Commit graph

9172 commits

Author SHA1 Message Date
David Bauer
a6f2d72288 usteer: update to latest git head
98247d1 usteer: track RRM and BSS-TM support per connection
6ec60fc ubus: add BSS-transition-management support
f462de0 local-node: fetch bss-transition-management support
c5242dd ubus: add supported beacon-measurement modes
0dd47b1 local-node: convert kick-dely to absolute time
96976ba readme: add initial README

Signed-off-by: David Bauer <mail@david-bauer.net>
2022-02-19 22:36:51 +01:00
Christian Lachner
c48a375d9e haproxy: Update HAProxy to v2.4.13
- Update haproxy download URL and hash
- Updated upstream patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-02-17 19:29:30 -08:00
Lucian Cristian
58aa97cb8f uacme: proper ualpn integration
ualpn works only with openssl and gnutls, so default build will not have this included

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-02-17 19:29:24 -08:00
Tianling Shen
125da0f2f4 dnsproxy: Update to 0.41.2
Fixed typo error: `AUTORELESE` -> `AUTORELEASE`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-17 19:28:01 -08:00
Lucian Cristian
ce5755cc0b uacme: pack ualpn.sh
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-02-16 22:16:46 -08:00
Lucian Cristian
7f5dc09e5d frr: branch update, mips64 fix
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-02-16 22:15:41 -08:00
Josef Schlehofer
cb3eb63f77
Merge pull request #17850 from BKPepe/unbound
unbound: update to version 1.15.0
2022-02-16 09:15:45 +01:00
Luiz Angelo Daros de Luca
4e0d54f4d2 openvpn-easy-rsa: make it reproducible
The "build" script was replacing a ~DATE~ with current date.
Now it uses $(SOURCE_DATE_EPOCH).

Fixes #17848

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2022-02-15 16:41:50 -08:00
Rosen Penev
3ffd540b04 ksmbd-tools: update to 3.4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-02-14 19:50:14 -08:00
Jeffery To
b3869e1e46 obfs4proxy: Update to 0.0.13
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-02-14 17:16:54 -08:00
Etienne Champetier
66b7c19992 phantap: switch to nftables
e80be64 Remove disable_eap_hack
b066ce2 Switch to nftables / firewall4
4d88b0b Do not harcode build flags

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-02-12 23:20:54 -05:00
Sergey V. Lobanov
ac62437099 ipvsadm: fix build on macos
ipvsadm build fails on macos due to libipvs Makefiles uses system
`ar` that is not compatible with the objectes generated by OpenWrt
GCC Toolchain.

This commit adds patch to allow ar redefining
This commit modifes an old patch (removing CC=gcc is not required
due to it is redefinable)

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-02-12 15:18:06 -08:00
Nicholas Smith
8a878440bf modemmanager: bump to 1.18.4 with patch
The included patch corrects an issue preventing udev rules from
being parsed correctly. [1][2]

This patch should not be needed after the next release. [3]

More information:
[1] e9f254ba3f
[2] https://lists.freedesktop.org/archives/modemmanager-devel/2021-December/009024.html
[3] https://lists.freedesktop.org/archives/modemmanager-devel/2021-December/009022.html

Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
2022-02-11 11:58:42 -08:00
Josef Schlehofer
2abe98e134
unbound: update to version 1.15.0
Refresh patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-02-11 17:11:44 +01:00
Rucke Teg
f2a8fc48c5 openssh-server: manually set path to passwd binary
In the build environment the autotools finds the `passwd` binary in
/usr/bin. But in the target image it is available under /bin instead.
Manually set the path to `passwd` binary to `/bin/passwd`

Signed-off-by: Rucke Teg <rucketeg@protonmail.com>
2022-02-10 21:10:08 -08:00
Rucke Teg
fb113c5a70 openssh-server: change sshd.failsafe
There is no need to remove root password from /etc/shadow as the
password in the file is blank anyway in the failsafe mode.

Signed-off-by: Rucke Teg <rucketeg@protonmail.com>
2022-02-10 21:10:08 -08:00
Tiago Gaspar
5482b98940 jool: update default config
Update the default configuration files to match the upstream example
ones.


Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
2022-02-10 19:32:38 -08:00
Tianling Shen
b8b1305e74 dnsproxy: Update to 0.41.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-10 15:58:04 -08:00
Chip Lee
68704969ce mbusd: Repair UCI config file about parity
in mbusd, parity must be N, E or O, can't be y.

Signed-off-by: Chip Lee <chplee@gmail.com>
2022-02-10 15:02:06 -08:00
Dirk Brenken
067d133601
Merge pull request #17829 from neheb/6
banip: make reproducible
2022-02-10 16:34:24 +01:00
Dirk Brenken
721a310897
Merge pull request #17828 from neheb/5
adblock: make reproducible
2022-02-10 16:33:49 +01:00
Jan Hák
4de863e418 knot: update to 3.1.6
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2022-02-09 16:04:51 -08:00
Stijn Tintel
289a751530
Merge pull request #17827 from skingry/snmpd_init_order
net-snmp: move start order from 50 to 99
2022-02-09 19:28:59 +02:00
David Bauer
bcf4e90f0c usteer: update to latest git head
6aebb75 local-node: check correct field
f42bf29 gitignore: add .orig files
3c0cd98 local-node: save latest bss-transition-response
1dc69d7 ubus: add get_connected_clients
04ef308 local-node: save beacon-reports
b0dab90 measurement: add handling of measurements
76ccae6 node: add methods to access nodes by bssid
3b51bfb local-node: obtain channel + op-class
c7830b5 policy: add min_snr_kick_delay
e36967f local-node: handle BSS transition queries
022635c policy: don't track roam_scan_done
742236f policy: fix incurrect handling of scan-requests with disabled timeout
9a78412 policy: add roam-scan timeout
7e999e0 policy: don't select better candidate with bad signal
3c1dd51 policy: export snr_to_signal to other source files
1c5a738 ubus: only request beacon-report for current SSID
5610ace config: make remote_node_timeout configurable
918b809 policy: only select candidates with better load
55e98d8 sta: uniform disconnect state handling
806e647 sta: remove duplicate code
2ccb99e policy: remove redundant candidate evaluation
bbf133f policy: fix not selecting better candidate on request

Signed-off-by: David Bauer <mail@david-bauer.net>
2022-02-09 11:43:26 +01:00
Alexandru Ardelean
3ebd7e7e5f tcpreplay: bump to version 4.4.0
Also need to use musl-fts when building with musl now.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-02-08 14:18:51 -08:00
Rosen Penev
59dcbb741a banip: make reproducible
Timestamp needs to be removed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-02-07 22:02:26 -08:00
Rosen Penev
5d095a1366 adblock: make reproducible
Need to get rid of the timestamp.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-02-07 22:00:12 -08:00
Seth Kingry
7b1bfb181a
net-snmp: move start order from 50 to 99
Signed-off-by: Seth Kingry <sjkingry@gmail.com>
2022-02-08 00:36:36 -05:00
Noah Meyerhans
6a0a55a5ed bind: support compile-time exclusion of DNS-over-HTTPS support
DoH is enabled by default, but disabling it removes the need to link
against libnghttp2, which may be desirable more constrained
environments.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2022-02-07 21:31:54 -08:00
R4SAS I2P
b9000cf231 i2pd: add service reload support
Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
2022-02-07 21:29:08 -08:00
Tianling Shen
71de776796 gg: Update to 0.2.2
Updated PKG_LICENSE_FILES according to upstream change.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-07 09:42:41 -08:00
Florian Eckert
493bf98d69
Merge pull request #17785 from TDT-AG/pr/20220204-stunnel
stunnel: update version to 5.62
2022-02-07 09:12:40 +01:00
Florian Eckert
9dbcfadf88
Merge pull request #17784 from TDT-AG/pr/20220204-keepalived
keepalived: update version to 2.2.7
2022-02-07 09:12:28 +01:00
Stan Grishin
88265c4fb9 https-dns-proxy: init script refactoring
* consolidate dnsmasq config manipulation into one function
* more elegant code for PROCD data processing (Thanks @jow-!)

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2022-02-06 06:00:03 +00:00
Tianling Shen
c7b5e7ed67 v2rayA: Update to 1.5.6.2
Manually added new env variable `XDG_DATA_HOME` which won't be passed
by procd by default.

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-04 08:28:41 -08:00
Tianling Shen
8465053a58 v2raya: init: convert arguments into env variables
Suggested by upstream, to provide forward compatibility.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-04 08:28:41 -08:00
Tianling Shen
d8d261fe2d xray-core: Update to 1.5.3
Removed outdated `alterId` in sample config.

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-04 08:28:20 -08:00
Florian Eckert
d7b73fb195 stunnel: update version to 5.62
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-02-04 08:16:33 +01:00
Florian Eckert
792d745a59 keepalived: update version to 2.2.7
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-02-04 08:14:42 +01:00
Hannu Nyman
f21774629c
Merge pull request #17671 from tohojo/sqm-nft
sqm-scripts: Change iptables dependency to iptables-nft
2022-02-03 20:00:09 +02:00
Florian Eckert
cb4719789c
Merge pull request #17748 from neheb/8
xinetd: fix bad printf formats
2022-02-03 09:16:28 +01:00
Stan Grishin
b59938c86e
Merge pull request #17762 from stangri/master-https-dns-proxy
https-dns-proxy: update to 2021-11-22-1
2022-02-02 09:12:20 -08:00
James White
435733a899 adguardhome: Bump adguardhome to v0.107.3 stable
Signed-off-by: James White <james@jmwhite.co.uk>
2022-02-02 07:25:37 -08:00
Josef Schlehofer
6c6c99ffb5 apache2: security update to version 2.4.52
Fixes CVEs:
- CVE-2021-44790
- CVE-2021-44224

Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-02-02 07:24:59 -08:00
Philip Prindeville
2b00697f08 strongswan: Update to 5.9.5
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-02-01 23:24:46 -08:00
Toke Høiland-Jørgensen
698af2eb99 sqm-scripts: Change iptables dependency to iptables-nft
There's only one of the shaper scripts (simple.qos) that uses iptables, and
it should be fine with iptables-nft for compatibility with the new default
nft-based firewall. Confusingly, we still need the iptables-mod-ipopt
package to get the DSCP match module; we never used CONNMARK, though, so
drop the iptables-mod-conntrack-extra dependency while we're at it.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2022-02-01 23:30:17 +01:00
Nick Hainke
40b87aac95 wg-installer: use babeld add_interface function
With commit 385200443554 ("babeld: add add_interface function") babeld
has a new ubus function allowing to dynamically add an interface.

Before the add_interface function, we were required to reload babeld.
The reload influenced the babeld routing. However, the remove part is
still missing and will be added at a later stage.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-02-01 22:32:30 +01:00
Noah Meyerhans
127ef1207b bind: bump to 9.18.0
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2022-02-01 09:09:17 -08:00
Andy Walsh
1fa70d6a3c samba4: update to 4.14.12
* update to 4.14.12
* fixes: CVE-2021-44142, CVE-2022-0336

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2022-02-01 07:20:56 -05:00
Sergey V. Lobanov
0528707fd7 chaosvpn: fix build on macos
chaosvpn Makefile detects Darwin (macos) and changes compilation
flags for macos target, but OpenWrt is always Linux so build fails.
This patch redefines OS=Linux to use Linux compilation flags.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-31 18:37:30 -08:00