a tcp management port option to each OpenVPN server. Instead of rooting
through the OpenVPN logs once a minute for status updates, we now submit a
request to the management port to obtain informaiton. We probably need to
add a pf rule to prevent management ports from being accessed by unwanted
processes.
on data that wasn't necessarily a valid array.
Modify the OpenVPN code to stop passing the array index around and then
immediately obtaining a reference to the array entry. We already have a
reference to the data, just pass it instead. Also add some check to make
certain tap configuration steps more conditional. Make sure we remove
configuration and pid files when they are no longer required. Fix a few
other OpenVPN related bugs.
this information in the configuration as its not specific to the server.
It only contains the parameters ( a safe large prime number ) that is
used during a DH key exchange. Instead, we now use a system wide dh file
that is generated when the /var/etc/openvpn directory is setup. This
shaves 10 to 30 seconds off of the server config creation process. Also
correct a bug in the hack I added to work around carp related issues
that prevented filter re-configuration from working properly.
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this
commit were not being referenced.
This commit also splits out the certificate management components into a
new system menu item.
* Cleanup uneccesary eval() use in php code
* Invrease on javascript the limits to 299 to really allow 299 entries
* Remove limitiation of not being able to delete the first entry
* Make all the rows dynamic. Now a new alias will not show any rows unless the plus sign is clicked.
* Fix bug where OpenVPN aliases where being selected in case of Port aliases
* Cleanup and style(9) here and there
to centrally manage this data. There are no consumers at this time. This
interface allow for the following ...
Certificate Authority Manager:
- List certificates authorities
- Import existing certificate authority
- Create internal certificate authority
Certificate Manager:
- List certificates
- Import existing certificate
- Create internal certificate using an internal CA
- Generate certificate signing request for external CAs
- Process certificate signing response from external CAs
Certificate revocation is not currently implemented. The user system will
also be extended to allow for user specific certificate management in a
follow-up commit.
left arrow icon. Use the left and right arrow icons instead of the plus
and x icons for moving users and groups between selection lists in the
user and group manager screens.
