Commit Graph

1135 Commits

Author SHA1 Message Date
Yousong Zhou 19cf8c6105 strongswan: split out libtls.so as a separate package.
When only strongswan-minimal is selected, libtls.so will not be built
yet package strongswan will still try to copy the file causing build
failure.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2015-09-07 11:10:53 +02:00
Adam Lebsack 1deb958e37 strongswan: Added strongswan-mod-eap-tls
Signed-off-by: Adam Lebsack <alebsack@gmail.com>
2015-09-07 11:10:48 +02:00
Steven Barth da180706b6 strongswan: add more exceptions to musl-fixes
Signed-off-by: Steven Barth <steven@midlink.org>
2015-09-07 11:10:40 +02:00
Steven Barth 69ad693a37 strongswan: refresh musl compatibility fixes
Signed-off-by: Steven Barth <steven@midlink.org>
2015-09-07 11:10:34 +02:00
heil e51b71ad78 haproxy: fixes from upstream
- [PATCH 05/13] BUG/MINOR: http/sample: gmtime/localtime can fail
 - [PATCH 06/13] DOC: typo in 'redirect', 302 code meaning
 - [PATCH 07/13] DOC: mention that %ms is left-padded with zeroes.
 - [PATCH 08/13] CLEANUP: .gitignore: ignore more test files
 - [PATCH 09/13] CLEANUP: .gitignore: finally ignore everything but what
 - [PATCH 10/13] MEDIUM: config: emit a warning on a frontend without
 - [PATCH 11/13] BUG/MEDIUM: counters: ensure that src_{inc,clr}_gpc0
 - [PATCH 12/13] DOC: ssl: missing LF
 - [PATCH 13/13] DOC: fix example of http-request using

Signed-off-by: heil <heil@terminal-consulting.de>
2015-09-07 00:02:48 +02:00
Nikos Mavrogiannopoulos 241a8ad346 ocserv: updated to 0.10.8
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-09-04 21:33:19 +02:00
Nikos Mavrogiannopoulos 7f6a237d7d openconnect: corrected port descriptions in README
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-09-04 21:33:19 +02:00
Nikos Mavrogiannopoulos c773d4ad91 ocserv: more explicit documentation
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-09-04 21:33:19 +02:00
Nikos Mavrogiannopoulos 52bf9d5efc ocserv: updated to 0.10.6
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-09-04 21:33:19 +02:00
Daniel Gimpelevich 877e9fb00d vpnc: bump release
Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us>
2015-09-03 17:38:22 +02:00
Daniel Gimpelevich 5ff1b7ad51 vpnc: corrected call to proto_add_host_dependency 2015-09-03 17:38:18 +02:00
Jo-Philipp Wich cb5b508b46 vpnc: fix musl compatibility
- Add missing `sys/ttydefaults.h` include to `config.c`
 - Restrict usage of `error.h` to glibc and uclibc only
 - Avoid including `linux/if_tun.h` on non-glibc/uclibc to prevent
   musl kernel/libc header conflicts

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2015-09-03 17:38:13 +02:00
Baptiste Jonglez 1a78a488b7 bmon: Add missing runtime dependency: terminfo
Signed-off-by: Baptiste Jonglez <git@bitsofnetworks.org>
2015-09-03 17:32:13 +02:00
Toke Høiland-Jørgensen 250b11a475 sqm-scripts: Bump to v1.0.3.
Backported changes from master.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2015-09-03 15:31:56 +02:00
Noah Meyerhans ffda9cc9c7 [bind] Update to 9.9.7-P3 to fix CVE-2015-5722 and CVE-2015-5986
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2015-09-03 14:03:41 +02:00
Noah Meyerhans 4e3085cd05 bind: update to version 9.9.7-p2
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2015-09-03 14:03:31 +02:00
Nikos Mavrogiannopoulos e778bd4998 openconnect: disabled the resolving code from ppp in netifd script
That code was causing netifd disabling openconnect with no way
to restart it.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-08-26 23:00:45 +02:00
heil ee8052d459 haproxy: fixes for upstream version 1.5.14
- [PATCH 1/4] BUG/MINOR: log: missing some ARGC_* entries in
 - [PATCH 2/4] DOC: usesrc root privileges requirements
 - [PATCH 3/4] BUILD: ssl: Allow building against libssl without SSLv3.
 - [PATCH 4/4] DOC/MINOR: fix OpenBSD versions where haproxy works

Signed-off-by: heil <heil@terminal-consulting.de>
2015-08-24 10:46:34 +02:00
Rafał Miłecki 01717c05a0 lighttpd: backport a fix for running out of filedescriptors
It was breaking uploads of files 4 MiB+. This patch fixes:
https://github.com/openwrt/packages/issues/1658

Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
2015-08-19 17:53:50 +02:00
heil a7d66cec4c apache: bump to version 2.2.31
Signed-off-by: heil <heil@terminal-consulting.de>
2015-08-17 14:37:14 +02:00
Toke Høiland-Jørgensen 1ee31bdfd2 netperf: update to v2.7.0 2015-08-03 18:13:58 +02:00
Toke Høiland-Jørgensen aa75904c0b Adopt the netperf package.
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2015-08-03 18:13:54 +02:00
Steven Barth e96cf8db91 Merge pull request #1616 from tru7/for-15.05
[for-15.05] knxd: bump to newest version for CC
2015-07-27 23:24:39 +02:00
W. Michael Petullo 1e2bf20acf lighttpd: update to 1.4.36
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2015-07-26 12:56:12 -04:00
Alexander Ryzhov da756e239f lighttpd: add liblua deps for lighttpd-mod-cml and lighttpd-mod-magnet
Signed-off-by: Alexander Ryzhov <openwrt@ryzhov-al.ru>
2015-07-26 12:55:12 -04:00
Othmar Truniger 805c6e6924 knxd: bump to newest version for CC
Signed-off-by: Othmar Truniger <github@truniger.ch>
2015-07-26 18:27:01 +02:00
Jeroen Louwes 75f978879e mwan3: update to version 1.6-2
Fix malformed uci commands. (issue #1502)

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2015-07-23 13:51:04 +02:00
Cezary Jackiewicz bcedf17632 [packages] vsftpd: CVE-2015-1419
Unspecified vulnerability in vsftp 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing.
2015-07-22 09:47:48 +02:00
Daniel Golle 64c458ba8c freeradius2: update to 2.2.8
Fixes oCert CVE-2015-4680.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2015-07-20 10:14:31 +02:00
Toke Høiland-Jørgensen 876ee51cc8 sqm-scripts: Default to ECN on for egress.
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2015-07-12 22:25:12 +02:00
Sebastian Moeller e9a7e58ba3 [SQM] Fix simple.qos to allow using cake as ingress shaper
simple.qos had accidentally set up the egress shaper twice, once
with the true egress parameters and a second time using the ingress
parameters, effectively misconfiguring both directions. This bub
only affected situations where 3-tier ingress classification was
used.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-07-12 22:25:12 +02:00
Sebastian Moeller 478903aea1 [SQM] Fix sqm_logger to accept empty strings as input
sqm_logger tried tro wait indefinitely if passed an empty string.
This in turn makes sqm-scripts hang. Quoting the input argument in sqm_logger
seems to fix the problem.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-07-12 22:25:12 +02:00
Sebastian Moeller 30e02086c5 [SQM] Fix changes relating to cake lnk layer adjustments
The last batch of changes tried to teach the GUI to pass link layer
options to cake but forgot to actually call the function that parses
the GUI variables and used it as a string insteead. So this fixes that
it also tries to allow the use of the tc_stab link layer adjustment
method with cake so the implementations can be validated against each other
easily. Needs testing...

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-07-12 22:25:12 +02:00
Sebastian Moeller 05fe796a8b [SQM/luci-app-sqm] Wire up link layer dandling for cake
The cake traffic-shaper qdisc omne stop solution knows how to handle
link layer adjustments for ATM and can account for per packet overhead.
This commit adds cake as link layer adjustment mechanism in the GUI and
passes numerically specified overhead as well as the ATM linklayer
keywords on to cake. This change also passes the "advanced option strings"
from the Queue Discipline tab to cake. But as before no error checking.
This needs testing, as I have no working cake qdisc available so
caveat emptor...

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-07-12 22:25:12 +02:00
Dave Taht 9a532691dd luci-app-sqm: add cake support 2015-07-12 22:25:12 +02:00
Dave Taht 1f9238ed3f sqm-scripts: Support the cake qdisc.
Signed-off-by: Dave Taht <dave.taht@bufferbloat.net>
2015-07-12 22:25:12 +02:00
Sebastian Moeller 499aef158d [SQM/luci-app-sqm] Fix SQM GUI help messages.
Make clear that configuration options guarded by checkboxes are only
effective as long as those boxes are checked.

The sqm gui has giarded some advanced configuration options behind exposing
checkboxes, meaning these optiopn's values were only used as long
as those boxes were checked. This commit just improves the description of
the checkboxes to included this useage instruction...

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-07-12 22:25:12 +02:00
Sebastian Moeller 7a23a00c45 [SQM/luci-app-sqm] Enable sqm initiscript if a single sqm instance gets enabled
The SQM gui has confused its users with an enable button, that only served to
selecively activate/de-activate sqm instances instead of controlling sqm's
initscript (which needs to be enabled so the sqm properly starts up after a reboot
and also for hotplug to work properly). luci-app-sqm will now enable sqm's
initscript when a single sqm instance get enabled. It also informs the user about
this fact in the top margin of the sqm page. Note sqm will not disable the
initscript behind the user's back if sqm instances get disabled.
While I would have prefered this notice to be more prominent an attentive user
should notice, and most users should not care anyway. This also increases the
package release number.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-07-12 22:25:12 +02:00
Nikos Mavrogiannopoulos 62037ba35f openconnect: corrected call to proto_add_host_dependency
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-07-07 22:49:05 +02:00
arfett 2150ffa21f mwan3-luci update to version 1.4-3
Fixed two issues in Chaos Calmer and trunk:
-troubleshooting page not displaying
-UCI arguments out of order because of switch to musl c library from uclibc

Signed-off-by: Aedan "arfett" Renner <chipdankly@gmail.com>
2015-07-07 10:58:33 +02:00
Saverio Proto b75488123b [for-15.05] tinc: version bump 1.0.26
Signed-off-by: Saverio Proto <zioproto@gmail.com>
2015-07-06 20:24:59 +02:00
heil 181b13f834 haproxy: fixes from upstream
- BUILD/MINOR: tools: rename popcount to my_popcountl
 - BUG/MAJOR: buffers: make the buffer_slow_realign() function respect output data

Signed-off-by: heil <heil@terminal-consulting.de>
2015-07-03 18:35:21 +02:00
heil 45ba9f112a haproxy: fixes from upstream
- BUG/MAJOR: buffers: make the buffer_slow_realign() function respect output data

Signed-off-by: heil <heil@terminal-consulting.de>
2015-07-02 21:58:51 +02:00
Christian Schoenebeck ce2b260ca5 [for-15.05] ddns-scripts: fix/update to version 2.4.3-1
fixed sed when filtering IP address from nslookup output
because "Server:" block might have multiple address lines.
Thanks to Arjen de Korte

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2015-06-27 10:37:50 +02:00
Nikos Mavrogiannopoulos 7551321fab vpnc-scripts: bumped version
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-27 08:22:20 +02:00
Nikos Mavrogiannopoulos 814f65cfb9 vpnc-script: handle multiple servers in INTERNAL_IP_DNS vars
Resolves #1372

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-27 08:20:14 +02:00
heil d74b836a35 haproxy: bugfix release 1.5.13
Released version 1.5.13 with the following main changes :
  - BUG/MINOR: check: fix tcpcheck error message
  - CLEANUP: deinit: remove codes for cleaning p->block_rules
  - DOC: Update doc about weight, act and bck fields in the statistics
  - MINOR: ssl: add a destructor to free allocated SSL ressources
  - BUG/MEDIUM: ssl: fix tune.ssl.default-dh-param value being overwritten
  - MEDIUM: ssl: replace standards DH groups with custom ones
  - BUG/MINOR: debug: display (null) in place of "meth"
  - BUG/MINOR: cfgparse: fix typo in 'option httplog' error message
  - BUG/MEDIUM: cfgparse: segfault when userlist is misused
  - BUG/MEDIUM: stats: properly initialize the scope before dumping stats
  - BUG/MEDIUM: http: don't forward client shutdown without NOLINGER except for tunnels
  - CLEANUP: checks: fix double usage of cur / current_step in tcp-checks
  - BUG/MEDIUM: checks: do not dereference head of a tcp-check at the end
  - CLEANUP: checks: simplify the loop processing of tcp-checks
  - BUG/MAJOR: checks: always check for end of list before proceeding
  - BUG/MEDIUM: checks: do not dereference a list as a tcpcheck struct
  - BUG/MEDIUM: peers: apply a random reconnection timeout
  - BUG/MINOR: ssl: fix smp_fetch_ssl_fc_session_id
  - MEDIUM: init: don't stop proxies in parent process when exiting
  - MINOR: peers: store the pointer to the signal handler
  - MEDIUM: peers: unregister peers that were never started
  - MEDIUM: config: propagate the table's process list to the peers sections
  - MEDIUM: init: stop any peers section not bound to the correct process
  - MEDIUM: config: validate that peers sections are bound to exactly one process
  - MAJOR: peers: allow peers section to be used with nbproc > 1
  - DOC: relax the peers restriction to single-process
  - CLEANUP: config: fix misleading information in error message.
  - MINOR: config: report the number of processes using a peers section in the error case
  - BUG/MEDIUM: config: properly compute the default number of processes for a proxy

Signed-off-by: heil <heil@terminal-consulting.de>
2015-06-26 18:08:24 +02:00
heil 0716433f2e haproxy: upstream fixes
- [PATCH 15/18] MEDIUM: ssl: replace standards DH groups with custom
 - [PATCH 16/18] BUG/MINOR: debug: display (null) in place of "meth"
 - [PATCH 17/18] CLEANUP: deinit: remove codes for cleaning
 - [PATCH 18/18] BUG/MINOR: ssl: fix smp_fetch_ssl_fc_session_id

Signed-off-by: heil <heil@terminal-consulting.de>
2015-06-22 14:59:02 +02:00
Nikos Mavrogiannopoulos 8cb6f4c09e transmission: bumped version
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-21 12:00:17 +02:00
Nikos Mavrogiannopoulos 4dd617c9af transmission: increase the number of retries for respawn
The default 5 per hour is too small for transmission which may
crash quite some times.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-21 11:59:31 +02:00