Web GUI for IPSec is not correct (my opinion) and " needed

[ednt]

Hi,

I just upgraded from 19.7.10 to 20.1 and I think the web gui for IPSec Tunnel Settings is wrong.
Before Phase2 was a 'sub' of Phase1. Now I can not see that this Phase2 is part from Phase1



Also now I get an error when I use ASN.1 Distinguished name.

CN=bla, OU=xyz, ...

The = are generating this error now and strongSwan is not starting
In 19.7.10 this was not the case. But I don't know if it is working, because I'm just working on getting a connection. If I use " around, strongSwan is starting. But I don't know if this is correct.

[totusfocus]

It is not only correct, also if you installs 20.1 version from "zero" you cannot configure IPSEC VPN, as it lacks "show 0 Phase 2 entries"

I am installing new machines with latest 20.1 version and when i try to configure IPsec VPN, i can`t do it because i don´t have the option.

I also see in log a charon error

[Cerberus]

Phase 1 and Phase 2 seems to be on the same level without needing to expand. Adding Phase and Phase 2 still works for me.

Another thing, IPSEC Pane looks horrible with Cicada theme.

[juere]

> Another thing, IPSEC Pane looks horrible with Cicada theme.

not only horrible, in fact unusable as active phase1 entries are displayed in white on white background

[MUSTANG]

WebGUI is also broken in FRR package, in BGP Diagnostics: https://forum.opnsense.org/index.php?topic=15748.0

[franco]

Lots of broken stuff, huh? If only there was a bug tracker to report this too. ;)


Cheers,
Franco