Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix OpenVPN Auth Digest Algorithm selection so it does not use ↵ | jim-p | 2017-07-10 | 1 | -2/+37 |
| | | | | duplicate/alias names in the list, and fix existing entries on upgrade so they use the actual digest name and not an alias. | ||||
* | The logic for resolv-retry infinite was always setting it in client mode no ↵ | jim-p | 2017-05-22 | 1 | -3/+1 |
| | | | | matter what the GUI option wanted. Remove the GUI option and clean up the logic so it isn't duplicated. Fixes #7572 | ||||
* | Fix OpenVPN server port validation to disallow "0". 0 is still OK for client ↵ | jim-p | 2017-05-22 | 1 | -3/+6 |
| | | | | port, which is the same meaning as blank/empty. Fixes #7565 | ||||
* | Use is_numeric() to make sure $prefix is not 0 | Renato Botelho | 2017-05-15 | 1 | -1/+1 |
| | |||||
* | Merge pull request #3604 from ↵ | Renato Botelho | 2017-05-15 | 1 | -1/+1 |
|\ | | | | | | | enukane/fix/openvpn-ipv6-remote-netmask-0-treated-as-128 | ||||
| * | Fix parsing "::/0" as "::/128" on OpenVPN IPv6 Tunnel Remote network | enukane | 2017-03-03 | 1 | -1/+1 |
| | | |||||
* | | Add OpenVPN GUI Option for "sndbuf" and "rcvbuf", using the same value for ↵ | jim-p | 2017-05-10 | 1 | -0/+21 |
| | | | | | | | | both. Fixes #7507 | ||||
* | | Add OpenVPN GUI option for "fast-io" to clients and servers. Ticket #7507 | jim-p | 2017-05-10 | 1 | -0/+7 |
|/ | | | | Only compatible with UDP modes, and also not compatible with "shaper". | ||||
* | Always force compress when calling Net_IPv6 | Phil Davis | 2017-01-22 | 1 | -2/+2 |
| | |||||
* | Fix #7136 Start OpenVPN on ordinary VIP | Phil Davis | 2017-01-19 | 1 | -2/+2 |
| | |||||
* | Fix #6603: Wait while interface is in 'tentative' state before try to bind ↵ | Renato Botelho | 2017-01-17 | 1 | -0/+11 |
| | | | | OpenVPN to its address | ||||
* | Remove extra parenthesis and blank line | Renato Botelho | 2017-01-17 | 1 | -3/+2 |
| | |||||
* | Simplify logic | Renato Botelho | 2017-01-17 | 1 | -8/+4 |
| | |||||
* | Also check IPv6 when determining if we should use nobind or lport. | jim-p | 2017-01-13 | 1 | -1/+1 |
| | |||||
* | Merge pull request #3361 from PiBa-NL/openvpn_waitforpid_20170107 | Renato Botelho | 2017-01-11 | 1 | -3/+18 |
|\ | |||||
| * | openvpn, check for valid pid using isvalidpid() | PiBa-NL | 2017-01-09 | 1 | -4/+2 |
| | | |||||
| * | openvpn, make sure config is written and not overwritten while starting ↵ | PiBa-NL | 2017-01-07 | 1 | -3/+20 |
| | | | | | | | | openvpn, and wait for pid of child process to be written before exiting function | ||||
* | | Fix up OpenVPN CSC page help text, add IPv6 tunnel network. Fixes #7053 | jim-p | 2017-01-04 | 1 | -0/+7 |
| | | |||||
* | | Destroy tun/tap device when delete OpenVPN tunnel | Renato Botelho | 2017-01-04 | 1 | -12/+2 |
| | | |||||
* | | Remove unnecessary reference | Renato Botelho | 2017-01-04 | 1 | -1/+1 |
| | | |||||
* | | Revert "Destroy tun/tap device when delete OpenVPN tunnel" | Renato Botelho | 2017-01-04 | 1 | -2/+5 |
| | | | | | | | | This reverts commit 0a07be0287189cda229fab27ad733e9de3dc12f5. | ||||
* | | Destroy tun/tap device when delete OpenVPN tunnel | Renato Botelho | 2017-01-04 | 1 | -5/+2 |
| | | |||||
* | | Add backend support to OpenVPN for NCP. Ticket #7072 | jim-p | 2017-01-04 | 1 | -0/+11 |
|/ | |||||
* | Fix #7074: Fix automatic port number guessing | Renato Botelho | 2017-01-04 | 1 | -1/+10 |
| | | | | | | | | | | Rework openvpn_port_used() to take care of following conflicts after ticket #7062 was committed: * "UDP" is dual stack and conflicts with "UDP4" and "UDP6" * "TCP" is dual stack and conflicts with "TCP4" and "TCP6" * "UDP4" and "UDP6" do not conflict unless interface is set to "any" * "TCP4" and "TCP6" do not conflict unless interface is set to "any" | ||||
* | Remove this extra comma. It's not causing a syntax error but it's also not ↵ | jim-p | 2017-01-04 | 1 | -1/+1 |
| | | | | necessary. | ||||
* | Rework openvpn_vpnid_next() and remove duplicated code | Renato Botelho | 2017-01-04 | 1 | -26/+18 |
| | |||||
* | Add some more help text to OpenVPN pages. | jim-p | 2017-01-03 | 1 | -1/+4 |
| | |||||
* | Replace "client-cert-not-required" with "verify-client-cert none". Fixes #7073 | jim-p | 2017-01-03 | 1 | -1/+1 |
| | |||||
* | Add --tls-crypt support for OpenVPN servers and clients. Implements #7071 | jim-p | 2017-01-03 | 1 | -4/+16 |
| | |||||
* | Bring compression options in line with OpenVPN 2.4. Note that the old style ↵ | jim-p | 2017-01-02 | 1 | -10/+35 |
| | | | | options are deprecated/legacy but don't remove yet, for compatibility. Implements #7064 | ||||
* | Make sure $openvpn_dh_lengths is declared global. Ticket #7065 | jim-p | 2017-01-02 | 1 | -1/+1 |
| | |||||
* | Fix var name cut-paste error in openvpn.inc | Phil Davis | 2017-01-02 | 1 | -1/+1 |
| | |||||
* | Add OpenVPN ECDH options. Implements #7063 | jim-p | 2017-01-01 | 1 | -2/+47 |
| | |||||
* | Update OpenVPN protocol preferences to match the new behavior of OpenVPN ↵ | jim-p | 2017-01-01 | 1 | -5/+32 |
| | | | | 2.4. Fixes #7062 | ||||
* | Allow OpenVPN DNS servers for clients to be IPv6 as well as IPv4. Implements ↵ | jim-p | 2017-01-01 | 1 | -4/+8 |
| | | | | #7061 | ||||
* | Add IPv6 virtual address to SSL/TLS client output, formatting ↵ | jim-p | 2017-01-01 | 1 | -0/+4 |
| | | | | corrections/enhancement for SSL/TLS client and server. Ticket #2766 | ||||
* | Update OpenVPN SSL/TLS server status to reflect changes in OpenVPN 2.4. ↵ | jim-p | 2017-01-01 | 1 | -3/+8 |
| | | | | Ticket #2766 | ||||
* | Ticket #7054: Remove tun-ipv6 option, deprecated on OpenVPN 2.4.0 and ↵ | Renato Botelho | 2016-12-30 | 1 | -7/+0 |
| | | | | related GUI knobs | ||||
* | Merge pull request #3236 from PiBa-NL/openvpn_startup_lock | Renato Botelho | 2016-12-14 | 1 | -2/+6 |
|\ | |||||
| * | openvpn, startup locking sequence to prevent issues around pid file / ↵ | PiBa-NL | 2016-11-19 | 1 | -2/+6 |
| | | | | | | | | | | | | process management fixes: https://redmine.pfsense.org/issues/6940 | ||||
* | | Encode the auth server list before passing it on the CLI, to avoid issues ↵ | jim-p | 2016-12-12 | 1 | -1/+1 |
|/ | | | | with special characters that break when interpreted as URL parameters during OpenVPN auth. Fixes #7002 | ||||
* | Adjust parsing of OpenVPN ciphers to new output format. Fixes #6849 | jim-p | 2016-10-11 | 1 | -2/+2 |
| | |||||
* | Move copyright from ESF to Netgate | Renato Botelho | 2016-09-06 | 1 | -1/+1 |
| | |||||
* | Add a selection for OpenVPN to have no compression preference + ↵ | jim-p | 2016-08-22 | 1 | -1/+6 |
| | | | | comp-noadapt, which is necessary in some client edge cases. Fixes #6739 | ||||
* | Add an option to push "block-outside-dns" to clients of an RA OpenVPN. Fixes ↵ | jim-p | 2016-08-17 | 1 | -0/+3 |
| | | | | #6719 | ||||
* | Some small improvements to OpenVPN server handling when using CARP VIPs in ↵ | jim-p | 2016-08-01 | 1 | -2/+2 |
| | | | | Gateway Groups. Might help with issue #6607 | ||||
* | openvpn_add_dhcpopts already sets redirect-gateway, don't add it a second ↵ | Chris Buechler | 2016-07-20 | 1 | -4/+0 |
| | | | | time. Ticket #6633 | ||||
* | Move to Apache License 2.0 | Renato Botelho | 2016-07-15 | 1 | -41/+9 |
| | |||||
* | Make a function to resync all OpenVPN CSCs and use it when saving an OpenVPN ↵ | jim-p | 2016-07-15 | 1 | -5/+10 |
| | | | | server. Fixes #6139 | ||||
* | Review license / copyright on all files (final round) | Renato Botelho | 2016-07-15 | 1 | -3/+3 |
| |