summaryrefslogtreecommitdiffhomepage
path: root/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua
AgeCommit message (Collapse)Author
2022-11-03luci-app-openvpn: add possibility to set param "compress" without algorithmMartin Schiller
In some situations you need to set the compress param without an algorithm. Compression will be turned off, but the packet framing for compression will still be enabled, allowing a different setting to be pushed later. As it is not possible to have options with optional values at the moment, I've introduced a pseudo value "frames_only" which will be removed in the init script. Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2021-10-14luci-app-openvpn: add tls_crypt_v2 option for openvpn 2.5Jerome Guidon
So far tls_crypt_v2 is working on openwrt, but the option is missing in the gui. This patch adds the missing option. Signed-off-by: Jerome Guidon <jerome.guidon@outlook.fr>
2021-03-03luci-app-openvpn: add security hint for compressFlorian Eckert
See https://community.openvpn.net/openvpn/wiki/VORACLE Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-03luci-app-openvpn: add compress option stub-v2Florian Eckert
See https://community.openvpn.net/openvpn/wiki/VORACLE Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-03luci-app-openvpn: add security hint for comp-lzoFlorian Eckert
See https://community.openvpn.net/openvpn/wiki/VORACLE Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-05luci-app-openvpn: update tls_cipher listMartin Schiller
Update the list of selectable TLS cipher suites. The previous list consisted mostly of unsupported ciphers and the IANA names should be used. Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2020-01-25luci-app-openvpn: fix advanced mode page switcher translationAnton Kikin
Translation of page titles in the advanced configuration mode is done in such a way that the strings to be translated are not visible for 'i18n-scan.pl' script. This commit fixes this and makes page titles visible for the 'i18n-scan.pl'. Signed-off-by: Anton Kikin <a.kikin@tano-systems.com>
2020-01-20luci-app-openvpn: allow and restrict file uploads to /etc/openvpn/Jo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-01-17luci-app-openvpn: fix typoBalázs Úr
Signed-off-by: Balázs Úr <balazs@urbalazs.hu>
2020-01-09luci-app-openvpn: fix typosBalázs Úr
Signed-off-by: Balázs Úr <balazs@urbalazs.hu>
2019-11-08luci-app-openvpn: do not make "remote" option dependent on client modeJo-Philipp Wich
Fixes: #3279 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-08-06luci-app-openvpn: move to new vpn menu sectionFlorian Eckert
Move the app openvpn to the new vpn menu section. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-08-02luci-app-openvpn: use DynamicList for tls_ciphersuitesFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-08-02luci-app-openvpn: use DynamicList for tls_cipherFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-07-18luci-app-openvpn: add new tls_ciphersuites optionMartin Schiller
This is used to configure ciphers for TLS 1.3 or newer. Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2019-07-17luci-app-openvpn: fix client_disconnect OpenVPN optionjose1711
This option is not a flag. Signed-off-by: Jose Riha <jose1711@gmail.com> [Changed commit message and add missing Singed-off-by] Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-12-13luci-app-openvpn: re-add options comp_lzo and comp_noadaptMartin Schiller
* re-add config option comp_lzo according to openwrt/openwrt@3850b41 * re-add config option comp_noadapt. This has never been removed from openwrt Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2018-11-27luci-app-openvpn: add missing ncp_ciphers optionFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-27luci-app-openvpn: add missing verify_client_cert optionFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-27luci-app-openvpn: add missing compress optionFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-27luci-app-openvpn: predefining the dropdown for the cipher optionFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-27luci-app-openvpn: add missing ncp_disable optionFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-27luci-app-openvpn: add missing allow_recursive_routing optionFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-26luci-app-openvpn: "final" changesetDirk Brenken
* add 'auth-user-pass' edit section in file mode (see screenshot) * add port & protocol detection in file mode (see screenshot) * don't mix file & normal edit modes any longer * add CC compatibility fix (for turris devices) * fix/refine JS instance name filter * remove needless CSS rules * unlink ovpn/auth files on section removal * commit changes instantly (Add/Upload/Delete) Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-11-22luci-app-openvpn: do not show all boolean option by defaultFlorian Eckert
If a new instance is edit then all boolean option are shown on the LuCI. This is confusing. To fix this hide all boolean ellements on the config page which are not enabled by default. They must be add first. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-22luci-app-openvpn: On apply/save redirect to OpenVPN overview pageFlorian Eckert
This change will redirect on apply/save to the OpenVPN overview page. This is the default behaviour on LuCI. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-21luci-app-openvpn: more changes & fixesDirk Brenken
* fix possible exception in template based ovpn creation * remove needless shellquote function in controller, the filename will be checked on client side with JS * enhance FileUpload behaviour in basic/advanced mode: - change "auth_user_pass" to FileUpload - cfg entries (even with default values) will be shown - existing entries are now removable (incl. file unlink), simply clear the appropriate textbox * change "key_direction" option to boolean ListValue * add "config" option to basic/advanced edit, to make it possible to change the upload path in LuCI Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-09-17luci-app-openvpn: remove obsolete config optionsDirk Brenken
* remove obsolete config options according to openwrt/openwrt@89b8ba9, fix for #2135 * whitespace/intendation fixes * replace fieldset leftover with div * fix finally recipe options transfer to regular config with "Add" Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-10-10[luci-app-openvpn] Added support for tls-crypt option.Vladimir Ulrich
Closes #1340 Signed-off-by: Vladimir Ulrich <admin@evl.su>
2017-04-25[luci-app-openvpn] Fixed ivalid checks for parameters in VPN tab.Vladimir Ulrich
closes #887 Signed-off-by: Vladimir Ulrich <admin@evl.su>
2017-04-12luci-app-openvpn: Fix default value for remote_random flagMartin Schiller
Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2017-03-14luci-app-openvpn: fix prettify refactoringFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-03-09luci-app-openvpn: prettify openvpn-advanced parameter setFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2016-06-28luci-app-openvpn: various fixes and optimizationsVladimir Ulrich
Closes #628 as suggestion was implemented and tested. Added PID handling function (Fixes https://dev.openwrt.org/ticket/21506). Signed-off-by: Vladimir Ulrich <admin@evl.su>
2015-12-17Merge pull request #437 from fkooman/issue-436Jo-Philipp Wich
introduce tls_version_min and tls_version_max, add key_direction and …
2015-11-30luci-app-openvpn: add route_nopull (#560)Jo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2015-08-22Enable setting --script-security in client mode.Srdjan Rosic
This is useful in client mode as well, since it allows one to use --route-noexec and --up <cmd> or --route-up <cmd> to create routes manually instead of relying on whatever routes vpn server pushes down to the client. mode=server dependency in luci was introduced together with script_security by mmunz back in 2011.with no explanation in the commit why mode=server was there.
2015-08-15introduce tls_version_min and tls_version_max, add key_direction and change ↵François Kooman
tls_auth and secret config options to use it
2015-01-16Globally reduce copyright headersJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2015-01-08Rework LuCI build systemJo-Philipp Wich
* Rename subdirectories to their repective OpenWrt package names * Make each LuCI module its own standalone package * Deploy a shared luci.mk which is used by each module Makefile Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>