Commit graph

7070 commits

Author SHA1 Message Date
Hannu Nyman
ac9c5baabd
Merge pull request #12333 from stangri/master-simple-adblock
simple-adblock: bugfix: proper error reporting on failed downloads; lists update script
2020-06-03 18:21:37 +03:00
Othmar Truniger
726db21424 knxd: backport fix for usblowlever.cpp from upstream
Signed-off-by: Othmar Truniger <github@truniger.ch>
2020-06-03 16:59:25 +02:00
Rosen Penev
ce21a8b488
Merge pull request #12386 from neheb/kisme
kismet: fix compilation with libcxx 10
2020-06-03 07:28:12 -07:00
David Bauer
da76aeb24c unbound: expose interface-auto to UCI
This exposes the interface-auto option to UCI.

By default, interface-auto is disabled.
This leads to the DNS reply possibly originating from
a different address then the request was sent to.

Devices with a packet filter might not receive the reply in this case.

Enabling interface-auto ensures the reply is sent with the
source-address the request was sent to.

Signed-off-by: David Bauer <mail@david-bauer.net>
2020-06-03 16:05:52 +02:00
Rosen Penev
5f6f54b851 nmap: fix compilation with libcxx 10
Seems nmap's time header logic is broken.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-06-03 10:31:23 +02:00
Nick Hainke
8f2f64b5a1 dawn: bump to latest version
Includes:
- ubus/datastorage: don't repeatedly ask devices for beacon reports if
	don't support it
- uci: fix loading of config
- utils/ubus: fix memory leak at blobmsg_format_json
- ubus: add local flag to network overview
- ubus: fix network overview
- network/tcpsocket: make sure every msg is complete before handle
- datastorage: refactor to support scalability testing
- network/tcpsocket: make sure every msg is complete before handle
- ubus: fix network overview
- ubus: add local flag to network overview

Signed-off-by: Nick Hainke <vincent@systemli.org>
2020-06-03 09:08:20 +02:00
Rosen Penev
c7563f4129
kismet: fix compilation with libcxx 10
Seems a bind call is missing.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-06-02 16:25:43 -07:00
Karl Palsson
2954adab3c net/mosquitto: bump to 1.6.10
Full changelog at: https://mosquitto.org/blog/2020/05/version-1-6-10-released/

Fixes openssl 3.0 support,
Minor fixes, nothing standout as applicable specifically to OpenWrt.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2020-06-02 10:27:05 +00:00
Hannu Nyman
8f2162e301
Merge pull request #12373 from dengqf6/ksmbd
ksmbd: update
2020-06-01 21:49:42 +03:00
Othmar Truniger
83d0504585 knxd: bump to upstream version 0.14.38
Signed-off-by: Othmar Truniger <github@truniger.ch>
2020-06-01 10:08:24 +02:00
DENG Qingfang
27a64f075e ksmbd-tools: update to 3.2.6
Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
2020-06-01 11:03:55 +08:00
Rosen Penev
73ba568314
Merge pull request #12281 from dl12345/bind
bind: add nslookup alternative to busybox nslookup
2020-05-31 14:33:23 -07:00
Rosen Penev
ae27b8af5e
ola: replace gnu++11 patch with a configure var
Simpler.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-31 14:03:29 -07:00
Rosen Penev
8f7687833e
ola: fix compilation with GCC4
The configure script confusingly sets CXXFLAGS to gnu++11 but does
not use that to check the important stuff. Fix that.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-31 14:01:32 -07:00
Rosen Penev
d8ee5fae31
Merge pull request #12369 from gladiac1337/haproxy-2.1.5
haproxy: Update HAProxy to v2.1.5
2020-05-31 13:59:09 -07:00
Christian Lachner
169a431273 haproxy: Update HAProxy to v2.1.5
- Update haproxy download URL and hash
- This version introduces backtrace-support via backtrace(), however, it must be disabled because neither MUSL nor UCLIBC support it (build fails because of missing execinfo.h)
- Our previous UCLIBC patch is now obsolete and has been removed. We now only disable libcrypt support.
- A new patch was backported from the haproxy dev-branch which fixes an IFDEF which should only allow GLIBC to use dladdr1 and make builds fall back to dladdr when using other c-libs. The previous logic was bogus and broke the build on UCLIBC.

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-05-31 20:32:24 +02:00
Dirk Brenken
ab44d8146a
adblock: update 4.0.5-4
* remove dumb list cache
* start adblock processing after adding/removing
  list sources via CLI
* add regional list source for france

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-05-31 18:28:27 +02:00
Toke Høiland-Jørgensen
f785b219cd
Merge pull request #12346 from wt/acme_cron_improvement
acme: remove cron entry on package removal
2020-05-31 12:24:50 +02:00
Olivier Poitrey
7e762d18f2 nextdns: Update to version 1.6.4
Refactor the package so init script is installed from the binary instead
of an init script embedded in the package.

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-31 00:16:24 -07:00
Wren Turkal
54a6593b6f acme: remove cron entry on package removal
Previously, the cron config was not removed on uninstall. This change fixes
that.

Signed-off-by: Wren Turkal <wt@penguintechs.org>
2020-05-30 22:51:14 -07:00
Rosen Penev
a79588dc3b
Merge pull request #12357 from wt/uacme_cron_improvement
uacme: remove cron entry on package removal
2020-05-30 16:18:12 -07:00
Dirk Brenken
7f6763359c
adblock: update 4.0.5-3
* fix oisd_nl source parser (format has been changed)
* enable safesearch support for kresd (ip based)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-05-30 06:10:59 +02:00
Aaron Goodman
4efaa44b21 mwan3: Use /128 for ipv6 if no other source address was found
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-05-29 09:44:20 -04:00
Aaron Goodman
5147dfc73a mwan3: Allow user to specify rules based on source interface
Add an option for adding rules based on source interface.
The default 0.0.0.0/0 src and destination ip addresses has been removed. It is unclear
how the 'any' family of rules would have worked, as it appears each rule always required an
ipv4 or ipv6 address src and destination address.  With this change, the any family will work
again.

I also cleaned up a bunch of repeated code around adding the iptables rules for
ipv4/ipv6/any in making the change.

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-05-29 09:42:29 -04:00
Wren Turkal
953702ad30 uacme: remove cron entry on package removal
Previously, the cron config was not removed on uninstall. This change fixes
that.

Signed-off-by: Wren Turkal <wt@penguintechs.org>
2020-05-28 22:36:20 -07:00
Aaron Goodman
cf38136b00 mwan3: Do not mangle outgoing ipv6 pings
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-05-29 01:24:57 -04:00
Rosen Penev
cf6f72d542
Merge pull request #12344 from James-TR/pdns-4.2.2-bump
pdns: update to 4.2.2
2020-05-27 17:43:41 -07:00
Rosen Penev
79664cec4f
Merge pull request #12343 from James-TR/pdns-recursor-4.2.2-bump
pdns-recursor: update to 4.2.2
2020-05-27 17:43:30 -07:00
Nick Hainke
79e3889cf3 dawn: bump to latest version
Prepare DAWN for prometheus-node-exporter by always showing the whole
network overview.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2020-05-27 17:42:03 +02:00
James Taylor
15264ff156 pdns: update to 4.2.2
Updates pdns to latest release in the 4.2 series.

Full change log for this release is available at:
https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.2.2

Signed-off-by: James Taylor <james@jtaylor.id.au>
2020-05-27 13:13:13 +00:00
Alin Nastac
901a33667b xtables-addons: fix RTSP helper support for client_port=x/y Transport attribute
Signed-off-by: Alin Nastac <alin.nastac@gmail.com>
2020-05-27 12:49:21 +02:00
Yousong Zhou
26291bba4e openvswitch: pass KERNEL_MAKE_FLAGS for reproducible build
Reported-by: Paul Spooren <mail@aparcar.org>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-05-27 16:38:56 +08:00
Yousong Zhou
931ff98633 openvswitch: rework disabling docs build
This is needed since openvswitch 2.13 commit 2a97891eb23b
("Documentation: Work with sphinx-build for Python 3 also.")

The 4th patch was also reworked to serve as another guard

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-05-27 16:38:56 +08:00
Stan Grishin
901159b8c7 simple-adblock: bugfix: proper error reporting on failed downloads; lists update script
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-27 00:25:57 +00:00
Dylan Bourdon
2986f4c24c
coova-chilli: Update pkg_release
Signed-off-by: Dylan Bourdon <dbourdon@student.42.fr>
2020-05-26 17:51:26 -04:00
Dylan Bourdon
740cf4fb18
coova-chilli: Add json interface build option
Signed-off-by: Dylan Bourdon <dbourdon@student.42.fr>
2020-05-26 17:44:44 -04:00
Rosen Penev
c94ded697b
Merge pull request #12323 from peter-stadler/nginx-util-clang
nginx-util: fix issues and cleanup
2020-05-26 13:12:22 -07:00
Olivier Poitrey
711983118d nextdns: Update to version 1.6.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-26 19:31:26 +00:00
Rosen Penev
413b7dced7
Merge pull request #12280 from sgabe/sslh-transparent
sslh: add transparent proxy support
2020-05-26 11:17:38 -07:00
Gabor Seljan
46c253dfca sslh: use tls option instead of deprecated ssl
Upstream will drop support for the ssl option in the next future version.

Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
2020-05-26 20:02:15 +02:00
Gabor Seljan
f3aaffdd6f sslh: add capabilities support
Compile with USELIBCAP=1 to make use of POSIX capabilities. This will
save the required capabilities needed for transparent proxying for
unprivileged processes.

Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
2020-05-26 19:59:24 +02:00
Gabor Seljan
4950a37797 sslh: add http probe config
Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
2020-05-26 19:58:35 +02:00
Olivier Poitrey
76b7f669d4 nextdns: Update to version 1.6.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-26 17:58:23 +00:00
Rosen Penev
51bd6dd25b
Merge pull request #12321 from ja-pa/transmission-fix-init
transmission: init script check syscall list for seccomp
2020-05-26 10:19:30 -07:00
Peter Stadler
2d359a4556 nginx-util: fix issues and cleanup
* fix regex capture (to conform std)
* fix issues for Clang/libcxx (warnings/includes)
* fix CONFLICTS in the Makefile
* use /bin/sh in host scripts and shellcheck them
* add callback for setting arguments in ubus::call

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-05-26 18:36:03 +02:00
Ian Cooper
4cb5aa57fd
bind: add nslookup alternative to busybox nslookup
Add alternative to busybox nslookup. Busybox throws an error when
the host does not have an AAAA record.

Signed-off-by: Ian Cooper <iancooper@hotmail.com>
2020-05-26 16:48:52 +01:00
Paulo Machado
5f64b2d1e4 linuxptp: fix build failure
Build is failing because HWTSTAMP_TX_ONESTEP_P2P is defined anymore on
linux net_tstamp.h.

Moreover, the usual way of linuxptp build is looking for system includes
unless user defines differently. That also was tried to fix.

PKG_RELEASE bumped to 3.

Signed-off-by: Paulo Machado <pffmachado@yahoo.com>
2020-05-26 16:29:39 +01:00
James Taylor
490157fe2a pdns-recursor: update to 4.2.2
Updates pdns-recursor to latest release in the 4.2 series.

Includes backported fixes for CVE-2020-10995, CVE-2020-12244 and
CVE-2020-10030, plus avoid a crash when loading an invalid RPZ.

Full change log for this release is available at:
https://doc.powerdns.com/recursor/changelog/4.2.html#change-4.2.2

Signed-off-by: James Taylor <james@jtaylor.id.au>
2020-05-26 13:31:48 +00:00
Josef Schlehofer
49e01721ed
Merge pull request #12314 from Payne-X6/master
knot: update to version 2.9.5
2020-05-26 14:21:48 +02:00
Jan Hak
9d81b6e4ca knot: update to version 2.9.5
Removed patch
`03-configure-allow-to-manually-disable-POSIX-capabiliti.patch` that has been backported into release.

Signed-off-by: Jan Hak <jan.hak@nic.cz>
2020-05-26 14:19:44 +02:00
Jan Pavlinec
a6bffd306f
transmission: init script check syscall list for seccomp
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-26 14:16:40 +02:00
Rosen Penev
e8c831e236
Merge pull request #12296 from neheb/trans
transmission: update to 3.0
2020-05-26 02:05:40 -07:00
Kevin Darbyshire-Bryant
295d77943c miniupnpd: improve hotplug & interface handling
The existing interface selection/detection code was incomprehensible at
worst and convoluted at best.  The uci config file suggested it
understood an external ipv6 interface but in reality the init script
took no notice.  Re-work it so it is at least comprehendible and takes
notice of ipv6 interface details if specified.

Update the hotplug script to use the same interface selection/detection
code as the init script and take note of ipv6 interface selection, only
restarting miniupnpd on interface up events and only if that interface
isn't already known (for that ip class) by miniupnpd.

For me this has solved numerous 'flaky' startup problems, especially
with regard to ipv6.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-25 22:49:03 +01:00
Rosen Penev
f6d03d06fd
Merge pull request #12302 from aleksander0m/aleksander/mm-mtu
modemmanager: set interface MTU based on bearer settings
2020-05-25 12:08:17 -07:00
Gabor Seljan
888c580605 sslh: bump package release
Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
2020-05-25 17:25:29 +02:00
Aleksander Morgado
41552c1cc2 modemmanager: set interface MTU based on bearer settings
Using the same method used by other protocol handlers like uqmi.

Fixes https://github.com/openwrt/packages/issues/11383

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-05-25 15:35:50 +02:00
Jan Pavlinec
168efe753d
clamav: update to version 0.102.3 (security fix)
Fixes:
CVE-2020-3341
CVE-2020-3327

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-25 15:13:51 +02:00
Rosen Penev
93485dd317
transmission: update to 3.0
remove upstreamed patches. Refresh remaining one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-24 21:20:36 -07:00
Rosen Penev
f50e2bde1d
Merge pull request #12077 from peter-stadler/uwsgi
uwsgi: make luci-webui single threaded and log more
2020-05-24 18:32:00 -07:00
Rosen Penev
6b102f67d2
Merge pull request #12184 from peter-stadler/nginx-luci
nginx: set log level to crit for luci-static
2020-05-24 18:30:10 -07:00
Dirk Brenken
0b6ea12560
adblock: limit domain name length
* limit domain name length to max. 63 chars
  to fix issues with energized sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-05-24 21:40:58 +02:00
Gabor Seljan
499f3ac44b sslh: add transparent proxy support
Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
2020-05-24 18:58:37 +02:00
Peter Stadler
34cb21a2cf nginx: set log level to crit for luci-static
Do not write errors for inexistent files to the system log.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-05-24 18:53:16 +02:00
Rosen Penev
f5fdcf3e7e
Merge pull request #12159 from peter-stadler/nginx-smp
nginx: do not reduce max processes
2020-05-23 19:53:54 -07:00
Dirk Brenken
c9f91ecc47
adblock: release 4.0.5
* update energized source urls, add ultimate variant
* switch shalla source to http (invalid server certificate)
* add another stevenblack source variant (normal / porn)
* small cornercase fixes
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-05-23 21:15:52 +02:00
Rosen Penev
6607eeb96b
Merge pull request #12243 from PolynomialDivision/feature/update_dawn_latest
dawn: update to latest version
2020-05-23 01:11:02 -07:00
Nick Hainke
d1e0ae6a45 dawn: update to latest version
Includes:
- dawn_iwinfo: fix whitespace
- dawn_iwinfo: indentation
- dawn_iwinfo: iwinfo_finish();
- dawn_iwinfo: filter out global interface
- dawn_iwinfo: release iwinfo after usage
- tcpsocket: fix port print
- github: set CONFIG_SRC_TREE_OVERRIDE in actions CI
- github: fix link to dawn source
- github: use v2 for checkout action
- github: add GitHub Actions CI
- ubus: only update TCP socket list when using TCP connections
- add notice that full wpad is requirement
- fix link to luci-app-dawn
- update readme and install instructions

Signed-off-by: Nick Hainke <vincent@systemli.org>
2020-05-23 09:42:02 +02:00
Aaron Goodman
b7d1f81f10 mwan3: version bump to 2.8.6
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-05-22 20:01:49 -04:00
Aaron Goodman
35a86bdc11 mwan3: force busybox ping
openwrt 19.07 uses iputils 20101006-1

This ancient version of iputils has a bug where the -I option is not respected.

https://github.com/iputils/iputils/issues/55
https://github.com/iputils/iputils/issues/56
https://bugs.openwrt.org/index.php?do=details&task_id=1486

Thus, we should force using busybox ping at "/bin/ping" until the iputils
version gets an upgrade in the next major release

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-05-22 20:01:45 -04:00
Rosen Penev
2f8c24dfd1
Merge pull request #12252 from BKPepe/knot-disable-libcap-ng
knot: disable libcap-ng
2020-05-22 14:05:17 -07:00
Matthias Schiffer
598d4baa02
fastd: update to v19
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2020-05-22 21:15:46 +02:00
Josef Schlehofer
41957d6967
knot: disable libcap-ng
Recently, there was added libcap-ng to OpenWrt packages feed,
which is optional for Knot DNS. It enables POSIX 1003.1e capabilities.
This can restrict root (by default it runs as root) permissions and
might harm and as there isn't systemd on OpenWrt it can interfere.

There is an added patch, which introduced an option to disable libcap-ng.
This will be part of the next release.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-22 14:13:45 +02:00
Jeffery To
f350b5620b seafile-server: Update to 7.1.4, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-21 15:53:54 +08:00
Josef Schlehofer
a75391575b bind: update to version 9.16.3
Fixes:
CVE-2020-8616
CVE-2020-8617

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-20 11:24:22 -07:00
Rosen Penev
9455e46d7a
Merge pull request #12232 from neheb/cifs
cifs-utils: fix compilation
2020-05-20 09:20:10 -07:00
Yousong Zhou
1091badd83 openvswitch: fix file generation in /etc/modules.d
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Reported-by: Paul Spooren <mail@aparcar.org>
2020-05-20 23:29:44 +08:00
Aaron Goodman
aafdd0730c mwan3: don't add ipv6 link local address to routing tables
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-05-20 05:37:40 -04:00
Aaron Goodman
02ebd831c1 mwan3: reduce calls to `ip route list'
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-05-20 05:37:39 -04:00
Jan Pavlinec
51aa3e53cb
tor: update to version 0.4.3.5
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-20 11:35:30 +02:00
Josef Schlehofer
ef71facb41
Merge pull request #12215 from BKPepe/unbound-1.10.1
unbound: update to version 1.10.1 (security fix)
2020-05-20 08:40:18 +02:00
Rosen Penev
71975d68a4 cifs-utils: fix compilation
Now that libcap-ng is in the tree, cifs-utils is picking it up.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-19 22:14:10 -07:00
Hannu Nyman
5e84c4872c
Merge pull request #12210 from jefferyto/etesync-server-minor-cleanup
etesync-server: Minor Makefile cleanup
2020-05-19 17:01:14 +03:00
Josef Schlehofer
8ccff44ad1
unbound: update to version 1.10.1
Fixes:
CVE-2020-12662
CVE-2020-12663

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-19 11:23:57 +02:00
Rosen Penev
ee9fe907e7
Merge pull request #12212 from lnslbrty/package/netsniff-ng
netsniff-ng: new package
2020-05-19 01:18:00 -07:00
Toni Uhlig
563b1225ff
netsniff-ng: new package
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
2020-05-19 09:55:00 +02:00
Jeffery To
70064ea4ad etesync-server: Minor Makefile cleanup
* Replace creating an empty PYTHON3_PKG_DIR with setting filespec to an
  empty value

* Disable the default Python package build recipe (with
  PYTHON3_PKG_BUILD:=0) and set an empty Build/Compile

* Remove VARIANT:=python3 and PROVIDES (providing the same name as the
  package)

* Add PKG_BUILD_PARALLEL:=1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-19 00:19:54 +08:00
Lucian Cristian
a659c58f29 libreswan: various fixes
start if kernel has missing ipv6 support
add libcap-ng support
fix some errors displayed on syslog

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-17 04:57:48 +03:00
Sebastian Kemper
07db6b4a39 apache: revisit suEXEC setup
When adding suEXEC to the apache package, Alpine's package [1] served as
a template. Not enough attention was paid to the details.

Alpine uses a different layout. So for OpenWrt to use /var/www as
DocumentRoot does not make sense. /var is also volatile on OpenWrt. This
commit removes the configure argument. The default is htdocsdir.

This also does away with uidmin/gidmin 99. The default is 100, which is
fine.

Finally, the suexec binary is moved from /usr/sbin to
/usr/lib/apache2/suexec_dir. Upstream recommends installing suexec with
"4750" (see [2]) and the group set to the user's group. While that would
be possible, it would cause a few headaches on OpenWrt. The group would
need to be changed first in a post-install script and a call to chmod
would need to be made afterward, to make the binary SUID again.

It's easier to hide the SUID binary away from others in a directory.
This way we don't need to use chmod in the post-install script.

[1] https://github.com/alpinelinux/aports/tree/master/main/apache2
[2] https://httpd.apache.org/docs/2.4/suexec.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-16 14:47:37 +02:00
Sebastian Kemper
dbaad2fa44 apache: create log directory o=
Hides away the contents of the log directory from others.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-16 14:24:05 +02:00
W. van den Akker
fbed8ff1e7
Shorewall6: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:35:30 +02:00
W. van den Akker
49a930dae6
Shorewall: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:34:21 +02:00
W. van den Akker
10afa55dfb
Shorewall6-lite: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:33:12 +02:00
W. van den Akker
3a61f1244d
Shorewall-lite: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:32:11 +02:00
W. van den Akker
fba9ad6c3b
Shorewall-core: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:31:02 +02:00
Rosen Penev
66c94cd4e9
Merge pull request #12168 from lucize/libreswup
libreswan: update to 3.32
2020-05-14 20:45:37 -07:00
Olivier Poitrey
5d6e75743a nextdns: Update to version 1.5.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-14 23:41:01 +00:00
Lucian Cristian
7d969ca3e1 libreswan: update to 3.32
also add -flto to compiler flags

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-14 16:32:10 +03:00
Rosen Penev
a22fff844d
Merge pull request #9865 from peter-stadler/etesync
etesync-server: add package and configuration for running with uwsgi on nginx [RFC]
2020-05-14 00:24:59 -07:00
Aleksander Morgado
daff1c4497 modemmanager: improve package README
Explain which are the options supported by the protocol, and also
which are the supported values in each (if the field has value
validation).

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-05-14 09:19:57 +02:00
Aleksander Morgado
c5c5620f20 modemmanager: allow specifying list of authentication protocols
ModemManager allows specifying which are the authentication protocols
to be used during the user/password context authentication with the
peer.

This protocol update allows users to provide a new 'allowedauth'
option in the interface configuration, which is then used in two
different places:
 * It is sent to ModemManager in the --simple-connect call so that
   modems with a network interface can perform the authentication
   using their own vendor-specific protocol.
 * If the connection is done using PPP, this list of protocols is used
   to configure the pppd call.

If the new 'allowedauth' option is not given, all auth protocols are
implicitly allowed.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-05-14 09:19:54 +02:00
Peter Stadler
62609f1587 nginx: do not reduce max processes
Use the upstream value for NGX_MAX_PROCESSES (=1024) again.
So it is safe to use `worker_processes auto;` (which sets it to
the number of CPUs). Also use this directive in the conf instead
of calculating the number in the init and passing it as argument.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-05-14 09:19:45 +02:00
Rosen Penev
355d2b7bef
Merge pull request #12060 from looklookson/master
sslh: Add http probe support
2020-05-13 15:22:38 -07:00
Rosen Penev
5f1c9e3c94
Merge pull request #11964 from zhanhb/nginx-all-module
nginx: update all-module configurations
2020-05-13 14:56:58 -07:00
Rosen Penev
f1b445963b
Merge pull request #11981 from zhanhb/conffiles
treewide: add conffiles
2020-05-13 14:44:35 -07:00
Rosen Penev
edff5dffaa
Merge pull request #12146 from kobboi/master
ifstat: make dependency on libnetsnmp conditional
2020-05-13 14:39:52 -07:00
Othmar Truniger
33fb579a41 knxd: bump to version 0.14.37
Signed-off-by: Othmar Truniger <github@truniger.ch>
2020-05-13 14:12:50 +02:00
Christophe Lermytte
888e9d9cea ifstat: make dependency on libnetsnmp conditional
The upstream package supports it with a configure switch.
Defaulting to 'with SNMP support' as it was before.

Signed-off-by: Christophe Lermytte <gentoo@lermytte.be>
2020-05-13 10:46:00 +02:00
Oleg Derevenetz
654078b68d bwping: update to version 1.17
Signed-off-by: Oleg Derevenetz <oleg-derevenetz@yandex.ru>
2020-05-12 23:14:55 +03:00
Eneas U de Queiroz
6df2abceca
libreswan: fix compilation with Linux 4.14
According to a comment in programs/pluto/kernel_xfrm_interface.c:177:

* IFLA_XFRM_IF_ID was added to mainline kernel 4.19 linux/if_link.h
  with older kernel headers 'make USE_XFRM_INTERFACE_IFLA_HEADER=true'

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-05-12 09:30:30 -03:00
Kevin Darbyshire-Bryant
f084977ca3 netifyd: support uci parameters
Integrate with uci to support 'enabled/disabled' startup option and
override netify's default auto network selection.

config netifyd
       option enabled 0
       option autoconfig 1

autoconfig: Use netify's in-built interface selection
else use 'internal/external_if' definitions.

Also persist important agent config across sysupgrade
agent.uuid, serial.uuid, site.uuid

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-12 07:23:16 +01:00
Toke Høiland-Jørgensen
59b91fc342
Merge pull request #12121 from 4wrxb/acme_dns_calias
acme: Update acme.sh URL, add support for challenge & domain alises.
2020-05-11 11:47:48 +02:00
Will O'Neill
99cc5bbd97 acme: Update acme.sh URL, add support for challenge & domain alises.
Signed-off-by: Will O'Neill <0100wrxb@gmail.com>
2020-05-10 16:54:41 -07:00
Lucian Cristian
19059a5275 frr: update to 7.3.1
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-10 22:10:31 +03:00
Kevin Darbyshire-Bryant
b7c59c390f miniupnpd: make hotplug work again
hotplug scripts are sourced not exec'd so #!/bin/sh /etc/rc.common
doesn't pull in the functions defined in /etc/rc.common thus since
'enabled' isn't defined the following sequence always fails:

enabled miniupnpd || exit 0

Unfortunately sourcing /etc/rc.common doesn't appear to work so come up
with some alternatives.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-10 17:30:11 +01:00
Rosen Penev
83d36065d5
Merge pull request #12098 from neheb/pdnsr
pdns: fix compilation with boost 1.73
2020-05-09 19:50:19 -07:00
Rosen Penev
ea692188e0
Merge pull request #12099 from neheb/pdns
pdns-recursor: fix compilation with boost 1.73
2020-05-09 19:50:12 -07:00
Rosen Penev
386f5b58e5
Merge pull request #12126 from lucize/netopeer
Netopeer2: update Netopeer2 and dependencies to master
2020-05-09 19:49:55 -07:00
Lucian Cristian
c825364c1d Netopeer2: update Netopeer2 and dependencies to master
libnetconf2 to 1.1.24
libyang to 1.0.167
sysrepo to 1.4.58

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-10 00:03:55 +03:00
Aleksander Morgado
3feeacc051 modemmanager: release 1.12.10
https://lists.freedesktop.org/archives/modemmanager-devel/2020-May/007828.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-05-09 15:29:08 +02:00
Huangbin Zhan
0ec746ccb6 treewide: add conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2020-05-09 06:06:43 +08:00
Rosen Penev
234eb30b38
Merge pull request #12067 from NeoRaider/wifidog-build-dir
wifidog-ng: remove incorrect PKG_BUILD_DIR override
2020-05-08 10:53:51 -07:00
Hannu Nyman
8b06605d64
Merge pull request #12106 from rs/nextdns-1.5.7-master
nextdns: Update to version 1.5.7
2020-05-08 16:13:01 +03:00
Stijn Tintel
d1e31481ec strongswan: bump to 5.8.4
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-05-08 06:02:32 +03:00
Stijn Tintel
e1f607af94 vallumd: switch to codeload.github.com
Review of my PR to add readsb requested to use codeload. Update vallumd
to use codeload as well, so that things are consistent.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-05-08 04:17:48 +03:00
Algin Maduro
eba268a84b nextdns: Update to version 1.5.7
Signed-off-by: Algin Maduro <1469047+mad-it@users.noreply.github.com>
2020-05-07 23:41:36 +00:00
Rosen Penev
52d4b1e965
Merge pull request #12087 from simetnicbr/for-upstream/fping-suid
fping: add new config option to install SUID root
2020-05-07 11:40:52 -07:00
Rosen Penev
0ec076cf56
Merge pull request #12097 from neheb/dav
davfs2: fix compilation with newer neon
2020-05-07 01:15:16 -07:00
Rosen Penev
1376a5fe66
Merge pull request #12088 from lucize/sysrepofix
sysrepo: update to 1.4.2
2020-05-06 14:55:36 -07:00
Rosen Penev
3ef692e74d
pdns-recursor: fix compilation with boost 1.73
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-06 14:30:17 -07:00
Rosen Penev
a9f9f6e0f4
pdns: fix compilation with boost 1.73
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-06 14:29:18 -07:00
Rosen Penev
1884c52072
davfs2: fix compilation with newer neon
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-06 14:28:13 -07:00
Lucian Cristian
1953132cea sysrepo: update to 1.4.2
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-07 00:25:57 +03:00
Toke Høiland-Jørgensen
9114244fbd sqm-scripts: Switch sch_cake dependency to new virtual package
As reported in https://github.com/openwrt/packages/issues/12072, the
imagebuilder fails due to a dependency resolution error when the userspace
packages are built using a target that has a different kernel version than
that which is being run. To resolve this, move the sqm-scripts dependency
to a new virtual package, which hopefully should be consistent with the
actual kernel module being built.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-05-06 22:12:48 +02:00
Peter Stadler
18e51ca442 etesync-server: add package
Setup pyhton3-django-etesync-journal using uWSGI with Nginx.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-05-06 21:48:37 +02:00
Henrique de Moraes Holschuh
958cbf5f45 fping: install fping SUID root
fping requires either root or CAP_NET_PING to work, otherwise it is
useless.  Use INSTALL_SUID so that fping will be setuid root, and thus
it will be usable by non-root users.

fping knows to drop root priviledges after it parses the command line
and creates the ping socket.  You actually get a lot less code running
as root when you make it setuid root and run it from an unprivileged
user.

This is the same way net/iputils already handles "ping", which has the
same requirements.

Signed-off-by: Henrique de Moraes Holschuh <henrique@nic.br>
2020-05-06 15:44:48 -03:00
Philip Prindeville
03a27b26a4
Merge pull request #12093 from pprindeville/openssh-no-ecdsa-hostkey
openssh-server: deprecate the ecdsa HostKey
2020-05-06 10:37:28 -06:00
Yousong Zhou
2f73c4853b shadowsocks-libev: ignore error from flushing route table
Linux kernel and iproute2 together now implement strict checking of the
existence of route tables.

Previously kernel does not support filtering by table id, now it does
and will error with nlmsgerr "ipv4: FIB table does not exist".

Previously iproute2 dump all routes and filter by table id in userspace,
now this has changed with iproute2 commit c7e6371bc4af ("ip route: Add
protocol, table id and device to dump request")

Error scene

	root@OpenWrt:/# ip route flush table 100
	Error: ipv4: FIB table does not exist.
	Flush terminated
	root@OpenWrt:/# echo $?
	2

Fixes: https://github.com/openwrt/packages/issues/12095
Ref: https://lists.openwall.net/netdev/2019/05/02/105
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-05-06 21:38:53 +08:00
Rosen Penev
ec9341ade7
Merge pull request #12092 from wongsyrone/patch-1
wsdd2: fix infinite loop when BI_PARM is never set
2020-05-05 19:58:09 -07:00
Syrone Wong
e8bee3aaa3 wsdd2: bump PKG_RELEASE; refine init script
Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
2020-05-06 10:12:03 +08:00
Jeffery To
1c54706b97 libevhtp: Fix dependencies not selected when building static library
When libevhtp is added to a package's PKG_BUILD_DEPENDS (i.e. for
seafile-server), libevhtp's target package dependencies are not
automatically selected, in particular libevent2-openssl and
libevent2-pthreads.

Moreover, if libevent-openssl and libevent2-pthreads are not selected,
OpenSSL and thread support are disabled when compiling libevent2, which
in turn causes a compile error when building libevhtp.

This adds a config option, LIBEVHTP_BUILD_DEPENDS, that will select
libevent2-openssl and libevent2-pthreads (via LIBEVHTP_BUILD_SELECT)
when it is selected.

Other build dependencies are moved to PKG_BUILD_DEPENDS.

This also updates seafile-server to remove the (indirect) dependencies
added in 13d843fec1 and instead select
LIBEVHTP_BUILD_DEPENDS.

This also updates the maintainer's email address and adds myself as
another maintainer.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-05 23:03:30 -03:00
Philip Prindeville
73fa0c963d openssh-server: deprecate the ecdsa HostKey
The init.d script for sshd never generates an ecdsa HostKey as seen
here:

	for type in rsa ed25519
	do
		# check for keys
		key=/etc/ssh/ssh_host_${type}_key
		[ ! -f $key ] && {
			# generate missing keys
			[ -x /usr/bin/ssh-keygen ] && {
				/usr/bin/ssh-keygen -N '' -t $type -f $key 2>&- >&-
			}
		}
	done

so we'll never succeed at loading one.  Get rid of the resultant
error message in logging:

May  5 17:13:59 OpenWrt sshd[20070]: error: Unable to load host key: /etc/ssh/ssh_host_ecdsa_key

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2020-05-05 18:03:56 -06:00
Syrone Wong
48d9521ecd wsdd2: fix infinite loop when BI_PARM is never set
If BI_PARM is never set, it's "" and causes
infinite loop (before my PR sent upstream) or
error out (after my PR sent upstream).
Append -b option only if it's valid.

Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
2020-05-06 07:59:52 +08:00
Rosen Penev
48ae81f9a7
Merge pull request #12079 from stangri/master-vpn-policy-routing
vpn-policy-routing: support phys-dev policies
2020-05-04 22:24:48 -07:00
Eiji MATSUMOTO
f4e9f07391
freeradius3: Fix to init script.
To use eap tls, 'tmpdir' must be created before server starts.
This 'tmpdir' is used to store and verify client certificate,
and therefore radiusd do 'chmod go-rwx'.

If 'tmpdir' does NOT exists, server failed to start and default
'tmpdir' is '/tmp/radiusd'. So init script MUST create default
'tmpdir' like other directories.

Signed-off-by: Eiji MATSUMOTO <toudaiman@gmail.com>
2020-05-05 12:03:10 +09:00
Stan Grishin
7bb2ccd4e1 vpn-policy-routing: support phys-dev policies
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-04 22:47:32 +00:00
Peter Stadler
e8ef54f640 uwsgi: make luci-webui single threaded and log more
More threads can lead to a problem if a luci-app makes a fork
(e.g. for executing a command). Parallelism is still achieved
by using `processes = 3`.
Make the log more verbose by filtering only standard messages
for start/stop/reload out (leaving one line each).

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-05-04 21:57:43 +02:00
Toke Høiland-Jørgensen
ef61a2be50 acme: Bump acme.sh to v2.8.6
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-05-04 10:36:42 +02:00
Toke Høiland-Jørgensen
b88b678004 acme: Remove luci-app-acme
The Luci app for ACME has been moved to the luci package feed.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-05-04 10:23:35 +02:00
Florian Eckert
d009ce628b keepalived: update PKG_RELEASE number
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian Eckert
1b1ba71063 keepalived: add script security param to fix warning
Openwrt is a single user system. So keepalived is runnig as root.
If we add the config options `script_user root` and
`enabled_script_security' the following warnings are gone.

> local1.info Keepalived_vrrp[5382]: SECURITY VIOLATION - scripts are
being executed but script_security not enabled.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian Eckert
cc9e4d3b82 keepalived: move linkbeat_use_polling section into main section
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian Eckert
c4d1af42e8 keepalived: move alt_config_file check into process_config
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian Eckert
9b24763b9f keepalived: add upgrade script for globals section
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Rosen Penev
fd7e741474
Merge pull request #12039 from lucize/frrref
frr: makefile cleanup and misc fixes
2020-05-03 15:34:08 -07:00
Rosen Penev
d654eedc8f
Merge pull request #12069 from stangri/master-vpn-policy-routing
vpn-policy-routing: bugfix: remove non-ASCII from log; update README
2020-05-03 14:32:49 -07:00
Hannu Nyman
ba3d8d5794
Merge pull request #12056 from stangri/master-vpnbypass
vpnbypass: bugfix: remove non-ASCII from system log; update README
2020-05-03 22:52:24 +03:00
Stan Grishin
64fe1db6ca vpn-policy-routing: bugfix: remove non-ASCII from log; update README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-03 19:45:29 +00:00
Matthias Schiffer
25babf817f
wifidog-ng: remove incorrect PKG_BUILD_DIR override
As wifidog-ng builds a kernel module, it must use a PKG_BUILD_DIR in
KERNEL_BUILD_DIR instead of BUILD_DIR, otherwise old build artifacts may
be incorrectly reused when switching between different targets of same
architecture without a full clean.

Instead of fixing up the override, just remove it and instead move the
kernel.mk include above package.mk, so PKG_BUILD_DIR is set up correctly
by default.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2020-05-03 21:08:30 +02:00
W. van den Akker
a92b98d926
Shorewall6: Bump to 5.2.4.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-03 19:02:25 +02:00
W. van den Akker
48544d330f
Shorewall: Bump to 5.2.4.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-03 19:01:21 +02:00
W. van den Akker
f1ca939459
Shorewall6-lite: Bump to 5.2.4.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-03 19:00:15 +02:00
W. van den Akker
cc72bef515
Shorewall-lite: Bump to 5.2.4.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-03 18:58:31 +02:00
W. van den Akker
211bb322d3
Shorewall-core: Bump to 5.2.4.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-03 18:57:13 +02:00
Warren Ng
a22b190ca8 sslh: Add http probe support
Signed-off-by: Warren Ng <looklookson@gmail.com>
2020-05-03 10:58:40 +08:00
Lucian Cristian
7d2c647f2d frr: makefile cleanup and misc fixes
fix mips runtime by backporting some yang changes from master
added commited fixes to 7.3
also add option for snmp support

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-03 03:06:20 +03:00
Stan Grishin
4bfd3435bb vpnbypass: bugfix: remove non-ASCII from system log; update README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-02 22:35:32 +00:00
Jeroen Peelaerts
e297ffbe34 ddns-scripts: Add digitalocean as DDNS provider
Signed-off-by: Jeroen Peelaerts <jeroen.peelaerts@gmail.com>
2020-05-03 00:15:13 +02:00
Jan Pavlinec
c8be44062e bind: update to version (security fix)
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-01 11:56:56 -07:00
Nikos Mavrogiannopoulos
997723342b ocserv: updated to 1.0.1
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-05-01 19:18:37 +02:00
Nikos Mavrogiannopoulos
d58c3d48a5 openconnect: updated to 8.09
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-05-01 19:18:37 +02:00
Nikos Mavrogiannopoulos
5782406697
Merge pull request #11798 from GuLinux/patch-1
openconnect: Allow to set `usergroup` option
2020-05-01 13:39:03 +02:00
Ian Cooper
3b58e317f6
snort: bump to 2.9.15.1
Fix compilation error with x86_64 glibc

Fix changed download location on snort.org

Signed-off-by: Ian Cooper <iancooper@hotmail.com>
2020-04-30 18:51:19 +01:00
Rosen Penev
07998f702e
Merge pull request #12021 from eglooca/master
netifyd: Updated to v3.00
2020-04-30 10:27:27 -07:00
Antti Seppälä
cf6027f0b0 uacme: add support for user-provided setup and cleanup scripts
Add possibility for user to provide setup and cleanup scripts for
additional flexibility. Setup-script takes precedence over the built-in
behavior of uacme.

This helps users with more complex use-cases to utilize uacme to update
certificates without adding complexity to the provided run.sh script.

Signed-off-by: Antti Seppälä <a.seppala@gmail.com>
2020-04-30 19:17:54 +03:00
Antti Seppälä
debe65dffe acme: add support for user-provided setup and cleanup scripts
Add possibility for user to provide setup and cleanup scripts for
additional flexibility. Setup-script takes precedence over the built-in
behavior of acme.

This helps users with more complex use-cases to utilize acme to update
certificates without adding complexity to the provided run.sh script.

Signed-off-by: Antti Seppälä <a.seppala@gmail.com>
2020-04-30 19:17:54 +03:00
Darryl Sokoloski
eb3b21ba77 netifyd: Updated to v3.00
Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
2020-04-30 11:14:46 -04:00
Brian J. Murrell
b017fe34dd mwan3: Update Makefile
Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2020-04-30 14:55:20 +02:00
Brian J. Murrell
49cf5eac5c mwan3: Don't use /128 address for ping source
An interface can have both a /64 and a /128 from a provider.

In such a case, use the address from the /64 to do the ping check, not
the /128.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2020-04-30 14:55:20 +02:00
Rosen Penev
b375cd26db
Merge pull request #11998 from jefferyto/uwsgi-pypi
uwsgi: Use pypi.mk to download source tarball
2020-04-29 15:59:38 -07:00
Huangbin Zhan
bb4b974101 nginx: update all-module configurations
nginx-all-module also provides nginx-ssl and shoud have configuration file uwsgi_params

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2020-04-30 06:58:58 +08:00
Marco Gulino
6464166660 openconnect: Allow to set usergroup option in OpenConnect
Just adding the extra option `-g|--usergroup <group>` (required by the VPN server I'm currently using)

Signed-off-by: Marco Gulino <marco@gulinux.net>
2020-04-29 22:37:11 +01:00
Luiz Angelo Daros de Luca
ca123aed63 switchdev-poller: netifd now keep dev down
Since 19.07, netifd will not try to bring a device up
after someone brought it down. This way, there is no need
to rename the device.

It also fixes a rename error on 19.07 when the *_down device
was being in use (by netifd?).

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-04-29 17:52:20 -03:00
Rosen Penev
36095e4e4c
Merge pull request #11997 from jefferyto/scapy-python-package
scapy: Use Python packaging, PyPI download
2020-04-29 13:43:24 -07:00
Rosen Penev
5de150758b
Merge pull request #12001 from jefferyto/radicale2-cleanup
radicale2: Clean up Makefile
2020-04-29 12:19:33 -07:00
Dirk Brenken
1aa4518dfc
travelmate: fix captive portal detection
* made captive portal detection more bullet proof, fixes #11990

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-04-29 14:48:36 +02:00
Jeffery To
bd48589e21 radicale2: Clean up Makefile
* Remove preinst, the default prerm script will stop the service
* Use default Python package filespec and shebang fix

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-29 17:48:46 +08:00
Toke Høiland-Jørgensen
62ef2a8839
Merge pull request #11968 from yangfl/master
acme: fix some errors
2020-04-29 11:24:32 +02:00
Rosen Penev
2f7ce61037
Merge pull request #11989 from cherrot/ddns-cloudflare-v4
ddns-scripts: cloudflare.com-v4: Fix grep pattern
2020-04-29 02:08:50 -07:00
Jeffery To
f304e57b35 uwsgi: Use pypi.mk to download source tarball
This also removes PKG_BUILD_DIR, which does not need to be explicitly
set.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-29 16:49:42 +08:00
Jeffery To
32f727f0ee scapy: Use Python packaging, PyPI download
This updates the package to use the default Python package build recipe,
adds a src package, and changes to download from PyPI (using pypi.mk).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-29 16:25:20 +08:00
Zheng Luo
88b03577c4 ddns-scripts: cloudflare.com-v4: Fix grep patterns.
Related commit: 0080bb4b

Use `\s*` instead of ` \?` to match 0 or multiple spaces.

Signed-off-by: Zheng Luo <cherrotluo@gmail.com>
2020-04-29 16:22:59 +08:00
Rosen Penev
361b266eb3
Merge pull request #11982 from Robby-/master-freeradius3_update_3_0_21
freeradius3: Update to 3.0.21
2020-04-28 10:24:58 -07:00
Rosen Penev
6db17c8924
Merge pull request #11769 from cbz/master
dnscrypt-proxy: Changed 'Provider Key' for securedns to current value
2020-04-28 10:23:51 -07:00
Alexandru Ardelean
427aa37c3a net: seafile-server: select procps-ng
Otherwise seafile-server isn't selectable since it depends that this
package be enabled.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2020-04-28 12:18:23 +03:00
Alexandru Ardelean
13d843fec1 net: seafile-server: add libevent2 deps on PKG_BUILD_DEPENDS
And libevent2-pthreads to DEPENDS.

While building with -j12 I seem to get:
[ sometimes this also includes libevent2-openssl ]

```
-- EVHTP_VERSION            :  1.2.18
-- EVHTP_DISABLE_SSL        :  OFF
-- EVHTP_DISABLE_EVTHR      :  OFF
-- EVHTP_DISABLE_REGEX      :  OFF
-- EVHTP_BUILD_SHARED       :
-- EVHTP_USE_JEMALLOC       :
-- EVHTP_USE_TCMALLOC       :

-- CMAKE_BUILD_TYPE         : Release
-- CMAKE_INSTALL_PREFIX     : /usr
-- CMAKE_BINARY_DIR         : /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18
-- CMAKE_CURRENT_BINARY_DIR : /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18
-- CMAKE_CURRENT_SOURCE_DIR : /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18
-- PROJECT_BINARY_DIR       : /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18
-- PROJECT_SOURCE_DIR       : /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18
-- CMAKE_MODULE_PATH        : /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/cmake
-- CMAKE_SYSTEM_NAME        : Linux
-- CMAKE_SYSTEM_VERSION     : 1
-- CMAKE_C_COMPILER         : /home/sandu/work/openwrt/openwrt/staging_dir/toolchain-i386_pentium4_gcc-8.4.0_musl/bin/i486-openwrt-linux-musl-gcc
-- CMAKE_AR                 : /home/sandu/work/openwrt/openwrt/staging_dir/toolchain-i386_pentium4_gcc-8.4.0_musl/bin/i486-openwrt-linux-musl-gcc-ar
-- CMAKE_RANLIB             : /home/sandu/work/openwrt/openwrt/staging_dir/toolchain-i386_pentium4_gcc-8.4.0_musl/bin/i486-openwrt-linux-musl-gcc-ranlib
-- CFLAGS                   :   -Os -pipe -march=pentium4 -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -ffile-prefix-map=/home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18=libevhtp-1.2.18 -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro
                              -DNDEBUG

-- Configuring done
CMake Error: The following variables are used in this project, but they are set to NOTFOUND.
Please set them or make sure they are set and tested correctly in the CMake files:
LIBEVENT_THREAD
    linked by target "evhtp" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18
    linked by target "test_proxy" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "example_basic" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "test_client" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "example_https_client" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "test_vhost" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "test_basic" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "test_extensive" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "example_chunked" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "test_query" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "test_perf" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "example_pause" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "example_https_server" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "example_vhost" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "example_request_fini" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples

-- Generating done
CMake Warning:
  Manually-specified variables were not used by the project:

    CMAKE_ASM_COMPILER
    CMAKE_ASM_COMPILER_ARG1
    CMAKE_MODULE_LINKER_FLAGS
    CMAKE_SHARED_LINKER_FLAGS
    DL_LIBRARY

CMake Generate step failed.  Build files cannot be regenerated correctly.
```

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2020-04-28 12:16:38 +03:00
Robby K
cf1921ded5 freeradius3: Update to 3.0.21
Latest stable release.

Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 09:58:10 +02:00
Robby K
71bea36878 freeradius3: Removed patches/004-fix-target-python-header-detection.patch as it is no longer needed for the freeradius3-mod-python3 package to compile and updated the Makefile to reflect this due to the following change/commit in freeradius:
307678b268

This is in preparation for the 3.0.21 update.

Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 09:54:24 +02:00
Robby K
9b322cb8c4 freeradius3: Refreshed patches/002-disable-session-cache-CVE-2017-9148.patch in preparation for the 3.0.21 update.
Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 09:23:21 +02:00
Robby K
6aa91d2210 freeradius3: Fix the ordering in the Makefile.
Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 09:22:40 +02:00
Toke Høiland-Jørgensen
2fadd0279f acme: Add acl_depends annotations to luci-app-acme
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2020-04-27 18:15:20 +02:00
Florian Eckert
3c34b151f6 mwan3: fix whitespace issue
fixes #11965

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-04-27 17:58:12 +02:00
David Yang
2e0f44bb34 acme: Bump release version
Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-04-27 17:54:36 +08:00
David Yang
0d2240481b acme: Handle ecc cert correctly
Error was:
  The domain 'example.com' seems to have a ECC cert already, please add '--ecc' parameter if you want to use that cert.

Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-04-27 17:54:36 +08:00
David Yang
6a4c1b2051 acme: Handle log message correctly
Error was:
  logger: unrecognized option: renew

Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-04-27 17:51:18 +08:00
W. van den Akker
1c0b4b9dc6
Shoreware6: Bump to 5.2.4.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-04-26 19:11:28 +02:00
W. van den Akker
8782d4cbcb
Shoreware: Bump to 5.2.4.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-04-26 19:10:58 +02:00
W. van den Akker
302487dc70
Shoreware6-lite: Bump to 5.2.4.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-04-26 19:07:56 +02:00
W. van den Akker
c37a27c946
Shoreware-lite: Bump to 5.2.4.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-04-26 19:06:50 +02:00
W. van den Akker
ebf8716be2
Shoreware-core: Bump to 5.2.4.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-04-26 19:05:30 +02:00
Rosen Penev
9c95fedca3
Merge pull request #11955 from lantis1008/ddns-cloudflare
ddns-scripts: cloudflare.com-v4: Fix success check
2020-04-25 10:39:04 -07:00
Michael Gray
0080bb4bba ddns-scripts: cloudflare.com-v4: Fix success check for new response format
JSON response now has spaces between parameters. Accept this new format and the old one.

Signed-off-by: Michael Gray <michael.gray@lantisproject.com>
2020-04-25 17:36:51 +10:00
Hannu Nyman
3e9224934b
Merge pull request #11918 from dvtirol/freeradius-rest
Support building freeradius3-mod-rest
2020-04-25 09:55:21 +03:00
Dirk Brenken
9eebb43159
travelmate: refine logical interface selection
Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-04-24 08:28:16 +02:00
Tobias Girstmair
f97a349bdf freeradius3: Support building freeradius3-mod-rest
Signed-off-by: Tobias Girstmair <tobias.girstmair@tirol.gv.at>
2020-04-23 15:08:06 +02:00
Lucian Cristian
a636c85eda open-iscsi: add package open-iscsi
iscsi initiator utilities

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-04-23 13:29:00 +03:00
Rosen Penev
311e2d76bb
modemmanager: fix compilation under uClibc-ng
Needs nls.mk as a result of the glib2 change.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-04-22 15:50:57 -07:00
Rosen Penev
03766feb80
Merge pull request #11911 from pprindeville/xtables-addons-requires-wget-ssl
xtables-addons: ipt_geoip scripts require wget-ssl
2020-04-22 15:37:08 -07:00
Rosen Penev
191656d42c
Merge pull request #11830 from lucize/addisns
isns: add open-isns
2020-04-22 14:33:49 -07:00
Rosen Penev
cf4f00912d
Merge pull request #11905 from txt-file/patch-1
prosody: update to 0.11.5
2020-04-22 14:30:11 -07:00
Dirk Brenken
59cca01a23
travelmate: release 1.5.4
* add 'status_service' as workaround to init for 19.07
* fix 'wifionice' auto-login script
* fix autologin script matching
* change wifi scanning to logical interface name,
  no longer use the radio device

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-04-22 21:00:03 +02:00
Rosen Penev
40818276c2
Merge pull request #11896 from oleg-derevenetz/bwping-1.16
bwping: add new package
2020-04-22 11:41:59 -07:00
Stan Grishin
c805064a7d simple-adblock: bugfix: start downloads on cold boot
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-22 17:45:53 +00:00
Oleg Derevenetz
1515fad922 bwping: add new package
Signed-off-by: Oleg Derevenetz <oleg-derevenetz@yandex.ru>
2020-04-22 15:07:16 +03:00
Rosen Penev
124b966b3f
Merge pull request #11858 from peter-stadler/nginx-version
nginx: update to version 1.17.10 and fix bug
2020-04-21 23:59:31 -07:00
Rosen Penev
2e49e6e776
Merge pull request #11897 from pprindeville/fix-dhcpd-startup
Fix dhcpd startup
2020-04-21 23:04:18 -07:00
Philip Prindeville
8193eb5952 isc-dhcp: improve startup performance
On some platforms where interfaces come up very slowly, this can
cause a race-condition with dhcpd coming up before all the interfaces
have finished initializing.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2020-04-21 23:57:33 -06:00
Philip Prindeville
9e47697713 xtables-addons: ipt_geoip scripts require wget-ssl
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2020-04-21 13:49:47 -06:00
Hannu Nyman
4caa759c8f
Merge pull request #11892 from tobiaswaldvogel/smcroute_keep_config_on_sysupgrade
smcroute: Keep config file /etc/smcroute.conf on sysupgrade
2020-04-21 15:19:53 +03:00
tripolar
4bc6ce8b28
Merge pull request #11906 from BKPepe/git
git: update to version 2.26.2
2020-04-21 10:03:31 +02:00
Tobias Waldvogel
26f7bd246a smcroute: Remove faulty tab in conf section
Signed-off-by: Tobias Waldvogel <tobias.waldvogel@gmail.com>
2020-04-21 08:28:01 +02:00
Josef Schlehofer
8470eccd5d
git: update to version 2.26.2
Fixes CVE-2020-11008

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-21 07:39:17 +02:00
Philip Prindeville
e9b4a74a88
Merge pull request #11899 from pprindeville/xtables-addons-requires-unzip
xtables-addons: iptgeoip requires wget-ssl and zcat
2020-04-20 22:24:16 -06:00
Vieno Hakkerinen
bc500293e3 prosody: update to 0.11.5
Signed-off-by: Vieno Hakkerinen <vieno@hakkerinen.eu>
2020-04-21 05:57:56 +02:00
Hans Dedecker
ccbaf71662 vsftpd: fix compilation with glibc
Fix compilation for glibc by removing -lnsl flag

Reported-by: Ian Cooper <iancooper@hotmail.com>
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2020-04-20 22:14:06 +02:00
Hannu Nyman
6c2235253f
Merge pull request #11872 from jefferyto/python3-makefile-cleanup
python3: Makefile cleanup
2020-04-20 20:05:07 +03:00
Philip Prindeville
14dcad7650 xtables-addons: iptgeoip requires wget-ssl and zcat
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2020-04-19 19:00:34 -06:00
W. van den Akker
77ca477e28
Shorewall6: Bump to 5.2.4.1
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-04-19 19:14:08 +02:00
W. van den Akker
5760087775
Shorewall: Bump to 5.2.4.1
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-04-19 19:04:37 +02:00
W. van den Akker
40d31b02e4
Shorewall6-lite: Bump to 5.2.4.1
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-04-19 19:03:31 +02:00
W. van den Akker
7872d259dd
Shorewall-lite: Bump to 5.2.4.1
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-04-19 19:02:28 +02:00
W. van den Akker
9ec7718ef3
Shorewall-core: Bump to 5.2.4.1
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-04-19 17:50:53 +02:00
Lucian Cristian
e3f6f7d50e open-isns: add open-isns libs
needed for open-iscsi

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-04-19 01:15:33 +03:00
Daniel Engberg
b836bc8c3f
Merge pull request #9327 from ysc3839/overture
overture: add new package
2020-04-18 23:37:27 +02:00
Daniel Engberg
9cafce8beb
Merge pull request #11884 from pesintta/uacme-1.2.1
uacme: update to 1.2.1
2020-04-18 23:07:34 +02:00
Antti Seppälä
6d731cc388 uacme: update to 1.2.1
Update to latest release.

Do not compile optional ualpn binary.

Signed-off-by: Antti Seppälä <a.seppala@gmail.com>
2020-04-18 21:29:23 +03:00
Jeffery To
81e99fa7ff seafile: Remove Python variants, update Python packaging
This removes Python build variants and adds PYTHON3_PKG_BUILD:=0 (where
appropriate) for the Seafile packages.

This also updates the way the Python bindings packages are packaged,
using automake installation instead of manual install recipes.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-19 01:56:23 +08:00
Jeffery To
1bc2f4f3c6 treewide: Remove Python variants for non-Python packages
This removes Python-related build variants, and adds
PYTHON3_PKG_BUILD:=0 and minor build adjustments (where appropriate),
for non-Python packages. There should be no changes to build output.

This also updates some include paths for python3-package.mk and/or
python3-host.mk to be relative to the package Makefile.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-19 01:56:23 +08:00
Jeffery To
fc8387614c python3: Rename canned recipes in python3-package.mk
This renames "internal" recipes to use the Python3/ prefix and clarifies
the names (RunTarget to Run, Mod to ModSetup, Shebang to FixShebang).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-19 01:56:23 +08:00
Jeffery To
87b8f45230 python3: Rename canned recipes in python3-host.mk
This changes the recipe name prefix from Build/Compile/HostPy3 to
HostPython3, and clarifies some of the names (RunHost to Run, Mod to
ModSetup).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-19 01:56:11 +08:00
Jeffery To
3642b18441 python3: Remove HostPython3 in python3-host.mk
HostPython3 only adds a few environment variables before running host
Python. It has only two users, Build/Compile/HostPy3RunHost and
Build/Compile/HostPy3RunTarget.

HostPython3 also accesses $(PYTHON3PATH), even though python3-host.mk
does not include python3-package.mk, where the variable is defined.

This removes HostPython3 and has its two users run host Python directly.
This also combines the environment variables of HostPython3 and the two
users into HOST_PYTHON3_VARS and PYTHON3_VARS.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-19 01:56:07 +08:00
Dirk Brenken
e291d68055
adblock: filter spurious line endings in sources
* prevent processing of spurious line endings
  that confuses (g)awk

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-04-18 15:33:16 +02:00
Josef Schlehofer
0551a5b030 git: update to version 2.26.1
Fixes: CVE-2020-5260

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-18 10:14:28 +02:00
Rosen Penev
28564e91d4
Merge pull request #11659 from ja-pa/tor-hs-new
tor-hs: add new package
2020-04-17 13:15:46 -07:00
Nick Hainke
5e3a6e9313 dawn: feed hostapd with nr reports and improve 802.11k handling
If set_hostapd_nr config flag is set, dawn will insert the nr reports
to allow the hostapd to answer to nr requests from clients.

Improve the synchronization of rcpi and rsni in the network.
Further, clients with bad 802.11k were sending beacon reports with
bssid 00:00:00:00:00:00. Catch those corner cases.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2020-04-17 16:14:35 +01:00
Jan Pavlinec
5906bfecd5
tor-hs: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-04-17 13:57:00 +02:00
Dirk Brenken
c11aaead91
adblock: fix gawk incompatibility
* fix gawk incompatibility in reporting

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-04-17 06:57:49 +02:00
Etienne Champetier
d2fd86663c
Merge pull request #11861 from PolynomialDivision/feature/add_v_k
dawn: add 802.11v, prepare 802.11k and debug fix
2020-04-16 11:54:17 -04:00
Nick Hainke
999bec247a dawn: add 802.11v, prepare 802.11k and debug fix
Add 802.11v bss transition. Exchange nr-reports.

Implement 802.1k hearing map. Future release will use hearing map
for load balancing decisions.

Remove debug output from stderr.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2020-04-16 17:49:56 +02:00
Peter Stadler
8de2a47a10 nginx: update to version 1.17.10 and fix bug
If one file is a hard link to another, `mv` will not overwrite it;
`rm -f` the destinations beforehand.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-04-16 12:05:29 +02:00
Dirk Brenken
203970bf25
Merge pull request #11841 from PolynomialDivision/feature/daw_fix_reboot
dawn: fix reboot
2020-04-15 21:52:51 +02:00
Nick Hainke
802f7ef0ec dawn: fix reboot
DAWN has a race condition with umdns that prevents dawn from surviving
a reboot.
Increase procd start and stop of dawn to 81.

Further, network is sometimes not ready. Add utimer to check if socket
binds correctly.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2020-04-15 21:48:25 +02:00
Jo-Philipp Wich
9de7945541 mac-telnet: fix mirror hash
Fixes: 8399121e6 ("mac-telnet: install uci as config file")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-04-15 09:54:24 +02:00
Jo-Philipp Wich
9f231909eb mac-telnet: mark uci as conffile
Fixes: 8399121e6 ("mac-telnet: install uci as config file")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-04-15 09:39:33 +02:00
Jo-Philipp Wich
8399121e60 mac-telnet: install uci as config file
Also mark it as configuration file while being at it.

Fixes: #11846
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-04-15 09:35:03 +02:00
Hannu Nyman
1812713faf
Merge pull request #11838 from VolunteerComputingHelp/master
boinc: new upstream version, adjustments
2020-04-14 22:47:00 +03:00
Yousong Zhou
d917d662ae acme: depends on wget-ssl
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-04-14 11:37:04 +08:00
Yousong Zhou
585e4a38fe wget: make the ssl variant provides wget-ssl
This is to address the need for specifying dependency on a wget
implementation with ssl support.

Now we have a game of names for opkg

 1. uclient-fetch: minimal version by openwrt project
 2. wget-nossl: gnu wget w/o ssl support
 3. wget-ssl: for the moment since this commit, gnu wget w/ ssl support
 4. wget: uclient-fetch, wget-nossl, or wget-ssl
 5. gnu-wget: wget-nossl or wget-ssl

By the time we provide some dummy package like uclient-fetch-ssl and
make it also provide wget-ssl, I guess by then we will also need
gnu-wget-ssl...

Ref: https://github.com/openwrt/packages/issues/11534
Ref: https://github.com/openwrt/packages/pull/9941
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-04-14 11:37:04 +08:00
Christian Dreihsig
ebc19c6bd5 boinc: new upstream version, adjustments
* new upstream version 7.16.6
 * fixing platform identifier for openwrt x86
   (boinc issue https://github.com/BOINC/boinc/issues/3595)
 * protected configuration from update

Signed-off-by: Christian Dreihsig <christian.dreihsig@t-online.de>
2020-04-13 19:27:28 +02:00
Dirk Brenken
1d8d456a55
adblock: fix another reporting bug
* add a final sort step, this fixes dns reporting with
  multiple pcap files as input

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-04-13 06:16:03 +02:00
Gregory L. Dietsche
ee6400c952 family-dns: add new package
Signed-off-by: Gregory L. Dietsche <gregory.dietsche@cuw.edu>
2020-04-11 23:20:47 -05:00
Rosen Penev
cd79e92885
ntpclient: fixup time patch
Added missing header and added casts.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-04-11 19:52:44 -07:00
Jo-Philipp Wich
53c48fae15 nlbwmon: update to latest Git HEAD
34a1887 nfnetlink: disable sequence number checking

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-04-11 23:23:45 +02:00
Dirk Brenken
d6634b611a
adblock: update 4.0.4
* add 'ca-bundle' dependency
* fix a sort bug in report engine
* fix potential bugs in the f_extconf function

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-04-11 21:46:59 +02:00
Stan Grishin
6fd3476d9e https-dns-proxy: bugfix: memory leak
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-11 00:25:11 +00:00
Jo-Philipp Wich
d81d777a0f nlbwmon: update to latest Git HEAD
e757e06 nfnetlink: allow specifying the socket buffer size
33c77cb nfnetlink: properly handle nl_recvmsgs() failures
95cced5 protocol: Include whitespace when reading names

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-04-11 00:23:12 +02:00
Richard Yu
cb0e9a99c1
frp: update to 0.32.1
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
2020-04-10 21:39:31 +08:00
Nick Hainke
f7ea75a0d5 dawn: fix several typos
Signed-off-by: Nick Hainke <vincent@systemli.org>
2020-04-10 10:30:45 +02:00
Rosen Penev
9d11866837
Merge pull request #11805 from neheb/ntp
ntpclient: fix compilation with newer kernels
2020-04-09 15:36:36 -07:00
Othmar Truniger
a687798ac3 knxd: bump to version 0.14.35
Signed-off-by: Othmar Truniger <github@truniger.ch>
2020-04-09 19:29:47 +02:00
Eneas U de Queiroz
dbe11776ed dnsdist: fix default SSL lib spelling
This is cosmetic only, since openssl is the first one being defined, but
it avoids a warning in scripts/config, after upgrading to kconfig-v5.6:
tmp/.config-package.in:102839:warning: choice default symbol
'DNSDIST_OPENSSSL' is not contained in the choice

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-04-08 07:43:38 -03:00
Jeffery To
7328bcc15e seafile-server: Update to 7.1.3
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-08 17:06:35 +08:00
Jeffery To
6138fe57fe seafile-seahub: Update to 7.1.3, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-08 17:06:35 +08:00
Jeffery To
239948b261 seafile-ccnet: Update to 7.1.3
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-08 17:06:35 +08:00
Hannu Nyman
e3e464ed12
Merge pull request #11804 from VolunteerComputingHelp/master
boinc: FTBFS: avoiding unexpected dependencies
2020-04-08 08:23:06 +03:00
Steffen Möller
e554dcf1d2 Boinc: Avoiding unexpected dependencies
In reaction to a comment by @hnyman in
https://github.com/openwrt/packages/pull/11768#issuecomment-610513948
on BOINC embracing too many libraries it finds on its build
host, the inclusion of the freetype library is now excluded
by an embracing "if" statement.

The patch is presented to BOINC upstream at
https://github.com/BOINC/boinc/pull/3578

Signed-off-by: Steffen Möller <moeller@debian.org>
2020-04-08 07:17:09 +02:00
Dirk Brenken
f8cacf2547
Merge pull request #11799 from dibdot/adblock
adblock: release 4.0.3
2020-04-08 07:04:31 +02:00
Noah Meyerhans
72654d20d5 bind9: update to 9.16.1
Add libuv dependency

Fix optional libxml and c-json dependency handling

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2020-04-07 21:47:07 -07:00
Rosen Penev
1253beb2fe
ntpclient: fix compilation with newer kernels
glibc needs an extra header included.

Also cast time values to 64-bit in preparation for 64-bit time_t for
32-bit platforms.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-04-07 19:53:35 -07:00
Rosen Penev
b3a661d84d
Merge pull request #11774 from neheb/netif
netifyd: fix compilation with libcxx
2020-04-07 19:13:51 -07:00
Stan Grishin
5df3acdf10 simple-adblock: bugfixes: remove escape chars from log, restore from cache on boot
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-07 21:55:22 +00:00
Dirk Brenken
40d35ea47e
adblock: release 4.0.3
* add 'wally3k' and 'reg_vn' sources, change 'reg_pl' source
* update readme
* small fixes & cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-04-07 21:48:09 +02:00
Rosen Penev
bdc23034ca bind: use json-c instead of jsoncpp
The configure script prefers the latter whereas the code prefers the
latter. Hack around it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-04-07 12:32:18 -07:00
Florian Eckert
45a9b6560e acme: fix luci-app-acme dependency limitations
This commit fix circle dependency.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-04-07 13:53:24 +02:00
Rosen Penev
3cf1cb27d7
Merge pull request #11782 from gfrancesco/master
transmission: add init file STOP directive
2020-04-07 04:16:56 -07:00
Francesco G
4fcc44bc89 transmission: add init file STOP directive
Transmission should stop early on system shutdown to avoid
for example fstab unmount disks when transmission is writing.

Signed-off-by: Francesco G <gfrancesco@users.noreply.github.com>
2020-04-07 12:44:23 +02:00
Christian Dreihsig
9c2bd865c7 boinc: new package for distributed computing/data acquisition
Compile tested: x86_64, OpenWrt master
Run tested: arm/mvebu

Signed-off-by: Christian Dreihsig <christian.dreihsig@t-online.de>
2020-04-06 21:43:51 -10:00
Rosen Penev
279271113d
Merge pull request #11771 from micmac1/master-apache-2443
apache: security bump to 2.4.43
2020-04-06 14:08:07 -07:00
Peter Wagner
45c0fde75d openssh: don't create ECDSA keys
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2020-04-06 10:18:50 +02:00
Rosen Penev
e26b81d184
netifyd: fix compilation with libcxx
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-04-05 19:34:19 -07:00
Josef Schlehofer
f986efb543
Merge pull request #11688 from BKPepe/dnscrypt-proxy2-update
dnscrypt-proxy2: update to version 2.0.42
2020-04-06 03:08:37 +02:00