Nathan Lopez
3bf72c7df7
Fix Variable Substitution for ENDPOINT ( #397 )
2019-02-26 22:39:00 +01:00
Stanislas
6e402289bd
Add Vagrantfile for easier testing ( #396 )
2019-02-25 23:31:18 +01:00
angristan
52d67286de
Fix auto-install
2019-02-25 21:54:36 +01:00
Stanislas
7ba776ce7a
Improve automated install ( #395 )
...
#390 follow up, fixes #261
2019-02-25 21:30:46 +01:00
Cliff Cotino
f023de298d
Headless installation ( #390 )
...
Fixes #261
2019-02-25 20:02:50 +01:00
randomshell
a0027f1b42
Update easy-rsa to 3.0.6 ( #393 )
2019-02-21 15:59:57 +01:00
Samuel FORESTIER
676e68fe4f
Removes trailing space within server configuration ( #369 )
2018-12-16 19:14:34 +01:00
xiagw
19820e886e
Remove OpenVPN log during uninstallation ( #339 )
2018-10-19 12:10:56 +02:00
angristan
0d19b57e7f
Fix iptables-openvpn service on Debian 8
2018-10-08 21:11:52 +02:00
angristan
bca57c483d
Fix "ping6" and "ping -6" usage
2018-10-01 21:00:26 +02:00
GoliathLabs
c9c6089cd6
Use ping -6 instead of ping6 ( #317 )
2018-09-30 21:17:30 +02:00
angristan
043843850e
Improve Debian detection
...
e.g. for Raspbian
2018-09-29 20:15:20 +02:00
Sidd
d2bd051d97
Spelling fixes ( #314 )
2018-09-28 16:36:00 +02:00
angristan
ef6c2c2a78
Improve -y usage with package managers
2018-09-27 22:23:40 +02:00
angristan
e231c8924a
CentOS: Make sure epel-release is installed before openvpn
2018-09-27 22:09:12 +02:00
angristan
9716e868a0
Fix service handling on Ubuntu 16.04
2018-09-27 19:57:01 +02:00
angristan
0648e6a0b7
Fix IPv6 connectivity test
2018-09-27 19:52:52 +02:00
angristan
e4a9851b4f
Remove revoked client from ifconfig-pool-persist
2018-09-24 15:24:31 +02:00
angristan
0f117352c7
Remove hardcoded ciphers from Fedora systemd service
2018-09-24 14:33:08 +02:00
angristan
bbea708175
Do not modify package-provided systemd service
2018-09-24 14:26:41 +02:00
angristan
071baf477f
Update link, DNS name
2018-09-24 11:45:12 +02:00
angristan
73c52daf84
Add Quad9 uncensored
2018-09-24 11:42:29 +02:00
angristan
1dad1579ad
Better code
2018-09-24 11:37:13 +02:00
angristan
8d5d080cc0
Remove plaintext metadata from client certificate
2018-09-24 11:32:43 +02:00
angristan
b0fdb24984
Improve Debian/Ubuntu detection
2018-09-23 22:23:13 +02:00
Jun Hui
c14355a34c
Update easy-rsa to 3.0.5 ( #301 )
2018-09-23 17:09:33 +02:00
angristan
70ebe5620d
secp256r1 -> prime256v1
2018-09-23 17:06:15 +02:00
angristan
8e1cf382c3
Fix unset usage
2018-09-23 16:33:59 +02:00
angristan
5a67d3b3e7
Fix regex
2018-09-23 16:30:48 +02:00
GoliathLabs
ecf5f0d623
Add Arch Linux support ( #303 )
2018-09-23 16:27:36 +02:00
angristan
8de3957afb
Disable and stop OpenVPN upon removal
2018-09-23 14:32:24 +02:00
angristan
7f35106687
Fix condition
2018-09-23 14:30:08 +02:00
angristan
09b29ddc9c
Fix OS condition
2018-09-23 14:26:28 +02:00
angristan
ef30d3c9df
Fix service on Ubuntu 16.04
2018-09-23 14:25:18 +02:00
angristan
e2906fd5e4
Use APT repo for Ubuntu 16.04
...
Ubuntu 16.04 has OpenVPN 2.3.10
2018-09-23 12:47:52 +02:00
angristan
21f15d9aef
Little fixes according to OpenVPN 2.4
...
Yeah, seconds, really :)
2018-09-23 00:47:18 +02:00
angristan
c2a502be92
Add support for tls-crypt
...
Choice between tls-auth/tls-crypt
2018-09-22 22:34:10 +02:00
angristan
f716380080
Fixes
2018-09-22 22:33:25 +02:00
angristan
62c89af954
Support ncp-ciphers
...
Since OpenVPN 2.4, there is negotiable crypto parameters (NCP)
It means you can use a cipher suite like with HTTPS. By default the suite is AES-256-GCM:AES-256-CBC, so that means than since 2.4 is out, everyone using a 2.4 client + server was using AES 256 GCM, regardless of the --cipher option. With this commit, the chosen cipher will be the only cipher in the NCP cipher list, thus fixing this issue.
2018-09-22 18:18:36 +02:00
angristan
a85c13e4ec
Move setup questions to installQuestions ()
2018-09-22 17:59:21 +02:00
angristan
bbdabedbec
Add --auth choice (HMAC digest algorithm)
2018-09-22 17:54:30 +02:00
angristan
e0b4a5aae7
Use read -rp
2018-09-22 16:42:48 +02:00
angristan
3a5e23c5c1
Add ECDH support
2018-09-22 16:41:28 +02:00
angristan
cfa5eed6bd
Re-add possibility to use a hostname as the endpoint
2018-09-22 16:17:51 +02:00
angristan
db6a253676
Improve tests using regex
2018-09-22 15:23:01 +02:00
angristan
4d1baca0c7
Add ECDSA support and make tls-cipher configurable
2018-09-22 15:17:13 +02:00
angristan
06e7597942
Use AES-128-GCM by default
2018-09-22 14:25:30 +02:00
angristan
c1b069b501
Fix 10a1d04
2018-09-22 14:23:58 +02:00
angristan
7449bfc550
Remove trailing tabs
2018-09-22 14:21:20 +02:00
angristan
11e023b6dc
Use 2048 bits RSA key by default
2018-09-22 14:20:57 +02:00