Commit graph

272 commits

Author SHA1 Message Date
William Fleurant
6fdafc4155 luci-app-yggdrasil: support public key in config generation
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2023-11-18 09:38:47 +01:00
William Fleurant
2eb04431f0 luci-proto-yggdrasil: enhance communications to sysop
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2023-11-14 21:13:35 +01:00
William Fleurant
2fde5fb515 luci-proto-yggdrasil: add support for v0.5.2 features
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2023-11-12 12:49:50 +01:00
William Fleurant
6fa509d0e4 luci-proto-yggdrasil: getPeers calls yggctl with quoted url
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2023-11-12 12:26:36 +01:00
William Fleurant
6395c4d7a6 luci-proto-yggdrasil: yggdrasil now supported by netifd
- this package replaces luci-app-yggdrasil

Signed-off-by: William Fleurant <meshnet@protonmail.com>
2023-11-11 20:16:20 +01:00
Oskari Rauta
07eaf49b2a luci-proto-cni: protocol update
Updated luci support for updated netifd cni protocol 20231008:
openwrt/packages#22341

maintainer: me
build/test platform: x86_64, latest git

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-10-08 18:01:30 +03:00
Jonathan Duncan
527453ff48 luci-proto-wireguard: Escape IPv6 endpoints with [] in generated wireguard config
Signed-off-by: Jonathan Duncan <JonathanDuncan@gmail.com>
2023-09-24 16:16:35 +01:00
Florian Eckert
3f2320e0aa luci-proto-modemmanager: also allow none for preferredmode config option
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-09-01 09:52:13 +02:00
Florian Eckert
818bf22b8b luci-proto-modemmanger: register missing error codes
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-08-17 15:26:23 +02:00
Florian Eckert
1e6f52ac69 luci-proto-modemmanager: delete removed error codes
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-08-17 15:26:10 +02:00
Florian Eckert
3736d8b54d
Merge pull request #6508 from TDT-AG/pr/20230809-luci-proto-modemmanager
luci-proto-modemmanager: add allowed and preferred mode
2023-08-17 14:32:38 +02:00
Paul Dee
992cca55ae luci-proto-wireguard: grammar fixes
To setup (n) -> To set(v) up

Signed-off-by: Paul Dee <itsascambutmailmeanyway@gmail.com>
2023-08-11 13:21:45 +02:00
Florian Eckert
5b925ea92b luci-proto-modemmanager: add allowed and preferred mode
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-08-09 14:29:25 +02:00
Sergey Ponomarev
1eb42fbbce luci-app-vpnc: Remove LUA_TARGET
The app was migrated to JS so the LUA_TARGET is not needed.
Also remove LUCI_PKGARCH:=all which is anyway a default.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-08-03 17:48:58 +03:00
Lukas Voegl
594bc35b87 luci-proto-modemmanager: use helper in protocol
Signed-off-by: Lukas Voegl <lvoegl@tdt.de>
2023-06-30 15:52:28 +02:00
Lukas Voegl
54aa70112c luci-proto-modemmanager: add status page
Signed-off-by: Lukas Voegl <lvoegl@tdt.de>
2023-06-30 15:52:28 +02:00
Lech Perczak
c682e530e2 luci-proto-qmi: allow v6apn and (v6)profile configuration
To support split-APN dual-stack connections over QMI, add new parameters
supported in UCI to LuCI as well. Previously, connection profile wasn't
configurable from LuCI at all, so add options to set which APN profile
to match for each protocol.

Signed-off-by: Lech Perczak <lech.perczak@gmail.com>
2023-06-09 01:22:03 +02:00
Howard Chu
37176dc126 luci-proto-mbim: introduce package
Based on luci-proto-qmi
Tested with Sierra Wireless MC7455

Signed-off-by: Howard Chu <hyc@symas.com>

[Squashed. updated commit message, adjusted the parameters to match
upstream-accepted implementation of MBIM protocol]

Signed-off-by: Lech Perczak <lech.perczak@gmail.com>
2023-05-18 01:23:44 +02:00
Jo-Philipp Wich
b8ee30589b luci-proto-openconnect: relax key checking
Valid keys may begin/end with `-----BEGIN PRIVATE KEY-----` and
`-----END PRIVATE KEY-----` so make the `RSA` keyword optional.

Fixes: #6319
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2023-03-29 15:33:37 +02:00
Florian Eckert
71b7ecb777 luci-proto-modemmanager: fix acl regex to support more then 9 modem objects
If a modem is restarted often, the modem manager object number is
increased by one. Currently, the regex is set so that the modem can no
longer be selected if the object number is greater than 9. This change
fixes that.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[replace wildcard with rule duplication to disallow option injection]
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2023-03-16 00:05:18 +01:00
Jo-Philipp Wich
e11ff51b17
Merge pull request #6288 from oskarirauta/luci-cni-protocol
luci-proto-cni: add package
2023-03-15 14:09:04 +01:00
Oskari Rauta
8cd2793b2c luci-proto-cni: add package
adds support for cni-protocol in luci

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-03-15 14:54:23 +02:00
Jo-Philipp Wich
59a6f062d2 luci-proto-wireguard: use ddns lookup_host for peer hints
The `domain` option of a DDNS service entry may contain non-hostname values,
use the `lookup_hostname` option instead.

Fixes: #6289
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2023-03-14 23:36:39 +01:00
Jo-Philipp Wich
b200e0e90f luci-proto-openconnect: fix server url validation
The OpenConnect configuration form incorrectly assumed that the server
setting must be hostname while it actually may be a full URL.

Fixes: #6184
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2023-02-08 08:57:24 +01:00
Jo-Philipp Wich
41e9b8d121 Revert "luci-proto-openconnect: fix server url validation"
This reverts commit f1312cadc6.

The commit contained unrelated changes.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2023-02-08 08:56:36 +01:00
Jo-Philipp Wich
f1312cadc6 luci-proto-openconnect: fix server url validation
The OpenConnect configuration form incorrectly assumed that the server
setting must be hostname while it actually may be a full URL.

Fixes: #6184
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2023-02-07 11:53:31 +01:00
Jo-Philipp Wich
ae47caf383 luci-proto-autoip: fix protocol name
Fixes: 2965e527f5 ("luci-proto-autoip: add protocol support for avahi-autoipd")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-12-19 15:29:47 +01:00
Jo-Philipp Wich
2965e527f5 luci-proto-autoip: add protocol support for avahi-autoipd
Fixes: #6162
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-12-19 15:28:06 +01:00
Jo-Philipp Wich
785792a591 luci-proto-wireguard: fix configuration import
Avoid referencing not existing `peerdns` option during the configuration
file import process.

Fixes: #6136
Fixes: 2be01cbfcb ("luci-mod-network: restrict peerdns option to protocols that implemenent it")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-12-05 10:34:51 +01:00
Jo-Philipp Wich
22c51acf81 luci-proto-wireguard: fix loading peer descriptions
Explicitly load `network` uci in wireguard rpcd backend as `ctx.foreach()`
does not implicitly load it.

Also remove leftover test setup information from the status page source.

Fixes: #6095
Fixes: 008fa18878 ("luci-proto-wireguard: rewrite rpcd handler in ucode")
Fixes: 6e6fce3eb4 ("luci-proto-wireguard: merge status page functionality")
Ref: https://github.com/jow-/ucode/pull/126
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-11-23 13:20:42 +01:00
Jo-Philipp Wich
6e6fce3eb4 luci-proto-wireguard: merge status page functionality
Merge status page functionality from the separate `luci-app-wireguard`
package into the `luci-proto-wirguard` protocol backend.

Also rewrite the status page markup to be more compact while we're at it.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-11-22 10:56:36 +01:00
Julien Cassette
73aca68b9e luci-proto-wireguard: fix generated AllowedIPs
This corrects the option `AllowedIPs` in generated peer configurations,
and allows to customize it via a dropdown list.

Fixes: #5956
Signed-off-by: Julien Cassette <julien.cassette@gmail.com>
[correct fixes tag, slightly adjust option description]
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-11-09 21:00:56 +01:00
Jo-Philipp Wich
036424df5b treewide: add explicit Lua runtime dependencies where needed
Some packages require Lua libraries but do not ship with a luasrc directory,
add explicit dependencies in these cases.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-10-25 01:03:37 +02:00
Jo-Philipp Wich
008fa18878 luci-proto-wireguard: rewrite rpcd handler in ucode
Rewrite the wireguard rpcd plugin in ucode to prevent an implicit dependency
on the LuCI Lua runtime.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-10-25 01:03:37 +02:00
Stan Grishin
aff9f12440
Merge pull request #6023 from stangri/master-luci-proto-nebula
luci-proto-nebula: add nebula protocol support
2022-10-17 10:21:24 -07:00
Jaymin Patel
6be4bd886d luci-proto-vti: add vti protocol support
Signed-off-by: Jaymin Patel <jem.patel@gmail.com>
2022-10-14 19:53:39 +05:30
Stan Grishin
d55913cfa4 luci-proto-nebula: add nebula protocol support
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2022-10-14 12:02:56 +00:00
Florian Eckert
20ae64edec
Merge pull request #5968 from db260179/master
luci-proto-openconnect: Add options proxy server and reconnect timeout
2022-09-14 19:21:42 +02:00
David Bentham
1f25483953 luci-proto-openconnect: Add options proxy server and reconnect timeout support
Signed-off-by: David Bentham <db260179@gmail.com>
2022-09-10 19:54:18 +01:00
Hannu Nyman
38ce475bc9 luci-proto-unet: initial support
Initial support for the new unetd VPN daemon.

Currently this just enables seeing the VPN interface
in the LuCI network overview, plus the keys used.
No relevant config change possibilities, yet.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2022-09-06 23:48:56 +03:00
Florian Eckert
bce530e18c
Merge pull request #5448 from clayface/master
luci-proto-openfortivpn: cert/key PEM support, persistent option, SHA label fix
2022-08-11 07:53:38 +02:00
Matthew Hagan
57936a40c3 luci-proto-openfortivpn: Correct server certificate SHA label
According to the documentation[1], the SHA256 hash is used for the
trusted-cert option, not SHA1.

[1] https://github.com/adrienverge/openfortivpn/blob/master/doc/openfortivpn.1.in

Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2022-08-10 23:03:58 +01:00
Matthew Hagan
c084570d06 luci-proto-openfortivpn: add persistent reconnect option
Add ability to specify persistent reconnection interval.

Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2022-08-10 23:03:58 +01:00
Matthew Hagan
1f01a661c9 luci-proto-openfortivpn: add user, key, CA PEM support
Add PEM inputs and file handling for user cert, key and CA cert. This
handling is largely based upon that used in luci-proto-openconnect.

Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2022-08-10 23:03:54 +01:00
Jo-Philipp Wich
94bfa33452 luci-proto-wireguard: handle multiple peers in imported configuration
When importing a fully configuration, import all peer entries from it
instead of non-deterministically merging all peer keys into one.

When importing a remote configuration as peer, only use the setting from
the peer section matching our local interface pubkey.

Also relabel the `Import peer configuration` button to
`Import configuration as peer` in order to be more explicit.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-08-01 13:00:31 +02:00
Jalakas
049d876bc1 luci-proto-ncm: adds missing error messages, removes 'dialnumber' option, changes 'delay' according to real behavior
This commit:
Adds missing error messages and harmonizes message texts with comgt-ncm script. [1]
Removes option 'dialnumber' not used in comgt-ncm. [1][2]
Fixes option 'delay' according to comgt-ncm script real behavior. (No default value, if parameter is set, then there's always sleep) [1]

[1] https://github.com/openwrt/openwrt/blob/master/package/network/utils/comgt/files/ncm.sh
[2] https://github.com/openwrt/openwrt/blob/master/package/network/utils/comgt/files/ncm.json

Signed-off-by: Anari Jalakas <anari.jalakas@gmail.com>
2022-07-28 19:53:26 +03:00
Jo-Philipp Wich
2ae74b909b luci-proto-wireguard: configuration import improvements
- Reword texts in import dialogs for better clarity, use different
   descriptions for full import and peer import

 - Allow importing configurations without [Peer] section

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-07-23 20:24:09 +02:00
Jo-Philipp Wich
4d6642b636 luci-proto-ncm: rename service option to mode
Package luci-proto-ncm depends on comgt-ncm which uses an option
called 'mode' to set the radiomode of the modem. There is no option
'service' in the comgt-ncm scripts.

Suggested-by: breenstorm <49235337+breenstorm@users.noreply.github.com>
[fix commit subject, add commit message, rebase onto master branch]
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-07-23 13:18:03 +02:00
Jo-Philipp Wich
340183786e luci-proto-wireguard: gracefully deal with missing uci configs
The /etc/config/ddns in particular might not be present on the system,
don't fail if it is absent.

Fixes: #5838
Fixes: 9ba20645b0 ("luci-proto-wireguard: rewrite protocol handler")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-06-21 00:07:48 +02:00
Jo-Philipp Wich
4769bf11aa luci-proto-wireguard: grant uci read access to system and ddns config
The configuration export requires access to /e/c/system and /e/c/ddns for
external hostname hints.

Fixes: #5838
Fixes: 9ba20645b0 ("luci-proto-wireguard: rewrite protocol handler")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-06-20 23:58:07 +02:00