summaryrefslogtreecommitdiffstats
path: root/src/etc/inc/openvpn.inc
Commit message (Collapse)AuthorAgeFilesLines
* Fix OpenVPN Auth Digest Algorithm selection so it does not use ↵jim-p2017-07-101-2/+37
| | | | duplicate/alias names in the list, and fix existing entries on upgrade so they use the actual digest name and not an alias.
* The logic for resolv-retry infinite was always setting it in client mode no ↵jim-p2017-05-221-3/+1
| | | | matter what the GUI option wanted. Remove the GUI option and clean up the logic so it isn't duplicated. Fixes #7572
* Fix OpenVPN server port validation to disallow "0". 0 is still OK for client ↵jim-p2017-05-221-3/+6
| | | | port, which is the same meaning as blank/empty. Fixes #7565
* Use is_numeric() to make sure $prefix is not 0Renato Botelho2017-05-151-1/+1
|
* Merge pull request #3604 from ↵Renato Botelho2017-05-151-1/+1
|\ | | | | | | enukane/fix/openvpn-ipv6-remote-netmask-0-treated-as-128
| * Fix parsing "::/0" as "::/128" on OpenVPN IPv6 Tunnel Remote networkenukane2017-03-031-1/+1
| |
* | Add OpenVPN GUI Option for "sndbuf" and "rcvbuf", using the same value for ↵jim-p2017-05-101-0/+21
| | | | | | | | both. Fixes #7507
* | Add OpenVPN GUI option for "fast-io" to clients and servers. Ticket #7507jim-p2017-05-101-0/+7
|/ | | | Only compatible with UDP modes, and also not compatible with "shaper".
* Always force compress when calling Net_IPv6Phil Davis2017-01-221-2/+2
|
* Fix #7136 Start OpenVPN on ordinary VIPPhil Davis2017-01-191-2/+2
|
* Fix #6603: Wait while interface is in 'tentative' state before try to bind ↵Renato Botelho2017-01-171-0/+11
| | | | OpenVPN to its address
* Remove extra parenthesis and blank lineRenato Botelho2017-01-171-3/+2
|
* Simplify logicRenato Botelho2017-01-171-8/+4
|
* Also check IPv6 when determining if we should use nobind or lport.jim-p2017-01-131-1/+1
|
* Merge pull request #3361 from PiBa-NL/openvpn_waitforpid_20170107Renato Botelho2017-01-111-3/+18
|\
| * openvpn, check for valid pid using isvalidpid()PiBa-NL2017-01-091-4/+2
| |
| * openvpn, make sure config is written and not overwritten while starting ↵PiBa-NL2017-01-071-3/+20
| | | | | | | | openvpn, and wait for pid of child process to be written before exiting function
* | Fix up OpenVPN CSC page help text, add IPv6 tunnel network. Fixes #7053jim-p2017-01-041-0/+7
| |
* | Destroy tun/tap device when delete OpenVPN tunnelRenato Botelho2017-01-041-12/+2
| |
* | Remove unnecessary referenceRenato Botelho2017-01-041-1/+1
| |
* | Revert "Destroy tun/tap device when delete OpenVPN tunnel"Renato Botelho2017-01-041-2/+5
| | | | | | | | This reverts commit 0a07be0287189cda229fab27ad733e9de3dc12f5.
* | Destroy tun/tap device when delete OpenVPN tunnelRenato Botelho2017-01-041-5/+2
| |
* | Add backend support to OpenVPN for NCP. Ticket #7072jim-p2017-01-041-0/+11
|/
* Fix #7074: Fix automatic port number guessingRenato Botelho2017-01-041-1/+10
| | | | | | | | | | Rework openvpn_port_used() to take care of following conflicts after ticket #7062 was committed: * "UDP" is dual stack and conflicts with "UDP4" and "UDP6" * "TCP" is dual stack and conflicts with "TCP4" and "TCP6" * "UDP4" and "UDP6" do not conflict unless interface is set to "any" * "TCP4" and "TCP6" do not conflict unless interface is set to "any"
* Remove this extra comma. It's not causing a syntax error but it's also not ↵jim-p2017-01-041-1/+1
| | | | necessary.
* Rework openvpn_vpnid_next() and remove duplicated codeRenato Botelho2017-01-041-26/+18
|
* Add some more help text to OpenVPN pages.jim-p2017-01-031-1/+4
|
* Replace "client-cert-not-required" with "verify-client-cert none". Fixes #7073jim-p2017-01-031-1/+1
|
* Add --tls-crypt support for OpenVPN servers and clients. Implements #7071jim-p2017-01-031-4/+16
|
* Bring compression options in line with OpenVPN 2.4. Note that the old style ↵jim-p2017-01-021-10/+35
| | | | options are deprecated/legacy but don't remove yet, for compatibility. Implements #7064
* Make sure $openvpn_dh_lengths is declared global. Ticket #7065jim-p2017-01-021-1/+1
|
* Fix var name cut-paste error in openvpn.incPhil Davis2017-01-021-1/+1
|
* Add OpenVPN ECDH options. Implements #7063jim-p2017-01-011-2/+47
|
* Update OpenVPN protocol preferences to match the new behavior of OpenVPN ↵jim-p2017-01-011-5/+32
| | | | 2.4. Fixes #7062
* Allow OpenVPN DNS servers for clients to be IPv6 as well as IPv4. Implements ↵jim-p2017-01-011-4/+8
| | | | #7061
* Add IPv6 virtual address to SSL/TLS client output, formatting ↵jim-p2017-01-011-0/+4
| | | | corrections/enhancement for SSL/TLS client and server. Ticket #2766
* Update OpenVPN SSL/TLS server status to reflect changes in OpenVPN 2.4. ↵jim-p2017-01-011-3/+8
| | | | Ticket #2766
* Ticket #7054: Remove tun-ipv6 option, deprecated on OpenVPN 2.4.0 and ↵Renato Botelho2016-12-301-7/+0
| | | | related GUI knobs
* Merge pull request #3236 from PiBa-NL/openvpn_startup_lockRenato Botelho2016-12-141-2/+6
|\
| * openvpn, startup locking sequence to prevent issues around pid file / ↵PiBa-NL2016-11-191-2/+6
| | | | | | | | | | | | process management fixes: https://redmine.pfsense.org/issues/6940
* | Encode the auth server list before passing it on the CLI, to avoid issues ↵jim-p2016-12-121-1/+1
|/ | | | with special characters that break when interpreted as URL parameters during OpenVPN auth. Fixes #7002
* Adjust parsing of OpenVPN ciphers to new output format. Fixes #6849jim-p2016-10-111-2/+2
|
* Move copyright from ESF to NetgateRenato Botelho2016-09-061-1/+1
|
* Add a selection for OpenVPN to have no compression preference + ↵jim-p2016-08-221-1/+6
| | | | comp-noadapt, which is necessary in some client edge cases. Fixes #6739
* Add an option to push "block-outside-dns" to clients of an RA OpenVPN. Fixes ↵jim-p2016-08-171-0/+3
| | | | #6719
* Some small improvements to OpenVPN server handling when using CARP VIPs in ↵jim-p2016-08-011-2/+2
| | | | Gateway Groups. Might help with issue #6607
* openvpn_add_dhcpopts already sets redirect-gateway, don't add it a second ↵Chris Buechler2016-07-201-4/+0
| | | | time. Ticket #6633
* Move to Apache License 2.0Renato Botelho2016-07-151-41/+9
|
* Make a function to resync all OpenVPN CSCs and use it when saving an OpenVPN ↵jim-p2016-07-151-5/+10
| | | | server. Fixes #6139
* Review license / copyright on all files (final round)Renato Botelho2016-07-151-3/+3
|
OpenPOWER on IntegriCloud