Dan Guido
8173b84ff8
Change uniqueids back to never ( #448 )
...
We need this to allow multiple connections with the same id/certificate
2017-04-19 09:53:30 +02:00
Dan Guido
b29772f146
prefer ed25519
2017-04-18 02:20:44 -04:00
Dan Guido
f9f7be7b0d
Fix a typo from #439
2017-04-18 01:15:07 -04:00
Dan Guido
1778cb1f45
disable dpd #430 ( #437 )
...
Closes #430
2017-04-18 01:12:21 -04:00
Dan Guido
8e5e6d5088
remove extraneous integrity algos from AEAD ciphers ( #439 )
...
In reference to
https://github.com/trailofbits/algo/issues/9#issuecomment-294370560
2017-04-18 01:11:56 -04:00
Jauder Ho
5b2e13d18f
Only enable ChaCha cipher ( #412 )
...
* Only enable ChaCha cipher
* Add back a few ciphers for compatability
2017-04-17 23:17:40 -04:00
Jack Ivanov
fa5a956193
Add URLStringProbe ( #428 )
...
* Add URLStringProbe
* switch to Apple's hotspot-detect.html
2017-04-17 23:16:05 -04:00
Jack Ivanov
ea5976f49b
write logs to file if BSD only
2017-04-17 18:12:38 +02:00
Jack Ivanov
9c12272c8c
Python False-y values should be accepted. #417 ( #426 )
2017-04-16 16:40:24 -04:00
Jack Ivanov
16329fe088
Instance size ( #404 )
...
* Escaping Special Characters #388
* Make instance sizes more flexible to edit #355
2017-04-16 10:19:47 -04:00
Jack Ivanov
bf75a1bb03
move generating of the known_hosts file to local_action ( #425 )
2017-04-16 10:18:54 -04:00
MiWCryptAnalytics
04b61ca3d2
Increase CA key entropy to 128bit ( #415 )
...
Changes the default CA key size from 48 bit to 128bit with OpenSSL usermode CSPRNG with hex encoding
2017-04-15 16:23:15 -04:00
Jack Ivanov
02f363d825
change the order of ciphers
2017-04-15 16:36:39 +02:00
mathew19
ae43ed6f81
Update client_ipsec.secrets.j2 ( #414 )
...
Fix filename in client ipsec_user.secrets
2017-04-15 14:57:22 +02:00
mathew19
5e56996f5c
Fix name ( #411 )
2017-04-15 14:57:07 +02:00
Jack Ivanov
c61a07fb60
Escaping Special Characters #388 ( #403 )
2017-04-14 14:57:27 -04:00
Jack Ivanov
56a72e5af2
New ciphers implementing #247 ( #352 )
...
Switches to SHA2_512_256 HMAC integrity algorithm and adds cipher compatibility for other platforms.
2017-04-11 16:08:03 -04:00
Jack Ivanov
70738ed8be
Enable IP forwarding GCE #369
2017-04-09 20:52:54 +02:00
Jack Ivanov
95e0134f21
1. Disable SSH key deploying if installation on existing server
...
2. Move to the ed25519 algorithm
3. Delete unneeded option RSAAuthentication
Fixes #272
2017-04-09 20:41:45 +02:00
Dan Guido
e55ce03906
URLStringProbe with this URL does not work as intended
2017-04-09 10:44:32 -04:00
Dan Guido
5e22b79033
Add configuration for URL probes to Apple profile
...
Chrome and Android both request a known URL that generates HTTP 204 No Content responses to determine if they have internet connectivity. In Apple profiles, we can use the same URL to determine whether the VPN needs to connect. Using this feature will help save battery life for lots of users.
2017-04-09 09:52:23 -04:00
Jack Ivanov
47515154bb
add mtu in the sswan profile
2017-04-08 10:39:04 +02:00
Casey Lang
8b977afd99
Modify creation of GCE Instance ( #363 )
...
Update deprecated GCE metadata options
2017-04-07 10:51:30 -04:00
Jack Ivanov
3b8d04d06c
remove the logging role
2017-04-05 16:25:56 +02:00
Jack Ivanov
6e61a51aca
rewrite the sysctl task
2017-04-04 17:02:11 +02:00
Jack Ivanov
c0f4b5fa41
Enable default values if the role is skipped #313
2017-04-04 16:57:39 +02:00
Josh Soref
84bbcb88d0
Spelling fixes ( #342 )
...
* spelling: algorithm
* spelling: bertrand
* spelling: between
* spelling: checking
* spelling: conjunction
* spelling: contributor
* spelling: delimited
* spelling: fashion
* spelling: droplet
* spelling: javascript
* spelling: nameserver
* spelling: obligatory
* spelling: official
* spelling: overridden
* spelling: overwrite
* spelling: parameter
* spelling: suppressing
2017-04-02 19:14:38 -04:00
James Hale
41ed682213
Reduce VPC CIDR size to /16 ( #341 )
2017-04-02 15:48:44 -04:00
Josh Meisels
d37c6b72c5
Add new Azure regions and allow user to select VM size ( #332 )
...
* Update Azure Region List
Included several additional regions in the Azure list.
In a future version we may want to ask users to choose a continent, then present region options since this list is getting long.
* Add VM size selection
Added prompt for user to choose VM size. Useful because the default size is not available in all regions, and there are cheaper sizes.
* Handle vm_size choice in "Create an Instance" step
Use the variable passed in that the user chose for vm_size.
* Differentiate Basic A0 and Standard A0
* Remove vm_size D1 since it's being deprecated
* Fix syntax issue - missing semicolons
* Remove note to self comment
* Remove changes to let user select VM size
Removing my previous additions that let the user select their Azure VM size.
* Hard code VM size to cheapest size
Remove my usage of a variable for VM size. Update to use the Basic_A0, which is the cheapest size of VM.
2017-04-02 12:34:09 -04:00
Matt Mankins
b8d2dc68bb
Change EC2 VPC CIDR blocks to uncommon non-routable addresses ( #335 )
2017-04-02 00:53:53 -04:00
Josh Watson
84a3b5f675
Change EC2 VPC CIDR blocks to non-routable addresses. ( #330 )
...
The previous address ranges were actually routable addresses, which caused some concern for some people because it looked suspicious in tracert. The new CIDR blocks are non-routable addresses, which resolves this concern.
2017-04-01 00:20:08 -04:00
brad2014
09e5d87c7b
Minor name and documentation edits ( #327 )
2017-04-01 00:19:10 -04:00
James Hale
3b3fb601ef
Fix name tag key ( #282 )
2017-03-28 21:18:33 -04:00
Dan Guido
655a917dd2
iptables filter table fix ( #285 )
2017-03-27 00:04:46 -04:00
Jack Ivanov
6facb6cb4f
FreeBSD / HardenedBSD ( #262 )
...
* FreeBSD draft
ifconfig fix
Pre-tasks fixes
fix hardcoded IP
some refactoring
disable system-based tags
disable freebsd tags
FreeBSD vpn role
add defaults
ssh role freebsd
default fix
dns_adblocking freebsd
ubuntu dict fix
* HardenedBSD
update-users BSD
* Rebuild the kernel
docs changing
2017-03-18 12:22:07 +03:00
Jack Ivanov
49ba1f76b4
Some improvements in the mobileconfig. Fixes #270
2017-03-18 11:07:56 +03:00
Jack Ivanov
045ff4bb9f
Azure security group. Fixes #264
2017-03-14 23:33:37 +03:00
Jack Ivanov
906d962d4d
GCE. env variables #195
2017-03-12 11:32:36 +03:00
Jack Ivanov
573c2f2322
DO. env variables #195
2017-03-12 11:31:05 +03:00
Jack Ivanov
fc30f8bb10
GCE. Tags fixed #267
2017-03-09 00:41:13 +03:00
Jack Ivanov
0aff3ebb6f
EC2 instance_initiated_shutdown_behavior to terminate. Close #124
2017-03-06 22:04:00 +03:00
Jack Ivanov
c52024d4cc
Azure. Add to the inventory #30
2017-03-06 21:54:21 +03:00
Jack Ivanov
0d1731e058
update tags for azure resources
2017-03-06 21:25:40 +03:00
Jack Ivanov
6e538627db
gce inventory #30
2017-03-06 01:03:37 +03:00
Jack Ivanov
9cc9cf7b5f
local inventory #30
2017-03-06 01:03:27 +03:00
Jack Ivanov
69ff22f9bb
fix typo
2017-03-06 00:55:13 +03:00
Jack Ivanov
dfb1cbc282
DigitalOcean dynamic inventory
2017-03-05 23:38:15 +03:00
Jack Ivanov
f7da2e3888
EC2 dynamic enventory. Fixes #73
2017-03-05 23:19:15 +03:00
Jack Ivanov
5cbf125202
Some refactoring. Disable unneeded variables.
2017-03-05 21:33:01 +03:00
Jack Ivanov
237fcc7a7f
additional variables
2017-03-05 10:58:42 +03:00
