[pull] master from hwdsl2:master

.github/ISSUE_TEMPLATE/00-bug-report.md

@@ -12,12 +12,12 @@ assignees: ''
 - [ ] I read the [README](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/README.md)
 - [ ] I read the [Important notes](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/README.md#important-notes)
 - [ ] I followed instructions to [configure VPN clients](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/README.md#next-steps)
-- [ ] I checked [Troubleshooting](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients.md#troubleshooting) and [VPN status](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients.md#check-logs-and-vpn-status)
+- [ ] I checked [IKEv1 troubleshooting](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients.md#ikev1-troubleshooting), [IKEv2 troubleshooting](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/ikev2-howto.md#ikev2-troubleshooting) and [VPN status](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients.md#check-logs-and-vpn-status)
 - [ ] I searched existing [Issues](https://github.com/hwdsl2/setup-ipsec-vpn/issues?q=is%3Aissue)
 - [ ] This bug is about the VPN setup scripts, and not IPsec VPN itself
 
 <!---
-If you need help with IPsec VPN itself, please see [Bugs & Questions](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/README.md#bugs--questions). Ask VPN-related questions on the [Libreswan](https://lists.libreswan.org/mailman/listinfo/swan) or [strongSwan](https://lists.strongswan.org/mailman/listinfo/users) mailing list, or search e.g. [Stack Overflow](https://stackoverflow.com/questions/tagged/vpn).
+If you found a reproducible bug for the IPsec VPN, open a bug report at https://github.com/libreswan/libreswan. Ask VPN-related questions on the [Libreswan](https://lists.libreswan.org) or [strongSwan](https://lists.strongswan.org) users mailing list, or search e.g. [Stack Overflow](https://stackoverflow.com/questions/tagged/vpn).
 --->
 
 **Describe the issue**
@@ -36,12 +36,12 @@ A clear and concise description of what you expected to happen.
 [Check logs and VPN status](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients.md#check-logs-and-vpn-status), and add error logs to help explain the problem, if applicable.
 
 **Server (please complete the following information)**
-- OS: [e.g. Debian 10]
+- OS: [e.g. Debian 11]
 - Hosting provider (if applicable): [e.g. GCP, AWS]
 
 **Client (please complete the following information)**
-- Device: [e.g. iPhone 8]
-- OS: [e.g. iOS 13.6]
+- Device: [e.g. iPhone 12]
+- OS: [e.g. iOS 15]
 - VPN mode: [IPsec/L2TP, IPsec/XAuth ("Cisco IPsec") or IKEv2]
 
 **Additional context**

.github/ISSUE_TEMPLATE/10-bug-report-zh.md

@@ -12,12 +12,12 @@ assignees: ''
 - [ ] 我已阅读 [自述文件](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/README-zh.md)
 - [ ] 我已阅读 [重要提示](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/README-zh.md#重要提示)
 - [ ] 我已按照说明 [配置 VPN 客户端](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/README-zh.md#下一步)
-- [ ] 我检查了 [故障排除](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients-zh.md#故障排除) 以及 [VPN 状态](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients-zh.md#检查日志及-vpn-状态)
+- [ ] 我检查了 [IKEv1 故障排除](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients-zh.md#ikev1-故障排除)，[IKEv2 故障排除](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/ikev2-howto-zh.md#ikev2-故障排除) 以及 [VPN 状态](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients-zh.md#检查日志及-vpn-状态)
 - [ ] 我搜索了已有的 [Issues](https://github.com/hwdsl2/setup-ipsec-vpn/issues?q=is%3Aissue)
 - [ ] 这个 bug 是关于 VPN 安装脚本，而不是 IPsec VPN 本身
 
 <!---
-如果你需要关于 IPsec VPN 本身的帮助，请参见 [问题和反馈](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/README-zh.md#问题和反馈)。VPN 的相关问题可在 [Libreswan](https://lists.libreswan.org/mailman/listinfo/swan) 或 [strongSwan](https://lists.strongswan.org/mailman/listinfo/users) 邮件列表提问，或者搜索比如 [Stack Overflow](https://stackoverflow.com/questions/tagged/vpn) 等网站。
+如果你发现了 IPsec VPN 的一个可重复的程序漏洞，请在 https://github.com/libreswan/libreswan 提交一个错误报告。VPN 的相关问题可在 [Libreswan](https://lists.libreswan.org) 或 [strongSwan](https://lists.strongswan.org) 用户邮件列表提问，或者搜索比如 [Stack Overflow](https://stackoverflow.com/questions/tagged/vpn) 等网站。
 --->
 
 **问题描述**
@@ -36,12 +36,12 @@ assignees: ''
 [检查日志及 VPN 状态](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients-zh.md#检查日志及-vpn-状态)，并添加错误日志以帮助解释该问题（如果适用）。
 
 **服务器信息（请填写以下信息）**
-- 操作系统: [比如 Debian 10]
+- 操作系统: [比如 Debian 11]
 - 服务提供商（如果适用）: [比如 GCP, AWS]
 
 **客户端信息（请填写以下信息）**
-- 设备: [比如 iPhone 8]
-- 操作系统: [比如 iOS 13.6]
+- 设备: [比如 iPhone 12]
+- 操作系统: [比如 iOS 15]
 - VPN 模式: [IPsec/L2TP, IPsec/XAuth ("Cisco IPsec") 或 IKEv2]
 
 **其它信息**

.github/ISSUE_TEMPLATE/20-enhancement-request.md

@@ -14,7 +14,7 @@ assignees: ''
 - [ ] I read the [README](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/README.md)
 - [ ] I read the [Important notes](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/README.md#important-notes)
 - [ ] I followed instructions to [configure VPN clients](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/README.md#next-steps)
-- [ ] I checked [Troubleshooting](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients.md#troubleshooting) and [VPN status](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients.md#check-logs-and-vpn-status)
+- [ ] I checked [IKEv1 troubleshooting](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients.md#ikev1-troubleshooting), [IKEv2 troubleshooting](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/ikev2-howto.md#ikev2-troubleshooting) and [VPN status](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients.md#check-logs-and-vpn-status)
 
 **Describe the enhancement request**
 A clear and concise description of your enhancement request.

.github/ISSUE_TEMPLATE/30-enhancement-request-zh.md

@@ -14,7 +14,7 @@ assignees: ''
 - [ ] 我已阅读 [自述文件](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/README-zh.md)
 - [ ] 我已阅读 [重要提示](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/README-zh.md#重要提示)
 - [ ] 我已按照说明 [配置 VPN 客户端](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/README-zh.md#下一步)
-- [ ] 我检查了 [故障排除](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients-zh.md#故障排除) 以及 [VPN 状态](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients-zh.md#检查日志及-vpn-状态)
+- [ ] 我检查了 [IKEv1 故障排除](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients-zh.md#ikev1-故障排除)，[IKEv2 故障排除](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/ikev2-howto-zh.md#ikev2-故障排除) 以及 [VPN 状态](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients-zh.md#检查日志及-vpn-状态)
 
 **描述改进建议**
 使用清楚简明的语言描述你的改进建议。

.github/workflows/check_urls.yml

@@ -0,0 +1,108 @@
+#
+# Copyright (C) 2020-2025 Lin Song <[email protected]>
+#
+# This work is licensed under the Creative Commons Attribution-ShareAlike 3.0
+# Unported License: http://creativecommons.org/licenses/by-sa/3.0/
+#
+# Attribution required: please include my name in any derivative and let me
+# know how you have improved it!
+
+name: check_urls
+
+on: workflow_call
+
+jobs:
+  check_urls:
+    runs-on: ubuntu-22.04
+    if: github.repository_owner == 'hwdsl2'
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - name: Check
+        run: |
+          cd "$GITHUB_WORKSPACE"
+          mkdir workdir
+          cd workdir
+          set -ex
+
+          export DEBIAN_FRONTEND=noninteractive
+          sudo apt-get -yqq update
+          sudo apt-get -yqq install wget
+
+          wg="wget -t 3 -T 30 -nv -O"
+          sl="sleep 1"
+          gi="https://raw.githubusercontent.com/hwdsl2/setup-ipsec-vpn/master"
+          gh="https://github.com/hwdsl2/setup-ipsec-vpn/raw/master"
+
+          $wg vpnsetup.sh          "$gi/vpnsetup.sh"; $sl
+          $wg vpnsetup_centos.sh   "$gi/vpnsetup_centos.sh"; $sl
+          $wg vpnsetup_amzn.sh     "$gi/vpnsetup_amzn.sh"; $sl
+          $wg vpnsetup_ubuntu.sh   "$gi/vpnsetup_ubuntu.sh"; $sl
+          $wg vpnsetup_alpine.sh   "$gi/vpnsetup_alpine.sh"; $sl
+          $wg ikev2setup.sh        "$gi/extras/ikev2setup.sh"; $sl
+          $wg vpnupgrade.sh        "$gi/extras/vpnupgrade.sh"; $sl
+          $wg vpnupgrade_centos.sh "$gi/extras/vpnupgrade_centos.sh"; $sl
+          $wg vpnupgrade_amzn.sh   "$gi/extras/vpnupgrade_amzn.sh"; $sl
+          $wg vpnupgrade_ubuntu.sh "$gi/extras/vpnupgrade_ubuntu.sh"; $sl
+          $wg vpnupgrade_alpine.sh "$gi/extras/vpnupgrade_alpine.sh"; $sl
+          $wg vpnuninstall.sh      "$gi/extras/vpnuninstall.sh"; $sl
+          $wg add_vpn_user.sh      "$gi/extras/add_vpn_user.sh"; $sl
+          $wg del_vpn_user.sh      "$gi/extras/del_vpn_user.sh"; $sl
+          $wg update_vpn_users.sh  "$gi/extras/update_vpn_users.sh"; $sl
+          $wg ikev2changeaddr.sh   "$gi/extras/ikev2changeaddr.sh"; $sl
+          $wg ikev2onlymode.sh     "$gi/extras/ikev2onlymode.sh"; $sl
+
+          $wg vpnsetup2.sh          "$gh/vpnsetup.sh"; $sl
+          $wg vpnsetup_centos2.sh   "$gh/vpnsetup_centos.sh"; $sl
+          $wg vpnsetup_amzn2.sh     "$gh/vpnsetup_amzn.sh"; $sl
+          $wg vpnsetup_ubuntu2.sh   "$gh/vpnsetup_ubuntu.sh"; $sl
+          $wg vpnsetup_alpine2.sh   "$gh/vpnsetup_alpine.sh"; $sl
+          $wg ikev2setup2.sh        "$gh/extras/ikev2setup.sh"; $sl
+          $wg vpnupgrade2.sh        "$gh/extras/vpnupgrade.sh"; $sl
+          $wg vpnupgrade_centos2.sh "$gh/extras/vpnupgrade_centos.sh"; $sl
+          $wg vpnupgrade_amzn2.sh   "$gh/extras/vpnupgrade_amzn.sh"; $sl
+          $wg vpnupgrade_ubuntu2.sh "$gh/extras/vpnupgrade_ubuntu.sh"; $sl
+          $wg vpnupgrade_alpine2.sh "$gh/extras/vpnupgrade_alpine.sh"; $sl
+          $wg vpnuninstall2.sh      "$gh/extras/vpnuninstall.sh"; $sl
+          $wg add_vpn_user2.sh      "$gh/extras/add_vpn_user.sh"; $sl
+          $wg del_vpn_user2.sh      "$gh/extras/del_vpn_user.sh"; $sl
+          $wg update_vpn_users2.sh  "$gh/extras/update_vpn_users.sh"; $sl
+          $wg ikev2changeaddr2.sh   "$gh/extras/ikev2changeaddr.sh"; $sl
+          $wg ikev2onlymode2.sh     "$gh/extras/ikev2onlymode.sh"
+
+          diff vpnsetup.sh          ../vpnsetup.sh
+          diff vpnsetup_centos.sh   ../vpnsetup_centos.sh
+          diff vpnsetup_amzn.sh     ../vpnsetup_amzn.sh
+          diff vpnsetup_ubuntu.sh   ../vpnsetup_ubuntu.sh
+          diff vpnsetup_alpine.sh   ../vpnsetup_alpine.sh
+          diff ikev2setup.sh        ../extras/ikev2setup.sh
+          diff vpnupgrade.sh        ../extras/vpnupgrade.sh
+          diff vpnupgrade_centos.sh ../extras/vpnupgrade_centos.sh
+          diff vpnupgrade_amzn.sh   ../extras/vpnupgrade_amzn.sh
+          diff vpnupgrade_ubuntu.sh ../extras/vpnupgrade_ubuntu.sh
+          diff vpnupgrade_alpine.sh ../extras/vpnupgrade_alpine.sh
+          diff vpnuninstall.sh      ../extras/vpnuninstall.sh
+          diff add_vpn_user.sh      ../extras/add_vpn_user.sh
+          diff del_vpn_user.sh      ../extras/del_vpn_user.sh
+          diff update_vpn_users.sh  ../extras/update_vpn_users.sh
+          diff ikev2changeaddr.sh   ../extras/ikev2changeaddr.sh
+          diff ikev2onlymode.sh     ../extras/ikev2onlymode.sh
+
+          diff vpnsetup2.sh          ../vpnsetup.sh
+          diff vpnsetup_centos2.sh   ../vpnsetup_centos.sh
+          diff vpnsetup_amzn2.sh     ../vpnsetup_amzn.sh
+          diff vpnsetup_ubuntu2.sh   ../vpnsetup_ubuntu.sh
+          diff vpnsetup_alpine2.sh   ../vpnsetup_alpine.sh
+          diff ikev2setup2.sh        ../extras/ikev2setup.sh
+          diff vpnupgrade2.sh        ../extras/vpnupgrade.sh
+          diff vpnupgrade_centos2.sh ../extras/vpnupgrade_centos.sh
+          diff vpnupgrade_amzn2.sh   ../extras/vpnupgrade_amzn.sh
+          diff vpnupgrade_ubuntu2.sh ../extras/vpnupgrade_ubuntu.sh
+          diff vpnupgrade_alpine2.sh ../extras/vpnupgrade_alpine.sh
+          diff vpnuninstall2.sh      ../extras/vpnuninstall.sh
+          diff add_vpn_user2.sh      ../extras/add_vpn_user.sh
+          diff del_vpn_user2.sh      ../extras/del_vpn_user.sh
+          diff update_vpn_users2.sh  ../extras/update_vpn_users.sh
+          diff ikev2changeaddr2.sh   ../extras/ikev2changeaddr.sh
+          diff ikev2onlymode2.sh     ../extras/ikev2onlymode.sh