Commit graph

1386 commits

Author SHA1 Message Date
Jo-Philipp Wich
7dadd12850 freeradius2: completely disable runtime OpenSSL version checks
Whenever we ship fixed libopenssl binaries in DD, the Freeradius daemon fails
at startup because it detects a mismatch of the build time and runtime OpenSSL
version.

Since our OpenSSL updates for DD are ABI compatible we do not need or even want
this superflous check. Removing it saves us the effort to rebuild Freeradius
after every OpenSSL version bump.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2015-12-28 16:25:58 +01:00
Daniel Golle
22c907b0e1 gnunet: work-around config sections naming
gnunet's config section may contain dashes '-' which isn't an
allowed character for sections in UCI.
Thus replace the first underscore with a dash which in gnunet-config
sections, as that happends to be work for all currently used sections.
e.g. this now allows accessing sections like transport-http_server via
an UCI sections called transport_http_server as well as namestore-flat
using an UCI section called namestore_flat.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2015-12-04 19:00:35 +01:00
Daniel Golle
9de00726ba gnunet: improve packaging
some general packaging fixes for cadet and conversation.
allow building experimental components multicast, psyc, social.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2015-12-04 18:33:18 +01:00
Daniel Golle
2ad0476c9b gnunet: update to svn r36713
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2015-12-03 01:25:11 +01:00
Daniel Golle
068928a7af gnurl: update to 7.45.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2015-12-03 01:25:11 +01:00
Mirko Vogt
c0e04c18a7 move slightly modified package 'daemonlogger' from old packages feed 2015-12-02 15:29:56 +01:00
Yousong Zhou
c6e689d266 xl2tpd: bump to version devel-20151125
Main changes are as the following

 - Allow specifying port in server option, e.g. example.com:1702 (fixes
   github issue #1960 "xl2tpd port change bug").
 - Fixes NULL dereference on connection timeout
 - Update 100-makefile_opt_flags.patch

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2015-12-02 20:50:10 +08:00
heil
a265450e65 haproxy: bump to version 1.5.15
- integrate pending patches

Signed-off-by: heil <heil@terminal-consulting.de>
2015-12-02 12:08:32 +01:00
Hannu Nyman
eeb2ccb860 Merge pull request #2049 from dibdot/adblock
adblock: maintenance update
2015-11-29 17:59:07 +02:00
Dirk Brenken
45f005d856 adblock: maintenance update
* remove "downloads" category from shallalist default configuration, due
to false positives (i.e. debian & microsoft update sites)
* remove example white- & blacklist entries
* further optimize shallalist handling
* fix domain merging with empty whitelist
* various minor fixes & enhancements
* documentation update


Signed-off-by: Dirk Brenken <dirk@brenken.org>
2015-11-29 16:44:24 +01:00
Nikos Mavrogiannopoulos
99526baae2 ocserv: corrected path for ocserv-fw
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 23:09:36 +01:00
Nikos Mavrogiannopoulos
18595194cf ocserv: correct md5sum, install ocserv-fw, and eliminate ip dependency
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 23:06:26 +01:00
Nikos Mavrogiannopoulos
62c95a10a8 ocserv: updated to 0.10.10
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 22:29:06 +01:00
Stijn Tintel
f3d1722bb2 strongswan: add upstream patch for bug in 5.3.4
See https://wiki.strongswan.org/issues/1213

Removed the changes to charon-xpc.c because they didn't apply and are
only used on OS X anyway.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2015-11-28 12:38:40 -05:00
Hannu Nyman
c508fe103a Merge pull request #2030 from dibdot/adblock
adblock: bugfix release
2015-11-26 23:45:01 +02:00
Dirk Brenken
2d40930fa0 adblock: bugfix release
* fix download parms
* fix tmp vars
* other small fixes

Signed-off-by: Dirk Brenken <dirk@brenken.org>
2015-11-26 21:48:05 +01:00
Hannu Nyman
aad69485ed wget: backport upstream fix to re-enable disabling ipv6
Upstream wget 1.17 compilation breaks with --disable-ipv6 configuration.
Backport an upstream commit that fixes the disabling of ipv6 in wget.
http://git.savannah.gnu.org/cgit/wget.git/commit/?id=2cfcadf5e6d5c444765aa460915ae27109a8dbce

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-11-26 19:21:23 +02:00
Jonas Gorski
2e91dc6bb7 znc: drop GCC dependencies
OpenWrt trunk's lowest supported GCC version is 4.8, so we don't need
to depend on specific versions anymore. Fixes visibility with GCC 5,
the current default.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>
2015-11-26 13:00:31 +01:00
Hannu Nyman
5ca6d406b6 wget: fix nossl variant in 1.17
wget-nossl variant for wget 1.17 is broken in upstream.
Copy a patch from upstream mailing list to fix compilation.
http://lists.gnu.org/archive/html/bug-wget/2015-11/msg00074.html

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-11-26 12:00:00 +02:00
Ted Hess
54d5f57db5 Merge pull request #1965 from thess/redsocks-build
redsocks: updates to latest source and gcc build options
2015-11-25 09:02:20 -05:00
Nikos Mavrogiannopoulos
67498cffdf ocserv: always advertise the local domain to peer
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-25 00:24:39 +01:00
Nikos Mavrogiannopoulos
3b87afcea8 vpnc-script: don't attempt to resolve domains which match the local domain
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-25 00:23:43 +01:00
Nikos Mavrogiannopoulos
b70b5d0b5e ocserv: Added option to pass split-dns configuration to clients
Relates to #1975

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-25 00:04:03 +01:00
Nikos Mavrogiannopoulos
1f9b054deb vpnc-script: create dnsmasq entries for connections where default domain is set
Relates to #1975

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-24 23:52:58 +01:00
Hannu Nyman
5465aecf1a Merge pull request #2019 from dibdot/adblock
adblock: reduce memory consumption
2015-11-24 23:56:50 +02:00
Dirk Brenken
6d75710491 adblock: reduce memory consumption
* rework shallalist processing: significantly reduce memory consumption
during archive extraction and merging.
* considerable reduce memory consumption during adblock source
processing.
* considerable reduce memory consumption of sort (sorts only the domain
list and not the bigger dnsmasq file)

other changes:
* auto detection/defaults for adb_if, adb_dev, adb_ntpsrv, adb_maxloop,
adb_maxtime and adb_minspace - these options can be safely removed from
previous adblock configuration file
* check total memory and main uhttpd configuration on startup
* documentation update

Signed-off-by: Dirk Brenken <dirk@brenken.org>
2015-11-24 22:29:05 +01:00
Ted Hess
aa62dfd38d Merge pull request #1995 from br101/master
pingcheck: Add new package
2015-11-24 13:50:45 -05:00
Hannu Nyman
9510a11bcc Merge pull request #1999 from dibdot/adblock
adblock: logging & documentation update
2015-11-24 20:47:29 +02:00
Thomas Peterson
bc5c8fdbee cshark: update to latest git HEAD 2015-11-24 12:39:20 -05:00
Álvaro Fernández Rojas
67e785f6a6 Merge pull request #2001 from hnyman/wget117
wget: update to version 1.17
2015-11-24 08:21:14 +01:00
Nikos Mavrogiannopoulos
b4b2d83c42 ocserv: when default-domain is set, enable split-dns
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-24 00:18:00 +01:00
Steven Barth
8bf976096e strongswan: update to 5.3.4
Fixes CVE-2015-8023

Signed-off-by: Steven Barth <steven@midlink.org>
2015-11-23 14:25:41 +01:00
Nuno Goncalves
35ab69b62f nmap: bump to 7.00
Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
2015-11-22 19:21:32 +00:00
Peter Wagner
b65967668d ntpd: update to 4.2.8p4
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-11-22 00:59:39 +01:00
Hannu Nyman
e989f69114 wget: update to version 1.17
Update wget to 1.17.

Release notes: http://savannah.gnu.org/forum/forum.php?forum_id=8410

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-11-21 11:32:43 +02:00
Dirk Brenken
1c4a92c9f6 adblock: logging & documentation update
- centralized logging via separate function to stdout, syslog and file
- remove dependencies between helper functions
- add two new options "adb_maxtime" and "adb_maxloop"
- add description to every adblock config option (see
adblock.conf.sample)
- update README.md

Signed-off-by: Dirk Brenken <dirk@brenken.org>
2015-11-21 08:04:34 +01:00
Steven Barth
4cd52a64ac Merge pull request #1992 from Adze1502/master
mwan3: update to version 2.0-0
2015-11-20 09:40:56 +01:00
Bruno Randolf
e221605078 pingcheck: Add new package
Pingcheck is a daemon for OpenWRT which checks the online status of individual
network interfaces and makes this information available via UBUS and by
triggering "online" and "offline" scripts.

It is maintained at: https://github.com/br101/pingcheck

Signed-off-by: Bruno Randolf <br1@einfach.org>
2015-11-19 21:34:34 +00:00
Toke Høiland-Jørgensen
7069b07a12 sqm-scripts: Drop dependency on 'ip'. 2015-11-19 17:20:07 +01:00
Steven Barth
82b9e65ff0 Merge pull request #1606 from teslamint/patch-2
coova-chilli: fix compile error with musl
2015-11-19 16:27:15 +01:00
Steven Barth
78097ac590 Merge pull request #1645 from feckert/master
extend net-snmp functionality
2015-11-19 16:26:40 +01:00
Steven Barth
f45e48214c Merge pull request #1988 from brainsucker-na/master
strongswan: gmpdh plugin, package and strongswan-isakmp metapackage
2015-11-19 12:37:34 +01:00
Toke Høiland-Jørgensen
5346fa8dc5 sqm-scripts: Bump to v1.0.5. 2015-11-19 11:44:47 +01:00
Jeroen Louwes
8ff00a6273 mwan3: update to version 2.0-0
IPv6 support! :D
Big code overhaul; expect bugs..

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2015-11-19 09:37:30 +01:00
brainsucker-na
f705b3c0bf strongswan: gmpdh plugin, package and strongswan-isakmp metapackage
gmpdh plugin implements DH Groups (same as normal GMP plugin), but links to GMP statically and is stripped of all RSA based stuff. Binary size for plugin is ~20kbytes with no dependency on libgmp (200+ kbytes after squash), easilly fitting into flash space restricted devices.

strongswan-isakmp metapackage defines a minimal set of strongswan plugins (including gmpdh) for ISAKMP / IKEv1 PSK tunnels. Will fit even 4mb routers (like tplink wr841n) with disabled IPv6 support and packages (so its a trade - IPv6 or ipsec tunnels).

Signed-of-by: Mikalai Miadzvedz <brainsucker.na@gmail.com>
2015-11-19 00:45:41 +03:00
Dirk Brenken
3dc3e1d214 adblock: fix redirection issues
fix more corner cases because of mksh to ash migration
fix logical glitch during startup

Signed-off-by: Dirk Brenken <dirk@brenken.org>
2015-11-16 10:10:24 +01:00
tripolar
2a5d519d01 Merge pull request #1923 from hnyman/libtorrent
Libtorrent and rtorrent: update version, disable ipv6 to fix compilation

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-11-15 12:43:52 +01:00
Ted Hess
aba5fa9a8d redsocks: updates to latest source and gcc build options
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-11-14 11:22:18 -05:00
Ted Hess
5c8509d37d Merge pull request #1952 from dibdot/master
adblock: additional check for running dns query background task
2015-11-14 10:43:27 -05:00
Miroslav Lichvar
9b9c34e47d chrony: improve hotplug and init scripts
- fix the init script to read the right config
- rework the init script to allow reusing its code in the hotplug script
- find wan interfaces in the hotplug script instead of using hardcoded
  name and set the online/offline status separately for IPv4/IPv6
- allow NTP access on interfaces that are configured after chronyd start
- add NTP servers obtained from DHCP, options are specified in a new
  dhcp_ntp_server config section
- start chronyd before the network service, include a patch to always
  have IP_FREEBIND defined, which seems to be missing with uclibc

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2015-11-14 13:36:52 +01:00