Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Make IPv4/IPv6 validation on IPSec | Renato Botelho | 2013-01-24 | 1 | -2/+23 |
| | | | | It should fix #2769 | ||||
* | Fix indent and blanks at EOL | Renato Botelho | 2013-01-24 | 1 | -30/+30 |
| | |||||
* | Update usr/local/www/vpn_ipsec_phase1.php | Ermal Luçi | 2012-11-16 | 1 | -1/+1 |
| | | | Correct missing $ | ||||
* | Standardize hypenation and capitalization of Pre-Shared Key | jim-p | 2012-10-26 | 1 | -2/+2 |
| | |||||
* | Activate new shortcuts/status in the rest of the areas that are currently setup. | jim-p | 2012-08-10 | 1 | -2/+1 |
| | |||||
* | Activate "base" exchange mode also supported by racoon. | jim-p | 2012-08-08 | 1 | -1/+1 |
| | |||||
* | Activate more Hash, DH, and PFS options that are available in racoon now. ↵ | jim-p | 2012-08-02 | 1 | -4/+2 |
| | | | | Note that SHA256-512 are RFC4868 compliant in FreeBSD, may break with other incompatible stacks. | ||||
* | Add Gateway Group support to the IPsec interface drop down. | smos | 2012-06-03 | 1 | -0/+13 |
| | | | | | | Edit of gateway group correctly reflects the new IP Address. We need to make a blacklist for interface names in the gateway group edit page. Redmine ticket #1965 | ||||
* | Merge remote-tracking branch 'upstream/master' | jim-p | 2011-07-12 | 1 | -1/+1 |
|\ | | | | | | | | | | | | | | | | | | | | | Conflicts: etc/inc/easyrule.inc etc/inc/filter.inc etc/inc/interfaces.inc etc/inc/services.inc etc/inc/xmlrpc_client.inc usr/local/www/fbegin.inc usr/local/www/services_dhcp.php | ||||
| * | Merge remote-tracking branch 'mainline/master' into inc | Vinicius Coque | 2011-06-28 | 1 | -0/+5 |
| |\ | |||||
| * \ | Merge remote-tracking branch 'mainline/master' into inc | Vinicius Coque | 2011-06-07 | 1 | -0/+18 |
| |\ \ | | | | | | | | | | | | | | | | | | | | | Conflicts: etc/inc/voucher.inc usr/local/www/fbegin.inc | ||||
| * | | | Remove gettext from negotiation mode | Vinicius Coque | 2011-05-25 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | It is causing errors on raccon because config file were generated with translated words | ||||
* | | | | Merge remote branch 'upstream/master' | jim-p | 2011-06-22 | 1 | -0/+5 |
|\ \ \ \ | | |_|/ | |/| | | | | | | | | | | | | | | Conflicts: etc/inc/filter.inc etc/inc/util.inc | ||||
| * | | | Do not store CA and CERT in config unless needed. Will allow deleting unused ↵ | Evgeny Yurchenko | 2011-06-21 | 1 | -0/+5 |
| | |/ | |/| | | | | | | | certs. | ||||
* | | | Merge remote branch 'upstream/master' | jim-p | 2011-06-03 | 1 | -0/+18 |
|\ \ \ | |/ / | | | | | | | | | | Conflicts: etc/inc/openvpn.inc | ||||
| * | | Add a GUI selection for racoon's generate_policy directive since it may be ↵ | jim-p | 2011-06-03 | 1 | -0/+18 |
| |/ | | | | | | | useful in certain configurations, especially for mobile clients. | ||||
* | | enlarge various address fields for IPv6 addresses | Seth Mos | 2011-03-17 | 1 | -1/+1 |
| | | |||||
* | | Extend the IPsec configuration with a protocol family for the phase 1 | Seth Mos | 2011-03-14 | 1 | -0/+18 |
|/ | |||||
* | Correct variable name. This could never have deleted the static route for ↵ | smos | 2011-02-24 | 1 | -1/+1 |
| | | | | IPsec vpns on multi wan | ||||
* | Don't save CA/Cert for a PSK IPsec tunnel. | jim-p | 2011-01-31 | 1 | -0/+8 |
| | |||||
* | Ticket 1041. Fix bad commit... | Pierre POMES | 2010-12-12 | 1 | -1/+1 |
| | |||||
* | Add IPSec 'ipalias' VIP support. Ticket #1041 | Pierre POMES | 2010-12-10 | 1 | -0/+3 |
| | |||||
* | Fix vip descriptions in openvpn and ipsec screens. Ticket #1042 | Pierre POMES | 2010-12-06 | 1 | -1/+1 |
| | |||||
* | Fix XSS issues | Scott Ullrich | 2010-11-12 | 1 | -7/+7 |
| | |||||
* | Rename 'name' to 'descr' for CA, Certificates, and CRLs, to gain CDATA ↵ | jim-p | 2010-10-19 | 1 | -2/+2 |
| | | | | protection and standardize field names. Ticket #320. | ||||
* | Fixup comments a little. | jim-p | 2010-10-11 | 1 | -0/+3 |
| | |||||
* | Correct and cleanup this input validation logic for IPsec Phase 1 PSK/Cert ↵ | jim-p | 2010-10-11 | 1 | -6/+15 |
| | | | | config. In some cases the test was not being evaluated as expected. | ||||
* | CA/CERT Move | jim-p | 2010-09-01 | 1 | -2/+2 |
| | |||||
* | Let the user choose the IPsec CA instead of assuming. | jim-p | 2010-08-13 | 1 | -2/+27 |
| | |||||
* | Add a GUI selection for the proposal_check config option. Provide all the ↵ | jim-p | 2010-08-13 | 1 | -1/+18 |
| | | | | choices from racoon.conf(5) plus a "default" which will keep the old behavior. | ||||
* | Modify various (s)printf format strings to allow translations to change the ↵ | Erik Fonnesbeck | 2010-08-11 | 1 | -1/+1 |
| | | | | order of the inserted strings. | ||||
* | Fix gettext implementation on vpn_ipsec_phase1.php | Carlos Eduardo Ramos | 2010-07-30 | 1 | -1/+1 |
| | |||||
* | Implement gettext() calls on vpn_ipsec_phase1.php | Carlos Eduardo Ramos | 2010-07-27 | 1 | -68/+68 |
| | |||||
* | Remove Logs tab from OpenVPN, as it is no longer needed. | jim-p | 2010-06-01 | 1 | -1/+0 |
| | |||||
* | Add status/log icons to IPsec pages. | jim-p | 2010-06-01 | 1 | -0/+3 |
| | |||||
* | Only enforce peer ID and psk on p1 screen if we are NOT dealing with a ↵ | jim-p | 2010-05-06 | 1 | -21/+38 |
| | | | | pure-psk mobile tunnel (which is the behavior in 1.2.3). Hide irrelevant options. Part of ticket #108. | ||||
* | Reorder Auth. Method and PSK field to a more logical sequence. Part of ↵ | jim-p | 2010-05-06 | 1 | -32/+33 |
| | | | | ticket #108. | ||||
* | Move { and } to same line. | sullrich | 2009-12-02 | 1 | -6/+3 |
| | |||||
* | Rework includes/require. This saves about 4 megabytes. | Scott Ullrich | 2009-11-21 | 1 | -0/+2 |
| | | | | Simplify get_memory(). Tested on mips/i386 | ||||
* | add links to IPsec logs under IPsec status and other pages | Chris Buechler | 2009-11-07 | 1 | -0/+1 |
| | |||||
* | * Convert carp/vips code to behave the same as other interfaces. | Ermal Luçi | 2009-10-01 | 1 | -5/+3 |
| | | | | | | | | * Make optimizations around it. * Make sure when we reload teh underlying interface we reload carp too. * Some fixes around the code. Reviewed-by: scott@ and billm@ | ||||
* | Include functions.inc which will then include ipsec.inc | Scott Ullrich | 2009-08-23 | 1 | -1/+1 |
| | |||||
* | Unbreak ipsec. ipsec.inc is needed to set the various drop down box values ↵ | Scott Ullrich | 2009-08-23 | 1 | -1/+1 |
| | | | | such as 'IP Address, Encryption Algo, etc.. Someone needs a big pointy hat. | ||||
* | Fix interface list usage | Ermal Luçi | 2009-07-07 | 1 | -3/+0 |
| | | | | WARN: Please ask before introducing old code on what have changed! | ||||
* | Fix ipsec vpn phase1 post code so that we correctly try to delete the old ↵ | Seth Mos | 2009-07-06 | 1 | -3/+4 |
| | | | | static route if required. | ||||
* | * Reorganize the 'apply' button infrustructure in the GUI. | Ermal Luçi | 2009-06-30 | 1 | -1/+1 |
| | | | | | | - Present three new functions is/mark/clear_subsystem_dirty('name_of_subsystem'). This makes easier to create such things without needing to introduce new globals. - Convert all pages to the new infrustructure - This improves a lot the control on this notification | ||||
* | Move the IPsec pinghost option from phase1 to phase2. Correct some | mgrooms | 2009-03-15 | 1 | -11/+0 |
| | | | | bugs that were preventing the local address from being selected. | ||||
* | Migrate IPsec certificate management to centralized system. | mgrooms | 2009-03-12 | 1 | -52/+30 |
| | |||||
* | Cleanup ipsec interfaces a bit and make sure they are displayed in tabs for ↵ | mgrooms | 2009-03-12 | 1 | -296/+345 |
| | | | | consistency. | ||||
* | Add initial support for granular IPsec SPD changes. | Seth Mos | 2009-01-16 | 1 | -0/+16 |
| |