Commit graph

8287 commits

Author SHA1 Message Date
Florian Eckert
075be5826c
Merge pull request #15471 from TDT-AG/pr/20200420-stunnel
stunnel: update to 5.59
2021-04-21 08:45:36 +02:00
Rosen Penev
b7d5b10532
Merge pull request #15449 from SibrenVasse/master
openssh: update to 8.6p1
2021-04-20 17:30:37 -07:00
Olivier Poitrey
b2b8589e43 nextdns: Update to version 1.32.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-20 15:08:38 +00:00
Sibren Vasse
cb1d8bd8ed openssh: update to 8.6p1
Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
2021-04-20 12:28:30 +02:00
Florian Eckert
2d56dbfc27 stunnel: update to 5.59
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-04-20 08:42:57 +02:00
Aaron Curley
e25f3bcfde
udp-broadcast-relay-redux: Add package
This commit is largely based on the work from Daniel Dickinson in
PR #2096 which was never merged. I tweaked it in a number of ways.
All bugs with this package are mine, not his.

Signed-off-by: Aaron Curley <accwebs@gmail.com>
2021-04-19 20:52:09 -07:00
Olivier Poitrey
c1984f8ff0 nextdns: Update to version 1.12.5
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-20 01:38:39 +00:00
Olivier Poitrey
4c4ebb1461 nextdns: Update to version 1.12.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-19 23:23:41 +00:00
Olivier Poitrey
4502bc6db3 nextdns: Update to version 1.31.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-19 22:50:28 +00:00
Philip Prindeville
e1abf0c3c7
Merge pull request #15436 from pprindeville/strongswan-gencerts-change-sysconfdir
strongswan: change name of config base directory
2021-04-18 17:32:22 -06:00
Dirk Brenken
c531b6daea
adblock: update to 4.1.1
* support the RPZ trigger 'RPZ-CLIENT-IP' to always allow/block certain
  clients based on their IP (currently only supported by bind!)
* avoid promiscuous mode in tcpdump setup for adblock reporting
* speed up dns report preparation
* support dns report mailing (/etc/init.d/adblock report mail)
* fix bind autodetection
* update LuCI-frontend (separate PR)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-17 16:53:30 +02:00
Rosen Penev
37f4d88cf2
Merge pull request #14656 from stintel/miniupnpd
miniupnpd: introduce IGDv1 variant
2021-04-16 18:24:36 -07:00
Rosen Penev
49966f2bec
Merge pull request #15328 from ja-pa/atlas-probe-v2
atlas-sw-probe: add new package
2021-04-16 18:23:17 -07:00
Philip Prindeville
9217aa859f strongswan: change name of config base directory
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-04-15 17:57:48 -06:00
Philip Prindeville
b34adb20b6
Merge pull request #15431 from pprindeville/strongswan-add-gencerts
strongswan: add certificate generation utility
2021-04-15 17:44:19 -06:00
Philip Prindeville
a3f625954a strongswan: add certificate generation utility
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-04-15 13:10:08 -06:00
Josef Schlehofer
27c6314e03
Merge pull request #15432 from turris-cz/clamav-add-libiconv-dependency
clamav: add libiconv dependencies when build with NLS
2021-04-15 17:11:28 +02:00
Josef Schlehofer
87be6ffe60
clamav: add libiconv dependencies when build with NLS
NLS means Native Language Support and when you have it enabled (it is
not default), clamav can not be compiled as it shows following error:

Package clamav is missing dependencies for the following libraries:
libiconv.so.2

Also, it is required that package libiconv-full is compiled first/before
than clamav and then try to compile clamav.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-04-15 09:44:30 +02:00
Philip Prindeville
c62d9ebec9
Merge pull request #15430 from pprindeville/strongswan-add-ipsec-warning
strongswan: add deprecation warning to ipsec script
2021-04-15 01:31:25 -06:00
Luiz Angelo Daros de Luca
2fe47aff5b openvpn-easy-rsa: add missing configfile
/etc/profile.d/50-openvpn-easy-rsa.sh was not listed as configfile
and changes were lost during upgrades.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2021-04-14 19:10:27 -07:00
Rosen Penev
a5f62ca8fb
Merge pull request #15421 from ja-pa/onionshare-v2
onionshare-cli: add new package
2021-04-14 19:10:01 -07:00
Rosen Penev
4dda77eccd ngircd: update to 26.1
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-14 19:06:42 -07:00
Eneas U de Queiroz
ee1a3654dc ocserv: don't build with libseccomp on ARC
libseccomp can't be built on ARC, so we must disable the option here as
well.  A different fix was first proposed by @zxlhhyccc in #15377.

Fixes: #15313

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-04-14 22:52:42 -03:00
Philip Prindeville
505db629de strongswan: add deprecation warning to ipsec script
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-04-14 12:27:07 -06:00
Philip Prindeville
41b536e22c
Merge pull request #15406 from pprindeville/strongswan-add-chacha20poly1305
strongswan: handle chacha20poly1305 as AEAD
2021-04-13 21:48:04 -06:00
Jan Pavlinec
ae069fad3d
onionshare-cli: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-04-14 00:38:12 +02:00
Rosen Penev
fb4655ab35 hcxdumptool: update to 6.1.6
Fix compilation without deprecated OpenSSL APIs.

Backport upstream patch to fix stdout.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-13 15:30:39 -07:00
Rosen Penev
f25755b0f9 hcxtools: update to 6.1.6
Add patch fixing compilation without deprecated OpenSSL APIs.

Fix installation. This never worked as the section was misnamed.

Updated tool names.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-13 15:30:39 -07:00
Philip Prindeville
ff33f4ccd3 strongswan: handle chacha20poly1305 as AEAD
chacha20policy1305 is also an AEAD cipher, and hence does not
permit a hash algorithm.

Fixes issue #15397.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-04-13 12:46:07 -06:00
Philip Prindeville
c95fd69973 strongswan: fail on serious configuration errors
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-04-13 12:46:07 -06:00
Philip Prindeville
210640d606 strongswan: drop subshell when possible
A subshell caused by $(...) can't persistently modify globals as a
side-effect.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-04-13 12:45:57 -06:00
Jan Pavlinec
eda48170ec
ooniprobe: update to version 3.9.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-04-13 16:44:40 +02:00
Florian Eckert
920d733876
Merge pull request #15379 from jow-/bonding-accept-uci-list
bonding: accept list of slaves in uci list notation
2021-04-13 09:29:22 +02:00
Rosen Penev
682aebbaea squid: update to 4.14
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-12 23:08:06 -07:00
Philip Prindeville
61b2a35a35
Merge pull request #15382 from cotequeiroz/strongswan
strongswan: libnttft must not select strongswan
2021-04-11 17:10:58 -06:00
Stan Grishin
cd11d8821f https-dns-proxy: bugfix: race condition with dnsmasq
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-04-10 16:58:51 -10:00
Stan Grishin
231d40053b simple-adblock: update to 1.8.7-3
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-04-10 17:08:51 -07:00
Daniel Golle
2d9b46e677
ovsd: improve package style and update source
Fix post-merge comments in #15316 and update source.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-10 16:56:44 +01:00
Gregory L. Dietsche
49535edffd safe-search: prevent duplicate cron job installation
This patch prevents multiple cron jobs from being created to run the
safe-search-maintenance script.

To reproduce this bug, perform the following:
  - Install safe-search
  - Perform an OpenWRT firmware upgrade (choose to preserve user settings)
  - Install safe-search again

Signed-off-by: Gregory L. Dietsche <gregory.dietsche@cuw.edu>
2021-04-10 14:28:25 +02:00
Eneas U de Queiroz
e50ba32402
strongswan: libnttft must not select strongswan
The strongswan-libnttfft package should not select the strongswan
package, but should depend on it instead.  Otherwise a circular
dependency is created.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-04-09 23:54:43 -03:00
Jo-Philipp Wich
57a77386de bonding: accept list of slaves in uci list notation
Rework the bonding.sh protocol handler to accept slave interface names
encoded in uci list notation. Also replace ifconfig up/down with ip
link calls while we're at it.

Fixes: #11455
Fixes: https://github.com/openwrt/luci/issues/4473
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-04-09 18:56:50 +02:00
Dirk Brenken
ec20e9df96
adblock: fix games_tracking source url
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-09 18:42:30 +02:00
Jan Pavlinec
c65a659e6d
atlas-sw-probe: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-04-09 15:21:32 +02:00
Jan Pavlinec
cb30c106c0
atlas-probe: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-04-09 15:21:32 +02:00
Philip Prindeville
e44b2665e7
Merge pull request #6924 from derekyerger/strongswan-lattice-sha3
strongswan: add more crypto plugins
2021-04-08 22:26:56 -06:00
Josef Schlehofer
7c80ef5f76
Merge pull request #15353 from ja-pa/knot-resolver-5.3.1
knot-resolver: update to version 5.3.1
2021-04-07 14:17:57 +02:00
Rosen Penev
c6fa2d5bfa ksmbd-tools: update to 3.3.8
Major changes are:
  disable symlink by default.
  remove smack inherit leftovers.
  Enable guest access on IPC$ share by default.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-07 00:46:54 -07:00
Kirill Nikolaev
272b0a5c18 ksmbd-tools: Add a mDNS TXT record for the ksmbd service
MacOS ignores Bonjour services for which TXT records are not returned. This changes forces umdns service to return a TXT record (`daemon=ksmbd`) for the ksmbd service. The exact content is unimportant and to the best of my knowledge nothing reads the `daemon` tag.

Symptoms of the problem (which are also debugging steps):
* Finder refuses to open the OpenWRT "computer" in the Network list.
* Discovery.app (Bonjour Browser) lists the _ssh._tcp service, but the submenu for it doesn't unfold and no address is shown.
* `dns-sd -L OpenWrt _smb._tcp` doesn't return any address.

Signed-off-by: Kirill Nikolaev <cyril7@gmail.com>
2021-04-07 00:46:54 -07:00
Jan Pavlinec
354523d5b5 ooniprobe: update to version 3.9.0
Remove getrescources call because it is no longer
required.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-04-07 10:17:23 +03:00
Jan Pavlinec
3e3025b191
knot-resolver: update to version 5.3.1
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-04-06 12:41:17 +02:00