1
0
mirror of synced 2024-11-26 23:06:03 +03:00
Commit Graph

131 Commits

Author SHA1 Message Date
hwdsl2
e762e78160 Update IKEv2 docs
- Update instructions for Windows 11
2021-11-03 23:02:41 -05:00
hwdsl2
3433bc43d0 Update docs 2021-10-26 00:02:28 -05:00
hwdsl2
222536a647 Update docs 2021-10-10 14:31:17 -05:00
hwdsl2
5d73f845fe Update docs 2021-10-09 23:44:25 -05:00
LLZ
c455786b8f
Add alternative download sources for strongSwan Android VPN client (#1032) 2021-10-08 23:41:12 -05:00
hwdsl2
297f2739b9 Update docs 2021-09-26 22:28:49 -05:00
hwdsl2
742161124c Update docs 2021-08-15 11:38:27 -05:00
hwdsl2
6daacff466 Cleanup 2021-08-07 16:12:26 -05:00
hwdsl2
f18c3c0207 Update docs 2021-07-25 20:55:54 -05:00
hwdsl2
02bdbeb9a2 Update docs 2021-07-24 16:26:20 -05:00
hwdsl2
99dd5702e7 Update docs 2021-06-06 15:27:56 -05:00
hwdsl2
7376fc02d2 Update docs 2021-06-04 17:27:21 -05:00
hwdsl2
d6088751b9 Update docs 2021-06-01 02:31:14 -05:00
hwdsl2
55b468bb1f Update docs 2021-05-24 01:20:32 -05:00
hwdsl2
ee409250d8 Improve IKEv2 setup
- Increase RSA key size from the default 2048 bits to 3072 bits
- Use fixed delay between certutil calls, a random delay is not needed
- Update docs
2021-05-01 14:46:12 -05:00
hwdsl2
21a72d6232 Update docs 2021-04-30 09:42:36 -05:00
hwdsl2
9bd716dda8 Update docs 2021-04-26 22:59:30 -05:00
hwdsl2
5d5bcf6857 Update IKEv2 docs 2021-04-24 22:56:51 -05:00
hwdsl2
740f6d92d0 Update docs 2021-04-24 16:16:29 -05:00
hwdsl2
dc1bcb21f9 Update docs 2021-04-18 14:28:00 -05:00
hwdsl2
55aac9ad37 Update IKEv2 docs 2021-04-11 15:44:03 -05:00
hwdsl2
848ff7ba0a Update IKEv2 docs 2021-04-10 16:25:13 -05:00
hwdsl2
356a5bd130 Update docs 2021-03-29 15:05:45 -05:00
hwdsl2
191e0af9ff Update docs 2021-03-27 22:59:59 -05:00
hwdsl2
9437be8553 Update docs 2021-03-27 14:51:18 -05:00
hwdsl2
de2acaabc5 Update IKEv2 docs
- Add Linux instructions for IKEv2
2021-03-27 00:48:09 -05:00
hwdsl2
bf0f557416 Update docs 2021-03-21 14:48:44 -05:00
hwdsl2
ff38c87632 Update docs 2021-03-20 00:06:31 -05:00
hwdsl2
8fa3bfac80 Cleanup 2021-03-07 00:12:46 -06:00
hwdsl2
1abcd704be Update IKEv2 config
- Use the AES_GCM128 cipher for improved performance
  Ref: https://libreswan.org/wiki/Benchmarking_and_Performance_testing
- Update docs
2021-03-06 14:07:07 -06:00
hwdsl2
11f8502e3a Improve IKEv2 setup
- Use default key size (2048 bits) when generating key pairs using
  certutil. This significantly reduces IKEv2 setup time on servers
  with less powerful CPUs, such as Raspberry Pis, while still providing
  sufficient security.
- Update docs
2021-03-05 21:33:41 -06:00
hwdsl2
e7e9bf2dc0 Update docs 2021-03-01 10:12:46 -06:00
hwdsl2
ac86c8831c Update docs
- Add new section for advanced usage
- Clean up important notes section
- Update IKEv2 docs
2021-02-28 15:54:58 -06:00
hwdsl2
78a9f608e5 Update IKEv2 docs
- Update Windows IKEv2 client instructions. Ref: #940.
2021-02-21 14:57:37 -06:00
hwdsl2
12fdc8c11d Update docs 2021-02-10 10:26:18 -06:00
hwdsl2
ad1c635ca3 Update IKEv2 docs
- Android 6.0 and older devices require additional instructions
  for IKEv2. Ref: #930
2021-02-06 15:18:01 -06:00
hwdsl2
97624bf292 Update docs 2021-02-04 21:43:03 -06:00
hwdsl2
1327f9123e Update docs 2021-02-02 10:45:05 -06:00
hwdsl2
954b2acb7c Fix for IKEv2
- Fix an issue where multiple IKEv2 clients behind the same NAT cannot
  connect simultaneously to the VPN server. Note that before this fix,
  this issue only occurs when using an IP address (instead of a DNS name)
  for IKEv2 for the VPN server.
- This issue is found to be related to Libreswan's matching of local IDs
  when checking connections. A local ID with '@' prefix has type ID_FQDN,
  which does not match the ID_IPV4_ADDR type that the peer expects. This
  prevents connection switching from working correctly for the scenario
  above. Removing the prefix fixed the issue.
- Fixes #924
2021-02-01 21:42:31 -06:00
hwdsl2
c6182d76bb Update docs 2021-01-31 00:30:33 -06:00
hwdsl2
f6b8d13b05 Update docs 2021-01-30 14:31:37 -06:00
hwdsl2
cd588a07ae Update docs 2021-01-29 00:05:16 -06:00
hwdsl2
ec5dda8c1c Update IKEv2 docs
- Update Windows IKEv2 client instructions, with steps to import
  the .p12 file using certutil, and add the VPN connection using
  Windows PowerShell for improved security and performance.
2021-01-28 02:13:05 -06:00
hwdsl2
0ed9015a6b Update docs 2021-01-25 22:51:04 -06:00
hwdsl2
8c286df143 Cleanup 2021-01-24 20:01:40 -06:00
hwdsl2
7e20055671 Update docs 2021-01-24 15:55:26 -06:00
hwdsl2
2864473576 Update docs 2021-01-23 16:05:51 -06:00
hwdsl2
1c975c8410 Update docs 2021-01-21 23:11:20 -06:00
hwdsl2
0199df0369 Update IKEv2 docs 2021-01-21 01:39:15 -06:00
hwdsl2
7d9f2c6603 Fix IKEv2
- Fix an issue with IKEv2 disconnecting after one hour due to IKE SA
  expiration, by setting ikelifetime and salifetime to 24h.
  Ref: #913 #844 https://libreswan.org/man/ipsec.conf.5.html
2021-01-20 01:39:07 -06:00