124 Commits
Author SHA1 Message Date
hwdsl2 00e3e719b9 Update docs 2018-02-17 10:49:30 -06:00
hwdsl2 812c6f00c5 Update ipsec.conf
- Switch to new keyword 'modecfgdns' in Libreswan 3.23
2018-01-29 02:13:41 -06:00
hwdsl2 f78dae6f6d Upgrade Libreswan to 3.23
- Remove 'docker-targets.mk' from Makefile to avoid git errors
  during compilation
2018-01-29 01:26:18 -06:00
hwdsl2 38deb86170 Minor clean up 2017-12-06 05:25:36 -06:00
hwdsl2 2e9a0e286d Fix Libreswan 3.22 bug
- This bug causes Libreswan 3.22 fail to start on a Raspberry Pi
- Apply fix from Libreswan GitHub repo: libreswan/libreswan@e154ae7
- Ref: https://lists.libreswan.org/pipermail/swan/2017/002338.html
2017-11-13 00:06:02 -06:00
hwdsl2 dccc2ead32 Minor clean up
- Use LABEL instead of MAINTAINER (deprecated) in Dockerfile
2017-11-01 22:19:21 -05:00
hwdsl2 0f9fbbc0ed Various clean up 2017-11-01 00:55:35 -05:00
hwdsl2 6ef28c6f58 Minor clean up 2017-10-29 20:07:50 -05:00
hwdsl2 bd8ea1035e Improve sysctl settings
- Fix kernel.shmmax and kernel.shmall on 32-bit systems
- Clean up other sysctl settings
2017-10-28 15:44:10 -05:00
hwdsl2 d4a84b208b Upgrade Libreswan to 3.22 2017-10-26 01:43:49 -05:00
hwdsl2 4e53916e5e Clean up ipsec.conf
- Remove unneeded option nhelpers=0
2017-10-26 01:39:00 -05:00
hwdsl2 0d8050f798 Update docs 2017-10-02 22:51:50 -05:00
hwdsl2 f4cfdfe834 Update docs 2017-10-01 22:57:02 -05:00
hwdsl2 aab55ff13a Clean up packages
- Remove libunbound2 and libunbound-dev (these packages are not needed
  because we are not enabling DNSSEC)
  Ref: https://github.com/libreswan/libreswan/issues/117
2017-10-01 21:26:21 -05:00
hwdsl2 1ddc5123c5 Upgrade to Debian 9 2017-09-28 00:29:18 -05:00
hwdsl2 0135f90bde Update ipsec.conf
- Replace obsolete keyword "virtual_private" with "virtual-private"
2017-09-28 00:29:18 -05:00
hwdsl2 f725f31473 Disable systemd watchdog
- Systemd watchdog is not available in Docker containers
- No longer need/install "libsystemd-dev" package
2017-09-28 00:29:06 -05:00
hwdsl2 a9489dbb0f Skip building manpages
- Skip building manpages for Libreswan
- No longer need/install "xmlto" package
2017-09-28 00:27:56 -05:00
Lin SongandGitHub bec3d8514e Merge pull request #38 from remini1998/master
fix #37

- Allow MS-CHAP v2 for better compatibility with the built-in Windows 10 VPN client
2017-09-25 00:24:13 -05:00
往日。andGitHub 610a91720a fix #37 2017-09-20 14:48:47 +08:00
hwdsl2 3bb0798255 New Libreswan version 3.21 2017-08-20 11:01:53 -05:00
hwdsl2 ec4317db38 Improve VPN ciphers
- Add 3des-sha2 to allowed VPN ciphers, and clean up
2017-06-02 13:12:22 -05:00
hwdsl2 3f054b3261 Update docs 2017-05-30 15:09:03 -05:00
hwdsl2 aaa9456f2d Minor clean up 2017-05-22 11:48:01 -05:00
Lin SongandGitHub 459cce31ed Merge pull request #22 from markhilton/master
added docker-compose.yml
2017-04-30 19:46:02 -05:00
root 3be678e498 added docker-compose.yml 2017-04-20 00:45:11 +00:00
hwdsl2 430dc3239c Update VPN ciphers
- Add aes256-sha2_512 to the list of allowed ciphers
- Required for Android 7.1.x and (possibly) Chromebook
2017-04-12 10:34:00 -05:00
hwdsl2 5f1896ca3c Minor improvements
- Use functions to simplify whitespace/quotes removal
- Remove sysctl settings not available in Docker container
2017-04-08 12:52:31 -05:00
hwdsl2 ece38976b7 Update docs 2017-04-08 12:18:11 -05:00
hwdsl2 0a2bb2ef29 Check for correct usage
- Check for correct usage of this Docker image
- If needed, output URL for usage instructions
2017-04-08 12:01:47 -05:00
hwdsl2 7deb1f71ac Improve VPN variables
- Check VPN credentials for non-ASCII characters
- Remove spaces and quotes around VPN variables, if any
2017-04-07 14:34:32 -05:00
hwdsl2 afde554884 New Libreswan version
- New Libreswan version 3.20
- Use GitHub as primary download source
2017-03-23 14:08:43 -05:00
hwdsl2 973cf465aa Remove Debian mirror workaround
- The workaround for "httpredir.debian.org" is no longer needed
- Ref: https://lists.debian.org/debian-mirrors/2017/02/msg00000.html
2017-03-23 14:06:18 -05:00
hwdsl2 9270ce0b29 Update docs 2017-03-19 21:50:14 -05:00
hwdsl2 c182959ed1 Update docs 2017-02-19 10:55:00 -06:00
hwdsl2 21a511b45f Improve IPTables rules
- Improve blocking of unencrypted L2TP without IPsec
2017-02-19 10:50:49 -06:00
hwdsl2 ddd0485692 Improve customization
- Use variables for easier customization of VPN subnets and DNS
- Other minor improvements
2017-02-11 21:43:17 -06:00
hwdsl2 ead3df7798 Improve VPN IPs
- Use %defaultroute and iptables MASQUERADE, no need to detect private IP
- Use %any for the first field of ipsec.secrets, instead of public IP
- As a result, the VPN server should now better adapt to IP changes.
2017-02-10 18:16:33 -06:00
hwdsl2 1bad905c4d Update docs 2017-02-10 11:06:30 -06:00
hwdsl2 da001bf87f Update docs 2017-02-05 23:21:17 -06:00
hwdsl2 f34e19d438 Update docs 2017-01-28 15:58:16 -06:00
hwdsl2 cc4c3954a2 Update docs
[ci skip]
2017-01-25 12:36:38 -06:00
hwdsl2 cd87e7fe99 Add notes 2017-01-21 12:25:13 -06:00
hwdsl2 db5e39e12b Improve VPN ciphers
- Consolidate VPN ciphers for "ike=" and "phase2alg=" in ipsec.conf.
2017-01-18 23:05:05 -06:00
hwdsl2 b168be8565 Bugfix
- Libreswan 3.19 removed MODP1024 from the ike= default list,
  which breaks compatibility with Android 5.x and others
- This commit explicitly adds MODP1024 back to the ike= list
2017-01-18 20:16:20 -06:00
hwdsl2 b624f82968 Update docs
[ci skip]
2017-01-18 16:53:03 -06:00
hwdsl2 1f127cc3bf Update year 2017-01-16 22:17:21 -06:00
hwdsl2 71e65e7561 Upgrade to Libreswan 3.19
- Upgrade to new Libreswan version 3.19
- Some changes are required in the VPN config files
- Ref:
  https://lists.libreswan.org/pipermail/swan-announce/2017/000023.html
2017-01-16 15:46:11 -06:00
hwdsl2 309e8d4d6a Update docs
[ci skip]
2017-01-13 13:30:28 -06:00
hwdsl2 07fc0c6588 Update docs
[ci skip]
2017-01-08 00:37:58 -06:00