summaryrefslogtreecommitdiffstats
path: root/usr/local/www/vpn_ipsec_phase1.php
Commit message (Collapse)AuthorAgeFilesLines
...
* Migrate IPsec certificate management to centralized system.mgrooms2009-03-121-52/+30
|
* Cleanup ipsec interfaces a bit and make sure they are displayed in tabs for ↵mgrooms2009-03-121-296/+345
| | | | consistency.
* Add initial support for granular IPsec SPD changes.Seth Mos2009-01-161-0/+16
|
* Fix a few minor problems with the IPsec configuration interface. Make sureMatthew Grooms2008-09-161-1/+4
| | | | | | we don't copy the ikeid when duplicating a phase1 entry. Simplify the code that deletes all associated phase2 entries when a phase1 is deleted. I was and still am learning the finer points of php.
* Add CSS headerScott Ullrich2008-08-301-0/+3
|
* Rework most of the OpenVPN support. The interfaces have been updated toMatthew Grooms2008-08-261-11/+2
| | | | | | | | | | not use the pkg system and the configuration has been migrated to an openvpn prefix. The centralized user and certificate manager is now used to support the openvpn configurations. Most of the files removed in this commit were not being referenced. This commit also splits out the certificate management components into a new system menu item.
* Only read ipsec phase1 configuration values that are relvent for theMatthew Grooms2008-08-241-4/+9
| | | | | configured authentication method. This silences harmless php warnings. Reported by Scott Ullrich.
* Rewrite the pfsense privilege system with the following goals in mind ...Matthew Grooms2008-08-011-0/+8
| | | | | | | | 1) Redefine page privileges to not use static urls 2) Accurate generation of privilege definitions from source 3) Merging the user and group privileges into a single set 4) Allow any privilege to be added to users or groups w/ inheritance 5) Cleaning up the related WebUI pages
* Introduce a new and improved version of IPsec mobile client support. TheMatthew Grooms2008-07-131-92/+176
| | | | | | | mobile client tab is now used to configure user authentication (Xauth) and client configuration (mode-cfg) options. User authentication is currently limited to system password file entries. This will be extended to support external RADIUS and LDAP account DBs in a follow up comiit.
* Overhaul IPsec related code. Shared functions have been consolidated intoMatthew Grooms2008-07-111-0/+635
a new file named /etc/ipsec.inc. Tunnel definitions have been split into phase1 and phase2. This allows any number of phase2 definitions to be created for a single phase1 definition. Several facets of configuration have also been improved. The key size for variable length algorithms can now be selected and the phase1 ID options have been extended to allow for more flexible configuration. Several NAT-T related issues have also been resolved. Please note, IPsec remote access functionality has been temporarily disabled. An improved implementation will be included in a follow up commit.
OpenPOWER on IntegriCloud