Commit graph

132 commits

Author SHA1 Message Date
justinamcafee
5f1bbf3c71
Added Optional Duplicate CN
Added screen to allow users to choose either granular per-device certificate control, or per-user certificate control.
2018-03-09 13:03:04 -06:00
justinamcafee
9749257e08
Updated install.sh
Added support for FamilyShield DNS from OpenDNS/CISCO
2018-03-09 11:32:14 -06:00
Piero
4b47b5aa61 2.4 2018-02-15 10:14:03 +01:00
redfast00
c7dfe6283a
Merge pull request #379 from jellemdekker/fix/remove-excess-code
Removed excess code
2017-12-16 22:07:10 +01:00
Jelle Dekker
9f46f1ef91 Removed call to deleted method. 2017-10-11 22:55:58 -05:00
cfcolaco
89a928e7c4 fixed (more) Typos and sentences 2017-10-08 20:10:57 +01:00
cfcolaco
664087bf92 fixed typo 2017-10-08 19:47:30 +01:00
cfcolaco
c1918417d6 added support to Stretch, removed useless code, added info about stretch support 2017-10-08 18:27:43 +01:00
cfcolaco
29a5dbb22b Revert "Revert "Added support to Stretch, Fixed some texts, Removed some lines for testing pruposes""
This reverts commit 6e8d6d24b5.
2017-10-08 13:19:01 +01:00
cfcolaco
6e8d6d24b5 Revert "Added support to Stretch, Fixed some texts, Removed some lines for testing pruposes"
This reverts commit 2626127be1.
2017-10-08 13:08:57 +01:00
cfcolaco
2626127be1 Added support to Stretch, Fixed some texts, Removed some lines for testing pruposes 2017-10-08 12:54:24 +01:00
cfcolaco
a5258d9f3c Merging master comits into testing 2017-10-08 11:26:42 +01:00
Jelle Dekker
14b13d3a41 Removed the previously commented-out code. 2017-09-23 19:17:35 -05:00
redfast00
a8deeaf18b Merge pull request #363 from jellemdekker/fix/improve-dh-selection-menu
Improved encryption strength selection menu
2017-09-24 01:16:33 +02:00
redfast00
009e4b3023 Merge pull request #362 from jellemdekker/feature/randomize-server-name
Randomize server Common Name for added security
2017-09-24 01:13:34 +02:00
redfast00
003b27362f Merge pull request #361 from jellemdekker/feature/generate-crl-during-installation
Generate and activate CRL during installation
2017-09-24 01:12:05 +02:00
Jelle Dekker
c81e793c6c Removed punctuation in list items. 2017-09-23 15:16:06 -05:00
Jelle Dekker
f5c05715de Added sudo -E. 2017-09-23 14:35:46 -05:00
Jelle Dekker
4e77245a97 Commented out code related to adding a route to the remote subnet (e.g. 192.168.0.0). 2017-09-22 16:03:38 -05:00
Jelle Dekker
7b6a358779 Modified the messages when PiVPN installation completes and client profiles are generated, so the user knows to generate a client profile per each device he/she wants to connect to the VPN with. 2017-09-22 14:11:23 -05:00
Jelle Dekker
30920115b3 Implemented that a Certificate Revocation List is generated during installation after generation of other Public Key Infrastructure. Enabled this CRL in the server config. The added benefit of this is that whenever the user now revokes a client, the change is instant. Whereas before, the first time a client was revoked, the OpenVPN server had to be restarted to enabled the then-newly-generated CRL. This change also makes the file /etc/pivpn/REVOKE_STATUS obsolete.
Documentation: https://openvpn.net/index.php/open-source/documentation/howto.html#revoke
2017-09-22 02:46:52 -05:00
Jelle Dekker
8910545d90 Fixed a couple of typos. 2017-09-22 02:17:53 -05:00
Jelle Dekker
d1652a03b1 The SERVER_NAME variable is used in a 'verify-x509-name' check to allow the client to verify it is talking to the correct server. However, its value was always equal to 'server'. This wasn't unique for each installation and therefore provided no additional safety check. So I've modified it to be random for each installation of PiVPN. Additionally, the variable is now actually being used when specifying the server name in the build-server-full command.
Source for obtaining a random UUID (thank you): Earthgecko (https://gist.github.com/earthgecko/3089509)
2017-09-21 14:39:16 -05:00
Jelle Dekker
7cf5c19789 Changed the display order of the DH options (default value is still 2048 bits) and added a warning for 1024 bits. 2017-09-20 23:24:57 -05:00
cfcolaco
fbec57d1fd changed to new openvpn repos 2017-06-29 12:03:47 +01:00
David Quattlebaum
5c4a51b695 Final testing passed
Changes:
- Document that Devuan is supported.
- Use special PLAT name, Raspvuan for Pi version
- Use service command for any *vuan PLAT, systemd is no on any
Devuan.
- add net-tools to PIVPN_DEPS
2017-06-06 18:27:23 -04:00
David Quattlebaum
2eb11cad0c changes for devuan
- To simplify further additions to PLAT or OSCN, use
the case command for checking

- Treat Devuan as Debian

- Add /sbin:/usr/sbin to PATH before calling ifconfig

- Ensure net-tools is installed so we have ifconfig
2017-06-04 16:18:26 -04:00
Jelle Dekker
d5f0a81f80 Clearly indicate that a user selects a list item with the space bar. 2017-04-17 15:49:52 +02:00
EWouters
ff97f40ecf Fix: mkdir: cannot create directory ‘/home/$pivpnUser/ovpns’: File exists 2017-03-22 13:47:55 +13:00
EWouters
cd4d13691d fixed check for when both nopass and a password argument are passed to the script 2017-03-16 22:25:17 +13:00
EWouters
27c34aa297 Removed -p flag to create home dir
As described in #165 ( fc14664) it is not desirable.
2017-03-15 17:24:42 +13:00
EWouters
75b7995a87 Removed SERVER_NAME parameter
because it is hardcoded as "server" in other scripts
2017-03-15 02:40:39 +13:00
EWouters
277a212a8f tabs to spaces 2017-03-14 15:39:53 +13:00
EWouters
097145392c set -e and set +e around line 800 to 815
I am not sure why this statement does not work with -e. We can also
remove the set -e statement altogether.
2017-03-14 15:39:07 +13:00
EWouters
7315353179 Moved echo to file statements to front, add missing
fixed a typo
replaced tabs with spaces
2017-03-14 15:25:39 +13:00
EWouters
5b5129f1bc fix: cp: cannot stat ‘/tmp/pivpnINT’: No such file 2017-03-14 14:26:22 +13:00
EWouters
2a639e753e Fixed sed command and mkdir if folder exists 2017-03-14 10:48:16 +13:00
EWouters
71021d6ffa Added all parameters, initial testing done 2017-03-13 19:44:29 +13:00
EWouters
5db23185fd Added pi-hole's undocumented flags
UNTESTED!
2017-03-13 17:00:28 +13:00
Kaladin Light
faaabe4c0e Fixes Issue #195 2017-01-28 13:58:10 -05:00
Kaladin Light
dc9924f147 Have debug work without being root 2017-01-27 17:46:34 -05:00
Kaladin Light
5ce48cbaaf Trying to ensure interface is set, maybe related to iptables issues.
If not, we at least will see in pivpnDebug output now.
2017-01-27 15:42:42 -05:00
redfast00
b727fa3970
Fix-189 2017-01-22 12:44:36 +01:00
Kaladin Light
df16e8dd59 Fixes Issue #173 and #174 2016-12-25 18:06:32 -05:00
Kaladin Light
371f339fed Rework things 2016-12-24 00:20:45 -05:00
Kaladin Light
22b5bfef68 Add fix iptables help to debug script (1/2) 2016-12-11 13:36:14 -05:00
Kaladin Light
6b406ffb27 Fix type for moving client script 2016-12-11 10:04:33 -05:00
Kaladin Light
eaf78ab6bb Try to fix apt errors now. If we can't then exit so the user can address. 2016-12-10 00:58:36 -05:00
Bastiaan Nelissen
6e3ad10a80 fixed download location
fixed easy-rsa download location
Conflicts:
	auto_install/install.sh
2016-12-08 18:37:22 -05:00
Bastiaan Nelissen
98d63b7bd0 fixed wget command
wget was targeted to a directory instead of a file
2016-12-08 18:31:43 -05:00