Investigate alternative TPP VPN clients

Abierto
#31 6 comentarios 0 reacciones 1 asignado Ver en GitHub

@lucyb ya está trabajando en esto.

Desde el 22/3/2023.

Evaluación

Este issue todavía no se ha evaluado.

Descripción

TPP currently provides a specific Windows x64 client to connect to the their VPN.

This is problematic for our many users who need to connect to the VPN on Mac or Linux, who have to run an x64 windows VM to run the client, which is currently not an option at all on new M1 macs.

TPP have said we can use an alternative client, although they are keen that this client is kept up to date.

The TPP VPN is currently configured to use the IPSec with IKEv1 and a pre-shared key.

On Linux, the strongswan package can do this, based on exploratory testing.

MacOSX doesn't support IKEv1, we would need to find an m1 compatible client.

However, IKEv1 is quite old, and IKEv2 is a) supported OOTB on MacOSX b) the recommended setting for IPSec.

Sonicwall 7 supports IKEv2, and AFAICS so does it's client

So, a possible route to resolve this is to ask TPP to switch the VPN to IKEv2, and then Mac and Linux support is much easier, and we are upgrading the protocol to a better version at the same time. AIUI, uses of the existing client shouldn't be affected at all.

Lenguaje dominante
Python
Estrellas
0
Forks
0
Merge medio
12 h 47 min
PR fusionados (30 d)
2

Preparar el entorno

Este proyecto no incluye contenedor de desarrollo, Dockerfile ni guía de contribución, así que la configuración corre por tu cuenta: empieza por su README y consulta nuestra guía para la primera contribución para los pasos generales.

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de opensafely-core/sysadmin

Todos los issues de opensafely-core/sysadmin

Issues similares

Más issues de Python

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.