diff --git a/usr/local/www/vpn_openvpn_client.php b/usr/local/www/vpn_openvpn_client.php
index 2f46ca62bd..faf89f9812 100644
--- a/usr/local/www/vpn_openvpn_client.php
+++ b/usr/local/www/vpn_openvpn_client.php
@@ -1171,7 +1171,7 @@ if ($savemsg)
$i++;
endforeach;
?>
-
+
diff --git a/usr/local/www/vpn_openvpn_server.php b/usr/local/www/vpn_openvpn_server.php
index fea1531d9f..b049c817f9 100644
--- a/usr/local/www/vpn_openvpn_server.php
+++ b/usr/local/www/vpn_openvpn_server.php
@@ -89,7 +89,7 @@ if ($_GET['act'] == "del") {
$savemsg = gettext("Server successfully deleted")." ";
}
-if($_GET['act']=="new"){
+if($_GET['act']=="new") {
$pconfig['autokey_enable'] = "yes";
$pconfig['tlsauth_enable'] = "yes";
$pconfig['autotls_enable'] = "yes";
@@ -104,7 +104,7 @@ if($_GET['act']=="new"){
$pconfig['digest'] = "SHA1";
}
-if($_GET['act']=="edit"){
+if($_GET['act']=="edit") {
if (isset($id) && $a_server[$id]) {
$pconfig['disable'] = isset($a_server[$id]['disable']);
@@ -370,7 +370,7 @@ if ($_POST) {
if ($_POST['disable'] == "yes")
$server['disable'] = true;
$server['mode'] = $pconfig['mode'];
- if (!empty($pconfig['authmode']))
+ if (!empty($pconfig['authmode']) && (($pconfig['mode'] == "server_user") || ($pconfig['mode'] == "server_tls_user")))
$server['authmode'] = implode(",", $pconfig['authmode']);
$server['protocol'] = $pconfig['protocol'];
$server['dev_mode'] = $pconfig['dev_mode'];
@@ -547,7 +547,7 @@ function mode_change() {
document.getElementById("inter_client_communication").style.display="none";
break;
case "server_user":
- case "server_tls_user":
+ case "server_tls_user":
document.getElementById("authmodetr").style.display="";
document.getElementById("client_opts").style.display="";
document.getElementById("remote_optsv4").style.display="none";
@@ -795,22 +795,26 @@ if ($savemsg)
- =gettext("Backend for authentication");?>
-
-
-
- =gettext("Backend for authentication");?>
+
+
+ $auth_server):
- $selected = "";
- if (in_array($auth_server_key, $authmodes))
- $selected = "selected=\"selected\"";
- ?>
- >=$auth_server['name'];?>
-
-
-
-
+ // If no authmodes set then default to selecting the first entry in auth_servers
+ if (empty($authmodes[0]) && !empty(key($auth_servers)))
+ $authmodes[0] = key($auth_servers);
+
+ foreach ($auth_servers as $auth_server_key => $auth_server):
+ $selected = "";
+ if (in_array($auth_server_key, $authmodes))
+ $selected = "selected=\"selected\"";
+ ?>
+ >=$auth_server['name'];?>
+
+
+
+
=gettext("Protocol");?>
@@ -824,28 +828,28 @@ if ($savemsg)
>=$prot;?>
-
+
=gettext("Device Mode"); ?>
-
- >=$device;?>
-
-
-
-
+
+ >=$device;?>
+
+
+
+
=gettext("Interface"); ?>
@@ -994,20 +998,20 @@ if ($savemsg)
>=$cert['descr'] . $caname . $inuse . $revoked;?>
@@ -1071,13 +1075,13 @@ if ($savemsg)
$desc):
- $selected = "";
- if ($name == $pconfig['crypto'])
- $selected = " selected=\"selected\"";
+ $selected = "";
+ if ($name == $pconfig['crypto'])
+ $selected = " selected=\"selected\"";
?>
- >
- =htmlspecialchars($desc);?>
-
+ >
+ =htmlspecialchars($desc);?>
+
@@ -1089,13 +1093,13 @@ if ($savemsg)
$desc):
- $selected = "";
- if ($name == $pconfig['digest'])
- $selected = " selected=\"selected\"";
+ $selected = "";
+ if ($name == $pconfig['digest'])
+ $selected = " selected=\"selected\"";
?>
- >
- =htmlspecialchars($desc);?>
-
+ >
+ =htmlspecialchars($desc);?>
+
@@ -1108,13 +1112,13 @@ if ($savemsg)
$desc):
- $selected = "";
- if ($name == $pconfig['engine'])
- $selected = " selected=\"selected\"";
+ $selected = "";
+ if ($name == $pconfig['engine'])
+ $selected = " selected=\"selected\"";
?>
- >
- =htmlspecialchars($desc);?>
-
+ >
+ =htmlspecialchars($desc);?>
+
@@ -1128,11 +1132,11 @@ if ($savemsg)
Do Not Check
$depthdesc):
- $selected = "";
- if ($depth == $pconfig['cert_depth'])
- $selected = " selected=\"selected\"";
+ $selected = "";
+ if ($depth == $pconfig['cert_depth'])
+ $selected = " selected=\"selected\"";
?>
- >= $depthdesc ?>
+ >= $depthdesc ?>
@@ -1177,7 +1181,7 @@ if ($savemsg)
"communications between this server and client " .
"hosts expressed using CIDR (eg. 10.0.8.0/24). " .
"The first network address will be assigned to " .
- "the server virtual interface. The remaining " .
+ "the server virtual interface. The remaining " .
"network addresses can optionally be assigned " .
"to connecting clients. (see Address Pool)"); ?>
@@ -1351,11 +1355,11 @@ if ($savemsg)
$cmodedesc):
- $selected = "";
- if ($cmode == $pconfig['compression'])
- $selected = " selected=\"selected\"";
+ $selected = "";
+ if ($cmode == $pconfig['compression'])
+ $selected = " selected=\"selected\"";
?>
- >= $cmodedesc ?>
+ >= $cmodedesc ?>
@@ -1690,7 +1694,7 @@ if ($savemsg)
=gettext("A NetBIOS Scope ID provides an extended naming " .
- "service for NetBIOS over TCP/IP. The NetBIOS " .
+ "service for NetBIOS over TCP/IP. The NetBIOS " .
"scope ID isolates NetBIOS traffic on a single " .
"network to only those nodes with the same " .
"NetBIOS scope ID"); ?>.
@@ -1785,8 +1789,8 @@ if ($savemsg)
- =gettext("Verbosity level");?>
-
+ =gettext("Verbosity level");?>
+
$verb_desc):
@@ -1803,7 +1807,7 @@ if ($savemsg)
default -4 -- =gettext("Normal usage range"); ?>.
5 -- =gettext("Output R and W characters to the console for each packet read and write, uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP packets"); ?>.
6 -11 -- =gettext("Debug info range"); ?>.
-
+
@@ -1880,7 +1884,7 @@ if ($savemsg)
$i++;
endforeach;
?>
-
+
@@ -1914,10 +1918,10 @@ tuntap_change();
/* local utility functions */
function set_checked($var,& $chk) {
- if($var)
- $chk = "checked=\"checked\"";
- else
- $chk = "";
+ if($var)
+ $chk = "checked=\"checked\"";
+ else
+ $chk = "";
}
?>