Commit Graph

4048 Commits

Author SHA1 Message Date
Hannu Nyman 8eec9cda08 Merge pull request #5296 from wvdakker/set-path
Shorewall(6): Set path
2017-12-18 16:02:23 +02:00
W. van den Akker bf16ee93ff Shorewall6-lite: Reorder package/install section.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-18 14:29:54 +01:00
W. van den Akker d2b0596a0f Shorewall-lite: Reorder package/install section.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-18 14:29:04 +01:00
Alin Nastac c59bea9f43 xl2tpd: remove demand support from netifd l2tp protocol
This pppd feature does not make sense in L2TP case because the
tunnel is already connected when xl2tpd launch pppd process. If
a dial-on-demand feature is to be implemented, trigger interface
would have to be provided by xl2tpd, not pppd.

Signed-off-by: Alin Nastac <alin.nastac@gmail.com>
2017-12-18 21:28:11 +08:00
W. van den Akker 35cb4dd18a Shorewall6: Change path to prevent busybox/ip detection before ip-tiny/full.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-18 14:27:46 +01:00
W. van den Akker bfb207bd08 Shorewall: Change path to prevent busybox/ip detection before ip-tiny/full.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-18 14:25:58 +01:00
Brian J. Murrell 701a3ec258 shorewall6-lite: set the PATH variable
So that it matches LEDE's default PATH value.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2017-12-17 11:24:29 -05:00
Brian J. Murrell a8f382f90b shorewall-lite: set the PATH variable
So that it matches LEDE's default PATH value.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2017-12-17 09:14:19 -05:00
Philip Prindeville 3d59ce6f50 lighttpd: update to 1.4.48
All of the bugs for which we had patches have been fixed upstream
in 1.4.46, so the patches can be dropped.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2017-12-16 12:49:22 -07:00
John Crispin 2e62b5a132 Merge pull request #5118 from jow-/cgi-io-sha256
cgi-io: support SHA256 checksums for file uploads
2017-12-16 10:02:31 +01:00
Hannu Nyman 1b42af5931 Merge pull request #5264 from TDT-AG/pr/20171211-net-stunnel-add-uci-enabled-param
net/stunnel: add enabled config option
2017-12-16 10:46:01 +02:00
Hannu Nyman be7a4b830d Merge pull request #5283 from dibdot/travelmate
travelmate: release 1.0.0
2017-12-16 10:42:15 +02:00
Dirk Brenken 1995e0e632 travelmate: release 1.0.0
* limit sta interface selection/handling
  to defined travelmate interface (trm_iface) only
* check eap capabilities and ignore enterprise uplinks
  as long as eap support is not available
* documentation update
* cosmetics
* LuCI: various cleanups

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-12-15 19:10:17 +01:00
Christian Beier 841701651c ola: update to 0.10.5, drop obsolete patches
This also add a patch fixing builds with newer protobuf versions,
https://github.com/OpenLightingProject/ola/pull/1336.

Signed-off-by: Christian Beier <dontmind@freeshell.org>
2017-12-15 18:23:18 +01:00
Lucian Cristian a63a76e31d nginx: update to 1.12.2
also fixes gcc7.2 compile

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2017-12-15 18:45:20 +02:00
Nikos Mavrogiannopoulos cfec94a01b Merge pull request #5244 from yousong/p11-err.h
openconnect: fix compilation against libp11 >= 0.4.7
2017-12-15 14:38:55 +01:00
Florian Eckert 3fc880c2e9 net/stunnel: add enabled config option
Add an enabled option for the service section, so you could keep your
configuration in place without apply this section on startup or service reload.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-12-15 08:03:41 +01:00
Yousong Zhou 0d2f9d9bd6 openconnect: fix compilation against libp11 0.4.7
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-12-15 09:50:26 +08:00
Florian Fainelli 343006bea9 Merge pull request #5179 from neheb/cifs
cifs-utils: Update to 6.7
2017-12-14 10:47:00 -08:00
Hans Dedecker 74dbf6bcbe strongswan: add interface uci list
The interface config option allows users to configure logical OpenWRT
interface names in the ipsec section; it allows StrongSwan to listen
and send traffic on specified interface(s). It translates to interfaces_use
StrongSwan option which is a comma sepearted list of network devices
that should be used by charon.
Since StrongSwan can only be started when one of the specified logical
OpenWRT interface is up procd interface triggers are installed to
trigger the reload script.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-12-13 18:46:37 +01:00
Hans Dedecker 1d31d840d4 strongswan: fix reload service
Based on the ipsec running state reload_service is either reloading ipsec
or starting ipsec. However in the latter case it calls ipsec start which
bypasses the procd start_service function which means the running ipsec
instance is not managed by procd.
Fix this by calling start in case ipsec is not running; at the same time
add service_running function which is used by procd provided running
function.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-12-13 10:49:55 +01:00
Jo-Philipp Wich 175cf9e985 iodine: workaround incomplete musl nameser.h header
The arpa/nameser.h header of musl libc indirectly depends on the endian.h
header but fails to explicitely include it to properly define
`__BYTE_ORDER` and `__BIG_ENDIAN` prior to declaring the DNS `HEADER`
structure.

When both the appropriate `__BYTE_ORDER` and `__BIG_ENDIAN` defines are
unset, the `#if __BYTE_ORDER == __BIG_ENDIAN` condition in `nameser.h`
evaluates to true, causing it to declare a bad (big endian) DNS packet
header structure on little endian systems.

Work around this musl bug by forcibly passing `-include endian.h` through
the `osflags` file.

An upstream fix for musl libc has been submitted with
http://www.openwall.com/lists/musl/2017/12/04/3

This should solve iodine packet corruption on little endian musl systems
reported at
http://lists.infradead.org/pipermail/lede-dev/2017-November/010085.html

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-12-12 23:41:44 +01:00
Jo-Philipp Wich 70858690c0 nlbwmon: update to current HEAD
Update to latest Git HEAD in order to solve a number of issues.

 - Improves MAC address lookup reliability
 - Properly counts DNAT-ed connections (e.g. for port forwards)
 - Fixes stack corruption when parsing netlink records
 - Fixes deletion of gzipped databases

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-12-12 22:01:56 +01:00
Hannu Nyman 205cff1987 Merge pull request #5263 from yangfl/master
i2pd: Update to 2.17.0
2017-12-11 23:38:52 +02:00
Karl Palsson 0bc06df68c net/mosquitto: reproducible build patches
Remove build timestamp.  Using currently proposed upstream patch.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
Signed-off-by: Karl Palsson <karlp@etactica.com>
2017-12-11 11:00:26 +00:00
Karl Palsson 46879b2b65 net/mosquitto: depend on virtual package instead of select
Can't use DEPENDS:= +libname when libname is now a virtual package.
Switch to plain DEPENDS:= libname.

Fixes Github issue 4751

Signed-off-by: Karl Palsson <karlp@etactica.com>
2017-12-11 10:55:08 +00:00
David Yang 06181d99a8 i2pd: Update to 2.17.0
Signed-off-by: David Yang <mmyangfl@gmail.com>
2017-12-11 15:58:24 +08:00
Florian Eckert 5e0e6e0533 net/stunnel: add uci config support
Add uci config support.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-12-10 11:13:43 +01:00
Matthias Schiffer 170fb34883 Merge pull request #5155 from neheb/patch-6
ethtool: Update to 4.13
2017-12-09 21:41:10 +01:00
champtar e2605b07f0 Merge pull request #5248 from diizzyy/patch-111
net/stunnel: Update to 5.44
2017-12-09 09:41:25 -08:00
champtar 228db2a2a2 Merge pull request #5245 from mstorchak/rsync
rsync: fix CVE-2017-15994 and CVE-2017-16548
2017-12-09 09:31:41 -08:00
Hannu Nyman 69dd5ba7f3 Merge pull request #5250 from mstorchak/tgt
tgt: update to 1.0.72
2017-12-09 16:13:56 +02:00
Maxim Storchak 1915975979 tgt: update to 1.0.72
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2017-12-09 15:03:23 +02:00
Daniel Engberg 6b53b45e07 net/stunnel: Update to 5.44
Update stunnel to 5.44
* Disable FIPS

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2017-12-09 10:53:35 +01:00
Hannu Nyman 396fff138d Merge pull request #5247 from dibdot/travelmate
travelmate: update 0.9.6
2017-12-09 09:39:05 +02:00
Dirk Brenken 48f48991c3 travelmate: update 0.9.6
* fix incomplete bssid logic
* add missing package dependencies
* Turris omnia compability fixes (LuCI, separate PR)
* OpenWrt theme fixes (LuCI, separate PR)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-12-09 08:20:29 +01:00
champtar b259502c15 Merge pull request #5242 from smutt/danish
danish: Add package net/danish
2017-12-08 20:56:34 -08:00
Alexander Couzens 9d1b1c2c35 wavemon: use SOURCE_DATE_EPOCH as BUILD_DATE
Build timestamps prevent reproducible builds [0].
SOURCE_DATE_EPOCH [1] can replace BUILD_DATE in a
determinisc way.

[0] https://reproducible-builds.org/docs/timestamps/
[1] https://reproducible-builds.org/specs/source-date-epoch/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
2017-12-08 22:46:02 +00:00
W. van den Akker 445847f00a Shorewall6: bump to version 5.1.9
Removed 010-update_install_sh.patch. Merged upstream.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-08 20:29:47 +01:00
W. van den Akker 037ac8cd0e Shorewall: bump to version 5.1.9
Removed 010-update_install_sh.patch. Merged upstream.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-08 20:28:06 +01:00
W. van den Akker 93e4a9870d Shorewall6-lite: bump to version 5.1.9
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-08 20:25:18 +01:00
W. van den Akker dbec6fa9c5 Shorewall-lite: bump to version 5.1.9
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-08 20:24:23 +01:00
W. van den Akker 8cd958558b Shorewall-core: bump to version 5.1.9
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-08 20:22:24 +01:00
Maxim Storchak 99507aa2ee rsync: Fix CVE-2017-15994 and CVE-2017-16548
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2017-12-08 19:56:10 +02:00
champtar ef0dc732fa Merge pull request #5243 from brianjmurrell/shorewall-multi-sources
Shorewall multi sources
2017-12-08 08:06:32 -08:00
Jo-Philipp Wich c48f5185d3 Merge pull request #5214 from lynxis/rb_ddns_cloud
ddns-scripts: remove gzip timestamp
2017-12-08 10:47:15 +01:00
Brian J. Murrell e0a89d9063 shorewall6: Multiple source sources
Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2017-12-07 21:26:12 -05:00
Brian J. Murrell ceef8da28e shorewall: Multiple source sources
Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2017-12-07 21:26:09 -05:00
Brian J. Murrell a88d61df59 shorewall6-lite: Multiple source sources
Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2017-12-07 21:26:06 -05:00
Brian J. Murrell 5d3d2f4654 shorewall-lite: Multiple source sources
Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2017-12-07 21:26:03 -05:00