Alexander Marx
8084656823
openvpn: Wrong subnet calculation bug fix.
...
Fixes #10466 .
2014-02-02 14:38:24 +01:00
Erik Kapfer
48cc0e123a
openvpn: Since port must be < 1024 we can drop the conflict check.
...
All the potentially conflicting ports are smaller than < 1024
and can therefore never be used any way.
2014-01-20 20:22:03 +01:00
Michael Tremer
e11f536252
OpenVPN: Fix daemon stuck in WAIT state.
...
When the client is in the WAIT state, it is usally connected
to the server.
2014-01-12 15:40:50 +01:00
Erik Kapfer
8c252e6aa8
OpenVPN: Check if port is smaller than 1024.
...
Bug #10459 .
2014-01-11 12:38:53 +01:00
Alexander Marx
3932f02ba3
Merge branch 'fifteen' of ssh://git.ipfire.org/pub/git/ipfire-2.x into fifteen-layout
2014-01-09 16:23:39 +01:00
Alexander Marx
f7edf97ae7
Layout changes ovpnmain.cgi
2014-01-09 14:59:46 +01:00
Michael Tremer
9063a04e94
Merge branch 'master' into fifteen
...
Conflicts:
config/backup/backup.pl
2014-01-09 13:31:25 +01:00
Alexander Marx
4d5247bdd0
fix ccd config name for openvpn 2.3
2014-01-09 11:47:44 +01:00
Alexander Marx
99bfa85c89
fifteen-theme: made ovpnmain.cgi tables themeable
...
Conflicts:
html/cgi-bin/ovpnmain.cgi
2014-01-08 15:04:42 +01:00
Stefan Schantl
e602416f94
Fix inpossible download of hostcert on french language.
...
The french tranlsation string for download host certificate contains a single quote
character which breaks the used HTML code. As a result of this it wasn't possibe to
download the host certificate via the WUI with selected french language.
Fixes #10405 .
2014-01-07 21:13:56 +01:00
Michael Tremer
ce7c5249bf
openvpn: Support Camellia cipher.
2014-01-06 22:11:47 +01:00
Michael Tremer
b7d9509c3a
openvpn: Use AES-256-CBC as default cipher.
...
Applies to new installations, only.
2014-01-04 17:20:15 +01:00
Arne Fitzenreiter
ba263fbbb9
Merge remote-tracking branch 'origin/next' into fifteen
2013-12-30 13:45:10 +01:00
Michael Tremer
1d0a260a8b
openvpn: Move verify script out of configuration directory.
2013-12-29 21:13:55 +01:00
Alexander Marx
6d8eb5dec7
Firewall: Renamed directory /var/ipfire/forward to /var/ipfire/firewall
2013-10-24 09:24:12 +02:00
Michael Tremer
2ac39db92e
Merge remote-tracking branch 'amarx/firewall' into fifteen
2013-08-28 11:33:20 +02:00
Michael Tremer
8e6a8fd5d3
ovpnmain.cgi: Don't fail if files are not existant.
...
N2N connections could not be deleted if they have never been
started.
2013-08-19 17:40:57 +02:00
Michael Tremer
86228a56ef
ovpnmain.cgi: Fix remote IP address validation.
2013-08-19 17:33:23 +02:00
Alexander Marx
1ca546126e
Forward Firewall: deleted configfile "nat" in ovpnmain.cgi for portfw check. File "nat" no longer exists. Now the portfw rules are in file "config"
2013-08-09 14:15:33 +02:00
Alexander Marx
eff2dbf833
Forward Firewall: changed sort-order to Sort::Naturally. This Perl Module will be available since core 68.
2013-08-09 14:13:11 +02:00
Alexander Marx
139a1ab947
Forward Firewall: removed devel-tags
2013-08-09 14:13:11 +02:00
Alexander Marx
6945e46310
Forward Firewall: rewrote portcheck routine in ovpnmain so that checks for portforwardingports are made against /var/ipfire/forward/nat instead of /var/ipfire/portfw/config
2013-08-09 14:13:11 +02:00
Stefan Schantl
c125d8a2b4
ovpnmain.cgi: Allow to keep the Remote field empty for N2N connections.
...
* It's now possible to keep the Remote Host/IP field empty.
* Cleaned up code.
Fixes #10392 .
2013-07-20 10:57:45 +02:00
Stefan Schantl
92b87e17f1
ovpnmain.cgi: Set mtu-disc to off if not configured.
...
Fixes #10391 .
2013-07-17 21:01:14 +02:00
Stefan Schantl
f48074bacb
ovpnmain.cgi: Add check for a valid N2N network.
...
Fixes #10390 .
2013-07-17 19:58:20 +02:00
Alexander Marx
b376fae45c
OpenVPN: Bugfix 10352: When opening advanced server options all fields are disabled under IE10
2013-04-29 12:57:01 +02:00
Alexander Marx
ab4cf06cff
OpenVPN: Bugfix 10357, now when chaning an VPN N2N or editing an old one the ports are checked.
2013-04-28 05:47:50 +02:00
Stefan Schantl
75559f73dc
Merge branch 'ovpn-client-pkg-download' into core67-merge
2013-03-03 13:37:15 +01:00
Alexander Marx
81da1b01e9
ovpnmain.cgi: Change check for pushed dhcp domains.
...
The Domainname is now checked against validdomainname instead of validfqdn,
so there's no need of a dotted domainname anymore.
Fixes #10262 .
2013-03-03 13:23:49 +01:00
Alexander Marx
96096995ed
ovpnmain.cgi: Fix downloading of client packages.
...
It was only possible to download the client packages if the OpenVPN server is running - which is very confusing.
Fixes #10300 .
2013-03-01 19:25:15 +01:00
Arne Fitzenreiter
b34fdcae83
proxy: allow access to IPFire itself if nets are blocked.
...
This fixes missing pictures on blocking pages.
fixes #10138
2013-02-14 19:33:37 +01:00
Bernhard Bittner
f0ccae1819
ovpnmain.cgi: Fix typo.
2013-01-09 15:22:21 +01:00
Alexander Marx
b643120c01
OpenVPN CCD: Fix ccd filename when certificate has spaces in name. Now the filename gets an underscore to provide full functionality of openvpn.
2013-01-07 12:31:03 +01:00
Stefan Schantl
4f6e3ae3b8
ovpnmain.cgi: Fix client package creation.
...
Fix print aguments to fit with operation systems which uses \r\n on textfiles.
Fixes #10269 .
2012-12-17 21:54:33 +01:00
Alexander Marx
82c809c752
OpenVPN ccd: fixed typos in ccd-files
2012-11-29 21:31:32 +01:00
Stefan Schantl
4cdf8b927a
ovpnmain.cgi: Some cosmetic changes on the Net-to-Net section.
...
* Fix colspan of column.
* Check of mtu-disc and fragment or mssfix, before mtu will be performend.
2012-11-28 22:03:44 +01:00
Alexander Marx
e2429e8d34
OpenVPN ccd: created subnet checkfunction in general_functions, because ipsec needs this too!
...
This should prevent ipsec Hosts/Nets to have same ip addresses than openvpn Hosts/Nets
2012-11-28 20:24:59 +01:00
Alexander Marx
ac87f37110
OpenVPN ccd: fixed counter in static networks. Only 63 hosts are possible in /24 subnet Now IP-Range begins with ".2"
2012-11-28 20:18:14 +01:00
Alexander Marx
df9b48b753
OpenVPN ccd: added alphanumeric sort of static networks and under ROUTING, NONE is selected if no route is specified
2012-11-28 20:17:23 +01:00
Alexander Marx
5068ac3822
OpenVPN ccd: try to adapt changes to latest next branch.
2012-11-26 10:31:47 +01:00
Michael Tremer
b368a2f84d
Merge remote-tracking branch 'stevee/next' into next
2012-11-23 12:58:40 +01:00
Alexander Marx
290007b3b0
openvpn ccd: Fix subnet mask validation.
2012-11-23 12:56:54 +01:00
Alexander Marx
52d08bcbd2
openvpn ccd: Minor fixes: iroute, delete route line.
...
Fixed several bugs:
1) iroute line not correctly printed in ccd file
2) route line was not deleted from server.conf when deleting a client
3) Routebox (client has access to these networks on ipfire site) did not show green,orange and blue when no static route was defined on ipfire
4) Green is no longer selected as default route in clientconfig.
Tested all Options with Windows 7 Client and Linux Mint 12
2012-11-23 12:56:47 +01:00
Stefan Schantl
1647059d74
ovpnmain.cgi: Check and only allow valid operation modes for mtu-disc.
...
In the past some unexpected things has been happened if the Path MTU Discovery not has been
configured.
2012-11-22 19:59:56 +01:00
Stefan Schantl
9e3b875694
ovpnmain.cgi: Path MTU Discovery defaults to Off on Net-to-Net connections.
2012-11-22 19:47:30 +01:00
Stefan Schantl
f2621c3190
Revert "openvpn.cgi: Respect if mtu-disc hasn't been configured yet."
...
This reverts commit a66e24bbfd .
2012-11-22 19:45:44 +01:00
Stefan Schantl
b228aaf09d
ovpnmain.cgi: Path MTU Discovery defaults to Off on Net-to-Net connections.
2012-11-20 19:26:13 +01:00
Alexander Marx
e81be1e1ed
openvpn ccd: Minor fixes.
...
some bugfixes, client advanced options no more visible under net-2-net config, blue network is recognized,
Fixed the bug with wrong ip address in ccd file.
2012-11-20 17:11:08 +01:00
Stefan Schantl
a66e24bbfd
openvpn.cgi: Respect if mtu-disc hasn't been configured yet.
...
If mtu-disc has not been configured, the script anyway has write mtu-disc to the configuration files,
which has brocken them.
2012-11-19 21:07:55 +01:00
Stefan Schantl
350f298025
Merge branch 'ovpn-mtu-disc' into next
...
Conflicts:
html/cgi-bin/ovpnmain.cgi
2012-11-17 13:10:05 +01:00