Commit graph

6670 commits

Author SHA1 Message Date
Toke Høiland-Jørgensen
ef61a2be50 acme: Bump acme.sh to v2.8.6
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-05-04 10:36:42 +02:00
Toke Høiland-Jørgensen
b88b678004 acme: Remove luci-app-acme
The Luci app for ACME has been moved to the luci package feed.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-05-04 10:23:35 +02:00
Florian Eckert
d009ce628b keepalived: update PKG_RELEASE number
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian Eckert
1b1ba71063 keepalived: add script security param to fix warning
Openwrt is a single user system. So keepalived is runnig as root.
If we add the config options `script_user root` and
`enabled_script_security' the following warnings are gone.

> local1.info Keepalived_vrrp[5382]: SECURITY VIOLATION - scripts are
being executed but script_security not enabled.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian Eckert
cc9e4d3b82 keepalived: move linkbeat_use_polling section into main section
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian Eckert
c4d1af42e8 keepalived: move alt_config_file check into process_config
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian Eckert
9b24763b9f keepalived: add upgrade script for globals section
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Rosen Penev
fd7e741474
Merge pull request #12039 from lucize/frrref
frr: makefile cleanup and misc fixes
2020-05-03 15:34:08 -07:00
Rosen Penev
d654eedc8f
Merge pull request #12069 from stangri/master-vpn-policy-routing
vpn-policy-routing: bugfix: remove non-ASCII from log; update README
2020-05-03 14:32:49 -07:00
Hannu Nyman
ba3d8d5794
Merge pull request #12056 from stangri/master-vpnbypass
vpnbypass: bugfix: remove non-ASCII from system log; update README
2020-05-03 22:52:24 +03:00
Stan Grishin
64fe1db6ca vpn-policy-routing: bugfix: remove non-ASCII from log; update README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-03 19:45:29 +00:00
W. van den Akker
a92b98d926
Shorewall6: Bump to 5.2.4.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-03 19:02:25 +02:00
W. van den Akker
48544d330f
Shorewall: Bump to 5.2.4.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-03 19:01:21 +02:00
W. van den Akker
f1ca939459
Shorewall6-lite: Bump to 5.2.4.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-03 19:00:15 +02:00
W. van den Akker
cc72bef515
Shorewall-lite: Bump to 5.2.4.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-03 18:58:31 +02:00
W. van den Akker
211bb322d3
Shorewall-core: Bump to 5.2.4.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-03 18:57:13 +02:00
Lucian Cristian
7d2c647f2d frr: makefile cleanup and misc fixes
fix mips runtime by backporting some yang changes from master
added commited fixes to 7.3
also add option for snmp support

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-03 03:06:20 +03:00
Stan Grishin
4bfd3435bb vpnbypass: bugfix: remove non-ASCII from system log; update README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-02 22:35:32 +00:00
Jeroen Peelaerts
e297ffbe34 ddns-scripts: Add digitalocean as DDNS provider
Signed-off-by: Jeroen Peelaerts <jeroen.peelaerts@gmail.com>
2020-05-03 00:15:13 +02:00
Jan Pavlinec
c8be44062e bind: update to version (security fix)
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-01 11:56:56 -07:00
Nikos Mavrogiannopoulos
997723342b ocserv: updated to 1.0.1
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-05-01 19:18:37 +02:00
Nikos Mavrogiannopoulos
d58c3d48a5 openconnect: updated to 8.09
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-05-01 19:18:37 +02:00
Nikos Mavrogiannopoulos
5782406697
Merge pull request #11798 from GuLinux/patch-1
openconnect: Allow to set `usergroup` option
2020-05-01 13:39:03 +02:00
Ian Cooper
3b58e317f6
snort: bump to 2.9.15.1
Fix compilation error with x86_64 glibc

Fix changed download location on snort.org

Signed-off-by: Ian Cooper <iancooper@hotmail.com>
2020-04-30 18:51:19 +01:00
Rosen Penev
07998f702e
Merge pull request #12021 from eglooca/master
netifyd: Updated to v3.00
2020-04-30 10:27:27 -07:00
Antti Seppälä
cf6027f0b0 uacme: add support for user-provided setup and cleanup scripts
Add possibility for user to provide setup and cleanup scripts for
additional flexibility. Setup-script takes precedence over the built-in
behavior of uacme.

This helps users with more complex use-cases to utilize uacme to update
certificates without adding complexity to the provided run.sh script.

Signed-off-by: Antti Seppälä <a.seppala@gmail.com>
2020-04-30 19:17:54 +03:00
Antti Seppälä
debe65dffe acme: add support for user-provided setup and cleanup scripts
Add possibility for user to provide setup and cleanup scripts for
additional flexibility. Setup-script takes precedence over the built-in
behavior of acme.

This helps users with more complex use-cases to utilize acme to update
certificates without adding complexity to the provided run.sh script.

Signed-off-by: Antti Seppälä <a.seppala@gmail.com>
2020-04-30 19:17:54 +03:00
Darryl Sokoloski
eb3b21ba77 netifyd: Updated to v3.00
Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
2020-04-30 11:14:46 -04:00
Brian J. Murrell
b017fe34dd mwan3: Update Makefile
Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2020-04-30 14:55:20 +02:00
Brian J. Murrell
49cf5eac5c mwan3: Don't use /128 address for ping source
An interface can have both a /64 and a /128 from a provider.

In such a case, use the address from the /64 to do the ping check, not
the /128.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2020-04-30 14:55:20 +02:00
Rosen Penev
b375cd26db
Merge pull request #11998 from jefferyto/uwsgi-pypi
uwsgi: Use pypi.mk to download source tarball
2020-04-29 15:59:38 -07:00
Marco Gulino
6464166660 openconnect: Allow to set usergroup option in OpenConnect
Just adding the extra option `-g|--usergroup <group>` (required by the VPN server I'm currently using)

Signed-off-by: Marco Gulino <marco@gulinux.net>
2020-04-29 22:37:11 +01:00
Luiz Angelo Daros de Luca
ca123aed63 switchdev-poller: netifd now keep dev down
Since 19.07, netifd will not try to bring a device up
after someone brought it down. This way, there is no need
to rename the device.

It also fixes a rename error on 19.07 when the *_down device
was being in use (by netifd?).

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-04-29 17:52:20 -03:00
Rosen Penev
36095e4e4c
Merge pull request #11997 from jefferyto/scapy-python-package
scapy: Use Python packaging, PyPI download
2020-04-29 13:43:24 -07:00
Rosen Penev
5de150758b
Merge pull request #12001 from jefferyto/radicale2-cleanup
radicale2: Clean up Makefile
2020-04-29 12:19:33 -07:00
Dirk Brenken
1aa4518dfc
travelmate: fix captive portal detection
* made captive portal detection more bullet proof, fixes #11990

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-04-29 14:48:36 +02:00
Jeffery To
bd48589e21 radicale2: Clean up Makefile
* Remove preinst, the default prerm script will stop the service
* Use default Python package filespec and shebang fix

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-29 17:48:46 +08:00
Toke Høiland-Jørgensen
62ef2a8839
Merge pull request #11968 from yangfl/master
acme: fix some errors
2020-04-29 11:24:32 +02:00
Rosen Penev
2f7ce61037
Merge pull request #11989 from cherrot/ddns-cloudflare-v4
ddns-scripts: cloudflare.com-v4: Fix grep pattern
2020-04-29 02:08:50 -07:00
Jeffery To
f304e57b35 uwsgi: Use pypi.mk to download source tarball
This also removes PKG_BUILD_DIR, which does not need to be explicitly
set.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-29 16:49:42 +08:00
Jeffery To
32f727f0ee scapy: Use Python packaging, PyPI download
This updates the package to use the default Python package build recipe,
adds a src package, and changes to download from PyPI (using pypi.mk).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-29 16:25:20 +08:00
Zheng Luo
88b03577c4 ddns-scripts: cloudflare.com-v4: Fix grep patterns.
Related commit: 0080bb4b

Use `\s*` instead of ` \?` to match 0 or multiple spaces.

Signed-off-by: Zheng Luo <cherrotluo@gmail.com>
2020-04-29 16:22:59 +08:00
Rosen Penev
361b266eb3
Merge pull request #11982 from Robby-/master-freeradius3_update_3_0_21
freeradius3: Update to 3.0.21
2020-04-28 10:24:58 -07:00
Rosen Penev
6db17c8924
Merge pull request #11769 from cbz/master
dnscrypt-proxy: Changed 'Provider Key' for securedns to current value
2020-04-28 10:23:51 -07:00
Alexandru Ardelean
427aa37c3a net: seafile-server: select procps-ng
Otherwise seafile-server isn't selectable since it depends that this
package be enabled.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2020-04-28 12:18:23 +03:00
Alexandru Ardelean
13d843fec1 net: seafile-server: add libevent2 deps on PKG_BUILD_DEPENDS
And libevent2-pthreads to DEPENDS.

While building with -j12 I seem to get:
[ sometimes this also includes libevent2-openssl ]

```
-- EVHTP_VERSION            :  1.2.18
-- EVHTP_DISABLE_SSL        :  OFF
-- EVHTP_DISABLE_EVTHR      :  OFF
-- EVHTP_DISABLE_REGEX      :  OFF
-- EVHTP_BUILD_SHARED       :
-- EVHTP_USE_JEMALLOC       :
-- EVHTP_USE_TCMALLOC       :

-- CMAKE_BUILD_TYPE         : Release
-- CMAKE_INSTALL_PREFIX     : /usr
-- CMAKE_BINARY_DIR         : /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18
-- CMAKE_CURRENT_BINARY_DIR : /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18
-- CMAKE_CURRENT_SOURCE_DIR : /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18
-- PROJECT_BINARY_DIR       : /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18
-- PROJECT_SOURCE_DIR       : /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18
-- CMAKE_MODULE_PATH        : /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/cmake
-- CMAKE_SYSTEM_NAME        : Linux
-- CMAKE_SYSTEM_VERSION     : 1
-- CMAKE_C_COMPILER         : /home/sandu/work/openwrt/openwrt/staging_dir/toolchain-i386_pentium4_gcc-8.4.0_musl/bin/i486-openwrt-linux-musl-gcc
-- CMAKE_AR                 : /home/sandu/work/openwrt/openwrt/staging_dir/toolchain-i386_pentium4_gcc-8.4.0_musl/bin/i486-openwrt-linux-musl-gcc-ar
-- CMAKE_RANLIB             : /home/sandu/work/openwrt/openwrt/staging_dir/toolchain-i386_pentium4_gcc-8.4.0_musl/bin/i486-openwrt-linux-musl-gcc-ranlib
-- CFLAGS                   :   -Os -pipe -march=pentium4 -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -ffile-prefix-map=/home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18=libevhtp-1.2.18 -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro
                              -DNDEBUG

-- Configuring done
CMake Error: The following variables are used in this project, but they are set to NOTFOUND.
Please set them or make sure they are set and tested correctly in the CMake files:
LIBEVENT_THREAD
    linked by target "evhtp" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18
    linked by target "test_proxy" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "example_basic" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "test_client" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "example_https_client" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "test_vhost" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "test_basic" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "test_extensive" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "example_chunked" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "test_query" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "test_perf" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "example_pause" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "example_https_server" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "example_vhost" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples
    linked by target "example_request_fini" in directory /home/sandu/work/openwrt/openwrt/build_dir/target-i386_pentium4_musl/libevhtp-1.2.18/examples

-- Generating done
CMake Warning:
  Manually-specified variables were not used by the project:

    CMAKE_ASM_COMPILER
    CMAKE_ASM_COMPILER_ARG1
    CMAKE_MODULE_LINKER_FLAGS
    CMAKE_SHARED_LINKER_FLAGS
    DL_LIBRARY

CMake Generate step failed.  Build files cannot be regenerated correctly.
```

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2020-04-28 12:16:38 +03:00
Robby K
cf1921ded5 freeradius3: Update to 3.0.21
Latest stable release.

Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 09:58:10 +02:00
Robby K
71bea36878 freeradius3: Removed patches/004-fix-target-python-header-detection.patch as it is no longer needed for the freeradius3-mod-python3 package to compile and updated the Makefile to reflect this due to the following change/commit in freeradius:
307678b268

This is in preparation for the 3.0.21 update.

Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 09:54:24 +02:00
Robby K
9b322cb8c4 freeradius3: Refreshed patches/002-disable-session-cache-CVE-2017-9148.patch in preparation for the 3.0.21 update.
Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 09:23:21 +02:00
Robby K
6aa91d2210 freeradius3: Fix the ordering in the Makefile.
Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 09:22:40 +02:00