From mboxrd@z Thu Jan 1 00:00:00 1970 From: ummeegge To: development@lists.ipfire.org Subject: [PATCH v2 7/7] OpenVPN: Moved TLS auth to advanced encryption section Date: Thu, 10 Dec 2020 16:59:25 +0000 Message-ID: <20201210165925.25037-7-erik.kapfer@ipfire.org> In-Reply-To: <20201210165925.25037-1-erik.kapfer@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============5010298747164558116==" List-Id: --===============5010298747164558116== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable - The TLS authentication has been enhanced with --tls-crypt and with OpenVPN version 2.5.0 new introduced --tls-crypt-v2 . - New keys will be shown and can partly be downloaded over the "Certificate Authorities and -Keys" table. - The global section has been completely cleaned up from encryption settings which follows the IPSec WUI style. Signed-off-by: ummeegge --- html/cgi-bin/ovpnmain.cgi | 304 +++++++++++++++++++++++++++++++------- langs/de/cgi-bin/de.pl | 10 +- langs/en/cgi-bin/en.pl | 12 +- langs/es/cgi-bin/es.pl | 10 ++ langs/fr/cgi-bin/fr.pl | 12 +- langs/it/cgi-bin/it.pl | 7 +- langs/nl/cgi-bin/nl.pl | 13 +- langs/pl/cgi-bin/pl.pl | 10 ++ langs/ru/cgi-bin/ru.pl | 11 ++ langs/tr/cgi-bin/tr.pl | 9 ++ 10 files changed, 334 insertions(+), 64 deletions(-) diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi index a80befdb6..23085e763 100644 --- a/html/cgi-bin/ovpnmain.cgi +++ b/html/cgi-bin/ovpnmain.cgi @@ -371,9 +371,19 @@ sub writeserverconf { # Set TLSv2 as minimum print CONF "tls-version-min 1.2\n"; =20 - if ($sovpnsettings{'TLSAUTH'} eq 'on') { - print CONF "tls-auth ${General::swroot}/ovpn/certs/ta.key\n"; - } + # TLS control channel authentication + if ($sovpnsettings{'TLSAUTH'} ne 'off') { + if ($sovpnsettings{'TLSAUTH'} eq 'on') { + print CONF "tls-auth ${General::swroot}/ovpn/certs/ta.key\n"; + } + if ($sovpnsettings{'TLSAUTH'} eq 'tls-crypt') { + print CONF "tls-crypt ${General::swroot}/ovpn/certs/tc.key\n"; + } + if ($sovpnsettings{'TLSAUTH'} eq 'tls-crypt-v2') { + print CONF "tls-crypt-v2 ${General::swroot}/ovpn/certs/tc-v2-server.key\n= "; + } + } + if ($sovpnsettings{DCOMPLZO} eq 'on') { print CONF "comp-lzo\n"; } @@ -959,6 +969,7 @@ if ($cgiparams{'ACTION'} eq $Lang::tr{'save-enc-options'}= ) { &General::readhash("${General::swroot}/ovpn/settings", \%vpnsettings); =20 $vpnsettings{'DAUTH'} =3D $cgiparams{'DAUTH'}; + $vpnsettings{'TLSAUTH'} =3D $cgiparams{'TLSAUTH'}; $vpnsettings{'DCIPHER'} =3D $cgiparams{'DCIPHER'}; $vpnsettings{'DATACIPHERS'} =3D $cgiparams{'DATACIPHERS'}; =20 @@ -982,6 +993,39 @@ if ($cgiparams{'ACTION'} eq $Lang::tr{'save-enc-options'= }) { $vpnsettings{'NCHANNELCIPHERS'} =3D $cgiparams{'NCHANNELCIPHERS'}; } =20 + # Create ta.key for tls-auth if not presant + if ($cgiparams{'TLSAUTH'} eq 'on') { + if ( ! -e "${General::swroot}/ovpn/certs/ta.key") { + system('/usr/sbin/openvpn', '--genkey', '--secret', "${General::swroot}/o= vpn/certs/ta.key"); + if ($?) { + $errormessage =3D "$Lang::tr{'openssl produced an error'}: $?"; + goto ADV_ENC_ERROR; + } + } + } + + # Create tc.key for tls-crypt if not presant + if ($cgiparams{'TLSAUTH'} eq 'tls-crypt') { + if ( ! -e "${General::swroot}/ovpn/certs/tc.key") { + system('/usr/sbin/openvpn', '--genkey', 'tls-crypt', "${General::swroot}/= ovpn/certs/tc.key"); + if ($?) { + $errormessage =3D "$Lang::tr{'openssl produced an error'}: $?"; + goto ADV_ENC_ERROR; + } + } + } + + # Create tc-v2-server.key for tls-crypt-v2 server if not presant + if ($cgiparams{'TLSAUTH'} eq 'tls-crypt-v2') { + if ( ! -e "${General::swroot}/ovpn/certs/tc-v2-server.key") { + system('/usr/sbin/openvpn', '--genkey', 'tls-crypt-v2-server', "${General= ::swroot}/ovpn/certs/tc-v2-server.key"); + if ($?) { + $errormessage =3D "$Lang::tr{'openssl produced an error'}: $?"; + goto ADV_ENC_ERROR; + } + } + } + &General::writehash("${General::swroot}/ovpn/settings", \%vpnsettings); &writeserverconf(); } @@ -1272,17 +1316,6 @@ if ($cgiparams{'ACTION'} eq $Lang::tr{'save'} && $cgip= arams{'TYPE'} eq '' && $cg goto SETTINGS_ERROR; } =20 - # Create ta.key for tls-auth if not presant - if ($cgiparams{'TLSAUTH'} eq 'on') { - if ( ! -e "${General::swroot}/ovpn/certs/ta.key") { - system('/usr/sbin/openvpn', '--genkey', '--secret', "${General::swroot}/o= vpn/certs/ta.key"); - if ($?) { - $errormessage =3D "$Lang::tr{'openssl produced an error'}: $?"; - goto SETTINGS_ERROR; - } - } - } - $vpnsettings{'ENABLED_BLUE'} =3D $cgiparams{'ENABLED_BLUE'}; $vpnsettings{'ENABLED_ORANGE'} =3D$cgiparams{'ENABLED_ORANGE'}; $vpnsettings{'ENABLED'} =3D $cgiparams{'ENABLED'}; @@ -1293,7 +1326,6 @@ if ($cgiparams{'ACTION'} eq $Lang::tr{'save'} && $cgipa= rams{'TYPE'} eq '' && $cg $vpnsettings{'DDEST_PORT'} =3D $cgiparams{'DDEST_PORT'}; $vpnsettings{'DMTU'} =3D $cgiparams{'DMTU'}; $vpnsettings{'DCOMPLZO'} =3D $cgiparams{'DCOMPLZO'}; - $vpnsettings{'TLSAUTH'} =3D $cgiparams{'TLSAUTH'}; #wrtie enable =20 if ( $vpnsettings{'ENABLED_BLUE'} eq 'on' ) {system("touch ${General::swro= ot}/ovpn/enable_blue 2>/dev/null");}else{system("unlink ${General::swroot}/ov= pn/enable_blue 2>/dev/null");} @@ -1723,12 +1755,34 @@ END ### Download tls-auth key ### }elsif ($cgiparams{'ACTION'} eq $Lang::tr{'download tls-auth key'}) { - if ( -f "${General::swroot}/ovpn/certs/ta.key" ) { - print "Content-Type: application/octet-stream\r\n"; - print "Content-Disposition: filename=3Dta.key\r\n\r\n"; - print `/bin/cat ${General::swroot}/ovpn/certs/ta.key`; - exit(0); - } + if ( -f "${General::swroot}/ovpn/certs/ta.key" ) { + print "Content-Type: application/octet-stream\r\n"; + print "Content-Disposition: filename=3Dta.key\r\n\r\n"; + print `/bin/cat ${General::swroot}/ovpn/certs/ta.key`; + exit(0); + } + +### +### Download tls-crypt key +### +} elsif ($cgiparams{'ACTION'} eq $Lang::tr{'download tls-crypt key'}) { + if ( -f "${General::swroot}/ovpn/certs/tc.key" ) { + print "Content-Type: application/octet-stream\r\n"; + print "Content-Disposition: filename=3Dtc.key\r\n\r\n"; + print `/bin/cat ${General::swroot}/ovpn/certs/tc.key`; + exit(0); + } + +### +### Download tls-crypt-v2 key +### +} elsif ($cgiparams{'ACTION'} eq $Lang::tr{'download tls-crypt-v2 key'}) { + if ( -f "${General::swroot}/ovpn/certs/tc-v2-server.key" ) { + print "Content-Type: application/octet-stream\r\n"; + print "Content-Disposition: filename=3Dtc-v2-server.key\r\n\r\n"; + print `/bin/cat ${General::swroot}/ovpn/certs/tc-v2-server.key`; + exit(0); + } =20 ### ### Form for generating a root certificate @@ -2451,13 +2505,37 @@ else =20 print CLIENTCONF "auth $vpnsettings{'DAUTH'}\r\n"; =20 - if ($vpnsettings{'TLSAUTH'} eq 'on') { - if ($cgiparams{'MODE'} eq 'insecure') { - print CLIENTCONF ";"; - } - print CLIENTCONF "tls-auth ta.key\r\n"; - $zip->addFile( "${General::swroot}/ovpn/certs/ta.key", "ta.key") or die "C= an't add file ta.key\n"; + # Comment TLS-Auth directive if 'insecure' mode has been choosen + if ($vpnsettings{'TLSAUTH'} eq 'on') { + if ($cgiparams{'MODE'} eq 'insecure') { + print CLIENTCONF ";"; + } + print CLIENTCONF "tls-auth ta.key\r\n"; + $zip->addFile( "${General::swroot}/ovpn/certs/ta.key", "ta.key") or die "= Can't add file ta.key\n"; } + + # Comment TLS-Crypt directive if 'insecure' mode has been choosen + if ($vpnsettings{'TLSAUTH'} eq 'tls-crypt') { + if ($cgiparams{'MODE'} eq 'insecure') { + print CLIENTCONF ";"; + } + print CLIENTCONF "tls-crypt tc.key\r\n"; + $zip->addFile( "${General::swroot}/ovpn/certs/tc.key", "tc.key") or die "= Can't add file tc.key\n"; + } + + # Comment TLS-Crypt-v2 directive if 'insecure' mode has been choosen and ge= nerate individual key + if ($vpnsettings{'TLSAUTH'} eq 'tls-crypt-v2') { + if ($cgiparams{'MODE'} eq 'insecure') { + print CLIENTCONF ";"; + } + print CLIENTCONF "tls-crypt-v2 tc-v2-client-$confighash{$cgiparams{'KEY'}}= [1].key\r\n"; + # Generate individual tls-crypt-v2 client key + my $cryptfile =3D "$tempdir/tc-v2-client-$confighash{$cgiparams{'KEY'}}[1]= .key"; + system('/usr/sbin/openvpn', '--tls-crypt-v2', "${General::swroot}/ovpn/cer= ts/tc-v2-server.key", '--genkey', 'tls-crypt-v2-client', "$cryptfile"); + # Add individual tls-crypt-v2 client key to client package + $zip->addFile( "$cryptfile", "tc-v2-client-$confighash{$cgiparams{'KEY'}}[= 1].key") or die "Can't add file tc-v2-client-$confighash{$cgiparams{'KEY'}}[= 1].key\n"; + } + if ($vpnsettings{DCOMPLZO} eq 'on') { print CLIENTCONF "comp-lzo\r\n"; } @@ -2514,7 +2592,33 @@ else print CLIENTCONF "\r\n\r\n"; close(FILE); =20 - # TLS auth + # Create individual tls-crypt-v2 client key and print it to client.conf if = 'insecure' has been selected + if ($vpnsettings{'TLSAUTH'} eq 'tls-crypt-v2') { + my $cryptfile =3D "$tempdir/tc-v2-client-$confighash{$cgiparams{'KEY'}}[1]= .key"; + system('/usr/sbin/openvpn', '--tls-crypt-v2', "${General::swroot}/ovpn/cer= ts/tc-v2-server.key", '--genkey', 'tls-crypt-v2-client', "$cryptfile"); + open(FILE, "<$cryptfile"); + print CLIENTCONF "\r\n"; + while () { + chomp($_); + print CLIENTCONF "$_\r\n"; + } + print CLIENTCONF "\r\n\r\n"; + close(FILE); + } + + # Print TLS-Crypt key to client.ovpn if 'insecure' has been selected + if ($vpnsettings{'TLSAUTH'} eq 'tls-crypt') { + open(FILE, "<${General::swroot}/ovpn/certs/tc.key"); + print CLIENTCONF "\r\n"; + while () { + chomp($_); + print CLIENTCONF "$_\r\n"; + } + print CLIENTCONF "\r\n\r\n"; + close(FILE); + } + + # Print TLS-Auth key to client.ovpn if 'insecure' has been selected if ($vpnsettings{'TLSAUTH'} eq 'on') { open(FILE, "<${General::swroot}/ovpn/certs/ta.key"); print CLIENTCONF "\r\n"; @@ -2706,6 +2810,50 @@ else exit(0); } =20 +### +### Display tls-crypt key +### +} elsif ($cgiparams{'ACTION'} eq $Lang::tr{'show tls-crypt key'}) { + + if (! -e "${General::swroot}/ovpn/certs/tc.key") { + $errormessage =3D $Lang::tr{'not present'}; + } else { + &Header::showhttpheaders(); + &Header::openpage($Lang::tr{'ovpn'}, 1, ''); + &Header::openbigbox('100%', 'LEFT', '', ''); + &Header::openbox('100%', 'LEFT', "$Lang::tr{'tc key'}"); + my $output =3D `/bin/cat ${General::swroot}/ovpn/certs/tc.key`; + $output =3D &Header::cleanhtml($output,"y"); + print "
$output
\n"; + &Header::closebox(); + print "
$Lang::tr{'= back'}
"; + &Header::closebigbox(); + &Header::closepage(); + exit(0); + } + +### +### Display tls-crypt-v2 server key +### +} elsif ($cgiparams{'ACTION'} eq $Lang::tr{'show tls-crypt-v2 key'}) { + + if (! -e "${General::swroot}/ovpn/certs/tc-v2-server.key") { + $errormessage =3D $Lang::tr{'not present'}; + } else { + &Header::showhttpheaders(); + &Header::openpage($Lang::tr{'ovpn'}, 1, ''); + &Header::openbigbox('100%', 'LEFT', '', ''); + &Header::openbox('100%', 'LEFT', "$Lang::tr{'tc v2 key'}"); + my $output =3D `/bin/cat ${General::swroot}/ovpn/certs/tc-v2-server.key`; + $output =3D &Header::cleanhtml($output,"y"); + print "
$output
\n"; + &Header::closebox(); + print "
$Lang::tr{'= back'}
"; + &Header::closebigbox(); + &Header::closepage(); + exit(0); + } + ### ### Display Certificate Revoke List ### @@ -2758,9 +2906,6 @@ ADV_ERROR: if ($cgiparams{'LOG_VERB'} eq '') { $cgiparams{'LOG_VERB'} =3D '3'; } - if ($cgiparams{'TLSAUTH'} eq '') { - $cgiparams{'TLSAUTH'} =3D 'off'; - } $checked{'CLIENT2CLIENT'}{'off'} =3D ''; $checked{'CLIENT2CLIENT'}{'on'} =3D ''; $checked{'CLIENT2CLIENT'}{$cgiparams{'CLIENT2CLIENT'}} =3D 'CHECKED'; @@ -2981,6 +3126,7 @@ END } $confighash{$key}[39] =3D $cgiparams{'DAUTH'}; $confighash{$key}[40] =3D $cgiparams{'DCIPHER'}; + $confighash{$key}[41] =3D $cgiparams{'TLSAUTH'}; $confighash{$key}[42] =3D $cgiparams{'DATACIPHERS'}; $confighash{$key}[43] =3D $cgiparams{'CHANNELCIPHERS'}; $confighash{$key}[44] =3D $cgiparams{'NCHANNELCIPHERS'}; @@ -3004,6 +3150,17 @@ ADV_ENC_ERROR: @temp =3D split('\|', $cgiparams{'DAUTH'}); foreach my $key (@temp) {$checked{'DAUTH'}{$key} =3D "selected=3D'selected'= "; } =20 + # Set default for TLS control authentication + if ($cgiparams{'TLSAUTH'} eq '') { + $cgiparams{'TLSAUTH'} =3D 'tls-crypt'; #[41] + } + $checked{'TLSAUTH'}{'on'} =3D ''; + $checked{'TLSAUTH'}{'off'} =3D ''; + $checked{'TLSAUTH'}{'tls-crypt'} =3D ''; + $checked{'TLSAUTH'}{'tls-crypt-v2'} =3D ''; + @temp =3D split('\|', $cgiparams{'TLSAUTH'}); + foreach my $key (@temp) {$checked{'TLSAUTH'}{$key} =3D "selected=3D'selecte= d'"; } + # Set default for data-cipher-fallback (the old --cipher directive) if ($cgiparams{'DCIPHER'} eq '') { $cgiparams{'DCIPHER'} =3D 'AES-256-CBC'; #[40] @@ -3058,12 +3215,14 @@ ADV_ENC_ERROR: if ($cgiparams{'ACTION'} eq $Lang::tr{'save-enc-options'}) { $confighash{$cgiparams{'KEY'}}[39] =3D $cgiparams{'DAUTH'}; $confighash{$cgiparams{'KEY'}}[40] =3D $cgiparams{'DCIPHER'}; + $confighash{$cgiparams{'KEY'}}[41] =3D $cgiparams{'TLSAUTH'}; $confighash{$cgiparams{'KEY'}}[42] =3D $cgiparams{'DATACIPHERS'}; $confighash{$cgiparams{'KEY'}}[43] =3D $cgiparams{'CHANNELCIPHERS'}; $confighash{$cgiparams{'KEY'}}[44] =3D $cgiparams{'NCHANNELCIPHERS'}; } else { $cgiparams{'DAUTH'} =3D $vpnsettings{'DAUTH'}; $cgiparams{'DCIPHER'} =3D $vpnsettings{'DCIPHER'}; + $cgiparams{'TLSAUTH'} =3D $vpnsettings{'TLSAUTH'}; $cgiparams{'DATACIPHERS'} =3D $vpnsettings{'DATACIPHERS'}; $cgiparams{'CHANNELCIPHERS'} =3D $vpnsettings{'CHANNELCIPHERS'}; $cgiparams{'NCHANNELCIPHERS'} =3D $vpnsettings{'NCHANNELCIPHERS'}; @@ -3175,6 +3334,7 @@ ADV_ENC_ERROR: $Lang::tr{'ovpn ha'} + $Lang::tr{'ovpn tls auth'} @@ -3193,6 +3353,14 @@ ADV_ENC_ERROR: + + + @@ -3972,7 +4140,6 @@ if ($confighash{$cgiparams{'KEY'}}) { $cgiparams{'CCD_WINS'} =3D $confighash{$cgiparams{'KEY'}}[37]; $cgiparams{'DAUTH'} =3D $confighash{$cgiparams{'KEY'}}[39]; $cgiparams{'DCIPHER'} =3D $confighash{$cgiparams{'KEY'}}[40]; - $cgiparams{'TLSAUTH'} =3D $confighash{$cgiparams{'KEY'}}[41]; # Index from [39] to [44] has been reserved by advanced encryption $cgiparams{'CLIENTVERSION'} =3D $confighash{$cgiparams{'KEY'}}[45]; } elsif ($cgiparams{'ACTION'} eq $Lang::tr{'save'}) { @@ -4890,10 +5057,6 @@ if ($cgiparams{'TYPE'} eq 'net') { $checked{'MSSFIX'}{'on'} =3D ''; $checked{'MSSFIX'}{$cgiparams{'MSSFIX'}} =3D 'CHECKED'; =20 - $checked{'TLSAUTH'}{'off'} =3D ''; - $checked{'TLSAUTH'}{'on'} =3D ''; - $checked{'TLSAUTH'}{$cgiparams{'TLSAUTH'}} =3D 'CHECKED'; - if (1) { &Header::showhttpheaders(); &Header::openpage($Lang::tr{'ovpn'}, 1, ''); @@ -5439,9 +5602,6 @@ END if ($cgiparams{'MSSFIX'} eq '') { $cgiparams{'MSSFIX'} =3D 'off'; } - if ($cgiparams{'TLSAUTH'} eq '') { - $cgiparams{'TLSAUTH'} =3D 'off'; - } if ($cgiparams{'DOVPN_SUBNET'} eq '') { $cgiparams{'DOVPN_SUBNET'} =3D '10.' . int(rand(256)) . '.' . int(rand(256= )) . '.0/255.255.255.0'; } @@ -5459,10 +5619,6 @@ END $selected{'DPROTOCOL'}{'tcp'} =3D ''; $selected{'DPROTOCOL'}{$cgiparams{'DPROTOCOL'}} =3D 'SELECTED'; =20 - $checked{'TLSAUTH'}{'off'} =3D ''; - $checked{'TLSAUTH'}{'on'} =3D ''; - $checked{'TLSAUTH'}{$cgiparams{'TLSAUTH'}} =3D 'CHECKED'; - $checked{'DCOMPLZO'}{'off'} =3D ''; $checked{'DCOMPLZO'}{'on'} =3D ''; $checked{'DCOMPLZO'}{$cgiparams{'DCOMPLZO'}} =3D 'CHECKED'; @@ -5565,17 +5721,6 @@ END =20 -
- - $Lang::tr{'ovpn crypt options'}: - -
- - - $Lang::tr{'ovpn tls auth'} - = - -

END ; =20 @@ -5874,6 +6019,10 @@ END my $col3=3D"bgcolor=3D'$color{'color22'}'"; # ta.key line my $col4=3D"bgcolor=3D'$color{'color20'}'"; + # tc-v2.key line + my $col5=3D"bgcolor=3D'$color{'color22'}'"; + # tc.key + my $col6=3D"bgcolor=3D'$color{'color20'}'"; =20 if (-f "${General::swroot}/ovpn/ca/cacert.pem") { my $casubject =3D `/usr/bin/openssl x509 -text -in ${General::swroot}/ovpn= /ca/cacert.pem`; @@ -6003,7 +6152,7 @@ END # Nothing print < - $Lang::tr{'ta key'}: + $Lang::tr{'ta key'} $Lang::tr{'not present'}   @@ -6011,6 +6160,51 @@ END ; } =20 + # Adding tc-v2.key to chart + if (-f "${General::swroot}/ovpn/certs/tc-v2-server.key") { + my $tcvsubject =3D `/bin/cat ${General::swroot}/ovpn/certs/tc-v2-server.ke= y`; + $tcvsubject =3D~ /-----BEGIN (.*)-----[\n]/; + $tcvsubject =3D $1; + print < + $Lang::tr{'tc v2 key'} + $tcvsubject +
+ + +
+
+   + +END +; + } + + # Adding tc.key to chart + if (-f "${General::swroot}/ovpn/certs/tc.key") { + my $tcsubject =3D `/bin/cat ${General::swroot}/ovpn/certs/tc.key`; + $tcsubject =3D~ /# (.*)[\n]/; + $tcsubject =3D $1; + print < + $Lang::tr{'tc key'} + $tcsubject + + + + +
+ + +
+   + +END +; + } + if (! -f "${General::swroot}/ovpn/ca/cacert.pem") { print "
= "; print ""; diff --git a/langs/de/cgi-bin/de.pl b/langs/de/cgi-bin/de.pl index a4c166bfe..b6093be3e 100644 --- a/langs/de/cgi-bin/de.pl +++ b/langs/de/cgi-bin/de.pl @@ -894,6 +894,9 @@ 'download new ruleset' =3D> 'Neuen Regelsatz herunterladen', 'download pkcs12 file' =3D> 'PKCS12-Datei herunterladen', 'download root certificate' =3D> 'Root-Zertifikat herunterladen', +'download tls-auth key' =3D> 'TLS-Auth Schl=C3=BCssel herunterladen', +'download tls-crypt key' =3D> 'TLS-Crypt Schl=C3=BCssel herunterladen', +'download tls-crypt-v2 key' =3D> 'TLS-Crypt-v2 Schl=C3=BCssel herunterladen', 'download tls-auth key' =3D> 'tls-auth Key herunterladen', 'dpd action' =3D> 'Aktion f=C3=BCr Erkennung toter Gegenstellen (Dead Peer D= etection)', 'dpd delay' =3D> 'Verz=C3=B6gerung', @@ -1951,7 +1954,7 @@ 'ovpn subnet' =3D> 'OpenVPN-Subnetz:', 'ovpn subnet is invalid' =3D> 'Das OpenVPN-Subnetz ist ung=C3=BCltig.', 'ovpn subnet overlap' =3D> 'OpenVPNSubnetz =C3=BCberschneidet sich mit ', -'ovpn tls auth' =3D> 'TLS-Kanalabsicherung:', +'ovpn tls auth' =3D> 'TLS-Kanalabsicherung', 'ovpn warning 64 bit block cipher' =3D> 'Diser Algorithmus ist unsicher und = wird bald entfernt.
Bitte =C3=A4ndern Sie dies so schnell wie m=C3=B6glic= h!
', 'ovpn warning algorithm' =3D> 'Folgender Algorithmus wurde konfiguriert', 'ovpn warning rfc3280' =3D> 'Das Host Zertifikat ist nicht RFC3280 Regelkonf= orm.
Bitte IPFire auf die letzte Version updaten und generieren sie ein n= eues Root und Host Zertifikat so bald wie m=C3=B6glich.

Es m=C3=BCsse= n dann alle OpenVPN clients erneuert werden!
', @@ -2226,6 +2229,9 @@ 'show last x lines' =3D> 'die letzten x Zeilen anzeigen', 'show root certificate' =3D> 'Root-Zertifikat anzeigen', 'show share options' =3D> 'Anzeige der Freigabeeinstellungen', +'show tls-auth key' =3D> 'TLS-Auth Schl=C3=BCssel anzeigen', +'show tls-crypt key' =3D> 'TLS-Crypt Schl=C3=BCssel anzeigen', +'show tls-crypt-v2 key' =3D> 'TLS-Crypt-v2 Schl=C3=BCssel anzeigen', 'shuffle' =3D> 'Zufall', 'shutdown' =3D> 'Herunterfahren', 'shutdown ask' =3D> 'Herunterfahren?', @@ -2352,6 +2358,8 @@ 'system logs' =3D> 'Systemprotokolldateien', 'system status information' =3D> 'System-Statusinformationen', 'ta key' =3D> 'TLS-Authentifizierungsschl=C3=BCssel', +'tc key' =3D> 'TLS-Kryptografie-Schl=C3=BCssel', +'tc v2 key' =3D> 'TLS-Kryptografie-Schl=C3=BCssel-Version2', 'taa zombieload2' =3D> 'TSX Async Abort / ZombieLoad v2', 'tcp more reliable' =3D> 'TCP (zuverl=C3=A4ssiger)', 'telephone not set' =3D> 'Telefonnummer nicht angegeben.', diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index dc324676a..fe2a9d65d 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -918,7 +918,9 @@ 'download new ruleset' =3D> 'Download new ruleset', 'download pkcs12 file' =3D> 'Download PKCS12 file', 'download root certificate' =3D> 'Download root certificate', -'download tls-auth key' =3D> 'Download tls-auth key', +'download tls-auth key' =3D> 'Download TLS-Auth key', +'download tls-crypt key' =3D> 'Download TLS-Crypt key', +'download tls-crypt-v2 key' =3D> 'Download TLS-Crypt-v2 server key', 'dpd action' =3D> 'Action', 'dpd delay' =3D> 'Delay', 'dpd timeout' =3D> 'Timeout', @@ -1983,7 +1985,7 @@ 'ovpn subnet' =3D> 'OpenVPN subnet:', 'ovpn subnet is invalid' =3D> 'OpenVPN subnet is invalid.', 'ovpn subnet overlap' =3D> 'OpenVPN Subnet overlaps with : ', -'ovpn tls auth' =3D> 'TLS Channel Protection:', +'ovpn tls auth' =3D> 'TLS Channel Protection', 'ovpn warning 64 bit block cipher' =3D> 'This encryption algorithm is broken= and will soon be removed.
Please change this as soon as possible!
', 'ovpn warning algorithm' =3D> 'You configured the algorithm', 'ovpn warning rfc3280' =3D> 'Your host certificate is not RFC3280 compliant.=
Please update to the latest IPFire version and generate as soon as possi= ble a new root and host certificate.

All OpenVPN clients needs then t= o be renewed!
', @@ -2262,7 +2264,9 @@ 'show lines' =3D> 'Show lines', 'show root certificate' =3D> 'Show root certificate', 'show share options' =3D> 'Show shares options', -'show tls-auth key' =3D> 'Show tls-auth key', +'show tls-auth key' =3D> 'Show TLS-Auth key', +'show tls-crypt key' =3D> 'Show TLS-Crypt key', +'show tls-crypt-v2 key' =3D> 'Show TLS-Crypt-v2 key', 'shuffle' =3D> 'Shuffle', 'shutdown' =3D> 'Shutdown', 'shutdown ask' =3D> 'Shutdown?', @@ -2390,6 +2394,8 @@ 'system logs' =3D> 'System Logs', 'system status information' =3D> 'System Status Information', 'ta key' =3D> 'TLS-Authentification-Key', +'tc key' =3D> 'TLS-Cryptografic-Key', +'tc v2 key' =3D> 'TLS-Cryptografic-Key-version2', 'taa zombieload2' =3D> 'TSX Async Abort / ZombieLoad v2', 'tcp more reliable' =3D> 'TCP (more reliable)', 'telephone not set' =3D> 'Telephone not set.', diff --git a/langs/es/cgi-bin/es.pl b/langs/es/cgi-bin/es.pl index 1a0272b8a..99aa73482 100644 --- a/langs/es/cgi-bin/es.pl +++ b/langs/es/cgi-bin/es.pl @@ -717,6 +717,9 @@ 'download new ruleset' =3D> 'Descargar nuevo grupo de reglas', 'download pkcs12 file' =3D> 'Descargar archivo PKCS12', 'download root certificate' =3D> 'Descargar certificado root', +'download tls-auth key' =3D> 'Descargar llave TLS-Auth', +'download tls-crypt key' =3D> 'Descargar llave TLS-Crypt', +'download tls-crypt-v2 key' =3D> 'Descargar llave servidor TLS-Crypt-v2', 'dpd action' =3D> 'Acci=C3=B3n al detectar Dead Peer', 'driver' =3D> 'Driver', 'drop input' =3D> 'Registrar paquetes descartados', @@ -1352,6 +1355,7 @@ 'ovpn subnet' =3D> 'Subred de OpenVPN (ej. 10.0.10.0/255.255.255.0', 'ovpn subnet is invalid' =3D> 'Subred de OpenVPN no es v=C3=A1lida.', 'ovpn subnet overlap' =3D> 'La subred de OpenVPN se traslapa con:', +'ovpn tls auth' =3D> 'Protecci=C3=B3n Canal TLS', 'ovpn warning 64 bit block cipher' =3D> 'Este algoritmo de cifrado del est= =C3=A1 roto y pronto se eliminar=C3=A1.
=C2=A1Por favor, cambie esto lo a= ntes posible!
', 'ovpn warning algorithm' =3D> 'Se configur=C3=B3 el siguiente algoritmo', 'ovpn_fastio' =3D> 'Fast-IO', @@ -1596,6 +1600,9 @@ 'show lines' =3D> 'Mostrar l=C3=ADneas', 'show root certificate' =3D> 'Mostrar certificado root', 'show share options' =3D> 'Mostrar opciones de recursos compartidos', +'show tls-auth key' =3D> 'Mostrar llave TLS-Auth', +'show tls-crypt key' =3D> 'Mostrar llave TLS-Crypt', +'show tls-crypt-v2 key' =3D> 'Mostrar llave TLS-Crypt-v2', 'shuffle' =3D> 'Al azar', 'shutdown' =3D> 'Apagar', 'shutdown ask' =3D> '=C2=BFApagar?', @@ -1698,6 +1705,9 @@ 'system log viewer' =3D> 'Visor de registros (logs) del sistema', 'system logs' =3D> 'Registros del sistema', 'system status information' =3D> 'Informaci=C3=B3n de status del sistema', +'ta key' =3D> 'Clave de Autentificaci=C3=B3n-TLS', +'tc key' =3D> 'Clave Criptogr=C3=A1fica-TLS', +'tc v2 key' =3D> 'Clave Criptogr=C3=A1fica-TLS versi=C3=B3n 2', 'telephone not set' =3D> 'Tel=C3=A9fono no establecido.', 'template' =3D> 'Preestablecido', 'template warning' =3D> 'Tiene dos opciones para establecer QoS. La primera,= presionar el bot=C3=B3n Guardar y generar clases y reglas por ud. mismo. La = segunda, presione el bot=C3=B3n preestablecidos y las clases y reglas se gene= rar=C3=A1n a partir de una plantilla', diff --git a/langs/fr/cgi-bin/fr.pl b/langs/fr/cgi-bin/fr.pl index d5deea1c0..349ebb83d 100644 --- a/langs/fr/cgi-bin/fr.pl +++ b/langs/fr/cgi-bin/fr.pl @@ -921,7 +921,9 @@ 'download new ruleset' =3D> 'T=C3=A9l=C3=A9charger de nouvelles r=C3=A8gles', 'download pkcs12 file' =3D> 'T=C3=A9l=C3=A9charger le fichier PKCS12', 'download root certificate' =3D> 'T=C3=A9l=C3=A9charger le certificat Root', -'download tls-auth key' =3D> 'T=C3=A9l=C3=A9charger la cl=C3=A9 tls-auth', +'download tls-auth key' =3D> 'T=C3=A9l=C3=A9charger la cl=C3=A9 TLS-Auth', +'download tls-crypt key' =3D> 'T=C3=A9l=C3=A9charger la clef TLS-Crypt', +'download tls-crypt-v2 key' =3D> 'T=C3=A9l=C3=A9charger la clef server TLS-C= rypt-v2', 'dpd action' =3D> 'D=C3=A9tection du pair mort', 'dpd delay' =3D> 'Retard', 'dpd timeout' =3D> 'D=C3=A9lai d=C3=A9pass=C3=A9', @@ -1984,7 +1986,7 @@ 'ovpn subnet' =3D> 'Sous-r=C3=A9seau OpenVPN', 'ovpn subnet is invalid' =3D> 'Sous-r=C3=A9seau OpenVPN non valide.', 'ovpn subnet overlap' =3D> 'Le sous-r=C3=A9seau OpenVPN se chevauche avec : = ', -'ovpn tls auth' =3D> 'Protection du canal TLS :', +'ovpn tls auth' =3D> 'Protection du canal TLS', 'ovpn warning 64 bit block cipher' =3D> 'Ce L\'algorithme de chiffage du n\'= est plus s=C3=BBr et sera bient=C3=B4t supprim=C3=A9.
Veuillez changer ce= la d=C3=A8s que possible!
', 'ovpn warning algorithm' =3D> 'L\'algorithme suivant a =C3=A9t=C3=A9 configu= r=C3=A9', 'ovpn warning rfc3280' =3D> 'Votre certificat d\'h=C3=B4te n\'est pas confor= me avec la RFC3280.
Veuillez mettre =C3=A0 jour la derni=C3=A8re version d= \'IPFire et g=C3=A9n=C3=A9rer d=C3=A8s que possible un nouveau certificat rac= ine et h=C3=B4te.

Tous les clients OpenVPN doivent ensuite =C3=AAtre = renouvel=C3=A9s !
', @@ -2266,7 +2268,9 @@ 'show lines' =3D> 'Montrer les lignes', 'show root certificate' =3D> 'Afficher le certificat root', 'show share options' =3D> 'Montrer les options partag=C3=A9es', -'show tls-auth key' =3D> 'Afficher clef tls-auth', +'show tls-auth key' =3D> 'Afficher clef TLS-Auth', +'show tls-crypt key' =3D> 'Montrer la clef TLS-Crypt', +'show tls-crypt-v2 key' =3D> 'Montrer la clef TLS-Crypt-v2', 'shuffle' =3D> 'M=C3=A9langer', 'shutdown' =3D> 'Arr=C3=AAter', 'shutdown ask' =3D> 'Arr=C3=AAter ?', @@ -2394,6 +2398,8 @@ 'system logs' =3D> 'Rapports syst=C3=A8me', 'system status information' =3D> 'Informations sur le statut du syst=C3=A8me= ', 'ta key' =3D> 'Cl=C3=A9 d\'authentification TLS', +'tc key' =3D> 'Clef de chiffrage TLS', +'tc v2 key' =3D> 'Clef de chiffrage TLS version2', 'taa zombieload2' =3D> 'TSX Async Abort / ZombieLoad v2', 'tcp more reliable' =3D> 'TCP (plus fiable)', 'telephone not set' =3D> 'Num=C3=A9ro de t=C3=A9l=C3=A9phone non d=C3=A9fini= .', diff --git a/langs/it/cgi-bin/it.pl b/langs/it/cgi-bin/it.pl index ad16de583..cbbb3bb80 100644 --- a/langs/it/cgi-bin/it.pl +++ b/langs/it/cgi-bin/it.pl @@ -1739,6 +1739,7 @@ 'ovpn subnet' =3D> 'OpenVPN subnet (e.g. 10.0.10.0/255.255.255.0)', 'ovpn subnet is invalid' =3D> 'OpenVPN subnet is invalid.', 'ovpn subnet overlap' =3D> 'OpenVPN Subnet overlaps with : ', +'ovpn tls auth' =3D> 'Protezione del canale TLS', 'ovpn warning 64 bit block cipher' =3D> 'L\'algoritmo di crittografia =C3=A8= insicuro e verr=C3=A0 presto disinstallato.
Si prega di cambiare il pi=C3= =B9 presto possibile!
', 'ovpn warning algorithm' =3D> '=C3=88 stato configurato il seguente algoritm= o', 'ovpn_fastio' =3D> 'Fast-IO', @@ -1994,7 +1995,9 @@ 'show lines' =3D> 'Show lines', 'show root certificate' =3D> 'Show root certificate', 'show share options' =3D> 'Show shares options', -'show tls-auth key' =3D> 'Show tls-auth key', +'show tls-auth key' =3D> 'Mostra la chiave TLS-Auth', +'show tls-crypt key' =3D> 'Mostra la chiave TLS-Crypt', +'show tls-crypt-v2 key' =3D> 'Mostra la chiave TLS-Crypt v2', 'shuffle' =3D> 'Shuffle', 'shutdown' =3D> 'Spegni', 'shutdown ask' =3D> 'Spegni?', @@ -2107,6 +2110,8 @@ 'system logs' =3D> 'Log di Sistema', 'system status information' =3D> 'Informazioni e stato del sistema', 'ta key' =3D> 'TLS-Authentification-Key', +'tc key' =3D> 'Chiave-Crittografica-TLS', +'tc v2 key' =3D> 'Chiave-Crittografica-TLS-v2', 'telephone not set' =3D> 'Telephone not set.', 'template' =3D> 'Preset', 'template warning' =3D> 'Ci sono due opzioni per impostare il Qos. La prima:= si preme il pulsante Salva e poi si generano le classi e le regole da soli. = La seconda: si preme il tasto di preset e le classi e le regole saranno autom= aticamente generate da un modello.', diff --git a/langs/nl/cgi-bin/nl.pl b/langs/nl/cgi-bin/nl.pl index b0f037e0c..23ccaedf9 100644 --- a/langs/nl/cgi-bin/nl.pl +++ b/langs/nl/cgi-bin/nl.pl @@ -794,6 +794,9 @@ 'download new ruleset' =3D> 'Download nieuwe regelset', 'download pkcs12 file' =3D> 'Download PKCS12 bestand', 'download root certificate' =3D> 'Download root certificaat', +'download tls-auth key' =3D> 'Download TLS-Auth sleutel', +'download tls-crypt key' =3D> 'Download TLS-Crypt sleutel', +'download tls-crypt-v2 key' =3D> 'Download TLS-Crypt-v2 server sleutel', 'dpd action' =3D> 'Dead peer-detectie actie', 'dpd delay' =3D> 'Vertraging', 'dpd timeout' =3D> 'Timeout', @@ -1660,12 +1663,13 @@ 'ovpn' =3D> 'OpenVPN', 'ovpn con stat' =3D> 'OpenVPN connectiestatistieken', 'ovpn config' =3D> 'OVPN-Configuratie', +'ovpn crypt options' =3D> 'Cryptografische opties', 'ovpn channel encryption' =3D> 'Control-kanaal versleuteling', 'ovpn control channel v2' =3D> 'Controle-Kanaal TLSv2', 'ovpn control channel v3' =3D> 'Controle-Kanaal TLSv3', 'ovpn data encryption' =3D> 'Datakanaalversleuteling', 'ovpn data channel authentication' =3D> 'Gegevens en kanaal verificatie', -'ovpn data channel' =3D> 'Data-kanaal', +'ovpn data channel' =3D> 'Data-Kanaal', 'ovpn data channel fallback' =3D> 'Data-Kanaal terugval', 'ovpn device' =3D> 'OpenVPN apparaat:', 'ovpn dl' =3D> 'OVPN-Configuratie download', @@ -1693,6 +1697,7 @@ 'ovpn subnet' =3D> 'OpenVPN subnet (bijv. 10.0.10.0/255.255.255.0)', 'ovpn subnet is invalid' =3D> 'OpenVPN subnet is ongeldig.', 'ovpn subnet overlap' =3D> 'OpenVPN subnet overlapt met : ', +'ovpn tls auth' =3D> 'TLS Kanaal bescherming', 'ovpn warning 64 bit block cipher' =3D> 'Dit encryptie algoritme is verbroke= n en zal binnenkort worden verwijderd.
Verander dit zo snel mogelijk!', 'ovpn warning algorithm' =3D> 'U hebt het algoritme geconfigureerd', 'ovpn warning rfc3280' =3D> 'Uw gastheercertificaat is niet RFC3280-conform.=
Please-update naar de nieuwste IPFire-versie en genereer zo snel mogelij= k een nieuw root- en host-certificaat.

Alle OpenVPN-clients moeten da= n vernieuwd worden!
', @@ -1948,6 +1953,9 @@ 'show lines' =3D> 'Toon regels', 'show root certificate' =3D> 'Toon root certificaat', 'show share options' =3D> 'Toon shares opties', +'show tls-auth key' =3D> 'Toon TLS-Auth sleutel', +'show tls-crypt key' =3D> 'Toon TLS-Crypt sleutel', +'show tls-crypt-v2 key' =3D> 'Toon TLS-Crypt-v2 sleutel', 'shuffle' =3D> 'Willekeurige volgorde', 'shutdown' =3D> 'Afsluiten', 'shutdown ask' =3D> 'Afsluiten?', @@ -2057,6 +2065,9 @@ 'system log viewer' =3D> 'Systeem Log Viewer', 'system logs' =3D> 'Systeem logs', 'system status information' =3D> 'Systeem Status Informatie', +'ta key' =3D> 'TLS-Authentificatie-sleutel', +'tc key' =3D> 'TLS-Cryptografische-sleutel', +'tc v2 key' =3D> 'TLS-Cryptografische sleutel-versie2', 'telephone not set' =3D> 'Telefoon niet ingesteld.', 'template' =3D> 'Vooringesteld', 'template warning' =3D> 'U heeft twee opties voor QoS. Bij de eerste klikt u= op de knop opslaan en genereert u zelf de klassen en regels. Voor de tweede = klikt u op de "vooringesteld" knop en worden de regels middels een sjabloon v= oor u ingesteld.', diff --git a/langs/pl/cgi-bin/pl.pl b/langs/pl/cgi-bin/pl.pl index 5e8ec0864..fb7c12e85 100644 --- a/langs/pl/cgi-bin/pl.pl +++ b/langs/pl/cgi-bin/pl.pl @@ -719,6 +719,9 @@ 'download new ruleset' =3D> 'Pobierz nowy zestaw regu=C5=82', 'download pkcs12 file' =3D> 'Pobierz plik PKCS12', 'download root certificate' =3D> 'Pobierz certyfikat root', +'download tls-auth key' =3D> 'Pobierz klucz TLS-Auth', +'download tls-crypt key' =3D> 'Pobierz klucz TLS-Crypt', +'download tls-crypt-v2 key' =3D> 'Pobierz klucz serwera TLS-Crypt-v2', 'dpd action' =3D> 'Dead Peer Detection action', 'driver' =3D> 'Sterownik', 'drop input' =3D> 'Loguj odrzucone pakiety wej=C5=9Bciowe (input packets)', @@ -1365,6 +1368,7 @@ 'ovpn subnet' =3D> 'Podsie=C4=87 OpenVPN (np. 10.0.10.0/255.255.255.0)', 'ovpn subnet is invalid' =3D> 'Podsie=C4=87 OpenVPN jest niepoprawna.', 'ovpn subnet overlap' =3D> 'Podsie=C4=87 OpenVPN zachodzi na : ', +'ovpn tls auth' =3D> 'Ochrona Kana=C5=82u-TLS', 'ovpn warning 64 bit block cipher' =3D> 'Szyfr danych wymaga co najmniej jed= nego szyfru.
Prosz=C4=99 to zmieni=C4=87 jak najszybciej!
', 'ovpn warning algorithm' =3D> 'Skonfigurowa=C5=82e=C5=9B algorytm', 'ovpn_fastio' =3D> 'Fast-IO', @@ -1609,6 +1613,9 @@ 'show lines' =3D> 'Poka=C5=BC linie', 'show root certificate' =3D> 'Poka=C5=BC certyfikat root', 'show share options' =3D> 'Poka=C5=BC opcje zasobu', +'show tls-auth key' =3D> 'Poka=C5=BC klucz TLS-Auth', +'show tls-crypt key' =3D> 'Poka=C5=BC klucz TLS-Crypt', +'show tls-crypt-v2 key' =3D> 'Poka=C5=BC klucz TLS-Crypt-v2', 'shuffle' =3D> 'Losowo', 'shutdown' =3D> 'Wy=C5=82=C4=85cz', 'shutdown ask' =3D> 'Wy=C5=82=C4=85czy=C4=87?', @@ -1712,6 +1719,9 @@ 'system log viewer' =3D> 'Przegl=C4=85d log=C3=B3w systemu', 'system logs' =3D> 'Logi systemu', 'system status information' =3D> 'Informacje o stanie systemu', +'ta key' =3D> 'TLS-Klucz-Uwierzytelniaj=C4=85cy', +'tc key' =3D> 'TLS-Klucz-Kryptograficzny', +'tc v2 key' =3D> 'TLS-Klucz-Kryptograficzny-wersja2', 'telephone not set' =3D> 'Telephone not set.', 'template' =3D> 'Schemat', 'template warning' =3D> 'Masz 2 mo=C5=BCliwo=C5=9Bci skonfigurowania QoS. Pi= erwsza to naci=C5=9Bni=C4=99cie przycisku zapisz i skonfigurowanie klas i reg= u=C5=82 samodzielnie. Druga to wci=C5=9Bni=C4=99cie przycisku schemat aby utw= orzy=C4=87 klasy i regu=C5=82y ze schematu.', diff --git a/langs/ru/cgi-bin/ru.pl b/langs/ru/cgi-bin/ru.pl index 6e3af2d7e..c4520ae2c 100644 --- a/langs/ru/cgi-bin/ru.pl +++ b/langs/ru/cgi-bin/ru.pl @@ -714,6 +714,9 @@ 'download new ruleset' =3D> '=D0=97=D0=B0=D0=B3=D1=80=D1=83=D0=B7=D0=B8=D1= =82=D1=8C =D0=BD=D0=BE=D0=B2=D1=8B=D0=B5 =D0=BF=D1=80=D0=B0=D0=B2=D0=B8=D0=BB= =D0=B0', 'download pkcs12 file' =3D> '=D0=97=D0=B0=D0=B3=D1=80=D1=83=D0=B7=D0=B8=D1= =82=D1=8C PKCS12 =D1=84=D0=B0=D0=B9=D0=BB', 'download root certificate' =3D> '=D0=97=D0=B0=D0=B3=D1=80=D1=83=D0=B7=D0=B8= =D1=82=D1=8C root =D1=81=D0=B5=D1=80=D1=82=D0=B8=D1=84=D0=B8=D0=BA=D0=B0=D1= =82', +'download tls-auth key' =3D> '=D0=A1=D0=BA=D0=B0=D1=87=D0=B0=D1=82=D1=8C TLS= -Auth =D0=BA=D0=BB=D1=8E=D1=87', +'download tls-crypt key' =3D> '=D0=A1=D0=BA=D0=B0=D1=87=D0=B0=D1=82=D1=8C TL= S-Crypt =D0=BA=D0=BB=D1=8E=D1=87', +'download tls-crypt-v2 key' =3D> '=D0=A1=D0=BA=D0=B0=D1=87=D0=B0=D1=82=D1=8C= =D1=81=D0=B5=D1=80=D0=B2=D0=B5=D1=80=D0=BD=D1=8B=D0=B9 =D0=BA=D0=BB=D1=8E=D1= =87 TLS-Crypt-v2', 'dpd action' =3D> '=D0=94=D0=B5=D0=B9=D1=81=D1=82=D0=B2=D0=B8=D0=B5 =D0=BF= =D1=80=D0=B8 =D0=BE=D0=B1=D0=BD=D0=B0=D1=80=D1=83=D0=B6=D0=B5=D0=BD=D0=B8=D0= =B8 Dead Peer', 'driver' =3D> '=D0=94=D1=80=D0=B0=D0=B9=D0=B2=D0=B5=D1=80', 'drop input' =3D> '=D0=97=D0=B0=D0=BF=D0=B8=D1=81=D1=8B=D0=B2=D0=B0=D1=82=D1= =8C =D1=81=D0=B1=D1=80=D0=BE=D1=88=D0=B5=D0=BD=D0=BD=D1=8B=D0=B5 =D0=B2=D1=85= =D0=BE=D0=B4=D1=8F=D1=89=D0=B8=D0=B5 =D0=BF=D0=B0=D0=BA=D0=B5=D1=82=D1=8B', @@ -1339,6 +1342,7 @@ 'ovpn channel encryption' =3D> '=D0=A8=D0=B8=D1=84=D1=80=D0=BE=D0=B2=D0=B0= =D0=BD=D0=B8=D0=B5 =D0=BA=D0=B0=D0=BD=D0=B0=D0=BB=D0=BE=D0=B2 =D1=83=D0=BF=D1= =80=D0=B0=D0=B2=D0=BB=D0=B5=D0=BD=D0=B8=D1=8F', 'ovpn control channel v2' =3D> '=D0=9A=D0=B0=D0=BD=D0=B0=D0=BB-=D1=83=D0=BF= =D1=80=D0=B0=D0=B2=D0=BB=D0=B5=D0=BD=D0=B8=D1=8F TLSv2', 'ovpn control channel v3' =3D> '=D0=9A=D0=B0=D0=BD=D0=B0=D0=BB-=D1=83=D0=BF= =D1=80=D0=B0=D0=B2=D0=BB=D0=B5=D0=BD=D0=B8=D1=8F TLSv3', +'ovpn crypt options' =3D> '=D0=9A=D1=80=D0=B8=D0=BF=D1=82=D0=BE=D0=B3=D1=80= =D0=B0=D1=84=D0=B8=D1=87=D0=B5=D1=81=D0=BA=D0=B8=D0=B5 =D0=BE=D0=BF=D1=86=D0= =B8=D0=B8', 'ovpn data encryption' =3D> '=D1=88=D0=B8=D1=84=D1=80=D0=BE=D0=B2=D0=B0=D0= =BD=D0=B8=D0=B5-=D0=BA=D0=B0=D0=BD=D0=B0=D0=BB=D0=BE=D0=B2 =D0=B4=D0=B0=D0=BD= =D0=BD=D1=8B=D1=85', 'ovpn data channel authentication' =3D> '=D0=90=D1=83=D1=82=D0=B5=D0=BD=D1= =82=D0=B8=D1=84=D0=B8=D0=BA=D0=B0=D1=86=D0=B8=D1=8F =D0=B4=D0=B0=D0=BD=D0=BD= =D1=8B=D1=85 =D0=B8 =D0=BA=D0=B0=D0=BD=D0=B0=D0=BB=D0=BE=D0=B2', 'ovpn data channel' =3D> '=D0=98=D0=BD=D1=84=D0=BE=D1=80=D0=BC=D0=B0=D1=86= =D0=B8=D0=BE=D0=BD=D0=BD=D1=8B=D0=B9-=D0=BA=D0=B0=D0=BD=D0=B0=D0=BB', @@ -1359,6 +1363,7 @@ 'ovpn subnet' =3D> '=D0=9F=D0=BE=D0=B4=D1=81=D0=B5=D1=82=D1=8C OpenVPN (e.g.= 10.0.10.0/255.255.255.0)', 'ovpn subnet is invalid' =3D> '=D0=9F=D0=BE=D0=B4=D1=81=D0=B5=D1=82=D1=8C Op= enVPN =D0=B7=D0=B0=D0=B4=D0=B0=D0=BD=D0=B0 =D0=BD=D0=B5=D0=B2=D0=B5=D1=80=D0= =BD=D0=BE.', 'ovpn subnet overlap' =3D> '=D0=9F=D0=BE=D0=B4=D1=81=D0=B5=D1=82=D1=8C OpenV= PN =D0=BF=D0=B5=D1=80=D0=B5=D1=81=D0=B5=D0=BA=D0=B0=D0=B5=D1=82=D1=81=D1=8F = =D1=81: ', +'ovpn tls auth' =3D> '=D0=97=D0=B0=D1=89=D0=B8=D1=82=D0=B0 =D0=BA=D0=B0=D0= =BD=D0=B0=D0=BB=D0=B0 TLS', 'ovpn warning 64 bit block cipher' =3D> '=D0=AD=D1=82=D0=BE=D1=82 =D0=B0=D0= =BB=D0=B3=D0=BE=D1=80=D0=B8=D1=82=D0=BC =D1=88=D0=B8=D1=84=D1=80=D0=BE=D0=B2= =D0=B0=D0=BD=D0=B8=D1=8F =D1=81=D0=BB=D0=BE=D0=BC=D0=B0=D0=BD =D0=B8 =D0=B2= =D1=81=D0=BA=D0=BE=D1=80=D0=B5 =D0=B1=D1=83=D0=B4=D0=B5=D1=82 =D1=83=D0=B4=D0= =B0=D0=BB=D0=B5=D0=BD.
=D0=9F=D0=BE=D0=B6=D0=B0=D0=BB=D1=83=D0=B9=D1=81= =D1=82=D0=B0, =D0=B8=D0=B7=D0=BC=D0=B5=D0=BD=D0=B8=D1=82=D0=B5 =D1=8D=D1=82= =D0=BE =D0=BA=D0=B0=D0=BA =D0=BC=D0=BE=D0=B6=D0=BD=D0=BE =D1=81=D0=BA=D0=BE= =D1=80=D0=B5=D0=B5!
', 'ovpn warning algorithm' =3D> '=D0=92=D1=8B =D0=BD=D0=B0=D1=81=D1=82=D1=80= =D0=BE=D0=B8=D0=BB=D0=B8 =D0=B0=D0=BB=D0=B3=D0=BE=D1=80=D0=B8=D1=82=D0=BC', 'ovpn_fastio' =3D> 'Fast-IO', @@ -1603,6 +1608,9 @@ 'show lines' =3D> '=D0=9F=D0=BE=D0=BA=D0=B0=D0=B7=D0=B0=D1=82=D1=8C =D1=81= =D1=82=D1=80=D0=BE=D0=BA=D0=B8', 'show root certificate' =3D> '=D0=9F=D0=BE=D0=BA=D0=B0=D0=B7=D0=B0=D1=82=D1= =8C root =D1=81=D0=B5=D1=80=D1=82=D0=B8=D1=84=D0=B8=D0=BA=D0=B0=D1=82', 'show share options' =3D> '=D0=9F=D0=BE=D0=BA=D0=B0=D0=B7=D0=B0=D1=82=D1=8C = =D0=BD=D0=B0=D1=81=D1=82=D1=80=D0=BE=D0=B9=D0=BA=D0=B8 =D0=BE=D0=B1=D1=89=D0= =B8=D1=85 =D1=80=D0=B5=D1=81=D1=83=D1=80=D1=81=D0=BE=D0=B2', +'show tls-auth key' =3D> '=D0=9F=D0=BE=D0=BA=D0=B0=D0=B7=D0=B0=D1=82=D1=8C = =D0=BA=D0=BB=D1=8E=D1=87 TLS-Auth', +'show tls-crypt key' =3D> '=D0=9F=D0=BE=D0=BA=D0=B0=D0=B7=D0=B0=D1=82=D1=8C = =D0=BA=D0=BB=D1=8E=D1=87 TLS-Crypt', +'show tls-crypt-v2 key' =3D> '=D0=9F=D0=BE=D0=BA=D0=B0=D0=B7=D0=B0=D1=82=D1= =8C =D0=BA=D0=BB=D1=8E=D1=87 TLS-Crypt-=D0=BA=D0=BB=D0=B0=D0=B2=D0=B8=D1=88= =D0=B0-v2', 'shuffle' =3D> '=D0=9F=D0=B5=D1=80=D0=B5=D0=BC=D0=B5=D1=88=D0=B0=D1=82=D1=8C= ', 'shutdown' =3D> '=D0=92=D1=8B=D0=BA=D0=BB=D1=8E=D1=87=D0=B8=D1=82=D1=8C', 'shutdown ask' =3D> '=D0=92=D1=8B=D0=BA=D0=BB=D1=8E=D1=87=D0=B8=D1=82=D1=8C?= ', @@ -1706,6 +1714,9 @@ 'system log viewer' =3D> 'System Log Viewer', 'system logs' =3D> '=D0=A1=D0=B8=D1=81=D1=82=D0=B5=D0=BC=D0=BD=D1=8B=D0=B5 = =D0=B6=D1=83=D1=80=D0=BD=D0=B0=D0=BB=D1=8B', 'system status information' =3D> 'System Status Information', +'ta key' =3D> 'TLS-=D0=90=D1=83=D1=82=D0=B5=D0=BD=D1=82=D0=B8=D1=84=D0=B8=D0= =BA=D0=B0=D1=86=D0=B8=D1=8F-=D0=9A=D0=B5=D0=B9', +'tc key' =3D> 'TLS-=D0=BA=D1=80=D0=B8=D0=BF=D1=82=D0=BE=D0=B3=D1=80=D0=B0=D1= =84=D0=B8=D1=87=D0=B5=D1=81=D0=BA=D0=B8=D0=B9-=D0=BA=D0=BB=D1=8E=D1=87', +'tc v2 key' =3D> 'TLS-=D0=BA=D1=80=D0=B8=D0=BF=D1=82=D0=BE=D0=B3=D1=80=D0=B0= =D1=84=D0=B8=D1=87=D0=B5=D1=81=D0=BA=D0=B0=D1=8F-=D0=B2=D0=B5=D1=80=D1=81=D0= =B8=D1=8F2', 'telephone not set' =3D> 'Telephone not set.', 'template' =3D> '=D0=97=D0=B0=D0=B4=D0=B0=D1=82=D1=8C', 'template warning' =3D> '=D0=A3 =D0=92=D0=B0=D1=81 =D0=B5=D1=81=D1=82=D1=8C = =D0=B4=D0=B2=D0=B5 =D0=BE=D0=BF=D1=86=D0=B8=D0=B8 =D0=B4=D0=BB=D1=8F =D1=83= =D1=81=D1=82=D0=B0=D0=BD=D0=BE=D0=B2=D0=BA=D0=B8 Qos. =D0=9F=D0=B5=D1=80=D0= =B2=D0=B0=D1=8F - =D0=BD=D0=B0=D0=B6=D0=B0=D1=82=D1=8C =D0=BA=D0=BD=D0=BE=D0= =BF=D0=BA=D1=83 =D1=81=D0=BE=D1=85=D1=80=D0=B0=D0=BD=D0=B5=D0=BD=D0=B8=D1=8F = =D0=B8 =D1=81=D0=B3=D0=B5=D0=BD=D0=B5=D1=80=D0=B8=D1=80=D0=BE=D0=B2=D0=B0=D1= =82=D1=8C =D0=BA=D0=BB=D0=B0=D1=81=D1=81=D1=8B =D0=B8 =D0=BF=D1=80=D0=B0=D0= =B2=D0=B8=D0=BB=D0=B0 =D1=81=D0=B0=D0=BC=D0=BE=D1=81=D1=82=D0=BE=D1=8F=D1=82= =D0=B5=D0=BB=D1=8C=D0=BD=D0=BE. =D0=92=D1=82=D0=BE=D1=80=D0=B0=D1=8F - =D0=B7= =D0=B0=D0=B4=D0=B0=D1=82=D1=8C =D0=BF=D1=80=D0=B0=D0=B2=D0=B8=D0=BB=D0=B0 =D0= =BF=D0=BE =D1=88=D0=B0=D0=B1=D0=BB=D0=BE=D0=BD=D1=83.', diff --git a/langs/tr/cgi-bin/tr.pl b/langs/tr/cgi-bin/tr.pl index e55a73aa3..1cde33dc7 100644 --- a/langs/tr/cgi-bin/tr.pl +++ b/langs/tr/cgi-bin/tr.pl @@ -879,6 +879,9 @@ 'download new ruleset' =3D> 'Yeni Kural K=C3=BCmesi =C4=B0ndir', 'download pkcs12 file' =3D> 'PKCS12 dosyas=C4=B1n=C4=B1 indir', 'download root certificate' =3D> 'Root sertifikas=C4=B1n=C4=B1 indir', +'download tls-auth key' =3D> 'TLS-Auth anahtar=C4=B1n=C4=B1 indirin', +'download tls-crypt key' =3D> 'TLS-Crypt anahtar=C4=B1n=C4=B1 indirin', +'download tls-crypt-v2 key' =3D> 'TLS-Crypt-v2 sunucu anahtar=C4=B1n=C4=B1 i= ndirin', 'download tls-auth key' =3D> 'Tls kimlik do=C4=9Frulama anahtar=C4=B1n=C4=B1= indir', 'dpd action' =3D> 'Hareketsiz e=C5=9F alg=C4=B1lama eylemi', 'dpd delay' =3D> 'Gecikme', @@ -1884,6 +1887,7 @@ 'ovpn subnet' =3D> 'OpenVPN alt a=C4=9F=C4=B1 (=C3=B6rne=C4=9Fin 10.0.10.0/2= 55.255.255.0)', 'ovpn subnet is invalid' =3D> 'Ge=C3=A7ersiz OpenVPN alt a=C4=9F=C4=B1.', 'ovpn subnet overlap' =3D> 'OpenVPN alt a=C4=9F=C4=B1 ile =C3=B6rt=C3=BC=C5= =9Fenler: ', +'ovpn tls auth' =3D> 'TLS Kanal Korumas=C4=B1', 'ovpn warning 64 bit block cipher' =3D> 'Bu =C5=9Fifreleme algoritmas=C4=B1 = bozuldu ve yak=C4=B1nda kald=C4=B1r=C4=B1lacak.
L=C3=BCtfen bunu m=C3=BC= mk=C3=BCn olan en k=C4=B1sa s=C3=BCrede de=C4=9Fi=C5=9Ftirin!
', 'ovpn warning algorithm' =3D> 'Algoritmay=C4=B1 sen yap=C4=B1land=C4=B1rd=C4= =B1n', 'ovpn_fastio' =3D> 'H=C4=B1zl=C4=B1-IO', @@ -2148,6 +2152,9 @@ 'show root certificate' =3D> 'Root sertifikas=C4=B1n=C4=B1 g=C3=B6ster', 'show share options' =3D> 'Payla=C5=9F=C4=B1m se=C3=A7eneklerini g=C3=B6ster= ', 'show tls-auth key' =3D> 'Tls kimlik do=C4=9Frulama anahtar=C4=B1n=C4=B1 g= =C3=B6ster', +'show tls-auth key' =3D> 'TLS-Auth anahtar=C4=B1n=C4=B1 g=C3=B6ster', +'show tls-crypt key' =3D> 'TLS-Crypt anahtar=C4=B1n=C4=B1 g=C3=B6ster', +'show tls-crypt-v2 key' =3D> 'TLS-Crypt-v2 anahtar=C4=B1n=C4=B1 g=C3=B6ster', 'shuffle' =3D> 'Karma', 'shutdown' =3D> 'Kapat', 'shutdown ask' =3D> 'Kapat?', @@ -2260,6 +2267,8 @@ 'system logs' =3D> 'Sistem G=C3=BCnl=C3=BCkleri', 'system status information' =3D> 'Sistem Durum Bilgisi', 'ta key' =3D> 'TLS Kimlik Do=C4=9Frulama Anahtar=C4=B1', +'tc key' =3D> 'TLS-=C5=9Eifreleme-Anahtar=C4=B1', +'tc v2 key' =3D> 'TLS-=C5=9Eifreleme-Anahtar=C4=B1-versiyon 2', 'tcp more reliable' =3D> 'TCP (daha g=C3=BCvenli)', 'telephone not set' =3D> 'Telefon ayarlanmam=C4=B1=C5=9F.', 'template' =3D> '=C3=96n Ayar', --=20 2.20.1 --===============5010298747164558116==--