Commit Graph

632 Commits (a225bde2b8454380017e09ac23ac8d876594311f)
 

Author SHA1 Message Date
Dan Guido d271b60b6a Update algo 8 years ago
Dan Guido 23d69da528 add warning about os security enhancements 8 years ago
Jack Ivanov aca036142f AndroidVPNClientProfiles #240 8 years ago
Jacob Wilder 7b468fae79 Fixed the azure role for situations where the user does not use a ~/.azure/credentials file (#242) 8 years ago
Jack Ivanov 9a5801f434 contgrats fix in update-users #243 8 years ago
Jack Ivanov b11015508f Update README.md (#241) 8 years ago
Jack Ivanov 6cc3598cc6 rewrite congrats 8 years ago
Dan Guido 8bbccc3cb9 Update README.md 8 years ago
Dan Guido 79116f898a Update README.md 8 years ago
Dan Guido 90d56aaea3 remove twitter button :-( 8 years ago
Dan Guido dd3b9b9a18 twitter badge 8 years ago
Jack Ivanov 20ebd7a595 rename connection 8 years ago
akirilov 05ab1f5feb Modified certificate generation to address issues #234 and #228 (#235)
* Modified certificate generation to address issues #234 and #228

I have made the following modifications to comply with the IKEv2 client certificate requirements:

- Changed client certificate CN to {{ IP_subject_alt_name }}_{{ item }} from {{ item }}
- Changed client certificate SAN to {{IP_subject_alt_name }} from {{ item }}
- Added clientAuth to client certificate EKU

I have made the following changes to address a mismatch in the windows deployment script and file names:

- Changed the client certificate (.p12) filename in config/{{ IP_subject_alt_name }} to {{ IP_subject_alt_name}}_{{ item }}.p12 from {{ item }}.p12 to match the ps1 script

Testing:

I have tested the changes on Windows 10 client, Ubuntu 16.04.1 server (DigitalOcean) - the config described in Issue #234

I apologize for not being able to test on other configurations. I hope that someone else can verify my changes

* fixed iOS issues

* fixed accidentall user change

* simplified changes

* Final iteration. I think that's all I can do to minimize the changes
8 years ago
Dan Guido 0422fe4c9e typo 8 years ago
Dan Guido d334e42048 explicit pointer to avenues for support 8 years ago
Dan Guido 4567d280f7 Update README.md 8 years ago
Dan Guido f0d10b200a Update README.md 8 years ago
Dan Guido 013a3ca321 TOC 8 years ago
Dan Guido a94c427596 Move FAQ to its own doc. 8 years ago
Dan Guido d9b13cbd45 Update CONTRIBUTING.md 8 years ago
Dan Guido 2f9417e659 Update Troubleshooting.md 8 years ago
Dan Guido e95ee10c3c slightly better docs 8 years ago
Dan Guido 2559c264c6 Slightly better docs 8 years ago
Dan Guido 26168f10a0 Closes #82, again 8 years ago
Jack Ivanov 35faf4bca7 Local openssl tasks (#169)
* Draft

works with ECDSA

RSA support for Windows

* update-users with local_openssl_tasks

* move prompts to the algo script

* additional directory for SSH keys

* move easyrsa_p12_export_password to pre_tasks

* update-users testing

* Fix hardcoded vars

* Delete the CA key

* Hardcoded IP. Fixes #219

* Some fixes
8 years ago
Jack Ivanov 257be0f395 make the fail message more understandable. Fixes #217 8 years ago
Jack Ivanov 8d21923b70 Additional info in the congrats 8 years ago
Jack Ivanov 569df11088 Prevent ansible and Jinja2 from updates #220 (#221) 8 years ago
Jack Ivanov 2027d23c55 Update README.md 8 years ago
Jack Ivanov 2798f84d3f ensure that apparmor is supported by the kernel #215 8 years ago
Jack Ivanov 1681b98eb2 update the troubleshooting page #146 8 years ago
Jack Ivanov ea4e82d66d move troubleshooting from the landing readme page 8 years ago
Jack Ivanov 3e852caf04 disable compression #146 8 years ago
Jack Ivanov c84abee047 increase timeouts 8 years ago
Jack Ivanov d23c952a4e Add the algo ssh key to any server (prevent fails when a user wants to update-users on a server deployed by algo but not with the algo ssh key) 8 years ago
Tonimir Kisasondi 38914fb827 Updated README.md (#214)
Just added -y to apt-get so it doesn't prompt for prerequisites install.
8 years ago
Jack Ivanov 97dc868d2c Update README.md 8 years ago
Jack Ivanov 35f322aa4a Do your job, travis! 8 years ago
Jack Ivanov 0a4e19a6d2 TravisCI initial. Testing all the components except the cloud roles. #154 8 years ago
Jack Ivanov cbf59addb3 additional tags 8 years ago
Jack Ivanov a50a396b94 addtiional fixes 8 years ago
Jack Ivanov 88518240fc Fix for the local installation 8 years ago
Jack Ivanov d8bd42c18c Merge pull request #209 from trailofbits/ec2encryption #133
EC2 encrypted volume support
8 years ago
Jack Ivanov 2598d58746 Update ADVANCED.md 8 years ago
Jack Ivanov a93b0a0f44 skip encrypted by default #133 8 years ago
Dan Guido 1d49ab6dc4 more minor changes for readability 8 years ago
Dan Guido 9963dc0cc7 Readability suggestions per Mike Russell 8 years ago
Jack Ivanov bde51fdd1d Update requirements.txt 8 years ago
Defunct b0f9ab94b1 ec2_ami_copy boto3 module, KMS, tagging, AMI caching (Encrypted support) 8 years ago
Defunct 0eb048383a refactored ec2 encryption 8 years ago