summaryrefslogtreecommitdiffhomepage
path: root/applications/luci-app-openvpn/luasrc
AgeCommit message (Collapse)Author
2023-01-13luci-app-openvpn: fix potential XSS in pageswitch templateJo-Philipp Wich
Ensure to escape URL instance parameter displayed in the heading. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-11-03luci-app-openvpn: add possibility to set param "compress" without algorithmMartin Schiller
In some situations you need to set the compress param without an algorithm. Compression will be turned off, but the packet framing for compression will still be enabled, allowing a different setting to be pushed later. As it is not possible to have options with optional values at the moment, I've introduced a pseudo value "frames_only" which will be removed in the init script. Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2022-10-27Merge pull request #5430 from ↵Florian Eckert
jeje42/feature/luci-app-openvpn-add-tls_crypt_v2-option Add tls_crypt_v2 openvpn option to LuCI.
2022-03-20luci-app-openvpn: fix openvpn config corruption on uploadAnna Tikhomirova
Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
2022-01-25luci-app-openvpn: fix stray uci permission warningJo-Philipp Wich
The OpenVPN file view uses a dummy Map() instance to render the breadcrumb template which triggers a uci permission error since the view is being rendered by a form() action which does not set up the expected permission flags. CBI Map() instances should only be used for cbi() dispatch targets. Solve the issue by appending the breadcrumb template directly to the SimpleForm() instance and by removing the redundant dummy Map() instance. Fixes: #4370 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-10-14luci-app-openvpn: add tls_crypt_v2 option for openvpn 2.5Jerome Guidon
So far tls_crypt_v2 is working on openwrt, but the option is missing in the gui. This patch adds the missing option. Signed-off-by: Jerome Guidon <jerome.guidon@outlook.fr>
2021-07-02luci-app-openvpn: create base directory if not availableDirk Brenken
* trivial fix for never ending ticket #3454 Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-03-03luci-app-openvpn: add security hint for compressFlorian Eckert
See https://community.openvpn.net/openvpn/wiki/VORACLE Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-03luci-app-openvpn: add compress option stub-v2Florian Eckert
See https://community.openvpn.net/openvpn/wiki/VORACLE Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-03luci-app-openvpn: add security hint for comp-lzoFlorian Eckert
See https://community.openvpn.net/openvpn/wiki/VORACLE Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-03luci-app-opvnepn: fix btn classFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-19treewide: adapt to new luci.xml classSven Roederer
In the previous commit the luci.xml module was created, Let's change all references to the old functions to the new xml-module. Signed-off-by: Sven Roederer <freifunk@it-solutions.geroedel.de>
2020-05-05luci-app-openvpn: update tls_cipher listMartin Schiller
Update the list of selectable TLS cipher suites. The previous list consisted mostly of unsupported ciphers and the IANA names should be used. Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2020-04-19applications: add ACL dependency annotations to legacy controllersJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-04-18luci-app-openvpn: parse extended 'remote' syntax as wellDirk Brenken
* parse special 'remote' syntax (remote <host> <port> <proto> as well (removed in last commit by accident) Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-04-18luci-app-openvpn: relax port/protocol parserDirk Brenken
* relax port/protocol parser for ovpn files * limit protocol to 'udp' or 'tcp' Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-03-25luci-app-openvpn: fix upload input validatorDirk Brenken
* accept/replace common '.' seperator in instance names as well, see comment in #2235 Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-01-25luci-app-openvpn: fix advanced mode page switcher translationAnton Kikin
Translation of page titles in the advanced configuration mode is done in such a way that the strings to be translated are not visible for 'i18n-scan.pl' script. This commit fixes this and makes page titles visible for the 'i18n-scan.pl'. Signed-off-by: Anton Kikin <a.kikin@tano-systems.com>
2020-01-20luci-app-openvpn: allow and restrict file uploads to /etc/openvpn/Jo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-01-17luci-app-openvpn: fix typoBalázs Úr
Signed-off-by: Balázs Úr <balazs@urbalazs.hu>
2020-01-09luci-app-openvpn: fix typosBalázs Úr
Signed-off-by: Balázs Úr <balazs@urbalazs.hu>
2019-11-08luci-app-openvpn: do not make "remote" option dependent on client modeJo-Philipp Wich
Fixes: #3279 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-10-14luci-app-openvpn: add missing proto param for ipv6Florian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-08-06luci-app-openvpn: move to new vpn menu sectionFlorian Eckert
Move the app openvpn to the new vpn menu section. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-08-02luci-app-openvpn: use DynamicList for tls_ciphersuitesFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-08-02luci-app-openvpn: use DynamicList for tls_cipherFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-07-18luci-app-openvpn: add new tls_ciphersuites optionMartin Schiller
This is used to configure ciphers for TLS 1.3 or newer. Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2019-07-17luci-app-openvpn: fix client_disconnect OpenVPN optionjose1711
This option is not a flag. Signed-off-by: Jose Riha <jose1711@gmail.com> [Changed commit message and add missing Singed-off-by] Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-12-13luci-app-openvpn: re-add options comp_lzo and comp_noadaptMartin Schiller
* re-add config option comp_lzo according to openwrt/openwrt@3850b41 * re-add config option comp_noadapt. This has never been removed from openwrt Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2018-11-27luci-app-openvpn: add missing ncp_ciphers optionFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-27luci-app-openvpn: add missing verify_client_cert optionFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-27luci-app-openvpn: add missing compress optionFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-27luci-app-openvpn: predefining the dropdown for the cipher optionFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-27luci-app-openvpn: add missing ncp_disable optionFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-27luci-app-openvpn: add missing allow_recursive_routing optionFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-26luci-app-openvpn: "final" changesetDirk Brenken
* add 'auth-user-pass' edit section in file mode (see screenshot) * add port & protocol detection in file mode (see screenshot) * don't mix file & normal edit modes any longer * add CC compatibility fix (for turris devices) * fix/refine JS instance name filter * remove needless CSS rules * unlink ovpn/auth files on section removal * commit changes instantly (Add/Upload/Delete) Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-11-22luci-app-openvpn: do not show all boolean option by defaultFlorian Eckert
If a new instance is edit then all boolean option are shown on the LuCI. This is confusing. To fix this hide all boolean ellements on the config page which are not enabled by default. They must be add first. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-22luci-app-openvpn: On apply/save redirect to OpenVPN overview pageFlorian Eckert
This change will redirect on apply/save to the OpenVPN overview page. This is the default behaviour on LuCI. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-22luci-app-openvpn: sync code style with openvpn-advancedFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-22luci-app-openvpn: fix whitespaces in openvpn-basicFlorian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-21luci-app-openvpn: more changes & fixesDirk Brenken
* fix possible exception in template based ovpn creation * remove needless shellquote function in controller, the filename will be checked on client side with JS * enhance FileUpload behaviour in basic/advanced mode: - change "auth_user_pass" to FileUpload - cfg entries (even with default values) will be shown - existing entries are now removable (incl. file unlink), simply clear the appropriate textbox * change "key_direction" option to boolean ListValue * add "config" option to basic/advanced edit, to make it possible to change the upload path in LuCI Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-10-23luci-app-openvpn: file name fixDirk Brenken
* fix shellquote oversight of the last commit Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-10-23luci-app-openvpn: add ovpn upload support & moreDirk Brenken
* add the ability to upload ovpn files directly, incl. appropriate uci entry in openvpn config * add the ability to edit ovpn files directly ('file' mode), beside the 'basic' and 'advanced' modes for normal setups * client side checks to validate instance name & template selection, incl. online error reporting * automatically remove non-ascii characters & windows line endings from transfered ovpn file * change from after_commit to after_apply hook * remove misleading default values for Port & Protocol in Overview Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-09-17luci-app-openvpn: remove obsolete config optionsDirk Brenken
* remove obsolete config options according to openwrt/openwrt@89b8ba9, fix for #2135 * whitespace/intendation fixes * replace fieldset leftover with div * fix finally recipe options transfer to regular config with "Add" Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-09-14luci-app-openvpn: fix template based config creationDirk Brenken
* minimal fix to bring back openvpn config creation based on openvpn_recipes template, fix for #2146 Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-05-25Merge pull request #1481 from TDT-AG/luci-app-openvpn-fixesJo-Philipp Wich
luci-app-openvpn: several fixes
2018-04-13luci-app-openvpn: properly parse low PIDsJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-04-06luci-app-openvpn: quote grep expression in getPID()Jo-Philipp Wich
Fixes c0d9c4f3c ("treewide: filter shell arguments through shellquote() where applicable") Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-04-05treewide: filter shell arguments through shellquote() where applicableJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-02-15luci-app-openvpn: run '/etc/init.d/openvpn reload' after commitMartin Schiller
Signed-off-by: Martin Schiller <ms@dev.tdt.de>
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-16 13:46:09 +0000