Commit Graph

1072 Commits

Author SHA1 Message Date
Dirk Feytons 8fdd1db9d3 nginx: correct f3c7cc6
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2017-11-12 19:15:07 +01:00
heil a529b679a3 nginx: correct errors from previous merge
Signed-off-by: heil <heil@terminal-consulting.de>
2017-11-12 19:14:26 +01:00
Dirk Feytons 0912175ec1 nginx: upstep to 1.10.0, add Lua module, footprint optimizations
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2017-11-12 19:14:14 +01:00
heil a387117a2a nginx: bump to version 1.9.13
Signed-off-by: heil <heil@terminal-consulting.de>
2017-11-12 18:43:10 +01:00
heil 67a9f67cc4 nginx: add naxsi module
- this brings back naxsi support aka WAF for nginx

Signed-off-by: heil <heil@terminal-consulting.de>
2017-11-12 18:43:05 +01:00
Dirk Feytons 13021781b4 nginx: upstep to 1.9.9
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2017-11-12 18:42:59 +01:00
Luka Perkov d44b07c279 nginx: bump to 1.9.6
In this bump as agreed with Thomas we are dropping out all the nginx 3rd party
addons. In case you would like to see your 3rd party addon included please send
a pull request and make sure it works with newest version.

Signed-off-by: Luka Perkov <luka@openwrt.org>
2017-11-12 18:42:54 +01:00
Paul Fertser 3c7b3d57dd nginx: add support for SPNEGO authentication
This adds a module suitable for Kerberos SSO, e.g. for integrating
into Active Directory domains.

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2017-11-12 18:42:49 +01:00
heil ec14ed490a nginx: fix musl compatibility
- include Patches according to issue #1129
 - refresh Makefile

Signed-off-by: heil <heil@terminal-consulting.de>
2017-11-12 18:42:45 +01:00
champtar c52b6f8a0e Merge pull request #3562 from MikePetullo/for-15.05-krb5
krb5: install include properly and leave libcom_err* in place
2017-07-15 16:57:57 -07:00
Glenn Strauss d1433a582c lighttpd: add new modules, upd URLs, add restart()
(with feedback from @hnyman and patch additions from @MikePetullo)

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2017-03-22 18:09:44 -04:00
Rafał Miłecki e71771676c lighttpd: fix regression in local-redir used with url.rewrite-once
This fixes upstream regression introduced in 1.4.40. It was reported &
debugged in https://redmine.lighttpd.net/issues/2793
This fix is queued for 1.4.46 in the personal/gstrauss/master upstream
branch.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2017-03-08 12:34:35 -05:00
Rafał Miłecki bec3da9759 lighttpd: update to 1.4.45
Update to 1.4.42 introduced a problem with starting lighttpd as
OpenWrt/LEDE service. It was stopping whole init process at sth like:
  783 root      1124 S    {S50lighttpd} /bin/sh /etc/rc.common /etc/rc.d/S50lighttpd boot
  799 root      1164 S    /usr/sbin/lighttpd -f /etc/lighttpd/lighttpd.conf

It was hanging until getting random pool:
[  176.340007] random: nonblocking pool is initialized
and then immediately the rest of init process followed:
[  176.423475] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[  176.430754] jffs2_build_filesystem(): unlocking the mtd device... done.
[  176.437615] jffs2_build_filesystem(): erasing all blocks after the end marker... done.

This was fixed in 1.4.44, but bump directly to 1.4.45 while at it.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2017-03-08 12:34:35 -05:00
W. Michael Petullo 1792f0f6b9 lighttpd: add option to build mod_authn_file.so
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2017-03-08 12:34:35 -05:00
Eric Luehrsen b166e66556 unbound: DNSSEC trust anchor roll for 2017
Carry both the 2010 and 2017 DS records until 2018.
Unbound complies with RFC5011 but fresh installs
need these anchors to get started.
https://www.icann.org/resources/pages/ksk-rollover
https://www.iana.org/domains/root

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2017-02-22 22:25:09 -05:00
Nikos Mavrogiannopoulos 592f849b5e ocserv: updated to 0.11.7
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2017-02-12 10:31:55 +01:00
Nikos Mavrogiannopoulos 2887c2c10f ocserv: explicitly disable lz4 building
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2017-02-12 10:30:26 +01:00
Christian Schoenebeck befb3e65c1 [for-15.05] ddns-scripts: New update url for service duiadns.net
- new update url for service "duiadns.net" #3969
- updated public_suffix_list.dat

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2017-02-09 21:49:05 +01:00
Christian Schoenebeck 1fd8ad1f6f [for-15.05] ddns-scripts: backport of 2.7.6-12
- fix detecting local ip from ip command #3834 and https://forum.lede-project.org/t/bugs-in-ddns-scripts/1000
- updated public_suffix_list.dat
- minor fixes to services files

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2017-01-18 21:54:55 +01:00
Christian Schoenebeck 76b15db6c3 [for-15.05] ddns-scripts: backport of 2.7.6-11
fix problem with detecting ip from nslookup

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2017-01-12 19:26:33 +01:00
Christian Schoenebeck 728f37ad15 [for-15.05] ddns-scripts: backport of 2.7.6-10
Backport of current version 2.7.6-10
- more services
- more functionality
- be prepared for next versions

compiled ipk-packages available at
https://github.com/chris5560/OpenWrt-Backports/tree/master/for-CC15.05.01/ddns-scripts_2.7.6-10

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2017-01-11 17:05:05 +01:00
Sven Roederer 259c96a1bc net-snmp: add package snmp-mibs
this installs the default MIBS-files under /usr/share/snmp/mibs .
Also aligns the defines to the same sorting-scheme.

backport of daeb5fd506

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
2017-01-05 22:34:24 +01:00
Dirk Brenken 1a64129034 adblock: update to 1.5.4
Apply adblock updates 1.5.3-1.5.4

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Original commit messages:

adblock: update 1.5.3
* make wget check more flexible,
  fix for broken wget package installations

adblock: bugfix 1.5.4
* CC/uclient-fetch compatibility fix
2016-11-27 20:31:08 +02:00
W. Michael Petullo 75333c03bb krb5: install include properly and leave libcom_err* in place
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-11-24 15:07:08 -05:00
Stephan Conrad 7e15eb3cff dnscrypt-proxy: apended /old to download url for 15.05 branch
Signed-off-by: Stephan Conrad <stephan@conrad.pics>
2016-11-24 13:37:29 +01:00
Nikos Mavrogiannopoulos 022d8a4dc2 ocserv: updated to 0.11.6
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-11-16 19:25:03 +01:00
heil 33380cf7e2 haproxy: revert update commits
- Revert "package haproxy: fix typo for buildvariant nossl"
 - Revert "haproxy: bump to version 1.6.9 mainline and pending patches"

Signed-off-by: heil <heil@terminal-consulting.de>
2016-11-10 18:47:56 +01:00
heil 3e74e44c00 package haproxy: fix typo for buildvariant nossl
Signed-off-by: heil <heil@terminal-consulting.de>
2016-11-10 00:05:03 +01:00
heil bec6d8fc8d haproxy: bump to version 1.6.9 mainline and pending patches
Signed-off-by: heil <heil@terminal-consulting.de>
2016-11-09 23:45:38 +01:00
W. Michael Petullo c6415452f5 lighttpd: update to 1.4.42
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-10-29 04:24:37 -04:00
Dirk Brenken ba76867c70 adblock: update 1.5.2
* turris omnia compatibility fix

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 65bcae0986)
2016-10-25 12:43:35 +03:00
Dirk Brenken d346839750 adblock: update to 1.5.1
Apply adblock updates 1.4.10-1.5.1

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Original commit messages:

adblock: update 1.4.10
- add 'enabled' check to iface hotplug event handler
- decrease startup priority from 99 to 90
- fix tab indentation in config

adblock: update 1.5.0
* add new 'envchk'function to check adblock environment only,
  i.e. check volatile firewall rules or uhttpd instances
  without list updates
* add new optional parm 'adb_loglevel',
  set it to "0" to mute output (print only errors)
* set hotplug priority to '90' as well (missed in the last commit)
* documentation update
* cosmetics

adblock: bugfix 1.5.1
* fix uhttpd detection in tcp 4+6 configurations
2016-10-13 15:59:29 +03:00
Nikos Mavrogiannopoulos adfaa8e0af ocserv: updated to 0.11.5
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-09-27 23:47:35 +02:00
Dirk Brenken 71aedf440b adblock: update to 1.4.9
Apply adblock updates 1.4.8-1.4.9

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Original commit messages:

adblock: update 1.4.8
* enhance the new query function:
   change the regex to find only the relevant blocklist entries
   add a recursive tld search to quickly identify domains for
whitelisting (see documentation)
     better result preparation
* add securemecca as new blocklist source
* documentation update

adblock: update 1.4.9
* refine query function (see online doc)
2016-09-19 15:59:33 +03:00
W. Michael Petullo a23e3d0c3a lighttpd: update to 1.4.41
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-09-13 23:19:58 -04:00
Karl Palsson 0e43c9c994 mosquitto: fix compatibily with libwebsockets
Only applies to the 15.05 branch!
Apply a patch to correct usage with the (rather old) version of
libwebsockets in CC.  Has been submitted upstream.

Fixes github issue #3127

Signed-off-by: Karl Palsson <karlp@etactica.com>
2016-09-05 11:38:28 +00:00
Dirk Brenken 124ac892c6 adblock: update 1.4.7
Apply adblock update 1.4.5-1.4.7

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Original commit messages:

adblock: update 1.4.5
* change the default hphosts list source to ad and tracking servers
only, the overall list includes to many false positives
* new optional config parm 'adb_hotplugif' to restrict hotplug support
to a certain wan interface or to disable it at all
* documentation update
* cosmetics

adblock: update 1.4.6
* added a 'window.close()' to adblock landing page to automatically
close any pop-ups that might get loaded with a blocked ad
* simplified dnsmasq check in ap mode

adblock: update 1.4.7
* add a query function to search the active blocklists for a specific
domain (/etc/init.d/adblock query <DOMAIN>)
* fix bug in ap mode/uhttpd port detection
* check general firewall and dnsmasq package dependencies and remove
redundant checks in ap mode
2016-08-28 17:34:30 +03:00
Karl Palsson 190d5698c6 mosquitto: Bump to 1.4.10
Full changelog: http://mosquitto.org/2016/08/version-1-4-10-released/

Relevant changes:
libwebsockets 2.0 compatibility
openssl 1.1.0 compatibility

Signed-off-by: Karl Palsson <karlp@etactica.com>
2016-08-25 16:13:08 +00:00
Dirk Brenken 7ea2bf5899 adblock: update 1.4.4
Update for-15.05 adblock from 1.2.1 to 1.4.4

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Original commit messages of 1.2.5-1.4.4 commits:

adblock: update 1.2.5
* restructured sources
* fix logical glitches in config handling
* many corner case fixes & cosmetics
* show runtime errors in LuCI (in lastrun section)

adbock: update 1.2.6
* small addition in case of a failed list download

adblock: update 1.2.7
* provide adblock statistics as a separate function
  (/etc/init.d/adblock stats)

adblock: update 1.2.8
* fw rule changes:
	force_dns now supports multiple lan devices
	disable needless force_dns- & forward/output-rules in 'ap mode'
	check return codes during adblock chain creation
* simplified the test for a running firewall
* documentation update

adblock: release 1.3.0
* revised hotplug script
* remove wget package dependency
* support uclient-fetch or wget with ssl support
* documentation update

adblock: update 1.3.1
* fix uclient-fetch detection
* cosmetics

adblock: update 1.3.2
* only a few more fixes

adblock: update 1.3.3
* enable automatic restore on empty source downloads

adblock: release 1.4.0
* rework/speed up overall sort
* simplified dns error handling

adblock: update 1.4.1
* fix two possible overflows in adblock statistics

adblock: update 1.4.2
* ad broad blocklist source 'hphosts' https://hosts-file.net

adblock: update 1.4.3
* fix race condition in restricted mode
* cosmetics

adblock: update 1.4.4
* filter non-printable characters/binary data in input stream
* fix IPv4 adblock statistics in CC
2016-08-14 19:23:04 +03:00
Nikos Mavrogiannopoulos da01e7e635 ocserv: updated to 0.11.4
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-08-06 13:17:19 +02:00
W. Michael Petullo ff5a1e4a83 dmapd: update to 0.0.73
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-07-09 16:11:53 -04:00
champtar a315fd65a8 Merge pull request #2914 from br101/for-15.05
horst: Use version 5.0
2016-07-03 23:45:21 +02:00
W. Michael Petullo df9eb01b4d nfs-kernel-server: fix segfault on x86_64/uClibc
Signed-off-by: W. Michael Petullo <mike@flyn.org>
[refresh patch]
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2016-07-02 23:25:00 +00:00
Bruno Randolf f59dbcfd7a horst: Use version 5.0
Signed-off-by: Bruno Randolf <br1@einfach.org>
2016-07-01 10:40:58 +01:00
heil d33b2c7ef9 haproxy: bump to version 1.5.18 and pending patches
Signed-off-by: heil <heil@terminal-consulting.de>
2016-06-21 01:09:09 +02:00
Nikos Mavrogiannopoulos 73892f2f18 openconnect: updated license
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-06-16 22:36:03 +02:00
Nikos Mavrogiannopoulos 3b3df642e4 ocserv: updated license
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-06-16 22:35:19 +02:00
Nikos Mavrogiannopoulos d5d893c31f ocserv: updated to 0.11.3
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-06-16 22:26:13 +02:00
Dirk Brenken d89f201d66 adblock: update 1.2.1
* small optimizations & cosmetics

adblock: release 1.2.0

* rework download/backup/restore handling
* rework firewall handling
* refine whitelist parsing
* changed default null-ip to 198.18.0.1 to prevent conflicts with bcp38
* spread traffic from ad servers (port 80/443) on two uhttpd instances,
this fixes timeouts on sites with many ssl ad server connections, i.e.
youtube.com
* provide statistics & last runtime for LuCI interface
* documentation update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 8ab3d8bdc2)
(cherry picked from commit 672dd10b10)
2016-06-16 11:18:10 +03:00
Karl Palsson f43f01ea15 net/mosquitto: update maintainer email address
Signed-off-by: Karl Palsson <karlp@remake.is>
Signed-off-by: Karl Palsson <karlp@etactica.com>
2016-06-06 10:52:41 +00:00