mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-10 11:05:54 +02:00
vpnmain.cgi: Allow to use PSK if public IP is '%defaultroute'.
Openswan did not support to use PSKs on net-to-net connections, when the public IP of the IPFire box was "%defaultroute". However, it is required to set the public IP to "%defaultroute" on NAT-ed devices (such as UMTS connections in Germany) to connect to other sites as the IPFire box does not know the real public IP address.
This commit is contained in:
@@ -1987,8 +1987,6 @@ END
|
||||
;
|
||||
&Header::closebox();
|
||||
} elsif (! $cgiparams{'KEY'}) {
|
||||
my $pskdisabled = ($vpnsettings{'VPN_IP'} eq '%defaultroute') ? "disabled='disabled'" : '' ;
|
||||
$cgiparams{'PSK'} = $Lang::tr{'vpn incompatible use of defaultroute'} if ($pskdisabled);
|
||||
my $cakeydisabled = ( ! -f "${General::swroot}/private/cakey.pem" ) ? "disabled='disabled'" : '';
|
||||
$cgiparams{'CERT_NAME'} = $Lang::tr{'vpn no full pki'} if ($cakeydisabled);
|
||||
my $cacrtdisabled = ( ! -f "${General::swroot}/ca/cacert.pem" ) ? "disabled='disabled'" : '';
|
||||
@@ -1996,9 +1994,9 @@ END
|
||||
&Header::openbox('100%', 'left', $Lang::tr{'authentication'});
|
||||
print <<END
|
||||
<table width='100%' cellpadding='0' cellspacing='5' border='0'>
|
||||
<tr><td width='5%'><input type='radio' name='AUTH' value='psk' $checked{'AUTH'}{'psk'} $pskdisabled/></td>
|
||||
<tr><td width='5%'><input type='radio' name='AUTH' value='psk' $checked{'AUTH'}{'psk'} /></td>
|
||||
<td class='base' width='55%'>$Lang::tr{'use a pre-shared key'}</td>
|
||||
<td class='base' width='40%'><input type='password' name='PSK' size='30' value='$cgiparams{'PSK'}' $pskdisabled/></td></tr>
|
||||
<td class='base' width='40%'><input type='password' name='PSK' size='30' value='$cgiparams{'PSK'}' /></td></tr>
|
||||
<tr><td colspan='3' bgcolor='#000000'></td></tr>
|
||||
<tr><td><input type='radio' name='AUTH' value='certreq' $checked{'AUTH'}{'certreq'} $cakeydisabled /></td>
|
||||
<td class='base'><hr />$Lang::tr{'upload a certificate request'}</td>
|
||||
|
||||
Reference in New Issue
Block a user