Commit graph

6381 commits

Author SHA1 Message Date
Richard Yu
53fd02d62c
transmission: update config options
add missing 'peer_id_ttl_hours' and remove 'scrape_paused_torrents'
which is not exist in transmission wiki.

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
2020-01-18 20:36:35 +08:00
Eric Luehrsen
6505154a74 unbound: improve dependencies for okpg
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-01-17 22:41:56 -05:00
Toke Høiland-Jørgensen
b59f7eb831 luci-app-sqm: Remove lua and luci-base dependencies
We depend on luci-compat now, which will pull in luci-base, which in turn
will pull in lua. So remove those two dependencies to maybe help with
recursive dependency resolution errors.

Fixes #5320.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2020-01-17 11:09:16 +01:00
Rosen Penev
5f81f3f2cc
i2pd: add missing INSTALL_DATA change
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-01-16 20:31:01 -08:00
Rosen Penev
efeab1c569
i2pd: Update to 2.29.0
Ran init script through shellcheck. Simplified several statements.

Replaced INSTALL_CONF with INSTALL_DATA. i2pd runs as non-root and so the
conf file must be accessible.

Fixed: https://github.com/openwrt/packages/issues/10977

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-01-16 19:10:59 -08:00
Rosen Penev
621e5a69a5
Merge pull request #11035 from jefferyto/scons-local
scons: Switch to standalone version, update to 3.1.2
2020-01-16 16:47:19 -08:00
Rosen Penev
e3f278d39a
Merge pull request #10960 from peter-stadler/nginx-util
nginx-util: add package
2020-01-16 16:40:58 -08:00
Peter Stadler
e054f34f74 nginx-util: add package
This can do the main work of nginx/nginx-ssl init script.
For nginx-ssl it can create selfsigned certificates, too.
It uses libpcre and libopenssl iff nginx(-ssl) uses them.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-01-17 01:11:17 +01:00
Stijn Tintel
f68f23f094 strongswan: bump to 5.8.2
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 00:53:36 +02:00
Daniel Golle
ddce0509ff gnunet: update to version 0.12.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-01-16 20:52:04 +02:00
Stan Grishin
05603822d3 vpn-policy-routing: bugfix: remove conflict with vpnbypass
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-01-16 10:51:55 -07:00
Jeffery To
644a16f962 scons: Switch to standalone version, update to 3.1.2
* Install the standalone (scons-local) version

  Advantages:
  - The regular version of SCons requires distutils during installation;
    the standalone version does not have this requirement

  Disadvantages:
  - The scons-local package is not available from the Fossies mirror
  - The patch will need to be manually updated with each version update

* Install files to $(STAGING_DIR_HOSTPKG) instead of $(STAGING_DIR_HOST)

* Write the correct shebang into scripts instead of using the wrapper

* Update to 3.1.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-16 20:25:48 +08:00
Rosen Penev
1fbdc4d1a4
Merge pull request #11024 from micmac1/subversion
apr-util: clean up reverse depends (and fix subversion dep)
2020-01-15 17:35:07 -08:00
Sebastian Kemper
689ca46422 subversion: add libsqlite3 depend
apr-util was updated. It doesn't provide the depend on libsqlite3
anymore, so this needs to be added to the subversion package now.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-15 19:33:14 +01:00
Sebastian Kemper
258967b0d2 apache: remove libgdbm dep
This dep can be removed since apu-1-config was cleaned up.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-15 19:32:19 +01:00
Rosen Penev
e9c99cc4c8
Merge pull request #11002 from neheb/tiny
tinyproxy: update to 1.10.0
2020-01-14 23:39:41 -08:00
Aleksander Morgado
b9fa64832f modemmanager: release 1.12.4
New stable release with lots of fixes, including some severe memory
leaks happening when GPS management is used in QMI-based devices.

https://lists.freedesktop.org/archives/modemmanager-devel/2020-January/007670.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-01-14 15:27:29 +01:00
Jose Olivera
3aa5251572
xtables-addons: Support IPTV Timeshift
Solves Issue #10373 and PR #10428

Signed-off-by: Jose Olivera <oliverajeo@gmail.com>
(bumped PKG_RELEASE)
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-01-13 17:18:39 -08:00
Sebastian Kemper
d6476f30bb apache: fix depends
- helps build system to locate zlib
- adds depend on libgdbm if libaprutil-dbm-gdbm is selected

This fixes the two different build failures that can currently be
observed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-13 21:45:22 +01:00
Hannu Nyman
535c9ff1f7
Merge pull request #10935 from janh/vnstat2
vnstat2: add package
2020-01-13 17:06:20 +02:00
Yousong Zhou
b758d897a9 shadowsocks-libev: bump to version 3.3.4
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-13 10:14:50 +08:00
Rosen Penev
274506803a
tinyproxy: update to 1.10.0
Added license information.

Added PKG_BUILD_PARALLEL for faster compilation.

Refreshed patches.

Updated URLs.

Ran init script through shellcheck.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-01-12 17:04:30 -08:00
Hannu Nyman
736c56bf25
Merge pull request #10898 from micmac1/master-apache
apache: bump version plus brush up
2020-01-12 23:52:25 +02:00
Sebastian Kemper
a1472254db apache: add myself as maintainer
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-12 22:28:57 +01:00
Toke Høiland-Jørgensen
983cc995a3 acme: Correctly handle domain state dir for ECC certificates
When issuing an ECC certificate, acme.sh for some reason changes the name
of the directory used for the certificate state. Handle this correctly when
moving directories and updating config files.

Fixes #7941.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2020-01-12 19:59:01 +01:00
Eric Luehrsen
b101dd76fb unbound: fix TLS forwards with optional suffix
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-01-11 15:42:03 -05:00
Rosen Penev
df370b3262
Merge pull request #10973 from dengqf6/xt3.7
xtables-addons: update to 3.7
2020-01-10 23:17:01 -08:00
Florian Eckert
f88f87d838 ipvsadm: update version to 1.31
Update ipvsadm to new upstream version.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-01-09 13:00:00 +01:00
Rosen Penev
94d893afce
transmission: Fix message_level setting
--log-error in the init script was overriding it.

Added several optimizations to the init script for speed and correctness.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-01-08 19:27:17 -08:00
DENG Qingfang
18ae282549 xtables-addons: update to 3.7
Update xtables-addons to 3.7
Remove linux 4.9 compatible patch as OpenWrt master no longer supports it

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
2020-01-09 11:03:42 +08:00
Daniel Golle
836127bc24 transmission: fix typo in jail setup
Fixes: 609109fa9 ("transmission: add seccomp filter and improve jail")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-01-09 02:32:25 +02:00
Rosen Penev
5ec47ca837
knot: Do not try to build under ARC
liburcu does not support ARC.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-01-08 15:52:07 -08:00
Rosen Penev
12fbb79fdb
Merge pull request #10958 from Ansuel/wsdd2
wsdd2: fix install warning on compile
2020-01-08 02:55:54 -08:00
Yousong Zhou
d0dc891c14 openvswitch: bump PKG_RELEASE
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 11:54:47 +08:00
Yousong Zhou
7cc9c437be openvswitch: fix building failure caused by dst_ops api change
Ref: https://github.com/openwrt/packages/issues/10961
Reported-by: Sven Roederer <devel-sven@geroedel.de>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 11:54:46 +08:00
Yousong Zhou
99ecbf7f40 openvswitch: configure with --disable-silent-rules
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 11:54:46 +08:00
Rosen Penev
67a95d4984
Merge pull request #10835 from TDT-AG/pr/20191219-net-tools-route
net-tools: add route utility
2020-01-07 13:42:59 -08:00
Ansuel Smith
56b7c239fd
wsdd2: fix install warning on compile
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2020-01-07 19:37:20 +01:00
Martin Schiller
de66af76d6 net-tools: add route utility
Extend (and rename) the existing mii-tool package to also support
the net-tools route command.

This may be needed if you want to support other address families than
inet/inet6 like x.25.

Also bump to version 2018-11-03.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2020-01-07 10:27:34 +01:00
Chao Liu
c5bf9d3c67
kcptun: bump to v20200103
Reference: https://github.com/xtaci/kcptun/releases/tag/v20200103

Signed-off-by: Chao Liu <expiron18@gmail.com>
2020-01-06 16:30:24 +08:00
Ansuel Smith
db1973c695
nginx: update ubus module
Fix a bug in LuCI interface.

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2020-01-05 18:21:29 +01:00
Daniel Golle
2cce710984 transmission: fix directory creation in init script
Things were done in the wrong order, leading to config_dir not being
chown'ed and subdirectories not being created in case of download_dir
being inside config_dir.

Fixes: 609109fa9 ("transmission: add seccomp filter and improve jail")
Reported-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-01-05 11:52:52 +02:00
Daniel Golle
609109fa97 transmission: add seccomp filter and improve jail
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-01-04 17:09:21 +02:00
Rosen Penev
dbdb19aa4a
Merge pull request #10910 from Andy2244/wsdd2-smbd-rename
wsdd2: update init for renamed cifsd->smbd
2020-01-03 16:32:35 -08:00
Jan Hoffmann
26878ae8de vnstat2: add package
This introduces an additional package for version 2 of vnStat.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
2020-01-04 00:43:57 +01:00
Rosen Penev
7679f5afe9
Merge pull request #10927 from mans0n/chilli
coova-chilli: more fixes and improvements
2020-01-03 14:58:00 -08:00
Rosen Penev
cc20898999
Merge pull request #10909 from Andy2244/smbd-3_0_1-rename
smbd: rename from cifsd, update to 3.0.1
2020-01-03 14:55:08 -08:00
Andy Walsh
6c9973a9d9 smbd: rename from cifsd, update to 3.0.1
* follow upstream rename to 'smbd' and 'smbd-tools'
* config is '/config/smbd' and '/etc/smbd/smb.conf'
* smbd: update to 3.0.1
* smbd: fixes delete access on readonly shares
* smbd: add patch to keep version metadata in kmod
* smbd: add synchrous kill_server patches
* smbd-tools: update to 3.0.1
* smbd-tools: userspace service is now 'usmbd'
* smbd-tools: userspace tools are: 'smbuseradd', 'smbshareadd' with /etc/smbd/smbdpwd.db
* smbd-tools: split package into server/utils (reduce size)
* smbd-tools: fix init (luci save&apply)
* smbd-tools: remove kill_server related timeouts

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-03 19:09:30 +01:00
Hannu Nyman
58d5044a79
Merge pull request #10925 from peter-stadler/nginx-uwsgi-modular
nginx: update to 1.17.7 and use new modular uwsgi for luci
2020-01-03 19:48:33 +02:00
Sungbo Eo
23a44aab2a coova-chilli: enable service by default
If "disabled" option does not exist, service should be enabled.

Fixes: #10392

Signed-off-by: Sungbo Eo <mans0n@gorani.run>
2020-01-03 20:50:00 +09:00
Sungbo Eo
2ce311209d coova-chilli: remove redundant options from config file
"fg" and "pidfile" parameters are already used in the init script,
so they are not controllable by config file anyway.

Signed-off-by: Sungbo Eo <mans0n@gorani.run>
2020-01-03 20:49:22 +09:00
Sungbo Eo
532088818a coova-chilli: add dependency for miniportal
If miniportal option is enabled, some haserl scripts are provided which
present a simple login web page. To make it functional haserl is required.

Signed-off-by: Sungbo Eo <mans0n@gorani.run>
2020-01-03 20:49:00 +09:00
Sungbo Eo
2c71fb2065 coova-chilli: clean up Makefile
- add missing configs to PKG_CONFIG_DEPENDS and sort it
- remove redundant INSTALL_DIR

Signed-off-by: Sungbo Eo <mans0n@gorani.run>
2020-01-03 20:48:48 +09:00
Sungbo Eo
95954b84f5 coova-chilli: remove dnslog option
dnslog feature has been removed since v1.4.

Signed-off-by: Sungbo Eo <mans0n@gorani.run>
2020-01-03 20:48:35 +09:00
Sungbo Eo
225e323033 coova-chilli: cosmetic changes for Config.in
- simplify configuration menu definition
- fix indent

Signed-off-by: Sungbo Eo <mans0n@gorani.run>
2020-01-03 20:47:59 +09:00
Sebastian Kemper
39e68309e8 apache: update InstallDev
The package doesn't need to install _everything_ to staging. This commit
reduces the amount of files that get copied over to staging. Currently
there's no package depending on apache anyway.

This adds sed scripts from buildroot (thanks!) to fix two files that are
important for cross-compiling external modules. This has been tested and
was confirmed to work with mod_gnutls taken as an example package.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-02 00:00:43 +01:00
Sebastian Kemper
31e0d618e5 apache: update descriptions
Taken from upstream website. Also remove parts that aren't up to date
anymore.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-01 23:58:28 +01:00
Sebastian Kemper
2d188fd37f apache: add simple init script
Also preinst and postrm are removed. busybox's httpd isn't installed by
default, so these gimmicks seem antiquated.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-01 23:57:27 +01:00
Sebastian Kemper
c8aba5113b apache: add extra packages + apache user
This adds extra packages for certain modules (basically the ones that
incur further dependencies), support files etc. This is pretty much
follows Alpine's example.

This updates the httpd.conf patch to _not_ uncomment MIMEMagicFile
(because the module isn't loaded by default) and removes that changes
that aren't needed anymore (because of the added module support). The
patch now only changes the default user.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-01 23:53:54 +01:00
Sebastian Kemper
4e6bdd8a49 apache: break-out CONFIGURE_ARGS, add layout
This gets rid of flags. For instance $(FPIC) shouldn't be forced onto
applications (see [1]).

And CONFIGURE_ARGS + CONFIGURE_VARS are broken out of Build/Configure.
This way more arguments can be added easily in the future.

The target is changed from apache to apache2 (which is used by upstream
by default). the CONFIGURE_ARGS are changed where need to enable
modules.

This also renames one patch that fixes scoreboard location (the name
004-pidfile_fix.patch didn't describe what it's doing).

Now with the OpenWrt layout in place 003-logdir_fix.patch can be
removed.

[1] https://wiki.gentoo.org/wiki/Project:Hardened/Position_Independent_Code_internals

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-01 23:45:00 +01:00
Sebastian Kemper
14f4f0bef0 apache: bump to 2.4.41
- version bump
- update license description
- add PKG_BUILD_PARALLEL:=1
- remove two cross-compile patches and replace them with the
  cross-compile patch from buildroot (adds autoreconf to get this going)

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-01 23:20:24 +01:00
Peter Stadler
86514ef3f2 nginx: update to 1.17.7 and use new modular uwsgi for luci
Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-01-01 18:28:49 +01:00
Peter Stadler
96d1910d81 uwsgi: add modular package superseeding uwsgi-cgi
Provide the minimal applications and plugins for: cgi, filelog, syslog and
python3. More plugins can be added if needed by other packages. Autostart
uwsgi in emperor mode loading vassals on demand.

For now, include luci-support (maybe it will be moved to another package),
which uses the syslog plugin by default.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-01-01 18:28:01 +01:00
Ansuel Smith
1f0f760982
nginx: change luci dependency and fix luci nossl
Luci nginx config file for non ssl varian had user as nobody nogroup. This cause some problem with ubus use.
Luci file support package depends on uwsgi-cgi. As this package will be renamed shortly to a more generic version, make the subpackage depends on the uwsgi subpackage only.

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2020-01-01 16:19:27 +01:00
Rosen Penev
df20377ee9
coova-chili: Fix version
Upstream was sloppy when cutting the release.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-12-31 21:12:13 -08:00
Andy Walsh
fbd991aaa2 wsdd2: update init for renamed cifsd->smbd
* update init for renamed cifsd->smbd

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-12-31 15:16:07 +01:00
Stan Grishin
496aa34cb8 vpn-policy-routing: initial release
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-12-30 07:40:25 -07:00
tripolar
948b7f809f
Merge pull request #10816 from Cynerd/wget-no-self-provide
wget: do not provide itself
2019-12-30 14:05:10 +01:00
Jan Pavlinec
5bce9c3e1d
tor: add respawn to init script
Note:
In some cases when tor daemon starts before
than the router is connected to the Internet.
Tor will exit and you have to run it manually.
This should fix this case.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-12-30 13:55:02 +01:00
Jan Pavlinec
a339e0ede3 tor: update to version 0.4.2.5
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-12-29 17:31:25 +01:00
Daniel Golle
b924c3e001 gnunet: update to version 0.12.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2019-12-29 14:18:45 +02:00
Hannu Nyman
5a18057ea4
Merge pull request #10894 from Ansuel/nginx
nginx: fix missing cgi-exec definition
2019-12-29 10:52:40 +02:00
Ansuel Smith
85b09eebb2
nginx: fix missing cgi-exec definition
Add missing cgi-io exec definition to fix broken
luci webui as now it does actually use it.

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2019-12-29 01:11:26 +01:00
Daniel F. Dickinson
66f9e687c2 radicale2: Document suggested use of passlib and bcrypt
PKG_RELEASE not bumped because this only affects package description.
We document that passlib and bcrypt are needed if one wishes to use
bcrypt encryption of passwords.  These have not been added as dependencies
as Radicale2 can have a frontend webserver authenticate users rather than
radicale itself.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-12-28 16:11:54 -05:00
Hannu Nyman
7292a02609
Merge pull request #10648 from micmac1/gdnut
nut: fix cgi/gd setup
2019-12-27 17:43:20 +02:00
Rosen Penev
a5e7d0a904
aria2: Build with MIPS16
All the computationally expensive stuff is in the libraries, not the
package itself.

Saves several kilobytes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-12-23 18:42:30 -08:00
Maxim Storchak
11731c81c3 stubby: switch to ca-bundle
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2019-12-23 17:47:57 +02:00
Rosen Penev
051025eacd
Merge pull request #10796 from G-M0N3Y-2503/feature_https_dns_proxy_logging
https_dns_proxy: Added optional ipv4 resolvers
2019-12-22 21:42:11 -08:00
Rosen Penev
608053a5fb
Merge pull request #10788 from neheb/znc
znc: Update to 1.7.5
2019-12-22 21:39:45 -08:00
Christian Lachner
3d7b8647dc haproxy: Update HAProxy to v2.0.12
- Update haproxy download URL and hash
- Remove @neheb's obsolete-ssl patch as it was upstreamed, see:
  (http://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=6445d988ec8def9d0f80de0eda9c5763d39facc1)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-12-22 10:18:07 +01:00
Rosen Penev
8e9a26a8fa
Merge pull request #10850 from neheb/kc
kcptun: Fix GO_ARCH_DEPENDS
2019-12-21 23:27:16 -08:00
Daniel Golle
3751223502 gnunet: remove patches now apparently part of the release
That could explain why the hash of the released tarball changed after
the release announcement...

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2019-12-21 23:59:12 +02:00
Daniel Golle
4eede02f7a gnunet: fix source hash
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2019-12-21 23:21:13 +02:00
Florian Fainelli
80f881568f treewide: Remove self from PKG_MAINTAINER
Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
2019-12-21 12:52:41 -08:00
Rosen Penev
44be1b65d2
kcptun: Fix GO_ARCH_DEPENDS
Right now, the buildbots are trying to build this on ARC, which is totally
unsupported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-12-20 13:36:49 -08:00
Daniel Golle
6263f9ec80 gnunet-fuse: update to version 0.12.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2019-12-20 22:28:12 +02:00
Daniel Golle
8f784b90fd gnunet: update to version 0.12.0
Also include a bunch of upstream patches to make things build.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2019-12-20 13:26:14 +02:00
Andy Walsh
6d4cf0f2d7 samba4: fix libpam deps
* use old workaround for broken unbundle pam patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-12-20 00:20:23 +01:00
Rosen Penev
fcdd1d2ece
Merge pull request #10824 from gekmihesg/restic-rest-server
restic-rest-server: add package
2019-12-19 12:44:50 -08:00
Rosen Penev
edda3b41d7
Merge pull request #10836 from aleksander0m/aleksander/modemmanager-ppp
modemmanager: depend on ppp explicitly
2019-12-19 12:42:05 -08:00
Markus Weippert
7f86ced176 restic-rest-server: add package
Signed-off-by: Markus Weippert <markus@gekmihesg.de>
2019-12-19 19:28:37 +01:00
Stijn Tintel
6df49a634a net-snmp: do not exit if files cannot be opened
If snmpd fails to open files, like /dev/kmem or /dev/mem, it exits.
Avoid this by adding the -r argument.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2019-12-19 20:04:38 +02:00
Aleksander Morgado
d439333770 modemmanager: depend on ppp explicitly
The ModemManager protocol handler checks for the pppd daemon during
the initialization, and if it doesn't exist, the protocol handler is
not even loaded by netifd.

This is because the IP method to use on the connection of a given
modem is not known until ModemManager reports via its interfaces how
the modem should be connected (either using PPP, with DHCP, or with
explicit IP settings).

Fixes https://github.com/openwrt/packages/issues/10802

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-12-19 09:41:45 +01:00
Rosen Penev
5117ed17f4
Merge pull request #10061 from ynezz/upstream/service-status-fix
treewide: fix service status
2019-12-18 16:18:45 -08:00
Rosen Penev
e9a3a4c354
Merge pull request #10781 from Andy2244/samba-4.11-python3-new
samba4: update to 4.11.4 (python3 version), add rpcsvc-proto, add libasn1 host build
2019-12-18 16:10:33 -08:00
Rosen Penev
b535844e5d
Merge pull request #10813 from EricLuehrsen/unbound_196
unbound: update to 1.9.6
2019-12-18 16:09:35 -08:00
Daniel Golle
b0131c446e gnunet: revert accidentally committed version bump
0.12.0 tarballs aren't out yet, I accidentally committed the changed
version in commit b6a9bd3bf3
("gnurl: update to version 7.67.0").
Revert gnunet back to 0.11.8.

Reported-by: Sebastian Kemper <sebastian_ml@gmx.net>
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2019-12-18 23:34:40 +02:00
Nikos Mavrogiannopoulos
7275525c56 vpnc-script: bumped release version
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2019-12-18 21:24:45 +01:00
Nikos Mavrogiannopoulos
80ab3fdc49 vpnc-script: enable reconnect
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2019-12-18 21:21:49 +01:00
Jo-Philipp Wich
dde503da13 cgi-io: close pipe descriptors early
In the command read side, close the superfluous write end of the pipe
early to ensure that EOF is reliably detected. Without that change, splice
calls to read from the pipe will occasionally hang until the CGI process
is eventually killed due to timeout.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-12-18 11:00:15 +01:00
Karel Kočí
75f2be7d50
wget: do not provide itself
The package wget should not say that it provides itself.

This also make gnu-wget provide general so it is not written in Makefile
twice.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
2019-12-18 10:57:00 +01:00
Gerard Ryan
daf538d8c6 https_dns_proxy: Added optional ipv4 resolvers
* Added optional ipv4 resolvers UCI config option
* Added logging to logd
* Refactored verbosity UCI config option
* Filtered out any address from being added to dnsmasq

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2019-12-18 19:36:23 +10:00
Eric Luehrsen
173f2d6c9f unbound: update to 1.9.6
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2019-12-18 01:32:30 -05:00
Hannu Nyman
b1634c1737
Merge pull request #10754 from stangri/master-https-dns-proxy
https-dns-proxy: switch to https-dns-proxy package name
2019-12-18 07:41:42 +02:00
Stan Grishin
da30fe7e90 https-dns-proxy: switch to https-dns-proxy package name
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-12-17 14:48:51 -07:00
Rosen Penev
7b54bf9b40
Merge pull request #10810 from tru7/knxd
knxd: adjust startup files to better comply with procd
2019-12-17 12:59:46 -08:00
Rosen Penev
f9da2a0400
Merge pull request #10804 from br101/pingcheck-update
pingcheck: Update to latest version
2019-12-17 08:50:19 -08:00
Othmar Truniger
615a4ae9d7 knxd: adjust startup files to better comply with procd
Signed-off-by: Othmar Truniger <github@truniger.ch>
2019-12-17 15:49:15 +01:00
Bruno Randolf
163596d622 pingcheck: Update to latest version
Signed-off-by: Bruno Randolf <br1@einfach.org>
2019-12-17 14:15:48 +00:00
Andy Walsh
c50c5836ea samba4: update to 4.11.4
* update to 4.11.4 (python3 version)
* re-enable AD-DC option
* add 'samba_nice' UCI option via "config procd 'extra'"
* restructure buildsteps (don't rely on waf --targets logic)
* move quota option into VFS
* move ACL option into AC-DC
* add more admin-tools
* use rpath_install for libs
* fix rpath + rstrip

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-12-17 11:54:50 +01:00
Rosen Penev
bf7fb3efe2
Merge pull request #10800 from gladiac1337/haproxy-2.0.11
haproxy: Update HAProxy to v2.0.11
2019-12-16 07:53:05 -08:00
Jan Hak
ca729cd43c knot: update to version 2.9.2
Signed-off-by: Jan Hak <jan.hak@nic.cz>
2019-12-16 13:56:39 +01:00
Daniel Golle
23460f34e5 gnurl: update homepage URL and use @GNU mirrors
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2019-12-16 09:54:58 +02:00
Rosen Penev
ce89774942
Merge pull request #10793 from micmac1/dnsdist-no-bomb
dnsdist: fix various build failures
2019-12-15 21:37:46 -08:00
Daniel Engberg
f36cb43188
Merge pull request #10798 from Andy2244/wsdd2-(2019-12-14)
wsdd2: update to git (2019-12-15), bind to 'lan' only
2019-12-15 23:22:40 +01:00
Andy Walsh
e1a305a355 wsdd2: update to git (2019-12-15), bind to 'lan' only
* update to git (2019-12-15)
* bind to 'lan' interface only
* make cifsd compatible (avoid testparm dependency)
* only start if needed
* add meta data (vendor, model, sku)
* update smb.conf procd location
* lower restart delay
* remove outdated patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-12-15 20:44:49 +01:00
Daniel Golle
b6a9bd3bf3 gnurl: update to version 7.67.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2019-12-15 19:36:49 +02:00
Christian Lachner
b5a3b7ca86 haproxy: Update HAProxy to v2.0.11
- Update haproxy download URL and hash
- Remove obsolete patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-12-15 13:47:37 +01:00
Sebastian Kemper
e5b967aa51 dnsdist: add dependency on tinycdb
If libcdb from tinycdb is available dnsdist will link to it. This commit
adds the dependency.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-12-15 10:49:22 +01:00
Sebastian Kemper
6374c7d921 dnsdist: add missing build dep on protoc
The build needs protoc, otherwise it fails.

checking if we need to link in protobuf... yes
checking for PROTOBUF... yes
checking for protoc... no
configure: error: Protobuf requested but the protobuf compiler was not found

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-12-14 17:39:08 +01:00
Sebastian Kemper
c28357d923 dnsdist: add missing lmdb dep
Currently dnsdist is failing at packaging stage when lmdb is in staging:

make[4]: Leaving directory '/builder/shared-workdir/build/sdk/build_dir/target-x86_64_musl/dnsdist-1.4.0'
Package dnsdist is missing dependencies for the following libraries:
liblmdb.so
Makefile:109: recipe for target '/builder/shared-workdir/build/sdk/bin/packages/x86_64/packages/dnsdist_1.4.0-2_x86_64.ipk' failed

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-12-14 17:34:56 +01:00
Rosen Penev
16be1296ed
Merge pull request #10774 from James-TR/James-TR-patch-1
dnsdist: fix missing quote in menu
2019-12-14 00:48:25 -08:00
Rosen Penev
27a2535790
Merge pull request #10782 from dengqf6/ariang
ariang: update to 1.1.4
2019-12-14 00:26:36 -08:00
Rosen Penev
3bfbb7d1db
mosh: Fix compilation with libcxx
Partial backport of upstream patch.``

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-12-14 00:18:53 -08:00
Rosen Penev
41112ff9eb
znc: Update to 1.7.5
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-12-14 00:13:52 -08:00
Rosen Penev
7f669d8d7c
Merge pull request #10764 from neheb/bf
bfdd: Fix compilation with uClibc-ng
2019-12-13 09:00:03 -08:00
DENG Qingfang
b1de9998ee ariang: update to 1.1.4
Update ariang to 1.1.4

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
2019-12-14 00:28:03 +08:00
Rosen Penev
ec5c20d667
Merge pull request #10775 from rs/nextdns-1.3.1
nextdns: update to version 1.3.1
2019-12-13 07:20:39 -08:00
Jo-Philipp Wich
b2a890f6ad cgi-io: implement exec action
Implement a new "cgi-exec" applet which allows to invoke remote commands
and stream their stdandard output back to the client via HTTP. This is
needed in cases where large amounts of data or binary encoded contents
such as tar archives need to be transferred, which are unsuitable to be
transported via ubus directly.

The exec call is guarded by the same ACL semantics as rpcd's file plugin,
means in order to be able to execute a command remotely, the ubus session
identified by the given session ID must have read access to the "exec"
function of the "cgi-io" scope and an explicit "exec" permission rule for
the invoked command in the "file" scope.

In order to initiate a transfer, a POST request in x-www-form-urlencoded
format must be sent to the applet, with one field "sessionid" holding
the login session and another field "command" specifiying the commandline
to invoke.

Further optional fields are "filename" which - if present - will cause
the download applet to set a Content-Dispostition header and "mimetype"
which allows to let the applet respond with a specific type instead of
the default "application/octet-stream".

Below is an example for the required ACL rules to grant exec access to
both the "date" and "iptables" commands. The "date" rule specifies the
base name of the executable and thus allows invocation with arbitrary
parameters while the latter "iptables" rule merely allows one specific
set of arguments which must appear exactly in the given order.

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "cgi-io",
        "objects": [
            [ "exec", "read" ]
        ]
    }'

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "file",
        "objects": [
            [ "/bin/date", "exec" ],
            [ "/usr/sbin/iptables -n -v -L", "exec" ]
        ]
   }'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-12-13 10:38:35 +01:00
Jan Pavlinec
06d36ca794 git: update to version 2.24.1 (security fix)
Fixes
CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351,
CVE-2019-1352, CVE-2019-1353, CVE-2019-1354, CVE-2019-1387, and
CVE-2019-19604

And fix deprecated PKG_CPE_ID

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-12-13 10:31:09 +01:00
Olivier Poitrey
c7eb765b19 nextdns: update to version 1.3.1
- IPv6 support
- Fix HTTP/2 negociation
- Improve endpoint fallback
- Add support for unencrypted DNS
- Many other fixes and features

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2019-12-13 01:01:53 -08:00
James Taylor
a771736f85
dnsdist: fix missing quote in menu
Fixes missing double quote in menu

Signed off by: James Taylor <james@jtaylor.id.au>
2019-12-13 19:03:53 +11:00
Rosen Penev
80a9ca7ccc
ibrdtnd: Remove c++03 option
Needed for libcxx compatibility. It probably generates bigger code.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-12-12 23:40:46 -08:00
Rosen Penev
9669044008
Merge pull request #10746 from aleksander0m/aleksander/mm-1-12-2
modemmanager: release 1.12.2
2019-12-12 19:42:47 -08:00
Rosen Penev
38e80bdf62
Merge pull request #10717 from WeekendSoftware/safe-search
net/safe-search Update Google host list.
2019-12-12 16:11:51 -08:00
Rosen Penev
ed151e8c18
Merge pull request #10767 from James-TR/dnsdist/libcap
dnsdist: add missing dependency on libcap
2019-12-12 16:09:51 -08:00
Rosen Penev
2656dfa262
Merge pull request #10713 from dengqf6/mtr
mtr: update to 0.93
2019-12-12 07:48:56 -08:00
DENG Qingfang
ad5615737a mtr: update to 0.93
Update mtr to 0.93
Add size optimization options
ath79 ipk size: 31.9k -> 31.4k

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
2019-12-12 23:22:43 +08:00
James Taylor
64b9bd368f dnsdist: add missing dependency on libcap
When present on the build system dnsdist will try to make use of libcap. This
change adds an explicit dependency to ensure it's present at build time, to
prevent build failures when another package brings the dependency in.

Signed-off-by: James Taylor <james@jtaylor.id.au>
2019-12-12 20:31:49 +11:00
Rosen Penev
04b1e7f7cc
bfdd: Fix compilation with uClibc-ng
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-12-11 19:54:51 -08:00
Rosen Penev
ad4acb5531
Merge pull request #10704 from neheb/coo
coova-chilli: Update to 1.5
2019-12-11 19:46:50 -08:00
Rosen Penev
68b5a71883
coova-chilli: Update to 1.5
Remove upstreamed patches.

Added patch to fix compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-12-11 19:39:21 -08:00
Rosen Penev
7656d42f96
Merge pull request #10721 from James-TR/update/dnsdist
dnsdist: update to 1.4.0 w/ new dependencies
2019-12-11 14:24:22 -08:00
Rosen Penev
2b05359350
Merge pull request #10726 from neheb/pro
prosody: Update to 0.11.3
2019-12-11 14:19:38 -08:00
Karl Palsson
79c2781926 net/pagekitec: Update to 20191211 version
Pulls in various bugfixes from the last two years, including changes for
openssl deprecation.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2019-12-11 17:00:54 +00:00
Dirk Brenken
5369d0dbbf
adblock: bugfix 3.8.14
* fix some whitelist issues (see
https://forum.openwrt.org/t/adblock-support-thread/507/1101)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-12-11 12:30:53 +01:00
Rosen Penev
7e39c59e7f
Merge pull request #10735 from ysc3839/vpnbypass
vpnbypass: add procd reload trigger for vpnbypass config
2019-12-10 13:48:31 -08:00
Dirk Brenken
1ed53b31ef
Merge pull request #10747 from dibdot/adblock
adblock: bugfix 3.8.13
2019-12-10 20:14:27 +01:00
Dirk Brenken
21a85fef22
adblock: bugfix 3.8.13
* remove 'ransomware' blocklist by abbuse.ch (discontinued)
  from default adblock config
* fix/switch 'someonewhocares' config to https only
* fix curl download parameters to follow redirects and
  suppress needless output
* made the tmp directory of sort operations configurable,
  set 'adb_sorttmp' accordingly (only supported by 'coreutils-sort')

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-12-10 19:58:06 +01:00
Rosen Penev
15866948c4
Merge pull request #10738 from eglooca/master
netifyd: Updated to v2.98
2019-12-10 07:17:17 -08:00
Richard Yu
d279181756
vpnbypass: add procd reload trigger for vpnbypass config
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
2019-12-10 21:52:42 +08:00
Aleksander Morgado
9362a25801 modemmanager: release 1.12.2
This new release also installs additional 'shared utils' loadable
libraries in /usr/lib/ModemManager, so make sure we include them in
the packaging.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-12-10 14:12:47 +01:00
James Taylor
32fe1a6741 dnsdist: update to 1.4.0
Update dnsdist to next major release 1.4.0. This release introduces
dependencies on libh2o-evloop and libwslay for support of DNS over
HTTPS.

Release Blog Post: https://blog.powerdns.com/2019/11/20/dnsdist-1-4-0/
Changelog: https://dnsdist.org/changelog.html#change-1.4.0

Also removes compatibility patches required for previous release that have
been incorporated upstream.

Signed-off-by: James Taylor <james@jtaylor.id.au>
2019-12-10 21:33:01 +11:00
Rosen Penev
0c877258c2
Merge pull request #10729 from BKPepe/dnscrypt-proxy2-update
dnscrypt-proxy2: Update to version 2.0.34
2019-12-09 14:25:17 -08:00
Rosen Penev
a077eb3c8d
Merge pull request #10733 from James-TR/update/pdns
pdns-recursor: update to 4.2.1
2019-12-09 14:24:50 -08:00
Darryl Sokoloski
e94d771197 netifyd: Updated to v2.98
Maintainer: Darryl Sokoloski / @dsokoloski
Compile tested: arm_cortex-a15_neon-vfpv4, TP-Link Archer C2600, master
Run tested: TP-Link Archer C2600

Change log for v2.98:

[FIX] OpenWrt: Silence ABI warnings.
[FIX] Fixed socket buffer dead-lock (pop < 0 bytes).
[FIX] Silenced site UUID errors (moved to debug level).
[FIX] Updated to SPDX identifier for GPL license.

[IMP] Migrated from libjson-c to nlohmann JSON for Modern C++.
[IMP] Updated agent status with CPU utilization and sink service status.
[IMP] Reformatted sink queue utilization status output.
[IMP] Support OS-specific restarting.
[IMP] Added payload upload and update frequency control.
[IMP] Added MAC addresses to JSON interface list.
[IMP] Added option to send established flows to connecting clients.
[IMP] Added offline capture processing script.

Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
2019-12-09 12:46:57 -05:00
Richard Yu
d551758310
nlbwmon: add procd reload trigger for nlbwmon config
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
2019-12-09 20:28:11 +08:00
James Taylor
d4e00eca55 pdns-recursor: update to 4.2.1
Updates pdns-recursor to current stable 4.2.1. Also includes more complete fix
for boost.m4 BOOST::THREAD detection, removing dependency on boost-thread.

Signed-off-by: James Taylor <james@jtaylor.id.au>
2019-12-09 23:05:22 +11:00
Josef Schlehofer
cddf39cbd1
dnscrypt-proxy2: Update to version 2.0.34
Repository was renamed to github.com/DNSCrypt/dnscrypt-proxy

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-12-09 00:58:08 +01:00
Rosen Penev
73d29b9fd7
prosody: Update to 0.11.3
Several Makefile rearrangements for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-12-08 14:49:13 -08:00
Rosen Penev
cbcfc7a3e2 geth: Update to 1.9.9
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-12-08 14:33:37 -08:00
Rosen Penev
3260950f4c
Merge pull request #10706 from neheb/ss
sstp-client: Update to 1.0.13
2019-12-08 13:42:07 -08:00
James Taylor
fd62baea73 pdns: Upgrade to PowerDNS Authoritative 4.2.1
Upgraded to pdns-4.2.1 and corrected issues with dependency management on
modules, in addition to moving zone2ldap under the ldap backend (It's only
compiled if ldap backend is enabled)

Signed-off-by: James Taylor <james@jtaylor.id.au>
2019-12-08 14:03:00 +11:00
Gregory L. Dietsche
bce8c6ef0f safe-search: Update Google host list.
Periodic update of the list of Google domains using
https://www.google.com/supported_domains
as a reference.

Signed-off-by: Gregory L. Dietsche <gregory.dietsche@cuw.edu>
2019-12-07 10:48:46 -06:00
Noah Meyerhans
556698cedf iputils: Move the iputils tools to packages
Per discussion in https://github.com/openwrt/openwrt/pull/1804, iputils is
moving from the main openwrt repository to the packages feed, and is switching
from the abandoned skbuff.net upstream to github.com/iputils/iputils

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2019-12-05 17:06:40 -08:00
Stijn Tintel
f32a06a877
Merge pull request #10610 from paulfertser/strongswan-set-reqid
strongswan: allow to specify per-connection reqid with UCI
2019-12-05 14:37:51 +02:00
Rosen Penev
b3f52f80ad
sstp-client: Update to 1.0.13
Edited deprecated OpenSSL patch slightly.

Fixed up license information.

Reorganized Makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-12-04 10:23:51 -08:00
Andy Walsh
1298a4ceda samba4: make host-buildtools private/add suffix
* fix openwrt/packages#10700
* add suffix to asn1_compile, compile_et to avoid krb5 conflicts
* bundle samba's com_err

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-12-03 16:06:07 +01:00
Karl Palsson
5da8ae16b2 mosquitto: bump to version 1.6.8
This is a bugfix release.
Full changelog available at:
https://mosquitto.org/blog/2019/11/version-1-6-8-released/

Many smaller fixes in various areas, nothing particularly standout as of
special interest to OpenWrt.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2019-12-03 13:14:16 +00:00
Sergey Urushkin
569e06c82f arp-scan: update to 1.9.7
Signed-off-by: Sergey Urushkin <urusha.v1.0@gmail.com>
2019-12-02 09:51:19 +03:00
Rosen Penev
1d434b00e7
Merge pull request #10688 from neheb/ope
openconnect: Switch to HTTPS for the source URL
2019-12-01 16:51:29 -08:00
Rosen Penev
13513957f8
Merge pull request #10681 from gram25gwh/ddns-scripts-https-afraid-org
ddns-scripts: Change protocols of afraid.org urls to HTTPS.
2019-11-30 23:51:37 -08:00
Kwonjin Jeong
e25b558999 ddns-scripts: Change protocols of afraid.org urls to HTTPS.
- Use HTTPS protocol for updating urls for afraid.org to protect the password.
- Bump/align package version number.

Signed-off-by: Kwonjin Jeong <gram25gwh@gmail.com>
2019-12-01 15:24:38 +09:00
Rosen Penev
3b31e4e13b
Merge pull request #10668 from Andy2244/samba4_4.9.16_cleanup
samba4: update to 4.9.16, remove AD-DC/Winbind options
2019-11-30 18:34:55 -08:00
Rosen Penev
4d7c5af6e1 openconnect: Switch to HTTPS for the source URL
Goes through firewalls easier.

Switched to xz tarball, which is both implicit and smaller.

Rearranged some stuff for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-30 18:30:35 -08:00
Dirk Brenken
e97f350a00
banip: update 0.3.11
* fix ssh daemon autodetection
* fix 'sshd' logfile parsing

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-11-30 19:31:14 +01:00
Hannu Nyman
52e6151d11
Merge pull request #10655 from gladiac1337/haproxy-2.0.10
haproxy: Update HAProxy to v2.0.10
2019-11-29 17:28:55 +02:00
Christian Lachner
19623a4ef9 haproxy: Update HAProxy to v2.0.10
- Update haproxy download URL and hash
- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.10.html)
- This fixes CVE-2019-19330 (See: https://nvd.nist.gov/vuln/detail/CVE-2019-19330)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-11-29 12:25:21 +01:00
Rosen Penev
47772cc9c6
Merge pull request #10657 from neheb/addr
addrwatch: Add missing limits header for PATH_MAX
2019-11-29 02:12:07 -08:00
Rosen Penev
5b3a1591bc
Merge pull request #10654 from leonghui/wiki-link-update
treewide: replace old wiki links
2019-11-28 20:21:31 -08:00
Leong Hui Wong
a6f1ff5a85 treewide: update wiki links
Signed-off-by: Leong Hui Wong <wong.leonghui@gmail.com>
2019-11-29 09:16:02 +08:00
Sebastian Kemper
18335dc424 ntpd: create config_file directory
ntpd's configuration is stored in /var/etc, but the init script doesn't
create this directory. To be fair this folder is used by other packages
as well, for instance dnsmasq. Still, it's better not to rely on other
packages to create it.

Fixes: #10636

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-11-28 22:27:03 +01:00
Andy Walsh
226e0c6497 samba4: update to 4.9.16, remove AD-DC/Winbind options
* update to 4.9.16
* cherry-pick some musl alpine/openembedded patches
* cleanup/remove AD-DC/Winbind options and related code
* build the compile_et via samba4/host

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-28 17:11:55 +01:00
Florian Eckert
32efe3609d stunnel: update to version 5.56
Update to version 5.56

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-11-28 12:09:52 +01:00
Josef Schlehofer
f39cdba7c0
Merge pull request #10511 from SibrenVasse/openssh8.1
openssh: update to 8.1p1
2019-11-28 09:27:58 +01:00
Rosen Penev
8003eea2b9
addrwatch: Add missing limits header for PATH_MAX
Fixes compilation on musl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-27 23:38:35 -08:00
Rosen Penev
f0eb182472
Merge pull request #10611 from ldir-EDB0/bumpdns
net/https-dns-proxy: Update to 2019-10-09
2019-11-27 13:50:22 -08:00
Andy Walsh
b85a124ff6 cifsd: update to git (2019-11-27), fix reload/restart not applying smb.conf changes
* fix reload/restart not applying luci/smb.conf changes
* remove hotfix for 'read only = no' (fixed by upstream)
* update documentation, example
*cifsd: fix the lost of dos file attributes
*cifsd: store FILE_ATTRIBUTE_SPARSE into xattr
*cifsd: release v2.0.2
*cifsd-tools: add smb.conf.list file to show supported parameters list
*cifsd-tools: set CIFSD_SHARE_FLAG_WRITEABLE flags if read only = no
*cifsd-tools: release cifsd-tools v2.0.2

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-27 22:11:16 +01:00
Sebastian Kemper
7d4f1b8589 nut: update OpenSSL 1.1.0 patch
Replaces OpenWrt patch with upstream patch. Also removes
0002-Fix-check-for-empty-string.patch as this is included in upstream
OpenSSL 1.1.0 patch.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-11-27 19:52:30 +01:00
Sebastian Kemper
cdd660a41d nut: fix CGI setup
This commit makes

 - the libgd dependency (as well as specifying libs and includes)
 - the configure argument "--with-cgi"

dependant on whether the package nut-web-cgi is selected.

nut-web-cgi is also added to PKG_CONFIG_DEPENDS.

Resolves: #10641

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-11-27 19:42:54 +01:00
Aleksander Morgado
5f11888b12 modemmanager: install common utils in /usr/share/ModemManager
The modemmanager.common file includes several utility functions that
are used in several places like the protocol handler and in hotplug
scripts. These utilities should not be installed in /etc as they're
not configuration.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-27 09:28:10 +01:00
Aleksander Morgado
ecad39fd60 modemmanager: don't flag the 'device' option as 'device' type
Unlike other modem protocol handlers like the ones implemented by uqmi
or umbim, in the modemmanager protocol handler the 'device' option
does not specify a device node in /dev. Therefore, we shouldn't flag
the option as 'device' type (dt_type_device).

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-27 09:28:10 +01:00
Aleksander Morgado
a684cdbab0 modemmanager: fix device unplug handling
When a USB modem device is unplugged, we had to do two different
things: first, cleanup the sysfs cache; and second, set interface as
unavailable.

Those two things were never being done properly due to several
different issues:

 * The parent sysfs path retrieval logic relies on checking for which
 sysfs path has the vid/pid files. This logic obviously only works
 when the device is available, and cannot be used on e.g. removal
 events.

 * The command to cleanup the modem wait status from the sysfs cache
 was not removing the previous state properly, because the sysfs path
 variable wasn't escaped properly for the sed command.

This patch handles those issues in order to have a proper device
removal handling, by making sure the sysfs path is properly escaped in
the sed command, and by introducing a new hotplug script that runs
when the full USB device is removed.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-27 09:28:10 +01:00
Aleksander Morgado
cc4ee2fd3c modemmanager: flag as available and no_device when initializing
Otherwise, if the modem is reseted, netifd will think that the device
is gone forever.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-27 09:28:10 +01:00
Aleksander Morgado
92781ecc7f modemmanager: add default proto configs
Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-27 09:28:10 +01:00
Rosen Penev
4dbb240c5c
Merge pull request #10645 from Andy2244/softethervpn5-9672
softethervpn5: update to 5.01.9672
2019-11-26 14:23:45 -08:00
Sebastian Kemper
a08cc5b533 nut: revert 81e6bb7
gdlib pc file doesn't set a version, so "pkg-config --modversion gdlib"
returns nothing. Also, the test

  if test "$?" != "0" -a -n "${GD_VERSION}"; then

is wrong as pkg-config wouldn't return != 0 on success.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-11-26 21:16:47 +01:00
Andy Walsh
a6054083dd softethervpn5: update to 5.01.9672
* 5.01.9672 release
* Cedar: handle UDP acceleration and R-UDP versions
* Mayaqua: implement R-UDP version 2, powered by ChaCha20-Poly1305
* Cedar: implement UDP acceleration version 2, powered by ChaCha20-Poly1305
* Cedar: serve new web management interface
* Cedar: implement detailed protocol info
* Mayaqua: add Windows Server 2019 to the supported operating systems list
* Cedar: various fixes
* Cedar: add "DisableIPsecAggressiveMode" option
* Make install dir for unit files configurable
* Protocol.c: adapt ClientConnectGetSocket() for new proxy functions
* Wpc.c: adapt WpcSockConnectEx() for new proxy functions
* Protocol: add ProxyCodeToCedar()
* Move generic proxy stuff from Cedar to Mayaqua
* Proto_OpenVPN.c: improve OvsProcessData(), fix out-of-bounds access found by Coverity
* Proto_OpenVPN.c: fix segmentation fault in OvsProceccRecvPacket()
* Addressing the UDP reflection amplification attack: https://github.com/SoftEtherVPN/SoftEtherVPN/issues/1001
* Mayaqua.h: include <stdarg.h> for "va_list" on Illumos
* Protocol.c: fix bug in ClientConnectGetSocket() causing custom HTTP header not to work
* Mayaqua: move HTTP functions from "Network" to "HTTP"
* Move GetMimeTypeFromFileName() and related structure to Mayaqua
* Mayaqua.h: include <stdio.h> for "FILE"
* Mayaqua.h: include <stddef.h>, for "wchar_t"
* Bump mixin-deep in /src/bin/hamcore/wwwroot/admin/default
* - Fixed the problem occurs when RPC messages between Cluster Members exceed 64Kbytes. - Fixed the RADIUS PEAP client to use the standard TLS versioning. - Implementation of a function to fix the MAC address of L3 VPN protocol by entering e.g. "MAC: 112233445566" in the "Notes" field of the user information. - Implementation of a function to fix the virtual MAC address to be assigned to the L3 VPN client as a string attribute from RADIUS server when authentication.
* Updating built-in Win32 libraries - OpenSSL 1.1.1 -> 1.1.1d - zlib 1.2.3 -> 1.2.11
* Update strtable_cn.stb
* Avoid using hardcoded paths in log file enumeration
* Fix buffer overflow during NETBIOS name resolution
* Update SEVPN.sln
* Create strtable_pt_br.stb
* ci: display error if vpntest failed
* Fix several compile warnings on MS VC++ 2008.
* Enables crash minidump for Win32 vpntest. Minidump files will be saved to the 'C:\Users\<username>\AppData\Local\Temp\vpn_debug' (for normal user) or 'src\bin\vpn_debug\' (for administrator user).
* OpenVPN: use new protocol interface
* Add interface for easy protocol implementation
* add "no-deprecated" to openssl builds "no-deprecated" is widely used in openwrt devices
* Fix LibreSSL support
* Switch to OpenSSL THREADID API
* travis-ci: update openssl, libressl
* enable sonar-scan in travis-ci builds
* Virtual: fix race condition in DHCP server which resulted in multiple clients receiving the same IP
* Mayaqua: Fix compilation without deprecated OpenSSL APIs
* Mayaqua: Replace GNU specific sys/poll.h header with POSIX poll.h
* systemd: replace deprecated CAP_SYS_ADMIN with CAP_SYSLOG

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-26 15:14:25 +01:00
Paul Fertser
a8fa557cd5 strongswan: allow to specify per-connection reqid with UCI
This is useful to assign all traffic to a fw3 zone, e.g.:

/etc/config/ipsec:

config remote 'test'
	list tunnel		'dev'
...

config 'tunnel' 'dev'
	option reqid		'33'
...

/etc/config/firewall:

config zone
	option name		wan
	option extra_src	"-m policy --pol none --dir in"
	option extra_dest	"-m policy --pol none --dir out"
...

config zone
	option name		vpn
	# subnet needed for firewall3 before 22 Nov 2019, 8174814a
	list subnet		'0.0.0.0/0'
	option extra_src	"-m policy --pol ipsec --dir in --reqid 33"
	option extra_dest	"-m policy --pol ipsec --dir out --reqid 33"
...

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2019-11-26 15:27:54 +03:00
Andy Walsh
67e529da18 cifsd-tools: update to git (2019-11-25)
* cifsd-tools: fix Assignment of a signed value which has type 'long'
* init: convert hide_dot_files to yes/no option
* 'read only = no' seems bugged for cifsd/smb.conf, so fix via 'writeable = yes'

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-25 17:11:46 +01:00
Rosen Penev
6d9ee2ec86
transmission: Disable webseeding
It causes 100% CPU usage in certain situations. Just disable it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-24 19:01:58 -08:00
William Fleurant
be4fe496ce yggdrasil: bump to 0.3.12
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2019-11-24 19:18:53 -05:00
Hannu Nyman
c6a8853c0d
Merge pull request #10519 from BKPepe/git
git: Update to version 2.24.0
2019-11-24 15:49:42 +02:00
Rosen Penev
2707a95d31
clamav: Shellcheck fixes
Fix SC2129

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-23 18:55:22 +01:00
Josef Schlehofer
c7ad27ebbd
clamav: Update to version 0.101.4
Change deprecated options to a new one:
DetectBrokenExecutables to AlertBrokenExecutables
ArchiveBlockEncrypted to AlertEncrypted

Fixes: CVE-2019-12900 and CVE-2019-12625

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-11-23 18:55:22 +01:00
Dirk Brenken
219abdc5a1
adblock: update 3.8.12
* fix possible dns restart issue with DNS File Reset (race condition)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-11-23 13:44:54 +01:00
Rosen Penev
9d57b11e44
Merge pull request #10616 from Andy2244/samba4-22-11-2019
samba4: add UCI option 'disable_async_io'
2019-11-22 08:33:45 -08:00
Rosen Penev
a47004dfbb
Merge pull request #10615 from Andy2244/cifsd-22-11-2019
cifsd: update to git (2019-11-22)
2019-11-22 08:27:20 -08:00
Andy Walsh
ec3225b495 samba4: add UCI option 'disable_async_io'
* add UCI option 'disable_async_io'
* remove [homes] options

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-22 13:54:24 +01:00
Andy Walsh
5c2706a9ad cifsd: update to git (2019-11-22)
* cifsd: fix uninitialized fp could be freed
* cifsd: fix potential uninitialized spnego_blob could be freed
* cifsd: smbd: replace spinlock_irqsave with spinlock
* cifsd: smbd: avoid the lack of client's send credits
* cifsd-tools: add version generation script
* cifsd-tools: do not abbrev git describe
* cifsd-tools: use 'unknown' version string if git describe fails

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-22 13:43:17 +01:00
Chao Liu
c233165fe0
kcptun: bump to v20191112
Signed-off-by: Chao Liu <expiron18@gmail.com>
2019-11-22 14:29:51 +08:00
Kevin Darbyshire-Bryant
0b30945de0 net/https-dns-proxy: Update to 2019-10-09
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2019-11-21 21:05:44 +00:00
Florian Eckert
58010dbd88
Merge pull request #10547 from zhoreeq/yggdrasil_uci
yggdrasil: Change package configuration to UCI
2019-11-21 20:01:12 +01:00
Rosen Penev
fa0ef9c189
Merge pull request #10605 from rs/nextdns-1.1.5
nextdns: Update version 1.1.5 + add per host config option
2019-11-21 09:35:38 -08:00
Rosen Penev
82d4a10fe8
Merge pull request #10608 from ja-pa/bind-9.14.8
bind: update to version 9.14.8 (security fix)
2019-11-21 09:34:29 -08:00
George Iv
6857fd45c8 yggdrasil: Change package configuration to UCI
Signed-off-by: George Iv <57254463+zhoreeq@users.noreply.github.com>
2019-11-21 11:15:29 -05:00
Jan Pavlinec
46ca2c79ca
bind: update to version 9.14.8 (security fix)
Fixes CVE-2019-6477

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-11-21 13:14:23 +01:00
Olivier Poitrey
8619255463 nextdns: Update version 1.1.5 + add per host config option
* Update nextdns to version 1.1.5 which adds IPv6 dual stack support.
* Add the ability to configure per host configuration id from uci.

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2019-11-21 02:41:28 -08:00
Josef Schlehofer
24667753a2
unbound: Update to version 1.9.5
Fixes CVE-2019-18934

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-11-21 09:01:56 +01:00
Rosen Penev
dfe3924f33
Merge pull request #10583 from neheb/cif
cifs-utils: Add smbinfo utility
2019-11-20 16:48:51 -08:00
Rosen Penev
09ac44a5b7
Merge pull request #10587 from Payne-X6/master
knot: update to version 2.9.1
2019-11-19 11:13:05 -08:00
Dirk Brenken
760c3a2240
Merge pull request #10581 from dibdot/travelmate
travelmate: update 1.5.3
2019-11-19 08:31:50 +01:00
Rosen Penev
fea1468506
cifs-utils: Add smbinfo utility
Switched to PKG_INSTALL for simplicity.

Added PKG_BUILD_PARALLEL for faster compilation.

Added InstallDev section.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-18 15:21:13 -08:00
Dirk Brenken
05c3153bb7
travelmate: update 1.5.3
* some init tweaks
* use the usual wifi wrapper for reloads
* compatibility fix for latest wifi-related changes
  in master (dynamic wireless radio reconfiguration)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-11-18 19:28:23 +01:00
Jan Hak
559672d6b0 knot: update to version 2.9.1
Signed-off-by: Jan Hak <jan.hak@nic.cz>
2019-11-18 17:13:17 +01:00
Florian Eckert
0150459a78
Merge pull request #10538 from TDT-AG/pr/20191113-mwan3
mwan3: add https ping possibility and a minor fix
2019-11-18 09:28:48 +01:00
Florian Eckert
6d638c3e23 mwan3: change license to SPDX compatible identifier
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-11-18 09:26:51 +01:00
Petr Štetiar
8383c19b90 treewide: fix service status command in procd compatible services
Fix breaking change introduced in the main tree with a commit
7519a36774ca ("base-files,procd: add generic service status") where the
old service `status` callback function doesn't work anymore and needs to
be renamed to `status_service`.  This name was chosen for consistency
with start and stop function callbacks, which are using `start_service`
and `stop_service` naming schemes.

While at it, fix whitespace issues in the status_service as well.

Ref: http://lists.infradead.org/pipermail/openwrt-devel/2019-September/019035.html
Reported-by: Dirk Brenken <dev@brenken.org>
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2019-11-18 06:28:57 +01:00
Rosen Penev
e027b47069
Merge pull request #10545 from lucize/frrup
frr: add missing build options
2019-11-17 18:07:47 -08:00
Rosen Penev
d8c0baaf9e
Merge pull request #10546 from TDT-AG/pr/20191114-xtables-addons
xtables-addons: disable ASLR PIE
2019-11-17 17:53:17 -08:00
Rosen Penev
6ca10a0865
Merge pull request #10551 from aleksander0m/aleksander/mm-fix-any-ip-type
modemmanager: fix 'any' iptype setting
2019-11-17 17:52:58 -08:00
Rosen Penev
0cb776a2e2
Merge pull request #10566 from rs/nextdns-1.1.3
nextdns: update to 1.1.3
2019-11-17 17:52:24 -08:00
Olivier Poitrey
06b649555e nextdns: update to 1.1.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2019-11-17 17:41:30 -08:00
Rosen Penev
0023ac151d
Merge pull request #10544 from ewsi/dcwapd-procd
dcwapd: Update init script to use procd
2019-11-17 14:14:40 -08:00
Hannu Nyman
5a334383a8
Merge pull request #10571 from gladiac1337/haproxy-2.0.9
haproxy: Update HAProxy to v2.0.9
2019-11-17 19:25:15 +02:00
Toke Høiland-Jørgensen
81605d8c59 acme: Add dependency on luci-compat for luci-app-acme
Fixes #10564.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2019-11-17 16:15:22 +01:00
Christian Lachner
03a7a01f4e haproxy: Update HAProxy to v2.0.9
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-11-17 10:24:27 +01:00
Dirk Brenken
4671a5c2d9
Merge pull request #10562 from dibdot/adblock
adblock: update 3.8.11
2019-11-17 08:42:37 +01:00
Hannu Nyman
8fc4efe3e0
Merge pull request #10561 from Ansuel/nginx
nginx: update to 1.17.5
2019-11-16 21:14:57 +02:00
Dirk Brenken
bc299d03f2
adblock: update 3.8.11
* some more init tweaks
* update/cleanup readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-11-16 17:36:08 +01:00
Ansuel Smith
7e20373cde
nginx: update to 1.17.5
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2019-11-16 17:16:00 +01:00
Carey Sonsino
0d5b50c4bf dcwapd: Update init script to use procd
consolidate shell scripts into init script
remove "litter" from uci file
update default UCI values

Signed-off-by: Carey Sonsino <careys@edgewaterwireless.com>
Signed-off-by: Carey Sonsino <csonsino@gmail.com>
2019-11-15 18:06:05 -05:00
Rosen Penev
8892d5f632
Merge pull request #10474 from leonghui/leech
leech: add new package
2019-11-15 14:54:51 -08:00
Jeffery To
47c385eaf9 sysrepo: Remove Lua bindings, build Python bindings in separate package
This change:

* Removes building of Lua bindings. These bindings were already removed
  upstream[1].

* Fixes building of Python bindings:
  * Fix SWIG_DIR path (note that SWIG_VERSION will need to be updated
    whenever the swig package is upgraded)
  * Fix Python module paths and filenames

* Packages the Python bindings in a new package (python3-sysrepo) and
  builds it by default, instead of depending on a config option.

[1]: https://github.com/sysrepo/sysrepo/pull/1429

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-11-16 03:47:00 +08:00
Lucian Cristian
df6263b9e6 frr: add missing build options
and some backports in fixing ramips target

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2019-11-15 21:26:07 +02:00
Dirk Brenken
de149441a4
banip: update 0.3.10
* add missing logd dependency
* check if logd is enabled during runtime
* some more init tweaks

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-11-15 16:19:40 +01:00
Aleksander Morgado
470fcc221b modemmanager: fix 'any' iptype setting
When the user requests 'any' as 'iptype', we may get either IPv4 or
IPv6 settings.

Simplify the logic by not requiring any explicit iptype before loading
the method reported by the bearer object for IPv4 and IPv6; just load
the methods right away and setup settings based on those.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-15 15:41:25 +01:00
Leong Hui Wong
217b254290 leech: remove empty install defines
Signed-off-by: Leong Hui Wong <wong.leonghui@gmail.com>
2019-11-15 14:11:02 +00:00
Rosen Penev
e036312e6b
Merge pull request #10535 from rs/feature_nextdns
nextdns: add DNS over HTTPS with NextDNS integration
2019-11-14 17:38:55 -08:00
Martin Schiller
3804006e60 xtables-addons: disable ASLR PIE
This package uses ld for linking and therefor does not support the
-specs option.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2019-11-14 08:27:05 +01:00