Skip to content

O
OpnSense
Commit 5b379a6f authored by Ad Schellevis's avatar Ad Schellevis
Browse files
Options

(legacy) refactor vpn_ipsec_settings.php

parent 392df2f1
Hide whitespace changes
Inline Side-by-side
Showing with 155 additions and 175 deletions
src/www/vpn_ipsec_settings.php
View file @ 5b379a6f
...@@ -33,81 +33,80 @@ require_once("services.inc"); ...@@ -33,81 +33,80 @@ require_once("services.inc");
require_once("pfsense-utils.inc"); require_once("pfsense-utils.inc");
require_once("interfaces.inc"); require_once("interfaces.inc");
if (!is_array($config['ipsec'])) { if (!isset($config['ipsec'])) {
$config['ipsec'] = array(); $config['ipsec'] = array();
} }
$pconfig['noinstalllanspd'] = $config['system']['noinstalllanspd']; if ($_SERVER['REQUEST_METHOD'] === 'GET') {
$pconfig['preferoldsa_enable'] = isset($config['ipsec']['preferoldsa']); // fetch form data
foreach ($ipsec_loglevels as $lkey => $ldescr) { $pconfig = array();
if (!empty($config['ipsec']["ipsec_{$lkey}"])) { $pconfig['noinstalllanspd'] = isset($config['system']['noinstalllanspd']);
$pconfig["ipsec_{$lkey}"] = $config['ipsec']["ipsec_{$lkey}"]; $pconfig['preferoldsa_enable'] = isset($config['ipsec']['preferoldsa']);
} foreach ($ipsec_loglevels as $lkey => $ldescr) {
} if (!empty($config['ipsec']["ipsec_{$lkey}"])) {
$pconfig['failoverforcereload'] = isset($config['ipsec']['failoverforcereload']); $pconfig["ipsec_{$lkey}"] = $config['ipsec']["ipsec_{$lkey}"];
$pconfig['maxmss_enable'] = isset($config['system']['maxmss_enable']);
$pconfig['maxmss'] = $config['system']['maxmss'];
if ($_POST) {
unset($input_errors);
$pconfig = $_POST;
if (!$input_errors) {
if ($_POST['noinstalllanspd'] == "yes") {
$config['system']['noinstalllanspd'] = true;
} else { } else {
if (isset($config['system']['noinstalllanspd'])) { $pconfig["ipsec_{$lkey}"] = null;
unset($config['system']['noinstalllanspd']);
}
} }
}
if ($_POST['preferoldsa_enable'] == "yes") { $pconfig['failoverforcereload'] = isset($config['ipsec']['failoverforcereload']);
$config['ipsec']['preferoldsa'] = true; $pconfig['maxmss_enable'] = isset($config['system']['maxmss_enable']);
} elseif (isset($config['ipsec']['preferoldsa'])) $pconfig['maxmss'] = isset($config['system']['maxmss']) ? $config['system']['maxmss'] : null;
unset($config['ipsec']['preferoldsa']); } elseif ($_SERVER['REQUEST_METHOD'] === 'POST') {
// save form data
if (is_array($config['ipsec'])) { $pconfig = $_POST;
foreach ($ipsec_loglevels as $lkey => $ldescr) { if (isset($pconfig['noinstalllanspd']) && $pconfig['noinstalllanspd'] == "yes") {
if (empty($_POST["ipsec_{$lkey}"])) { $config['system']['noinstalllanspd'] = true;
if (isset($config['ipsec']["ipsec_{$lkey}"])) { } elseif (isset($config['system']['noinstalllanspd'])) {
unset($config['ipsec']["ipsec_{$lkey}"]); unset($config['system']['noinstalllanspd']);
} }
} else { if (isset($pconfig['preferoldsa_enable']) && $pconfig['preferoldsa_enable'] == "yes") {
$config['ipsec']["ipsec_{$lkey}"] = $_POST["ipsec_{$lkey}"]; $config['ipsec']['preferoldsa'] = true;
} elseif (isset($config['ipsec']['preferoldsa'])) {
unset($config['ipsec']['preferoldsa']);
}
if (is_array($config['ipsec'])) {
foreach ($ipsec_loglevels as $lkey => $ldescr) {
if (empty($_POST["ipsec_{$lkey}"])) {
if (isset($config['ipsec']["ipsec_{$lkey}"])) {
unset($config['ipsec']["ipsec_{$lkey}"]);
} }
} else {
$config['ipsec']["ipsec_{$lkey}"] = $_POST["ipsec_{$lkey}"];
} }
} }
}
if ($_POST['failoverforcereload'] == "yes") { if (isset($pconfig['failoverforcereload']) && $pconfig['failoverforcereload'] == "yes") {
$config['ipsec']['failoverforcereload'] = true; $config['ipsec']['failoverforcereload'] = true;
} elseif (isset($config['ipsec']['failoverforcereload'])) } elseif (isset($config['ipsec']['failoverforcereload']))
unset($config['ipsec']['failoverforcereload']); unset($config['ipsec']['failoverforcereload']);
if ($_POST['maxmss_enable'] == "yes") { if (isset($pconfig['maxmss_enable']) && $pconfig['maxmss_enable'] == "yes") {
$config['system']['maxmss_enable'] = true; $config['system']['maxmss_enable'] = true;
$config['system']['maxmss'] = $_POST['maxmss']; if (!empty($pconfig['maxmss']) && is_numericint($pconfig['maxmss'])) {
} else { $config['system']['maxmss'] = $pconfig['maxmss'];
}
} else {
if (isset($config['system']['maxmss_enable'])) {
unset($config['system']['maxmss_enable']); unset($config['system']['maxmss_enable']);
unset($config['system']['maxmss']);
} }
if (isset($config['system']['maxmss'])) {
write_config(); unset($config['system']['maxmss']);
$retval = 0;
$retval = filter_configure();
if (stristr($retval, "error") <> true) {
$savemsg = get_std_save_message(gettext($retval));
} else {
$savemsg = gettext($retval);
} }
}
vpn_ipsec_configure_preferoldsa(); write_config();
vpn_ipsec_configure(); $retval = filter_configure();
vpn_ipsec_configure_loglevels(); if (stristr($retval, "error") <> true) {
$savemsg = get_std_save_message(gettext($retval));
// header("Location: vpn_ipsec_settings.php"); } else {
// return; $savemsg = gettext($retval);
} }
vpn_ipsec_configure_preferoldsa();
vpn_ipsec_configure();
vpn_ipsec_configure_loglevels();
} }
$pgtitle = array(gettext("VPN"),gettext("IPsec"),gettext("Settings")); $pgtitle = array(gettext("VPN"),gettext("IPsec"),gettext("Settings"));
...@@ -121,156 +120,137 @@ include("head.inc"); ...@@ -121,156 +120,137 @@ include("head.inc");
<script type="text/javascript"> <script type="text/javascript">
//<![CDATA[ //<![CDATA[
$( document ).ready(function() {
maxmss_checked()
});
function maxmss_checked(obj) { function maxmss_checked(obj) {
if (obj.checked) if ($('#maxmss_enable').is(":checked")) {
jQuery('#maxmss').attr('disabled',false); $('#maxmss').attr('disabled',false);
else $("#maxmss").addClass('show');
jQuery('#maxmss').attr('disabled','true'); $("#maxmss").removeClass('hidden');
} else {
$('#maxmss').attr('disabled',true);
$("#maxmss").addClass('hidden');
$("#maxmss").removeClass('show');
}
} }
//]]> //]]>
</script> </script>
<section class="page-content-main"> <section class="page-content-main">
<div class="container-fluid"> <div class="container-fluid">
<div class="row"> <div class="row">
<?php
<?php if (isset($savemsg)) {
if (isset($savemsg)) { print_info_box($savemsg);
print_info_box($savemsg); }
} if (isset($input_errors) && count($input_errors) > 0) {
if (isset($input_errors) && count($input_errors) > 0) { print_input_errors($input_errors);
print_input_errors($input_errors); }
} ?>
?> <section class="col-xs-12">
<section class="col-xs-12">
<? $active_tab = "/vpn_ipsec_settings.php"; <? $active_tab = "/vpn_ipsec_settings.php";
include('vpn_ipsec_tabs.inc'); ?> include('vpn_ipsec_tabs.inc'); ?>
<div class="tab-content content-box col-xs-12"> <div class="tab-content content-box col-xs-12">
<form action="vpn_ipsec_settings.php" method="post" name="iform" id="iform"> <form action="vpn_ipsec_settings.php" method="post" name="iform" id="iform">
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-sort"> <table class="table table-striped">
<tr>
<thead> <td ><strong><?=gettext("IPSec Advanced Settings"); ?></strong></td>
<tr> <td align="right">
<th colspan="2" class="listtopic"><?=gettext("IPSec Advanced Settings"); ?></th> <small><?=gettext("full help"); ?> </small>
</tr> <i class="fa fa-toggle-off text-danger" style="cursor: pointer;" id="show_all_help_opnvpn_server" type="button"></i></a>
</thead> </td>
</tr>
<tbody>
<tr> <tr>
<td width="22%" valign="top" class="vncell"><?=gettext("LAN security associsations"); ?></td> <td><a id="help_for_noinstalllanspd" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("LAN security associsations"); ?></td>
<td width="78%" class="vtable"> <td>
<input name="noinstalllanspd" type="checkbox" id="noinstalllanspd" value="yes" <?php if ($pconfig['noinstalllanspd']) { <input name="noinstalllanspd" type="checkbox" id="noinstalllanspd" value="yes" <?=!empty($pconfig['noinstalllanspd']) ? "checked=\"checked\"" : "";?> />
echo "checked=\"checked\""; <strong><?=gettext("Do not install LAN SPD"); ?></strong>
} ?> /> <div class="hidden" for="help_for_noinstalllanspd">
<strong><?=gettext("Do not install LAN SPD"); ?></strong> <?=gettext("By default, if IPSec is enabled negating SPD are inserted to provide protection. " .
<br /> "This behaviour can be changed by enabling this setting which will prevent installing these SPDs."); ?>
<?=gettext("By default, if IPSec is enabled negating SPD are inserted to provide protection. " . </div>
"This behaviour can be changed by enabling this setting which will prevent installing these SPDs."); ?> </td>
</td>
</tr> </tr>
<tr> <tr>
<td width="22%" valign="top" class="vncell"><?=gettext("Security Associations"); ?></td> <td><a id="help_for_preferoldsa_enable" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("Security Associations"); ?></td>
<td width="78%" class="vtable"> <td width="78%" class="vtable">
<input name="preferoldsa_enable" type="checkbox" id="preferoldsa_enable" value="yes" <?php if ($pconfig['preferoldsa_enable']) { <input name="preferoldsa_enable" type="checkbox" id="preferoldsa_enable" value="yes" <?= !empty($pconfig['preferoldsa_enable']) ? "checked=\"checked\"" : "";?> />
echo "checked=\"checked\""; <strong><?=gettext("Prefer older IPsec SAs"); ?></strong>
} ?> /> <div class="hidden" for="help_for_preferoldsa_enable">
<strong><?=gettext("Prefer older IPsec SAs"); ?></strong> <?=gettext("By default, if several SAs match, the newest one is " .
<br /> "preferred if it's at least 30 seconds old. Select this " .
<?=gettext("By default, if several SAs match, the newest one is " . "option to always prefer old SAs over new ones."); ?>
"preferred if it's at least 30 seconds old. Select this " . </div>
"option to always prefer old SAs over new ones."); ?>
</td> </td>
</tr> </tr>
<tr> <tr>
<td width="22%" valign="top" class="vncell"><?=gettext("IPsec Debug"); ?></td> <td><a id="help_for_ipsec_debug" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("IPsec Debug"); ?></td>
<td width="78%" class="vtable"> <td>
<strong><?=gettext("Start IPSec in debug mode based on sections selected"); ?></strong> <div class="hidden" for="help_for_ipsec_debug">
<br /> <strong><?=gettext("Start IPSec in debug mode based on sections selected"); ?></strong> <br/>
<table summary="ipsec debug"> </div>
<?php foreach ($ipsec_loglevels as $lkey => $ldescr) : <?php foreach ($ipsec_loglevels as $lkey => $ldescr) :
?> ?>
<tr> <?=$ldescr?>
<td width="22%" valign="top" class="vncell"><?=$ldescr;?></td> <select name="ipsec_<?=$lkey?>" id="ipsec_<?=$lkey?>">
<td width="78%" valign="top" class="vncell"> <?php foreach (array("Silent", "Audit", "Control", "Diag", "Raw", "Highest") as $lidx => $lvalue):
<?php echo "<select name=\"ipsec_{$lkey}\" id=\"ipsec_{$lkey}\">\n"; ?>
foreach (array("Silent", "Audit", "Control", "Diag", "Raw", "Highest") as $lidx => $lvalue) { <option value="<?=$lidx?>" <?= isset($pconfig["ipsec_{$lkey}"]) && $pconfig["ipsec_{$lkey}"] == $lidx ? "selected=\"selected\"" : "";?> ?>
echo "<option value=\"{$lidx}\" "; <?=$lvalue?>
if ($pconfig["ipsec_{$lkey}"] == $lidx) { </option>
echo "selected=\"selected\""; <?php
} endforeach; ?>
echo ">{$lvalue}</option>\n"; </select>
} <?php
?> endforeach; ?>
</select> <div class="hidden" for="help_for_ipsec_debug">
</td> <?=gettext("Launches IPSec in debug mode so that more verbose logs " .
</tr> "will be generated to aid in troubleshooting."); ?>
<?php </div>
endforeach; ?> </td>
<tr style="display:none;"><td></td></tr> </tr>
</table>
<br /><?=gettext("Launches IPSec in debug mode so that more verbose logs " .
"will be generated to aid in troubleshooting."); ?>
</td>
</tr>
<tr> <tr>
<td width="22%" valign="top" class="vncell"><?=gettext("IPsec Reload on Failover"); ?></td> <td><a id="help_for_failoverforcereloadg" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("IPsec Reload on Failover"); ?></td>
<td width="78%" class="vtable"> <td>
<input name="failoverforcereload" type="checkbox" id="failoverforcereload" value="yes" <?php if ($pconfig['failoverforcereload']) { <input name="failoverforcereload" type="checkbox" id="failoverforcereload" value="yes" <?= !empty($pconfig['failoverforcereload']) ? "checked=\"checked\"" : "";?> />
echo "checked=\"checked\""; <strong><?=gettext("Force IPsec Reload on Failover"); ?></strong>
} ?> /> <div class="hidden" for="help_for_failoverforcereloadg">
<strong><?=gettext("Force IPsec Reload on Failover"); ?></strong> <?=gettext("In some circumstances using a gateway group as the interface for " .
<br /> "an IPsec tunnel does not function properly, and IPsec must be forcefully reloaded " .
<?=gettext("In some circumstances using a gateway group as the interface for " . "when a failover occurs. Because this will disrupt all IPsec tunnels, this behavior" .
"an IPsec tunnel does not function properly, and IPsec must be forcefully reloaded " . " is disabled by default. Check this box to force IPsec to fully reload on failover."); ?>
"when a failover occurs. Because this will disrupt all IPsec tunnels, this behavior" . </div>
" is disabled by default. Check this box to force IPsec to fully reload on failover."); ?>
</td> </td>
</tr> </tr>
<tr> <tr>
<td width="22%" valign="top" class="vncell"><?=gettext("Maximum MSS"); ?></td> <td><a id="help_for_maxmss_enable" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("Maximum MSS"); ?></td>
<td width="78%" class="vtable"> <td>
<input name="maxmss_enable" type="checkbox" id="maxmss_enable" value="yes" <?php if ($pconfig['maxmss_enable'] == true) { <input name="maxmss_enable" type="checkbox" id="maxmss_enable" value="yes" <?= !empty($pconfig['maxmss_enable']) ? "checked=\"checked\"" : "" ;?> onclick="maxmss_checked()" />
echo "checked=\"checked\"";
} ?> onclick="maxmss_checked(this)" />
<strong><?=gettext("Enable MSS clamping on VPN traffic"); ?></strong> <strong><?=gettext("Enable MSS clamping on VPN traffic"); ?></strong>
<br /> <input name="maxmss" id="maxmss" type="text" value="<?= !empty($pconfig['maxmss']) ? $pconfig['maxmss'] : "1400";?>" <?= !empty($pconfig['maxmss_enable']) ? "disabled=\"disabled\"" : "" ;?> />
<input name="maxmss" id="maxmss" value="<?php if ($pconfig['maxmss'] <> "") { <div class="hidden" for="help_for_maxmss_enable">
echo $pconfig['maxmss']; <?=gettext("Enable MSS clamping on TCP flows over VPN. " .
"This helps overcome problems with PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "); ?>
} else { </div>
"1400";
} ?>" class="formfld unknown" <?php if ($pconfig['maxmss_enable'] == false) {
echo "disabled=\"disabled\"";
} ?> />
<br />
<?=gettext("Enable MSS clamping on TCP flows over VPN. " .
"This helps overcome problems with PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "); ?>
</td> </td>
</tr> </tr>
<tr> <tr>
<td width="22%" valign="top">&nbsp;</td> <td>&nbsp;</td>
<td width="78%"> <td>
<input name="submit" type="submit" class="btn btn-primary" value="<?=gettext("Save"); ?>" /> <input name="submit" type="submit" class="btn btn-primary" value="<?=gettext("Save"); ?>" />
</td> </td>
</tr> </tr>
</table> </table>
</div> </div>
</form> </form>
</div>
</div> </section>
</section> </div>
</div> </div>
</div> </section>
</section>
<?php include("foot.inc"); <?php include("foot.inc");
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment

Technounit-GROUP 2023