- Adds missing providers to the documentation with links.
- Mentions that your own server install needs to be an Ubuntu 16.04 LTS distro
- Emphasize that the p12 certificate password will only be available once
- Obviate need to copy separate script and certificate files
- Allow execution from any directory, not just the script's parent
directory (no assumption of any particular working directory)
- Fix docs that neglected to mention copying cacert.pem
- Fix docs that incorrectly referred to the user cert store
As part of this work, rewrite the windows_client.ps1.j2 deployment
script template
- Add comment-based help
- Require admin privileges
- Use a Param() block
- Use parameter sets with -Add and -Remove switches
- Add the -GetInstalledCerts switch, to list any Algo certificates
installed the machine's cert store
- Add the -SaveCerts switch, to save the embedded certificates to files
- Put Jinja2 variables inside Powershell variables,
- Use native Powershell cmdlets rather than shell out to certutil.exe
- Add a playbook to regenerate the windows_USER.ps1 scripts
Changed the single-line virtualenv setup script into multi-line one. Should be equivalent to what it was before, and now viewable/copy-able without scrolling.
* Windows 10 -PfsGroup None --> -PfsGroup ECP256
Fixes broken tunnel when rekey (CREATE_CHILD_SA request [ N(REKEY_SA) SA No TSi TSr KE ]) occurs (on my Windows 10 1703 build 15063.138 Creator's Update system this is ~every 57 minutes)
* Update Windows Client PfsGroup Commandline
* Added note regarding DH group
* more complete
* clarified file sources
* remove trailing slash for consistency
* Added information on LAN Passthrough - a common home usecase
* Update Powershell Instructions for VPN connection
Update the Powershell instructions for creating the Windows VPN
connection. Clarfied requirement that Powershell run as Administrator,
and additional steps required to update the Execution Policies for
PowerShell.
* Formatting updates
Cleaned up capitalization and spacing errors, as well as improved
wording a bit.
* Missed an S
Evil, evil capitalization.
Windows manual steps `-AuthenticationTransformConstants SHA25612 8` had a space that causes this command to fail. Should be `-AuthenticationTransformConstants SHA256128`
- Be explicit about python2 requirement
- Remove `sudo` requirement on macOS
- Use `python -m pip` and `python -m virtualenv` to ensure expected python interpreter is running pip/virtualenv
- Tidy formatting
* Android client setup documentation
This is a first draft of Android Setup instructions. I expect that these will need some revising and that the formatting of this document will benefit from more tweaking.
We may also want to elaborate on the contents of the "advanced settings" menu ([screenshot](https://i.imgur.com/smsmdQF.png)).
* improve appearance on mobile devices
`python-setuptools` is a recommended packages for which will be installed automatically for `python-pip` on a clean ubuntu 16.04
Updated README in order to avoid skipping the packages with `--no-install-recommends`