defunct
220da6eb53
Update AWS policy in documentation ( #587 )
...
Resolves #579
2017-06-07 00:31:00 -04:00
Jack Ivanov
f0283856ad
fix revocation ( #586 )
2017-06-06 12:42:23 +02:00
Jack Ivanov
a8ebb16437
Enable timeouts. Fixes #581
2017-06-05 17:33:03 +02:00
Jack Ivanov
26c202ded5
Generate p12 each deployment. Generate ps1 scripts if windows supported. Define become for all the section. ( #580 )
2017-06-04 12:18:55 -04:00
Jack Ivanov
ba7859ba5f
Revoke non-existing users fix
2017-06-04 11:30:55 +02:00
Jack Ivanov
a20e0eed55
Update deploy-from-windows.md
2017-05-31 18:06:41 +02:00
Jack Ivanov
91d9eb8f88
Update deploy-from-windows.md
2017-05-31 18:03:28 +02:00
bhawkins
6fb5204289
Note different admin usernames (refs trailofbits/algo#557). ( #564 )
2017-05-31 09:02:53 -04:00
Christopher De Vries
87e1282ebb
Make documentation on iptables for local installation clearer. ( #575 )
2017-05-31 08:56:17 -04:00
Martey Dodoo
d59d67f0ea
Add additional Gloud Cloud Engine zones. ( #569 )
...
* Add additional Gloud Cloud Engine zones.
Add GCE zones for Northern Virginia (us-east4), Singapore
(asia-southeast1), and Tokyo (asia-northeast1) regions.
* Update possible GCE zones in documentation.
2017-05-27 14:22:05 +02:00
Jack Ivanov
a9a6933c76
a typo
2017-05-23 18:26:48 +02:00
Jack Ivanov
f52eca39c3
add some debug to the tests
2017-05-23 18:26:01 +02:00
Dan Guido
e13a76d1f3
Update README.md
2017-05-23 11:36:04 -04:00
Dan Guido
695f9936a0
Update README.md
2017-05-23 11:33:46 -04:00
Jack Ivanov
0131505195
Enhance PS1 script ( #510 )
...
update docs
Update README.md
update readme
2017-05-23 11:31:53 -04:00
Jack Ivanov
e6c8f19d3c
Create a VPC network for each instane ( #561 )
2017-05-23 11:30:57 -04:00
Dan Guido
97248fce19
Default to DigitalOcean rather than AWS for the README
2017-05-23 11:30:26 -04:00
Jack Ivanov
4165eca407
Azure supports 17.04 #449
2017-05-22 17:16:00 +02:00
Jack Ivanov
ee6db37428
Change the P12 and SSH passwords only for new users ( #550 )
2017-05-21 22:28:18 -04:00
Jack Ivanov
40e0363b18
Add html helper for Android ( #554 )
...
* add html helper #280
move to the new local schema
fix a typo
* Update client-android.md
2017-05-21 22:27:53 -04:00
Ruben Jongejan
e9e6c6e383
cleaner syntax for local actions ( #536 )
...
* refactored local actions to cleaner syntax
* openssl commands folded
* removed unnecessary local_action's
2017-05-17 02:30:04 -04:00
Rod Vagg
75d64ac018
Make DNS blocklist URLs configurable ( #548 )
2017-05-15 12:39:34 +02:00
Job Evers‐Meltzer
bc604fb3e2
Update instructions on README ( #547 )
...
Tweaked README instructions as the paths were slightly different.
2017-05-13 12:25:36 -04:00
tetov
ac6db06a19
grammar edit ( #540 )
...
* grammar edit
* Update openssl.yml
2017-05-10 10:06:19 -04:00
Ruben Jongejan
fd5433efed
renamed localhost group to fix duplicate naming of group&host ( #537 )
2017-05-09 21:43:34 +02:00
Jack Ivanov
1b56dd660b
Update docs about sudo #529
2017-05-08 22:39:18 +02:00
Jack Ivanov
58d5a06e87
delete tasks and move to roles ( #519 )
2017-05-08 16:34:45 -04:00
Ruben Jongejan
07ddb5863b
improved readability with native yaml ( #530 )
2017-05-08 16:34:24 -04:00
Jack Ivanov
97369c303a
define local_dns if dns tag used ( #533 )
2017-05-08 16:33:30 -04:00
Jack Ivanov
d10a86b331
Revert "define local_dns if dns tag used ( #531 )" ( #532 )
...
This reverts commit 627b7d5d9b
2017-05-08 22:12:49 +02:00
Jack Ivanov
627b7d5d9b
define local_dns if dns tag used ( #531 )
2017-05-08 16:10:59 -04:00
Jack Ivanov
0031d2809e
Disable the Signature Algorithm check and add default vars. Fixes #525
2017-05-08 21:40:38 +02:00
Christopher J. Pilkington
27f9cda361
Add additional delay for ec2 instance prior to ssh ( #527 )
...
* Add additional delay for ec2 instance prior to ssh
* Add 10 second delay to all, rather than to cloud-ec2
2017-05-07 12:35:27 -04:00
Osman Surkatty
25b6ab9e0a
Added missing minimum policy actions. ( #522 )
...
Going through the installation process it appears that you're missing the following calls: `ec2:describeAddresses` and `ec2:allocateAddress`. This change fixes that.
2017-05-06 09:16:35 -04:00
Christopher J. Pilkington
a225bde2b8
Specify EIP domain ( #521 )
2017-05-06 09:16:28 -04:00
Jack Ivanov
6f170982aa
move to Elastic IP ( #512 )
2017-05-04 08:33:31 -04:00
Jack Ivanov
9f698fdd68
Get strongswan from the Zesty repo on Xenial ( #515 )
2017-05-03 16:03:10 -04:00
Dan Guido
6527d04a6f
add FAQ about software updates ( #506 )
...
* add FAQ about software updates
* toc
* grammar
* grammar
* link
* grammar
2017-04-30 15:44:47 -04:00
Dan Guido
e3c5015f2e
Aws documentation ( #505 )
...
* Add AWS and Cloudformation specific docs
Closes #482
Closes #468
* readme enhancements
* various grammatical issues fixed
2017-04-30 14:28:44 -04:00
Dan Guido
a97b210ee8
Update README.md
2017-04-29 14:39:55 -04:00
Jack Ivanov
bd348af9c2
Implementing blocks and additional fail hints #487 ( #497 )
...
change the troubleshooting url
2017-04-29 10:48:25 -04:00
Jack Ivanov
2f5c050fd2
dpdaction to clear ( #498 )
2017-04-27 14:47:45 -04:00
Jack Ivanov
0ed68b6c30
Properly configure ICMP restrictions ( #492 )
2017-04-27 12:47:05 -04:00
Ryan Kasper
0cb43650cb
Windows 10 -PfsGroup None --> -PfsGroup ECP256 ( #493 )
...
* Windows 10 -PfsGroup None --> -PfsGroup ECP256
Fixes broken tunnel when rekey (CREATE_CHILD_SA request [ N(REKEY_SA) SA No TSi TSr KE ]) occurs (on my Windows 10 1703 build 15063.138 Creator's Update system this is ~every 57 minutes)
* Update Windows Client PfsGroup Commandline
2017-04-27 12:46:50 -04:00
forkbomber
f002f32836
Fix typo related to "Error 809" and filtered IKE_AUTH requests ( #496 )
2017-04-27 12:46:28 -04:00
Jack Ivanov
540c761d3b
Disable RSA in the mobileconfigs. Fixes #486
2017-04-25 23:06:51 +02:00
Nicholas
aea22475c3
Fixed broken links to ansible deployment instructions ( #484 )
...
* Fixed broken link in EC2 IAM instructions
* Fixed broken in step 6 of instructions
2017-04-24 16:53:58 +02:00
Dan Guido
31d6bd39a1
The docs got out of sync with the scripts ( #480 )
...
* The docs got out of sync with the scripts
* restructure
* fix links
2017-04-23 16:36:30 -04:00
Jack Ivanov
451394100d
Some enhances in the compat ciphers ( #464 )
...
raise the IntegrityCheckMethod to SHA384
Move Windows to ECDSA
Increase IntegrityCheckMethod
2017-04-23 16:00:37 -04:00
Dan Guido
0d1c760a63
Doc improvements ( #479 )
...
* cleanup
* typos
* Closes #289
Add instructions for connecting to the VPN and configuring on demand.
2017-04-23 14:54:54 -04:00
