Jack Ivanov
4e4fdb5ec4
Disable RSA in the mobileconfigs. Fixes #486
2017-04-25 23:06:51 +02:00
Nicholas
643df9bce1
Fixed broken links to ansible deployment instructions ( #484 )
...
* Fixed broken link in EC2 IAM instructions
* Fixed broken in step 6 of instructions
2017-04-24 16:53:58 +02:00
Dan Guido
2818e8f0f7
The docs got out of sync with the scripts ( #480 )
...
* The docs got out of sync with the scripts
* restructure
* fix links
2017-04-23 16:36:30 -04:00
Jack Ivanov
50b9e69417
Some enhances in the compat ciphers ( #464 )
...
raise the IntegrityCheckMethod to SHA384
Move Windows to ECDSA
Increase IntegrityCheckMethod
2017-04-23 16:00:37 -04:00
Dan Guido
3617309adc
Doc improvements ( #479 )
...
* cleanup
* typos
* Closes #289
Add instructions for connecting to the VPN and configuring on demand.
2017-04-23 14:54:54 -04:00
Dan Guido
41ae2614cf
this option is deprecated ( #477 )
2017-04-23 09:04:30 -04:00
Dan Guido
67a411f262
typo ( #474 )
2017-04-22 22:38:29 -04:00
Jack Ivanov
13155fbced
Move back to 16.04. Forgot to change after testing
2017-04-22 23:09:37 +02:00
Jack Ivanov
a81a429c36
Let users choose the distro version #449 ( #466 )
...
Make dpdaction great again
add 1704 to travis
Make EC2 image name more convenient
modify apparmor profile
2017-04-22 17:06:10 -04:00
Dan Guido
e5ac6bef21
fix link ( #472 )
2017-04-22 16:52:02 -04:00
Dan Guido
8a90f503eb
Add linters to our CI ( #471 )
2017-04-22 14:57:39 -04:00
Jay Little
2168259218
Fix broken links. ( #469 )
2017-04-22 14:00:16 -04:00
Dan Guido
72843a5707
Add back table of contents ( #463 )
...
* toc
* shift left
* derp
2017-04-21 12:20:33 -04:00
Dan Guido
299a90867b
typo
2017-04-20 18:28:16 -04:00
Dan Guido
5789eb7cb8
Update documentation to include minimum required IAM policy ( #461 )
...
* Updating documentation to include minimum required IAM polcy. Closes
* Slightly more concise
2017-04-20 18:15:31 -04:00
Andy Boutte
5137e41987
CF tested and working for EC2 deployment ( #431 )
...
* AWS CloudFormation #132
* IPv6 EC2 draft
* CF tested and working for EC2 deployment
* IPv6 Implementation, EC2, Cloudformation
* Fixed ipv6 networking
* adding ip6tables rule for DHCP on AWS
2017-04-20 18:04:57 -04:00
Dan Guido
307daf1aed
Update deploy-to-ubuntu.md
2017-04-20 18:00:55 -04:00
Jack Ivanov
eed4bb6a39
remove the proxy role #440 ( #457 )
...
* remove the proxy role #440
* Separate facts. Make roles more independent from each other
move openssl to local tasks
move unneeded tasks
2017-04-20 18:00:17 -04:00
Dan Guido
0c8f0e5552
Better documentation ( #459 )
...
* Closes #443
* Remove numbers
* context
* split up local and scripted
* Closes #458
* .
* better layout
* Closes #451
* do this later
* grammar
* typo
2017-04-20 17:56:03 -04:00
Dan Guido
3aa3339b22
Windows needs SHA2-256. Closes #453 . ( #456 )
2017-04-20 07:26:46 -04:00
Dan Guido
070a18a507
Change uniqueids back to never ( #448 )
...
We need this to allow multiple connections with the same id/certificate
2017-04-19 09:53:30 +02:00
Dan Guido
fcb291f73b
clarification about ciphers
2017-04-18 11:22:38 -04:00
Dan Guido
115fa202d4
prefer ed25519
2017-04-18 02:20:44 -04:00
Dan Guido
119a9af4fb
Fix a typo from #439
2017-04-18 01:15:07 -04:00
Dan Guido
277ac4a9e2
disable dpd #430 ( #437 )
...
Closes #430
2017-04-18 01:12:21 -04:00
Dan Guido
aebfb67e21
remove extraneous integrity algos from AEAD ciphers ( #439 )
...
In reference to
https://github.com/trailofbits/algo/issues/9#issuecomment-294370560
2017-04-18 01:11:56 -04:00
MiWCryptAnalytics
05780d781e
Update troubleshooting with note about ip frag ( #427 )
...
* Update troubleshooting with note about ip frag
note about ip fragmentation on consumer routers
* clarify
Closes #305
2017-04-17 23:41:04 -04:00
Jauder Ho
fcc05406b2
Only enable ChaCha cipher ( #412 )
...
* Only enable ChaCha cipher
* Add back a few ciphers for compatability
2017-04-17 23:17:40 -04:00
Jack Ivanov
75bf4323e3
Add URLStringProbe ( #428 )
...
* Add URLStringProbe
* switch to Apple's hotspot-detect.html
2017-04-17 23:16:05 -04:00
Andy Boutte
200e5821e3
Removing update to ~/.ssh/config #400 ( #435 )
2017-04-17 22:01:42 -04:00
George Kargiotakis
3bf692c49f
Simplify localhost installations ( #432 )
...
Make it easier to install non_cloud version on localhost and
add a check whether an IP was given for IP_subject
2017-04-17 21:34:31 +02:00
Jack Ivanov
09dcb17969
write logs to file if BSD only
2017-04-17 18:12:38 +02:00
Jack Ivanov
386dcf753b
Python False-y values should be accepted. #417 ( #426 )
2017-04-16 16:40:24 -04:00
Dan Guido
347d58ffa5
Update README.md
2017-04-16 14:07:14 -04:00
Dan Guido
2b3bfd8d30
Update README.md
2017-04-16 13:58:06 -04:00
Dan Guido
6647c99ead
more endorsements!
2017-04-16 12:15:16 -04:00
Dan Guido
7d0a54750e
Update README.md
2017-04-16 11:10:11 -04:00
Jack Ivanov
6d550c3f8b
Upgrade pip inside virtualenv. Fixes #409
2017-04-16 16:40:10 +02:00
Jack Ivanov
4d7a78ec73
Instance size ( #404 )
...
* Escaping Special Characters #388
* Make instance sizes more flexible to edit #355
2017-04-16 10:19:47 -04:00
Jack Ivanov
d9e7e41b68
move generating of the known_hosts file to local_action ( #425 )
2017-04-16 10:18:54 -04:00
Dan Guido
d52f01b9b9
Add note about Network Manager
2017-04-16 10:13:47 -04:00
Dan Guido
2b00183bed
Add Linux Desktop to compatible prompt
2017-04-16 10:12:07 -04:00
Dan Guido
1d49c1a7f2
Update README.md
2017-04-16 10:02:34 -04:00
Dan Guido
f150cfba8e
Update README.md
2017-04-16 10:00:57 -04:00
Logan Collins
132f3976e4
Improve Ubuntu Instructions ( #419 )
...
* Added note regarding DH group
* more complete
* clarified file sources
* remove trailing slash for consistency
* Added information on LAN Passthrough - a common home usecase
2017-04-16 09:56:17 -04:00
donlockhart
72bf4a64fa
Added East US and East US 2 regions to Azure. ( #424 )
2017-04-16 14:39:55 +02:00
MiWCryptAnalytics
332f7bb2ae
Increase CA key entropy to 128bit ( #415 )
...
Changes the default CA key size from 48 bit to 128bit with OpenSSL usermode CSPRNG with hex encoding
2017-04-15 16:23:15 -04:00
Jack Ivanov
6066ff42db
change the order of ciphers
2017-04-15 16:36:39 +02:00
Jack Ivanov
1edc434f82
Fixes #410
2017-04-15 16:33:22 +02:00
Andy Boutte
347016e41c
adding sa-east-1 region and auto sourcing env/bin/activate ( #402 )
2017-04-15 15:01:07 +02:00