Commit graph

7551 commits

Author SHA1 Message Date
Florian Eckert
3364d6665a tinc: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
1b0ddae963 tgt: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
04e52a13c4 simple-adblock: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
6f00afc97b seafile-server: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
154d2482e1 radicale: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
7184a471ef openvswitch: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
1db50a6131 nginx: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
f2820aa328 haproxy: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
0869415ce7 gnunet: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
faf579b0ab apfree-wifidog: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Dirk Brenken
dd356ed900
Merge pull request #13849 from dibdot/adblock
adblock: adapt openwrt rc.common changes
2020-11-03 20:05:15 +01:00
Dirk Brenken
10da8b0b8e
Merge pull request #13848 from dibdot/banip
banip: adapt openwrt rc.common changes
2020-11-03 20:03:15 +01:00
Dirk Brenken
9922c8e3e0
adblock: adapt openwrt rc.common changes
* since openwrt master has merged the depending P/R, the old
extra_help/extra_commands syntax is no longer working, see #13798 for
reference

* removed test.sh script from package

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-11-03 19:51:46 +01:00
Dirk Brenken
14a6971589 banip: adapt openwrt rc.common changes
* since openwrt master has merged the depending P/R, the old
extra_help/extra_commands syntax is no longer working, see #13798 for
reference

* removed logd dependency, see #13820 for reference

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-11-03 19:44:22 +01:00
Dirk Brenken
65bee292d9
travelmate: adapt openwrt rc.common changes
* since openwrt master has merged the depending P/R, the old
extra_help/extra_commands syntax is no longer working, see #13798 for
reference

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-11-03 19:37:32 +01:00
Rosen Penev
4a94d960c9 usbip: remove no longer necessary udev hack
It's not only unnecessary, it interferes with libudev-zero.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-11-03 12:38:12 +00:00
Rosen Penev
881aa28fa1 treewide: turn specific libudev-* DEPENDS to generic ones
libudev-zero as well as libudev-fbsd have PROVIDES:=libudev . These
packages have nothing specific that requires one or the other.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-11-03 12:38:12 +00:00
Florian Eckert
33df7bbda8
Merge pull request #13748 from aaronjg/mwan3-owner-procd
mwan3: fix mwan3 'use'
2020-11-03 12:28:42 +01:00
Rosen Penev
2d8029ad62
Merge pull request #13813 from aleksander0m/aleksander/longer-wait-for-init-events
modemmanager: increase initial timeout for event reporting
2020-11-02 00:44:05 -08:00
Rosen Penev
e2b813e3f7
Merge pull request #13755 from r-salvaterra/tor
Tor: a couple of updates
2020-11-01 13:53:12 -08:00
Rosen Penev
5fb093c101
Merge pull request #13678 from oldium/update-fwknopd-defaults
fwknop: Use sensible defaults.
2020-11-01 13:50:37 -08:00
Rosen Penev
1a8daeac5e
Merge pull request #13653 from FinnixB/znc-multiple-listeners
znc: Add support for many configurable listeners for znc
2020-11-01 13:49:53 -08:00
Rosen Penev
a9307eafc8
Merge pull request #13816 from mlichvar/chrony-improvements
chrony: improve configuration and hotplug script
2020-11-01 13:44:28 -08:00
Rosen Penev
222cad4ccc kea: fix compilation with libcxx
Boost headers try to include experimental/string_view when std is less
than c++17. This does not work ith libcxx where this header is not
present.

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-10-31 18:23:28 -07:00
Josef Schlehofer
d442033941 bind: update to version 9.16.8
- DNS Flag Day 2020
(default EDNS buffer size changed from 4096 to 1232 bytes)

-- Added patch, which should be part of the next release
It fixes an issue while cross-compilation (I linked it in the commit
message with issue link)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-10-31 06:39:05 -07:00
Aleksander Morgado
9a16087fd6 modemmanager: increase initial timeout for event reporting
When the ModemManager daemon is started by the init script, we're
explicitly calling mm_report_events_from_cache() so that all the
hotplug events that happened before that moment are properly notified
to the newly launched daemon.

This initial reporting of events does a wait for the ModemManager
process to be available in DBus, and if the daemon isn't registered in
the bus in a given time, the process is considered failed:

  Sun Sep  6 16:20:02 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:02 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:03 2020 [2180]: <info>  ModemManager (version 1.14.6) starting in system bus...
  Sun Sep  6 16:20:03 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:04 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:05 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:05 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:06 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:06 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:07 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:07 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:08 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:08 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:09 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:09 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:10 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:10 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:11 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:11 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:12 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:12 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:12 2020 ModemManager: hotplug: error: couldn't report initial kernel events: ModemManager not running

Update the default wait time for this initial event notification from
10s to 60s, because there are cases where the daemon is slower to
boot, e.g. during the first boot after a sysupgrade.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-10-30 23:29:55 +01:00
Miroslav Lichvar
21c0f580f1 chrony: improve configuration
Extend configuration of NTP sources in UCI:
- Add nts option to enable NTS
- Add disabled option to allow inactive sources

Add nts section to UCI with:
- rtccheck option to disable certificate time checks on systems that
  don't have an RTC to avoid the chicken-and-egg problem (it is less
  secure, but still should be better than no NTS at all)
- systemcerts option to disable system certificates
- trustedcerts option to specify path to trusted certificates

Save NTS keys and cookies by default to avoid unnecessary NTS-KE
sessions when restarted or switching back to an already used NTS source.
Also, save the drift to stabilize the clock after chronyd restart.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2020-10-30 20:57:35 +01:00
Miroslav Lichvar
b9d6d6cdd0 chrony: improve hotplug script
- Use the chronyc onoffline command to update state of all sources
  per current routing configuration
- Don't ignore the "ifupdate" action
- Add NTP servers from DHCP for the interface that went up instead of
  the wan4+wan6 interfaces
- Save the servers to files loaded by the sourcedir directive to not
  lose them when chronyd is restarted, and remove them when the
  interface goes down

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2020-10-30 20:02:48 +01:00
Miroslav Lichvar
1dc8c501a6 chrony: rework loading of configuration
Instead of loading /etc/chrony/chrony.conf from the file generated from
the chrony UCI configuration, use the confdir directive in the main
config to load the generated file. This should make it obvious that
chrony is configured in UCI and it can also be easily disabled.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2020-10-30 20:02:11 +01:00
Florian Eckert
81b8d863a7
Merge pull request #13806 from TDT-AG/pr/20201029-stunnel
stunnel: update version to 5.57
2020-10-30 16:38:13 +01:00
Yousong Zhou
f07319d6b1 xl2tpd: bump to version 1.3.16
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-10-30 15:24:27 +08:00
Aaron Goodman
13d22445e4 mwan3: fix rpcd with for routers with no IPv6 support
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-10-29 23:06:25 -04:00
Daniel Golle
c8bfe55026 nginx: adapt to changed ubus socket path
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-10-29 21:02:18 +02:00
Jan Pavlinec
aa80a02340 lighttpd: add config for logrotate
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-29 15:18:54 +01:00
Florian Eckert
18a130c6bb stunnel: update version to 5.57
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-10-29 12:49:41 +01:00
Jannis Pinter
b5259ef5da Add option for days until renewal
Signed-off-by: Jannis Pinter <jannis+openwrt@pinterjann.is>
2020-10-29 10:44:57 +01:00
Rui Salvaterra
6007751c63 tor: disable man pages and html manual generation
We don't need this on an embedded system.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2020-10-28 22:34:01 +00:00
Rui Salvaterra
929a5a9f0c tor: add a basic variant, without relay/bridge support
If relay/bridge support isn't required, this variant is about 300 kiB smaller
than the full tor daemon.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2020-10-28 22:33:53 +00:00
Rui Salvaterra
a519b90fd7 tor: improve readability of the packages help text
Whitespace before and after the description makes the package information much
more obvious.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2020-10-28 21:12:26 +00:00
Matthieu Baerts
dfc8fdf5e5 ifstat: import fixes from Debian package
Extracted from:

  http://deb.debian.org/debian/pool/main/i/ifstat/ifstat_1.1-8.1.diff.gz

Note that I also created a new git repository with these fixes:

  https://github.com/matttbe/ifstat/

The original author of these modification is:

  Goswin von Brederlow <goswin-v-b@web.de>

ChangeLog:

  * snmp.c: fix 2 pointer targets differ in signedness warnings
  * Adding upport for 64bit /proc/net/dev counters.
  * Clean up compiler warnings.

More modifications are available in the patch from the Debian project
but mostly related to the "debian" dir, man page and debug mode. Here I
only took the modifications related to the .c and .h files.

The most important fix is related to the support for 64bit counters in
/proc/net/dev instead of displaying 0 after a while.

Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net>
2020-10-27 23:53:28 -07:00
Aaron Goodman
f1bfda4c37 mwan3: do not wait to process ifup/ifdown events
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-10-27 23:18:18 -04:00
Aaron Goodman
8d4e202fa4 mwan3: fix mwan3 route handling
- support trailing route space from iproute2
- add routes even when iface is down
- fix source_routing argument check
- add quotes in logging to better detect issues with trailing spaces

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-10-27 21:40:06 -04:00
Daniel Salzman
67e3c594de knot: disable libnghttp2 autodetection
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
2020-10-27 18:04:00 +02:00
Florian Eckert
ca5dc9754f
Merge pull request #13752 from TDT-AG/pr/20201023-xinetd
xinetd: some changes
2020-10-27 09:21:16 +01:00
Rosen Penev
3fa36bf958 softethervpn: update to 4.34-9745
Several patch changes regarding to OpenSSL as this version does not
compile under LibreSSL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-10-26 21:46:20 -07:00
Rosen Penev
56e4edad82 transmission: remove variants and use libcurl's TLS library
Allows the Makefile to be cleaned up and to have fewer dependencies.
There's no need for multiple TLS libraries to be installed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-10-26 21:45:32 -07:00
Rosen Penev
7b5513659f
Merge pull request #13768 from bmork/conserver
conserver: update to version 8.2.6
2020-10-26 19:33:10 -07:00
Olivier Poitrey
2da8c48c39 nextdns: Update to version 1.8.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-10-26 20:45:16 +02:00
Jan Hak
4069bb1e72 knot: update to version 3.0.1
definition of PSELECT_COMPAT could be removed many years ago, is no longer needed

Signed-off-by: Jan Hak <jan.hak@nic.cz>
2020-10-26 17:45:32 +02:00
Mengyang Li
b6119433a5 openconnect: allow specify --protocol from config
openconnect v8.10 supports 4 VPN protocols

  --protocol=anyconnect  Compatible with Cisco AnyConnect SSL VPN, as well as ocserv (default)
  --protocol=nc          Compatible with Juniper Network Connect
  --protocol=gp          Compatible with Palo Alto Networks (PAN) GlobalProtect SSL VPN
  --protocol=pulse       Compatible with Pulse Connect Secure SSL VPN

This patch allows user to specify protocol use the new "vpn_protocol"
option and deprecate the old option "juniper" which seems to be missing in
the current openconnect client.

Signed-off-by: Mengyang Li <mayli.he@gmail.com>
2020-10-25 21:44:32 +01:00