pfsense - Raptor Engineering's fork of the main repository for pfSense

	Commit message (Collapse)	Author	Age	Files	Lines
*	Modify IPsec code to allow for transport mode. All existing configurations are	mgrooms	2009-03-15	1	-26/+59
\| \| \| \| \|	marked as tunnel for backwards compatibility. There are problems with the spd read code which Will likely choke on transport entries. We can fix this later.
*	Move the IPsec pinghost option from phase1 to phase2. Correct some	mgrooms	2009-03-15	1	-2/+26
\| \| \| \|	bugs that were preventing the local address from being selected.
*	Reload phase2 tunnel items when adding, remoing or editing a phase 2 entry.	Seth Mos	2009-03-12	1	-0/+9
\|
*	Migrate IPsec certificate management to centralized system.	mgrooms	2009-03-12	1	-1/+0
\|
*	Cleanup ipsec interfaces a bit and make sure they are displayed in tabs for ↵	mgrooms	2009-03-12	1	-214/+256
\| \| \| \|	consistency.
*	Rewrite the pfsense privilege system with the following goals in mind ...	Matthew Grooms	2008-08-01	1	-0/+8
\| \| \| \| \| \| \| \|	1) Redefine page privileges to not use static urls 2) Accurate generation of privilege definitions from source 3) Merging the user and group privileges into a single set 4) Allow any privilege to be added to users or groups w/ inheritance 5) Cleaning up the related WebUI pages
*	Fix a few bugs in the IPsec pages HTML output that were causing problems	Matthew Grooms	2008-07-14	1	-1/+1
\| \| \| \|	with IE.
*	Introduce a new and improved version of IPsec mobile client support. The	Matthew Grooms	2008-07-13	1	-24/+83
\| \| \| \| \| \| \|	mobile client tab is now used to configure user authentication (Xauth) and client configuration (mode-cfg) options. User authentication is currently limited to system password file entries. This will be extended to support external RADIUS and LDAP account DBs in a follow up comiit.
*	Overhaul IPsec related code. Shared functions have been consolidated into	Matthew Grooms	2008-07-11	1	-0/+489
	a new file named /etc/ipsec.inc. Tunnel definitions have been split into phase1 and phase2. This allows any number of phase2 definitions to be created for a single phase1 definition. Several facets of configuration have also been improved. The key size for variable length algorithms can now be selected and the phase1 ID options have been extended to allow for more flexible configuration. Several NAT-T related issues have also been resolved. Please note, IPsec remote access functionality has been temporarily disabled. An improved implementation will be included in a follow up commit.