8097 Commits

Author SHA1 Message Date
Adrian Schmutzler 6495b470e4 sqm-scripts: depend directly on kmod-sched-cake again
Since support for kernel 4.14 has been removed, kmod-sched-cake-oot
is gone, and the kmod-sched-cake-virtual package is not needed
anymore.

This effectively reverts 9114244fbd ("sqm-scripts: Switch sch_cake
dependency to new virtual package")

Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2020-08-31 21:57:28 +02:00
Jan Pavlinec 7049b06130 autossh: switch to procd
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-08-31 07:05:12 -07:00
Jeffery To c0340f631c python: Use locked for host pip
This also removes PKG_BUILD_PARALLEL:=0 that was added for packages that
use HOST_PYTHON3_PACKAGE_BUILD_DEPENDS.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-08-31 03:48:47 -07:00
Rosen Penev ecfe85ab28 mstpd: fix compilation with uClibc-ng
bcopy/bzero are no longer available.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-08-31 01:12:14 -07:00
Rosen Penev d897beee91 kismet: fix compilation under uClibc-ng and GCC10
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-08-31 00:39:54 -07:00
Rosen Penev 57b10de2c0 apache: fix compilation without deprecated OpenSSL APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-08-31 00:31:12 -07:00
Rosen Penev fff511badf Merge pull request #13227 from neheb/slhh
sslh: update to 1.21c
2020-08-30 23:57:58 -07:00
Rosen Penev e1760b8adb Merge pull request #13253 from liudf0716/apfree-wifidog
apfree-wifidog: update to 4.08.1771
2020-08-30 23:51:53 -07:00
Dengfeng Liu d6926c1b32 apfree-wifidog: update to 4.08.1771
Signed-off-by: Dengfeng Liu <dfliuc@isoftstone.com>
2020-08-31 08:58:55 +08:00
Stijn Tintel 34902987bd Merge pull request #13223 from mikebaz/master
strongswan: add left and mark configuration to UCI
2020-08-30 23:26:20 +03:00
Nikos Mavrogiannopoulos 25b4544297 Merge pull request #13221 from yousong/oc
openconnect: allow disable dtls with bool option no_dtls
2020-08-30 13:29:29 +02:00
Philip Prindeville e8fd996c72 isc-dhcp: add support for RFC-3442 classless IPv4 routes
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2020-08-28 19:30:42 -06:00
Rosen Penev 432f954bbe sslh: update to 1.21c
Refresh patches. Remove now pointless format patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-08-27 17:32:06 -07:00
Rosen Penev 005230c04c lftp: update to 4.9.2
Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-08-27 17:30:32 -07:00
Rosen Penev f873fbdc49 Merge pull request #13218 from neheb/wave
wavemon: fix compilation with glibc
2020-08-27 14:24:44 -07:00
Rosen Penev 744169fa13 Merge pull request #13220 from aaronjg/openfortivpn/config-varname-fix
openfortivpn: use more standard config option names
2020-08-27 13:33:43 -07:00
Michael C. Bazarewsky 51214e191f strongswan: add left and mark configuration to UCI
This commit allows for UCI configuration of the "left=" and the
"mark=" values in a StrongSwan IPSec connection.  This improves
VTI support and allows certain stricter connection scenarios.

Signed-off-by: Michael C. Bazarewsky <github@bazstuff.com>
2020-08-27 16:06:34 -04:00
Yousong Zhou 3445e1b470 openconnect: allow disable dtls with bool option no_dtls
openconnect may emit following error logs every minute when negotiating
with deployments forbidding usage of dtls

  Thu Aug 27 04:11:59 2020 daemon.notice openconnect[12024]: DTLS handshake failed: Error in the push function.
  Thu Aug 27 04:11:59 2020 daemon.notice openconnect[12024]: (Is a firewall preventing you from sending UDP packets?)

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-08-27 13:59:52 +08:00
Yousong Zhou fce2b069df openconnect: break each var into its own line in order
For easier review

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-08-27 13:59:35 +08:00
Yousong Zhou d6d9376141 ovn: include ovn-appctl
Required by ovn-ctl for stopping ovn ovsdb instances

This utility was introduced since 20.03.0 after the project was
maintained in its own repo

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-08-27 13:58:39 +08:00
Aaron Goodman 24b4d9edab openfortivpn: use more standard config option names
change 'server' to 'peeraddr'
change 'iface_name' to 'tunlink'

fix some indentation issues

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-08-26 21:55:22 -04:00
Tony Butler 7b6f58e9d0 curl: add optional zlib support
Package libcurl is missing dependencies for the following libraries:
libzstd.so.1

Previous patch by Hans Dedecker <dedeckeh@gmail.com> took the easy way
out :)

Suggested-by: Syrone Wong <wong.syrone@gmail.com>
Signed-off-by: Tony Butler <spudz76@gmail.com>
[fixed title]
Signed-off-by: Paul Spooren <mail@aparcar.org>
2020-08-26 13:26:42 -10:00
Hauke Mehrtens 30fecae052 curl: Use wolfssl by default
Instead of using mbedtls by default use wolfssl. We now integrate
wolfssl in the default build so use it also as default ssl library for
curl.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2020-08-26 13:25:07 -10:00
Hauke Mehrtens f2fa1f6093 curl: Fix build with wolfssl
Backport a commit from upstream curl to fix a problem in configure with
wolfssl.

checking size of time_t... configure: error: cannot determine a size for time_t

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2020-08-26 13:25:07 -10:00
Rosen Penev 13c4e24560 wavemon: fix compilation with glibc
-lpthread is needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-08-26 16:12:55 -07:00
Paul Spooren efed611029 curl: add package (previously in base)
Move package over from openwrt.git based on the Hamburg 2019 decision
that non essential packages should be maintained in packages.git

Signed-off-by: Paul Spooren <mail@aparcar.org>
2020-08-26 08:27:24 -10:00
Nick Hainke 5491d33d7d dawn: bump version
Includes:
- datastorage: fix hearingmap not synced

Signed-off-by: Nick Hainke <vincent@systemli.org>
2020-08-26 13:56:40 +02:00
Rosen Penev 395e9ff31f Merge pull request #13139 from aaronjg/openfortivpn/ppp-netifd-fix
openfortivpn: fix routes passed to netifd
2020-08-25 02:11:17 -07:00
Yousong Zhou fed92c81b6 ovn: bump to version 20.06.2
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-08-25 15:50:37 +08:00
Yousong Zhou 282038d97b openvswitch: bump to version 2.14.0
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-08-25 15:50:32 +08:00
Rosen Penev ad97672726 sshtunnel: correct access of config file
With this change the `/etc/config/sshtunnel` file has the correct access.
It's a sensible file.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-08-24 13:49:45 -07:00
Rosen Penev b9000884d6 Merge pull request #12762 from ngrsdhbw/feature_ddns_cloudflare_bearer
ddns-scripts: Support Bearer Token for Cloudflare
2020-08-24 13:09:37 -07:00
Rosen Penev 8f3642e4bb Merge pull request #13193 from sartura/sysrepo
Update sysrepo, libyang, libnetconf2 and netopeer2 packages to latest versions
2020-08-24 13:06:45 -07:00
Rosen Penev a00b99950a Merge pull request #13174 from neheb/dav
davfs2: update to 1.6.0
2020-08-24 06:57:24 -07:00
Rosen Penev ec67d94f4d Merge pull request #13192 from peter-stadler/nginx
nginx: update to version 1.19.2
2020-08-23 20:52:18 -07:00
Noah Meyerhans cf61f7f8ef bind: New upstream version 9.16.6
Several security issures are addressed:

 - CVE-2020-8620 It was possible to trigger an assertion failure by sending
   a specially crafted large TCP DNS message.
 - CVE-2020-8621 named could crash after failing an assertion check in
   certain query resolution scenarios where QNAME minimization and
   forwarding were both enabled. To prevent such crashes, QNAME minimization is
   now always disabled for a given query resolution process, if forwarders are
   used at any point.
 - CVE-2020-8622 It was possible to trigger an assertion failure when
   verifying the response to a TSIG-signed request.
 - CVE-2020-8623 When BIND 9 was compiled with native PKCS#11 support, it
   was possible to trigger an assertion failure in code determining the
   number of bits in the PKCS#11 RSA public key with a specially crafted
   packet.
 - CVE-2020-8624 update-policy rules of type subdomain were incorrectly
   treated as zonesub rules, which allowed keys used in subdomain rules to
   update names outside of the specified subdomains. The problem was fixed by
   making sure subdomain rules are again processed as described in the ARM.

Full release notes are available at
https://ftp.isc.org/isc/bind9/9.16.6/doc/arm/html/notes.html#notes-for-bind-9-16-6

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2020-08-23 19:58:34 -07:00
Michael Heimpold 7504fddd53 Merge PR #13179 via local branch. 2020-08-23 22:58:12 +02:00
Karl Palsson 75992cc981 net/u2pnpd: convert init to procd
Drops pid files, no longer needed with procd management.
Now properly reloads on reload_config after UCI changes.

Signed-off-by: Karl Palsson <karlp@etactica.com>

[ Fixed two shellcheck warnings and bump PKG_RELEASE ]
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-08-23 22:52:31 +02:00
Rosen Penev 3ff9c91b9d Merge pull request #13137 from neheb/isc
isc-dhcp: fix compilation with GCC 10
2020-08-23 13:32:19 -07:00
Rosen Penev 5333cdcbb9 Merge pull request #13191 from Foxtrot/add-fakepop
fakepop: add new package
2020-08-23 13:31:22 -07:00
David Yang dec2cab0dd i2pd: Update to 2.32.1
Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-08-23 21:11:31 +08:00
Marc Egerton 8b60f1591a fakepop: Fix PKG_LICENSE, remove libc dependency
Signed-off-by: Marc Egerton <foxtrot@realloc.me>
2020-08-22 22:18:44 +01:00
Peter Stadler 14650d3517 nginx: update to version 1.19.2
Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-08-22 19:59:11 +02:00
Aaron Goodman 5facc084aa openfortivpn: fix routes passed to netifd
The openfortivpn routes are a bit different than the standard ppp
routes so we need to handle them with a custom ppp-up script.

Gateway should not be set, and src should be set to the PPP local ip
address.

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-08-22 13:21:14 -04:00
Jakov Smolic f8ffabaf08 netopeer2: update to 1.1.39
Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>
2020-08-22 18:26:04 +02:00
Jakov Smolic 1e5fe18cba sysrepo: update to 1.4.70
Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>
2020-08-22 18:26:04 +02:00
Marc Egerton b568005444 fakepop: new package
fakepop is a fake pop3 daemon. It returns always the same messages to all users, it does not care about usernames and passwords. All user/pass combinations are accepted.

Signed-off-by: Marc Egerton <foxtrot@realloc.me>
2020-08-22 16:19:05 +01:00
Rosen Penev 46f727e57d Merge pull request #13097 from lzto/nft-qos-mac
nft-qos: support mac address based speed limit
2020-08-21 17:51:04 -07:00
Stan Grishin 492a49fcc5 simple-adblock: bugfix: update config; use command -v
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-08-21 23:29:02 +00:00
Rosen Penev 5a94dd25c1 Merge pull request #13184 from PolynomialDivision/feature/dawnupdate
dawn: bump to latest version
2020-08-21 15:49:36 -07:00