Commit Graph

1108 Commits

Author SHA1 Message Date
Zoltan Herpai 5fe8c6140e Merge pull request #5103 from wigyori/for-15.05-wifidog
CC: wifidog: upgrade to 1.3.0 to fix build
2017-11-18 21:14:31 +01:00
Zoltan Herpai b017b246df Merge pull request #5101 from wigyori/for-15.05-tor
CC: net/tor: fix build and upgrade to 0.2.9.11
2017-11-18 12:57:25 +01:00
Thomas Heil 5df3860f23 Merge pull request #5111 from wigyori/for-15.05-nginx
CC: nginx: upgrade to 1.12.1
2017-11-13 10:28:25 +01:00
Zoltan Herpai 9faf1ea30c Merge pull request #5080 from wigyori/for-15.05
CC: update download URLs for various packages
2017-11-13 07:24:45 +01:00
Zoltan Herpai bb39456e41 Merge pull request #5098 from wigyori/for-15.05-stunnel
CC: net/stunnel: fix download source and upgrade
2017-11-12 22:50:48 +01:00
Zoltan HERPAI 942ad75e91 sshfs: upgrade to 2.10
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-12 20:57:16 +01:00
Thomas Heil 5db5399040 nginx: update lua-nginx to cdd2ae921f67bf396c743406493127be496e57ce
- fixes lua compilation issue

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2017-11-12 19:25:00 +01:00
Uwe Arnold 5837dfeb11 nginx: update to 1.12.1
Fixes: CVE-2017-7529

remove PKG_MD5SUM as it is deprecated

Signed-off-by: Uwe Arnold <donvipre@gmail.com>
2017-11-12 19:15:49 +01:00
Val Kulkov 90075956d2 nginx: update to 1.12.0, the latest stable version
This is a straightforward update to the latest stable version.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
2017-11-12 19:15:45 +01:00
Val Kulkov 066f648fb1 nginx: update to 1.10.3, add new module options
Update nginx to version 1.10.3.

Add new configuration options to enable the following optional
modules (disabled by default):
   - http_auth_request_module
   - http_v2_module
   - http_realip_module
   - http_secure_link_module

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
2017-11-12 19:15:39 +01:00
heil a7ee240daa nginx: bump version to latest stable 1.10.2
Signed-off-by: heil <heil@terminal-consulting.de>
2017-11-12 19:15:33 +01:00
Xotic750 055ac44d0b nginx: Bumped nginx-naxsi to v0.54
Signed-off-by: Graham Fairweather <xotic750@gmail.com>
2017-11-12 19:15:27 +01:00
Xotic750 15c041ac25 nginx: Bumped to v1.10.1
fixes NULL pointer dereference while writing client request body vulnerability (CVE-2016-4450).

Signed-off-by: Graham Fairweather <xotic750@gmail.com>
2017-11-12 19:15:20 +01:00
Dirk Feytons 63037f9ae4 nginx: change start level to 80
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2017-11-12 19:15:14 +01:00
Dirk Feytons 8fdd1db9d3 nginx: correct f3c7cc6
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2017-11-12 19:15:07 +01:00
heil a529b679a3 nginx: correct errors from previous merge
Signed-off-by: heil <heil@terminal-consulting.de>
2017-11-12 19:14:26 +01:00
Dirk Feytons 0912175ec1 nginx: upstep to 1.10.0, add Lua module, footprint optimizations
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2017-11-12 19:14:14 +01:00
heil a387117a2a nginx: bump to version 1.9.13
Signed-off-by: heil <heil@terminal-consulting.de>
2017-11-12 18:43:10 +01:00
heil 67a9f67cc4 nginx: add naxsi module
- this brings back naxsi support aka WAF for nginx

Signed-off-by: heil <heil@terminal-consulting.de>
2017-11-12 18:43:05 +01:00
Dirk Feytons 13021781b4 nginx: upstep to 1.9.9
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2017-11-12 18:42:59 +01:00
Luka Perkov d44b07c279 nginx: bump to 1.9.6
In this bump as agreed with Thomas we are dropping out all the nginx 3rd party
addons. In case you would like to see your 3rd party addon included please send
a pull request and make sure it works with newest version.

Signed-off-by: Luka Perkov <luka@openwrt.org>
2017-11-12 18:42:54 +01:00
Paul Fertser 3c7b3d57dd nginx: add support for SPNEGO authentication
This adds a module suitable for Kerberos SSO, e.g. for integrating
into Active Directory domains.

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2017-11-12 18:42:49 +01:00
heil ec14ed490a nginx: fix musl compatibility
- include Patches according to issue #1129
 - refresh Makefile

Signed-off-by: heil <heil@terminal-consulting.de>
2017-11-12 18:42:45 +01:00
Michael Haas 3df25df858 wifidog: Bump to 1.3.0
* Updates wifidog to latest upstream release.
* Removes patches/100-musl-compat.patch as that's included in 1.3.0

Signed-off-by: Michael Haas <haas@computerlinguist.org>
2017-11-10 18:39:13 +01:00
Jo-Philipp Wich eb0de8f114 wifidog: fix musl compatibility
- Fix missing `fcntl.h` in `protocol.c`
 - Replace nonstandard `sys/unistd.h` includes with `unistd.h` ones

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2017-11-10 18:39:08 +01:00
Hauke Mehrtens e37a60ef3a tor: update to version 0.2.9.11
This fixes CVE-2017-0376

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:07:34 +01:00
Hauke Mehrtens 7d5da97506 tor: update to version 0.2.9.10
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:07:29 +01:00
Hauke Mehrtens 83dba23e0a tor: update to version 0.2.9.9
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:07:22 +01:00
Hauke Mehrtens b05cb4e4bd tor: log to syslog by default
Make tor log to syslog by default instead of stdout.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:07:13 +01:00
Hauke Mehrtens e6ea3339fe tor: add tor-gencert, tor-resolve and torify
These are some additional applications build by the tor package.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:07:04 +01:00
Hauke Mehrtens 5228fe11d8 tor: add geoip6 to tor-geoip
This add the IPv6 addresses to the tor-geoip6 package.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:06:56 +01:00
Hauke Mehrtens 4001649ed5 tor: preserve tor keys over sysupgrade
Mark the directories containing the keys for hidden services as
conffiles to preserve them over sysupgrade.

Fixes: #2247

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:06:47 +01:00
Hauke Mehrtens 88e4f98f2c tor: update to version 0.2.9.8
In addition update some configure options and use EXTRA_CFLAGS.
Setting RunAsDaemon to 1 will be overwritten by the init script option
"--runasdaemon 0" anyway and we want it in foreground for procd.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:06:32 +01:00
Hauke Mehrtens 030c7796ef tor: update to version 0.2.8.11
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:05:50 +01:00
Nima Fatemi aa224c9ae1 Tor: update to 0.2.8.9
- update to 0.2.8.9
    - use sha256 instead of md5 for integrity check
    - add dependency: libcap

signed-off-by: Nima Fatemi <nima@torproject.org>
2017-11-10 14:05:39 +01:00
Felix Fietkau e02b4a7793 tor: add missing zlib dependency
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-11-10 14:05:25 +01:00
Karl Palsson 37b5a5761e tor: correct URL for dist downloads
Original url was 404.
Fixes Github issue #2284
2017-11-10 14:05:16 +01:00
Jeffery To da2c8cc672 tor: remove tor-fw-helper
The "internal pure-C" tor-fw-helper was removed in 0.2.7.5. This removes
the tor-fw-helper package and references to its dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2017-11-10 14:05:03 +01:00
Zoltan HERPAI 0396883a08 stunnel: use archive/ as download source
Anything below 5.43 is archived, update download source
to use paths accordingly.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-10 13:19:14 +01:00
Felix Fietkau 1c9d3861d8 stunnel: add missing zlib dependency
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-11-10 12:12:06 +01:00
Michael Haas c544adacd4 stunnel: Update from 5.14 to 5.20
* 010_fix_getnameinfo.patch is no longer needed
* 011-cron-without-pthread-fix.patch added, fixes incorrect
  ifdef when building without pthreads

Signed-off-by: Michael Haas <haas@computerlinguist.org>
2017-11-10 12:11:59 +01:00
Zoltan HERPAI becd747c1a net/sslh: move download source
The old download source was pulled from the net, move to github.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-10 12:04:52 +01:00
Zoltan HERPAI 86ff9a70f1 snort: update download source
2.9.7.2 was moved into the archive section, update
source accordingly until someone upgrades it.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-09 22:54:14 +01:00
Zoltan HERPAI e4a06b3679 netperf: move source to use github
With netperf.org's FTP gone, and the main site showing the source
has migrated to github, let's use it.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-09 01:55:57 +01:00
Zoltan HERPAI d23ac5b749 apache: fix download URL
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-07 16:50:25 +01:00
champtar c52b6f8a0e Merge pull request #3562 from MikePetullo/for-15.05-krb5
krb5: install include properly and leave libcom_err* in place
2017-07-15 16:57:57 -07:00
Glenn Strauss d1433a582c lighttpd: add new modules, upd URLs, add restart()
(with feedback from @hnyman and patch additions from @MikePetullo)

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2017-03-22 18:09:44 -04:00
Rafał Miłecki e71771676c lighttpd: fix regression in local-redir used with url.rewrite-once
This fixes upstream regression introduced in 1.4.40. It was reported &
debugged in https://redmine.lighttpd.net/issues/2793
This fix is queued for 1.4.46 in the personal/gstrauss/master upstream
branch.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2017-03-08 12:34:35 -05:00
Rafał Miłecki bec3da9759 lighttpd: update to 1.4.45
Update to 1.4.42 introduced a problem with starting lighttpd as
OpenWrt/LEDE service. It was stopping whole init process at sth like:
  783 root      1124 S    {S50lighttpd} /bin/sh /etc/rc.common /etc/rc.d/S50lighttpd boot
  799 root      1164 S    /usr/sbin/lighttpd -f /etc/lighttpd/lighttpd.conf

It was hanging until getting random pool:
[  176.340007] random: nonblocking pool is initialized
and then immediately the rest of init process followed:
[  176.423475] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[  176.430754] jffs2_build_filesystem(): unlocking the mtd device... done.
[  176.437615] jffs2_build_filesystem(): erasing all blocks after the end marker... done.

This was fixed in 1.4.44, but bump directly to 1.4.45 while at it.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2017-03-08 12:34:35 -05:00
W. Michael Petullo 1792f0f6b9 lighttpd: add option to build mod_authn_file.so
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2017-03-08 12:34:35 -05:00