Commit graph

7528 commits

Author SHA1 Message Date
Rosen Penev
2d8029ad62
Merge pull request #13813 from aleksander0m/aleksander/longer-wait-for-init-events
modemmanager: increase initial timeout for event reporting
2020-11-02 00:44:05 -08:00
Rosen Penev
e2b813e3f7
Merge pull request #13755 from r-salvaterra/tor
Tor: a couple of updates
2020-11-01 13:53:12 -08:00
Rosen Penev
5fb093c101
Merge pull request #13678 from oldium/update-fwknopd-defaults
fwknop: Use sensible defaults.
2020-11-01 13:50:37 -08:00
Rosen Penev
1a8daeac5e
Merge pull request #13653 from FinnixB/znc-multiple-listeners
znc: Add support for many configurable listeners for znc
2020-11-01 13:49:53 -08:00
Rosen Penev
a9307eafc8
Merge pull request #13816 from mlichvar/chrony-improvements
chrony: improve configuration and hotplug script
2020-11-01 13:44:28 -08:00
Rosen Penev
222cad4ccc kea: fix compilation with libcxx
Boost headers try to include experimental/string_view when std is less
than c++17. This does not work ith libcxx where this header is not
present.

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-10-31 18:23:28 -07:00
Josef Schlehofer
d442033941 bind: update to version 9.16.8
- DNS Flag Day 2020
(default EDNS buffer size changed from 4096 to 1232 bytes)

-- Added patch, which should be part of the next release
It fixes an issue while cross-compilation (I linked it in the commit
message with issue link)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-10-31 06:39:05 -07:00
Aleksander Morgado
9a16087fd6 modemmanager: increase initial timeout for event reporting
When the ModemManager daemon is started by the init script, we're
explicitly calling mm_report_events_from_cache() so that all the
hotplug events that happened before that moment are properly notified
to the newly launched daemon.

This initial reporting of events does a wait for the ModemManager
process to be available in DBus, and if the daemon isn't registered in
the bus in a given time, the process is considered failed:

  Sun Sep  6 16:20:02 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:02 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:03 2020 [2180]: <info>  ModemManager (version 1.14.6) starting in system bus...
  Sun Sep  6 16:20:03 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:04 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:05 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:05 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:06 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:06 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:07 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:07 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:08 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:08 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:09 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:09 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:10 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:10 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:11 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:11 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:12 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:12 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:12 2020 ModemManager: hotplug: error: couldn't report initial kernel events: ModemManager not running

Update the default wait time for this initial event notification from
10s to 60s, because there are cases where the daemon is slower to
boot, e.g. during the first boot after a sysupgrade.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-10-30 23:29:55 +01:00
Miroslav Lichvar
21c0f580f1 chrony: improve configuration
Extend configuration of NTP sources in UCI:
- Add nts option to enable NTS
- Add disabled option to allow inactive sources

Add nts section to UCI with:
- rtccheck option to disable certificate time checks on systems that
  don't have an RTC to avoid the chicken-and-egg problem (it is less
  secure, but still should be better than no NTS at all)
- systemcerts option to disable system certificates
- trustedcerts option to specify path to trusted certificates

Save NTS keys and cookies by default to avoid unnecessary NTS-KE
sessions when restarted or switching back to an already used NTS source.
Also, save the drift to stabilize the clock after chronyd restart.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2020-10-30 20:57:35 +01:00
Miroslav Lichvar
b9d6d6cdd0 chrony: improve hotplug script
- Use the chronyc onoffline command to update state of all sources
  per current routing configuration
- Don't ignore the "ifupdate" action
- Add NTP servers from DHCP for the interface that went up instead of
  the wan4+wan6 interfaces
- Save the servers to files loaded by the sourcedir directive to not
  lose them when chronyd is restarted, and remove them when the
  interface goes down

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2020-10-30 20:02:48 +01:00
Miroslav Lichvar
1dc8c501a6 chrony: rework loading of configuration
Instead of loading /etc/chrony/chrony.conf from the file generated from
the chrony UCI configuration, use the confdir directive in the main
config to load the generated file. This should make it obvious that
chrony is configured in UCI and it can also be easily disabled.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2020-10-30 20:02:11 +01:00
Florian Eckert
81b8d863a7
Merge pull request #13806 from TDT-AG/pr/20201029-stunnel
stunnel: update version to 5.57
2020-10-30 16:38:13 +01:00
Yousong Zhou
f07319d6b1 xl2tpd: bump to version 1.3.16
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-10-30 15:24:27 +08:00
Daniel Golle
c8bfe55026 nginx: adapt to changed ubus socket path
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-10-29 21:02:18 +02:00
Jan Pavlinec
aa80a02340 lighttpd: add config for logrotate
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-29 15:18:54 +01:00
Florian Eckert
18a130c6bb stunnel: update version to 5.57
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-10-29 12:49:41 +01:00
Jannis Pinter
b5259ef5da Add option for days until renewal
Signed-off-by: Jannis Pinter <jannis+openwrt@pinterjann.is>
2020-10-29 10:44:57 +01:00
Rui Salvaterra
6007751c63 tor: disable man pages and html manual generation
We don't need this on an embedded system.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2020-10-28 22:34:01 +00:00
Rui Salvaterra
929a5a9f0c tor: add a basic variant, without relay/bridge support
If relay/bridge support isn't required, this variant is about 300 kiB smaller
than the full tor daemon.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2020-10-28 22:33:53 +00:00
Rui Salvaterra
a519b90fd7 tor: improve readability of the packages help text
Whitespace before and after the description makes the package information much
more obvious.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2020-10-28 21:12:26 +00:00
Matthieu Baerts
dfc8fdf5e5 ifstat: import fixes from Debian package
Extracted from:

  http://deb.debian.org/debian/pool/main/i/ifstat/ifstat_1.1-8.1.diff.gz

Note that I also created a new git repository with these fixes:

  https://github.com/matttbe/ifstat/

The original author of these modification is:

  Goswin von Brederlow <goswin-v-b@web.de>

ChangeLog:

  * snmp.c: fix 2 pointer targets differ in signedness warnings
  * Adding upport for 64bit /proc/net/dev counters.
  * Clean up compiler warnings.

More modifications are available in the patch from the Debian project
but mostly related to the "debian" dir, man page and debug mode. Here I
only took the modifications related to the .c and .h files.

The most important fix is related to the support for 64bit counters in
/proc/net/dev instead of displaying 0 after a while.

Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net>
2020-10-27 23:53:28 -07:00
Daniel Salzman
67e3c594de knot: disable libnghttp2 autodetection
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
2020-10-27 18:04:00 +02:00
Florian Eckert
ca5dc9754f
Merge pull request #13752 from TDT-AG/pr/20201023-xinetd
xinetd: some changes
2020-10-27 09:21:16 +01:00
Rosen Penev
3fa36bf958 softethervpn: update to 4.34-9745
Several patch changes regarding to OpenSSL as this version does not
compile under LibreSSL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-10-26 21:46:20 -07:00
Rosen Penev
56e4edad82 transmission: remove variants and use libcurl's TLS library
Allows the Makefile to be cleaned up and to have fewer dependencies.
There's no need for multiple TLS libraries to be installed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-10-26 21:45:32 -07:00
Rosen Penev
7b5513659f
Merge pull request #13768 from bmork/conserver
conserver: update to version 8.2.6
2020-10-26 19:33:10 -07:00
Olivier Poitrey
2da8c48c39 nextdns: Update to version 1.8.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-10-26 20:45:16 +02:00
Jan Hak
4069bb1e72 knot: update to version 3.0.1
definition of PSELECT_COMPAT could be removed many years ago, is no longer needed

Signed-off-by: Jan Hak <jan.hak@nic.cz>
2020-10-26 17:45:32 +02:00
Mengyang Li
b6119433a5 openconnect: allow specify --protocol from config
openconnect v8.10 supports 4 VPN protocols

  --protocol=anyconnect  Compatible with Cisco AnyConnect SSL VPN, as well as ocserv (default)
  --protocol=nc          Compatible with Juniper Network Connect
  --protocol=gp          Compatible with Palo Alto Networks (PAN) GlobalProtect SSL VPN
  --protocol=pulse       Compatible with Pulse Connect Secure SSL VPN

This patch allows user to specify protocol use the new "vpn_protocol"
option and deprecate the old option "juniper" which seems to be missing in
the current openconnect client.

Signed-off-by: Mengyang Li <mayli.he@gmail.com>
2020-10-25 21:44:32 +01:00
Bjørn Mork
cff9e9e660 conserver: update to version 8.2.6
version 8.2.6 (October 19, 2020):
        - try and address license concerns with LICENSE.md
        - replace usleep with nanosleep (Rosen Penev <rosenp@gmail.com>)
        - console: Add 'k' option to exit on console-down (Mylène Josserand <mylene.josserand@collabora.com>)
        - Fix #48 - apply ipv4 CIDR access list when compiled with ipv6 support

Signed-off-by: Bjørn Mork <bjorn@mork.no>
2020-10-25 19:24:52 +01:00
Lucian Cristian
80ac8dac11 libreswan: update to 4.1
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-10-25 16:09:13 +02:00
Richard Gering
29a4f8bbb7 banip: Added packet logging feature. Resolved shellcheck warnings.
Signed-off-by: Richard Gering <rg4github@dutchies.us>
2020-10-24 16:20:21 -07:00
Helge Mader
2bba943e99 xinetd: update config sample to latest requirements
Signed-off-by: Helge Mader <ma@dev.tdt.de>
2020-10-23 11:15:20 +02:00
Helge Mader
90ab809f7f xinetd: include additional (runtime) directory in configuration file
The additional directory is created and can be used e.g. for configurations
which are created e.g. dynamically from an uci config.

Signed-off-by: Helge Mader <ma@dev.tdt.de>
2020-10-23 11:14:44 +02:00
Helge Mader
4a3e547f5d xinetd: save configurations in /etc/xinetd.d on sysupgrade
For applications writing their own xinetd configuration to the /etc/xinetd.d
directory it would be necessary to save them (e.g. a user edits them manually)

Signed-off-by: Helge Mader <ma@dev.tdt.de>
2020-10-23 11:14:07 +02:00
Helge Mader
65c49f0030 xinetd: update PKG_RELEASE to 9
Signed-off-by: Helge Mader <ma@dev.tdt.de>
2020-10-23 11:12:56 +02:00
Florian Eckert
dd719e4960 ddns-scripts: update sitelutions url
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-10-22 07:44:26 +02:00
Rosen Penev
b55f95dbd3
Merge pull request #13734 from Meano/fix-udpxy
udpxy: fix error 'enable verbose' command flag in init script
2020-10-21 15:23:37 -07:00
Rosen Penev
f64c1d6a91
Merge pull request #13183 from mrjoel/mrjoel/ddns-default-bindnetwork
ddns-scripts: use ip_source as bind_network default
2020-10-21 15:21:42 -07:00
Joel Johnson
5b362932a7 ddns-scripts: use ip_source as bind_network default
Fixes: #13182 on https://github.com/openwrt/packages

Signed-off-by: Joel Johnson <mrjoel@lixil.net>
2020-10-21 08:43:18 -06:00
Florian Eckert
9485b9401d
Merge pull request #13169 from aaronjg/mwan3-owner-procd
mwan3: mwan3track via default routing table and use procd from mwan3track & mwan3rtmon
2020-10-21 16:33:19 +02:00
Meano
568e381cd2 udpxy: fix error 'enable verbose' command flag in init script
Signed-off-by: Meano <meano@foxmail.com>
2020-10-21 15:39:53 +08:00
Pavel Demkovich
2f5f520971 znc: Add support for many configurable listeners
Function add_listener called from /etc/init.d/znc, but not implemented

Signed-off-by: Pavel Demkovich <finn@finnix.servebeer.com>
2020-10-20 21:06:05 +03:00
Rosen Penev
8ccfc1fc82
Merge pull request #13699 from peter-stadler/etesync-server
etesync-server: use relative path for static_url
2020-10-19 16:14:58 -07:00
Matthias Schiffer
f20908cbad
fastd: update to v21
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2020-10-19 21:52:43 +02:00
Dirk Brenken
4b0d029bb5
adblock: update 4.0.7-2
* switch all safesearch providers to dynamic ips (derived from cname)
* made the new safesearch approach compatible with bind-nslookup
* removed 3.x config compatibility code

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-10-19 09:32:37 +02:00
Yousong Zhou
6c50a78b65 ovn: bump to version 20.09.0
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-10-19 14:17:04 +08:00
Meano
0a23f1f066 acme: fix the 'Unknown parameter' problem caused by acme_server
Signed-off-by: Meano <meano@foxmail.com>
2020-10-19 01:47:43 +08:00
Dirk Brenken
d36fd57662
adblock: update 4.0.7
* fix aria2c download options
* fix report engine with empty domains
* fix safesearch ips of safe.duckduckgo.com (get ips dynamically)
* fix safesearch ips of safesearch.pixabay.com (get ips dynamically)
* add regional blocklist for italy
* shellcheck adjustments
* add test.sh for CI testing

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-10-18 17:06:32 +02:00
Peter Stadler
edb201b9d4 etesync-server: use relative path for static_url
Django 3.1 supports relative paths for static_url.
Use it to make it more flexible.
Minor fixes for upgrade:
* ignore-fail-on-non-empty for rmdir /usr/share/etesync-server/etesync_server
* do not stop service (it is stopped already and init file is removed)

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-10-17 21:29:44 +02:00