pfSense

Ticket #1116: anonymous sainfo may be used only for single phase2 ipsec VPN's

Add IPSec 'ipalias' VIP support. Ticket #1041

Remove trailing carriage return

Bring back IPsec PSK Tab/Edit. Part of ticket #108. Still needs backend code to use the resulting keys.

Ticket #430. Give a none option to allow for roadwarriors configs.

Revert "Turn off xauth by default. Ticket #108"

This reverts commit 7998c3f280370991beca62c6a99ae6dd6051228a.

Turn off xauth by default. Ticket #108

Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions

• Make the carp ip fix for ipsec more general so other services that use the same methodology work.
  - Basically get_interface_ip() now knows how to handle carp(4).
• Move interface related function from pfsense-utils.inc to interfaces.inc that is their place....

• Fix ipsec over carp handling.
• do not useinterface in Upper case when working on the backends.
• Do not print Configuring IPSec during bootup if there is nothing configured.

• Hide interfaces internals to other code and use the propper interfaces.
  Basically use get_interface*() functions instead of accessing fields like 'ipaddr'/'descr' etc...
• Make get_interfaces_with_gateway less heavyweight by getting information from the configuration stored in config.xml...

Modify IPsec code to allow for transport mode. All existing configurations are
marked as tunnel for backwards compatibility. There are problems with the spd
read code which Will likely choke on transport entries. We can fix this later.

fix display of ipsec tunnel status when using DNS entries for the endpoints

Correctly return phase2 status for tunnels with hostnames

Rework most of the OpenVPN support. The interfaces have been updated to
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this...

Remove the vpn_endpoint_determine function. It did not work properly when
CARP devices were in use. Use the newer ipsec_get_phase1_src instead.

Introduce a new and improved version of IPsec mobile client support. The
mobile client tab is now used to configure user authentication (Xauth) and
client configuration (mode-cfg) options. User authentication is currently
limited to system password file entries. This will be extended to support...

Overhaul IPsec related code. Shared functions have been consolidated into
a new file named /etc/ipsec.inc. Tunnel definitions have been split into
phase1 and phase2. This allows any number of phase2 definitions to be
created for a single phase1 definition. Several facets of configuration...