Commit Graph

254 Commits

Author SHA1 Message Date
Hannu Nyman 3b0f173db6 vsftpd: fix musl compatibility
Make vsftpd to compile with musl, while preserving uclibc compatibility.

When using musl:
* disable UTMPX functionality
* disable -lnsl option in upstream Makefile

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-06-29 18:14:06 +02:00
Steven Barth 52b28091fd strongswan: fix musl builds, reenable lost modules
Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-19 18:39:32 +02:00
Toke Høiland-Jørgensen 725b31909b [sqm-scripts/luci-app-sqm] Document how to disable shaping on a per direction basis
sqm-scripts for a long time interprets a "Down- or Upload speed" of zero as
an indication that the shaper should be disabled. Note that really shaping
an individual direction down  o zero will make the link effectively dead
for tcp (think reverse ACK traffic). Son instead of allowing the user to
configure something broken, 0 was "over-loaded" to denote no shaping
since several years, but that information has not been documented visibly
to the users. This commit aims at fixing that oversight.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-06-17 13:04:54 +02:00
Steven Barth aad08fea87 strongswan: bump to 5.3.2
Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-10 13:39:54 +02:00
Steven Barth f83939e33d strongswan: update to 5.3.1, cleanup broken modules
Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-10 13:39:47 +02:00
Steven Barth 2ee307b5d3 strongswan: add missing dependency
Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-10 13:39:41 +02:00
Steven Barth a45e3fbf78 strongswan: bump to 5.3.0
Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-10 13:39:35 +02:00
Steven Barth df44b2c331 strongswan: fix IKEv1 support
Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-10 13:39:28 +02:00
Mislav Novakovic 1f650f580a freeradius2: add mirror for older releases
Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
2015-05-26 00:42:26 +02:00
Karl Palsson e9e1c3071e mosquitto: upgrade 1.3.4 to 1.3.5
Minor bugfix release

Full changelog http://mosquitto.org/2014/10/version-1-3-5-released/

Signed-off-by: Karl Palsson <karlp@remake.is>
2015-05-08 10:13:46 +00:00
Toke Høiland-Jørgensen e9db7f4001 sqm-scripts: Only run on hotplug if the init script is enabled.
Fixes #1202.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2015-04-30 14:22:57 +02:00
Sebastian Moeller 0b8ec3e5f9 Remove dependeny on iptables-mod-filter from sqm-scripts
As Hnyman noted in https://github.com/dtaht/ceropackages-3.10/issues/13
we carry a few unnecessary dependecies in sqm-scripts, so remove one of
them (iptables-mod-filter) as we neither use it nor plan to use it.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-04-19 14:18:17 +02:00
Nikos Mavrogiannopoulos f3b19cda52 openconnect: list the defaultroute option
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-03-29 08:22:54 +02:00
Sebastian Moeller 74e3c57fe0 sqm-scripts: clean up interface selection for hotplugging
The initial conversion to restart sqm on interfaces it is configured
for in case of (transient) dis- and reappearance was half finished.
These changes clean up the handling of exlicitly passed interfaces
in run.sh: no second argument defaults to all configured interfaces
the alternative is an individual interface name passed as 2nd
argument to run.sh. The first argument either is start or stop.
No argument at all will behave as if start was passed.
Survives light testing...

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-03-25 10:38:11 +01:00
Sebastian Moeller 6604f9ede0 sqm-scripts: change default for qdisc target parameter
Alan Jenkins noted a bug in the smq luci GUI that effectively
erased several configuration paramters if two checkboxes were deselected.
This behaviour seems consistent in luci but certainly has the potential
to confuse users. While confusion can not really be avoided generally
it seems wise to change the default interpretation for empty or non-existent
itarget and etarget variables from the qdisc's default (5ms in the case of
one of the codels) to automatic determination of tghis variable dependent on
the configured bandwidth, as codels target variable should be large enough
to contain at least one full packet. With this change sqm-scripts will
do the right thing by default, but will yet allow the user to specify
over-ridding values (as long as the user does not un-check the
entry-field exposing check boxes). Survives light testing...
This change set also changes the sqm-scripts luci gui to note the user
of the change. For compatibility with existing setups sqm-scripts
will still honor "auto" as an alternative explicit way of requesting
automatic target selection. This might turn into a warning in the future
and might be phased out...

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-03-25 10:38:03 +01:00
Hannu Nyman 44356cac79 sqm-scripts: backport "make run.sh ignore spurious incomplete hotplug ifups"
Backport from trunk the commit improving hotplug action.
https://github.com/openwrt/packages/commit/1b5afe8f464bae8fa38317548ec95fe303334c0d

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-03-05 17:57:48 +02:00
Hannu Nyman 17b6911cde sqm-scripts: backport from trunk "Teach SQM hotplug tricks"
Backport from trunk the commit that adds support for hotplug action.
https://github.com/openwrt/packages/commit/5b61cfba076c61cf09783a7f6ef4150e55b74a3f

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-03-04 21:34:19 +02:00
Hannu Nyman bafecb73ad luci-app-sqm: backport package from trunk
Backport of luci-app-sqm package from trunk.
I have been using it in my BB14.07 build without any problems.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-02-17 20:09:34 +02:00
Hannu Nyman 2797914b37 sqm-scripts: backport package from trunk
Backport of sqm-scripts package from trunk.
I have been using it in my BB14.07 build without any problems.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-02-17 20:07:30 +02:00
Maxim Storchak 90fad61a79 rsync: patch CVE-2014-9512
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2015-02-15 22:45:20 +01:00
Steven Barth ca0d453af9 strongswan: bump to 5.2.2
Signed-off-by: Steven Barth <steven@midlink.org>
2015-02-13 12:16:55 +01:00
Steven Barth 00c2f3d436 strongswan: correctly install plugin include configs
Signed-off-by: Steven Barth <steven@midlink.org>
2015-02-13 12:16:51 +01:00
Steven Barth 29f23f24d5 strongswan: update to 5.2.1
Signed-off-by: Steven Barth <steven@midlink.org>
2015-02-13 12:16:46 +01:00
Steven Barth e60cbd46cb strongswan: import, update, adopt
Signed-off-by: Steven Barth <steven@midlink.org>
2015-02-13 12:16:41 +01:00
Jo-Philipp Wich 83c747ea61 rtorrent: remove manual autoconf invocation
The Makefile already uses the proper autoreconf fixup but leaves a manual
autoconf invocation in place.

The bad autoconf call leads to the following build error in the SDK:

	( cd .../rtorrent-0.9.4-git; ./autogen.sh );
	aclocal...
	autoheader...
	libtoolize... libtoolize nor glibtoolize not found
	make[2]: *** [.../rtorrent-0.9.4-git/.configured_] Error 1

Remove the entire Build/Configure override to let rtorrent build correctly.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2015-02-09 16:56:38 +01:00
tripolar 60e6ab7c02 Merge pull request #753 from wildoats/for-14.07
rtorrent: reenable rtorrent-rpc in Barrier Breaker

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-02-01 17:12:11 +01:00
Nikos Mavrogiannopoulos 579bdc1e84 ocserv: enable min-reauth-time in default configuration
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-24 14:00:48 +01:00
Adze1502 71719ebefa mwan3: update to version 1.5-10
Fixed issue in mwan3 status output with mwan3 interfaces not yet configuerd in network config
Removed nexthop argument as it is no longer used

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2015-01-20 22:11:31 +01:00
wildoats e593c1c7d2 rtorrent: Reenable rtorrent-rpc in Barrier Breaker
Signed-off-by: Jan Ulrich <jan@janulrich.org>
2015-01-20 12:53:51 -08:00
Nikos Mavrogiannopoulos 099ec4a071 openconnect: use openconnect.upgrade to save configured files
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-19 23:30:16 +01:00
Nikos Mavrogiannopoulos cdcbacdda9 Revert "openconnect: move certificate files to config/ to add graceful upgrade"
This reverts commit b53e5bfe87.
2015-01-19 23:30:10 +01:00
Nikos Mavrogiannopoulos 09c3b4df0b Revert "openconnect: cmdline parameter for CA not moved"
This reverts commit fa8f547945.
2015-01-19 23:30:05 +01:00
Nikos Mavrogiannopoulos 0d68740100 ocserv: prevent ocpasswd from using sha2crypt
That doesn't cope well with uclibc.
https://bugs.busybox.net/show_bug.cgi?id=7808

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-19 23:28:41 +01:00
Nikos Mavrogiannopoulos 392316bfc8 ocserv: use ocserv.upgrade to save configured files
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-19 23:28:26 +01:00
Nikos Mavrogiannopoulos cb26e66c26 Revert "ocserv: store permanent config files in /etc/config"
This reverts commit 1c40fc1022.
2015-01-19 23:27:46 +01:00
Nikos Mavrogiannopoulos 5b09f7af1b openconnect: bumped version
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-17 09:15:23 +01:00
Jasper 6367ee0d0f openconnect: cmdline parameter for CA not moved
The location for the server CA file was moved in b53e5bfe87, but the corresponding command line option for opeconnect not updated.
2015-01-17 09:02:45 +01:00
Nikos Mavrogiannopoulos b1534adc8b ocserv: store permanent config files in /etc/config
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-12 19:51:45 +01:00
Nikos Mavrogiannopoulos 93119a4573 ocserv: updated to 0.8.9
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-10 21:43:07 +01:00
Nikos Mavrogiannopoulos 32da468cde openconnect: removed obsolete patch
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-10 11:23:21 +01:00
Nikos Mavrogiannopoulos 9cb5b3864d openconnect: update to 7.03
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-10 11:15:02 +01:00
Adze1502 7c2b22ca8d mwan3: update to version 1.5-9
Fix issue where config file would be overwritten in some cases
Fix issue where local address of wan point-to-point links were unreachable from lan

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2014-12-22 10:13:54 +01:00
Aedan ARFETT Renner e27831d568 mwan3-luci: update to 1.3-5
new naming/wording - more generically mwan than mwan3
renamed cryptic variables/functions/etc everywhere
removed unused and unnecessary variables everywhere
cleaned up ugly and inefficient Lua and Javascript

Signed-off-by: Aedan Renner chipdankly@gmail.com
2014-11-11 23:00:13 +01:00
Aedan Renner a1d8519b7d mwan3-luci: update to 1.3-4
put dummy echo command back in hotplug script send_alert function to avoid errors

Signed-off-by: Aedan Renner chipdankly@gmail.com
2014-11-11 23:00:13 +01:00
Aedan Renner b128beaf2a mwan3-luci: update to 1.3-3
corrected name of last_resort option from "main" to "default"
added blackhole option to policy selection on rule configuration

Signed-off-by: Aedan Renner <chipdankly@gmail.com>
2014-11-11 23:00:13 +01:00
Aedan ARFETT Renner 6c1e1705b1 mwan3-luci: update to 1.3-2
added support for new last_resort option for policy configuration
added dependencies for luci-mod-admin-full and luci-lib-nixio
shortened length of menuconfig description lines
reworded things on various pages
changed date formatting in custom hotplug script
default route checks now verify both destination/netmask are 0.0.0.0
condensed messy javascript lines and removed -F' ' from awk commands

Signed-off-by: Aedan Renner <chipdankly@gmail.com>
2014-11-11 23:00:13 +01:00
Jo-Philipp Wich 6f089246a1 freeradius2: relax SSL version checks
Merge upstream commit 5ae2a70a135062a025d8fabc104eeae3a2c53a7a to relax the
SSL library version check at runtime.

The objective is to avoid the need for rebuilding freeradius2 whenever we push
binary updates for libopenssl. See https://dev.openwrt.org/ticket/18169 for
reference.

Please backport this change to the for-14.07 branch as well.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2014-11-11 11:14:17 +01:00
Jo-Philipp Wich e9189f2efd wget: update to v1.16
The update fixes CVE-2014-4877 which allows malicious FTP servers
to modify local filesystem contents through specificially crafted
symlinks.

Please backport to for-14.07 too.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2014-10-30 11:31:56 +01:00
Nikos Mavrogiannopoulos d83d5f6806 openconnect: fixed description of ca file location
Resolves #407
2014-10-09 22:15:20 +02:00
Adze1502 e6ea22ec3c mwan3: update to version 1.5-8
Fix bug introduced in version 1.5-7; args were not parsed to script.

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2014-10-07 14:04:53 +02:00