Commit Graph
90 Commits
Author SHA1 Message Date
Stijn TintelandGitHub 6baf7aa42b Merge pull request #6091 from dwmw2/domoticz
Domoticz updates and build fixes
2018-06-04 21:30:58 +03:00
Stijn Tintel 7bb68c74e2 strongswan: bump to 5.6.3
Fixes the following CVEs:
- CVE-2018-5388
- CVE-2018-10811

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2018-05-28 23:38:53 +03:00
Stijn Tintel ec623f6b42 strongswan: bump to 5.6.2
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2018-02-27 00:35:47 +01:00
Stijn TintelandGitHub 8941bd7869 Merge pull request #5272 from dedeckeh/pr-strongswan-1
Fix ipsec reload and extend uci
2018-02-02 18:48:02 +01:00
Stijn Tintel e247b66790 strongswan: bump to 5.6.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-11-30 02:01:24 +01:00
Stijn Tintel ebf5896009 libiio: add iiod init script
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-10-20 19:14:25 +03:00
Stijn Tintel 6d4f6a31fe libxml2: install cmake module
Since version 2.9.2, libxml2 provides its own cmake module. Install it
to avoid packages built with cmake and requiring libxml2 to fall back to
cmake's FindLibXml2 module, which seems to detect host libxml2 instead
of the one in staging_dir.

Fixes #4917.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-10-20 17:46:51 +03:00
Stijn TintelandGitHub 13c670ef78 Merge pull request #4422 from diizzyy/patch-55
utils/f2fs-tools: Remove from tree
2017-10-08 22:27:41 +03:00
Stijn TintelandGitHub d12fb5e4a4 Merge pull request #4438 from hauke/freeradius3
freeradius3: fix CVE-2017-9148
2017-10-08 22:18:44 +03:00
Stijn Tintel e4165b4452 net-snmp: avoid duplicate section names
It seems that UCI can't handle duplicate section names in a single
config file, even if they use different types. After the previous
commit, running `uci export` results in the following error:

uci: Parse error (section of different type overwrites prior section with same name) at line 17, byte 23

Append a 6 to the com2sec6 section names to solve this.

Fixes: 0e1c8b4ccc ("net-snmp: snmpd: listen on IPv6 by default")
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-09-29 04:36:47 +03:00
Stijn Tintel 0e1c8b4ccc net-snmp: snmpd: listen on IPv6 by default
Closes #4758.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-09-29 02:45:25 +03:00
Stijn Tintel 8079f86caa net-snmp: add snmptrapd packages
Closes #4724.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-09-29 02:40:49 +03:00
Stijn Tintel 61769b0786 net-snmp: use LN macro
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-09-29 01:56:38 +03:00
Stijn Tintel 83a216bcc9 net-snmp: improve snmp-utils description
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-09-29 01:38:37 +03:00
Stijn Tintel 9e265cfa1b domoticz: enable GPIO support
When cross-compiling Domoticz on a system without GPIO, the WITH_GPIO
flag is not set by cmake, and GPIO support is disabled as a result.
Enabling GPIO support by adding the flag to TARGET_CXXFLAGS.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-09-21 01:31:45 +03:00
Stijn Tintel 476dae33c7 domitcz: fix dzVents scripts
Domoticz 3.8153 introduced support for dzVents. Unfortunately this was
broken by the 902_add-scripts-path, which attempts to make Domoticz more
FHS-compliant instead of throwing everything under /opt/domoticz.

The problem is that dzVents scripts added via the webinterface will be
generated on the filesystem. With the 902_add-scripts-path patch,
Domoticz tried to write this to "scriptsdir/dzVents/generated_scripts".
As the scriptsdir contains scripts that come with upstream, and are not
meant to be changed, this defaults to /usr/share/domoticz/scripts, which
is not writeable, so Domoticz is unable to write the script to the
filesystem. What is worse is that this silently fails.

Fix this by moving the generated_scripts dir to
"userdatadir/generated_scripts". The userdatadir defaults to
/var/lib/domoticz, which is writeable.

Additionally, since this patch does more than just adding the scripts
path, rename it to something more appropriate.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-09-20 01:00:41 +03:00
Stijn Tintel b5c75be32b strongswan: bump to 5.6.0
Fixes CVE-2017-11185.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-28 19:40:03 +03:00
Stijn Tintel fd7094027c bind: disable lmdb
When building on hosts with lmdb installed, bind configure phase fails:

  configure: error: found lmdb include but not library.

Solve this by disabling lmdb. Fixes #4748.

Fixes: eab56b6bee ("bind: version update to 9.11.2")
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-24 18:17:29 +03:00
Stijn Tintel ba1ead54f0 strongswan: use -eq when testing booleans
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-07 20:19:18 +02:00
Stijn Tintel 6f00048eca strongswan: convert init script to procd
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-07 20:19:18 +02:00
Stijn Tintel b93a53bd94 strongswan: check return value instead of output
When the strongswan service is running, `ipsec status` returns 0. Check
the return value instead of checking its output.

While at it, remove the [[ ]] bashism, use rereadall instead of
(reread)secrets, and move it inside the if statement.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-07 20:19:18 +02:00
Stijn Tintel 44ef6048e2 strongswan: remove checks for UCI config
In commit 36e073d820, some checks were
added to see if the UCI config file exists and if there are any peers
configured in it. Due to these checks, if /etc/config/ipsec exists, but
contains no enabled peers, strongswan will not be started. This is not
ideal, as a user might want to experiment with the UCI config while
keeping existing connections in /etc/ipsec.conf operational.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-07 20:19:18 +02:00
Stijn Tintel 3097a8919e strongswan: add charon-cmd utility
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-07 20:19:18 +02:00
Stijn Tintel 6cd24ed87c strongswan: add missing charon config files
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-07 20:19:18 +02:00
Stijn Tintel 4e94a3ddfd strongswan: add swanctl utility
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-07 20:19:18 +02:00
Stijn Tintel 4bb5d8d892 strongswan: add vici plugin
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-07 20:19:18 +02:00
Stijn Tintel 0c30b50fe2 strongswan: rename -utils to -ipsec
Since the strongswan-utils package now only contains the aging ipsec
utility, rename it to strongswan-ipsec.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-07 20:19:18 +02:00
Stijn Tintel 1a621aaa35 strongswan: split scepclient into separate package
We currently include the SCEP client in strongswan-utils, which is a
dependency of the strongswan-default meta-package. As it's generally not
recommended to generate keys on embedded devices due to lack of entropy,
move the SCEP client to a separate package, and only depend on it in the
strongswan-full meta-package.

While at it, add scepclient.conf to the package.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-07 20:19:18 +02:00
Stijn Tintel ebf304edf6 strongswan: split PKI tool into separate package
We currently include the PKI tool in strongswan-utils, which is a
dependency of the strongswan-default meta-package. As it's generally not
recommended to generate keys on embedded devices due to lack of entropy,
move the PKI tool to a separate package, and only depend on it in the
strongswan-full meta-package.

While at it, add pki.conf to the package.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-07 20:19:18 +02:00
Stijn Tintel 0c52d40710 domoticz: remove additional files from package
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-07 20:19:18 +02:00
Stijn Tintel da7a73b89b domoticz: bump to 3.8153
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-07-31 16:47:55 +02:00
Stijn TintelandGitHub 0aa457d126 Merge pull request #4566 from dedeckeh/pr-netsnmp-config
netsnmp: add global enabled config option
2017-07-11 11:25:12 +02:00
Stijn Tintel ebc92cb98b domoticz: removed hardcoded userdata path
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-06-29 13:18:39 +02:00
Stijn TintelandGitHub 4aa412183e Merge pull request #4484 from pprindeville/net-snmp-add-config-symlink
net-snmp: add symlink for net-snmp-config into usr/bin
2017-06-22 03:38:23 +02:00
Stijn TintelandGitHub 29d38eaa76 Merge pull request #4273 from dedeckeh/pr-netsnmp-trap
net-snmp: add notification config options
2017-06-20 05:44:19 +02:00
Stijn Tintel 4660504c61 strongswan: fix typo
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-05-30 19:25:54 +02:00
Stijn TintelandGitHub 916f14aacf Merge pull request #4208 from dedeckeh/pr-netsnmp-fw
net-snmp: add inbound firewall rule support
2017-05-30 16:01:40 +02:00
Stijn Tintel a268689adc strongswan: add curve25519 plugin
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-05-30 15:14:13 +02:00
Stijn Tintel 960006be50 strongswan: bump to 5.5.3
Fixes CVE-2017-9022, CVE-2017-9023.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-05-30 15:14:04 +02:00
Stijn Tintel 18b076ab93 strongswan: bump to 5.5.2
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-04-26 23:31:27 +02:00
Stijn TintelandGitHub 71ca24ccb9 Merge pull request #3566 from nikil/moreutils
moreutils: Add package
2017-03-19 15:09:18 +01:00
Stijn Tintel 1381e528e0 giflib: add host build
This is required for Kodi's TexturePacker.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-03-18 15:27:17 +01:00
Stijn TintelandGitHub 724cc5251f Merge pull request #4129 from lucize/dovecotdeps
dovecot: fix depends typo
2017-03-09 10:16:43 +01:00
Stijn TintelandGitHub 7db2439564 Merge pull request #3585 from dedeckeh/strongswan_uci
strongswan: UCI support
2017-03-09 03:59:56 +01:00
Stijn TintelandGitHub 7087d7c560 Merge pull request #4109 from lucize/doveupsqlite
dovecot: update to 2.2.28 and add SQLite support
2017-03-09 03:40:04 +01:00
Stijn TintelandGitHub 8a2199fba7 Merge pull request #4119 from stintel/cleanup
Cleanup: avoid reuse of $(PKG_NAME)
2017-03-08 21:16:24 +01:00
Stijn Tintel f82287cf5c treewide: use name in define and eval lines
For consistency, use full name instead of $(PKG_NAME) in define and eval
lines for all packages.

I've seen reviews that asked to do this before, and I am asking the same
during reviews now. To avoid this in the future, fix this treewide so
when people use existing packages as example, we will not have to
request this change anymore.

This makes all packages consistent with both LEDE and OpenWrt base
repositories.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-03-08 21:15:20 +01:00
Stijn TintelandGitHub 694e5a677c Merge pull request #4108 from lucize/postsqlite
postfix: Add SQLite support and fix musl compile without POSTFIX_TLS
2017-03-08 16:05:54 +01:00
Stijn TintelandGitHub c4cbcb30b7 Merge pull request #3938 from stintel/domoticz
Add Open-ZWave and Domoticz
2017-03-03 04:22:51 +01:00
Stijn Tintel 042933714a domoticz: new package
Signed-off-by: David Woodhouse <dwmw2@infradead.org>
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-03-03 01:56:21 +01:00
Stijn Tintel 14f01cb946 openzwave: new package
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-03-03 01:56:21 +01:00
Stijn Tintel ec6712fead net-snmp: enable agent/extend MIB
Closes #4085.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-03-01 12:17:02 +01:00
Stijn Tintel 5081551ae8 net-snmp: add engineID config options
According to the snmpd.conf man page, the engineID of an snmp agent
should be consistent through time. However, it seems that the engineID
changes every reboot. Add options to configure how the engineID is
generated. The default setting generates it based on the MAC address of
the eth0 interface.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-02-14 15:17:07 +01:00
Stijn Tintel b408a80e93 vallumd: bump to 0.1.3
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-02-10 09:31:09 +01:00
Stijn Tintel f84dfc1c06 strongswan: enable IKEv2 Mediation Extension
Closes #3905.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-01-30 14:05:05 +01:00
Stijn Tintel 554d096512 vallumd: bump to 0.1.2
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-01-20 06:39:36 +01:00
Stijn Tintel 0eb9dbdd1e vallumd: bump to 0.1.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-01-15 23:53:04 +01:00
Stijn Tintel 42aeb06308 net-snmpd: convert snmpd-static to dummy package
We believe snmpd-static isn't useful, but download stats show it's still
being downloaded. Instead of dropping it, make it a dummy package that
depends on snmpd.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Acked-by: Jo-Philipp Wich <jo@mein.io>
2017-01-15 18:17:58 +01:00
Stijn Tintel 2335ad51d6 vallumd: new package
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-01-14 05:49:21 +01:00
Stijn Tintel 74e436fac5 net-snmp: fix libnl dependency for snmpd-static
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-01-06 02:56:03 +01:00
Stijn Tintel 0368739eac net-snmp: enable AgentX support
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-01-05 14:44:45 +01:00
Stijn Tintel 28275a74c2 keepalived: fix recvmsg/sendmsg on mips64 again
Commit e73964fa8f incorrectly dropped the
patch 101-update-struct-msghdr.patch. Add it again, and while add it
also add the follow-up patch that was added upstream.

Fixes #3757.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-01-04 19:02:03 +01:00
Stijn Tintel 8915b1e03b net-snmp: fix libnl dependency
When libnl-core is enabled, but libnl isn't, build fails because of a
missing dependency on libnl-3.so.200. Depending on libnl-core seems to
work for both cases.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-01-04 13:16:56 +01:00
Stijn Tintel e6b554763e net-snmp: take over maintainership
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-01-03 19:40:59 +01:00
Stijn Tintel 5e69d51463 bind: disable libjson support
If libjson-c is detected during bind-libs configure phase, bind-libs
will be built with libjson support. This results in a missing dependency
error during install phase. Solve this by disabling libjson support.
2016-11-29 12:39:29 +01:00
Stijn Tintel 37f4ba2377 strongswan: take over maintainership
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-10-31 11:01:30 +02:00
Stijn Tintel 7d0ee222df strongswan: bump to 5.5.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-10-31 11:01:30 +02:00
Stijn Tintel fc67bf7c2b strongswan: preserve /etc/strongswan.d during upgrade
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-10-31 11:01:30 +02:00
Stijn Tintel 108197ddcf strongswan: bump to 5.4.0
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-07-06 19:54:40 +02:00
Stijn Tintel 475be1df93 strongswan: add forecast plugin
Closes #1868.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-07-06 19:54:40 +02:00
Stijn Tintel 06cf48b15e strongswan: fix alignment in connmark plugin
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-07-06 19:54:40 +02:00
Stijn Tintel 064d166efd strongswan: run sleep with integer argument
The default busybox config used by OpenWrt does not enable floating
point number support for the sleep applet. This can cause an error when
stopping or restarting strongswan:

sleep: invalid number '0.1'

Replace the float with an integer to fix this.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-07-06 19:54:40 +02:00
Stijn Tintel 9668d0244f keepalived: fix recvmsg/sendmsg on mips64
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-06-09 15:14:19 +02:00
Stijn Tintel 7ea7af5125 pciutils: remove eudev dependency
Disable udev hwdb support instead of depending on eudev. This restores
the old behavior of pciutils. It never depended on udev.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-03-27 04:34:49 +02:00
Stijn Tintel a82363f0af node-serialport: add node host dependency
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-03-17 10:37:10 +01:00
Stijn Tintel 0498c8ae20 node-hid: add node host dependency
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-03-17 10:36:47 +01:00
Stijn Tintel a64623683d node-cylon: add node host dependency
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-03-17 10:35:53 +01:00
Stijn Tintel 2b8a17de01 node-arduino-firmata: add node host dependency
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-03-17 10:34:56 +01:00
Stijn Tintel 2789e6b3f3 ddns-scripts: uclient-fetch supports -4/-6
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-02-29 11:38:23 +01:00
Stijn Tintel 5b1e9eefd0 net-snmp: reload snmpd on interface events
When applying wireless configuration changes, the ifindex of the
wireless interface(s) change. While snmpd picks up the new interfaces
with the correct index, it does not remove the old ones:

IF-MIB::ifName.23 = STRING: wlan0
IF-MIB::ifName.24 = STRING: wlan1
IF-MIB::ifName.25 = STRING: wlan0
IF-MIB::ifName.26 = STRING: wlan1

This causes problems for monitoring tools that use ifName (or ifDesc) as
interface reference. Add a trigger that reloads snmpd on interface
up/down events so that it will no longer have the old interfaces.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-02-20 16:46:17 +01:00
Stijn Tintel e8d9c06e2e strongswan: preserve /etc/ipsec.d during upgrade
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-01-19 15:36:15 +01:00
Stijn Tintel f3d1722bb2 strongswan: add upstream patch for bug in 5.3.4
See https://wiki.strongswan.org/issues/1213

Removed the changes to charon-xpc.c because they didn't apply and are
only used on OS X anyway.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2015-11-28 12:38:40 -05:00
Stijn Tintel 2eae664f5f tor: remove optional dependency on libssp
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2015-03-20 18:23:39 +01:00
Stijn Tintel e996c1cc36 openssh: remove optional dependency on libssp
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2015-03-20 17:46:37 +01:00
Stijn Tintel 54b01d214f ethtool: remove optional dependency on libssp
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2015-03-20 17:46:00 +01:00
Stijn Tintel 735a525ee8 avahi: remove optional dependency on libssp
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2015-03-20 17:45:23 +01:00
Stijn Tintel bee2865492 net-snmp: monitor ifindex changes
When an ifindex for an interface changes, some monitoring tools can no
longer find the interface and send alerts. Monitor all network
interfaces via the procd netdev parameter, so that
/etc/init.d/snmpd reload will restart snmpd if any ifindex changed.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2015-02-18 06:19:59 +01:00
Stijn Tintel 53fc8d3191 net-snmp: cosmetic changes in snmpd init script
- Refactor RUN_C into CONFIGFILE, as used in dnsmasq and igmpproxy init
  scripts.
- Add a newline after each function definition.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2015-02-18 06:01:19 +01:00
Stijn Tintel 8faff3334f net-snmp: convert snmpd to procd
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2015-02-18 05:05:27 +01:00
Stijn Tintel e2b43afc85 net-snmp: remove /etc/default/snmpd Debianism
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2015-02-18 04:46:05 +01:00