mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-11-30 00:26:04 +03:00
Code Issues Projects Releases Wiki Activity
366 Commits 1 Branch 0 Tags 20 MiB
4c47137e7f
Commit Graph

78 Commits

Author SHA1 Message Date
hwdsl2
43dbac6c3c Update docs 2018-02-11 00:37:00 -06:00
hwdsl2
70c6d6b540 Various clean up 2017-11-01 01:01:49 -05:00
hwdsl2
68a6375399 Update docs 2017-10-27 01:02:03 -05:00
Any
e316c8cdf8 Troubleshooting error 728 (#250) 
* Update docs
 2017-10-27 00:35:51 -05:00
hwdsl2
087306dbf5 Update docs 2017-10-02 21:55:21 -05:00
hwdsl2
f8414c40f6 Update images 
- Update VPN properties screenshots for MS-CHAP v2
 2017-09-25 18:59:04 -05:00
hwdsl2
bc0324f957 Improve IKEv2 docs 
- Make it clear how to use the VPN server's DNS name to connect
 2017-06-03 14:53:45 -05:00
hwdsl2
47a9015135 Improve VPN ciphers 
- Add 3des-sha2 to allowed VPN ciphers, and clean up
 2017-06-02 14:24:55 -05:00
hwdsl2
654ddcdfa4 Update docs 2017-05-30 15:01:26 -05:00
hwdsl2
d437f7044d Update docs 
- Add troubleshooting notes for Chromebook users
- Closes #147
 2017-05-16 16:05:25 -05:00
hwdsl2
7aeae4c8b8 Update docs 2017-05-05 10:37:45 -05:00
hwdsl2
4c6aa6e3a1 Update docs 2017-05-02 16:55:54 -05:00
hwdsl2
f58afbc84b Update VPN ciphers 
- Add aes256-sha2_512 to the list of allowed ciphers
- Required for Android 7.1.x and (possibly) Chromebook
 2017-04-12 10:17:08 -05:00
hwdsl2
fec47196d6 Update docs 2017-03-19 22:10:49 -05:00
hwdsl2
03007079e6 Improve VPN IPs 
- Use %defaultroute and iptables MASQUERADE, no need to detect private IP
- Use %any for the first field of ipsec.secrets, instead of public IP
- As a result, the VPN server should now better adapt to IP changes.
 2017-02-10 18:00:29 -06:00
hwdsl2
f7961242e4 Update docs 2017-02-10 10:32:24 -06:00
hwdsl2
e6b9208eeb Update docs 2017-02-07 21:12:31 -06:00
hwdsl2
8c0940f63b Update docs 
- Improve IKEv2 docs. The strongSwan Android VPN client requires
  an "IP address" in the VPN server certificate's subjectAltName field
  in addition to "DNS name", when connecting using the server's IP.
  The certutil commands have been updated to add this field.
- Other improvements to docs
 2017-02-05 14:48:11 -06:00
hwdsl2
c8d8730fd0 Minor fix 
[ci skip]
 2017-01-26 17:42:13 -06:00
hwdsl2
758f0e1418 Fix IKEv2 docs 
- Windows 8.x and 10 require the IKEv2 machine certificate to have
  "Client Auth" EKU in addition to "Server Auth". Otherwise it gives
  "Error 13806: IKE failed to find valid machine certificate..."
- The IKEv2 documentation has been updated to fix this issue
- Also, this Libreswan wiki page may need to be updated. @letoams
  https://libreswan.org/wiki/VPN_server_for_remote_clients_using_IKEv2
- Ref: #106. Thanks @evil-shrike!
 2017-01-26 17:15:43 -06:00
hwdsl2
a156a1f5f3 Update docs 
[ci skip]
 2017-01-25 13:12:47 -06:00
hwdsl2
0c8f117fd9 Update docs 
[ci skip]
 2017-01-21 12:13:27 -06:00
hwdsl2
63697214b4 Improve VPN ciphers 
- Consolidate VPN ciphers for "ike=" and "phase2alg=" in ipsec.conf.
 2017-01-18 23:01:09 -06:00
hwdsl2
e40dd6219b Bugfix 
- Libreswan 3.19 removed MODP1024 from the ike= default list,
  which breaks compatibility with Android 5.x and others
- This commit explicitly adds MODP1024 back to the ike= list
- Fixes #101. Thanks @keijodputt!
 2017-01-18 20:10:43 -06:00
hwdsl2
5cbadb643b Update docs 
[ci skip]
 2017-01-18 16:31:42 -06:00
hwdsl2
c8bfb7c741 Update docs 
[ci skip]
 2017-01-18 01:50:43 -06:00
hwdsl2
e767b462a5 Fix docs 
- Further improve IKEv2 config for Windows 7/8/10
- Ref: 9455b19
 2017-01-17 11:31:40 -06:00
hwdsl2
9455b19119 Fix docs 
- Libreswan 3.19 requires configuration changes in ipsec.conf
  for IKEv2, so that Windows 7/8/10 clients can connect
 2017-01-17 02:22:46 -06:00
hwdsl2
2727f1a1a0 Update year 2017-01-16 22:13:13 -06:00
hwdsl2
3735530015 Update docs 
[ci skip]
 2017-01-16 17:27:08 -06:00
hwdsl2
e41cf78b53 Update docs 
[ci skip]
 2017-01-03 23:31:56 -06:00
hwdsl2
e6ebdeaaf8 Update docs 
[ci skip]
 2016-12-30 16:24:47 -06:00
hwdsl2
af1af539aa Update docs 
[ci skip]
 2016-11-23 20:19:05 -06:00
hwdsl2
6d99a01b0a Remove SHA2 workaround 
- Libreswan 3.18 and higher prefers sha2_512 over sha2_256
- The 'sha2-truncbug=yes' workaround is no longer needed
- Ref: https://libreswan.org/wiki/FAQ#Configuration_Matters
 2016-11-06 14:40:30 -06:00
hwdsl2
75bcdfae75 Update docs 
[ci skip]
 2016-10-29 18:36:58 -05:00
hwdsl2
13db1d4a7f Improve Linux instructions 
- Add option "noipdefault" to fix Linux clients behind NAT
- Specify VPN username and password in the config file
- Combine the Ubuntu/Debian and CentOS/Fedora sections
- [ci skip]
 2016-10-25 18:08:36 -05:00
hwdsl2
44eb55f9f3 Update docs 
[ci skip]
 2016-10-24 09:53:07 -05:00
hwdsl2
5193d199ca Improve Linux client instructions 
[ci skip]
 2016-10-21 09:05:33 -05:00
hwdsl2
2e7913bd44 Update docs 
[ci skip]
 2016-10-15 14:49:20 -05:00
hwdsl2
65f1bcd726 Update docs 
[ci skip]
 2016-10-08 15:03:06 -05:00
hwdsl2
1f7d9f1687 Update IKEv2 howto 
[ci skip]
 2016-09-28 14:58:04 -05:00
hwdsl2
6d3b7239de Update docs 
[ci skip]
 2016-09-28 00:00:19 -05:00
hwdsl2
b8bc702f21 Update docs 
[ci skip]
 2016-09-18 17:30:23 -05:00
hwdsl2
56a96603f9 Update docs 
[ci skip]
 2016-09-11 16:16:52 -05:00
hwdsl2
77d0f0bc93 Add IKEv2 how to 
[ci skip]
 2016-08-30 11:35:24 -05:00
hwdsl2
72d0f7ff52 Clean up docs 
[ci skip]
 2016-08-26 15:48:32 -05:00
hwdsl2
dad10f7ad7 Update docs 
- Fix instructions for Shrew Soft client
- [ci skip]
 2016-08-25 23:36:34 -05:00
hwdsl2
5064f3a6d6 Update docs 
- Improve Android 6 workaround
- [ci skip]
 2016-08-19 01:52:13 -05:00
hwdsl2
b27f58f785 Update README.md 
[ci skip]
 2016-08-15 01:13:15 -05:00
hwdsl2
28a8d496f0 Update docs 
[ci skip]
 2016-08-12 16:34:57 -05:00