Michael Tremer
71af643cda
openvpn: Add option to download a client package with PEM files
...
This patch adds the option to download a client package
that comes with a regular PEM and key file instead of a
PKCS12 file which is easier to use with clients that
don't support PKCS12 (like iOS) opposed to converting
the file manually.
This requires that the connection is created without
using a password for the certificate. Then the certificate
is already stored in an insecure way.
This patch also adds this to the Core Update 95 updater.
Fixes : #10966
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
CC: Alexander Marx <alexander.marx@ipfire.org >
2015-11-04 21:10:41 +00:00
Michael Tremer
364452506f
Merge remote-tracking branch 'ms/dhcp-rfc2136-broken-down' into next
2015-10-21 13:50:31 +01:00
Lars Schuhmacher
ed1d0fbdbe
IPsec: Remove GUI option for "Roadwarrior virtual IP"
...
This setting stems from IPCop (and probably Openswan) and causes a problem.
Fixes bug #10496 .
Signed-off-by: Lars Schuhmacher <larsen007@web.de >
Acked-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2015-09-28 14:04:40 +01:00
Lars Schuhmacher
e3edceeb7a
Mark required input fields with a star
...
Mark required input fields with a star as nowadays this is
the de-facto default. Before, it was the other way around and
optional fields were marked.
Signed-off-by: Lars Schumacher <larsen007@web.de >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2015-09-21 16:40:41 +01:00
Michael Tremer
49c64a0993
Update translation
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2015-09-10 13:38:43 +01:00
Michael Tremer
f6529a04a3
IPsec: Add option to force using MOBIKE
...
Some peers that are behind a NAT router that fails
to properly forward IKE packets on UDP port 500 cannot
establish an IPsec connection. MOBIKE tries to solve that
by sending these packets to UDP port 4500 instead.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2015-09-10 13:35:24 +01:00
Alexander Marx
9c7b90207e
Add web UI for the system MTA
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2015-08-21 09:46:26 +01:00
Michael Tremer
4b02b4045b
ipsec: Allow selection of ESP group type
...
If a connection is edited, the IKE group types will be used instead.
Fixes #10860
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
Tested-by: Wolfgang Apolinarski <wolfgang.apolinarski@web.de >
2015-06-15 22:33:28 +02:00
Lars Schuhmacher
5b93b50c6d
Fix hardcoded strings in pppsetup.cgi
...
Some strings for PPTP were hardcoded instead of using i18n features.
Signed-off-by: Lars Schuhmacher <larsen007@web.de >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2015-06-04 18:16:02 +02:00
Michael Tremer
1554e8a3d3
DHCP: Add search box for static leases
2015-05-28 14:49:41 +02:00
Michael Tremer
0389942c2b
Update translations
2015-04-18 16:16:01 +02:00
Stefan Schantl
e6c4f090b6
Merge branch 'next-geoip' into core-90-geoip
2015-04-15 17:10:49 +02:00
Michael Tremer
c023275154
Update translations
2015-04-14 20:06:19 +02:00
Alexander Marx
842e2132e8
vpn-statistic: added title for graph sites
2015-04-09 14:44:56 +02:00
Stefan Schantl
a8e59d8035
GeoIP: Update english translation.
2015-04-01 20:28:36 +02:00
Stefan Schantl
b510e12ac1
DHCP: Allow DNS Update configuration in the web user interface
2015-03-16 00:54:20 +01:00
Stefan Schantl
93bfe63d55
Merge branch 'seventeen-geoip' into next-geoip
2015-03-15 11:38:45 +01:00
Stefan Schantl
d9bf6d8b2f
Language file update.
2015-02-12 20:10:05 +01:00
Michael Tremer
f57a228c4b
ipsec: Allow IKE lifetime of up to 24 hours
...
Requested in #10722
The recommended time has not been changed, but it is often
stated that 24 hours is a common lifetime for IKE.
2015-01-19 17:04:37 +01:00
Michael Tremer
97af8b2b85
Update translations
2015-01-13 17:37:41 +01:00
Michael Tremer
3906cf7e85
Merge remote-tracking branch 'amarx/vpn-statistic1' into next
2015-01-13 17:37:18 +01:00
Stefan Schantl
a2b7328a26
Language file update.
2015-01-04 13:52:29 +01:00
Stefan Schantl
11ad82532e
Language file update for geoip blocking.
2015-01-03 20:20:45 +01:00
Michael Tremer
18f2b3d171
Merge remote-tracking branch 'ummeegge/OpenVPN_additional_configs' into next
2014-12-08 19:12:48 +01:00
Michael Tremer
1450cfebde
Merge remote-tracking branch 'ummeegge/OpenVPN_validating_N2N' into next
2014-12-08 19:12:39 +01:00
Erik Kapfer
f4fbb93510
OpenVPN: Added 'valid til (days)' field for N2N.
...
Fixes #10680
2014-11-13 10:40:42 +01:00
Erik Kapfer
ffbe77c8bc
OpenVPN: Added additional configuration for server and clients
...
* Added a possibility to manualy extend OpenVPNs server and client configuration.
* Added also a checkbox (on/off) in the WUI under 'Advanced server options' .
* Changed the order in 'Miscellaneous options' section for better overview.
* Optimized code in particular sections a little.
Added a filehandle instead of system(touch...) for ccd* file generation.
Unified the html code tags in processed section.
Fixes #10577
2014-11-13 03:09:51 +01:00
Alexander Marx
c9ac8b8052
vpn-statistics: change graphs and datatypes of rrd
2014-10-21 07:29:06 +02:00
Michael Tremer
6272b1b85e
Merge branch 'master' into install-raid
...
Conflicts:
config/rootfiles/common/bash
lfs/bash
2014-10-10 14:52:30 +02:00
Michael Tremer
627fdda8e8
Fix wording. Remove "got".
...
Fixes #10632
2014-09-27 22:59:05 +02:00
Michael Tremer
60bce6ba6a
Merge remote-tracking branch 'amarx/BUG10615' into next
2014-09-26 13:02:28 +02:00
Alexander Marx
d8cc443938
fw-groups: fix language strings
2014-09-19 13:44:20 +02:00
Alexander Marx
d8deec0b4f
BUG10615 part2: Add ratelimit to firewallgui
2014-09-11 13:59:54 +02:00
Alexander Marx
79ad6f7e53
BUG10615 part1: Add connectionlimit to firewallgui
2014-09-11 10:59:25 +02:00
Michael Tremer
bc0c55088e
Remove old installer/setup translations
2014-08-21 20:35:48 +02:00
Michael Tremer
aa7f55b2df
Merge remote-tracking branch 'origin/next' into install-raid
2014-08-20 21:46:49 +02:00
Michael Tremer
2fc5124b7e
proxy: Allow HTTP Basic authentication against Active Directory servers
...
Some clients may not support NTLMv2. Basic authentication can
now be activated. This is dangerous as it sends the credentials
in cleartext to the proxy server.
2014-08-11 11:49:56 +02:00
Michael Tremer
908555842c
Merge remote-tracking branch 'ms/firewall-no-nat' into next
...
Conflicts:
doc/language_issues.nl
doc/language_issues.tr
2014-08-07 14:50:42 +02:00
Michael Tremer
70a44b52a5
installer: Add support for XFS.
2014-07-27 18:00:00 +02:00
Michael Tremer
2deb75c0f3
Merge remote-tracking branch 'ms/squid-ad' into next
2014-07-27 12:01:50 +02:00
Michael Tremer
4a0d9bef07
installer: Add support for RAID.
2014-07-22 00:04:20 +02:00
Michael Tremer
25fcce25bc
installer: Rewrite partitioning.
...
The installer now uses parted for partitioning
and support for EXT2 and EXT3 has been dropped.
2014-07-21 14:01:02 +02:00
Michael Tremer
d7dd283b89
Allow to select the target disk and allow selecting multiple of them.
2014-07-20 16:36:41 +02:00
Michael Tremer
83ef9c40ef
firewall: Allow to disable masquerading.
2014-07-18 17:15:29 +02:00
Michael Tremer
ff5e4ef871
netexternal.cgi: Show DNSSEC status
...
The netexternal.cgi has been extended to show what type
of DNSSEC support the upstream nameservers offer.
2014-07-14 13:42:24 +02:00
Michael Tremer
dc74d0fd94
Update translations.
...
Add some missing strings that have been accidentially
been removed when a commit was reverted.
2014-07-10 11:27:34 +02:00
Michael Tremer
17aa650da6
Merge remote-tracking branch 'ummeegge/openvpn'
2014-06-17 19:30:37 +02:00
Erik Kapfer
ac3b63071f
openvpn: Shortened word to prevent line break.
...
* Shortened Diffie-Hellman to DH in language files to
affort a better look in WUI.
2014-06-16 09:50:20 +02:00
Michael Tremer
edc08821f1
Merge remote-tracking branch 'ummeegge/openvpn'
2014-06-12 16:26:55 +02:00
Erik Kapfer
ad09461a43
openvpn:Deleted download possibility for DH param and fixed some typos.
...
* Deleted DH-parameter download possibility in CA/key chart section.
* Fixed some typos in CA/key section.
2014-06-12 16:17:02 +02:00
