124 Commits

Author SHA1 Message Date
Ad Schellevis
c314ac09e4 small cleanups for https://github.com/opnsense/core/pull/2748 2018-10-01 21:45:41 +02:00
Fabio Prina
f83e6cfc59 openvpn, option to match CSO against common_name or login 2018-09-22 19:42:48 +02:00
Franco Fichtner
69fef9cb9e openvpn: translate validated field names while at it #2536 2018-07-12 08:36:26 +02:00
Franco Fichtner
74a489b21c openvpn: fix dh selection; closes #2489 2018-06-27 14:23:32 +00:00
Franco Fichtner
18422bd9fc system: tweak previous 2018-06-19 06:06:01 +00:00
Franco Fichtner
79bf33a1ca system: better dhparam support including RFC 7919 2018-06-19 07:51:29 +02:00
Ad Schellevis
f9f896533c OpenVPN server, allow cloning of servers. 2018-06-10 11:33:49 +02:00
Franco Fichtner
47bb783c26 openvpn: small issue in style #2440 2018-06-06 20:25:39 +00:00
Franco Fichtner
49021d93e7 openvpn: #2440
Only firewall pages left...
2018-06-05 19:49:59 +00:00
Ad Schellevis
870b17e09e OpenVPN, cleanup client specific override generation, don't save to disk as the connect or auth process is taking care of that now. for https://github.com/opnsense/core/issues/2348 2018-04-22 18:01:12 +02:00
Ad Schellevis
f1697c4a2e OpenVPN/server, minor visual improvements, switch dropdown boxes to selectpicker 2018-04-15 19:55:44 +02:00
Franco Fichtner
e9c3be35d6 www: visual cleanups, unused class/style zapping #2290 2018-03-25 13:10:27 +00:00
Franco Fichtner
d141ea7d60 openvpn: final tweak on wording #2266 2018-03-19 08:33:39 +01:00
Franco Fichtner
517e95911e openvpn: correct more errors, auto-fill port and add remote networks in wizard; closes #2266 2018-03-19 07:18:08 +00:00
Franco Fichtner
71a93525d6 openvpn: bootstrap protocol value for port-autoselect #2266
If the default ever changes to TCP, the port generation works as intended.
2018-03-19 07:27:16 +01:00
Franco Fichtner
3560810303 openvpn: adapt wizard as well #2266
* Port autoselect doesn't work for TCP
* Could still add remote networks
2018-03-18 19:19:57 +00:00
Franco Fichtner
c51a6916c3 openvpn: tunnel network tweaks, only one needed #2266 2018-03-18 18:28:35 +00:00
Franco Fichtner
01b0534cc6 openvpn: default switch to "any", adds XXX4 variants #2266 2018-03-18 16:11:56 +01:00
Franco Fichtner
86989c2e5c openvpn: remove side-effects, preliminary cleanup for #2266 2018-03-18 10:47:16 +01:00
NOYB
9d96bdcbc7 Help For - Data For Attribute
Use original element (<div>/<small>) with "data-for" attribute.

The old jquery "for" attribute selectors can be removed once conversion to "data-for" attribute is complete (including plugins).

The old jquery selectors to remove once conversion is complete.
  opnsense_ui.js & head.inc
  $("*[for='" + $(this).attr('id') + "']")....
  $('[for*="help_for"]')....
2018-03-17 16:12:55 +01:00
Franco Fichtner
dfe4fe64c9 www: switch copy+paste files to current standards 2018-03-04 12:57:12 +01:00
NOYB
6ef9a127ff HTML Compliance - Attribute "type" on Element <script>
Warning: The type attribute is unnecessary for JavaScript resources.

HTML5: Edition for Web Authors
http://www.w3.org/TR/2014/REC-html5-20141028/scripting-1.html
The default, which is used if the attribute is absent, is "text/javascript".

The Script element
https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script
HTML5 specification urges authors to omit the attribute rather than provide a redundant MIME type.
2018-01-22 19:13:34 +01:00
NOYB
4a7bcae7af HTML Compliance - Attribute "for" on Element <div>
Error: Attribute "for" not allowed on element "div" at this point.
Attributes for element "div": http://www.w3.org/html/wg/drafts/html/master/single-page.html#the-div-element

HTML attribute reference: https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes
The "Output" element: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/output

Attributes for element "output": http://www.w3.org/html/wg/drafts/html/master/single-page.html#the-output-element
2018-01-06 10:52:17 +01:00
NOYB
b2f4cfa7c1 HTML Compliance - Attribute "type" on Element <i>
Error: Attribute "type" not allowed on element <i> at this point.
2018-01-05 08:36:26 +01:00
NOYB
76aab5cb52 HTML Compliance - Obsolete table attributes
width, align, valign, cellpadding, cellspacing, border, summary

Error: The width attribute on the table element is obsolete. Use CSS instead.
Error: The align attribute on the table element is obsolete. Use CSS instead.
Error: The valign attribute on the table element is obsolete. Use CSS instead.
Error: The cellpadding attribute on the table element is obsolete. Use CSS instead.
Error: The cellspacing attribute on the table element is obsolete. Use CSS instead.
Error: The border attribute on the table element is obsolete. Use CSS instead.
Error: The summary attribute on the table element is obsolete. Consider describing the structure of the table in a caption element or in a figure element containing the table; or, simplify the structure of the table so that no description is needed.
2018-01-04 18:26:02 +01:00
Ad Schellevis
91c8493068 openvpn, forgot to show remote_network for other server modes. for https://github.com/opnsense/core/issues/1932 2017-11-23 21:21:05 +01:00
Franco Fichtner
58061809d4 openvpn: allow multiple servers for clients and many things, many things 2017-09-21 21:50:45 +02:00
Franco Fichtner
d87c6ff556 Scripts: add a license generator for GitHub 2017-08-05 20:21:35 +02:00
Franco Fichtner
f67db86f20 openvpn: spacing issues for help icons 2017-08-04 14:20:19 +02:00
Franco Fichtner
6bb6110562 ipsec: local group enforcement, some comments follow #1748
o group_source was removed as it was unused
o stop passing global authcfg through the ipsec config--wtf?
o if the mobile client section is disable, refuse authentication
o make xauth privilege optional, it will go away in 18.1
2017-07-30 13:49:35 +02:00
Franco Fichtner
ee0c1705a1 openvpn: allow local group enforcement #1748
While there, strip a bit of legacy cruft.
2017-07-30 12:34:28 +02:00
Franco Fichtner
4c179c235d openvpn: fix config handling on PHP 7.1 #1733
The day has come that this "bootstrap" logic broke horribly,
preventing us from upgrading to PHP 7.1 with the initial 17.7.

Add a config_read_array() function that emulates *all* potentially
required steps and grabs the array reference so that the code can
be migrated easily.

Hopefully this also works on PHP 7.0.  ;)
2017-07-20 08:41:35 +02:00
Ad Schellevis
ad5ad50e7d vpn_openvpn_server.php, fix typo 2017-05-09 21:07:50 +02:00
Franco Fichtner
8d3797a2ac openvpn: this is how it should be ;) 2017-04-21 18:34:58 +02:00
Franco Fichtner
48d4f75261 openvpn: more reneg-sec spots to adjust 2017-04-21 18:26:38 +02:00
Franco Fichtner
b521b24ce0 openvpn: restart single instance by id
This looks a bit odd when we have the full struct and pass it down,
but is way easier to maintain than to tell the underlying code
this is a server or a client or whatever, because it shouldn't
matter as the vpnid is unique anyway.
2017-03-22 08:52:05 +01:00
Franco Fichtner
aff94b55a3 openvpn: naming and call conventions, pull more internal code into plugin
Looking at openvpn_configure_server() and openvpn_configure_client()
it becomes a bit clearer why they take a config.xml subset: it's beause
the write_config() ordering was flipped.  We could probably now pass
an ID and let the code figure out if it is a client or server...
2017-03-22 08:22:52 +01:00
Franco Fichtner
e91951537a openvpn: merge into plugin 2017-03-11 19:24:34 +01:00
Franco Fichtner
6a018eade1 openvpn: missing p2p shared key settings
There may be more, at least I don't see the difference between
TLS and shared key for most settings, except certificate setup.

The client traffic redirect is probably also wrong, but for now
provide consistency with TLS.

PR: https://forum.opnsense.org/index.php?topic=3908.0
2016-11-12 09:21:31 +01:00
Franco Fichtner
0e03967cf5 www: strip plugins.inc from frontend 2016-10-01 10:50:03 +02:00
Franco Fichtner
289c349ba3 www: switch to absolute redirects #1168 2016-09-24 09:03:45 +02:00
Franco Fichtner
d3bca14121 vpn: url_safe() for OpenVPN pages 2016-09-24 07:42:40 +02:00
Franco Fichtner
1611955b2d openvpn: more tweaks for previous
There is no need to visually overload the field descriptions with
stop chars like a slash, the help is sufficient in explaining that
multiple networks can be used and the chances are high that most
will only ever use one network here.
2016-08-31 07:54:26 +02:00
Franco Fichtner
db356ac9b0 openvpn: annotate IPv4 where appropriate
Suggested by: SimonB via Pootle
2016-08-31 07:48:23 +02:00
Franco Fichtner
1d73b3b59d plugins: follow the footsteps of plugins_syslog() and plugins_services()
This looks simple enough now.  Discussed with @adschellevis.
2016-08-29 07:10:29 +02:00
Franco Fichtner
47c3fee71e openvpn: missed plugins.inc dependency on previous 2016-08-28 12:47:34 +02:00
Franco Fichtner
3355029993 openvpn: plug interface plugging into the add/delete paths
This wasn't completely right before, trying to plug into rules
reload paths and caused issues with people adding/deleting their
OpenVPN devices, but the rules tab not properly indicating this
since OpenVPN has become a pluggable interface.
2016-08-28 12:39:25 +02:00
Ad Schellevis
765164a0ea (openvpn) add "Use common name" option to control username-as-common-name, closes https://github.com/opnsense/core/issues/1154 2016-08-25 16:17:05 +02:00
Ad Schellevis
459362eff4 reneg-sec also valid for server_user 2016-08-19 14:50:10 +02:00
Ad Schellevis
11bd0171ea (openvpn) add reneg-sec to server, closes https://github.com/opnsense/core/issues/1147 2016-08-19 14:44:35 +02:00