Project

General

Profile

Actions

Feature #7248

open
SM JP

Web UI for IPSec settings should warn about poor security choices

Feature #7248: Web UI for IPSec settings should warn about poor security choices

Added by Sean McBride over 9 years ago. Updated almost 7 years ago.

Status:
New
Priority:
Normal
Assignee:
Category:
IPsec
Target version:
-
Start date:
02/10/2017
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:

Description

I've spent several days getting my VPN working and learned a lot in the process.

I've made a little patch here:
https://github.com/pfsense/pfsense/pull/3524

that adds warnings about poor security choices. I'm no crypto expert, but my source is:
https://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites

I don't think it's sufficient though, there are localization files to fix too I think. And docs like this:
https://doc.pfsense.org/index.php/IKEv2_with_EAP-MSCHAPv2

and the book, wiki, etc. etc.

JT Updated by Jim Thompson over 9 years ago Actions #1

  • Tracker changed from Bug to Feature
  • Assignee set to Jim Pingle
  • Priority changed from High to Normal

JP Updated by Jim Pingle about 7 years ago Actions #2

  • Category changed from Web Interface to IPsec

JP Updated by Jim Pingle almost 7 years ago Actions #3

This could probably use a similar technique to the one I implemented for Certificates on #9825

See commit:3f0b7bc3ae

Actions

Also available in: Atom