mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-11-22 04:56:03 +03:00
Code Issues Projects Releases Wiki Activity
1,350 Commits 1 Branch 0 Tags 20 MiB
b7b3fc3169
Commit Graph

303 Commits

Author SHA1 Message Date
hwdsl2
16f5a1d81f Update Alpine Linux versions 
- Add Alpine Linux 3.18 and remove 3.16.
 2023-08-10 23:33:06 -05:00
hwdsl2
e79e64174c Update OS check 2023-06-14 23:52:54 -05:00
hwdsl2
4c5f4e8327 Update OS check 
- Update OS check to detect Amazon Linux 2023, which is not currently
  supported for use with this project.
  Ref: #1388
 2023-05-21 22:19:30 -05:00
hwdsl2
3f12b9583b Update Alpine Linux versions 
- Add Alpine Linux 3.17 and remove 3.15.
 2023-02-11 23:08:37 -06:00
hwdsl2
dc32e28f47 Cleanup 2023-01-13 00:36:49 -06:00
hwdsl2
c356a75bca Update docs 2023-01-04 18:58:29 -06:00
hwdsl2
2bd37ccf66 Cleanup 
- Save a redirect and make VPN setup slightly faster by using
  raw.githubusercontent.com directly instead of
  https://github.com/hwdsl2/setup-ipsec-vpn/raw/...
 2022-10-23 14:05:57 -05:00
hwdsl2
3dc675ba37 Add client validity option 
- For IKEv2 mode, add a new variable VPN_CLIENT_VALIDITY for specifying
  the client certificate validity period (in months). Must be an integer
  between 1 and 120. Default value is 120. Users can define it as an
  environment variable when setting up IKEv2 in auto mode, or when
  adding a new IKEv2 client using "--addclient".
 2022-10-16 00:45:45 -05:00
hwdsl2
cc99e18123 Cleanup 2022-09-24 18:56:27 -05:00
hwdsl2
32faed40d5 Improve IP check 
- Instead of finding the server's public IP, use the IP address
  on the default route if it is not a private IP. This makes VPN
  setup slightly faster by skipping IP detection.
- Add a fallback URL for finding the server's public IP.
- Cleanup
 2022-09-24 00:58:16 -05:00
hwdsl2
d2e9b5ff91 Cleanup 2022-08-27 21:51:19 -05:00
hwdsl2
56078b0a1e Add an option to skip IKEv2 setup 
- Add an option to skip IKEv2 setup when installing the IPsec VPN.
  Example: sudo VPN_SKIP_IKEV2=yes sh vpn.sh
- This allows users to set up an IKEv1-only VPN, or install IKEv2
  interactively using "sudo ikev2.sh" after VPN setup.
 2022-08-27 15:59:43 -05:00
hwdsl2
4995ec03f5 Improve OS support 
- Make the VPN setup scripts work on Kali Linux (based on Debian).
- Update IKEv2 helper script to check for OpenSSL 3 first when
  exporting the .p12 file.
 2022-08-10 23:25:58 -05:00
hwdsl2
e2f211c678 Improve OS detection 
- Improve OS detection and clean up
 2022-08-10 22:41:55 -05:00
hwdsl2
1dbf897500 Cleanup 
- Fix OS checking: Don't show errors for /etc/redhat-release.
- Fixes #1211.
 2022-08-09 19:34:32 -05:00
hwdsl2
200da23776 Add Oracle Linux 9 2022-07-30 09:31:27 -05:00
hwdsl2
10d54262fb Add CentOS 9 
- Add support for version 9 of CentOS Stream, RHEL, Rocky Linux
  and AlmaLinux.
 2022-07-30 02:59:49 -05:00
hwdsl2
35969d2bbb Update Alpine Linux versions 
- Add Alpine Linux 3.16 and remove 3.14.
 2022-06-19 22:41:21 -05:00
hwdsl2
0e24f8b086 Cleanup 2022-06-09 13:44:16 -05:00
hwdsl2
593f726c80 Cleanup 2022-06-07 22:48:40 -05:00
hwdsl2
9ab949d61d Cleanup 2022-05-10 09:03:00 -05:00
hwdsl2
c66ca577f3 Update links 
- Update links due to git.io deprecation.
  Ref: https://github.blog/changelog/2022-04-25-git-io-deprecation/
 2022-04-29 22:32:22 -05:00
hwdsl2
b2626dc921 Cleanup 2022-04-27 00:05:45 -05:00
hwdsl2
a1ab13d9a9 Improve VPN setup 
- Add fallback URLs for improved reliability
 2022-04-11 22:36:43 -05:00
hwdsl2
629b39d3b3 Add Oracle Linux 
- Add support for Oracle Linux 8 and 7.
 2022-03-20 23:10:11 -05:00
hwdsl2
beb756f1f2 Remove CentOS 8 
- Remove support for CentOS Linux 8, which is EOL.
  Ref: https://www.centos.org/centos-linux-eol/
 2022-03-08 21:39:19 -06:00
hwdsl2
6f4080bab4 Improve VPN setup 
- Refactor VPN scripts to move IKEv2 setup inside vpnsetup_*.sh
 2022-03-03 22:05:09 -06:00
hwdsl2
74b72b331a Improve VPN setup 
- vpnsetup.sh now automatically sets up IKEv2 as part of the
  IPsec VPN setup, same as quickstart.sh.
 2022-03-02 21:58:31 -06:00
hwdsl2
86d4f2f93c Improve VPN setup 
- Retry certain 'apt-get' and 'yum' commands on failure
 2022-02-08 23:24:46 -06:00
hwdsl2
2bb938416c Cleanup 2022-01-29 12:35:51 -06:00
hwdsl2
c78b398057 Update year 2022-01-02 00:09:03 -06:00
hwdsl2
603b198613 Add Alpine 3.15 
- Add support for Alpine Linux 3.15
- Install nss, nss-tools and nss-dev packages from edge for CVE-2021-43527
  Ref: https://lists.libreswan.org/pipermail/swan-announce/2021/000044.html
 2021-12-29 23:12:24 -06:00
hwdsl2
a47ced7899 Cleanup 2021-09-19 21:51:14 -05:00
hwdsl2
4a8e24a61c Cleanup 2021-09-18 14:58:06 -05:00
hwdsl2
c8db38f12b Add container check 
- Add check for LXC containers. Ref: #1014
 2021-09-18 00:53:15 -05:00
hwdsl2
819c537b5e Improve /dev/ppp check 
- Show a warning instead of exiting with an error for missing /dev/ppp,
  which could happen on Debian 11/10 with certain Linux kernels. Users
  can use the IKEv2 or IPsec/XAuth ("Cisco IPsec") mode to connect.
  Ref: https://git.io/vpndebian10
 2021-09-17 23:47:09 -05:00
hwdsl2
f14d903b97 Bugfix for Alpine Linux 
- Install coreutils on Alpine Linux for "mktemp"
 2021-09-14 00:49:13 -05:00
hwdsl2
ca411d90cd Cleanup 2021-09-11 22:26:55 -05:00
hwdsl2
3c557c7f22 Add Alpine Linux 2021-09-11 15:00:29 -05:00
hwdsl2
217bf2a237 Cleanup 
- Improve temporary folder creation
 2021-08-28 16:07:52 -05:00
hwdsl2
fc33e1c451 Cleanup 2021-08-19 01:40:38 -05:00
hwdsl2
87235014ad Add Debian 11 2021-08-15 00:46:25 -05:00
hwdsl2
cfd9128e3f Improve VPN setup 
- Wait for apt to be available
- Check for Wget and install it if not found
- Fallback to cURL if Wget fails
- Cleanup
 2021-08-13 22:15:11 -05:00
hwdsl2
920e7a5fc8 Improve VPN setup 
- Add a new wrapper script for IPsec VPN setup on all supported OS.
  The previous vpnsetup.sh has been moved to vpnsetup_ubuntu.sh.
 2021-08-13 02:11:49 -05:00
hwdsl2
c54484a910 Rename Ubuntu/Debian script 2021-08-13 01:20:07 -05:00
hwdsl2
a0409b4399 Cleanup 
- In rare cases, if a parent process traps SIGPIPE, the 'tr'
  command in the VPN setup scripts could output an error
  'tr: write error: Broken pipe'. This is a cosmetic error
  that does NOT affect the functionality of the scripts. This
  commit hides the error in such cases.
 2021-07-21 23:12:06 -05:00
hwdsl2
61025818bb Optimize binary size 
- Use the gcc "-s" option when compiling Libreswan. This reduces
  binary size by ~80%.
 2021-07-10 01:57:11 -05:00
hwdsl2
02b6d05c82 Update IPTables rules 
- Allow traffic from IKEv2 and IPsec/XAuth ("Cisco IPsec") clients to
  IPsec/L2TP clients. Ref: #983
- Cleanup
- Update docs
 2021-06-20 15:02:33 -05:00
hwdsl2
de2d49d3a6 Improve IKEv2 setup 
- Add a link to /usr/bin for the IKEv2 helper script
 2021-05-24 01:14:32 -05:00
hwdsl2
293e5d999a Improve IP detection 2021-05-11 09:59:18 -05:00