Commit graph

651 commits

Author SHA1 Message Date
Jack Ivanov
8a32786a47 Update README.md. Fixes #265 2017-03-05 10:45:02 +03:00
Jack Ivanov
59a03057be Update CLIENT.md 2017-03-04 23:08:31 +03:00
Jack Ivanov
b9267e5127 Update CLIENT.md 2017-03-04 23:06:30 +03:00
Jack Ivanov
5ec971ab4d Some fixes. Fedora client. Close #44 2017-03-04 23:05:02 +03:00
Jack Ivanov
d3cbfc6cbe Linux clients installation vpn #44 2017-03-03 20:46:11 +03:00
Jack Ivanov
95a1ee1809 Update WINDOWS.md 2017-02-28 22:30:43 +03:00
Jack Ivanov
425510fe63 Install from Windows #193 2017-02-28 22:29:21 +03:00
Jack Ivanov
bbe5541c9b ssh_config fix 2017-02-28 22:22:06 +03:00
Jack Ivanov
bc6272c123 Fixes #207 2017-02-28 21:34:28 +03:00
Jack Ivanov
aea3e61426 Ensure that ssh keys and configs are exist Fixes #250 (#254) 2017-02-28 20:05:22 +03:00
Alex Van Camp
ccf48ae4c1 Android client setup documentation (#251). Fixes #240
* Android client setup documentation

This is a first draft of Android Setup instructions. I expect that these will need some revising and that the formatting of this document will benefit from more tweaking.

We may also want to elaborate on the contents of the "advanced settings" menu ([screenshot](https://i.imgur.com/smsmdQF.png)).

* improve appearance on mobile devices
2017-02-26 23:18:57 +03:00
nowfred
d839f7348f Added virtualenv information to README 'Deploy the Algo Server' section (#252) Fixes #222 2017-02-26 20:32:46 +03:00
Jack Ivanov
f306d92527 enable ipv6 if the default gateway is defined. Fixes #244 2017-02-26 20:17:12 +03:00
Jack Ivanov
1f04d6345a disable unneeded task 2017-02-26 12:15:22 +03:00
Jack Ivanov
e484bf8717 Update README.md. Fixes #259
`python-setuptools` is a recommended packages for which will be installed automatically for `python-pip` on a clean ubuntu 16.04
Updated README in order to avoid skipping the packages with `--no-install-recommends`
2017-02-25 21:17:48 +03:00
Craig
0db758ace4 Installs the recommended packages with strongswan, because we need the OpenSSL (#260)
plugin from libstrongswan-standard-plugins for ECDH to work.
2017-02-25 21:07:32 +03:00
Jack Ivanov
1e0cc8d230 enable some additional debug info 2017-02-23 19:22:18 +03:00
Jack Ivanov
67c5763b78 Changed to ECDSA #102 2017-02-23 18:44:30 +03:00
Jack Ivanov
56b13c3adb Fixes #255 2017-02-23 18:25:46 +03:00
Dan Guido
146df75022 Update algo 2017-02-20 03:40:40 +01:00
Dan Guido
7fe2dc34e5 add warning about os security enhancements 2017-02-20 03:28:32 +01:00
Jack Ivanov
ffd278e7d9 AndroidVPNClientProfiles #240 2017-02-17 00:30:21 +03:00
Jacob Wilder
23f14ed629 Fixed the azure role for situations where the user does not use a ~/.azure/credentials file (#242) 2017-02-16 23:43:03 +03:00
Jack Ivanov
b75f36a64e contgrats fix in update-users #243 2017-02-15 18:49:42 +03:00
Jack Ivanov
c89d916bd9 Update README.md (#241) 2017-02-14 18:42:12 +01:00
Jack Ivanov
dd202bfd00 rewrite congrats 2017-02-14 20:26:04 +03:00
Dan Guido
36862d3abe Update README.md 2017-02-14 17:42:54 +01:00
Dan Guido
6babf2809b Update README.md 2017-02-14 17:39:58 +01:00
Dan Guido
fe6c849de7 remove twitter button :-( 2017-02-13 10:10:50 +01:00
Dan Guido
87ff3a1124 twitter badge 2017-02-13 09:57:45 +01:00
Jack Ivanov
16d92057c4 rename connection 2017-02-12 23:01:29 +03:00
akirilov
3af59f15d8 Modified certificate generation to address issues #234 and #228 (#235)
* Modified certificate generation to address issues #234 and #228

I have made the following modifications to comply with the IKEv2 client certificate requirements:

- Changed client certificate CN to {{ IP_subject_alt_name }}_{{ item }} from {{ item }}
- Changed client certificate SAN to {{IP_subject_alt_name }} from {{ item }}
- Added clientAuth to client certificate EKU

I have made the following changes to address a mismatch in the windows deployment script and file names:

- Changed the client certificate (.p12) filename in config/{{ IP_subject_alt_name }} to {{ IP_subject_alt_name}}_{{ item }}.p12 from {{ item }}.p12 to match the ps1 script

Testing:

I have tested the changes on Windows 10 client, Ubuntu 16.04.1 server (DigitalOcean) - the config described in Issue #234

I apologize for not being able to test on other configurations. I hope that someone else can verify my changes

* fixed iOS issues

* fixed accidentall user change

* simplified changes

* Final iteration. I think that's all I can do to minimize the changes
2017-02-12 22:45:36 +03:00
Dan Guido
55835dfb1a typo 2017-02-12 13:13:24 -05:00
Dan Guido
9576b31ab1 explicit pointer to avenues for support 2017-02-12 13:07:13 -05:00
Dan Guido
8b3cf9a0f7 Update README.md 2017-02-07 17:31:13 -05:00
Dan Guido
88c5f7d100 Update README.md 2017-02-07 17:30:15 -05:00
Dan Guido
b220eb1b77 TOC 2017-02-07 17:29:17 -05:00
Dan Guido
95aae71066 Move FAQ to its own doc. 2017-02-07 17:27:13 -05:00
Dan Guido
47ff779b77 Update CONTRIBUTING.md 2017-02-07 17:08:44 -05:00
Dan Guido
34b94ca66a Update Troubleshooting.md 2017-02-07 17:02:18 -05:00
Dan Guido
733241e186 slightly better docs 2017-02-07 17:01:31 -05:00
Dan Guido
4d276b00a7 Slightly better docs 2017-02-07 16:46:58 -05:00
Dan Guido
a1abff610a Closes #82, again 2017-02-07 16:35:23 -05:00
Jack Ivanov
be48ca62e1 Local openssl tasks (#169)
* Draft

works with ECDSA

RSA support for Windows

* update-users with local_openssl_tasks

* move prompts to the algo script

* additional directory for SSH keys

* move easyrsa_p12_export_password to pre_tasks

* update-users testing

* Fix hardcoded vars

* Delete the CA key

* Hardcoded IP. Fixes #219

* Some fixes
2017-02-03 14:24:02 -05:00
Jack Ivanov
e7089c2517 make the fail message more understandable. Fixes #217 2017-02-01 18:54:47 +03:00
Jack Ivanov
a78f586438 Additional info in the congrats 2017-01-26 20:01:06 +03:00
Jack Ivanov
86805aa93b Prevent ansible and Jinja2 from updates #220 (#221) 2017-01-22 23:06:32 +03:00
Jack Ivanov
062acf0dac Update README.md 2017-01-22 22:56:17 +03:00
Jack Ivanov
ce97f2211c ensure that apparmor is supported by the kernel #215 2017-01-16 00:19:57 +03:00
Jack Ivanov
783c64a787 update the troubleshooting page #146 2017-01-14 20:27:18 +03:00