Commit graph

7124 commits

Author SHA1 Message Date
Hannu Nyman
1c67444c33
Merge pull request #13004 from commodo/netatalk-fix-clang
netatalk: fix compile error in mac os
2020-08-03 12:51:19 +03:00
Liangbin Lian
e60ad5400e netatalk: fix compile error in mac os
fix compile error in mac os when dtrace installed.

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
2020-08-03 12:26:32 +03:00
Rosen Penev
3ae4b3f016
Merge pull request #13002 from liudf0716/apfree-wifidog
apfree-wifidog: fix bug of cert generating condition and enable misuse
2020-08-02 23:12:40 -07:00
Yousong Zhou
7d7cbae75e shadowsocks-libev: support ss-server option local_{ipv4,ipv6}_address
At the moment ss-server seems to be the only component using these two
options.  It also accepts "local_address" of either ip4 or ip6 address,
but the meaning is different from that of ss-local, ss-tunnel etc.
where it is for listen bind

With this commit, we start deprecation process of uci option
"bind_address".  The name was replaced with "local_addr" in upstream
project commit 5fa98a66 ("Fix #1911") and available as json config
option "local_address".  This upstream change was released in 3.2.0

Link: 4a42da641b
Link: https://github.com/openwrt/packages/issues/12931
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-08-03 11:52:56 +08:00
Dengfeng Liu
69a7cf4c1d apfree-wifidog: fix bug of cert generating condition and enable misuse
Signed-off-by: Dengfeng Liu <dfliuc@isoftstone.com>
2020-08-03 10:16:01 +08:00
Rosen Penev
e1c3ed6748
softethervpn: fix compilation with clang
Needs , not = for the rpath parameter.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-08-02 00:48:59 -07:00
Rosen Penev
02d5c37808
ola: fix compilation with clang
Needs , not = for the rpath parameter.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-08-02 00:48:49 -07:00
Rosen Penev
0c3f4fd079
Merge pull request #12899 from aaronjg/openwrtize-openfortivpn
openfortivpn: use a more 'OpenWRT' paradigm throughout the code
2020-08-01 16:40:41 -07:00
Rosen Penev
bb6cecb2ca
Merge pull request #12904 from odmdas/odmdas-freeradius3-Makefile
freeradius3: add missing conffiles to Makefile
2020-08-01 16:37:45 -07:00
Alexey Dobrovolsky
f6974b8f3c freeradius3: add missing conffiles to Makefile
Config files
/etc/freeradius3/policy.d/accounting
/etc/freeradius3/policy.d/filter
/etc/freeradius3/proxy.conf
/etc/freeradius3/sites-available/default
and link
/etc/freeradius3/sites-enabled/default
are in the freeradius3 package and are mentioned in the main config file
/etc/freeradius3/radiusd.conf
Thus, they must be explicitly specified in the Makefile.

File
/etc/freeradius3/sites/default
is not included in the package, is not created during installation,
is not mentioned in the main config file and should therefore be excluded
from the Makefile.

Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
2020-08-01 23:31:59 +03:00
Aaron Goodman
176f363b5f openfortivpn: remove explicit handling of peerdns and defaultroute
netifd is clever enough to handle the peerdns and default route
arguments, so we can just let them get passed along, and when
ppp-up invokes proto_send_update, netifd will only apply what
is needed

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-31 21:43:06 -04:00
Christian Lachner
4c2edf71c2 haproxy: Update HAProxy to v2.2.2
- Update haproxy download URL and hash
- This new version also adds LUA 5.4 support

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-07-31 18:49:35 +02:00
Hannu Nyman
6a547b60a3
Merge pull request #12594 from hnyman/nlbw
nlbwmon: add hotplug script to reload after interface ifup
2020-07-31 16:55:42 +03:00
Aaron Goodman
991147ff43 openfortivpn: improve logging
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-30 20:47:34 -04:00
Aaron Goodman
93af5a19bb openfortivpn: add defaultroute option
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-30 20:47:34 -04:00
Aaron Goodman
7ec4881762 openfortivpn: use functions/network.sh to access interface params
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-30 20:47:34 -04:00
Aaron Goodman
a541f0be8a openfortivpn: use proper method to access configuration in hotplug
Use functions.sh to get configuration variables rather than calling uci

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-30 20:47:33 -04:00
Josef Schlehofer
639d7fbd9f
Merge pull request #12975 from ja-pa/clamav-security-fix
clamav: update to version 0.102.4 (security fix)
2020-07-30 21:32:24 +02:00
Jan Pavlinec
5d7164aaba
clamav: update to version 0.102.4 (security fix)
Fixes
CVE-2020-3481

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-07-30 15:28:52 +02:00
Aleksander Morgado
735eb02d04 modemmanager: avoid requiring autoreconf to build package
Do not manually overwrite the paths of gdbus-codegen or glib-mkenums
in the ModemManager package build, as modifying the configure.ac ends
up requiring a full autoreconf.

Since MM 1.14, git builds or autoreconf-ed source package builds
require autoconf-archive installed in the build system, and so the
build would fail if this happens.

The update to overwrite the paths was to force using the gdbus-codegen
and glib-mkenums provided by the "host" glib2 package instead of the
"target" glib2 package (see fa8ad6e69c),
but these tools are really the same in both as they're python
programs, arch independent.

Tested in a local build where the setup detects and uses the correct
glib tool paths from the target:
  /home/user/openwrt/staging_dir/target-mips_24kc_musl/usr/bin/gdbus-codegen
  /home/user/openwrt/staging_dir/target-mips_24kc_musl/usr/bin/glib-mkenums

Fixes https://github.com/openwrt/packages/issues/12958

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-07-30 09:32:17 +02:00
Rosen Penev
bca517b3d9
Merge pull request #12970 from EricLuehrsen/unbound_11100
unbound: update to 1.11.0
2020-07-30 00:23:14 -07:00
Yousong Zhou
a00671bf86 openvswitch: remove explicit dependency on librt
Selection of librt will be handled by the build system

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-07-30 11:54:34 +08:00
Eric Luehrsen
54164792aa unbound: update to 1.11.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-07-29 22:55:21 -04:00
Yousong Zhou
52e074411b openvswitch: only libopenvswitch depends on libunbound, libunwind
This is to make explicit the conditional select of libunwind is only
needed for libopenvswitch.  If we spill it over other packages, the
generated kconfig will have recursive dependency issue.  2 new patches
were made for this goal

The other thing is that "+libunwind" will cause it to be built if any of the
packages defined in this Makefile is enabled (y or m).  This is at the moment
by-design of the build system.

Libunwind does not support architectures like arc.  Use conditional select To
avoid (libunwind) build failures like the following,

  checking for ELF helper width... configure: error: Unknown ELF target: arc
  make[3]: *** [Makefile:65: /data/openwrt/build_dir/target-arc_arc700_uClibc/
  libunwind-1.3.1/.configured_68b329da9893e34099c7d8ad5cb9c940] Error 1

Things like "+PACKAGE_openvswitch-libopenvswitch:libunwind" will also result in
recursive deps error for chains of 3 nodes.  Kconfig construct like the
following will be made

	config A
		tristate
		select B
		depends on !(C) || (x)

	config B
		tristate
		select C

	config C
		tristate

	config x
		bool

Other changes include

 - Shared use of variable ovs__common_depends was removed
 - Ovn doc build was patched out

Link: https://github.com/openwrt/packages/pull/12959#issuecomment-665021413
Reported-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-07-30 10:02:13 +08:00
Yousong Zhou
f69f4f3fae openvswitch: rename shared var name ovs{,_}_common_depends
To avoid conflict with package ovs_common_depends of package
openvswitch-common

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-07-30 10:02:13 +08:00
Yousong Zhou
acca35d460 openvswitch: backport patch fixing build for 4.14.187
Supersedes openwrt/packages#12932

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-07-30 10:02:13 +08:00
Rosen Penev
59d5308ba9 sshfs: update to 3.7.0
Simplified Makefile as a result of meson transition.

Fixed license information.

Updated URL.

Added patch to fix linking issue.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-29 16:40:34 -07:00
Aaron Goodman
c8a8afe8c0 openfortivpn: version bump to 1.14.1-6
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-28 23:06:09 -04:00
Aaron Goodman
d8b71f45a8 openfortivpn: don't report error if symlink already exists
If two openfortivpn scripts are started at the same time, a race
condition can occur where the conditional evaluates to true, but the
symlink exists by the time the other script tries to create it

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-28 23:06:09 -04:00
Aaron Goodman
7f109ec59f openfortivpn: minor formatting changes
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-28 23:06:09 -04:00
Aaron Goodman
2f9cfb036f openfortivpn: block restart after authentication failure
Block restart of the interface if the openfortivpn fails to authenticate.
Without this check, with a bad password, netifd will continually
hit the VPN endpoint with connection attempts

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-28 23:06:09 -04:00
Rosen Penev
a445b39bef
fping: update to 4.4
Remove upstreamed patch.

Whitespace Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-28 16:10:26 -07:00
Hannu Nyman
25dfa20780 nlbwmon: add hotplug script to reload after interface ifup
Add a hotplug script to reload nlbwmon's config after interface
ifup actions.

That should improve the detection of the IPv6 LAN address
that can get enabled a bit later in the boot process.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2020-07-28 19:23:12 +03:00
Florian Eckert
00cb41275c
Merge pull request #12948 from TDT-AG/pr/20200724-mwan3
mwan3: update to version 2.8.12
2020-07-28 07:07:14 +02:00
Florian Eckert
85e91377cf mwan3: update version to 2.8.12
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-28 06:53:24 +02:00
Florian Eckert
981d1eb83a mwan3: unify variable check
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-28 06:53:24 +02:00
Florian Eckert
ab747fe0fb mwan3: remove lock file entirely
Removing the lock file ist not necessary

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-28 06:53:24 +02:00
Florian Eckert
b5bd6d757b mwan3: revert: also cleanup lock on mwan3 stop
This reverts commit cde2a77ed3.

Applying this change has shown that it is even quicker to provoke the
race condtition on simultan mwan3 commands execution.
By reversing the change we have the same behaviour as before.

But the race condition on mwan3 execute at the same time still exists.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-28 06:53:24 +02:00
Florian Eckert
2dac1bcdc9 mwan3: fix race condition on mwan3 restart
This adjustment of the locks fixes the race condition when a mwan3
hotplug script and a mwan3 command are running at the same time.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-28 06:53:24 +02:00
Simon Kinane
d7507146e8 openvswitch: adds new UCI section ovs_bridge
This new config section in package openvswitch
supports creating a named bridge, and setting
its' OpenFlow controller end-point.

An example config is included in /rom/etc/config/openvswitch

Signed-off-by: Simon Kinane <skinane@fb.com>
2020-07-28 12:46:17 +08:00
peter-stadler
9cdc4a47f0
nginx: remove PROVIDES on depending package
Fix recursive dependency for `make menuconfig`.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-07-27 22:56:12 +02:00
Christian Lachner
78d99efb9b haproxy: Update HAProxy to v2.2.1
- New major version (LTS release)
- Update haproxy download URL and hash
- Remove obsolete dladdr1-dependency-patch as it has been upstreamed
- USE_REGPARM is obsolete and therefore removed from our Makefile

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-07-27 21:32:08 +02:00
Olivier Poitrey
7de22184e7 nextdns: Update to version 1.7.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-07-26 14:42:46 +00:00
Rosen Penev
6d3767075a
Merge pull request #12929 from peter-stadler/nginx-always-ssl
nginx: enable ssl for all variants and remove nginx-util w/o ssl
2020-07-26 02:23:40 -07:00
Rosen Penev
6c173164ef
Merge pull request #12915 from lucize/frrup
frr: update to 7.4 and latest backports
2020-07-26 02:18:42 -07:00
Peter Stadler
3603f50fd5 nginx: enable ssl for all variants and remove nginx-util w/o ssl
Make the plain nginx version the same as nginx-ssl.
In a further change we will replace nginx by a dummy package,
depending on +nginx-ssl instead. This allows a smooth upgrade.

For nginx-util leave the ssl and the ssl-nopcre versions only.
For nginx-mod-luci remove the duplicate ssl version.
Replace the removed packages by dummies for a smooth upgrade.
The dummy packages will be removed after a transition period.

Additionally, enable the http2 module for nginx-ssl by default
and cleanup the nginx.init file.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-07-25 17:36:28 +02:00
Rosen Penev
7171b4d498
Merge pull request #12916 from kenkeys/spoofer-v146
spoofer: Update to 1.4.6
2020-07-24 17:54:43 -07:00
Ken Keys
4171636692 spoofer: Update to 1.4.6
Includes a new CA file for compatibility with upcoming change to spoofer
server SSL cert

Signed-off-by: Ken Keys <kkeys@caida.org>
2020-07-24 15:42:36 -07:00
Lucian Cristian
8c0d17cf5d frr: update to 7.4 and latest backports
changelogs: https://github.com/FRRouting/frr/releases/tag/frr-7.4

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-07-24 18:50:07 +03:00
William Fleurant
1d78e7dc31 yggdrasil: Ygg-over-ygg bugfix
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2020-07-23 23:35:18 -04:00