Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | another corner case since f24 has systemd and el6 does not | Kevin Fenzi | 2017-05-14 | 1 | -2/+9 |
| | |||||
* | and try and handle f24 here too | Kevin Fenzi | 2017-05-14 | 1 | -4/+4 |
| | |||||
* | try and use correct logic | Kevin Fenzi | 2017-05-14 | 1 | -1/+1 |
| | |||||
* | try and handle cases for f24 not being updated to the new setup either | Kevin Fenzi | 2017-05-14 | 1 | -2/+2 |
| | |||||
* | fix version here too | Kevin Fenzi | 2017-05-14 | 1 | -1/+1 |
| | |||||
* | handle poor old rhel6 | Kevin Fenzi | 2017-05-14 | 1 | -3/+27 |
| | |||||
* | Check the certificate key usage | Patrick Uiterwijk | 2017-05-14 | 1 | -0/+1 |
| | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> | ||||
* | also need cert and key under client | Kevin Fenzi | 2017-05-14 | 1 | -2/+2 |
| | |||||
* | switch openvpn to use seperate service units and directories for client and ↵ | Kevin Fenzi | 2017-05-14 | 1 | -5/+18 |
| | | | | server, hopefully in a mostly transparent way that will not cause much outage | ||||
* | change state=running to start=started as the old one is going away in ↵ | Kevin Fenzi | 2017-04-13 | 1 | -3/+3 |
| | | | | ansible 2.7 | ||||
* | Disable openvpn client handler for now | Kevin Fenzi | 2016-08-31 | 1 | -4/+4 |
| | |||||
* | Update out vpn configs for better encryption. | Kevin Fenzi | 2016-08-31 | 1 | -0/+2 |
| | |||||
* | Another pile of trailing whitespace fixes | Kevin Fenzi | 2016-08-08 | 1 | -1/+1 |
| | |||||
* | fixing logic for openvpn package install w/dnf | Tim Flink | 2015-11-26 | 1 | -1/+1 |
| | |||||
* | Install the openvpn client package with dnf on F22+ | Pierre-Yves Chibon | 2015-11-17 | 1 | -0/+10 |
| | |||||
* | Move fix-routes.sh to openvpn base and run it on restart | Patrick Uiterwijk | 2015-11-04 | 2 | -15/+0 |
| | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> | ||||
* | Running the script doesnt work yet. But we still want the script. | Patrick Uiterwijk | 2015-10-23 | 1 | -2/+2 |
| | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> | ||||
* | Make fix-routes not terminate with status 2 if it fixed it | Patrick Uiterwijk | 2015-10-23 | 1 | -1/+1 |
| | | | | | | | | This will make openvpn think something went wrong and terminate the connection. I did this to make it easily visible when running with ansible, but in this case it messes things up. Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> | ||||
* | Add script to OpenVPN for VPN route fixing | Patrick Uiterwijk | 2015-10-23 | 3 | -0/+18 |
| | | | | | | | This will make sure that always after a start/restart the VPN routes are created Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> | ||||
* | Disable persist-tun for openvpn | Patrick Uiterwijk | 2015-10-21 | 1 | -1/+0 |
| | | | | | | | | | | | | | | | | This should solve the issue where RHEL7 machines that get a network hiccup need an OpenVPN restart to restore their routes. The code is broken in the current upstream OpenVPN release, such that it does tear down some of the routes during a ping-restart (when the connection is dropped due to network hiccups), but the reconnection code does not restore the routes. I am working on an upstream patch to fix this, but in the meantime disabling persist-tun will make sure that OpenVPN does the entire initialization upon reconnection, which makes sure that all routes are created. Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> | ||||
* | Move all puppet_private stuff to ansible private so we can stop using puppet ↵ | Kevin Fenzi | 2015-09-25 | 1 | -2/+2 |
| | | | | private. | ||||
* | Change all instances of ansible_distribution_major_version to filter to int ↵ | Kevin Fenzi | 2015-05-27 | 1 | -2/+2 |
| | | | | for comparisons. | ||||
* | This is now fixed in a systemd update in rhel7.1 so drop the workaround | Kevin Fenzi | 2015-04-22 | 1 | -16/+1 |
| | |||||
* | Work around rhel 7.1 systemd template bug: ↵ | Kevin Fenzi | 2015-03-26 | 1 | -2/+17 |
| | | | | https://bugzilla.redhat.com/show_bug.cgi?id=1206007 | ||||
* | Does this need quotes? | Kevin Fenzi | 2014-12-15 | 1 | -2/+2 |
| | |||||
* | Try this one. | Kevin Fenzi | 2014-12-15 | 1 | -2/+2 |
| | |||||
* | Split this out to see if we can debug it some. | Kevin Fenzi | 2014-12-15 | 1 | -2/+9 |
| | |||||
* | Update state from installed/removed to present/absent for yum module as per ↵ | Praveen Kumar | 2014-11-05 | 1 | -1/+1 |
| | | | | latest documents -> http://docs.ansible.com/yum_module.html | ||||
* | fixing typo in restart notification | Tim Flink | 2014-09-24 | 1 | -1/+1 |
| | |||||
* | changing openvpn restart notifications to work on sysvinit and systemd style ↵ | Tim Flink | 2014-09-24 | 1 | -1/+3 |
| | | | | machines | ||||
* | newer fedora openvpn behaves more like rhel7 than rhel6 | Tim Flink | 2014-09-24 | 1 | -4/+4 |
| | |||||
* | Yes. It was a typo. | Ralph Bean | 2014-09-10 | 1 | -1/+1 |
| | |||||
* | Try copy here too. | Kevin Fenzi | 2014-08-12 | 1 | -1/+1 |
| | |||||
* | Move back from copy to file for testing | Pierre-Yves Chibon | 2014-08-01 | 1 | -1/+1 |
| | |||||
* | Use copy instead of file | Pierre-Yves Chibon | 2014-08-01 | 1 | -1/+1 |
| | |||||
* | Fix mode for the .crt | Pierre-Yves Chibon | 2014-08-01 | 1 | -1/+1 |
| | |||||
* | Try adjusting the notify handler | Pierre-Yves Chibon | 2014-08-01 | 1 | -1/+1 |
| | |||||
* | Let's just invert dest and source | Pierre-Yves Chibon | 2014-08-01 | 1 | -4/+4 |
| | |||||
* | Y'all get quotes | Pierre-Yves Chibon | 2014-08-01 | 1 | -3/+3 |
| | |||||
* | More quotes for the handler names | Pierre-Yves Chibon | 2014-08-01 | 1 | -1/+1 |
| | |||||
* | Tag all the openvpn tasks as 'openvpn' | Pierre-Yves Chibon | 2014-08-01 | 1 | -0/+4 |
| | |||||
* | Fix accessing the mode | Pierre-Yves Chibon | 2014-08-01 | 1 | -1/+1 |
| | |||||
* | And we put directly the destination, no location set | Pierre-Yves Chibon | 2014-08-01 | 1 | -1/+1 |
| | |||||
* | What about quotes | Pierre-Yves Chibon | 2014-08-01 | 1 | -4/+4 |
| | |||||
* | Add the logic to enable the openvpn server on EL6, EL7 and Fedora in the ↵ | Pierre-Yves Chibon | 2014-08-01 | 1 | -0/+12 |
| | | | | client and the server | ||||
* | Adjust the openvpn handler automatically to the distribution used | Pierre-Yves Chibon | 2014-08-01 | 1 | -0/+2 |
| | |||||
* | Clean openvpn server files that were doing nothing in the client | Pierre-Yves Chibon | 2014-08-01 | 154 | -309/+0 |
| | |||||
* | Fix the files list in the openvpn/client role | Pierre-Yves Chibon | 2014-08-01 | 1 | -0/+25 |
| | |||||
* | Dependencies between roles are marked in the meta folder not the tasks one | Pierre-Yves Chibon | 2014-08-01 | 2 | -3/+3 |
| | |||||
* | Mark the openvpn client and server as requesting the openvpn base role | Pierre-Yves Chibon | 2014-08-01 | 1 | -0/+3 |
| |