Commit graph

281 commits

Author SHA1 Message Date
Stephen KINGER
ac28a7c3e4 Set default ports as 1194 for UDP and 443 port for TCP 2016-10-09 13:40:19 +02:00
redfast00
147192c79b
fixes expect timeout 2016-10-09 13:34:17 +02:00
redfast00
cf5ba27a21
Added message about TCP 2016-10-09 12:30:13 +02:00
0-kaladin
6be0b09b00 Merge pull request #95 from redfast00/cleanup
Sanitization 'n input validation
2016-10-08 14:13:37 -04:00
redfast00
a68435e6c3
cleaned up removeOVPN.sh 2016-10-04 21:02:02 +02:00
redfast00
d8d89c758b
Prevent overwriting files 2016-10-04 20:54:09 +02:00
redfast00
4e0f9ac0ff
Cleaned up listOVPN.sh 2016-10-04 20:22:04 +02:00
redfast00
caee0858cf
Sanitization 'n input validation 2016-10-04 19:46:14 +02:00
Stephen KINGER
c15718f693 Merged branch feature/add_tcp_option into feature/add_tcp_option 2016-09-28 17:09:24 +02:00
Stephen KINGER
e541fd39ac Update the unisntall script, OK. 2016-09-28 17:09:04 +02:00
Stephen KINGER
f81425e05a Update the unisntall script, not tested yet. 2016-09-27 14:31:41 +02:00
Stephen KINGER
a7c9a35352 /feature/add_tcp_option
Adding a correct tcp option
2016-09-27 14:24:14 +02:00
Kaladin Light
8f09ee9afd Fixes for Debian support 2016-05-25 17:58:08 -04:00
Kaladin Light
3c0d0cb176 Ensure debian and ubuntu get openvpn from the openvpn repo so they don't get an old server version 2016-05-25 17:41:42 -04:00
0-kaladin
32f4674741 Update README.md 2016-05-23 09:46:46 -04:00
0-kaladin
0f5162bdf2 Merge pull request #35 from bole5/patch-1
Fix TLS handshake error
2016-05-18 14:15:25 -04:00
bole5
b5db30985a Fix TLS handshake error
When connecting with Tunnelblick client I received following error:
TLS_ERROR: BIO read tls_read_plaintext error: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
TLS Error: TLS object -> incoming plaintext read error
TLS Error: TLS handshake failed

To fix the problem the same tls-version-min directive used in server configuration has to be added to the client config.
2016-05-18 11:30:55 +02:00
Kaladin Light
26b4cab411 Version 1.5 2016-05-16 13:13:22 -04:00
Kaladin Light
0fbc99e0b7 Fixes for UFW 2016-05-15 23:36:40 -04:00
Kaladin Light
f0d92ab8df Fix raspbian os detection
when doesn't it have lsb-release!?
2016-05-15 21:43:32 -04:00
Kaladin Light
2aad7f3c59 fix minor issue on lsb_release 2016-05-15 17:02:03 -04:00
Kaladin Light
3916acf665 Support reverting UFW changes on uninstall 2016-05-15 16:57:42 -04:00
Kaladin Light
a432e187b9 Don't get CN list by counting columns as it is wholly unreliable.
If user had space in some cert fields, like city was "Fort Worth"
the current way would have fell apart.
This fixes these issues in 'pivpn list' and hence 'pivpn revoke'
2016-05-15 13:20:36 -04:00
Kaladin Light
d096335d5f update lsb_release to use hash instead of which 2016-05-15 12:29:05 -04:00
Kaladin Light
5d9580fbdd Adding support for UFW if enabled over raw iptables 2016-05-14 22:42:39 -04:00
Kaladin Light
2f3540b898 Robustize OS Detection.
This is framework needed to support Ubuntu 16.04 which
is coming in a future commit.
2016-05-10 11:49:29 -04:00
Kaladin Light
24fc3ae75f Version 1.4 2016-05-07 20:55:36 -04:00
Kaladin Light
67e537b7fa Fix revoke, seems i missed some merges from my recent rework 2016-05-07 13:20:09 -04:00
Kaladin Light
0277054de1 Ubuntu uses openvpn repo to get newer version and...
clients get two more security parameters to harden connection further and...
hopefully fix use of testing branch and...
why is there no modern Road Rash game, that was the best.
2016-05-07 12:33:52 -04:00
Kaladin Light
b8e736e94b Fix little '\n' issue when say [n] to uninstall 2016-05-05 21:14:46 -04:00
Kaladin Light
dea112f50f Fixes #23, enhance 'pivpn add', minor bug fixes & other enhancements 2016-05-05 21:04:57 -04:00
Kaladin Light
6f9d151530 Readme updates 2016-05-04 21:27:05 -04:00
Kaladin Light
47c05d62a4 Version 1.3 2016-05-03 12:35:31 -04:00
Kaladin Light
5b6627eaf8 Minor fixes, one for ubuntu only 2016-05-03 12:34:04 -04:00
Kaladin Light
6f7d8092d5 Add call to confUnattendedUpgrades function 2016-05-03 10:34:57 -04:00
Kaladin Light
bf81405d6c Resolves #19 - Implement unattended-upgrade option for users 2016-05-03 10:32:17 -04:00
Kaladin Light
6956fcb99b Implement the "planetahuevo enhancement", IE the ability to
generate a client cert with no password. Run 'pivpn add nopass'
2016-04-30 23:37:27 -04:00
Kaladin Light
6032aa7f2e Give user chance to confirm DNS name. Just in case they fat-fingered. 2016-04-30 16:00:02 -04:00
Kaladin Light
2ee04c6c9b Missed dependency for new 'pivpn add' requirements 2016-04-30 14:40:43 -04:00
Kaladin Light
af19eeb55b 'pivpn add' functionality greatly improved!
Now with 2 scoops of raisins!
2016-04-30 13:28:01 -04:00
Kaladin Light
582e923bc8 Old QA team was fired. New team found this issue
with DNS not being set if you non default and were not root user.
2016-04-29 19:18:05 -04:00
Kaladin Light
c7caf8db35 Init cert values
Clean up encryption list
(don't play in the master branch kids, bad things happen)
2016-04-29 16:59:07 -04:00
Kaladin Light
7076c5990a Minor fix 2016-04-29 16:25:46 -04:00
Kaladin Light
0649c5da66 Closes #17
Cause people cared more than I thought they would.
(and that's a good thing)
2016-04-29 13:18:28 -04:00
Kaladin Light
03190d336f Allow user to pick 4096 key for paranoid mode.
Fixes Issue #18
2016-04-29 10:15:43 -04:00
Kaladin Light
c553311efe Last commit that fixes #10 2016-04-28 21:58:54 -04:00
Kaladin Light
63970e2678 Validate Custom Port input
This is part of Issue #10
2016-04-27 22:13:00 -04:00
Kaladin Light
ca42ff9621 Fixes #13
ubuntu openvpn is < 2.3.4
2016-04-27 20:54:51 -04:00
Kaladin Light
1b0b6478b3 Set control channel to TLS 1.2
Debate with myself on adding cipher list.
2016-04-26 10:39:18 -04:00
Kaladin Light
f3c1072975 Cover unknown in pivpn list.
I believe there is an expired status but can't get it to show up in the index.txt
2016-04-24 11:29:29 -04:00