hwdsl2
c356a75bca
Update docs
2023-01-04 18:58:29 -06:00
hwdsl2
2bd37ccf66
Cleanup
...
- Save a redirect and make VPN setup slightly faster by using
raw.githubusercontent.com directly instead of
https://github.com/hwdsl2/setup-ipsec-vpn/raw/ ...
2022-10-23 14:05:57 -05:00
hwdsl2
3dc675ba37
Add client validity option
...
- For IKEv2 mode, add a new variable VPN_CLIENT_VALIDITY for specifying
the client certificate validity period (in months). Must be an integer
between 1 and 120. Default value is 120. Users can define it as an
environment variable when setting up IKEv2 in auto mode, or when
adding a new IKEv2 client using "--addclient".
2022-10-16 00:45:45 -05:00
hwdsl2
cc99e18123
Cleanup
2022-09-24 18:56:27 -05:00
hwdsl2
32faed40d5
Improve IP check
...
- Instead of finding the server's public IP, use the IP address
on the default route if it is not a private IP. This makes VPN
setup slightly faster by skipping IP detection.
- Add a fallback URL for finding the server's public IP.
- Cleanup
2022-09-24 00:58:16 -05:00
hwdsl2
d2e9b5ff91
Cleanup
2022-08-27 21:51:19 -05:00
hwdsl2
56078b0a1e
Add an option to skip IKEv2 setup
...
- Add an option to skip IKEv2 setup when installing the IPsec VPN.
Example: sudo VPN_SKIP_IKEV2=yes sh vpn.sh
- This allows users to set up an IKEv1-only VPN, or install IKEv2
interactively using "sudo ikev2.sh" after VPN setup.
2022-08-27 15:59:43 -05:00
hwdsl2
4995ec03f5
Improve OS support
...
- Make the VPN setup scripts work on Kali Linux (based on Debian).
- Update IKEv2 helper script to check for OpenSSL 3 first when
exporting the .p12 file.
2022-08-10 23:25:58 -05:00
hwdsl2
e2f211c678
Improve OS detection
...
- Improve OS detection and clean up
2022-08-10 22:41:55 -05:00
hwdsl2
1dbf897500
Cleanup
...
- Fix OS checking: Don't show errors for /etc/redhat-release.
- Fixes #1211 .
2022-08-09 19:34:32 -05:00
hwdsl2
200da23776
Add Oracle Linux 9
2022-07-30 09:31:27 -05:00
hwdsl2
10d54262fb
Add CentOS 9
...
- Add support for version 9 of CentOS Stream, RHEL, Rocky Linux
and AlmaLinux.
2022-07-30 02:59:49 -05:00
hwdsl2
35969d2bbb
Update Alpine Linux versions
...
- Add Alpine Linux 3.16 and remove 3.14.
2022-06-19 22:41:21 -05:00
hwdsl2
0e24f8b086
Cleanup
2022-06-09 13:44:16 -05:00
hwdsl2
593f726c80
Cleanup
2022-06-07 22:48:40 -05:00
hwdsl2
9ab949d61d
Cleanup
2022-05-10 09:03:00 -05:00
hwdsl2
c66ca577f3
Update links
...
- Update links due to git.io deprecation.
Ref: https://github.blog/changelog/2022-04-25-git-io-deprecation/
2022-04-29 22:32:22 -05:00
hwdsl2
b2626dc921
Cleanup
2022-04-27 00:05:45 -05:00
hwdsl2
a1ab13d9a9
Improve VPN setup
...
- Add fallback URLs for improved reliability
2022-04-11 22:36:43 -05:00
hwdsl2
629b39d3b3
Add Oracle Linux
...
- Add support for Oracle Linux 8 and 7.
2022-03-20 23:10:11 -05:00
hwdsl2
beb756f1f2
Remove CentOS 8
...
- Remove support for CentOS Linux 8, which is EOL.
Ref: https://www.centos.org/centos-linux-eol/
2022-03-08 21:39:19 -06:00
hwdsl2
6f4080bab4
Improve VPN setup
...
- Refactor VPN scripts to move IKEv2 setup inside vpnsetup_*.sh
2022-03-03 22:05:09 -06:00
hwdsl2
74b72b331a
Improve VPN setup
...
- vpnsetup.sh now automatically sets up IKEv2 as part of the
IPsec VPN setup, same as quickstart.sh.
2022-03-02 21:58:31 -06:00
hwdsl2
86d4f2f93c
Improve VPN setup
...
- Retry certain 'apt-get' and 'yum' commands on failure
2022-02-08 23:24:46 -06:00
hwdsl2
2bb938416c
Cleanup
2022-01-29 12:35:51 -06:00
hwdsl2
c78b398057
Update year
2022-01-02 00:09:03 -06:00
hwdsl2
603b198613
Add Alpine 3.15
...
- Add support for Alpine Linux 3.15
- Install nss, nss-tools and nss-dev packages from edge for CVE-2021-43527
Ref: https://lists.libreswan.org/pipermail/swan-announce/2021/000044.html
2021-12-29 23:12:24 -06:00
hwdsl2
a47ced7899
Cleanup
2021-09-19 21:51:14 -05:00
hwdsl2
4a8e24a61c
Cleanup
2021-09-18 14:58:06 -05:00
hwdsl2
c8db38f12b
Add container check
...
- Add check for LXC containers. Ref: #1014
2021-09-18 00:53:15 -05:00
hwdsl2
819c537b5e
Improve /dev/ppp check
...
- Show a warning instead of exiting with an error for missing /dev/ppp,
which could happen on Debian 11/10 with certain Linux kernels. Users
can use the IKEv2 or IPsec/XAuth ("Cisco IPsec") mode to connect.
Ref: https://git.io/vpndebian10
2021-09-17 23:47:09 -05:00
hwdsl2
f14d903b97
Bugfix for Alpine Linux
...
- Install coreutils on Alpine Linux for "mktemp"
2021-09-14 00:49:13 -05:00
hwdsl2
ca411d90cd
Cleanup
2021-09-11 22:26:55 -05:00
hwdsl2
3c557c7f22
Add Alpine Linux
2021-09-11 15:00:29 -05:00
hwdsl2
217bf2a237
Cleanup
...
- Improve temporary folder creation
2021-08-28 16:07:52 -05:00
hwdsl2
fc33e1c451
Cleanup
2021-08-19 01:40:38 -05:00
hwdsl2
87235014ad
Add Debian 11
2021-08-15 00:46:25 -05:00
hwdsl2
cfd9128e3f
Improve VPN setup
...
- Wait for apt to be available
- Check for Wget and install it if not found
- Fallback to cURL if Wget fails
- Cleanup
2021-08-13 22:15:11 -05:00
hwdsl2
920e7a5fc8
Improve VPN setup
...
- Add a new wrapper script for IPsec VPN setup on all supported OS.
The previous vpnsetup.sh has been moved to vpnsetup_ubuntu.sh.
2021-08-13 02:11:49 -05:00
hwdsl2
c54484a910
Rename Ubuntu/Debian script
2021-08-13 01:20:07 -05:00
hwdsl2
a0409b4399
Cleanup
...
- In rare cases, if a parent process traps SIGPIPE, the 'tr'
command in the VPN setup scripts could output an error
'tr: write error: Broken pipe'. This is a cosmetic error
that does NOT affect the functionality of the scripts. This
commit hides the error in such cases.
2021-07-21 23:12:06 -05:00
hwdsl2
61025818bb
Optimize binary size
...
- Use the gcc "-s" option when compiling Libreswan. This reduces
binary size by ~80%.
2021-07-10 01:57:11 -05:00
hwdsl2
02b6d05c82
Update IPTables rules
...
- Allow traffic from IKEv2 and IPsec/XAuth ("Cisco IPsec") clients to
IPsec/L2TP clients. Ref: #983
- Cleanup
- Update docs
2021-06-20 15:02:33 -05:00
hwdsl2
de2d49d3a6
Improve IKEv2 setup
...
- Add a link to /usr/bin for the IKEv2 helper script
2021-05-24 01:14:32 -05:00
hwdsl2
293e5d999a
Improve IP detection
2021-05-11 09:59:18 -05:00
hwdsl2
c55bdd7d13
Update permissions
...
- Set executable bit for ikev2.sh
2021-04-26 22:55:32 -05:00
hwdsl2
ac0bde54bb
New Libreswan version
...
- Use new Libreswan version 4.4
- Support updating to Libreswan 4.4
- Other small improvements and cleanup
2021-04-24 16:15:05 -05:00
hwdsl2
cec1dde5e4
Improve setup
...
- To make it easier for users to set up IKEv2, the IKEv2 helper script
is now downloaded during VPN setup.
- Cleanup
2021-03-28 23:39:29 -05:00
hwdsl2
f6dd26abba
Improve setup
...
- Install uuid-runtime/util-linux, which is required for IKEv2 setup.
2021-03-13 14:39:05 -06:00
hwdsl2
1972501725
New Libreswan version
...
- Use new Libreswan version 4.3
- Support updating to Libreswan 4.3
- Other small improvements
- Update tests
2021-02-21 23:54:37 -06:00