Commit Graph

2468 Commits

Author SHA1 Message Date
Eric Luehrsen a4d4b6d874 unbound: error in README.md for unbound+dnsmasq 2017-03-02 00:48:24 -05:00
Rafał Miłecki 95463a50e3 pptpd: run service in foreground for procd compatibility
To have service working nicely with procd it should be running in the
foreground. Otherwise it's not possible to e.g. stop it with the init.d
script. Luckily for us pptpd has a simple switch that allows it.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
Fixes: 15e7f611af ("pptpd: convert init script to procd")
2017-02-23 10:22:45 +01:00
Rafał Miłecki 726aed1e45 lighttpd: fix regression in local-redir used with url.rewrite-once
This fixes upstream regression introduced in 1.4.40. It was reported &
debugged in https://redmine.lighttpd.net/issues/2793
This fix is queued for 1.4.46 in the personal/gstrauss/master upstream
branch.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2017-02-23 10:22:44 +01:00
Rafał Miłecki ff823746ad lighttpd: update to 1.4.45
Update to 1.4.42 introduced a problem with starting lighttpd as
OpenWrt/LEDE service. It was stopping whole init process at sth like:
  783 root      1124 S    {S50lighttpd} /bin/sh /etc/rc.common /etc/rc.d/S50lighttpd boot
  799 root      1164 S    /usr/sbin/lighttpd -f /etc/lighttpd/lighttpd.conf

It was hanging until getting random pool:
[  176.340007] random: nonblocking pool is initialized
and then immediately the rest of init process followed:
[  176.423475] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[  176.430754] jffs2_build_filesystem(): unlocking the mtd device... done.
[  176.437615] jffs2_build_filesystem(): erasing all blocks after the end marker... done.

This was fixed in 1.4.44, but bump directly to 1.4.45 while at it.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2017-02-23 10:22:43 +01:00
Dirk Brenken ac596200ca adblock: update 2.3.1
* various optimizations & corner case fixes
* removed no longer needed debug information
* polished up for forthcoming LEDE release ;-)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5cf40c94ee)
2017-02-17 00:20:34 +02:00
Stijn Tintel f492265424 net-snmp: add engineID config options
According to the snmpd.conf man page, the engineID of an snmp agent
should be consistent through time. However, it seems that the engineID
changes every reboot. Add options to configure how the engineID is
generated. The default setting generates it based on the MAC address of
the eth0 interface.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-02-15 13:12:22 +01:00
Yousong Zhou 48aca2b236 xl2tpd: backporting fix for race condition causing xl2tpd hang
The patch was taken from https://github.com/xelerance/xl2tpd/pull/125

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-02-14 19:38:42 +08:00
Nikos Mavrogiannopoulos 67de57b923 ocserv: updated to 0.11.7
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2017-02-12 10:28:58 +01:00
Dirk Brenken aa4df29f72 adblock: 2.3.0 (package release 3)
* refine too optimistic wget/uclient-fetch timeout defaults
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5e4cd25103)
2017-02-12 10:47:39 +02:00
Stijn Tintel 5d5498f364 vallumd: bump to 0.1.3
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-02-10 09:32:58 +01:00
Christian Schoenebeck bb6a10c69f [lede-17.01] ddns-scripts: New update url for service duiadns.net
- new update url for service duiadns.net
- updated public_suffix_list.dat

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2017-02-09 21:25:18 +01:00
Dirk Brenken 2c9e7ddc5f adblock: 2.3.0 (package release 2)
* update readme regarding unbound integration
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1e7a1b380b)
2017-02-07 21:06:31 +02:00
Jo-Philipp Wich 06198d9c8c Revert "vnstat: update to v1.16"
This reverts commit 79b6e9dc61.

Undo the recent vnstat update due to upstream bugs preventing database
restoration.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-02-06 11:02:16 +01:00
Eric Luehrsen 82b297d7c3 unbound: expand UCI to cover some popular dnsmasq features
Unbound+DHCP (server of your choice) should be able to replicate
a lot of what dnsmasq provides. With this change set Unbound
still works with dnsmasq, but also it can work with a plain
DHCP server. Features have been added within the UCI itself
to act like dnsmasq.

- alone: name each interface relative to router hostname
- alone: prevent upstream leakage of your domain and '.local'
- dnsmasq: use dnsmasq UCI to configure forwarding clauses
- dhcp: work with odhcpd as example of companion DHCP-DNS
- dhcp: convert DHCPv4 leases into EUI64 SLAAC for DNS records
- all: enable encrypted remote unbound-control using splice conf
- all: allow user spliced conf-files for hybrid UCI and manual conf
-- 'unbound_srv.conf' will be spliced into the 'server:' clause
-- 'unbound_ext.conf' will add clauses to the end, example 'forward:'

README HOW TO for dnsmasq-in-serial, dnsmasq-in-parallel, and
unbound-with-odhcpd have better/added UCI starters. HOW TO for
including unbound_srv.conf and unbound_ext.conf are added.
Document new UCI: add_local_fqdn, add_wan_fqdn, dhcp4_slaac6,
dhcp_link, domain, and domain_type

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2017-02-05 20:08:30 +01:00
Eric Luehrsen 1a458a5697 unbound: expand UCI support for odhcpd DHCP-DNS
This is bare minimum change in 'unbound.sh' and
'dnsmasq.sh' to migrate the UCI option set for
more flexibility. The boolean(s) to link to
dnsmasq are being changed to a state to include
odhcpd. It is executable but a small step for
clear change management.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2017-02-05 20:08:30 +01:00
Eric Luehrsen 51e605f1de unbound: add odhcpd specific scripts to link DHCP-DNS
The UCI for Unbound already links to dnsmasq, but what
if with Unbound, we want to configure a plain dhcp server.
Most servers can call a script for lease events. That
script can then formulate DNS records and load them
with unbound-control (dependency).

The files added here work with OpenWRT/LEDE odhcpd, such
that it can be run alone. They can be used as examples
for any dhcp server. 'odhcpd.sh' is to be called by
odhcpd when a lease event occurs. 'odhcpd.awk' is called
internal to the shell script. The awk script handles
any tricky reformating that may be required.

/etc/config/dhcp
config odhcpd 'odhcpd'
  option leasetrigger '/usr/lib/unbound/odhcpd.sh'

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2017-02-05 20:08:30 +01:00
Eric Luehrsen 2f923ec281 unbound: improve NTP hotplug behavior when Unbound is disabled
If Unbound was disabled and at later time enabled, then it
would operate in DNSSEC less-secure mode. When NTP hotplug
was called, the timestamp file was not updated. This was
found testing Unbound vs other tools (bind, dnsmasq).

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2017-02-05 20:08:30 +01:00
Dirk Brenken 06a9de2d02 adblock: release 2.3.0
* automatically selects dnsmasq or unbound as dns backend
* add the new 'adguard' source, a combined/quite effective block list
* remove needless dns backend restarts
* optimize adblock restart behavior
* optimize block list processing on inotify enabled filesystems
* better return code checking on block list download
* fix boot function/startup on Chaos Calmer
* fix a bug in blocklist removal function
* add more (optional) debug output
* move backup options to global config
* documentation update

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-02-05 20:07:18 +01:00
Hauke Mehrtens 25be7a2220 tor: update to version 0.2.9.9
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-02-05 19:54:43 +01:00
Daniel Engberg 7ba28a5783 net/stunnel: Update to version 5.40
Update stunnel to 5.40

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2017-02-05 19:41:50 +01:00
Hannu Nyman fd6f15ec3f rsync and cifs-utils: update download address
samba.org has apparently started to enforce https-only downloads,
so update the download links for rsync and cifs-utils.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2017-02-05 19:41:50 +01:00
Damiano Renfer f390d77d4d net/dnscrypt-proxy: update to 1.9.4
Signed-off-by: Damiano Renfer damiano.renfer@gmail.com
2017-02-05 19:41:50 +01:00
Stijn Tintel 59313e6480 strongswan: enable IKEv2 Mediation Extension
Closes #3905.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-02-05 19:41:50 +01:00
Jo-Philipp Wich b4ef335746 pen: update to v0.34.0
Update the pen package to upstream release v0.34.0 in order to fix the
following build error reported by the buildbot:

    ssl.o: In function `ssl_create_context':
    ssl.c:(.text+0x9c): undefined reference to `SSLv3_method'
    collect2: error: ld returned 1 exit status

Also switch from PKG_MD5SUM to PKG_HASH with SHA256 while we're at it.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-02-05 19:40:06 +01:00
Jo-Philipp Wich 9d441d2c34 socat: work around missing stddef.h include
The buildbots fail to build socat due to the following error:

    nestlex.c:14:7: error: unknown type name 'ptrdiff_t'

It appears that certain source files do not include all required headers,
depending on the configure options passed to socat.

Work around the error by passing `-include stddef.h` via `TARGET_CFLAGS` to
forcibly inject this header file into all compilation units.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-02-05 19:38:38 +01:00
Peter Wagner 06525f0d3b ntpd: cleanup Makefile and hotplug script
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-02-05 19:38:37 +01:00
Peter Wagner 84c6db24fc ntpd: add hotplug script that signals when ntp reaches the stratum level like the sysntp implementation
use ntpq to check the status of the ntp server as all other status scripts included in the ntp tarball are
	based on perl which would dramatically increase the footprint of ntpd

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-02-05 19:38:14 +01:00
Toke Høiland-Jørgensen 2ff08b58f6 sqm-scripts: Bump to v1.1.3 2017-02-03 17:06:43 +01:00
Jo-Philipp Wich 5c749ad53e vnstat: update to v1.16
Updates vnStat to the latest stable version, drops obsolete patches.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-01-30 14:23:28 +01:00
Dirk Brenken 439538c4f0 adblock: bugfix 2.1.5 (release 2)
* fix wget/uclient-switch

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 12c345d803)
2017-01-30 09:33:21 +02:00
Toke Høiland-Jørgensen 31d89be9e6 sqm-scripts: Bump to v1.1.2, depend on kmod-sched-core
The needed shaper modules are now in kmod-sched-core, so we don't need
to depend on the full kmod-sched anymore.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2017-01-29 17:12:27 +01:00
Dirk Brenken 6b3baa3b27 adblock: update 2.1.5
* fix init boot function
* made fetch utility check more bullet proof
* automatically switch between default wget & uclient-fetch
configuration
* output link to online documentation on error
* update documentation

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 92c098fc02)
2017-01-23 17:41:46 -05:00
Toke Høiland-Jørgensen bf540fdc19 sqm-scripts: Bump to v1.1.1, depend on kmod-sched-cake
This release contains several bug fixes for LEDE-17.01. The
kmod-sched-cake dependency is to avoid having scripts that fail
silently.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2017-01-22 20:12:00 +01:00
Stijn Tintel 18d88e0bd5 vallumd: bump to 0.1.2
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-01-21 14:54:44 +01:00
Dirk Brenken ba29305c15 [lede-17.01] travelmate: bugfix 0.3.2
* refine/speed-up (re-)connect handling
* fix minor build error in init script
* better logging & cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-01-21 07:37:04 +01:00
Daniel Engberg 82def2c089 net/socat: Update to 1.7.3.1 and fix SSL
Update to 1.7.3.1
Fix SSL builds
Source: http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/net/socat/patches/#dirlist

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
(cherry picked from commit 8c0a4bf6c5)
2017-01-20 15:14:03 -05:00
Dirk Brenken 27c4d41ebb adblock: bugfix 2.1.2
* fix minor build error in init script

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d960507c5f)
2017-01-20 15:05:22 -05:00
Ted Hess d2249c0780 Merge pull request #3879 from chris5560/lede-17.01
[lede-17.01] ddns-scripts: fix detecting local ip from ip command
2017-01-20 14:31:01 -05:00
Jo-Philipp Wich 9bd384cd9b mosquitto: fix provides <=> package name conflicts
The virtual package declared by PROVIDES must not have the same name as the
variant declaring it, otherwise buildroot will fail with errors like:

    cp: '.../pkginfo/mosquitto.provides' and '.../pkginfo/mosquitto.provides' are the same file

In order to fix the above error, rename the existing "mosquitto" and
"libmosquitto" packages into "mosquitto-ssl" and "libmosquitto-ssl"
respectively.

Also substitute use of $(PKG_NAME) with literal "mosquitto" in
Package/* defines to improve readability of the Makefile.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-01-19 10:42:31 +00:00
Christian Schoenebeck 82629754da [lede-17.01]ddns-scripts: fix detecting local ip from ip command
- fix detecting local ip from ip command #3834 and https://forum.lede-project.org/t/bugs-in-ddns-scripts/1000
- updated public_suffix_list.dat
- minor fixes to services files

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2017-01-18 21:46:05 +01:00
Karl Palsson 67f167f981 net/mosquitto: add PROVIDES to daemon and library
Adding PROVIDES to both the daemon and library and -nossl variants allow
downstream packages to simply declare a single dependency.

mosquitto-client however, still needs to explicitly depend on the ssl or
nossl variant however.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2017-01-17 17:07:48 +00:00
Peter Wagner df9d8495ce ctorrent-*: delete from repo as there is no active development since 2008 and there are alternatives like aria2
Signed-off-by: Peter Wagner <tripolar@gmx.at>
(cherry picked from commit 7cdb8745b2)
2017-01-16 15:46:11 -05:00
Ted Hess 735d35fbb3 Merge pull request #3848 from jp-bennett/master
Fwknopd: Various updates
2017-01-16 08:12:28 -05:00
danrl e0c2f5bdc8 wireguard: new version and usability improvements
Signed-off-by: Dan Luedtke <mail@danrl.com>
2017-01-16 11:20:07 +08:00
Stijn Tintel 0eb9dbdd1e vallumd: bump to 0.1.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-01-15 23:53:04 +01:00
Hauke Mehrtens 275874dc22 tor: log to syslog by default
Make tor log to syslog by default instead of stdout.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-01-15 23:18:47 +01:00
Hauke Mehrtens 239ed96b0d tor: add tor-gencert, tor-resolve and torify
These are some additional applications build by the tor package.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-01-15 23:18:47 +01:00
Hauke Mehrtens f382d5da0d tor: add geoip6 to tor-geoip
This add the IPv6 addresses to the tor-geoip6 package.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-01-15 23:18:47 +01:00
Hauke Mehrtens 3c3f709792 tor: preserve tor keys over sysupgrade
Mark the directories containing the keys for hidden services as
conffiles to preserve them over sysupgrade.

Fixes: #2247

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-01-15 23:18:47 +01:00
Hauke Mehrtens 66b9522c26 tor: update to version 0.2.9.8
In addition update some configure options and use EXTRA_CFLAGS.
Setting RunAsDaemon to 1 will be overwritten by the init script option
"--runasdaemon 0" anyway and we want it in foreground for procd.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-01-15 23:18:47 +01:00