summaryrefslogtreecommitdiffstats
path: root/usr/local/www/vpn_ipsec.php
Commit message (Collapse)AuthorAgeFilesLines
...
* Show p2 items correctly (add missing td's)Scott Ullrich2010-04-191-0/+5
|
* Remove some sort of extra space/break in ipsec screen. Ticket #211pierrepomes2009-12-131-1/+0
|
* Remove ph2 add button. It is shown when neededsullrich2009-12-071-3/+0
|
* Pass ph1entsullrich2009-12-071-2/+3
|
* Make g a global and pass ph1entsullrich2009-12-071-1/+2
|
* Replace dollarsigndollarsign with dollarsignsullrich2009-12-071-1/+1
|
* fix typosChris Buechler2009-12-071-1/+1
|
* Require filter.inc and shaper.incScott Ullrich2009-11-211-1/+3
|
* Rework includes/require. This saves about 4 megabytes.Scott Ullrich2009-11-211-0/+2
| | | | Simplify get_memory(). Tested on mips/i386
* add links to IPsec logs under IPsec status and other pagesChris Buechler2009-11-071-0/+1
|
* Kill racoon when disabling IPSEC. Restart it if re-enabled.Scott Ullrich2009-11-071-1/+8
|
* * Convert carp/vips code to behave the same as other interfaces.Ermal Luçi2009-10-011-5/+3
| | | | | | | | * Make optimizations around it. * Make sure when we reload teh underlying interface we reload carp too. * Some fixes around the code. Reviewed-by: scott@ and billm@
* Nuke sorting it apparently changed the ID associationScott Ullrich2009-09-231-3/+0
|
* WIP: IPSec changesEirik Oeverby2009-09-221-1/+1
|
* WIP: fixing IPSec screens/configEirik Oeverby2009-09-221-1/+1
|
* Sort itemsScott Ullrich2009-09-111-1/+3
|
* Include functions.inc which will then include ipsec.incScott Ullrich2009-08-231-1/+1
|
* Unbreak ipsec!Scott Ullrich2009-08-231-1/+1
|
* Fix incorrect double click edit link for phase2 records.Seth Mos2009-07-151-1/+1
| | | | The link referred the phase2 edit page with the phase1 id which was incorrect
* * Reorganize the 'apply' button infrustructure in the GUI.Ermal Luçi2009-06-301-3/+3
| | | | | | - Present three new functions is/mark/clear_subsystem_dirty('name_of_subsystem'). This makes easier to create such things without needing to introduce new globals. - Convert all pages to the new infrustructure - This improves a lot the control on this notification
* Remove some unneccessary calls to filter_configure() they just give recursivity!Ermal Luçi2009-06-181-1/+1
|
* * Create two new functions lock($subsystem)/unlock() to have more reliable ↵Ermal Luçi2009-05-081-2/+0
| | | | | | | | | | | locking using semaphores. This function can sleep till the resource is free and can help find not well behaving code. * Remove most of the config_lock/config_unlock logics on the whole scripts/pages it is an abuse of this. If any sybsytem wants to lock can do so with its own lock. * Lock the config when doing a filter reload to avoid parallell recursion on this function, since it is not reentrant. This compenstates for the removal of lock aquiring from the scripts/pages. * config_lock/config_unlock are now compate shims that do nothing. They are preserved since packages 'abuse' them too.
* * Do not apply the settings directly from hitting the SAVE button show the ↵Ermal Luçi2009-04-221-14/+4
| | | | apply settings option for consistency with other pages.
* Modify IPsec code to allow for transport mode. All existing configurations aremgrooms2009-03-151-0/+10
| | | | | marked as tunnel for backwards compatibility. There are problems with the spd read code which Will likely choke on transport entries. We can fix this later.
* Move the IPsec pinghost option from phase1 to phase2. Correct somemgrooms2009-03-151-1/+1
| | | | bugs that were preventing the local address from being selected.
* Migrate IPsec certificate management to centralized system.mgrooms2009-03-121-1/+0
|
* Make sure the field names and description match upSeth Mos2009-03-121-10/+10
|
* Add initial support for granular IPsec SPD changes.Seth Mos2009-01-161-0/+6
|
* Make table headers reflect realityBill Marquette2008-12-071-6/+6
|
* Show header even when no records exists so the lonely + sign doe snot lookScott Ullrich2008-10-261-18/+30
| | | | | strange. This makes this page more consistent with all other pages when no configuration records exist.
* Use listbgScott Ullrich2008-10-121-4/+2
|
* Fix a few minor problems with the IPsec configuration interface. Make sureMatthew Grooms2008-09-161-11/+3
| | | | | | we don't copy the ikeid when duplicating a phase1 entry. Simplify the code that deletes all associated phase2 entries when a phase1 is deleted. I was and still am learning the finer points of php.
* Correct all double click action urls in the main IPsec config screens.Matthew Grooms2008-09-031-12/+12
| | | | Reported by Seth.
* Leave $j aloneScott Ullrich2008-08-291-3/+1
|
* Show correct count of phase2 entries.Scott Ullrich2008-08-291-1/+8
|
* Show how many phase 2 entries are hidden.Scott Ullrich2008-08-291-1/+6
| | | | Suggested-by: mgrooms
* Use additional tables to improve the formatting of several IPsec checkboxMatthew Grooms2008-08-241-2/+10
| | | | configuration options.
* Minor nitpick, change - to +Scott Ullrich2008-08-231-1/+1
|
* Allow wrapping of phase entries.Scott Ullrich2008-08-231-2/+2
|
* Rename button to -, we already show "- Show Phase 2" behind it.Scott Ullrich2008-08-231-1/+1
|
* Style boxen better.Scott Ullrich2008-08-231-1/+1
|
* Add a Phase2 button and hide the phase 2 settings by default. Clicking theScott Ullrich2008-08-231-3/+16
| | | | | button will unhide the phase2 block similar to our "Advacned" buttons on various screens.
* Begin reformatting IPSEC screen. Give a bit more padding, shiftScott Ullrich2008-08-231-14/+15
| | | | over a little and turn bacgkround to grey instead of red.
* Disallow the copy option for mobile phase1 entries. There can be only one.Matthew Grooms2008-08-231-0/+2
|
* Rewrite the pfsense privilege system with the following goals in mind ...Matthew Grooms2008-08-011-0/+8
| | | | | | | | 1) Redefine page privileges to not use static urls 2) Accurate generation of privilege definitions from source 3) Merging the user and group privileges into a single set 4) Allow any privilege to be added to users or groups w/ inheritance 5) Cleaning up the related WebUI pages
* Introduce a new and improved version of IPsec mobile client support. TheMatthew Grooms2008-07-131-6/+13
| | | | | | | mobile client tab is now used to configure user authentication (Xauth) and client configuration (mode-cfg) options. User authentication is currently limited to system password file entries. This will be extended to support external RADIUS and LDAP account DBs in a follow up comiit.
* Overhaul IPsec related code. Shared functions have been consolidated intoMatthew Grooms2008-07-111-133/+302
| | | | | | | | | | | | | | a new file named /etc/ipsec.inc. Tunnel definitions have been split into phase1 and phase2. This allows any number of phase2 definitions to be created for a single phase1 definition. Several facets of configuration have also been improved. The key size for variable length algorithms can now be selected and the phase1 ID options have been extended to allow for more flexible configuration. Several NAT-T related issues have also been resolved. Please note, IPsec remote access functionality has been temporarily disabled. An improved implementation will be included in a follow up commit.
* Continue interface improvementsErmal Luçi2008-06-211-3/+1
|
* Remove static route on deletionSeth Mos2008-06-051-0/+4
|
* touch up textChris Buechler2008-01-081-1/+1
| | | | Ticket #1569
OpenPOWER on IntegriCloud