Commit graph

3275 commits

Author SHA1 Message Date
Jo-Philipp Wich
175cf9e985 iodine: workaround incomplete musl nameser.h header
The arpa/nameser.h header of musl libc indirectly depends on the endian.h
header but fails to explicitely include it to properly define
`__BYTE_ORDER` and `__BIG_ENDIAN` prior to declaring the DNS `HEADER`
structure.

When both the appropriate `__BYTE_ORDER` and `__BIG_ENDIAN` defines are
unset, the `#if __BYTE_ORDER == __BIG_ENDIAN` condition in `nameser.h`
evaluates to true, causing it to declare a bad (big endian) DNS packet
header structure on little endian systems.

Work around this musl bug by forcibly passing `-include endian.h` through
the `osflags` file.

An upstream fix for musl libc has been submitted with
http://www.openwall.com/lists/musl/2017/12/04/3

This should solve iodine packet corruption on little endian musl systems
reported at
http://lists.infradead.org/pipermail/lede-dev/2017-November/010085.html

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-12-12 23:41:44 +01:00
Jo-Philipp Wich
70858690c0 nlbwmon: update to current HEAD
Update to latest Git HEAD in order to solve a number of issues.

 - Improves MAC address lookup reliability
 - Properly counts DNAT-ed connections (e.g. for port forwards)
 - Fixes stack corruption when parsing netlink records
 - Fixes deletion of gzipped databases

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-12-12 22:01:56 +01:00
Hannu Nyman
205cff1987
Merge pull request #5263 from yangfl/master
i2pd: Update to 2.17.0
2017-12-11 23:38:52 +02:00
Karl Palsson
0bc06df68c net/mosquitto: reproducible build patches
Remove build timestamp.  Using currently proposed upstream patch.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
Signed-off-by: Karl Palsson <karlp@etactica.com>
2017-12-11 11:00:26 +00:00
Karl Palsson
46879b2b65 net/mosquitto: depend on virtual package instead of select
Can't use DEPENDS:= +libname when libname is now a virtual package.
Switch to plain DEPENDS:= libname.

Fixes Github issue 4751

Signed-off-by: Karl Palsson <karlp@etactica.com>
2017-12-11 10:55:08 +00:00
David Yang
06181d99a8 i2pd: Update to 2.17.0
Signed-off-by: David Yang <mmyangfl@gmail.com>
2017-12-11 15:58:24 +08:00
Florian Eckert
5e0e6e0533 net/stunnel: add uci config support
Add uci config support.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-12-10 11:13:43 +01:00
Matthias Schiffer
170fb34883
Merge pull request #5155 from neheb/patch-6
ethtool: Update to 4.13
2017-12-09 21:41:10 +01:00
champtar
e2605b07f0
Merge pull request #5248 from diizzyy/patch-111
net/stunnel: Update to 5.44
2017-12-09 09:41:25 -08:00
champtar
228db2a2a2
Merge pull request #5245 from mstorchak/rsync
rsync: fix CVE-2017-15994 and CVE-2017-16548
2017-12-09 09:31:41 -08:00
Hannu Nyman
69dd5ba7f3
Merge pull request #5250 from mstorchak/tgt
tgt: update to 1.0.72
2017-12-09 16:13:56 +02:00
Maxim Storchak
1915975979 tgt: update to 1.0.72
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2017-12-09 15:03:23 +02:00
Daniel Engberg
6b53b45e07 net/stunnel: Update to 5.44
Update stunnel to 5.44
* Disable FIPS

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2017-12-09 10:53:35 +01:00
Hannu Nyman
396fff138d
Merge pull request #5247 from dibdot/travelmate
travelmate: update 0.9.6
2017-12-09 09:39:05 +02:00
Dirk Brenken
48f48991c3 travelmate: update 0.9.6
* fix incomplete bssid logic
* add missing package dependencies
* Turris omnia compability fixes (LuCI, separate PR)
* OpenWrt theme fixes (LuCI, separate PR)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-12-09 08:20:29 +01:00
champtar
b259502c15
Merge pull request #5242 from smutt/danish
danish: Add package net/danish
2017-12-08 20:56:34 -08:00
Alexander Couzens
9d1b1c2c35 wavemon: use SOURCE_DATE_EPOCH as BUILD_DATE
Build timestamps prevent reproducible builds [0].
SOURCE_DATE_EPOCH [1] can replace BUILD_DATE in a
determinisc way.

[0] https://reproducible-builds.org/docs/timestamps/
[1] https://reproducible-builds.org/specs/source-date-epoch/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
2017-12-08 22:46:02 +00:00
W. van den Akker
445847f00a
Shorewall6: bump to version 5.1.9
Removed 010-update_install_sh.patch. Merged upstream.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-08 20:29:47 +01:00
W. van den Akker
037ac8cd0e
Shorewall: bump to version 5.1.9
Removed 010-update_install_sh.patch. Merged upstream.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-08 20:28:06 +01:00
W. van den Akker
93e4a9870d
Shorewall6-lite: bump to version 5.1.9
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-08 20:25:18 +01:00
W. van den Akker
dbec6fa9c5
Shorewall-lite: bump to version 5.1.9
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-08 20:24:23 +01:00
W. van den Akker
8cd958558b
Shorewall-core: bump to version 5.1.9
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-08 20:22:24 +01:00
Maxim Storchak
99507aa2ee rsync: Fix CVE-2017-15994 and CVE-2017-16548
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2017-12-08 19:56:10 +02:00
champtar
ef0dc732fa
Merge pull request #5243 from brianjmurrell/shorewall-multi-sources
Shorewall multi sources
2017-12-08 08:06:32 -08:00
Jo-Philipp Wich
c48f5185d3
Merge pull request #5214 from lynxis/rb_ddns_cloud
ddns-scripts: remove gzip timestamp
2017-12-08 10:47:15 +01:00
Brian J. Murrell
e0a89d9063 shorewall6: Multiple source sources
Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2017-12-07 21:26:12 -05:00
Brian J. Murrell
ceef8da28e shorewall: Multiple source sources
Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2017-12-07 21:26:09 -05:00
Brian J. Murrell
a88d61df59 shorewall6-lite: Multiple source sources
Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2017-12-07 21:26:06 -05:00
Brian J. Murrell
5d3d2f4654 shorewall-lite: Multiple source sources
Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2017-12-07 21:26:03 -05:00
Brian J. Murrell
eef2998ffa shorewall-core: Multiple source sources
Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2017-12-07 21:26:00 -05:00
Andrew McConachie
50d0767aba danish: Add package net/danish
Add package Danish. A middle box implementation of RFC 6698 for HTTPS.
<https://github.com/smutt/danish>

This package installs /usr/sbin/danish(the Danish executable), /etc/init.d/danish and /etc/config/danish.

Tested with LEDE x86_64

Signed-off-by: Andrew McConachie <andrew@depht.com>
2017-12-07 20:50:10 -05:00
champtar
da435aaf94
Merge pull request #5232 from dibdot/travelmate
travelmate: update 0.9.5
2017-12-07 14:09:25 -08:00
champtar
4ad821dcd4
Merge pull request #4486 from wvdakker/master
Shorewall(6): add full packages.
2017-12-07 14:08:04 -08:00
Jakub Janco
349b90cc24 mwan3: Improve logs when member metric is too big
If metric of member interface is bigger then 256, it is not
appended to policy, now at least warn message is printed into
syslog

Signed-off-by: Jakub Janco <kubco2@gmail.com>
2017-12-07 15:41:59 +01:00
Peter Wagner
d6b201b807 tor: update to 0.3.1.9
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-12-07 13:42:39 +01:00
David Yang
060d90d604 i2pd: Add package
Signed-off-by: David Yang <mmyangfl@gmail.com>
2017-12-07 16:28:50 +08:00
Alexander Couzens
89e40113f6
uanytun: remove build time/host to fix reproducible builds
Build timestamps prevents reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
2017-12-06 22:56:41 +01:00
Dirk Brenken
9fc66abcc0 travelmate: update 0.9.5
* change start priority to 25
* add support for hidden uplinks
* add support for wpa enterprise uplinks

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-12-06 16:53:43 +01:00
Yousong Zhou
209f0a37c4 pixiewps: initial version 1.4.1
Addresses #2872

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-12-05 11:20:32 +08:00
Yousong Zhou
9a35d5397d reaver: switch to reaver-wps-fork-t6x
Addresses #2872

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-12-05 11:19:59 +08:00
Yousong Zhou
a9aeab53b9 openconnect: unify indentation in README
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-12-05 09:37:06 +08:00
Gavin Ni
ede858fb5d openconnect: support reading password from script
"token_mode" add support for "script", which execute "token_script" to
get the password.  Some token is not supported by OpenConnect natively,
e.g. "MobilePass" or "Softoken II" used in Cisco VPN

Signed-off-by: Gavin Ni <gisngy@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-12-04 16:00:46 +08:00
Peter Wagner
f5b1dd7ce7 git: update to 2.15.1 and cleanup DEPENDS
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-12-03 23:53:46 +01:00
champtar
e362d18580
Merge pull request #5216 from lynxis/rb_tcpproxy
tcpproxy: remove build timestamp and hostname
2017-12-03 09:46:18 -08:00
champtar
7031f4cdbd
Merge pull request #5164 from TDT-AG/pr/20171116-net-mwan3-fixes
net/mwan3: add improvments and add a fix
2017-12-03 09:28:18 -08:00
Alexander Couzens
59c25a89e0
tcpproxy: remove build timestamp and hostname
Build timestamp prevents reproducible builds [0].
Build hostname also breaks reproducible builds.

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
2017-12-03 14:06:25 +01:00
Alexander Couzens
2b3b72522d
ddns-scripts: remove gzip timestamp
gzip create a header by default containing the filename
and the timestamp of the file.
This timestamp will break reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
2017-12-03 06:24:21 +01:00
champtar
3e36a8e6ea
Merge pull request #5172 from jow-/polipo-enable-ipv6-support
polipo: forcibly enable IPv6 support
2017-12-02 12:44:31 -08:00
champtar
66bc9e8cd0
Merge pull request #5211 from dibdot/adblock
adblock: update 3.1.1
2017-12-02 10:12:43 -08:00
Dirk Brenken
f831d54d90 adblock: update 3.1.1
* new function to set/delete options in external uci config files
  * kresd: automated 'rpz_file' handling in /etc/config/resolver
  * firewall: automated 'force_dns' handling if you
              enable or disable adblock
* support sha256sum (default) and md5sum for blocklist
  comparison & conditional dns restarts
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-12-02 18:46:53 +01:00