15542 Commits

Author SHA1 Message Date
Ad Schellevis
049fca58fe VPN: OpenVPN: Instances - fix race condition when using CRL's in new OpenVPN instances, on configure, pass event to pluginctl to flush the requested crl's. closes https://github.com/opnsense/core/issues/6710 2023-08-04 16:58:25 +02:00
Ad Schellevis
73282df56d VPN: OpenVPN: Client Specific Overrides - nothing to "apply" here, settings change on login. remove alert-info panel on change 2023-08-04 16:12:32 +02:00
Ad Schellevis
01ba18970a VPN: OpenVPN: Client Export - push auth "digest" into export config, for https://github.com/opnsense/core/issues/6708 2023-08-04 15:21:05 +02:00
jeremiah-rs
993585c564 Update opnsense.xml
Updated LeaseWeb and NYC BUG mirrors to use HTTPS
2023-08-04 08:43:08 +02:00
Franco Fichtner
7333f37ed0 firewall: don't need this failsafe for one caller 2023-08-03 16:32:21 +02:00
Franco Fichtner
8a216d6a77 dhcp: fix validation for static entry requirement; closes #6252
IPs and host names can be duplicated just fine.
2023-08-03 11:25:27 +02:00
Franco Fichtner
ae2b9e3e5e interfaces: only include interfaces.inc
It's debatable but in general *.lib.inc is side-effect-free code
for the library at hand and not to be grabbed by outside scripts
directly.  The library will include the needed file anyway.
2023-08-02 15:26:33 +02:00
Franco Fichtner
d610ab7811 unbound: properly translate selectpicker title 2023-08-02 09:50:38 +02:00
Franco Fichtner
f5efffcf94 unbound: migration of empty nodes failed
PR: https://forum.opnsense.org/index.php?topic=35134.0
2023-08-02 09:49:38 +02:00
Franco Fichtner
84c7e49944 firewall: while here also fix most obvious warnings in edit page 2023-08-02 08:11:39 +02:00
Franco Fichtner
6256ea2e50 firewall: fix a couple of warnings on the rules page 2023-08-02 08:01:38 +02:00
Franco Fichtner
da64b4f944 openvpn: fix static key delete
PR: https://forum.opnsense.org/index.php?topic=35155.0
2023-08-02 07:06:57 +02:00
Ad Schellevis
bcabc30581 Firewall: Groups - hide row command buttons for internal groups, closes https://github.com/opnsense/core/issues/6691 2023-08-01 17:01:26 +02:00
Franco Fichtner
ad76fb312b firmware: revoke 23.1 fingerprint 2023-08-01 14:53:57 +02:00
Ad Schellevis
68ae7bd48f MVC/BaseListField - empty item selection issue, probably php 8.2 2023-08-01 14:48:12 +02:00
Franco Fichtner
f3ffcccf47 firewall: rename variable that is weird 2023-08-01 12:38:49 +02:00
Franco Fichtner
0e1aa4bcca firewall: two more group issues 2023-08-01 12:24:55 +02:00
Stephan de Wit
e27d37a23c dhcpv4: check if manufacturer exists 2023-08-01 12:09:50 +02:00
Stephan de Wit
4ec97df4c4 dhcpv6: revert previous, use base16 instead 2023-08-01 11:50:59 +02:00
Stephan de Wit
23318015b2 dhcpv6: iaid_duid might be in hex format 2023-08-01 11:03:28 +02:00
Franco Fichtner
b52bf63e9e firewall: groups were not correctly parsed for menu post-migration 2023-08-01 08:03:36 +02:00
Franco Fichtner
b5992b83ea unbound: actually report what breaks this 2023-08-01 07:42:00 +02:00
Ad Schellevis
c61ef7a287 Services: Unbound DNS - validate service is offering a properly typed "dns_ports" list. closes https://github.com/opnsense/core/issues/6690 2023-07-31 16:25:59 +02:00
Franco Fichtner
40d1569877 pkg: default to 23.7 now 2023-07-31 12:25:18 +02:00
Franco Fichtner
e6101f04b5 pkg: make a note about nickname changes 2023-07-28 14:03:51 +02:00
Franco Fichtner
c539c60146 firmware: fix typo 2023-07-28 10:17:48 +02:00
Franco Fichtner
73b2557049 firmware: fix typo in previous 2023-07-27 18:48:57 +02:00
Franco Fichtner
f35db24e61 firmware: fetch bogons/changelogs from amd64 ABI; closes #6688 2023-07-27 16:15:30 +02:00
Stephan de Wit
a18406fade dhcp: interface description might not exist 2023-07-27 10:49:05 +02:00
Franco Fichtner
b1d85fd398 system: give more context since we operate pid numbers only
PR: https://forum.opnsense.org/index.php?topic=35046.0
2023-07-27 09:57:40 +02:00
Stephan de Wit
2eca088bd5 dhcp4/6: cleanup LeasesControllers
a typecast was missing in the DHCPv6 LeasesController, interfaces were also not properly listed here due to variable renaming. While here, also clean up the DHCPv4 controller to be more symmetrical.
2023-07-27 09:37:23 +02:00
Franco Fichtner
4fc8865b8f pkg: shorten previous
I doubt we have much difference between supported architectures.
2023-07-26 17:43:25 +02:00
Christopher SHEN
7e8179f827 Makefile: add packages to CORE_DEPENDS_aarch64
The four packages including py${CORE_PYTHON}-duckdb,  py${CORE_PYTHON}-numpy, py${CORE_PYTHON}-pandas, and suricata-devel, can be built on aarch64.
2023-07-26 17:38:51 +02:00
Franco Fichtner
1130442142 firewall: move lock()/unlock() to their final resting place
Simplify the code a little while at it.
2023-07-26 13:09:31 +02:00
Franco Fichtner
0284cb4d34 system: fix unlock() inheriting the lock state 2023-07-26 13:02:08 +02:00
Franco Fichtner
e9a85c33e5 system: close boot file after probing to avoid lock inheritance 2023-07-26 12:42:02 +02:00
Franco Fichtner
77f9b43234 dhcp: forgot 'inet6' selector 2023-07-26 10:06:32 +02:00
Franco Fichtner
ace962a6ff dhcp: returning a "real" device only works if an address is attached
We could remove the change to the primary function but perhaps we will
need it later.  It doesn't hurt either way.
2023-07-26 10:02:55 +02:00
Franco Fichtner
9184457ab8 interfaces: fix locking that was missing CLOEXEC #6637
So the lock was inherited by all exec'd processes and thus was
never released when the script ended or was killed.
2023-07-25 21:41:38 +02:00
Franco Fichtner
015d9b5c7c interafces: logic error in previous #6637 2023-07-25 10:57:20 +02:00
Franco Fichtner
a23b0784c3 interfaces: on forceful IPv6 reload do not lose the event handling #6637
User log reveals that this does happen on bootup.  Actual flow:

    kernel - >>>> Invoking start script 'beep'
    opnsense 6735 /usr/local/etc/rc.newwanipv6: dhcpd_radvd_configure(auto) found no suitable IPv6 address on igb1_vlan10
    dhcp6c 25775 dhcp6c_script: REQUEST on pppoe0 executing
    dhcp6c 29279 dhcp6c_script: REQUEST on pppoe0 renewal
    opnsense 30070 /usr/local/etc/rc.newwanipv6: Lost a forceful reload on WAN[wan]) due to previous lock

Since the IPv6 has reloaded the addresses are back to tentative state.
This commit may create a chain of forceful reloads, but that's nothing
that the system didn't try to attempt previously.
2023-07-25 10:13:56 +02:00
Franco Fichtner
09fc810f66 dhcp: make "found no suitable address" errors a bit more usable #6637 2023-07-25 09:47:16 +02:00
Franco Fichtner
a0013701af interfaces: allow primary address function to emit device used #6637 2023-07-25 09:44:24 +02:00
Franco Fichtner
c9bd89752b wizard: restrict to validating IPv4; closes #6681
The system wizard is IPv4 only but doesn't use the correct
function.  It's debatable if we need to restrict DNS servers
but if all of this is only IPv4 we should stick to it in a
consistsent way.
2023-07-25 09:15:36 +02:00
Franco Fichtner
e5538188a2 firmware: not there yet but start prepping 2023-07-25 08:45:49 +02:00
Franco Fichtner
cb4d15c8bf interfaces: style in header 2023-07-24 10:09:08 +02:00
Franco Fichtner
83bbfbebda interfaces: sort menu in xml file 2023-07-24 10:04:20 +02:00
Franco Fichtner
42abe2e9d4 interfaces: typo and phrasing 2023-07-24 10:00:51 +02:00
Franco Fichtner
4eaaa0e8c1 interfaces: forgot to commit this apparently 2023-07-24 09:57:07 +02:00
Franco Fichtner
592c9a84df system: fix typo 2023-07-24 09:56:46 +02:00