Commit Graph

12820 Commits

Author SHA1 Message Date
jim-p
9fb19cab96 Misc encoding/display issues in the Load Balancer code 2015-09-08 15:15:58 -04:00
jim-p
5a33a6fb8a Encode server name in OpenVPN widget 2015-09-08 15:11:40 -04:00
jim-p
64c50ecd23 Encode auth server name before display. 2015-09-04 10:10:32 -04:00
jim-p
38f147d667 Encode alias description details before attempting to display them. 2015-09-01 12:17:37 -04:00
jim-p
1782b45d4b Encode the rule description before displaying back to the user in an error when attempting to delete an in-use alias. 2015-09-01 12:17:02 -04:00
jim-p
2061542951 Encode OpenVPN descriptions before display on OpenVPN status 2015-08-27 11:03:10 -04:00
jim-p
d4ff79ed0e Encode the OpenVPN server description before display on OpenVPN status 2015-08-27 10:38:44 -04:00
jim-p
5bf478ac2e Ensure the current RRD graph category is encoded before display 2015-08-27 09:29:40 -04:00
jim-p
609d2870e5 Fix titles in status.php, filename can't have a slash. 2015-08-20 10:02:15 -04:00
jim-p
1b70f82ed8 A few misc updates to status.php:
* Include "ipsec statusall" output
* Include the last 100 lines of the IPsec log
* Increase system log to 500 lines
* Fix captive portal rule display to include the zone name not ID number
2015-08-20 09:50:37 -04:00
jim-p
c617ffe7a4 Fix source address selection on Test Port to handle VIPs properly. 2015-08-18 14:12:54 -04:00
jim-p
1ce2e5d253 Fix a potential XSS in voucher testing. 2015-08-18 09:35:56 -04:00
jim-p
f6f7f1c244 Add support for LDAP RFC2307 style group membership. Implements #4923
To activate, check the box for RFC2307 in the LDAP server settings and fill in the group object class (typically posixGroup).
2015-08-13 14:57:45 -04:00
jim-p
9a0c4cd22f Provide an LDAP server timeout field. Default to 25 seconds. Part of ticket #3383
Previous default was ~1m20sec.
2015-08-13 12:54:31 -04:00
jim-p
709c2f99f1 Fix GUI auth from RADIUS to grab group names from the Class attribute. Implements #935
The RADIUS server must populate the Class attribute with a string, semicolon-separated, of user groups. Similar to LDAP, local groups must exist with matching names, and privileges are determined by the local matching groups.
2015-08-12 12:10:46 -04:00
Chris Buechler
fc3e3bdbe0 remove more old, unused platform stuff 2015-07-30 00:49:21 -05:00
Chris Buechler
fcf8ac0ab7 Fix killing of individual states for IPv6. Ticket #4906 2015-07-30 00:37:48 -05:00
Chris Buechler
ffb3d9d53a fix whitespace 2015-07-30 00:28:43 -05:00
Chris Buechler
38e7c09304 Use the appropriate source and dest IPs for all state types. Ticket #4907 2015-07-30 00:16:15 -05:00
jim-p
66f278b4c9 Add "sockstat" output to status.php 2015-07-29 11:40:25 -04:00
Renato Botelho
5898371a37 Move cleargpt.sh and cleargmirror.sh scripts to main repo 2015-07-29 11:48:41 -03:00
Chris Buechler
9a2bec1262 Add 'any' option for peer ID, for mobile IPsec scenarios where you can't or don't want to check peer ID. 2015-07-25 16:58:37 -05:00
Chris Buechler
47f802694a Remove "auto", it's just a synonym for IKEv2. Ticket #4873 2015-07-23 14:43:41 -05:00
Chris Buechler
c03512f5b2 include vpn.inc so IPsec CRL reload works. require_once filter.inc in
vpn.inc for callers there that haven't already included it.
2015-07-23 14:34:33 -05:00
Chris Buechler
b0deba232b Most of the flowtable bits were removed some time ago, take out the last of them too. 2015-07-23 00:32:14 -05:00
Chris Buechler
fa944e1dde When a CRL is updated, refresh strongswan's CRLs. 2015-07-23 00:20:46 -05:00
Chris Buechler
85cf3f4f78 Merge pull request #1775 from phil-davis/Interfaces-Widget-2-2 2015-07-22 21:59:01 -05:00
Phil Davis
241c48ef27 Add isset check for strictcrlpolicy
To be consistent with the checks in the rest of this code.
2015-07-22 21:57:54 -05:00
Chris Buechler
7361628b2a Add IPsec advanced option for strict CRL checking 2015-07-22 15:03:20 -05:00
Chris Buechler
cc31dc7a19 fix typo 2015-07-22 13:32:35 -05:00
Phil Davis
b3bcc72952 Handle IPsec Advanced Settings save before IPsec is enabled
If the Advanced Settings are saved before any other IPsec is set up then $config['ipsec'] can be just the empty string. As a result you can get:
a) If you select some debug settings then those are not saved. The code to save those settings was only executed when $config['ipsec'] was already an array. Actually the code already did the necessary "if isset() then unset()" stuuf. So I just took the the "if is_array()" away from the code block.

b) Some potential unset() can go wrong with errors like:
Fatal error: Cannot unset string offsets in /usr/local/www/vpn_ipsec_settings.php on line 168
This is corrected by adding more "if (isset())" checks.

Fixes Redmine #4865
Conflicts:
	usr/local/www/vpn_ipsec_settings.php
2015-07-22 13:24:24 -05:00
Phil Davis
d97992c75c Interfaces widget use more obscure separator RELENG_2_2
Redmine #4859 fix for RELENG_2_2
2015-07-22 10:53:57 +05:45
jim-p
685c323cb1 Add "netstat -ni" to status.php 2015-07-21 08:44:12 -04:00
jim-p
58fb43263a Allow pre-filling (but no automatic action) of the download filename on exec.php. Setup a link to download the status output.tgz in status.php 2015-07-21 08:43:17 -04:00
doktornotor
99f89b047c Fix caps 2015-07-19 08:09:41 -03:00
doktornotor
31268c873b Bug #4551 - consistent usage of Forwarder/Resolver across the WebGUI
Clarify that this applies to DNS Resolver as well. Update the translations template.
2015-07-19 08:09:23 -03:00
doktornotor
bc8cf469df Bug #4551 - consistent usage of Forwarder/Resolver across the WebGUI
Clarify that this applies to DNS Resolver as well.
2015-07-19 08:09:08 -03:00
doktornotor
f9e30314cb Bug #4551 - consistent usage of Forwarder/Resolver across the WebGUI
Clarify that this applies to DNS Resolver as well.
2015-07-19 08:07:26 -03:00
Renato Botelho
c4f9f44941 Merge pull request #1756 from phil-davis/traffic-graph-widget-2-2 2015-07-18 13:12:14 -03:00
doktornotor
6d854579eb Fix Firewall - Aliases GUI inconsistencies for URL Table type aliases
The GUI should show descriptions according to what's selected from the dropdown, but currently does not for URL Table (IPs) and URL Table (Ports) type of aliases.

This is for RELENG_2_2 branch.
2015-07-17 22:37:02 +02:00
Chris Buechler
d6908784ee Contrary to some reports this is actually usable in some cases, just not
mandatory. Revert "myid_data and peerid_data fields are not relevant with asn1dn."

This reverts commit b8754cc85d.
2015-07-16 17:22:59 -05:00
Chris Buechler
b8754cc85d myid_data and peerid_data fields are not relevant with asn1dn. 2015-07-16 17:16:15 -05:00
Phil Davis
693c13cb74 Restrict serial ports glob to cua followed by alpha
Improve this a little more to match only alpha after /dev/cua (/dev/cuau for example)
2015-07-16 16:03:02 -03:00
Phil Davis
3eed76d729 Make serial ports glob cope with many more possibilities
It originally coped with things like cuau1 cuau1.1
Then I made it cope with things like cuau1 cuau11 but it stopped working for cuau1.1
This one copes with:
cuau1
cuau1.1
cuau1.11
cuau11
cuau11.1
cuau11.11
That should allow for all sorts of reasonable device name files without matching other stuff in /dev (like cuau1.init cuau1.lock) that we need to ignore.
Please think if I have covered the bases here.
2015-07-16 16:03:02 -03:00
Chris Buechler
088af065f5 Remove old, unused NetUtils.js 2015-07-16 11:44:47 -05:00
Phil Davis
dea04167b4 Display any advanced DHCP server settings RELENG_2_2
Cherry pick of 90ad3a76ed
2015-07-15 22:25:12 +05:45
Renato Botelho
36b622c3ae Merge pull request #1754 from phil-davis/cr_2_2 2015-07-15 13:27:53 -03:00
Phil Davis
3e41547819 Cancel button after input error for RELENG_2_2 2015-07-15 21:41:33 +05:45
Phil Davis
4433cf85f6 Firewall Aliases Import display error message for invalid alias name
If you open firewall_aliases_import and enter just an invalid Alias Name (e.g. a$b) and press save or press save with all fields empty, then the screen redraws but the input error(s) is not displayed.
This fixes it.
2015-07-15 12:04:18 -03:00
Phil Davis
043e61ee1b Firewall Aliases Edit ensure input_addresses array exists
If you click "+" to add an alias, then press Save without entering anything, you get:
Warning: Invalid argument supplied for foreach() in /usr/local/www/firewall_aliases_edit.php on line 402
as well as the various messages related to $input_errors.
This change ensures that $input_addresses array always exists (even if it has no real entries) so that the foreach() warning does not happen.
2015-07-15 12:01:13 -03:00