket #5441 - Ticket #5442 - Ticket #5500 - Ticket #5783 - Ticket #5844
* Omit topology for tap OpenVPN, as it has no meaning in that contextChris Buechler2016-01-281-1/+1
|
* Remove stray }Chris Buechler2016-01-281-1/+1
|
* The topology line also must be skipped if an SSL/TLS mode is used with a ↵jim-p2016-01-211-1/+2
| | | | CIDR less than 30.
* Update license on files from /etc/incRenato Botelho2016-01-151-18/+40
|
* Remove spaces at EOL as requestedstilez2016-01-131-3/+3
|
* redmine 5702 - change to use high level IPv4 functions where low level ↵stilez2016-01-121-3/+3
| | | | ip2long32() etc are used
* Consolidate OpenVPN kill_client routinePhil Davis2015-12-171-0/+36
| | | | | | | After a gitsync just now I started getting "cannot redeclare kill_client" error messages. Whatever it was that caused this to start happening, the kill_client() function in these 2 places is identical. Might as well put it in openvpn.inc
* Remove all pfSense_MODULE and pfSense_BUILDER_BINARIES definitions, whatever ↵Renato Botelho2015-12-151-5/+1
| | | | was the reason they were added, it was never finished and it's not being used
* Fixed #5602 by dynamically updating hte help text based on the cert selected.Stephen Beaver2015-12-101-6/+3
|
* Code style and white space in etcPhil Davis2015-12-101-11/+21
|
* Prioritize and separate server certs for OpenVPN servers to make it more ↵jim-p2015-12-071-13/+34
| | | | clear they should be using certificates created as Server certificates for this purpose -- it's still valid to use non-server certs but it's not what most people intend to do. Ticket #5602
* whitespace/style fixupsjim-p2015-12-071-5/+9
|
* Fix PHP error on boot/resync of OpenVPNjim-p2015-12-031-1/+1
|
* Omit topology from the config when using shared key mode.jim-p2015-12-021-3/+5
|
* Nuke openvpn_cleanup_csc, the job is done better by openvpn_delete_cscjim-p2015-12-011-11/+1
|
* Properly omit tunnel network when it's empty in the CSCjim-p2015-12-011-1/+1
|
* GUI/Backend changes to move topology_subnet checkbox to a topology drop-down ↵jim-p2015-12-011-2/+10
| | | | | | selection. Issue #5526 P2P is there but commented out for now.
* Backend changes to OpenVPN CSC handling to allow per-server configuration. ↵jim-p2015-11-301-31/+83
| | | | | | Ticket #5526 Still needs GUI work and other items mentioned on https://redmine.pfsense.org/issues/5526
* Tidy up Boolean operators for HTML5Colin Fleming2015-11-291-1/+1
| | | | | Remove the XHTML standard Boolean operators (makes reading HTML much simpler).
* Put some OpenVPN functions into include filePhil Davis2015-11-261-0/+120
| | | | | | | | | | | | | | | | Forum: https://forum.pfsense.org/index.php?topic=103036.msg574854#msg574854 A few functions were in both client and server PHP already and were the same. build_crl_list() was missing from client PHP. build_cert_list() was slightly different in server and client PHP. I made a common one that takes a parameter. Maybe actually they should both be the same? or? Anyway for the first iteration I went for consolidation with no change of code behavior. Some functions were only in server PHP and only used by server PHP. I moved them to openvpn.inc anyway - seems more logical for the future. But say if you prefer them back in just server PHP.
* Integrate bootstrap etc/inc with masterPhil Davis2015-08-301-18/+18
| | | | | | This applies the little changes in etc/inc master to the bootstrap branch so that etc/inc in bootstrap will now just have the real differences that are due to real bootstrap changes.
* Merge branch 'master' into bootstrapRenato Botelho2015-08-261-24/+24
|
* Move main pfSense content to src/Renato Botelho2015-08-251-0/+1589
OpenPOWER on IntegriCloud