mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-11-26 14:56:08 +03:00
Code Issues Projects Releases Wiki Activity
952 Commits 1 Branch 0 Tags 20 MiB
7e809c2042
Commit Graph

109 Commits

Author SHA1 Message Date
hwdsl2
1da1493f53 Cleanup 2022-02-10 21:49:49 -06:00
hwdsl2
86d4f2f93c Improve VPN setup 
- Retry certain 'apt-get' and 'yum' commands on failure
 2022-02-08 23:24:46 -06:00
hwdsl2
4ebe582d36 Update IKEv2 script 
- Fix function name
 2022-01-29 17:33:42 -06:00
hwdsl2
2270d66e02 Update IKEv2 script 
- Improve Libreswan version test
 2022-01-29 14:12:50 -06:00
hwdsl2
14af993d6a Update IKEv2 script 
- Cleanup
 2022-01-29 12:36:03 -06:00
hwdsl2
c2d7eef27c Update IKEv2 script 
- Cleanup
 2022-01-29 01:30:21 -06:00
hwdsl2
0f27ebbfad Update IKEv2 script 
- Update Libreswan version check
- Cleanup
 2022-01-23 00:05:44 -06:00
hwdsl2
abbf19f296 Update IKEv2 script 
- Sort IKEv2 client names when listing existing clients
- Cleanup
 2022-01-04 23:10:28 -06:00
hwdsl2
c25baaf9a9 Cleanup 2022-01-04 23:01:14 -06:00
hwdsl2
3c22bbbeb6 Update IKEv2 script 
- Fix IKEv2 "password is incorrect" issue when using Ubuntu 21.10
  Fixes #1073. Ref: #1048.
- Note: Ubuntu 21.10 is NOT a supported OS for the VPN setup scripts.
  Please use e.g. Ubuntu 20.04 instead.
  Ref: https://github.com/hwdsl2/setup-ipsec-vpn#requirements
 2022-01-02 21:52:47 -06:00
hwdsl2
c78b398057 Update year 2022-01-02 00:09:03 -06:00
hwdsl2
a323b13512 Update IKEv2 script 
- Update Ubuntu 18.04 NSS fix with newer package versions.
  Ref: https://ubuntu.com/security/CVE-2021-43527
 2021-12-29 20:28:15 -06:00
hwdsl2
bbdb9b13f9 Update IKEv2 script 
- Add Alpine Linux 3.15
 2021-12-29 18:48:47 -06:00
hwdsl2
bc312e0736 Update IKEv2 script 
- Show client certificate statuses when listing IKEv2 clients
- Fixes #1038
 2021-11-07 00:13:42 -05:00
hwdsl2
dccfa65a08 Update IKEv2 script 
- Minor fix
 2021-10-10 14:30:34 -05:00
hwdsl2
a47ced7899 Cleanup 2021-09-19 21:51:14 -05:00
hwdsl2
1f9939b8cc Update IKEv2 script 
- Install uuidgen on Alpine Linux
 2021-09-14 00:24:27 -05:00
hwdsl2
ca411d90cd Cleanup 2021-09-11 22:26:55 -05:00
hwdsl2
3c557c7f22 Add Alpine Linux 2021-09-11 15:00:29 -05:00
hwdsl2
217bf2a237 Cleanup 
- Improve temporary folder creation
 2021-08-28 16:07:52 -05:00
hwdsl2
edd124ed9c Update IKEv2 script 
- Set display name under server description in iOS VPN settings
  to "IKEv2 VPN"
- Ref: #995. Thanks @Mattz-P!
 2021-08-22 10:55:57 -05:00
hwdsl2
665349336d Update IKEv2 script 
- Cleanup
 2021-08-22 00:42:21 -05:00
hwdsl2
fc33e1c451 Cleanup 2021-08-19 01:40:38 -05:00
hwdsl2
8e570129b2 Cleanup 2021-08-14 00:26:27 -05:00
hwdsl2
21dc90e656 Update IKEv2 script 
- Cleanup
 2021-08-11 00:03:25 -05:00
hwdsl2
6daacff466 Cleanup 2021-08-07 16:12:26 -05:00
hwdsl2
ab50fa7264 Update IKEv2 script 
- Minor improvements to client name input prompts. Abort and exit
  if the user presses Enter without specifying a client name.
- Cleanup
 2021-07-31 23:36:43 -05:00
hwdsl2
c928068a20 Update IKEv2 script 
- Cleanup
 2021-07-31 15:31:13 -05:00
hwdsl2
2c3f4e20a5 Update IKEv2 script 
- Cleanup
 2021-07-30 08:47:10 -05:00
hwdsl2
2e17ef68ce Update OS detection 2021-07-27 00:59:15 -05:00
hwdsl2
8d26e0b6c9 Update IKEv2 script 
- Improve checking for MOBIKE support. Linux kernels on QNAP systems
  do not support MOBIKE.
  Ref: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/247
- Switch to use /etc/ipsec.d/.vpnconfig to store generated password
  for IKEv2 client config files, instead of vpnclient.p12.password.
  Migrate to use .vpnconfig if the older config file is found.
  Ref: 45ee41d
 2021-07-25 20:55:40 -05:00
hwdsl2
45ee41d930 Update IKEv2 script 
- Improve IKEv2 setup: Save generated password for IKEv2 client
  configuration files to vpnclient.p12.password, so that it can
  be re-used for later runs of the helper script. Previously,
  a different password is generated each time the script is run.
 2021-07-24 15:58:48 -05:00
hwdsl2
855a285cff Update IKEv2 script 
- Cleanup
 2021-07-23 00:22:51 -05:00
hwdsl2
a0409b4399 Cleanup 
- In rare cases, if a parent process traps SIGPIPE, the 'tr'
  command in the VPN setup scripts could output an error
  'tr: write error: Broken pipe'. This is a cosmetic error
  that does NOT affect the functionality of the scripts. This
  commit hides the error in such cases.
 2021-07-21 23:12:06 -05:00
hwdsl2
7afbca94a5 Cleanup 2021-07-17 00:52:04 -05:00
hwdsl2
5d43404beb Update IKEv2 script 
- Simplify IKEv2 setup: Use an auto-generated password to protect
  client configuration files. Remove the steps for user input.
- Cleanup
 2021-07-13 22:09:25 -05:00
hwdsl2
a90caf428b Update IKEv2 script 
- Add support for Alpine Linux in a Docker container. See:
  https://github.com/hwdsl2/docker-ipsec-vpn-server
 2021-07-12 23:41:33 -05:00
hwdsl2
64eb0e1f49 Cleanup 2021-06-09 00:42:28 -05:00
hwdsl2
811ce6a9aa Update IKEv2 script 
- Check certificate status when exporting a client configuration
  using --exportclient
 2021-06-01 23:35:19 -05:00
hwdsl2
ea52ab4683 Update IKEv2 script 
- New: Revoke a client certificate using the helper script. Users can
  also manually revoke a client certificate, see https://git.io/ikev2
- Check for certificate validity when exporting client configurations
- Delete CRL from IPsec database when removing IKEv2
- Cleanup
 2021-06-01 02:30:51 -05:00
hwdsl2
3014143e15 Update IKEv2 script 
- Advanced users can specify the server's IP address using variable
  VPN_PUBLIC_IP instead of auto-detect
 2021-05-11 09:59:29 -05:00
hwdsl2
ee409250d8 Improve IKEv2 setup 
- Increase RSA key size from the default 2048 bits to 3072 bits
- Use fixed delay between certutil calls, a random delay is not needed
- Update docs
 2021-05-01 14:46:12 -05:00
hwdsl2
e850fca9c3 Update IKEv2 script 
- Remove MODP1024 from IKEv2 ciphers for improved security. Windows users
  will need to make a one-time registry change before connecting for the
  first time. Refer to https://git.io/ikev2.
 2021-04-24 22:34:48 -05:00
hwdsl2
ac0bde54bb New Libreswan version 
- Use new Libreswan version 4.4
- Support updating to Libreswan 4.4
- Other small improvements and cleanup
 2021-04-24 16:15:05 -05:00
hwdsl2
d90c6121b6 Improve OS detection 2021-04-20 00:09:00 -05:00
hwdsl2
10f09bbab6 Cleanup 2021-04-18 14:27:52 -05:00
hwdsl2
f35ea9ed0d Update IKEv2 script 
- Improve output for auto mode when custom options are specified
 2021-04-11 13:53:38 -05:00
hwdsl2
5076f9ec03 Update IKEv2 script 
- Add an option to specify the name of the first IKEv2 client when
  running the script in auto mode. The default is "vpnclient".
- Cleanup
 2021-04-10 16:24:49 -05:00
hwdsl2
7ac343db4d Update IKEv2 script 
- Improve output
 2021-03-30 23:47:59 -05:00
hwdsl2
e6c2cbcd96 Update IKEv2 script 2021-03-28 23:39:04 -05:00