summaryrefslogtreecommitdiffhomepage
path: root/applications/luci-app-openvpn
diff options
context:
space:
mode:
Diffstat (limited to 'applications/luci-app-openvpn')
-rw-r--r--applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua883
-rw-r--r--applications/luci-app-openvpn/luasrc/model/cbi/openvpn-basic.lua2
-rw-r--r--applications/luci-app-openvpn/po/ca/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/cs/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/de/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/el/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/en/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/es/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/fr/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/he/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/hu/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/it/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/ja/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/ms/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/no/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/pl/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/pt-br/openvpn.po21
-rw-r--r--applications/luci-app-openvpn/po/pt/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/ro/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/ru/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/sk/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/sv/openvpn.po15
-rw-r--r--applications/luci-app-openvpn/po/templates/openvpn.pot3
-rw-r--r--applications/luci-app-openvpn/po/tr/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/uk/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/vi/openvpn.po3
-rw-r--r--applications/luci-app-openvpn/po/zh-cn/openvpn.po170
-rw-r--r--applications/luci-app-openvpn/po/zh-tw/openvpn.po385
28 files changed, 1089 insertions, 453 deletions
diff --git a/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua b/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua
index 1bbee83c35..dc7718217c 100644
--- a/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua
+++ b/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua
@@ -7,192 +7,725 @@ require("luci.model.uci")
local knownParams = {
--
- -- Widget Name Default(s) Description Option(s)
- --
+ --Widget
+ -- Name
+ -- Default(s)
+ -- Description
+ -- Option(s)
{ "Service", {
- -- initialisation and daemon options
- { ListValue, "verb", { 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11 }, translate("Set output verbosity") },
- { Flag, "mlock", 0, translate("Disable Paging") },
- { Flag, "disable_occ", 0, translate("Disable options consistency check") },
- -- { Value, "user", "root", translate("Set UID to user") },
- -- { Value, "group", "root", translate("Set GID to group") },
- { Value, "cd", "/etc/openvpn", translate("Change to directory before initialization") },
- { Value, "chroot", "/var/run", translate("Chroot to directory after initialization") },
- -- { Value, "daemon", "Instance-Name", translate("Daemonize after initialization") },
- -- { Value, "syslog", "Instance-Name", translate("Output to syslog and do not daemonize") },
- { Flag, "passtos", 0, translate("TOS passthrough (applies to IPv4 only)") },
- -- { Value, "inetd", "nowait Instance-Name", translate("Run as an inetd or xinetd server") },
- { Value, "log", "/var/log/openvpn.log", translate("Write log to file") },
- { Value, "log_append", "/var/log/openvpn.log", translate("Append log to file") },
- { Flag, "suppress_timestamps", 0, translate("Don't log timestamps") },
- -- { Value, "writepid", "/var/run/openvpn.pid", translate("Write process ID to file") },
- { Value, "nice", 0, translate("Change process priority") },
- { Flag, "fast_io", 0, translate("Optimize TUN/TAP/UDP writes") },
- { Value, "echo", "some params echoed to log", translate("Echo parameters to log") },
- { ListValue, "remap_usr1", { "SIGHUP", "SIGTERM" }, translate("Remap SIGUSR1 signals") },
- { Value, "status", "/var/run/openvpn.status 5", translate("Write status to file every n seconds") },
- { Value, "status_version", { 1, 2 }, translate("Status file format version") }, -- status
- { Value, "mute", 5, translate("Limit repeated log messages") },
-
- { Value, "up", "/usr/bin/ovpn-up", translate("Shell cmd to execute after tun device open") },
- { Value, "up_delay", 5, translate("Delay tun/tap open and up script execution") },
- { Value, "down", "/usr/bin/ovpn-down", translate("Shell cmd to run after tun device close") },
- { Flag, "down_pre", 0, translate("Call down cmd/script before TUN/TAP close") },
- { Flag, "up_restart", 0, translate("Run up/down scripts for all restarts") },
- { Value, "route_up", "/usr/bin/ovpn-routeup", translate("Execute shell cmd after routes are added") },
- { Value, "ipchange", "/usr/bin/ovpn-ipchange", translate("Execute shell command on remote ip change"), { mode="p2p" } },
- { DynamicList, "setenv", { "VAR1 value1", "VAR2 value2" }, translate("Pass environment variables to script") },
- { Value, "tls_verify", "/usr/bin/ovpn-tlsverify", translate("Shell command to verify X509 name") },
- { Value, "client_connect", "/usr/bin/ovpn-clientconnect", translate("Run script cmd on client connection") },
- { Flag, "client_disconnect", 0, translate("Run script cmd on client disconnection") },
- { Value, "learn_address", "/usr/bin/ovpn-learnaddress", translate("Executed in server mode whenever an IPv4 address/route or MAC address is added to OpenVPN's internal routing table") },
- { Value, "auth_user_pass_verify", "/usr/bin/ovpn-userpass via-env", translate("Executed in server mode on new client connections, when the client is still untrusted") },
- { ListValue, "script_security", { 0, 1, 2, 3 }, translate("Policy level over usage of external programs and scripts") },
+ -- initialisation and daemon options
+ { ListValue,
+ "verb",
+ { 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11 },
+ translate("Set output verbosity") },
+ { Flag,
+ "mlock",
+ 0,
+ translate("Disable Paging") },
+ { Flag,
+ "disable_occ",
+ 0,
+ translate("Disable options consistency check") },
+ -- { Value,
+ -- "user",
+ -- "root",
+ -- translate("Set UID to user") },
+ -- { Value,
+ -- "group",
+ -- "root",
+ -- translate("Set GID to group") },
+ { Value,
+ "cd",
+ "/etc/openvpn",
+ translate("Change to directory before initialization") },
+ { Value,
+ "chroot",
+ "/var/run",
+ translate("Chroot to directory after initialization") },
+ -- { Value,
+ -- "daemon",
+ -- "Instance-Name",
+ -- translate("Daemonize after initialization") },
+ -- { Value,
+ -- "syslog",
+ -- "Instance-Name",
+ -- translate("Output to syslog and do not daemonize") },
+ { Flag,
+ "passtos",
+ 0,
+ translate("TOS passthrough (applies to IPv4 only)") },
+ -- { Value,
+ -- "inetd",
+ -- "nowait Instance-Name",
+ -- translate("Run as an inetd or xinetd server") },
+ { Value,
+ "log",
+ "/var/log/openvpn.log",
+ translate("Write log to file") },
+ { Value,
+ "log_append",
+ "/var/log/openvpn.log",
+ translate("Append log to file") },
+ { Flag,
+ "suppress_timestamps",
+ 0,
+ translate("Don't log timestamps") },
+ -- { Value,
+ -- "writepid",
+ -- "/var/run/openvpn.pid",
+ -- translate("Write process ID to file") },
+ { Value,
+ "nice",
+ 0,
+ translate("Change process priority") },
+ { Flag,
+ "fast_io",
+ 0,
+ translate("Optimize TUN/TAP/UDP writes") },
+ { Value,
+ "echo",
+ "some params echoed to log",
+ translate("Echo parameters to log") },
+ { ListValue,
+ "remap_usr1",
+ { "SIGHUP", "SIGTERM" },
+ translate("Remap SIGUSR1 signals") },
+ { Value,
+ "status",
+ "/var/run/openvpn.status 5",
+ translate("Write status to file every n seconds") },
+ { Value,
+ "status_version",
+ { 1, 2 },
+ translate("Status file format version") }, -- status
+ { Value,
+ "mute",
+ 5,
+ translate("Limit repeated log messages") },
+ { Value,
+ "up",
+ "/usr/bin/ovpn-up",
+ translate("Shell cmd to execute after tun device open") },
+ { Value,
+ "up_delay",
+ 5,
+ translate("Delay tun/tap open and up script execution") },
+ { Value,
+ "down",
+ "/usr/bin/ovpn-down",
+ translate("Shell cmd to run after tun device close") },
+ { Flag,
+ "down_pre",
+ 0,
+ translate("Call down cmd/script before TUN/TAP close") },
+ { Flag,
+ "up_restart",
+ 0,
+ translate("Run up/down scripts for all restarts") },
+ { Value,
+ "route_up",
+ "/usr/bin/ovpn-routeup",
+ translate("Execute shell cmd after routes are added") },
+ { Value,
+ "ipchange",
+ "/usr/bin/ovpn-ipchange",
+ translate("Execute shell command on remote ip change"),
+ { mode="p2p" } },
+ { DynamicList,
+ "setenv",
+ { "VAR1 value1", "VAR2 value2" },
+ translate("Pass environment variables to script") },
+ { Value,
+ "tls_verify",
+ "/usr/bin/ovpn-tlsverify",
+ translate("Shell command to verify X509 name") },
+ { Value,
+ "client_connect",
+ "/usr/bin/ovpn-clientconnect",
+ translate("Run script cmd on client connection") },
+ { Flag,
+ "client_disconnect",
+ 0,
+ translate("Run script cmd on client disconnection") },
+ { Value,
+ "learn_address",
+ "/usr/bin/ovpn-learnaddress",
+ translate("Executed in server mode whenever an IPv4 address/route or MAC address is added to OpenVPN's internal routing table") },
+ { Value,
+ "auth_user_pass_verify",
+ "/usr/bin/ovpn-userpass via-env",
+ translate("Executed in server mode on new client connections, when the client is still untrusted") },
+ { ListValue,
+ "script_security",
+ { 0, 1, 2, 3 },
+ translate("Policy level over usage of external programs and scripts") },
} },
{ "Networking", {
- -- socket config
- { ListValue, "mode", { "p2p", "server" }, translate("Major mode") },
- { Value, "local", "0.0.0.0", translate("Local host name or ip address") },
- { Value, "port", 1194, translate("TCP/UDP port # for both local and remote") },
- { Value, "lport", 1194, translate("TCP/UDP port # for local (default=1194)") },
- { Value, "rport", 1194, translate("TCP/UDP port # for remote (default=1194)") },
- { Flag, "float", 0, translate("Allow remote to change its IP or port") },
- { Flag, "nobind", 0, translate("Do not bind to local address and port") },
-
- { Value, "dev", "tun0", translate("tun/tap device") },
- { ListValue, "dev_type", { "tun", "tap" }, translate("Type of used device") },
- { Value, "dev_node", "/dev/net/tun", translate("Use tun/tap device node") },
- { Flag, "tun_ipv6", 0, translate("Make tun device IPv6 capable") },
-
- { Value, "ifconfig", "10.200.200.3 10.200.200.1", translate("Set tun/tap adapter parameters") },
- { Flag, "ifconfig_noexec", 0, translate("Don't actually execute ifconfig") },
- { Flag, "ifconfig_nowarn", 0, translate("Don't warn on ifconfig inconsistencies") },
-
- { DynamicList, "route", "10.123.0.0 255.255.0.0", translate("Add route after establishing connection") },
- { Value, "route_gateway", "10.234.1.1", translate("Specify a default gateway for routes") },
- { Value, "route_delay", 0, translate("Delay n seconds after connection") },
- { Flag, "route_noexec", 0, translate("Don't add routes automatically") },
- { Flag, "route_nopull", 0, translate("Don't pull routes automatically") },
-
- { ListValue, "mtu_disc", { "yes", "maybe", "no" }, translate("Enable Path MTU discovery") },
- { Flag, "mtu_test", 0, translate("Empirically measure MTU") },
- { ListValue, "comp_lzo", { "yes", "no", "adaptive" }, translate("Use fast LZO compression") },
- { Flag, "comp_noadapt", 0, translate("Don't use adaptive lzo compression"), { comp_lzo=1 } },
- { Value, "link_mtu", 1500, translate("Set TCP/UDP MTU") },
- { Value, "tun_mtu", 1500, translate("Set tun/tap device MTU") },
- { Value, "tun_mtu_extra", 1500, translate("Set tun/tap device overhead") },
- { Value, "fragment", 1500, translate("Enable internal datagram fragmentation"), { proto="udp" } },
- { Value, "mssfix", 1500, translate("Set upper bound on TCP MSS"), { proto="udp" } },
- { Value, "sndbuf", 65536, translate("Set the TCP/UDP send buffer size") },
- { Value, "rcvbuf", 65536, translate("Set the TCP/UDP receive buffer size") },
- { Value, "txqueuelen", 100, translate("Set tun/tap TX queue length") },
- { Value, "shaper", 10240, translate("Shaping for peer bandwidth") },
-
- { Value, "inactive", 240, translate("tun/tap inactivity timeout") },
- { Value, "keepalive", "10 60", translate("Helper directive to simplify the expression of --ping and --ping-restart in server mode configurations") },
- { Value, "ping", 30, translate("Ping remote every n seconds over TCP/UDP port") },
- { Value, "ping_exit", 120, translate("Remote ping timeout") },
- { Value, "ping_restart", 60, translate("Restart after remote ping timeout") },
- { Flag, "ping_timer_rem", 0, translate("Only process ping timeouts if routes exist") },
-
- { Flag, "persist_tun", 0, translate("Keep tun/tap device open on restart") },
- { Flag, "persist_key", 0, translate("Don't re-read key on restart") },
- { Flag, "persist_local_ip", 0, translate("Keep local IP address on restart") },
- { Flag, "persist_remote_ip", 0, translate("Keep remote IP address on restart") },
-
- -- management channel
- { Value, "management", "127.0.0.1 31194 /etc/openvpn/mngmt-pwds", translate("Enable management interface on <em>IP</em> <em>port</em>") },
- { Flag, "management_query_passwords", 0, translate("Query management channel for private key") }, -- management
- { Flag, "management_hold", 0, translate("Start OpenVPN in a hibernating state") }, -- management
- { Value, "management_log_cache", 100, translate("Number of lines for log file history") }, -- management
- { ListValue, "topology", { "net30", "p2p", "subnet" }, translate("'net30', 'p2p', or 'subnet'"), {dev_type="tun" } },
+ -- socket config
+ { ListValue,
+ "mode",
+ { "p2p", "server" },
+ translate("Major mode") },
+ { Value,
+ "local",
+ "0.0.0.0",
+ translate("Local host name or ip address") },
+ { Value,
+ "port",
+ 1194,
+ translate("TCP/UDP port # for both local and remote") },
+ { Value,
+ "lport",
+ 1194,
+ translate("TCP/UDP port # for local (default=1194)") },
+ { Value,
+ "rport",
+ 1194,
+ translate("TCP/UDP port # for remote (default=1194)") },
+ { Flag,
+ "float",
+ 0,
+ translate("Allow remote to change its IP or port") },
+ { Flag,
+ "nobind",
+ 0,
+ translate("Do not bind to local address and port") },
+ { Value,
+ "dev",
+ "tun0",
+ translate("tun/tap device") },
+ { ListValue,
+ "dev_type",
+ { "tun", "tap" },
+ translate("Type of used device") },
+ { Value,
+ "dev_node",
+ "/dev/net/tun",
+ translate("Use tun/tap device node") },
+ { Flag,
+ "tun_ipv6",
+ 0,
+ translate("Make tun device IPv6 capable") },
+ { Value,
+ "ifconfig",
+ "10.200.200.3 10.200.200.1",
+ translate("Set tun/tap adapter parameters") },
+ { Flag,
+ "ifconfig_noexec",
+ 0,
+ translate("Don't actually execute ifconfig") },
+ { Flag,
+ "ifconfig_nowarn",
+ 0,
+ translate("Don't warn on ifconfig inconsistencies") },
+ { DynamicList,
+ "route",
+ "10.123.0.0 255.255.0.0",
+ translate("Add route after establishing connection") },
+ { Value,
+ "route_gateway",
+ "10.234.1.1",
+ translate("Specify a default gateway for routes") },
+ { Value,
+ "route_delay",
+ 0,
+ translate("Delay n seconds after connection") },
+ { Flag,
+ "route_noexec",
+ 0,
+ translate("Don't add routes automatically") },
+ { Flag,
+ "route_nopull",
+ 0,
+ translate("Don't pull routes automatically") },
+ { ListValue,
+ "mtu_disc",
+ { "yes", "maybe", "no" },
+ translate("Enable Path MTU discovery") },
+ { Flag,
+ "mtu_test",
+ 0,
+ translate("Empirically measure MTU") },
+ { ListValue,
+ "comp_lzo",
+ { "yes", "no", "adaptive" },
+ translate("Use fast LZO compression") },
+ { Flag,
+ "comp_noadapt",
+ 0,
+ translate("Don't use adaptive lzo compression"),
+ { comp_lzo=1 } },
+ { Value,
+ "link_mtu",
+ 1500,
+ translate("Set TCP/UDP MTU") },
+ { Value,
+ "tun_mtu",
+ 1500,
+ translate("Set tun/tap device MTU") },
+ { Value,
+ "tun_mtu_extra",
+ 1500,
+ translate("Set tun/tap device overhead") },
+ { Value,
+ "fragment",
+ 1500,
+ translate("Enable internal datagram fragmentation"),
+ { proto="udp" } },
+ { Value,
+ "mssfix",
+ 1500,
+ translate("Set upper bound on TCP MSS"),
+ { proto="udp" } },
+ { Value,
+ "sndbuf",
+ 65536,
+ translate("Set the TCP/UDP send buffer size") },
+ { Value,
+ "rcvbuf",
+ 65536,
+ translate("Set the TCP/UDP receive buffer size") },
+ { Value,
+ "txqueuelen",
+ 100,
+ translate("Set tun/tap TX queue length") },
+ { Value,
+ "shaper",
+ 10240,
+ translate("Shaping for peer bandwidth") },
+ { Value,
+ "inactive",
+ 240,
+ translate("tun/tap inactivity timeout") },
+ { Value,
+ "keepalive",
+ "10 60",
+ translate("Helper directive to simplify the expression of --ping and --ping-restart in server mode configurations") },
+ { Value,
+ "ping",
+ 30,
+ translate("Ping remote every n seconds over TCP/UDP port") },
+ { Value,
+ "ping_exit",
+ 120,
+ translate("Remote ping timeout") },
+ { Value,
+ "ping_restart",
+ 60,
+ translate("Restart after remote ping timeout") },
+ { Flag,
+ "ping_timer_rem",
+ 0,
+ translate("Only process ping timeouts if routes exist") },
+ { Flag,
+ "persist_tun",
+ 0,
+ translate("Keep tun/tap device open on restart") },
+ { Flag,
+ "persist_key",
+ 0,
+ translate("Don't re-read key on restart") },
+ { Flag,
+ "persist_local_ip",
+ 0,
+ translate("Keep local IP address on restart") },
+ { Flag,
+ "persist_remote_ip",
+ 0,
+ translate("Keep remote IP address on restart") },
+ -- management channel
+ { Value,
+ "management",
+ "127.0.0.1 31194 /etc/openvpn/mngmt-pwds",
+ translate("Enable management interface on <em>IP</em> <em>port</em>") },
+ -- management
+ { Flag,
+ "management_query_passwords",
+ 0,
+ translate("Query management channel for private key") },
+ -- management
+ { Flag,
+ "management_hold",
+ 0,
+ translate("Start OpenVPN in a hibernating state") },
+ -- management
+ { Value,
+ "management_log_cache",
+ 100,
+ translate("Number of lines for log file history") },
+ { ListValue,
+ "topology",
+ { "net30", "p2p", "subnet" },
+ translate("'net30', 'p2p', or 'subnet'"),
+ {dev_type="tun" } },
} },
{ "VPN", {
- { Value, "server", "10.200.200.0 255.255.255.0", translate("Configure server mode"), { server_mode="1" } },
- { Value, "server_bridge", "10.200.200.1 255.255.255.0 10.200.200.200 10.200.200.250", translate("Configure server bridge"), { server_mode="1" } },
- { DynamicList, "push", { "redirect-gateway", "comp-lzo" }, translate("Push options to peer"), { server_mode="1" } },
- { Flag, "push_reset", 0, translate("Don't inherit global push options"), { server_mode="1" } },
- { Flag, "disable", 0, translate("Client is disabled"), { server_mode="1" } },
- { Value, "ifconfig_pool", "10.200.200.100 10.200.200.150 255.255.255.0", translate("Set aside a pool of subnets"), { server_mode="1" } },
- { Value, "ifconfig_pool_persist", "/etc/openvpn/ipp.txt 600", translate("Persist/unpersist ifconfig-pool"), { server_mode="1" } },
--- { Flag, "ifconfig_pool_linear", 0, translate("Use individual addresses rather than /30 subnets"), { server_mode="1" } }, -- deprecated and replaced by --topology p2p
- { Value, "ifconfig_push", "10.200.200.1 255.255.255.255", translate("Push an ifconfig option to remote"), { server_mode="1" } },
- { Value, "iroute", "10.200.200.0 255.255.255.0", translate("Route subnet to client"), { server_mode="1" } },
- { Flag, "client_to_client", 0, translate("Allow client-to-client traffic"), { server_mode="1" } },
- { Flag, "duplicate_cn", 0, translate("Allow multiple clients with same certificate"), { server_mode="1" } },
- { Value, "client_config_dir", "/etc/openvpn/ccd", translate("Directory for custom client config files"), { server_mode="1" } },
- { Flag, "ccd_exclusive", 0, translate("Refuse connection if no custom client config"), { server_mode="1" } },
- { Value, "tmp_dir", "/var/run/openvpn", translate("Temporary directory for client-connect return file"), { server_mode="1" } },
- { Value, "hash_size", "256 256", translate("Set size of real and virtual address hash tables"), { server_mode="1" } },
- { Value, "bcast_buffers", 256, translate("Number of allocated broadcast buffers"), { server_mode="1" } },
- { Value, "tcp_queue_limit", 64, translate("Maximum number of queued TCP output packets"), { server_mode="1" } },
- { Value, "max_clients", 10, translate("Allowed maximum of connected clients"), { server_mode="1" } },
- { Value, "max_routes_per_client", 256, translate("Allowed maximum of internal"), { server_mode="1" } },
- { Value, "connect_freq", "3 10", translate("Allowed maximum of new connections"), { server_mode="1" } },
- { Flag, "client_cert_not_required", 0, translate("Don't require client certificate"), { server_mode="1" } },
- { Flag, "username_as_common_name", 0, translate("Use username as common name"), { server_mode="1" } },
- { Flag, "client", 0, translate("Configure client mode"), { server_mode="0" }, { server_mode="" } },
- { Flag, "pull", 0, translate("Accept options pushed from server"), { client="1" } },
- { Value, "auth_user_pass", "/etc/openvpn/userpass.txt", translate("Authenticate using username/password"), { client="1" } },
- { ListValue, "auth_retry", { "none", "nointeract", "interact" }, translate("Handling of authentication failures"), { client="1" } },
- { Value, "explicit_exit_notify", 1, translate("Send notification to peer on disconnect"), { client="1" } },
- { DynamicList, "remote", "1.2.3.4", translate("Remote host name or ip address"), { client="1" } },
- { Flag, "remote_random", 1, translate("Randomly choose remote server"), { client="1" } },
- { ListValue, "proto", { "udp", "tcp-client", "tcp-server" }, translate("Use protocol"), { client="1" } },
- { Value, "connect_retry", 5, translate("Connection retry interval"), { proto="tcp-client" }, { client="1" } },
- { Value, "http_proxy", "192.168.1.100 8080", translate("Connect to remote host through an HTTP proxy"), { client="1" } },
- { Flag, "http_proxy_retry", 0, translate("Retry indefinitely on HTTP proxy errors"), { client="1" } },
- { Value, "http_proxy_timeout", 5, translate("Proxy timeout in seconds"), { client="1" } },
- { DynamicList, "http_proxy_option", { "VERSION 1.0", "AGENT OpenVPN/2.0.9" }, translate("Set extended HTTP proxy options"), { client="1" } },
- { Value, "socks_proxy", "192.168.1.200 1080", translate("Connect through Socks5 proxy"), { client="1" } },
- { Value, "socks_proxy_retry", 5, translate("Retry indefinitely on Socks proxy errors"), { client="1" } }, -- client && socks_proxy
- { Value, "resolv_retry", "infinite", translate("If hostname resolve fails, retry"), { client="1" } },
- { ListValue, "redirect_gateway", { "", "local", "def1", "local def1" }, translate("Automatically redirect default route"), { client="1" } },
+ { Value,
+ "server",
+ "10.200.200.0 255.255.255.0",
+ translate("Configure server mode"),
+ { client="0" }, { client="" } },
+ { Value,
+ "server_bridge",
+ "10.200.200.1 255.255.255.0 10.200.200.200 10.200.200.250",
+ translate("Configure server bridge"),
+ { client="0" }, { client="" } },
+ { DynamicList,
+ "push",
+ { "redirect-gateway", "comp-lzo" },
+ translate("Push options to peer"),
+ { client="0" }, { client="" } },
+ { Flag,
+ "push_reset",
+ 0,
+ translate("Don't inherit global push options"),
+ { client="0" }, { client="" } },
+ { Flag,
+ "disable",
+ 0,
+ translate("Client is disabled"),
+ { client="0" }, { client="" } },
+ { Value,
+ "ifconfig_pool",
+ "10.200.200.100 10.200.200.150 255.255.255.0",
+ translate("Set aside a pool of subnets"),
+ { client="0" }, { client="" } },
+ { Value,
+ "ifconfig_pool_persist",
+ "/etc/openvpn/ipp.txt 600",
+ translate("Persist/unpersist ifconfig-pool"),
+ { client="0" }, { client="" } },
+ -- deprecated and replaced by --topology p2p
+ -- { Flag,
+ -- "ifconfig_pool_linear",
+ -- 0,
+ -- translate("Use individual addresses rather than /30 subnets"),
+ -- { client="0" }, { client="" } },
+ { Value,
+ "ifconfig_push",
+ "10.200.200.1 255.255.255.255",
+ translate("Push an ifconfig option to remote"),
+ { client="0" }, { client="" } },
+ { Value,
+ "iroute",
+ "10.200.200.0 255.255.255.0",
+ translate("Route subnet to client"),
+ { client="0" }, { client="" } },
+ { Flag,
+ "client_to_client",
+ 0,
+ translate("Allow client-to-client traffic"),
+ { client="0" }, { client="" } },
+ { Flag,
+ "duplicate_cn",
+ 0,
+ translate("Allow multiple clients with same certificate"),
+ { client="0" }, { client="" } },
+ { Value,
+ "client_config_dir",
+ "/etc/openvpn/ccd",
+ translate("Directory for custom client config files"),
+ { client="0" }, { client="" } },
+ { Flag,
+ "ccd_exclusive",
+ 0,
+ translate("Refuse connection if no custom client config"),
+ { client="0" }, { client="" } },
+ { Value,
+ "tmp_dir",
+ "/var/run/openvpn",
+ translate("Temporary directory for client-connect return file"),
+ { client="0" }, { client="" } },
+ { Value,
+ "hash_size",
+ "256 256",
+ translate("Set size of real and virtual address hash tables"),
+ { client="0" }, { client="" } },
+ { Value,
+ "bcast_buffers",
+ 256,
+ translate("Number of allocated broadcast buffers"),
+ { client="0" }, { client="" } },
+ { Value,
+ "tcp_queue_limit",
+ 64,
+ translate("Maximum number of queued TCP output packets"),
+ { client="0" }, { client="" } },
+ { Value,
+ "max_clients",
+ 10,
+ translate("Allowed maximum of connected clients"),
+ { client="0" }, { client="" } },
+ { Value,
+ "max_routes_per_client",
+ 256,
+ translate("Allowed maximum of internal"),
+ { client="0" }, { client="" } },
+ { Value,
+ "connect_freq",
+ "3 10",
+ translate("Allowed maximum of new connections"),
+ { client="0" }, { client="" } },
+ { Flag,
+ "client_cert_not_required",
+ 0,
+ translate("Don't require client certificate"),
+ { client="0" }, { client="" } },
+ { Flag,
+ "username_as_common_name",
+ 0,
+ translate("Use username as common name"),
+ { client="0" }, { client="" } },
+ { Flag,
+ "client",
+ 0,
+ translate("Configure client mode") },
+ { Flag,
+ "pull",
+ 0,
+ translate("Accept options pushed from server"),
+ { client="1" } },
+ { Value,
+ "auth_user_pass",
+ "/etc/openvpn/userpass.txt",
+ translate("Authenticate using username/password"),
+ { client="1" } },
+ { ListValue,
+ "auth_retry",
+ { "none", "nointeract", "interact" },
+ translate("Handling of authentication failures"),
+ { client="1" } },
+ { Value,
+ "explicit_exit_notify",
+ 1,
+ translate("Send notification to peer on disconnect"),
+ { client="1" } },
+ { DynamicList,
+ "remote",
+ "1.2.3.4",
+ translate("Remote host name or ip address"),
+ { client="1" } },
+ { Flag,
+ "remote_random",
+ 0,
+ translate("Randomly choose remote server"),
+ { client="1" } },
+ { ListValue,
+ "proto",
+ { "udp", "tcp-client", "tcp-server" },
+ translate("Use protocol"),
+ { client="1" } },
+ { Value,
+ "connect_retry",
+ 5,
+ translate("Connection retry interval"),
+ { proto="tcp-client" }, { client="1" } },
+ { Value,
+ "http_proxy",
+ "192.168.1.100 8080",
+ translate("Connect to remote host through an HTTP proxy"),
+ { client="1" } },
+ { Flag,
+ "http_proxy_retry",
+ 0,
+ translate("Retry indefinitely on HTTP proxy errors"),
+ { client="1" } },
+ { Value,
+ "http_proxy_timeout",
+ 5,
+ translate("Proxy timeout in seconds"),
+ { client="1" } },
+ { DynamicList,
+ "http_proxy_option",
+ { "VERSION 1.0", "AGENT OpenVPN/2.0.9" },
+ translate("Set extended HTTP proxy options"),
+ { client="1" } },
+ { Value,
+ "socks_proxy",
+ "192.168.1.200 1080",
+ translate("Connect through Socks5 proxy"),
+ { client="1" } },
+ -- client && socks_proxy
+ { Value,
+ "socks_proxy_retry",
+ 5,
+ translate("Retry indefinitely on Socks proxy errors"),
+ { client="1" } },
+ { Value,
+ "resolv_retry",
+ "infinite",
+ translate("If hostname resolve fails, retry"),
+ { client="1" } },
+ { ListValue,
+ "redirect_gateway",
+ { "", "local", "def1", "local def1" },
+ translate("Automatically redirect default route"),
+ { client="1" } },
} },
{ "Cryptography", {
- { FileUpload, "secret", "/etc/openvpn/secret.key", translate("Enable Static Key encryption mode (non-TLS)") },
- { Value, "auth", "SHA1", translate("HMAC authentication for packets") }, -- parse
- { Value, "cipher", "BF-CBC", translate("Encryption cipher for packets") }, -- parse
- { Value, "keysize", 1024, translate("Size of cipher key") }, -- parse
- { Value, "engine", "dynamic", translate("Enable OpenSSL hardware crypto engines") }, -- parse
- { Flag, "no_replay", 0, translate("Disable replay protection") },
- { Value, "replay_window", "64 15", translate("Replay protection sliding window size") },
- { Flag, "mute_replay_warnings", 0, translate("Silence the output of replay warnings") },
- { Value, "replay_persist", "/var/run/openvpn-replay-state", translate("Persist replay-protection state") },
- { Flag, "no_iv", 0, translate("Disable cipher initialisation vector") },
- { Flag, "tls_server", 0, translate("Enable TLS and assume server role"), { tls_client="" }, { tls_client="0" } },
- { Flag, "tls_client", 0, translate("Enable TLS and assume client role"), { tls_server="" }, { tls_server="0" } },
- { FileUpload, "ca", "/etc/easy-rsa/keys/ca.crt", translate("Certificate authority") },
- { FileUpload, "dh", "/etc/easy-rsa/keys/dh1024.pem", translate("Diffie Hellman parameters") },
- { FileUpload, "cert", "/etc/easy-rsa/keys/some-client.crt", translate("Local certificate") },
- { FileUpload, "key", "/etc/easy-rsa/keys/some-client.key", translate("Local private key") },
- { FileUpload, "pkcs12", "/etc/easy-rsa/keys/some-client.pk12", translate("PKCS#12 file containing keys") },
- { ListValue, "key_method", { 1, 2 }, translate("Enable TLS and assume client role") },
- { Value, "tls_cipher", "DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5",
- translate("TLS cipher") },
- { Value, "tls_timeout", 2, translate("Retransmit timeout on TLS control channel") },
- { Value, "reneg_bytes", 1024, translate("Renegotiate data chan. key after bytes") },
- { Value, "reneg_pkts", 100, translate("Renegotiate data chan. key after packets") },
- { Value, "reneg_sec", 3600, translate("Renegotiate data chan. key after seconds") },
- { Value, "hand_window", 60, translate("Timeframe for key exchange") },
- { Value, "tran_window", 3600, translate("Key transition window") },
- { Flag, "single_session", 0, translate("Allow only one session") },
- { Flag, "tls_exit", 0, translate("Exit on TLS negotiation failure") },
- { Value, "tls_auth", "/etc/openvpn/tlsauth.key", translate("Additional authentication over TLS") },
- --{ Value, "askpass", "[file]", translate("Get PEM password from controlling tty before we daemonize") },
- { Flag, "auth_nocache", 0, translate("Don't cache --askpass or --auth-user-pass passwords") },
- { Value, "tls_remote", "remote_x509_name", translate("Only accept connections from given X509 name") },
- { ListValue, "ns_cert_type", { "client", "server" }, translate("Require explicit designation on certificate") },
- { ListValue, "remote_cert_tls", { "client", "server" }, translate("Require explicit key usage on certificate") },
- { Value, "crl_verify", "/etc/easy-rsa/keys/crl.pem", translate("Check peer certificate against a CRL") },
- { Value, "tls_version_min", "1.0", translate("The lowest supported TLS version") },
- { Value, "tls_version_max", "1.2", translate("The highest supported TLS version") },
- { Value, "key_direction", "1", translate("The key direction for 'tls-auth' and 'secret' options") },
- } }
+ { FileUpload,
+ "secret",
+ "/etc/openvpn/secret.key",
+ translate("Enable Static Key encryption mode (non-TLS)") },
+ -- parse
+ { Value,
+ "auth",
+ "SHA1",
+ translate("HMAC authentication for packets") },
+ -- parse
+ { Value,
+ "cipher",
+ "BF-CBC",
+ translate("Encryption cipher for packets") },
+ -- parse
+ { Value,
+ "keysize",
+ 1024,
+ translate("Size of cipher key") },
+ -- parse
+ { Value,
+ "engine",
+ "dynamic",
+ translate("Enable OpenSSL hardware crypto engines") },
+ { Flag,
+ "no_replay",
+ 0,
+ translate("Disable replay protection") },
+ { Value,
+ "replay_window",
+ "64 15",
+ translate("Replay protection sliding window size") },
+ { Flag,
+ "mute_replay_warnings",
+ 0,
+ translate("Silence the output of replay warnings") },
+ { Value,
+ "replay_persist",
+ "/var/run/openvpn-replay-state",
+ translate("Persist replay-protection state") },
+ { Flag,
+ "no_iv",
+ 0,
+ translate("Disable cipher initialisation vector") },
+ { Flag,
+ "tls_server",
+ 0,
+ translate("Enable TLS and assume server role"),
+ { tls_client="" }, { tls_client="0" } },
+ { Flag,
+ "tls_client",
+ 0,
+ translate("Enable TLS and assume client role"),
+ { tls_server="" }, { tls_server="0" } },
+ { FileUpload,
+ "ca",
+ "/etc/easy-rsa/keys/ca.crt",
+ translate("Certificate authority") },
+ { FileUpload,
+ "dh",
+ "/etc/easy-rsa/keys/dh1024.pem",
+ translate("Diffie Hellman parameters") },
+ { FileUpload,
+ "cert",
+ "/etc/easy-rsa/keys/some-client.crt",
+ translate("Local certificate") },
+ { FileUpload,
+ "key",
+ "/etc/easy-rsa/keys/some-client.key",
+ translate("Local private key") },
+ { FileUpload,
+ "pkcs12",
+ "/etc/easy-rsa/keys/some-client.pk12",
+ translate("PKCS#12 file containing keys") },
+ { ListValue,
+ "key_method",
+ { 1, 2 },
+ translate("Enable TLS and assume client role") },
+ { Value,
+ "tls_cipher",
+ "DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5",
+ translate("TLS cipher") },
+ { Value,
+ "tls_timeout",
+ 2,
+ translate("Retransmit timeout on TLS control channel") },
+ { Value,
+ "reneg_bytes",
+ 1024,
+ translate("Renegotiate data chan. key after bytes") },
+ { Value,
+ "reneg_pkts",
+ 100,
+ translate("Renegotiate data chan. key after packets") },
+ { Value,
+ "reneg_sec",
+ 3600,
+ translate("Renegotiate data chan. key after seconds") },
+ { Value,
+ "hand_window",
+ 60,
+ translate("Timeframe for key exchange") },
+ { Value,
+ "tran_window",
+ 3600,
+ translate("Key transition window") },
+ { Flag,
+ "single_session",
+ 0,
+ translate("Allow only one session") },
+ { Flag,
+ "tls_exit",
+ 0,
+ translate("Exit on TLS negotiation failure") },
+ { Value,
+ "tls_auth",
+ "/etc/openvpn/tlsauth.key",
+ translate("Additional authentication over TLS") },
+ { Value,
+ "tls_crypt",
+ "/etc/openvpn/tlscrypt.key",
+ translate("Encrypt and authenticate all control channel packets with the key") },
+ -- { Value,
+ -- "askpass",
+ -- "[file]",
+ -- translate("Get PEM password from controlling tty before we daemonize") },
+ { Flag,
+ "auth_nocache",
+ 0,
+ translate("Don't cache --askpass or --auth-user-pass passwords") },
+ { Value,
+ "tls_remote",
+ "remote_x509_name",
+ translate("Only accept connections from given X509 name") },
+ { ListValue,
+ "ns_cert_type",
+ { "client", "server" },
+ translate("Require explicit designation on certificate") },
+ { ListValue,
+ "remote_cert_tls",
+ { "client", "server" },
+ translate("Require explicit key usage on certificate") },
+ { Value,
+ "crl_verify",
+ "/etc/easy-rsa/keys/crl.pem",
+ translate("Check peer certificate against a CRL") },
+ { Value,
+ "tls_version_min",
+ "1.0",
+ translate("The lowest supported TLS version") },
+ { Value,
+ "tls_version_max",
+ "1.2",
+ translate("The highest supported TLS version") },
+ { Value,
+ "key_direction",
+ "1",
+ translate("The key direction for 'tls-auth' and 'secret' options") },
+ } }
}
diff --git a/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-basic.lua b/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-basic.lua
index aaa1979c41..3f651c0ada 100644
--- a/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-basic.lua
+++ b/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-basic.lua
@@ -24,7 +24,7 @@ local basicParams = {
{ ListValue,"comp_lzo",{"yes","no","adaptive"}, translate("Use fast LZO compression") },
{ Value,"keepalive","10 60", translate("Helper directive to simplify the expression of --ping and --ping-restart in server mode configurations") },
- { ListValue,"proto",{ "udp", "udp6", "tcp", "tcp6" }, translate("Use protocol") },
+ { ListValue,"proto",{ "udp", "tcp-client", "tcp-server" }, translate("Use protocol") },
{ Flag,"client",0, translate("Configure client mode") },
{ Flag,"client_to_client",0, translate("Allow client-to-client traffic") },
diff --git a/applications/luci-app-openvpn/po/ca/openvpn.po b/applications/luci-app-openvpn/po/ca/openvpn.po
index 1b75fe6cd7..d756469078 100644
--- a/applications/luci-app-openvpn/po/ca/openvpn.po
+++ b/applications/luci-app-openvpn/po/ca/openvpn.po
@@ -199,6 +199,9 @@ msgstr "Activa la interfície de gestió a <em>IP</em> <em>port</em>"
msgid "Enabled"
msgstr "Activat"
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr "Xifra d'encriptació per paquets"
diff --git a/applications/luci-app-openvpn/po/cs/openvpn.po b/applications/luci-app-openvpn/po/cs/openvpn.po
index c68742217e..4fba010530 100644
--- a/applications/luci-app-openvpn/po/cs/openvpn.po
+++ b/applications/luci-app-openvpn/po/cs/openvpn.po
@@ -194,6 +194,9 @@ msgstr ""
msgid "Enabled"
msgstr "Povoleno"
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr ""
diff --git a/applications/luci-app-openvpn/po/de/openvpn.po b/applications/luci-app-openvpn/po/de/openvpn.po
index dc382ee44d..a203c92e79 100644
--- a/applications/luci-app-openvpn/po/de/openvpn.po
+++ b/applications/luci-app-openvpn/po/de/openvpn.po
@@ -197,6 +197,9 @@ msgstr "Administratorschnittstelle aktivieren"
msgid "Enabled"
msgstr "Einschalten"
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr "Verschlüsselungsalgorithmus für Pakete"
diff --git a/applications/luci-app-openvpn/po/el/openvpn.po b/applications/luci-app-openvpn/po/el/openvpn.po
index 2c787d816c..63dd8985a8 100644
--- a/applications/luci-app-openvpn/po/el/openvpn.po
+++ b/applications/luci-app-openvpn/po/el/openvpn.po
@@ -198,6 +198,9 @@ msgstr ""
msgid "Enabled"
msgstr "Ενεργοποιημένο"
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr ""
diff --git a/applications/luci-app-openvpn/po/en/openvpn.po b/applications/luci-app-openvpn/po/en/openvpn.po
index a5994dc292..51819f6b09 100644
--- a/applications/luci-app-openvpn/po/en/openvpn.po
+++ b/applications/luci-app-openvpn/po/en/openvpn.po
@@ -197,6 +197,9 @@ msgstr "Enable management interface on <em>IP</em> <em>port</em>"
msgid "Enabled"
msgstr "Enabled"
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr "Encrypt and authenticate all control channel packets with the key"
+
msgid "Encryption cipher for packets"
msgstr "Encryption cipher for packets"
diff --git a/applications/luci-app-openvpn/po/es/openvpn.po b/applications/luci-app-openvpn/po/es/openvpn.po
index a5141831ce..819e7ee509 100644
--- a/applications/luci-app-openvpn/po/es/openvpn.po
+++ b/applications/luci-app-openvpn/po/es/openvpn.po
@@ -196,6 +196,9 @@ msgstr "Interfaz de gestión en <em>IP</em> <em>puerto</em>"
msgid "Enabled"
msgstr "Activado"
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr "Cifra de encriptación de paquetes"
diff --git a/applications/luci-app-openvpn/po/fr/openvpn.po b/applications/luci-app-openvpn/po/fr/openvpn.po
index e2f33dc164..331d1931e8 100644
--- a/applications/luci-app-openvpn/po/fr/openvpn.po
+++ b/applications/luci-app-openvpn/po/fr/openvpn.po
@@ -206,6 +206,9 @@ msgstr "Activer l'interface de gestion sur <em>IP</em> <em>port</em>"
msgid "Enabled"
msgstr "Activé"
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr "Méthode de chiffrement des paquets"
diff --git a/applications/luci-app-openvpn/po/he/openvpn.po b/applications/luci-app-openvpn/po/he/openvpn.po
index 3528444199..517da49080 100644
--- a/applications/luci-app-openvpn/po/he/openvpn.po
+++ b/applications/luci-app-openvpn/po/he/openvpn.po
@@ -192,6 +192,9 @@ msgstr ""
msgid "Enabled"
msgstr ""
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr ""
diff --git a/applications/luci-app-openvpn/po/hu/openvpn.po b/applications/luci-app-openvpn/po/hu/openvpn.po
index 1f9d691d04..67a8217b1a 100644
--- a/applications/luci-app-openvpn/po/hu/openvpn.po
+++ b/applications/luci-app-openvpn/po/hu/openvpn.po
@@ -196,6 +196,9 @@ msgstr ""
msgid "Enabled"
msgstr "Engedélyezve"
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr ""
diff --git a/applications/luci-app-openvpn/po/it/openvpn.po b/applications/luci-app-openvpn/po/it/openvpn.po
index 233c144c57..834015b8e8 100644
--- a/applications/luci-app-openvpn/po/it/openvpn.po
+++ b/applications/luci-app-openvpn/po/it/openvpn.po
@@ -198,6 +198,9 @@ msgstr ""
msgid "Enabled"
msgstr "Abilitato"
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr ""
diff --git a/applications/luci-app-openvpn/po/ja/openvpn.po b/applications/luci-app-openvpn/po/ja/openvpn.po
index 5474008682..232ae27e1f 100644
--- a/applications/luci-app-openvpn/po/ja/openvpn.po
+++ b/applications/luci-app-openvpn/po/ja/openvpn.po
@@ -196,6 +196,9 @@ msgstr ""
msgid "Enabled"
msgstr "有効"
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr ""
diff --git a/applications/luci-app-openvpn/po/ms/openvpn.po b/applications/luci-app-openvpn/po/ms/openvpn.po
index c439c3eb15..6c6e0d6046 100644
--- a/applications/luci-app-openvpn/po/ms/openvpn.po
+++ b/applications/luci-app-openvpn/po/ms/openvpn.po
@@ -191,6 +191,9 @@ msgstr ""
msgid "Enabled"
msgstr ""
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr ""
diff --git a/applications/luci-app-openvpn/po/no/openvpn.po b/applications/luci-app-openvpn/po/no/openvpn.po
index 3528444199..517da49080 100644
--- a/applications/luci-app-openvpn/po/no/openvpn.po
+++ b/applications/luci-app-openvpn/po/no/openvpn.po
@@ -192,6 +192,9 @@ msgstr ""
msgid "Enabled"
msgstr ""
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr ""
diff --git a/applications/luci-app-openvpn/po/pl/openvpn.po b/applications/luci-app-openvpn/po/pl/openvpn.po
index e289a80fc1..bef5a13a1a 100644
--- a/applications/luci-app-openvpn/po/pl/openvpn.po
+++ b/applications/luci-app-openvpn/po/pl/openvpn.po
@@ -197,6 +197,9 @@ msgstr "Włącz interfejs zarządzalny na <em>IP</em> <em>port</em>"
msgid "Enabled"
msgstr "Włączone"
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr "Szyfrowanie dla pakietów"
diff --git a/applications/luci-app-openvpn/po/pt-br/openvpn.po b/applications/luci-app-openvpn/po/pt-br/openvpn.po
index 916370e7f9..26642e2c46 100644
--- a/applications/luci-app-openvpn/po/pt-br/openvpn.po
+++ b/applications/luci-app-openvpn/po/pt-br/openvpn.po
@@ -1,17 +1,17 @@
msgid ""
msgstr ""
-"Project-Id-Version: PACKAGE VERSION\n"
+"Project-Id-Version: \n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2009-06-10 03:41+0200\n"
-"PO-Revision-Date: 2014-03-29 23:19+0200\n"
-"Last-Translator: Luiz Angelo <luizluca@gmail.com>\n"
-"Language-Team: LANGUAGE <LL@li.org>\n"
+"PO-Revision-Date: 2017-02-20 18:04-0300\n"
+"Last-Translator: Luiz Angelo Daros de Luca <luizluca@gmail.com>\n"
"Language: pt_BR\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
-"X-Generator: Pootle 2.0.6\n"
+"X-Generator: Poedit 1.8.11\n"
+"Language-Team: \n"
msgid "%s"
msgstr "%s"
@@ -154,7 +154,7 @@ msgid "Don't log timestamps"
msgstr "Não registar a data/hora"
msgid "Don't pull routes automatically"
-msgstr ""
+msgstr "Não puxe as rotas automaticamente"
msgid "Don't re-read key on restart"
msgstr "Não reler a chave entre os reinícios"
@@ -198,6 +198,9 @@ msgstr "Ativar o interface de gestão em <em>IP</em> <em>porta</em>"
msgid "Enabled"
msgstr "Ativado"
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr "Cifra de encriptação para pacotes"
@@ -505,13 +508,13 @@ msgid "Temporary directory for client-connect return file"
msgstr "Diretório temporário para arquivo de retorno de conexão-cliente"
msgid "The highest supported TLS version"
-msgstr ""
+msgstr "A mais alta versão suporta do TLS"
msgid "The key direction for 'tls-auth' and 'secret' options"
-msgstr ""
+msgstr "A direção da chave para as opções 'tls-auth' e 'secret'"
msgid "The lowest supported TLS version"
-msgstr ""
+msgstr "A mais baixa versão suporta do TLS"
msgid "Timeframe for key exchange"
msgstr "Janela temporal para troca de chaves"
diff --git a/applications/luci-app-openvpn/po/pt/openvpn.po b/applications/luci-app-openvpn/po/pt/openvpn.po
index 95c50a571a..d74b0a690d 100644
--- a/applications/luci-app-openvpn/po/pt/openvpn.po
+++ b/applications/luci-app-openvpn/po/pt/openvpn.po
@@ -198,6 +198,9 @@ msgstr "Activar o interface de gestão em <em>IP</em> <em>porta</em>"
msgid "Enabled"
msgstr "Activado"
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr "Cifra de encriptação para pacotes"
diff --git a/applications/luci-app-openvpn/po/ro/openvpn.po b/applications/luci-app-openvpn/po/ro/openvpn.po
index 4a7a5b7515..ef5e7ce379 100644
--- a/applications/luci-app-openvpn/po/ro/openvpn.po
+++ b/applications/luci-app-openvpn/po/ro/openvpn.po
@@ -193,6 +193,9 @@ msgstr ""
msgid "Enabled"
msgstr ""
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr ""
diff --git a/applications/luci-app-openvpn/po/ru/openvpn.po b/applications/luci-app-openvpn/po/ru/openvpn.po
index 00e585c374..89cf1161cc 100644
--- a/applications/luci-app-openvpn/po/ru/openvpn.po
+++ b/applications/luci-app-openvpn/po/ru/openvpn.po
@@ -200,6 +200,9 @@ msgstr "Включить интерфейс управления на <em>IP</em
msgid "Enabled"
msgstr "Включено"
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr "Шифровать и аутентифициоровать ключом все пакеты канала управления"
+
msgid "Encryption cipher for packets"
msgstr "Шифрование для пакетов"
diff --git a/applications/luci-app-openvpn/po/sk/openvpn.po b/applications/luci-app-openvpn/po/sk/openvpn.po
index f001c12eaf..9005529762 100644
--- a/applications/luci-app-openvpn/po/sk/openvpn.po
+++ b/applications/luci-app-openvpn/po/sk/openvpn.po
@@ -191,6 +191,9 @@ msgstr ""
msgid "Enabled"
msgstr ""
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr ""
diff --git a/applications/luci-app-openvpn/po/sv/openvpn.po b/applications/luci-app-openvpn/po/sv/openvpn.po
index 6b8f92f4c4..838f4650dd 100644
--- a/applications/luci-app-openvpn/po/sv/openvpn.po
+++ b/applications/luci-app-openvpn/po/sv/openvpn.po
@@ -2,7 +2,7 @@ msgid ""
msgstr ""
"Content-Type: text/plain; charset=UTF-8\n"
"Project-Id-Version: PACKAGE VERSION\n"
-"Last-Translator: Automatically generated\n"
+"Last-Translator: Kristoffer Grundström <hamnisdude@gmail.com>\n"
"Language-Team: none\n"
"Language: sv\n"
"MIME-Version: 1.0\n"
@@ -10,25 +10,25 @@ msgstr ""
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
msgid "%s"
-msgstr ""
+msgstr "%s"
msgid "'net30', 'p2p', or 'subnet'"
-msgstr ""
+msgstr "'net30', 'p2p', eller 'subnät'"
msgid "Accept options pushed from server"
msgstr ""
msgid "Add"
-msgstr ""
+msgstr "Lägg till"
msgid "Add route after establishing connection"
msgstr ""
msgid "Additional authentication over TLS"
-msgstr ""
+msgstr "Ytterligare autentisering via TLS"
msgid "Allow client-to-client traffic"
-msgstr ""
+msgstr "Tillåt klient-till-klienttraffik"
msgid "Allow multiple clients with same certificate"
msgstr ""
@@ -192,6 +192,9 @@ msgstr ""
msgid "Enabled"
msgstr ""
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr ""
diff --git a/applications/luci-app-openvpn/po/templates/openvpn.pot b/applications/luci-app-openvpn/po/templates/openvpn.pot
index f2e4011662..126cab076f 100644
--- a/applications/luci-app-openvpn/po/templates/openvpn.pot
+++ b/applications/luci-app-openvpn/po/templates/openvpn.pot
@@ -184,6 +184,9 @@ msgstr ""
msgid "Enabled"
msgstr ""
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr ""
diff --git a/applications/luci-app-openvpn/po/tr/openvpn.po b/applications/luci-app-openvpn/po/tr/openvpn.po
index 7b8ffad34c..917c36d561 100644
--- a/applications/luci-app-openvpn/po/tr/openvpn.po
+++ b/applications/luci-app-openvpn/po/tr/openvpn.po
@@ -191,6 +191,9 @@ msgstr ""
msgid "Enabled"
msgstr ""
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr ""
diff --git a/applications/luci-app-openvpn/po/uk/openvpn.po b/applications/luci-app-openvpn/po/uk/openvpn.po
index a6910c2309..e98b52a8ae 100644
--- a/applications/luci-app-openvpn/po/uk/openvpn.po
+++ b/applications/luci-app-openvpn/po/uk/openvpn.po
@@ -195,6 +195,9 @@ msgstr ""
msgid "Enabled"
msgstr ""
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr ""
diff --git a/applications/luci-app-openvpn/po/vi/openvpn.po b/applications/luci-app-openvpn/po/vi/openvpn.po
index 8e8b96dc7f..f3873b068f 100644
--- a/applications/luci-app-openvpn/po/vi/openvpn.po
+++ b/applications/luci-app-openvpn/po/vi/openvpn.po
@@ -197,6 +197,9 @@ msgstr "Kích hoạt giao diện điều hành trên <em>IP</em> <em>cổng</em>
msgid "Enabled"
msgstr "Kích hoạt "
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr ""
+
msgid "Encryption cipher for packets"
msgstr "Encryption cipher cho các gói"
diff --git a/applications/luci-app-openvpn/po/zh-cn/openvpn.po b/applications/luci-app-openvpn/po/zh-cn/openvpn.po
index 899b4d2388..13182fcddd 100644
--- a/applications/luci-app-openvpn/po/zh-cn/openvpn.po
+++ b/applications/luci-app-openvpn/po/zh-cn/openvpn.po
@@ -1,23 +1,26 @@
+#
+# Yangfl <mmyangfl@gmail.com>, 2017.
+#
msgid ""
msgstr ""
-"Project-Id-Version: PACKAGE VERSION\n"
+"Project-Id-Version: \n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2009-05-19 19:35+0200\n"
-"PO-Revision-Date: 2013-10-10 06:09+0200\n"
-"Last-Translator: Tanyingyu <Tanyingyu@163.com>\n"
-"Language-Team: QQ Group 75543259 <axishero@foxmail.com>\n"
+"PO-Revision-Date: 2017-10-29 14:37+0800\n"
+"Last-Translator: Yangfl <mmyangfl@gmail.com>\n"
+"Language-Team: <debian-l10n-chinese@lists.debian.org>\n"
"Language: zh_CN\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Plural-Forms: nplurals=1; plural=0;\n"
-"X-Generator: Pootle 2.0.6\n"
+"X-Generator: Gtranslator 2.91.7\n"
msgid "%s"
msgstr "%s"
msgid "'net30', 'p2p', or 'subnet'"
-msgstr "'net30', 'p2p', 或 '子网'"
+msgstr "“net30”,“p2p”,或“subnet”"
msgid "Accept options pushed from server"
msgstr "接受从服务器发送过来的选项"
@@ -29,7 +32,7 @@ msgid "Add route after establishing connection"
msgstr "建立连接后添加路由"
msgid "Additional authentication over TLS"
-msgstr "TLS以外的验证"
+msgstr "TLS 以外的验证"
msgid "Allow client-to-client traffic"
msgstr "允许客户端到客户端的通信"
@@ -41,7 +44,7 @@ msgid "Allow only one session"
msgstr "只允许一个会话"
msgid "Allow remote to change its IP or port"
-msgstr "允许远程修改ip和端口"
+msgstr "允许远端改变 IP 或端口"
msgid "Allowed maximum of connected clients"
msgstr "允许最大已连接客户端数"
@@ -62,10 +65,10 @@ msgid "Automatically redirect default route"
msgstr "自动重定向至默认路由"
msgid "Below is a list of configured OpenVPN instances and their current state"
-msgstr "Openvpn已配置实例及其当前状态列表"
+msgstr "以下是 OpenVPN 已配置实例及其当前状态的列表"
msgid "Call down cmd/script before TUN/TAP close"
-msgstr "TUN/TAP关闭前关闭命令行及脚本"
+msgstr "TUN/TAP 关闭前的命令行及脚本"
msgid "Certificate authority"
msgstr "认证授权"
@@ -98,10 +101,10 @@ msgid "Configure server mode"
msgstr "配置服务器模式"
msgid "Connect through Socks5 proxy"
-msgstr "通过Sock5代理连接"
+msgstr "通过 Sock5 代理连接"
msgid "Connect to remote host through an HTTP proxy"
-msgstr "通过HTTP代理连接到远程主机"
+msgstr "通过 HTTP 代理连接到远程主机"
msgid "Connection retry interval"
msgstr "连接重试时间间隔"
@@ -110,13 +113,13 @@ msgid "Daemonize after initialization"
msgstr "初始化后进入后台运行"
msgid "Delay n seconds after connection"
-msgstr "连接后延迟时间(秒)"
+msgstr "连接后延迟时间(秒)"
msgid "Delay tun/tap open and up script execution"
-msgstr "延迟tun/tap的打开并加速脚本执行"
+msgstr "延迟 tun/tap 的打开及 up 脚本的执行"
msgid "Diffie Hellman parameters"
-msgstr "Diffie–Hellman/DH密钥交换 参数"
+msgstr "Diffie–Hellman/DH 密钥交换参数"
msgid "Directory for custom client config files"
msgstr "自定义客户端配置文件的目录"
@@ -137,13 +140,13 @@ msgid "Do not bind to local address and port"
msgstr "不绑定本地地址和端口"
msgid "Don't actually execute ifconfig"
-msgstr "不实际执行ifconfig命令"
+msgstr "不实际执行 ifconfig 命令"
msgid "Don't add routes automatically"
msgstr "不自动添加路由"
msgid "Don't cache --askpass or --auth-user-pass passwords"
-msgstr "不缓存--askpass 或--auth-user-pass passwords"
+msgstr "不缓存 --askpass 或 --auth-user-pass passwords"
msgid "Don't inherit global push options"
msgstr "不继承全局主动发送选项"
@@ -152,7 +155,7 @@ msgid "Don't log timestamps"
msgstr "不记录时间戳"
msgid "Don't pull routes automatically"
-msgstr ""
+msgstr "不自动拉取路由"
msgid "Don't re-read key on restart"
msgstr "服务重启时不重读密钥值"
@@ -161,49 +164,52 @@ msgid "Don't require client certificate"
msgstr "不需要客户的证书"
msgid "Don't use adaptive lzo compression"
-msgstr "不用自适应的lzo压缩"
+msgstr "不用自适应 lzo 压缩"
msgid "Don't warn on ifconfig inconsistencies"
-msgstr "ifconfig不一致时不警告"
+msgstr "ifconfig 不一致时不警告"
msgid "Echo parameters to log"
msgstr "把参数写入日志"
msgid "Empirically measure MTU"
-msgstr "以历史值估算MTU值"
+msgstr "以历史值估算 MTU 值"
msgid "Enable OpenSSL hardware crypto engines"
-msgstr "打开OpenSSL硬件加密引擎"
+msgstr "打开 OpenSSL 硬件加密引擎"
msgid "Enable Path MTU discovery"
-msgstr "启用路径MTU发现"
+msgstr "启用路径 MTU 发现"
msgid "Enable Static Key encryption mode (non-TLS)"
msgstr "允许静态密钥加密模式"
msgid "Enable TLS and assume client role"
-msgstr "允许TLS并伪装为客户端"
+msgstr "允许 TLS 并伪装为客户端"
msgid "Enable TLS and assume server role"
-msgstr "允许TLS并伪装为服务器"
+msgstr "允许 TLS 并伪装为服务器"
msgid "Enable internal datagram fragmentation"
msgstr "允许内部数据报分片"
msgid "Enable management interface on <em>IP</em> <em>port</em>"
-msgstr "在<em>IP</em> <em>port</em>上启用可管理接口"
+msgstr "在 <em>IP</em> <em>port</em> 上启用可管理接口"
msgid "Enabled"
msgstr "启用"
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr "使用密钥加密及认证所有的控制通道数据包"
+
msgid "Encryption cipher for packets"
msgstr "加密数据包"
msgid "Execute shell cmd after routes are added"
-msgstr "添加路由后执行shell命令"
+msgstr "添加路由后执行 shell 命令"
msgid "Execute shell command on remote ip change"
-msgstr "当远程ip改变时执行shell命令"
+msgstr "当远程 ip 改变时执行 shell 命令"
msgid ""
"Executed in server mode on new client connections, when the client is still "
@@ -214,16 +220,16 @@ msgid ""
"Executed in server mode whenever an IPv4 address/route or MAC address is "
"added to OpenVPN's internal routing table"
msgstr ""
-"服务器模式下,将每个IPv4地址/路由或MAC地址添加到OpenVPN的内部路由表中。"
+"服务器模式下,将每个 IPv4 地址/路由或 MAC 地址添加到 OpenVPN 的内部路由表中。"
msgid "Exit on TLS negotiation failure"
-msgstr "TLS验证失败后退出"
+msgstr "TLS 验证失败后退出"
msgid "Get PEM password from controlling tty before we daemonize"
-msgstr "后台运行前从控制的tty中获取PEM密码"
+msgstr "后台运行前从控制的 tty 中获取 PEM 密码"
msgid "HMAC authentication for packets"
-msgstr "利用HMAC水印算法校验数据包"
+msgstr "利用 HMAC 算法校验数据包"
msgid "Handling of authentication failures"
msgstr "处理验证失败"
@@ -231,7 +237,7 @@ msgstr "处理验证失败"
msgid ""
"Helper directive to simplify the expression of --ping and --ping-restart in "
"server mode configurations"
-msgstr "在服务配置模式下Helper简明的执行--ping和--ping-restart"
+msgstr "在服务配置模式下简化 Helper 指令 --ping 和 --ping-restart 的表达式"
msgid "If hostname resolve fails, retry"
msgstr "如果主机名解析错误,重试"
@@ -243,10 +249,10 @@ msgid "Invalid"
msgstr "无效"
msgid "Keep local IP address on restart"
-msgstr "服务重启时保持本地IP地址"
+msgstr "服务重启时保持本地 IP 地址"
msgid "Keep remote IP address on restart"
-msgstr "服务重启时保持远程IP地址"
+msgstr "服务重启时保持远程 IP 地址"
msgid "Keep tun/tap device open on restart"
msgstr "服务重启时自动打开 tun/tap 设备"
@@ -255,22 +261,22 @@ msgid "Key transition window"
msgstr "密钥传输滑动窗口"
msgid "Limit repeated log messages"
-msgstr "限制重复性的日志消息"
+msgstr "限制重复的日志消息"
msgid "Local certificate"
msgstr "本地证书"
msgid "Local host name or ip address"
-msgstr "本地主机名或ip地址"
+msgstr "本地主机名或 ip 地址"
msgid "Local private key"
-msgstr "本地私人密钥"
+msgstr "本地私钥"
msgid "Major mode"
msgstr "主要模式"
msgid "Make tun device IPv6 capable"
-msgstr "使 tun 设备兼容IPv6"
+msgstr "使 tun 设备兼容 IPv6"
msgid "Maximum number of queued TCP output packets"
msgstr "TCP队列中输出包的最大数量"
@@ -282,10 +288,10 @@ msgid "Number of lines for log file history"
msgstr "历史日志文件的行数"
msgid "Only accept connections from given X509 name"
-msgstr "只接收已给定的X509名称的连接"
+msgstr "只接收已给定的 X509 名称的连接"
msgid "Only process ping timeouts if routes exist"
-msgstr "当且仅当路由存在时处理ping超时"
+msgstr "仅当路由存在时处理 ping 超时"
msgid "OpenVPN"
msgstr "OpenVPN"
@@ -297,13 +303,13 @@ msgid "Optimize TUN/TAP/UDP writes"
msgstr "优化 TUN/TAP/UDP 写入"
msgid "Output to syslog and do not daemonize"
-msgstr "显式输出到syslog"
+msgstr "输出到 syslog,不运行守护进程"
msgid "Overview"
msgstr "概览"
msgid "PKCS#12 file containing keys"
-msgstr "PKCS#12文件包含的密钥"
+msgstr "PKCS#12 文件包含的密钥"
msgid "Pass environment variables to script"
msgstr "传递环境变量至脚本"
@@ -312,10 +318,10 @@ msgid "Persist replay-protection state"
msgstr "保存重播保护的状态"
msgid "Persist/unpersist ifconfig-pool"
-msgstr "持久/非持久ifconfig池"
+msgstr "持久/非持久 ifconfig 池"
msgid "Ping remote every n seconds over TCP/UDP port"
-msgstr "每n秒ping一次远程 TCP/UDP 端口"
+msgstr "每 n 秒 ping 一次远程 TCP/UDP 端口"
msgid "Policy level over usage of external programs and scripts"
msgstr "外部程序和脚本超出了策略允许的使用范围"
@@ -330,13 +336,13 @@ msgid "Proxy timeout in seconds"
msgstr "代理超时,单位秒"
msgid "Push an ifconfig option to remote"
-msgstr "主动向远程发送ifconfig选项"
+msgstr "主动向远程发送 ifconfig 选项"
msgid "Push options to peer"
msgstr "主动向端点发送选项"
msgid "Query management channel for private key"
-msgstr "为私人密钥查询管理通道"
+msgstr "为私钥查询管理通道"
msgid "Randomly choose remote server"
msgstr "随机选择远程服务器"
@@ -345,13 +351,13 @@ msgid "Refuse connection if no custom client config"
msgstr "拒接没有自定义客户端配置的连接"
msgid "Remap SIGUSR1 signals"
-msgstr "重映射SIGUSR1信号"
+msgstr "重映射 SIGUSR1 信号"
msgid "Remote host name or ip address"
-msgstr "远程主机名或ip地址"
+msgstr "远程主机名或 ip 地址"
msgid "Remote ping timeout"
-msgstr "远程ping超时"
+msgstr "远程 ping 超时"
msgid "Renegotiate data chan. key after bytes"
msgstr "传输若干字节后重新验证数据通道密钥"
@@ -372,22 +378,22 @@ msgid "Require explicit key usage on certificate"
msgstr "证书需要明确的密钥"
msgid "Restart after remote ping timeout"
-msgstr "远程ping超时后重启"
+msgstr "远程 ping 超时后重启"
msgid "Retransmit timeout on TLS control channel"
-msgstr "TLS控制通道超时后重新发送"
+msgstr "TLS 控制通道超时后重新发送"
msgid "Retry indefinitely on HTTP proxy errors"
msgstr "无限重试直至代理正确"
msgid "Retry indefinitely on Socks proxy errors"
-msgstr "无限重试直至Socks代理正确"
+msgstr "无限重试直至 Socks 代理正确"
msgid "Route subnet to client"
msgstr "路由子网至客户端"
msgid "Run as an inetd or xinetd server"
-msgstr "以inetd或xinetd服务器的方式运行"
+msgstr "以 inetd 或 xinetd 服务器的方式运行"
msgid "Run script cmd on client connection"
msgstr "当客户端连接时在命令行下允许脚本"
@@ -402,19 +408,19 @@ msgid "Send notification to peer on disconnect"
msgstr "断开连接时向客户端发送通知"
msgid "Set GID to group"
-msgstr "为群组设置GID值"
+msgstr "为群组设置 GID 值"
msgid "Set TCP/UDP MTU"
-msgstr "设置TCP/UDP的MTU值"
+msgstr "设置 TCP/UDP 的 MTU 值"
msgid "Set UID to user"
-msgstr "为用户设置UID值"
+msgstr "为用户设置 UID 值"
msgid "Set aside a pool of subnets"
-msgstr "设置为拒绝子网线程池模式"
+msgstr "设置子网池"
msgid "Set extended HTTP proxy options"
-msgstr "设置HTTP扩展代理选项"
+msgstr "设置 HTTP 扩展代理选项"
msgid "Set output verbosity"
msgstr "设置输出冗余级别"
@@ -423,37 +429,37 @@ msgid "Set size of real and virtual address hash tables"
msgstr "设置实际和虚拟地址的哈希表大小"
msgid "Set the TCP/UDP receive buffer size"
-msgstr "设置TCP/UDP接收缓冲区大小"
+msgstr "设置 TCP/UDP 接收缓冲区大小"
msgid "Set the TCP/UDP send buffer size"
-msgstr "设置TCP/UDP发送缓冲区大小"
+msgstr "设置 TCP/UDP 发送缓冲区大小"
msgid "Set tun/tap TX queue length"
-msgstr "设置tun/tap发送队列长度"
+msgstr "设置 tun/tap 发送队列长度"
msgid "Set tun/tap adapter parameters"
-msgstr "设置tun/ tap适配器参数"
+msgstr "设置 tun/tap 适配器参数"
msgid "Set tun/tap device MTU"
-msgstr "设置tun/tap设备的MTU值"
+msgstr "设置 tun/tap 设备的 MTU 值"
msgid "Set tun/tap device overhead"
-msgstr "设置tun/tap设备的开销"
+msgstr "设置 tun/tap 设备的开销"
msgid "Set upper bound on TCP MSS"
-msgstr "设置TCP MSS的上限"
+msgstr "设置 TCP MSS 上限"
msgid "Shaping for peer bandwidth"
msgstr "改变结点带宽"
msgid "Shell cmd to execute after tun device open"
-msgstr "tun设备打开后运行shell命令行"
+msgstr "tun 设备打开后运行的 shell 命令"
msgid "Shell cmd to run after tun device close"
-msgstr "tun设备关闭后运行shell命令行e"
+msgstr "tun 设备关闭后运行的 shell 命令"
msgid "Shell command to verify X509 name"
-msgstr "运行shell命令以验证X509名称"
+msgstr "运行 shell 命令以验证 X509 名称"
msgid "Silence the output of replay warnings"
msgstr "以静音的方式发出重播警告"
@@ -465,7 +471,7 @@ msgid "Specify a default gateway for routes"
msgstr "指定路由默认网关"
msgid "Start OpenVPN in a hibernating state"
-msgstr "以休眠的状态打开OpenVPN"
+msgstr "以休眠的状态打开 OpenVPN"
msgid "Start/Stop"
msgstr "启动/停止"
@@ -483,28 +489,28 @@ msgid "TCP/UDP port # for both local and remote"
msgstr "TCP/UDP 端口 # 同时针对本地和远程"
msgid "TCP/UDP port # for local (default=1194)"
-msgstr "TCP/UDP 端口 # 本地 (默认 1194)"
+msgstr "TCP/UDP 端口 # 本地(默认 1194)"
msgid "TCP/UDP port # for remote (default=1194)"
-msgstr "TCP/UDP 端口 # 远程 (默认 1194)"
+msgstr "TCP/UDP 端口 # 远程(默认 1194)"
msgid "TLS cipher"
-msgstr "TLS加密"
+msgstr "TLS 加密"
msgid "TOS passthrough (applies to IPv4 only)"
-msgstr "TOS 穿透 (仅限IPv4)"
+msgstr "TOS 穿透(仅限 IPv4)"
msgid "Temporary directory for client-connect return file"
msgstr "客户端连接返回文件的临时目录"
msgid "The highest supported TLS version"
-msgstr ""
+msgstr "最高支持的 TLS 版本"
msgid "The key direction for 'tls-auth' and 'secret' options"
-msgstr ""
+msgstr "“tls-auth”和“secret”选项的密钥类型"
msgid "The lowest supported TLS version"
-msgstr ""
+msgstr "最低支持的 TLS 版本"
msgid "Timeframe for key exchange"
msgstr "密钥交换时间表"
@@ -513,10 +519,10 @@ msgid "Type of used device"
msgstr "使用设备类型"
msgid "Use fast LZO compression"
-msgstr "使用快速LZO压缩"
+msgstr "使用快速 LZO 压缩"
msgid "Use individual addresses rather than /30 subnets"
-msgstr "利用个人地址代替/30 子网"
+msgstr "使用独立的地址代替 /30 子网"
msgid "Use protocol"
msgstr "采用协议"
@@ -531,10 +537,10 @@ msgid "Write log to file"
msgstr "保存日志至文件"
msgid "Write process ID to file"
-msgstr "记录进程ID至文件"
+msgstr "记录进程 ID 至文件"
msgid "Write status to file every n seconds"
-msgstr "每n秒后写状态值至文件"
+msgstr "每 n 秒后写入状态至文件"
msgid "no"
msgstr "否"
@@ -546,7 +552,7 @@ msgid "tun/tap inactivity timeout"
msgstr "tun/tap 休眠超时"
msgid "yes (%i)"
-msgstr "是 (%i)"
+msgstr "是(%i)"
msgid "« Switch to basic configuration"
msgstr "« 基本配置"
diff --git a/applications/luci-app-openvpn/po/zh-tw/openvpn.po b/applications/luci-app-openvpn/po/zh-tw/openvpn.po
index f26aeb097a..38bb6fcd0e 100644
--- a/applications/luci-app-openvpn/po/zh-tw/openvpn.po
+++ b/applications/luci-app-openvpn/po/zh-tw/openvpn.po
@@ -1,545 +1,570 @@
+#
+# Yangfl <mmyangfl@gmail.com>, 2017.
+#
msgid ""
msgstr ""
-"Content-Type: text/plain; charset=UTF-8\n"
-"Project-Id-Version: PACKAGE VERSION\n"
-"Last-Translator: Automatically generated\n"
-"Language-Team: none\n"
+"Project-Id-Version: \n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2009-05-19 19:35+0200\n"
+"PO-Revision-Date: 2017-10-29 14:37+0800\n"
+"Last-Translator: Yangfl <mmyangfl@gmail.com>\n"
+"Language-Team: <debian-l10n-chinese@lists.debian.org>\n"
+"Language: zh_TW\n"
"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Generator: Gtranslator 2.91.7\n"
msgid "%s"
-msgstr ""
+msgstr "%s"
msgid "'net30', 'p2p', or 'subnet'"
-msgstr ""
+msgstr "“net30”,“p2p”,或“subnet”"
msgid "Accept options pushed from server"
-msgstr ""
+msgstr "接受從伺服器傳送過來的選項"
msgid "Add"
-msgstr ""
+msgstr "新增"
msgid "Add route after establishing connection"
-msgstr ""
+msgstr "建立連線後新增路由"
msgid "Additional authentication over TLS"
-msgstr ""
+msgstr "TLS 以外的驗證"
msgid "Allow client-to-client traffic"
-msgstr ""
+msgstr "允許客戶端到客戶端的通訊"
msgid "Allow multiple clients with same certificate"
-msgstr ""
+msgstr "允許多使用者共用同一證書"
msgid "Allow only one session"
-msgstr ""
+msgstr "只允許一個會話"
msgid "Allow remote to change its IP or port"
-msgstr ""
+msgstr "允許遠端改變 IP 或埠"
msgid "Allowed maximum of connected clients"
-msgstr ""
+msgstr "允許最大已連線客戶端數"
msgid "Allowed maximum of internal"
-msgstr ""
+msgstr "允許最大內部連線"
msgid "Allowed maximum of new connections"
-msgstr ""
+msgstr "允許最大新建連線數"
msgid "Append log to file"
-msgstr ""
+msgstr "新增日誌至檔案"
msgid "Authenticate using username/password"
-msgstr ""
+msgstr "以使用者名稱/密碼的方式進行驗證"
msgid "Automatically redirect default route"
-msgstr ""
+msgstr "自動重定向至預設路由"
msgid "Below is a list of configured OpenVPN instances and their current state"
-msgstr ""
+msgstr "以下是 OpenVPN 已配置例項及其當前狀態的列表"
msgid "Call down cmd/script before TUN/TAP close"
-msgstr ""
+msgstr "TUN/TAP 關閉前的命令列及指令碼"
msgid "Certificate authority"
-msgstr ""
+msgstr "認證授權"
msgid "Change process priority"
-msgstr ""
+msgstr "改變程序優先順序"
msgid "Change to directory before initialization"
-msgstr ""
+msgstr "初始化前改變根目錄"
msgid "Check peer certificate against a CRL"
-msgstr ""
+msgstr "驗證客戶端證書以確保其是否過期"
msgid "Chroot to directory after initialization"
-msgstr ""
+msgstr "初始化後改變根目錄"
msgid "Client is disabled"
-msgstr ""
+msgstr "客戶端已被禁止"
msgid "Configuration category"
-msgstr ""
+msgstr "配置分類"
msgid "Configure client mode"
-msgstr ""
+msgstr "配置客戶端模式"
msgid "Configure server bridge"
-msgstr ""
+msgstr "配置伺服器橋接"
msgid "Configure server mode"
-msgstr ""
+msgstr "配置伺服器模式"
msgid "Connect through Socks5 proxy"
-msgstr ""
+msgstr "通過 Sock5 代理連線"
msgid "Connect to remote host through an HTTP proxy"
-msgstr ""
+msgstr "通過 HTTP 代理連線到遠端主機"
msgid "Connection retry interval"
-msgstr ""
+msgstr "連線重試時間間隔"
msgid "Daemonize after initialization"
-msgstr ""
+msgstr "初始化後進入後臺執行"
msgid "Delay n seconds after connection"
-msgstr ""
+msgstr "連線後延遲時間(秒)"
msgid "Delay tun/tap open and up script execution"
-msgstr ""
+msgstr "延遲 tun/tap 的開啟及 up 指令碼的執行"
msgid "Diffie Hellman parameters"
-msgstr ""
+msgstr "Diffie–Hellman/DH 金鑰交換引數"
msgid "Directory for custom client config files"
-msgstr ""
+msgstr "自定義客戶端配置檔案的目錄"
msgid "Disable Paging"
-msgstr ""
+msgstr "禁止分頁"
msgid "Disable cipher initialisation vector"
-msgstr ""
+msgstr "關閉加密的初始化向量"
msgid "Disable options consistency check"
-msgstr ""
+msgstr "禁止選項一致性檢查"
msgid "Disable replay protection"
-msgstr ""
+msgstr "關閉重播保護"
msgid "Do not bind to local address and port"
-msgstr ""
+msgstr "不繫結本地位址和埠"
msgid "Don't actually execute ifconfig"
-msgstr ""
+msgstr "不實際執行 ifconfig 命令"
msgid "Don't add routes automatically"
-msgstr ""
+msgstr "不自動新增路由"
msgid "Don't cache --askpass or --auth-user-pass passwords"
-msgstr ""
+msgstr "不快取 --askpass 或 --auth-user-pass passwords"
msgid "Don't inherit global push options"
-msgstr ""
+msgstr "不繼承全域性主動傳送選項"
msgid "Don't log timestamps"
-msgstr ""
+msgstr "不記錄時間戳"
msgid "Don't pull routes automatically"
-msgstr ""
+msgstr "不自動拉取路由"
msgid "Don't re-read key on restart"
-msgstr ""
+msgstr "服務重啟時不重讀金鑰值"
msgid "Don't require client certificate"
-msgstr ""
+msgstr "不需要客戶的證書"
msgid "Don't use adaptive lzo compression"
-msgstr ""
+msgstr "不用自適應 lzo 壓縮"
msgid "Don't warn on ifconfig inconsistencies"
-msgstr ""
+msgstr "ifconfig 不一致時不警告"
msgid "Echo parameters to log"
-msgstr ""
+msgstr "把引數寫入日誌"
msgid "Empirically measure MTU"
-msgstr ""
+msgstr "以歷史值估算 MTU 值"
msgid "Enable OpenSSL hardware crypto engines"
-msgstr ""
+msgstr "開啟 OpenSSL 硬體加密引擎"
msgid "Enable Path MTU discovery"
-msgstr ""
+msgstr "啟用路徑 MTU 發現"
msgid "Enable Static Key encryption mode (non-TLS)"
-msgstr ""
+msgstr "允許靜態金鑰加密模式"
msgid "Enable TLS and assume client role"
-msgstr ""
+msgstr "允許 TLS 並偽裝為客戶端"
msgid "Enable TLS and assume server role"
-msgstr ""
+msgstr "允許 TLS 並偽裝為伺服器"
msgid "Enable internal datagram fragmentation"
-msgstr ""
+msgstr "允許內部資料報分片"
msgid "Enable management interface on <em>IP</em> <em>port</em>"
-msgstr ""
+msgstr "在 <em>IP</em> <em>port</em> 上啟用可管理介面"
msgid "Enabled"
-msgstr ""
+msgstr "啟用"
+
+msgid "Encrypt and authenticate all control channel packets with the key"
+msgstr "使用金鑰加密及認證所有的控制通道資料包"
msgid "Encryption cipher for packets"
-msgstr ""
+msgstr "加密資料包"
msgid "Execute shell cmd after routes are added"
-msgstr ""
+msgstr "新增路由後執行 shell 命令"
msgid "Execute shell command on remote ip change"
-msgstr ""
+msgstr "當遠端 ip 改變時執行 shell 命令"
msgid ""
"Executed in server mode on new client connections, when the client is still "
"untrusted"
-msgstr ""
+msgstr "在伺服器模式下執行新的客戶端連線,當客戶端仍然是不可信"
msgid ""
"Executed in server mode whenever an IPv4 address/route or MAC address is "
"added to OpenVPN's internal routing table"
msgstr ""
+"伺服器模式下,將每個 IPv4 位址/路由或 MAC 位址新增到 OpenVPN 的內部路由表中。"
msgid "Exit on TLS negotiation failure"
-msgstr ""
+msgstr "TLS 驗證失敗後退出"
msgid "Get PEM password from controlling tty before we daemonize"
-msgstr ""
+msgstr "後臺執行前從控制的 tty 中獲取 PEM 密碼"
msgid "HMAC authentication for packets"
-msgstr ""
+msgstr "利用 HMAC 演算法校驗資料包"
msgid "Handling of authentication failures"
-msgstr ""
+msgstr "處理驗證失敗"
msgid ""
"Helper directive to simplify the expression of --ping and --ping-restart in "
"server mode configurations"
-msgstr ""
+msgstr "在服務配置模式下簡化 Helper 指令 --ping 和 --ping-restart 的表示式"
msgid "If hostname resolve fails, retry"
-msgstr ""
+msgstr "如果主機名解析錯誤,重試"
msgid "Instance \"%s\""
-msgstr ""
+msgstr "例項 \"%s\""
msgid "Invalid"
-msgstr ""
+msgstr "無效"
msgid "Keep local IP address on restart"
-msgstr ""
+msgstr "服務重啟時保持本地 IP 位址"
msgid "Keep remote IP address on restart"
-msgstr ""
+msgstr "服務重啟時保持遠端 IP 位址"
msgid "Keep tun/tap device open on restart"
-msgstr ""
+msgstr "服務重啟時自動開啟 tun/tap 裝置"
msgid "Key transition window"
-msgstr ""
+msgstr "金鑰傳輸滑動視窗"
msgid "Limit repeated log messages"
-msgstr ""
+msgstr "限制重複的日誌訊息"
msgid "Local certificate"
-msgstr ""
+msgstr "本地證書"
msgid "Local host name or ip address"
-msgstr ""
+msgstr "本地主機名或 ip 位址"
msgid "Local private key"
-msgstr ""
+msgstr "本地私鑰"
msgid "Major mode"
-msgstr ""
+msgstr "主要模式"
msgid "Make tun device IPv6 capable"
-msgstr ""
+msgstr "使 tun 裝置相容 IPv6"
msgid "Maximum number of queued TCP output packets"
-msgstr ""
+msgstr "TCP佇列中輸出包的最大數量"
msgid "Number of allocated broadcast buffers"
-msgstr ""
+msgstr "已分配的廣播緩衝區數量"
msgid "Number of lines for log file history"
-msgstr ""
+msgstr "歷史日誌檔案的行數"
msgid "Only accept connections from given X509 name"
-msgstr ""
+msgstr "只接收已給定的 X509 名稱的連線"
msgid "Only process ping timeouts if routes exist"
-msgstr ""
+msgstr "僅當路由存在時處理 ping 超時"
msgid "OpenVPN"
-msgstr ""
+msgstr "OpenVPN"
msgid "OpenVPN instances"
-msgstr ""
+msgstr "OpenVPN 例項"
msgid "Optimize TUN/TAP/UDP writes"
-msgstr ""
+msgstr "優化 TUN/TAP/UDP 寫入"
msgid "Output to syslog and do not daemonize"
-msgstr ""
+msgstr "輸出到 syslog,不執行守護程序"
msgid "Overview"
-msgstr ""
+msgstr "概覽"
msgid "PKCS#12 file containing keys"
-msgstr ""
+msgstr "PKCS#12 檔案包含的金鑰"
msgid "Pass environment variables to script"
-msgstr ""
+msgstr "傳遞環境變數至指令碼"
msgid "Persist replay-protection state"
-msgstr ""
+msgstr "儲存重播保護的狀態"
msgid "Persist/unpersist ifconfig-pool"
-msgstr ""
+msgstr "持久/非持久 ifconfig 池"
msgid "Ping remote every n seconds over TCP/UDP port"
-msgstr ""
+msgstr "每 n 秒 ping 一次遠端 TCP/UDP 埠"
msgid "Policy level over usage of external programs and scripts"
-msgstr ""
+msgstr "外部程式和指令碼超出了策略允許的使用範圍"
msgid "Port"
-msgstr ""
+msgstr "埠"
msgid "Protocol"
-msgstr ""
+msgstr "協議"
msgid "Proxy timeout in seconds"
-msgstr ""
+msgstr "代理超時,單位秒"
msgid "Push an ifconfig option to remote"
-msgstr ""
+msgstr "主動向遠端傳送 ifconfig 選項"
msgid "Push options to peer"
-msgstr ""
+msgstr "主動向端點發送選項"
msgid "Query management channel for private key"
-msgstr ""
+msgstr "為私鑰查詢管理通道"
msgid "Randomly choose remote server"
-msgstr ""
+msgstr "隨機選擇遠端伺服器"
msgid "Refuse connection if no custom client config"
-msgstr ""
+msgstr "拒接沒有自定義客戶端配置的連線"
msgid "Remap SIGUSR1 signals"
-msgstr ""
+msgstr "重對映 SIGUSR1 訊號"
msgid "Remote host name or ip address"
-msgstr ""
+msgstr "遠端主機名或 ip 位址"
msgid "Remote ping timeout"
-msgstr ""
+msgstr "遠端 ping 超時"
msgid "Renegotiate data chan. key after bytes"
-msgstr ""
+msgstr "傳輸若干位元組後重新驗證資料通道金鑰"
msgid "Renegotiate data chan. key after packets"
-msgstr ""
+msgstr "傳輸若干資料包後重新驗證資料通道金鑰"
msgid "Renegotiate data chan. key after seconds"
-msgstr ""
+msgstr "傳輸若干秒後重新驗證資料通道金鑰"
msgid "Replay protection sliding window size"
-msgstr ""
+msgstr "重播保護的滑動視窗大小"
msgid "Require explicit designation on certificate"
-msgstr ""
+msgstr "證書需要顯式指定"
msgid "Require explicit key usage on certificate"
-msgstr ""
+msgstr "證書需要明確的金鑰"
msgid "Restart after remote ping timeout"
-msgstr ""
+msgstr "遠端 ping 超時後重啟"
msgid "Retransmit timeout on TLS control channel"
-msgstr ""
+msgstr "TLS 控制通道超時後重新發送"
msgid "Retry indefinitely on HTTP proxy errors"
-msgstr ""
+msgstr "無限重試直至代理正確"
msgid "Retry indefinitely on Socks proxy errors"
-msgstr ""
+msgstr "無限重試直至 Socks 代理正確"
msgid "Route subnet to client"
-msgstr ""
+msgstr "路由子網至客戶端"
msgid "Run as an inetd or xinetd server"
-msgstr ""
+msgstr "以 inetd 或 xinetd 伺服器的方式執行"
msgid "Run script cmd on client connection"
-msgstr ""
+msgstr "當客戶端連線時在命令列下允許指令碼"
msgid "Run script cmd on client disconnection"
-msgstr ""
+msgstr "當客戶端斷開時在命令列下允許指令碼"
msgid "Run up/down scripts for all restarts"
-msgstr ""
+msgstr "每次重啟都執行啟動/關閉指令碼"
msgid "Send notification to peer on disconnect"
-msgstr ""
+msgstr "斷開連線時向客戶端傳送通知"
msgid "Set GID to group"
-msgstr ""
+msgstr "為群組設定 GID 值"
msgid "Set TCP/UDP MTU"
-msgstr ""
+msgstr "設定 TCP/UDP 的 MTU 值"
msgid "Set UID to user"
-msgstr ""
+msgstr "為使用者設定 UID 值"
msgid "Set aside a pool of subnets"
-msgstr ""
+msgstr "設定子網池"
msgid "Set extended HTTP proxy options"
-msgstr ""
+msgstr "設定 HTTP 擴充套件代理選項"
msgid "Set output verbosity"
-msgstr ""
+msgstr "設定輸出冗餘級別"
msgid "Set size of real and virtual address hash tables"
-msgstr ""
+msgstr "設定實際和虛擬位址的雜湊表大小"
msgid "Set the TCP/UDP receive buffer size"
-msgstr ""
+msgstr "設定 TCP/UDP 接收緩衝區大小"
msgid "Set the TCP/UDP send buffer size"
-msgstr ""
+msgstr "設定 TCP/UDP 傳送緩衝區大小"
msgid "Set tun/tap TX queue length"
-msgstr ""
+msgstr "設定 tun/tap 傳送佇列長度"
msgid "Set tun/tap adapter parameters"
-msgstr ""
+msgstr "設定 tun/tap 介面卡引數"
msgid "Set tun/tap device MTU"
-msgstr ""
+msgstr "設定 tun/tap 裝置的 MTU 值"
msgid "Set tun/tap device overhead"
-msgstr ""
+msgstr "設定 tun/tap 裝置的開銷"
msgid "Set upper bound on TCP MSS"
-msgstr ""
+msgstr "設定 TCP MSS 上限"
msgid "Shaping for peer bandwidth"
-msgstr ""
+msgstr "改變結點頻寬"
msgid "Shell cmd to execute after tun device open"
-msgstr ""
+msgstr "tun 裝置開啟後執行的 shell 命令"
msgid "Shell cmd to run after tun device close"
-msgstr ""
+msgstr "tun 裝置關閉後執行的 shell 命令"
msgid "Shell command to verify X509 name"
-msgstr ""
+msgstr "執行 shell 命令以驗證 X509 名稱"
msgid "Silence the output of replay warnings"
-msgstr ""
+msgstr "以靜音的方式發出重播警告"
msgid "Size of cipher key"
-msgstr ""
+msgstr "金鑰大小"
msgid "Specify a default gateway for routes"
-msgstr ""
+msgstr "指定路由預設閘道器"
msgid "Start OpenVPN in a hibernating state"
-msgstr ""
+msgstr "以休眠的狀態開啟 OpenVPN"
msgid "Start/Stop"
-msgstr ""
+msgstr "啟動/停止"
msgid "Started"
-msgstr ""
+msgstr "已執行的"
msgid "Status file format version"
-msgstr ""
+msgstr "顯式檔案格式版本的狀態"
msgid "Switch to advanced configuration »"
-msgstr ""
+msgstr "高階配置 »"
msgid "TCP/UDP port # for both local and remote"
-msgstr ""
+msgstr "TCP/UDP 埠 # 同時針對本地和遠端"
msgid "TCP/UDP port # for local (default=1194)"
-msgstr ""
+msgstr "TCP/UDP 埠 # 本地(預設 1194)"
msgid "TCP/UDP port # for remote (default=1194)"
-msgstr ""
+msgstr "TCP/UDP 埠 # 遠端(預設 1194)"
msgid "TLS cipher"
-msgstr ""
+msgstr "TLS 加密"
msgid "TOS passthrough (applies to IPv4 only)"
-msgstr ""
+msgstr "TOS 穿透(僅限 IPv4)"
msgid "Temporary directory for client-connect return file"
-msgstr ""
+msgstr "客戶端連線返回檔案的臨時目錄"
msgid "The highest supported TLS version"
-msgstr ""
+msgstr "最高支援的 TLS 版本"
msgid "The key direction for 'tls-auth' and 'secret' options"
-msgstr ""
+msgstr "“tls-auth”和“secret”選項的金鑰型別"
msgid "The lowest supported TLS version"
-msgstr ""
+msgstr "最低支援的 TLS 版本"
msgid "Timeframe for key exchange"
-msgstr ""
+msgstr "金鑰交換時間表"
msgid "Type of used device"
-msgstr ""
+msgstr "使用裝置型別"
msgid "Use fast LZO compression"
-msgstr ""
+msgstr "使用快速 LZO 壓縮"
msgid "Use individual addresses rather than /30 subnets"
-msgstr ""
+msgstr "使用獨立的位址代替 /30 子網"
msgid "Use protocol"
-msgstr ""
+msgstr "採用協議"
msgid "Use tun/tap device node"
-msgstr ""
+msgstr "使用 tun/tap 裝置節點"
msgid "Use username as common name"
-msgstr ""
+msgstr "把使用者名稱作為通用名稱"
msgid "Write log to file"
-msgstr ""
+msgstr "儲存日誌至檔案"
msgid "Write process ID to file"
-msgstr ""
+msgstr "記錄程序 ID 至檔案"
msgid "Write status to file every n seconds"
-msgstr ""
+msgstr "每 n 秒後寫入狀態至檔案"
msgid "no"
-msgstr ""
+msgstr "否"
msgid "tun/tap device"
-msgstr ""
+msgstr "tun/tap 裝置"
msgid "tun/tap inactivity timeout"
-msgstr ""
+msgstr "tun/tap 休眠超時"
msgid "yes (%i)"
-msgstr ""
+msgstr "是(%i)"
msgid "« Switch to basic configuration"
-msgstr ""
+msgstr "« 基本配置"
+
+#~ msgid "Cryptography"
+#~ msgstr "加密"
+
+#~ msgid "Networking"
+#~ msgstr "網路"
+
+#~ msgid "Service"
+#~ msgstr "服務"
+
+#~ msgid "VPN"
+#~ msgstr "VPN"