Commit Graph

4662 Commits

Author SHA1 Message Date
Matthew Grooms
fe787fc761 Modify the OpenVPN server configuration to allow the DH parameter length
to be specified. Upgraded 1.2.x configurations will default to 1024 bits.
2008-09-09 20:32:56 +00:00
Matthew Grooms
2ff19bfd40 Move the 'advanced users only' notice into the tab body so the tab headers
are not displaced by this message.
2008-09-09 18:54:57 +00:00
Matthew Grooms
77446bebd4 Whitespace and minor bug fixes for system general setup page. 2008-09-09 18:49:32 +00:00
Ermal Luçi
69e5a8be8d Rename interfaces_wan_configure to interface_configure now that it is used for all assigned interface configuration. 2008-09-09 11:08:02 +00:00
Ermal Luçi
4634cb480e Merge interfaces_wlan.inc into interfaces.php there is no need for the to be different files so when one is edited the other can be broken. 2008-09-09 10:41:54 +00:00
Ermal Luçi
998552f806 NOTE: Part of the interfaces history is located on interfaces_lan.php and interfaces_opt.php. 2008-09-09 07:45:05 +00:00
Ermal Luçi
18961b4e84 Catch up with file rename. 2008-09-09 07:39:38 +00:00
Ermal Luçi
01eb687d7c Catch up with file rename. 2008-09-09 07:38:50 +00:00
Ermal Luçi
1e257f479a Oops, this is a test and not an assignment. 2008-09-09 07:27:26 +00:00
Ermal Luçi
4596c15520 Oops, this is a test and not an assignment. 2008-09-09 07:16:27 +00:00
Matthew Grooms
e30001cf19 Cleanup the tab format of the system user/group/server management pages.
The edges were square instead of rounded like most pfSense pages. Also
make sure tabs and cancel buttons are present in the add privilege and
add certificate pages.
2008-09-09 06:55:37 +00:00
Matthew Grooms
96c7a492be Cleanup the tab format of the system ca/certificate pages. The edges were
square instead of rounded like most pfSense pages. While here, fix a bug
that made the submit button disappear when it shouldn't.
2008-09-09 06:19:45 +00:00
Matthew Grooms
ab3c85535d Cleanup the tab format of the system advanced pages. The edges were square
instead of rounded like most pfSense pages.
2008-09-09 05:50:32 +00:00
Matthew Grooms
486b499952 Whitespace and html cleanup of the configuration history page. 2008-09-09 04:21:36 +00:00
Matthew Grooms
fb1266d3a1 Moves the protocol and certificate options out of the general config page
to the Advanced admin access tab. The thought is that they should be next
to each other. The certificate management has also been modified to use
the centralized certificate manager. I took the liberty of removing the
default certificate/key definitions from the web server configuration
function as it is now trivial to create these locally.

The global SSH authorized keys have also been removed. Any existing key
data will be migrated to the admin account. I also added some new checks
to ensure the sshd process is only restarted when its configuration has
actually changed.
2008-09-09 04:08:22 +00:00
Bill Marquette
b28278a261 Add "Services" to the page title 2008-09-09 01:17:57 +00:00
Scott Ullrich
b2bc44cdd6 * Rename to interfaces.php
* Fix tab style issues
2008-09-08 21:35:46 +00:00
Scott Ullrich
732cabc5d7 Rename to interfaces.php
Repocopy following up to this commit.
2008-09-08 21:34:44 +00:00
Ermal Luçi
039fe42ca1 Add my name to the copyrights, i think i changed enough of this file! 2008-09-07 19:48:31 +00:00
Ermal Luçi
a99440b853 Delete interfaces_lan.php we have a unified interface config. 2008-09-07 19:40:49 +00:00
Ermal Luçi
5efc5b6fda Try to reconfigure interfaces if assigned when edited. For gif and gre this does not make sense. 2008-09-07 19:39:19 +00:00
Ermal Luçi
4476d44751 Merge lan configuration to the interfaces_wan.php page wich does the configuration of all
other assigned interfaces.
2008-09-07 19:34:18 +00:00
Ermal Luçi
3f425cda43 Use different names for pppoe and pptp fields so that problems reported by
http://forum.pfsense.org/index.php/topic,11220.0.html is fixed. Reflect the changes even
on config conversion part.

Add even some code in preparation of merging even lan on the same page.
2008-09-07 18:24:05 +00:00
Ermal Luçi
9573a419aa Add an action even onChange so something can be done even without a mouse. 2008-09-07 16:45:17 +00:00
Ermal Luçi
4d5797607f * (Re)Implement a 'None' type for interface config which allows to assign interfaces
like GRE/GIF and filter on them.
* Show the configuration for an interface only after it is enabled.
* Show only the configuration option regarding the selected type using some 'sick' javascript 'stolen' on the new loadbalancer.
2008-09-07 15:50:26 +00:00
Bill Marquette
3615234313 Remove references to lbpool - this is no longer in use in 1.3
Not sure what the correct input validation is here (possibly nothing), but
this is definitely not it.
2008-09-07 04:55:56 +00:00
Bill Marquette
5bc3bf2811 uncomment the commented out functionality that actually restarts sshd
when it's enabled
2008-09-07 03:45:32 +00:00
Chris Buechler
d8e60e2d40 WPA is optional, hence shouldn't be <strong> 2008-09-07 02:22:05 +00:00
Seth Mos
968453a37e Correctly use defaults 2008-09-06 22:07:20 +00:00
Seth Mos
557784d2f5 Remove modulate state per ticket 1730 2008-09-06 21:52:30 +00:00
Matthew Grooms
3c11bd3c5b Minor re-work of OpenVPN configuration. Use operational modes to determine
what configuration options are appropriate. The operational mode dictates
the authentication method. They are defines as follows ...

Peer to Peer ( SSL/TLS )
Peer to Peer ( Shared Key )
Remote Access ( SSL/TLS )
Remote Access ( User Auth )
Remote Access ( SSL/TLS + User Auth )

Some of these modes allow for user authentication using passwords. We now
use the etc/inc/openvpn.auth-user.php file to facilitate this by checking
the username and password supplied by OpenVPN against our centralized user
database.

The Server and Client user interfaces have also been updated to support
TLS packet authentication. This is an additional security option that is
optional.
2008-09-06 21:10:43 +00:00
Matthew Grooms
3f066eb810 Disallow creation of user certificates until the user has actually been
created. This obviously won't work.
2008-09-04 22:51:47 +00:00
Ermal Luçi
16f9b3918e More array checks. 2008-09-04 17:43:01 +00:00
Seth Mos
4dc589efd2 Correct array depth in is_array check 2008-09-04 17:36:49 +00:00
Ermal Luçi
a5d223c656 Add checks when an array its expected to avoid errors from php.
Reported-by:	Seth
2008-09-04 16:59:31 +00:00
Matthew Grooms
df81417f55 Break out the advanced system options page into tabs group by categories.
Fold the sysctl tunables page into a tab under the advanced options page.
This reduces the top level menu options by one. There should be no
functional changes.
2008-09-04 15:40:54 +00:00
Matthew Grooms
e65c9c120e Major whitespace cleanup. Remove a useless html table. 2008-09-03 21:25:41 +00:00
Matthew Grooms
d591e2e19e Major whitespace cleanup. Fix some html table column class mismatches that
made for ugly output
2008-09-03 21:03:51 +00:00
Matthew Grooms
f5054d5798 Fix some html table column class mismatches that made for ugly output. 2008-09-03 21:02:48 +00:00
Matthew Grooms
d97ab68861 Cleanup some of the authentication code. Fix the problem where you must
navigate away from the initial page twice to get somewhere. Remove some
of the cruft that was no longer used. Don't unconditionally redirect a
user to their homepage if another url was specified pre-login. This will
allow admins to create bookmarks to specific pfsense webui pages.
2008-09-03 20:33:06 +00:00
Matthew Grooms
a0d4c5da29 Correct all double click action urls in the main IPsec config screens.
Reported by Seth.
2008-09-03 18:20:19 +00:00
Matthew Grooms
89c1777a0b Change the text in the privilege table row to read "Assigned Privileges"
instead of "Effective Privileges". This is in contrast to the user page
which also lists group privilege inheritance.
2008-09-03 17:33:58 +00:00
Ermal Luçi
45335fc4a4 Hopefully fix wirless configuration issues on GUI part since the wireless code requests an optcfg array as global which was removed with multi pppoe/pptp/... fixes. Pass the required array as a parameter to the wireless code to avoid further breakage while fixing other code. 2008-09-03 16:35:19 +00:00
Ermal Luçi
c33e18c232 Allow to set the mtu higher than 1500 bytes on interfaces. 2008-09-03 16:21:32 +00:00
Ermal Luçi
8a64810061 Actually fix problem with assigning number of interfaces greater than 10 or 20. 2008-09-03 16:19:27 +00:00
Ermal Luçi
9710f0fa06 Oops forgotten curly. 2008-09-03 16:16:53 +00:00
Matthew Grooms
1cb0b40a2d Correct problems with OpenVPN that prevented the lzo compression and pass
tos options from being set correctly in configuration files.
2008-09-03 04:13:02 +00:00
Matthew Grooms
93823b1014 Add options to export ca, certificate and user certificate data from the
webui.
2008-09-03 03:53:11 +00:00
Scott Ullrich
7da118047a OpenSSL is now in the base php 2008-09-02 23:23:37 +00:00
Matthew Grooms
0b31cf3e7c Correct a problem with the setup wizzard. It was using a legacy method to
set the administrative password. This was causing failures while parsing
the xml file.
2008-09-02 22:01:54 +00:00