mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-11-23 05:26:02 +03:00
Code Issues Projects Releases Wiki Activity
921 Commits 1 Branch 0 Tags 20 MiB
2b74dd99a7
Commit Graph

921 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
hwdsl2
5d43404beb Update IKEv2 script 
- Simplify IKEv2 setup: Use an auto-generated password to protect
  client configuration files. Remove the steps for user input.
- Cleanup
 2021-07-13 22:09:25 -05:00
hwdsl2
a90caf428b Update IKEv2 script 
- Add support for Alpine Linux in a Docker container. See:
  https://github.com/hwdsl2/docker-ipsec-vpn-server
 2021-07-12 23:41:33 -05:00
hwdsl2
61025818bb Optimize binary size 
- Use the gcc "-s" option when compiling Libreswan. This reduces
  binary size by ~80%.
 2021-07-10 01:57:11 -05:00
hwdsl2
4422bea6a4 Update tests 2021-06-20 15:22:32 -05:00
hwdsl2
02b6d05c82 Update IPTables rules 
- Allow traffic from IKEv2 and IPsec/XAuth ("Cisco IPsec") clients to
  IPsec/L2TP clients. Ref: #983
- Cleanup
- Update docs
 2021-06-20 15:02:33 -05:00
hwdsl2
282a8e5e5a Update tests 2021-06-12 22:34:34 -05:00
hwdsl2
64eb0e1f49 Cleanup 2021-06-09 00:42:28 -05:00
hwdsl2
99dd5702e7 Update docs 2021-06-06 15:27:56 -05:00
hwdsl2
9072c0889c Update docs 2021-06-06 12:04:19 -05:00
hwdsl2
7376fc02d2 Update docs 2021-06-04 17:27:21 -05:00
hwdsl2
e05cdb4b83 Update docs 2021-06-04 14:48:19 -05:00
hwdsl2
247298bb05 Update tests 2021-06-03 22:09:56 -05:00
hwdsl2
811ce6a9aa Update IKEv2 script 
- Check certificate status when exporting a client configuration
  using --exportclient
 2021-06-01 23:35:19 -05:00
hwdsl2
5adaa29947 Update tests 2021-06-01 02:43:44 -05:00
hwdsl2
d6088751b9 Update docs 2021-06-01 02:31:14 -05:00
hwdsl2
ea52ab4683 Update IKEv2 script 
- New: Revoke a client certificate using the helper script. Users can
  also manually revoke a client certificate, see https://git.io/ikev2
- Check for certificate validity when exporting client configurations
- Delete CRL from IPsec database when removing IKEv2
- Cleanup
 2021-06-01 02:30:51 -05:00
hwdsl2
55b468bb1f Update docs 2021-05-24 01:20:32 -05:00
hwdsl2
de2d49d3a6 Improve IKEv2 setup 
- Add a link to /usr/bin for the IKEv2 helper script
 2021-05-24 01:14:32 -05:00
hwdsl2
cda1f00e06 Update docs 2021-05-22 23:25:54 -05:00
hwdsl2
3014143e15 Update IKEv2 script 
- Advanced users can specify the server's IP address using variable
  VPN_PUBLIC_IP instead of auto-detect
 2021-05-11 09:59:29 -05:00
hwdsl2
293e5d999a Improve IP detection 2021-05-11 09:59:18 -05:00
hwdsl2
8176f81e4f Update docs 2021-05-03 00:06:33 -05:00
hwdsl2
ab69631e54 Update docs 2021-05-02 15:55:32 -05:00
hwdsl2
933114087b Update docs 2021-05-02 00:48:29 -05:00
hwdsl2
ee409250d8 Improve IKEv2 setup 
- Increase RSA key size from the default 2048 bits to 3072 bits
- Use fixed delay between certutil calls, a random delay is not needed
- Update docs
 2021-05-01 14:46:12 -05:00
hwdsl2
21a72d6232 Update docs 2021-04-30 09:42:36 -05:00
hwdsl2
9bd716dda8 Update docs 2021-04-26 22:59:30 -05:00
hwdsl2
c55bdd7d13 Update permissions 
- Set executable bit for ikev2.sh
 2021-04-26 22:55:32 -05:00
hwdsl2
c9e3bff6e2 Update tests 2021-04-26 00:08:16 -05:00
hwdsl2
7fa6df6105 Update docs 
- Remove Ubuntu 16.04, whose standard support will end on April 30,
  2021
- Add a note on CentOS Linux 8
 2021-04-26 00:06:17 -05:00
hwdsl2
92d3835311 Remove Ubuntu 16.04 
- Remove Ubuntu 16.04 from templates, whose standard support will end on
  April 30, 2021.
 2021-04-26 00:01:14 -05:00
hwdsl2
5d5bcf6857 Update IKEv2 docs 2021-04-24 22:56:51 -05:00
hwdsl2
e850fca9c3 Update IKEv2 script 
- Remove MODP1024 from IKEv2 ciphers for improved security. Windows users
  will need to make a one-time registry change before connecting for the
  first time. Refer to https://git.io/ikev2.
 2021-04-24 22:34:48 -05:00
hwdsl2
f72bdf1237 Update tests 2021-04-24 16:16:44 -05:00
hwdsl2
740f6d92d0 Update docs 2021-04-24 16:16:29 -05:00
hwdsl2
ac0bde54bb New Libreswan version 
- Use new Libreswan version 4.4
- Support updating to Libreswan 4.4
- Other small improvements and cleanup
 2021-04-24 16:15:05 -05:00
hwdsl2
d90c6121b6 Improve OS detection 2021-04-20 00:09:00 -05:00
hwdsl2
28b02f28db Fix for CentOS 8 
- Minor fix for IPTables FORWARD rules on CentOS 8
- Cleanup
 2021-04-19 00:38:50 -05:00
hwdsl2
dc1bcb21f9 Update docs 2021-04-18 14:28:00 -05:00
hwdsl2
10f09bbab6 Cleanup 2021-04-18 14:27:52 -05:00
hwdsl2
6c5e29351f Optimize images 2021-04-16 22:27:49 -05:00
hwdsl2
55aac9ad37 Update IKEv2 docs 2021-04-11 15:44:03 -05:00
hwdsl2
f35ea9ed0d Update IKEv2 script 
- Improve output for auto mode when custom options are specified
 2021-04-11 13:53:38 -05:00
hwdsl2
cc1223369f Update tests 2021-04-10 16:25:22 -05:00
hwdsl2
848ff7ba0a Update IKEv2 docs 2021-04-10 16:25:13 -05:00
hwdsl2
5076f9ec03 Update IKEv2 script 
- Add an option to specify the name of the first IKEv2 client when
  running the script in auto mode. The default is "vpnclient".
- Cleanup
 2021-04-10 16:24:49 -05:00
hwdsl2
804856064b Minor fix and cleanup 
- Minor fix for CentOS 8 for the uncommon scenario where the server has
  "nftables" service enabled
- Cleanup
 2021-04-01 23:06:36 -05:00
hwdsl2
d76ded2c52 Update docs 2021-03-31 00:58:06 -05:00
hwdsl2
7ac343db4d Update IKEv2 script 
- Improve output
 2021-03-30 23:47:59 -05:00
hwdsl2
7f8f231479 Update docs 
- Add advanced usage for IKEv2-only VPN
 2021-03-30 01:15:00 -05:00