hwdsl2
00e3e719b9
Update docs
2018-02-17 10:49:30 -06:00
hwdsl2
812c6f00c5
Update ipsec.conf
...
- Switch to new keyword 'modecfgdns' in Libreswan 3.23
2018-01-29 02:13:41 -06:00
hwdsl2
f78dae6f6d
Upgrade Libreswan to 3.23
...
- Remove 'docker-targets.mk' from Makefile to avoid git errors
during compilation
2018-01-29 01:26:18 -06:00
hwdsl2
38deb86170
Minor clean up
2017-12-06 05:25:36 -06:00
hwdsl2
2e9a0e286d
Fix Libreswan 3.22 bug
...
- This bug causes Libreswan 3.22 fail to start on a Raspberry Pi
- Apply fix from Libreswan GitHub repo: libreswan/libreswan@e154ae7
- Ref: https://lists.libreswan.org/pipermail/swan/2017/002338.html
2017-11-13 00:06:02 -06:00
hwdsl2
dccc2ead32
Minor clean up
...
- Use LABEL instead of MAINTAINER (deprecated) in Dockerfile
2017-11-01 22:19:21 -05:00
hwdsl2
0f9fbbc0ed
Various clean up
2017-11-01 00:55:35 -05:00
hwdsl2
6ef28c6f58
Minor clean up
2017-10-29 20:07:50 -05:00
hwdsl2
bd8ea1035e
Improve sysctl settings
...
- Fix kernel.shmmax and kernel.shmall on 32-bit systems
- Clean up other sysctl settings
2017-10-28 15:44:10 -05:00
hwdsl2
d4a84b208b
Upgrade Libreswan to 3.22
2017-10-26 01:43:49 -05:00
hwdsl2
4e53916e5e
Clean up ipsec.conf
...
- Remove unneeded option nhelpers=0
2017-10-26 01:39:00 -05:00
hwdsl2
0d8050f798
Update docs
2017-10-02 22:51:50 -05:00
hwdsl2
f4cfdfe834
Update docs
2017-10-01 22:57:02 -05:00
hwdsl2
aab55ff13a
Clean up packages
...
- Remove libunbound2 and libunbound-dev (these packages are not needed
because we are not enabling DNSSEC)
Ref: https://github.com/libreswan/libreswan/issues/117
2017-10-01 21:26:21 -05:00
hwdsl2
1ddc5123c5
Upgrade to Debian 9
2017-09-28 00:29:18 -05:00
hwdsl2
0135f90bde
Update ipsec.conf
...
- Replace obsolete keyword "virtual_private" with "virtual-private"
2017-09-28 00:29:18 -05:00
hwdsl2
f725f31473
Disable systemd watchdog
...
- Systemd watchdog is not available in Docker containers
- No longer need/install "libsystemd-dev" package
2017-09-28 00:29:06 -05:00
hwdsl2
a9489dbb0f
Skip building manpages
...
- Skip building manpages for Libreswan
- No longer need/install "xmlto" package
2017-09-28 00:27:56 -05:00
Lin Song and GitHub
bec3d8514e
Merge pull request #38 from remini1998/master
...
fix #37
- Allow MS-CHAP v2 for better compatibility with the built-in Windows 10 VPN client
2017-09-25 00:24:13 -05:00
往日。 and GitHub
610a91720a
fix #37
2017-09-20 14:48:47 +08:00
hwdsl2
3bb0798255
New Libreswan version 3.21
2017-08-20 11:01:53 -05:00
hwdsl2
ec4317db38
Improve VPN ciphers
...
- Add 3des-sha2 to allowed VPN ciphers, and clean up
2017-06-02 13:12:22 -05:00
hwdsl2
3f054b3261
Update docs
2017-05-30 15:09:03 -05:00
hwdsl2
aaa9456f2d
Minor clean up
2017-05-22 11:48:01 -05:00
Lin Song and GitHub
459cce31ed
Merge pull request #22 from markhilton/master
...
added docker-compose.yml
2017-04-30 19:46:02 -05:00
root
3be678e498
added docker-compose.yml
2017-04-20 00:45:11 +00:00
hwdsl2
430dc3239c
Update VPN ciphers
...
- Add aes256-sha2_512 to the list of allowed ciphers
- Required for Android 7.1.x and (possibly) Chromebook
2017-04-12 10:34:00 -05:00
hwdsl2
5f1896ca3c
Minor improvements
...
- Use functions to simplify whitespace/quotes removal
- Remove sysctl settings not available in Docker container
2017-04-08 12:52:31 -05:00
hwdsl2
ece38976b7
Update docs
2017-04-08 12:18:11 -05:00
hwdsl2
0a2bb2ef29
Check for correct usage
...
- Check for correct usage of this Docker image
- If needed, output URL for usage instructions
2017-04-08 12:01:47 -05:00
hwdsl2
7deb1f71ac
Improve VPN variables
...
- Check VPN credentials for non-ASCII characters
- Remove spaces and quotes around VPN variables, if any
2017-04-07 14:34:32 -05:00
hwdsl2
afde554884
New Libreswan version
...
- New Libreswan version 3.20
- Use GitHub as primary download source
2017-03-23 14:08:43 -05:00
hwdsl2
973cf465aa
Remove Debian mirror workaround
...
- The workaround for "httpredir.debian.org" is no longer needed
- Ref: https://lists.debian.org/debian-mirrors/2017/02/msg00000.html
2017-03-23 14:06:18 -05:00
hwdsl2
9270ce0b29
Update docs
2017-03-19 21:50:14 -05:00
hwdsl2
c182959ed1
Update docs
2017-02-19 10:55:00 -06:00
hwdsl2
21a511b45f
Improve IPTables rules
...
- Improve blocking of unencrypted L2TP without IPsec
2017-02-19 10:50:49 -06:00
hwdsl2
ddd0485692
Improve customization
...
- Use variables for easier customization of VPN subnets and DNS
- Other minor improvements
2017-02-11 21:43:17 -06:00
hwdsl2
ead3df7798
Improve VPN IPs
...
- Use %defaultroute and iptables MASQUERADE, no need to detect private IP
- Use %any for the first field of ipsec.secrets, instead of public IP
- As a result, the VPN server should now better adapt to IP changes.
2017-02-10 18:16:33 -06:00
hwdsl2
1bad905c4d
Update docs
2017-02-10 11:06:30 -06:00
hwdsl2
da001bf87f
Update docs
2017-02-05 23:21:17 -06:00
hwdsl2
f34e19d438
Update docs
2017-01-28 15:58:16 -06:00
hwdsl2
cc4c3954a2
Update docs
...
[ci skip]
2017-01-25 12:36:38 -06:00
hwdsl2
cd87e7fe99
Add notes
2017-01-21 12:25:13 -06:00
hwdsl2
db5e39e12b
Improve VPN ciphers
...
- Consolidate VPN ciphers for "ike=" and "phase2alg=" in ipsec.conf.
2017-01-18 23:05:05 -06:00
hwdsl2
b168be8565
Bugfix
...
- Libreswan 3.19 removed MODP1024 from the ike= default list,
which breaks compatibility with Android 5.x and others
- This commit explicitly adds MODP1024 back to the ike= list
2017-01-18 20:16:20 -06:00
hwdsl2
b624f82968
Update docs
...
[ci skip]
2017-01-18 16:53:03 -06:00
hwdsl2
1f127cc3bf
Update year
2017-01-16 22:17:21 -06:00
hwdsl2
71e65e7561
Upgrade to Libreswan 3.19
...
- Upgrade to new Libreswan version 3.19
- Some changes are required in the VPN config files
- Ref:
https://lists.libreswan.org/pipermail/swan-announce/2017/000023.html
2017-01-16 15:46:11 -06:00
hwdsl2
309e8d4d6a
Update docs
...
[ci skip]
2017-01-13 13:30:28 -06:00
hwdsl2
07fc0c6588
Update docs
...
[ci skip]
2017-01-08 00:37:58 -06:00