Commit graph

248 commits

Author SHA1 Message Date
Steven Barth
a45e3fbf78 strongswan: bump to 5.3.0
Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-10 13:39:35 +02:00
Steven Barth
df44b2c331 strongswan: fix IKEv1 support
Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-10 13:39:28 +02:00
Mislav Novakovic
1f650f580a freeradius2: add mirror for older releases
Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
2015-05-26 00:42:26 +02:00
Karl Palsson
e9e1c3071e mosquitto: upgrade 1.3.4 to 1.3.5
Minor bugfix release

Full changelog http://mosquitto.org/2014/10/version-1-3-5-released/

Signed-off-by: Karl Palsson <karlp@remake.is>
2015-05-08 10:13:46 +00:00
Toke Høiland-Jørgensen
e9db7f4001 sqm-scripts: Only run on hotplug if the init script is enabled.
Fixes #1202.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2015-04-30 14:22:57 +02:00
Sebastian Moeller
0b8ec3e5f9 Remove dependeny on iptables-mod-filter from sqm-scripts
As Hnyman noted in https://github.com/dtaht/ceropackages-3.10/issues/13
we carry a few unnecessary dependecies in sqm-scripts, so remove one of
them (iptables-mod-filter) as we neither use it nor plan to use it.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-04-19 14:18:17 +02:00
Nikos Mavrogiannopoulos
f3b19cda52 openconnect: list the defaultroute option
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-03-29 08:22:54 +02:00
Sebastian Moeller
74e3c57fe0 sqm-scripts: clean up interface selection for hotplugging
The initial conversion to restart sqm on interfaces it is configured
for in case of (transient) dis- and reappearance was half finished.
These changes clean up the handling of exlicitly passed interfaces
in run.sh: no second argument defaults to all configured interfaces
the alternative is an individual interface name passed as 2nd
argument to run.sh. The first argument either is start or stop.
No argument at all will behave as if start was passed.
Survives light testing...

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-03-25 10:38:11 +01:00
Sebastian Moeller
6604f9ede0 sqm-scripts: change default for qdisc target parameter
Alan Jenkins noted a bug in the smq luci GUI that effectively
erased several configuration paramters if two checkboxes were deselected.
This behaviour seems consistent in luci but certainly has the potential
to confuse users. While confusion can not really be avoided generally
it seems wise to change the default interpretation for empty or non-existent
itarget and etarget variables from the qdisc's default (5ms in the case of
one of the codels) to automatic determination of tghis variable dependent on
the configured bandwidth, as codels target variable should be large enough
to contain at least one full packet. With this change sqm-scripts will
do the right thing by default, but will yet allow the user to specify
over-ridding values (as long as the user does not un-check the
entry-field exposing check boxes). Survives light testing...
This change set also changes the sqm-scripts luci gui to note the user
of the change. For compatibility with existing setups sqm-scripts
will still honor "auto" as an alternative explicit way of requesting
automatic target selection. This might turn into a warning in the future
and might be phased out...

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-03-25 10:38:03 +01:00
Hannu Nyman
44356cac79 sqm-scripts: backport "make run.sh ignore spurious incomplete hotplug ifups"
Backport from trunk the commit improving hotplug action.
1b5afe8f46

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-03-05 17:57:48 +02:00
Hannu Nyman
17b6911cde sqm-scripts: backport from trunk "Teach SQM hotplug tricks"
Backport from trunk the commit that adds support for hotplug action.
5b61cfba07

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-03-04 21:34:19 +02:00
Hannu Nyman
bafecb73ad luci-app-sqm: backport package from trunk
Backport of luci-app-sqm package from trunk.
I have been using it in my BB14.07 build without any problems.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-02-17 20:09:34 +02:00
Hannu Nyman
2797914b37 sqm-scripts: backport package from trunk
Backport of sqm-scripts package from trunk.
I have been using it in my BB14.07 build without any problems.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-02-17 20:07:30 +02:00
Maxim Storchak
90fad61a79 rsync: patch CVE-2014-9512
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2015-02-15 22:45:20 +01:00
Steven Barth
ca0d453af9 strongswan: bump to 5.2.2
Signed-off-by: Steven Barth <steven@midlink.org>
2015-02-13 12:16:55 +01:00
Steven Barth
00c2f3d436 strongswan: correctly install plugin include configs
Signed-off-by: Steven Barth <steven@midlink.org>
2015-02-13 12:16:51 +01:00
Steven Barth
29f23f24d5 strongswan: update to 5.2.1
Signed-off-by: Steven Barth <steven@midlink.org>
2015-02-13 12:16:46 +01:00
Steven Barth
e60cbd46cb strongswan: import, update, adopt
Signed-off-by: Steven Barth <steven@midlink.org>
2015-02-13 12:16:41 +01:00
Jo-Philipp Wich
83c747ea61 rtorrent: remove manual autoconf invocation
The Makefile already uses the proper autoreconf fixup but leaves a manual
autoconf invocation in place.

The bad autoconf call leads to the following build error in the SDK:

	( cd .../rtorrent-0.9.4-git; ./autogen.sh );
	aclocal...
	autoheader...
	libtoolize... libtoolize nor glibtoolize not found
	make[2]: *** [.../rtorrent-0.9.4-git/.configured_] Error 1

Remove the entire Build/Configure override to let rtorrent build correctly.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2015-02-09 16:56:38 +01:00
tripolar
60e6ab7c02 Merge pull request #753 from wildoats/for-14.07
rtorrent: reenable rtorrent-rpc in Barrier Breaker

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-02-01 17:12:11 +01:00
Nikos Mavrogiannopoulos
579bdc1e84 ocserv: enable min-reauth-time in default configuration
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-24 14:00:48 +01:00
Adze1502
71719ebefa mwan3: update to version 1.5-10
Fixed issue in mwan3 status output with mwan3 interfaces not yet configuerd in network config
Removed nexthop argument as it is no longer used

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2015-01-20 22:11:31 +01:00
wildoats
e593c1c7d2 rtorrent: Reenable rtorrent-rpc in Barrier Breaker
Signed-off-by: Jan Ulrich <jan@janulrich.org>
2015-01-20 12:53:51 -08:00
Nikos Mavrogiannopoulos
099ec4a071 openconnect: use openconnect.upgrade to save configured files
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-19 23:30:16 +01:00
Nikos Mavrogiannopoulos
cdcbacdda9 Revert "openconnect: move certificate files to config/ to add graceful upgrade"
This reverts commit b53e5bfe87.
2015-01-19 23:30:10 +01:00
Nikos Mavrogiannopoulos
09c3b4df0b Revert "openconnect: cmdline parameter for CA not moved"
This reverts commit fa8f547945.
2015-01-19 23:30:05 +01:00
Nikos Mavrogiannopoulos
0d68740100 ocserv: prevent ocpasswd from using sha2crypt
That doesn't cope well with uclibc.
https://bugs.busybox.net/show_bug.cgi?id=7808

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-19 23:28:41 +01:00
Nikos Mavrogiannopoulos
392316bfc8 ocserv: use ocserv.upgrade to save configured files
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-19 23:28:26 +01:00
Nikos Mavrogiannopoulos
cb26e66c26 Revert "ocserv: store permanent config files in /etc/config"
This reverts commit 1c40fc1022.
2015-01-19 23:27:46 +01:00
Nikos Mavrogiannopoulos
5b09f7af1b openconnect: bumped version
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-17 09:15:23 +01:00
Jasper
6367ee0d0f openconnect: cmdline parameter for CA not moved
The location for the server CA file was moved in b53e5bfe87, but the corresponding command line option for opeconnect not updated.
2015-01-17 09:02:45 +01:00
Nikos Mavrogiannopoulos
b1534adc8b ocserv: store permanent config files in /etc/config
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-12 19:51:45 +01:00
Nikos Mavrogiannopoulos
93119a4573 ocserv: updated to 0.8.9
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-10 21:43:07 +01:00
Nikos Mavrogiannopoulos
32da468cde openconnect: removed obsolete patch
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-10 11:23:21 +01:00
Nikos Mavrogiannopoulos
9cb5b3864d openconnect: update to 7.03
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-10 11:15:02 +01:00
Adze1502
7c2b22ca8d mwan3: update to version 1.5-9
Fix issue where config file would be overwritten in some cases
Fix issue where local address of wan point-to-point links were unreachable from lan

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2014-12-22 10:13:54 +01:00
Aedan ARFETT Renner
e27831d568 mwan3-luci: update to 1.3-5
new naming/wording - more generically mwan than mwan3
renamed cryptic variables/functions/etc everywhere
removed unused and unnecessary variables everywhere
cleaned up ugly and inefficient Lua and Javascript

Signed-off-by: Aedan Renner chipdankly@gmail.com
2014-11-11 23:00:13 +01:00
Aedan Renner
a1d8519b7d mwan3-luci: update to 1.3-4
put dummy echo command back in hotplug script send_alert function to avoid errors

Signed-off-by: Aedan Renner chipdankly@gmail.com
2014-11-11 23:00:13 +01:00
Aedan Renner
b128beaf2a mwan3-luci: update to 1.3-3
corrected name of last_resort option from "main" to "default"
added blackhole option to policy selection on rule configuration

Signed-off-by: Aedan Renner <chipdankly@gmail.com>
2014-11-11 23:00:13 +01:00
Aedan ARFETT Renner
6c1e1705b1 mwan3-luci: update to 1.3-2
added support for new last_resort option for policy configuration
added dependencies for luci-mod-admin-full and luci-lib-nixio
shortened length of menuconfig description lines
reworded things on various pages
changed date formatting in custom hotplug script
default route checks now verify both destination/netmask are 0.0.0.0
condensed messy javascript lines and removed -F' ' from awk commands

Signed-off-by: Aedan Renner <chipdankly@gmail.com>
2014-11-11 23:00:13 +01:00
Jo-Philipp Wich
6f089246a1 freeradius2: relax SSL version checks
Merge upstream commit 5ae2a70a135062a025d8fabc104eeae3a2c53a7a to relax the
SSL library version check at runtime.

The objective is to avoid the need for rebuilding freeradius2 whenever we push
binary updates for libopenssl. See https://dev.openwrt.org/ticket/18169 for
reference.

Please backport this change to the for-14.07 branch as well.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2014-11-11 11:14:17 +01:00
Jo-Philipp Wich
e9189f2efd wget: update to v1.16
The update fixes CVE-2014-4877 which allows malicious FTP servers
to modify local filesystem contents through specificially crafted
symlinks.

Please backport to for-14.07 too.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2014-10-30 11:31:56 +01:00
Nikos Mavrogiannopoulos
d83d5f6806 openconnect: fixed description of ca file location
Resolves #407
2014-10-09 22:15:20 +02:00
Adze1502
e6ea22ec3c mwan3: update to version 1.5-8
Fix bug introduced in version 1.5-7; args were not parsed to script.

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2014-10-07 14:04:53 +02:00
Adze1502
4c5ee1bc42 mwan3: update to version 1.5-7
Fixed issue where an manual ifup-ed interface would immediatly go down again
Remove from init as mwan3 is not a service

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2014-10-07 14:04:39 +02:00
Adze1502
4cc7f9d09d mwan3: update to version 1.5-6
Fixed issue where mwan3 would not immediately set interface down on link-loss event
Added feature to define last-resort action on policies with no members

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2014-10-07 14:04:22 +02:00
Adze1502
5a6a54e377 mwan3: update to version 1.5-4
Fix issue with more than one link route on a wan interface

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2014-10-07 14:04:00 +02:00
Bruno Randolf
02ae80a871 horst: Add horst version 4.2
horst 3.0 from oldpackages does not work well with the new mac80211 drivers
of 14.07, so please consider to merge this...

Signed-off-by: Bruno Randolf <br1@einfach.org>
2014-10-02 09:16:41 +01:00
Nikos Mavrogiannopoulos
04e21e66e2 openconnect: increased the timeout value for retrying
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-09-28 18:26:45 +02:00
sbyx
cd4e751ea1 Merge pull request #346 from salzmdan/for-14.07
knot: update to 1.5.3.
2014-09-23 09:20:09 +02:00