Commit Graph
6780 Commits
Author SHA1 Message Date
Jeffery ToandEneas U de Queiroz 1c54706b97 libevhtp: Fix dependencies not selected when building static library
When libevhtp is added to a package's PKG_BUILD_DEPENDS (i.e. for
seafile-server), libevhtp's target package dependencies are not
automatically selected, in particular libevent2-openssl and
libevent2-pthreads.

Moreover, if libevent-openssl and libevent2-pthreads are not selected,
OpenSSL and thread support are disabled when compiling libevent2, which
in turn causes a compile error when building libevhtp.

This adds a config option, LIBEVHTP_BUILD_DEPENDS, that will select
libevent2-openssl and libevent2-pthreads (via LIBEVHTP_BUILD_SELECT)
when it is selected.

Other build dependencies are moved to PKG_BUILD_DEPENDS.

This also updates seafile-server to remove the (indirect) dependencies
added in 13d843fec1 and instead select
LIBEVHTP_BUILD_DEPENDS.

This also updates the maintainer's email address and adds myself as
another maintainer.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-05 23:03:30 -03:00
Philip Prindeville 73fa0c963d openssh-server: deprecate the ecdsa HostKey
The init.d script for sshd never generates an ecdsa HostKey as seen
here:

	for type in rsa ed25519
	do
		# check for keys
		key=/etc/ssh/ssh_host_${type}_key
		[ ! -f $key ] && {
			# generate missing keys
			[ -x /usr/bin/ssh-keygen ] && {
				/usr/bin/ssh-keygen -N '' -t $type -f $key 2>&- >&-
			}
		}
	done

so we'll never succeed at loading one.  Get rid of the resultant
error message in logging:

May  5 17:13:59 OpenWrt sshd[20070]: error: Unable to load host key: /etc/ssh/ssh_host_ecdsa_key

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2020-05-05 18:03:56 -06:00
Syrone Wong 48d9521ecd wsdd2: fix infinite loop when BI_PARM is never set
If BI_PARM is never set, it's "" and causes
infinite loop (before my PR sent upstream) or
error out (after my PR sent upstream).
Append -b option only if it's valid.

Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
2020-05-06 07:59:52 +08:00
Rosen PenevandGitHub 48ae81f9a7 Merge pull request #12079 from stangri/master-vpn-policy-routing
vpn-policy-routing: support phys-dev policies
2020-05-04 22:24:48 -07:00
Eiji MATSUMOTO f4e9f07391 freeradius3: Fix to init script.
To use eap tls, 'tmpdir' must be created before server starts.
This 'tmpdir' is used to store and verify client certificate,
and therefore radiusd do 'chmod go-rwx'.

If 'tmpdir' does NOT exists, server failed to start and default
'tmpdir' is '/tmp/radiusd'. So init script MUST create default
'tmpdir' like other directories.

Signed-off-by: Eiji MATSUMOTO <toudaiman@gmail.com>
2020-05-05 12:03:10 +09:00
Stan Grishin 7bb2ccd4e1 vpn-policy-routing: support phys-dev policies
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-04 22:47:32 +00:00
Peter Stadler e8ef54f640 uwsgi: make luci-webui single threaded and log more
More threads can lead to a problem if a luci-app makes a fork
(e.g. for executing a command). Parallelism is still achieved
by using `processes = 3`.
Make the log more verbose by filtering only standard messages
for start/stop/reload out (leaving one line each).

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-05-04 21:57:43 +02:00
Toke Høiland-Jørgensen ef61a2be50 acme: Bump acme.sh to v2.8.6
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-05-04 10:36:42 +02:00
Toke Høiland-Jørgensen b88b678004 acme: Remove luci-app-acme
The Luci app for ACME has been moved to the luci package feed.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-05-04 10:23:35 +02:00
Florian EckertandFlorian Eckert d009ce628b keepalived: update PKG_RELEASE number
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian EckertandFlorian Eckert 1b1ba71063 keepalived: add script security param to fix warning
Openwrt is a single user system. So keepalived is runnig as root.
If we add the config options `script_user root` and
`enabled_script_security' the following warnings are gone.

> local1.info Keepalived_vrrp[5382]: SECURITY VIOLATION - scripts are
being executed but script_security not enabled.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian EckertandFlorian Eckert cc9e4d3b82 keepalived: move linkbeat_use_polling section into main section
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian EckertandFlorian Eckert c4d1af42e8 keepalived: move alt_config_file check into process_config
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian EckertandFlorian Eckert 9b24763b9f keepalived: add upgrade script for globals section
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Rosen PenevandGitHub fd7e741474 Merge pull request #12039 from lucize/frrref
frr: makefile cleanup and misc fixes
2020-05-03 15:34:08 -07:00
Rosen PenevandGitHub d654eedc8f Merge pull request #12069 from stangri/master-vpn-policy-routing
vpn-policy-routing: bugfix: remove non-ASCII from log; update README
2020-05-03 14:32:49 -07:00
Hannu NymanandGitHub ba3d8d5794 Merge pull request #12056 from stangri/master-vpnbypass
vpnbypass: bugfix: remove non-ASCII from system log; update README
2020-05-03 22:52:24 +03:00
Stan Grishin 64fe1db6ca vpn-policy-routing: bugfix: remove non-ASCII from log; update README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-03 19:45:29 +00:00
Matthias Schiffer 25babf817f wifidog-ng: remove incorrect PKG_BUILD_DIR override
As wifidog-ng builds a kernel module, it must use a PKG_BUILD_DIR in
KERNEL_BUILD_DIR instead of BUILD_DIR, otherwise old build artifacts may
be incorrectly reused when switching between different targets of same
architecture without a full clean.

Instead of fixing up the override, just remove it and instead move the
kernel.mk include above package.mk, so PKG_BUILD_DIR is set up correctly
by default.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2020-05-03 21:08:30 +02:00
W. van den Akker a92b98d926 Shorewall6: Bump to 5.2.4.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-03 19:02:25 +02:00
W. van den Akker 48544d330f Shorewall: Bump to 5.2.4.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-03 19:01:21 +02:00
W. van den Akker f1ca939459 Shorewall6-lite: Bump to 5.2.4.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-03 19:00:15 +02:00
W. van den Akker cc72bef515 Shorewall-lite: Bump to 5.2.4.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-03 18:58:31 +02:00
W. van den Akker 211bb322d3 Shorewall-core: Bump to 5.2.4.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-03 18:57:13 +02:00
Warren Ng a22b190ca8 sslh: Add http probe support
Signed-off-by: Warren Ng <looklookson@gmail.com>
2020-05-03 10:58:40 +08:00
Lucian Cristian 7d2c647f2d frr: makefile cleanup and misc fixes
fix mips runtime by backporting some yang changes from master
added commited fixes to 7.3
also add option for snmp support

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-03 03:06:20 +03:00
Stan Grishin 4bfd3435bb vpnbypass: bugfix: remove non-ASCII from system log; update README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-02 22:35:32 +00:00
Jeroen Peelaerts e297ffbe34 ddns-scripts: Add digitalocean as DDNS provider
Signed-off-by: Jeroen Peelaerts <jeroen.peelaerts@gmail.com>
2020-05-03 00:15:13 +02:00
Jan PavlinecandNoah Meyerhans c8be44062e bind: update to version (security fix)
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-01 11:56:56 -07:00
Nikos Mavrogiannopoulos 997723342b ocserv: updated to 1.0.1
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-05-01 19:18:37 +02:00
Nikos Mavrogiannopoulos d58c3d48a5 openconnect: updated to 8.09
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-05-01 19:18:37 +02:00
Nikos MavrogiannopoulosandGitHub 5782406697 Merge pull request #11798 from GuLinux/patch-1
openconnect: Allow to set `usergroup` option
2020-05-01 13:39:03 +02:00
Ian Cooper 3b58e317f6 snort: bump to 2.9.15.1
Fix compilation error with x86_64 glibc

Fix changed download location on snort.org

Signed-off-by: Ian Cooper <iancooper@hotmail.com>
2020-04-30 18:51:19 +01:00
Rosen PenevandGitHub 07998f702e Merge pull request #12021 from eglooca/master
netifyd: Updated to v3.00
2020-04-30 10:27:27 -07:00
Antti Seppälä cf6027f0b0 uacme: add support for user-provided setup and cleanup scripts
Add possibility for user to provide setup and cleanup scripts for
additional flexibility. Setup-script takes precedence over the built-in
behavior of uacme.

This helps users with more complex use-cases to utilize uacme to update
certificates without adding complexity to the provided run.sh script.

Signed-off-by: Antti Seppälä <a.seppala@gmail.com>
2020-04-30 19:17:54 +03:00
Antti Seppälä debe65dffe acme: add support for user-provided setup and cleanup scripts
Add possibility for user to provide setup and cleanup scripts for
additional flexibility. Setup-script takes precedence over the built-in
behavior of acme.

This helps users with more complex use-cases to utilize acme to update
certificates without adding complexity to the provided run.sh script.

Signed-off-by: Antti Seppälä <a.seppala@gmail.com>
2020-04-30 19:17:54 +03:00
Darryl Sokoloski eb3b21ba77 netifyd: Updated to v3.00
Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
2020-04-30 11:14:46 -04:00
Brian J. MurrellandFlorian Eckert b017fe34dd mwan3: Update Makefile
Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2020-04-30 14:55:20 +02:00
Brian J. MurrellandFlorian Eckert 49cf5eac5c mwan3: Don't use /128 address for ping source
An interface can have both a /64 and a /128 from a provider.

In such a case, use the address from the /64 to do the ping check, not
the /128.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2020-04-30 14:55:20 +02:00
Rosen PenevandGitHub b375cd26db Merge pull request #11998 from jefferyto/uwsgi-pypi
uwsgi: Use pypi.mk to download source tarball
2020-04-29 15:59:38 -07:00
Huangbin Zhanandzhanhb bb4b974101 nginx: update all-module configurations
nginx-all-module also provides nginx-ssl and shoud have configuration file uwsgi_params

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2020-04-30 06:58:58 +08:00
Marco Gulino 6464166660 openconnect: Allow to set usergroup option in OpenConnect
Just adding the extra option `-g|--usergroup <group>` (required by the VPN server I'm currently using)

Signed-off-by: Marco Gulino <marco@gulinux.net>
2020-04-29 22:37:11 +01:00
Luiz Angelo Daros de Luca ca123aed63 switchdev-poller: netifd now keep dev down
Since 19.07, netifd will not try to bring a device up
after someone brought it down. This way, there is no need
to rename the device.

It also fixes a rename error on 19.07 when the *_down device
was being in use (by netifd?).

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-04-29 17:52:20 -03:00
Rosen PenevandGitHub 36095e4e4c Merge pull request #11997 from jefferyto/scapy-python-package
scapy: Use Python packaging, PyPI download
2020-04-29 13:43:24 -07:00
Rosen PenevandGitHub 5de150758b Merge pull request #12001 from jefferyto/radicale2-cleanup
radicale2: Clean up Makefile
2020-04-29 12:19:33 -07:00
Dirk Brenken 1aa4518dfc travelmate: fix captive portal detection
* made captive portal detection more bullet proof, fixes #11990

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-04-29 14:48:36 +02:00
Jeffery To bd48589e21 radicale2: Clean up Makefile
* Remove preinst, the default prerm script will stop the service
* Use default Python package filespec and shebang fix

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-29 17:48:46 +08:00
Toke Høiland-JørgensenandGitHub 62ef2a8839 Merge pull request #11968 from yangfl/master
acme: fix some errors
2020-04-29 11:24:32 +02:00
Rosen PenevandGitHub 2f7ce61037 Merge pull request #11989 from cherrot/ddns-cloudflare-v4
ddns-scripts: cloudflare.com-v4: Fix grep pattern
2020-04-29 02:08:50 -07:00
Jeffery To f304e57b35 uwsgi: Use pypi.mk to download source tarball
This also removes PKG_BUILD_DIR, which does not need to be explicitly
set.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-29 16:49:42 +08:00