mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-11-22 21:16:02 +03:00
Code Issues Projects Releases Wiki Activity
713 Commits 1 Branch 0 Tags 20 MiB
bf0f557416
Commit Graph

713 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
S. X. Liang
736877330b
Add AWS deployment template (#838) 
Add AWS deployment template

Authored-by: Scottpedia (https://github.com/Scottpedia)
 2020-08-26 22:20:04 -05:00
hwdsl2
fbbc7faf49 Update workflows 2020-08-09 18:14:56 -05:00
hwdsl2
f8f97e014a Cleanup 2020-08-09 14:49:02 -05:00
hwdsl2
d18801452d Add IPTables check 
- Add IPTables check to work around an issue with Raspberry Pi OS
  kernel updates
- Ref: #835
 2020-08-09 13:56:08 -05:00
hwdsl2
eca137a560 Remove Debian 8 
- Remove Debian 8 (LTS support ended on June 30, 2020)
- Cleanup
 2020-07-25 14:22:19 -05:00
hwdsl2
e381e06cb4 Update issue templates 2020-07-21 10:58:11 -05:00
hwdsl2
43aa8a22c5 Update issue templates 2020-07-19 19:44:25 -05:00
hwdsl2
bde54094b8 Add issue templates 2020-07-17 00:21:50 -05:00
hwdsl2
22b1bdac80 Update tests 2020-07-12 17:17:21 -05:00
hwdsl2
5e090770c8 Update IKEv2 script 
- Allow specifying custom DNS servers
- Add notes about the IKEv2 MOBIKE extension
- Cleanup
 2020-07-12 17:14:30 -05:00
hwdsl2
5d8932e411 Update IKEv2 docs 2020-07-12 14:42:04 -05:00
hwdsl2
6c88c7fd27 Fix for CentOS/RHEL 8 
- Fix firewalld detection when the setup script is run again
 2020-07-11 20:19:11 -05:00
hwdsl2
145fcbef1b Update workflows 2020-07-11 16:48:12 -05:00
hwdsl2
3b4a666e02 Update workflows 2020-07-09 01:41:52 -05:00
hwdsl2
0f7ea7610d Update docs 2020-07-07 12:17:09 -05:00
hwdsl2
8f42527e16 Update workflows 2020-07-07 12:16:55 -05:00
hwdsl2
5344da426f Update docs 2020-07-07 01:52:14 -05:00
hwdsl2
b686bbb0df Add workflows 
- Run automated tests on multiple OS using GitHub actions
 2020-07-07 01:51:04 -05:00
hwdsl2
bff3fe5a4b Fix for EPEL repo 
- Add workaround for EPEL repo issues
 2020-07-06 23:03:13 -05:00
hwdsl2
71dc5bab01 Update IKEv2 docs 
- Connecting multiple IKEv2 clients from behind the same NAT
  requires setting the "local ID" field to match the client name.
  Ref: https://github.com/libreswan/libreswan/issues/237
 2020-07-06 22:42:45 -05:00
hwdsl2
93e89919ac Update IKEv2 docs 2020-07-04 01:35:10 -05:00
hwdsl2
8283bdb32f CentOS/RHEL 8 fix 
- Fix fail2ban rules for nftables on CentOS/RHEL 8
 2020-07-02 17:52:13 -05:00
hwdsl2
012c19fed1 Update IKEv2 script 
- Allow specifying the validity period of client certificates
 2020-07-02 11:48:35 -05:00
hwdsl2
9ec99c8512 Update docs 2020-06-12 11:09:58 -05:00
hwdsl2
3faa8fd86e Improve DNS check 2020-06-12 11:05:42 -05:00
hwdsl2
50ac87c7b3 Update docs 2020-06-11 01:37:47 -05:00
hwdsl2
cf2ed17ae6 Update IKEv2 script 
- Improve error handling and move ikev2 config to the last step
 2020-06-11 01:32:31 -05:00
hwdsl2
2def2f2f20 Update docs 2020-06-08 02:01:17 -05:00
hwdsl2
8ea8bbfa4e Update IKEv2 docs 
- Add instructions for add/revoke client certificates
 2020-06-06 23:09:58 -05:00
hwdsl2
b7293e95da Cleanup 2020-06-05 11:00:23 -05:00
hwdsl2
f3a93e17fc Update IKEv2 docs 2020-06-05 00:44:33 -05:00
hwdsl2
333a63850e Update IKEv2 script 
- Support adding IKEv2 VPN clients
- Users can specify name for the first VPN client
 2020-06-05 00:29:15 -05:00
hwdsl2
99e87f5287 Update IKEv2 docs 2020-05-31 17:37:49 -05:00
hwdsl2
204904abf4 Update IKEv2 docs 2020-05-30 23:13:14 -05:00
hwdsl2
e1e1b67afd Improve IKEv2 setup 
- Use /etc/ipsec.d/ikev2.conf for IKEv2 configuration
- Allow running from inside a container, so that it can be used with:
  https://github.com/hwdsl2/docker-ipsec-vpn-server
 2020-05-30 23:09:32 -05:00
hwdsl2
5894ea2e1f Update IKEv2 script 
- Allow running from inside a container, so that it can be used with:
  https://github.com/hwdsl2/docker-ipsec-vpn-server
 2020-05-30 17:35:27 -05:00
hwdsl2
60d89c7181 Update docs 2020-05-30 02:52:49 -05:00
hwdsl2
9a9496b41b Update docs 2020-05-25 14:29:51 -05:00
hwdsl2
5fe5f04835 Update upgrade scripts 
- Ref: 71d67ae
 2020-05-25 13:40:04 -05:00
hwdsl2
71d67ae690 CentOS/RHEL fixes 
- Use nftables only if firewalld is active (CentOS/RHEL 8)
- Fix RHEL 7 server-optional repo names. See:
  https://access.redhat.com/articles/4599971
- Fix an issue where the codeready-builder repo cannot be enabled
  on EC2 (RHEL 8). Fixes #804.
 2020-05-24 15:07:08 -05:00
hwdsl2
a087be669f Cleanup 2020-05-24 00:14:05 -05:00
hwdsl2
d457ebd16d CentOS 8 fixes 
- Use nftables instead of iptables-services for CentOS 8
- Existing firewalld rules are now preserved during VPN setup,
  which will be saved as part of nftables rules
 2020-05-24 00:10:35 -05:00
hwdsl2
fab5d51d78 Cleanup 
- No need to apply IPTables rules for Ubuntu/Debian
 2020-05-23 17:57:38 -05:00
hwdsl2
54d0d9d37d Update docs 2020-05-21 00:22:05 -05:00
hwdsl2
0a0607feb9 Update IKEv2 script 
- Save client configuration to home folder
 2020-05-17 18:09:40 -05:00
hwdsl2
09c68fda01 Update docs 
- Add troubleshooting section for Android MTU/MSS issues
- Remove "Access VPN server's subnet". This seems to work fine using
  the default configuration, without additional IPTables rules
 2020-05-16 23:35:52 -05:00
hwdsl2
b028661f6f Update IKEv2 script 
- Raspberry Pi (Raspbian) kernels do not support MOBIKE
 2020-05-16 22:11:01 -05:00
hwdsl2
f38e2ea4f2 Cleanup 2020-05-14 23:07:47 -05:00
hwdsl2
d44b09d577 Update docs 2020-05-11 23:23:38 -05:00
hwdsl2
5bf8b86192 Update IKEv2 script 
- Fix CentOS detection
- Set MOBIKE question default to 'yes'
 2020-05-11 23:15:05 -05:00