8097 Commits

Author SHA1 Message Date
Florian Eckert faf579b0ab apfree-wifidog: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Dirk Brenken dd356ed900 Merge pull request #13849 from dibdot/adblock
adblock: adapt openwrt rc.common changes
2020-11-03 20:05:15 +01:00
Dirk Brenken 10da8b0b8e Merge pull request #13848 from dibdot/banip
banip: adapt openwrt rc.common changes
2020-11-03 20:03:15 +01:00
Dirk Brenken 9922c8e3e0 adblock: adapt openwrt rc.common changes
* since openwrt master has merged the depending P/R, the old
extra_help/extra_commands syntax is no longer working, see #13798 for
reference

* removed test.sh script from package

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-11-03 19:51:46 +01:00
Dirk Brenken 14a6971589 banip: adapt openwrt rc.common changes
* since openwrt master has merged the depending P/R, the old
extra_help/extra_commands syntax is no longer working, see #13798 for
reference

* removed logd dependency, see #13820 for reference

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-11-03 19:44:22 +01:00
Dirk Brenken 65bee292d9 travelmate: adapt openwrt rc.common changes
* since openwrt master has merged the depending P/R, the old
extra_help/extra_commands syntax is no longer working, see #13798 for
reference

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-11-03 19:37:32 +01:00
Rosen Penev 4a94d960c9 usbip: remove no longer necessary udev hack
It's not only unnecessary, it interferes with libudev-zero.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-11-03 12:38:12 +00:00
Rosen Penev 881aa28fa1 treewide: turn specific libudev-* DEPENDS to generic ones
libudev-zero as well as libudev-fbsd have PROVIDES:=libudev . These
packages have nothing specific that requires one or the other.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-11-03 12:38:12 +00:00
Florian Eckert 33df7bbda8 Merge pull request #13748 from aaronjg/mwan3-owner-procd
mwan3: fix mwan3 'use'
2020-11-03 12:28:42 +01:00
Aleksander Morgado a7108c9e12 modemmanager: include all init commands in the procd instance
If procd relaunches the ModemManager daemon after e.g. a crash, we
also want it to notify all cached hotplug events, or otherwise we
would end up leaving the daemon running without the full initial
processing done.

This change modifies the init script to include all the required init
commands as part of the procd instance command, so that procd launches
all of them on every respawn.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-11-02 10:55:17 +01:00
Rosen Penev 2d8029ad62 Merge pull request #13813 from aleksander0m/aleksander/longer-wait-for-init-events
modemmanager: increase initial timeout for event reporting
2020-11-02 00:44:05 -08:00
Rosen Penev e2b813e3f7 Merge pull request #13755 from r-salvaterra/tor
Tor: a couple of updates
2020-11-01 13:53:12 -08:00
Rosen Penev 5fb093c101 Merge pull request #13678 from oldium/update-fwknopd-defaults
fwknop: Use sensible defaults.
2020-11-01 13:50:37 -08:00
Rosen Penev 1a8daeac5e Merge pull request #13653 from FinnixB/znc-multiple-listeners
znc: Add support for many configurable listeners for znc
2020-11-01 13:49:53 -08:00
Rosen Penev a9307eafc8 Merge pull request #13816 from mlichvar/chrony-improvements
chrony: improve configuration and hotplug script
2020-11-01 13:44:28 -08:00
Rosen Penev 222cad4ccc kea: fix compilation with libcxx
Boost headers try to include experimental/string_view when std is less
than c++17. This does not work ith libcxx where this header is not
present.

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-10-31 18:23:28 -07:00
Josef Schlehofer d442033941 bind: update to version 9.16.8
- DNS Flag Day 2020
(default EDNS buffer size changed from 4096 to 1232 bytes)

-- Added patch, which should be part of the next release
It fixes an issue while cross-compilation (I linked it in the commit
message with issue link)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-10-31 06:39:05 -07:00
Aleksander Morgado 9a16087fd6 modemmanager: increase initial timeout for event reporting
When the ModemManager daemon is started by the init script, we're
explicitly calling mm_report_events_from_cache() so that all the
hotplug events that happened before that moment are properly notified
to the newly launched daemon.

This initial reporting of events does a wait for the ModemManager
process to be available in DBus, and if the daemon isn't registered in
the bus in a given time, the process is considered failed:

  Sun Sep  6 16:20:02 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:02 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:03 2020 [2180]: <info>  ModemManager (version 1.14.6) starting in system bus...
  Sun Sep  6 16:20:03 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:04 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:05 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:05 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:06 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:06 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:07 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:07 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:08 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:08 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:09 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:09 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:10 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:10 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:11 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:11 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:12 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:12 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:12 2020 ModemManager: hotplug: error: couldn't report initial kernel events: ModemManager not running

Update the default wait time for this initial event notification from
10s to 60s, because there are cases where the daemon is slower to
boot, e.g. during the first boot after a sysupgrade.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-10-30 23:29:55 +01:00
Miroslav Lichvar 21c0f580f1 chrony: improve configuration
Extend configuration of NTP sources in UCI:
- Add nts option to enable NTS
- Add disabled option to allow inactive sources

Add nts section to UCI with:
- rtccheck option to disable certificate time checks on systems that
  don't have an RTC to avoid the chicken-and-egg problem (it is less
  secure, but still should be better than no NTS at all)
- systemcerts option to disable system certificates
- trustedcerts option to specify path to trusted certificates

Save NTS keys and cookies by default to avoid unnecessary NTS-KE
sessions when restarted or switching back to an already used NTS source.
Also, save the drift to stabilize the clock after chronyd restart.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2020-10-30 20:57:35 +01:00
Miroslav Lichvar b9d6d6cdd0 chrony: improve hotplug script
- Use the chronyc onoffline command to update state of all sources
  per current routing configuration
- Don't ignore the "ifupdate" action
- Add NTP servers from DHCP for the interface that went up instead of
  the wan4+wan6 interfaces
- Save the servers to files loaded by the sourcedir directive to not
  lose them when chronyd is restarted, and remove them when the
  interface goes down

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2020-10-30 20:02:48 +01:00
Miroslav Lichvar 1dc8c501a6 chrony: rework loading of configuration
Instead of loading /etc/chrony/chrony.conf from the file generated from
the chrony UCI configuration, use the confdir directive in the main
config to load the generated file. This should make it obvious that
chrony is configured in UCI and it can also be easily disabled.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2020-10-30 20:02:11 +01:00
Florian Eckert 81b8d863a7 Merge pull request #13806 from TDT-AG/pr/20201029-stunnel
stunnel: update version to 5.57
2020-10-30 16:38:13 +01:00
Yousong Zhou f07319d6b1 xl2tpd: bump to version 1.3.16
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-10-30 15:24:27 +08:00
Aaron Goodman 13d22445e4 mwan3: fix rpcd with for routers with no IPv6 support
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-10-29 23:06:25 -04:00
Daniel Golle c8bfe55026 nginx: adapt to changed ubus socket path
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-10-29 21:02:18 +02:00
Jan Pavlinec aa80a02340 lighttpd: add config for logrotate
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-29 15:18:54 +01:00
Florian Eckert 18a130c6bb stunnel: update version to 5.57
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-10-29 12:49:41 +01:00
Jannis Pinter b5259ef5da Add option for days until renewal
Signed-off-by: Jannis Pinter <jannis+openwrt@pinterjann.is>
2020-10-29 10:44:57 +01:00
Rui Salvaterra 6007751c63 tor: disable man pages and html manual generation
We don't need this on an embedded system.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2020-10-28 22:34:01 +00:00
Rui Salvaterra 929a5a9f0c tor: add a basic variant, without relay/bridge support
If relay/bridge support isn't required, this variant is about 300 kiB smaller
than the full tor daemon.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2020-10-28 22:33:53 +00:00
Rui Salvaterra a519b90fd7 tor: improve readability of the packages help text
Whitespace before and after the description makes the package information much
more obvious.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2020-10-28 21:12:26 +00:00
Matthieu Baerts dfc8fdf5e5 ifstat: import fixes from Debian package
Extracted from:

  http://deb.debian.org/debian/pool/main/i/ifstat/ifstat_1.1-8.1.diff.gz

Note that I also created a new git repository with these fixes:

  https://github.com/matttbe/ifstat/

The original author of these modification is:

  Goswin von Brederlow <goswin-v-b@web.de>

ChangeLog:

  * snmp.c: fix 2 pointer targets differ in signedness warnings
  * Adding upport for 64bit /proc/net/dev counters.
  * Clean up compiler warnings.

More modifications are available in the patch from the Debian project
but mostly related to the "debian" dir, man page and debug mode. Here I
only took the modifications related to the .c and .h files.

The most important fix is related to the support for 64bit counters in
/proc/net/dev instead of displaying 0 after a while.

Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net>
2020-10-27 23:53:28 -07:00
Aaron Goodman f1bfda4c37 mwan3: do not wait to process ifup/ifdown events
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-10-27 23:18:18 -04:00
Aaron Goodman 8d4e202fa4 mwan3: fix mwan3 route handling
- support trailing route space from iproute2
- add routes even when iface is down
- fix source_routing argument check
- add quotes in logging to better detect issues with trailing spaces

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-10-27 21:40:06 -04:00
Petr Štetiar 351e4e01c5 cgi-io: update to version 2020-10-27
Contains following list of changes:

 ab4c3471b261 tests: add cram based unit tests
 7b4e3241e1bd tests: add cgi-io built with clang sanitizers
 21831f45d16d Disable session ACLs during unit testing
 2f525417b5df Add initial GitLab CI support
 57f1c4f18cb6 Add .gitignore
 09f9ac5066ee Fix off-by-one in postdecode_fields
 ed8ce0d5d28b Add fuzzing of utility functions
 a61581819800 Add fuzzing of multipart_parser
 6b0615b728ed Refactor utility functions into static library
 a0ed2c9a7a72 Fix clang compiler errors
 232659da19a4 Fix possible NULL dereference
 8e5719b37a67 Fix warnings reported by clang-10 static analyzer
 b99aa8a64cca Remove Makefile

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2020-10-27 23:10:17 +01:00
Daniel Salzman 67e3c594de knot: disable libnghttp2 autodetection
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
2020-10-27 18:04:00 +02:00
Florian Eckert ca5dc9754f Merge pull request #13752 from TDT-AG/pr/20201023-xinetd
xinetd: some changes
2020-10-27 09:21:16 +01:00
Rosen Penev 3fa36bf958 softethervpn: update to 4.34-9745
Several patch changes regarding to OpenSSL as this version does not
compile under LibreSSL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-10-26 21:46:20 -07:00
Rosen Penev 56e4edad82 transmission: remove variants and use libcurl's TLS library
Allows the Makefile to be cleaned up and to have fewer dependencies.
There's no need for multiple TLS libraries to be installed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-10-26 21:45:32 -07:00
Rosen Penev 7b5513659f Merge pull request #13768 from bmork/conserver
conserver: update to version 8.2.6
2020-10-26 19:33:10 -07:00
Olivier Poitrey 2da8c48c39 nextdns: Update to version 1.8.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-10-26 20:45:16 +02:00
Jan Hak 4069bb1e72 knot: update to version 3.0.1
definition of PSELECT_COMPAT could be removed many years ago, is no longer needed

Signed-off-by: Jan Hak <jan.hak@nic.cz>
2020-10-26 17:45:32 +02:00
Mengyang Li b6119433a5 openconnect: allow specify --protocol from config
openconnect v8.10 supports 4 VPN protocols

  --protocol=anyconnect  Compatible with Cisco AnyConnect SSL VPN, as well as ocserv (default)
  --protocol=nc          Compatible with Juniper Network Connect
  --protocol=gp          Compatible with Palo Alto Networks (PAN) GlobalProtect SSL VPN
  --protocol=pulse       Compatible with Pulse Connect Secure SSL VPN

This patch allows user to specify protocol use the new "vpn_protocol"
option and deprecate the old option "juniper" which seems to be missing in
the current openconnect client.

Signed-off-by: Mengyang Li <mayli.he@gmail.com>
2020-10-25 21:44:32 +01:00
Bjørn Mork cff9e9e660 conserver: update to version 8.2.6
version 8.2.6 (October 19, 2020):
        - try and address license concerns with LICENSE.md
        - replace usleep with nanosleep (Rosen Penev <rosenp@gmail.com>)
        - console: Add 'k' option to exit on console-down (Mylène Josserand <mylene.josserand@collabora.com>)
        - Fix #48 - apply ipv4 CIDR access list when compiled with ipv6 support

Signed-off-by: Bjørn Mork <bjorn@mork.no>
2020-10-25 19:24:52 +01:00
Lucian Cristian 80ac8dac11 libreswan: update to 4.1
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-10-25 16:09:13 +02:00
Richard Gering 29a4f8bbb7 banip: Added packet logging feature. Resolved shellcheck warnings.
Signed-off-by: Richard Gering <rg4github@dutchies.us>
2020-10-24 16:20:21 -07:00
Helge Mader 2bba943e99 xinetd: update config sample to latest requirements
Signed-off-by: Helge Mader <ma@dev.tdt.de>
2020-10-23 11:15:20 +02:00
Helge Mader 90ab809f7f xinetd: include additional (runtime) directory in configuration file
The additional directory is created and can be used e.g. for configurations
which are created e.g. dynamically from an uci config.

Signed-off-by: Helge Mader <ma@dev.tdt.de>
2020-10-23 11:14:44 +02:00
Helge Mader 4a3e547f5d xinetd: save configurations in /etc/xinetd.d on sysupgrade
For applications writing their own xinetd configuration to the /etc/xinetd.d
directory it would be necessary to save them (e.g. a user edits them manually)

Signed-off-by: Helge Mader <ma@dev.tdt.de>
2020-10-23 11:14:07 +02:00
Helge Mader 65c49f0030 xinetd: update PKG_RELEASE to 9
Signed-off-by: Helge Mader <ma@dev.tdt.de>
2020-10-23 11:12:56 +02:00