Franco Fichtner
0fdf8efeb7
pkg: fix plist
2018-06-27 11:38:12 +02:00
Franco Fichtner
25b3feab64
pkg: add new fingerprints for repos
2018-06-27 08:08:44 +02:00
Ad Schellevis
697705a8b1
Firewall/Alias, cleanup and minor improvements https://github.com/opnsense/core/issues/1858
2018-06-26 18:26:14 +02:00
Ad Schellevis
19bbaeaa29
Firewall/Alias, phalcon's Callback() validator sends all received data and expects the callback to filter them, which forces us to include the fieldname in the validator to prevent feeding the wrong results. for https://github.com/opnsense/core/issues/1858
2018-06-26 18:03:11 +02:00
Ad Schellevis
51bd00cf82
Firewall/Alias, work in progress UI parts, for https://github.com/opnsense/core/issues/1858
2018-06-26 17:32:46 +02:00
Ad Schellevis
9350297f18
Firewall/Alias, add list countries action, for https://github.com/opnsense/core/issues/1858
2018-06-26 17:30:11 +02:00
Ad Schellevis
9ad0cbc19c
configd/templates, idna encode fails when starting with [.], this may not be a complete fix, but seems to resolv the most likely issues. closes https://github.com/opnsense/core/pull/2484
2018-06-26 16:59:58 +02:00
Franco Fichtner
c425bcd601
rc: whitespace issue in previous
2018-06-26 09:57:24 +02:00
Franco Fichtner
eb95e8f53e
rc: allow config import from plain MSDOS drives; closes #1372
...
For now we only import on demand, but we could make this more automatic
in the near future as this proves to be useful.
2018-06-26 09:52:52 +02:00
Franco Fichtner
caabf014aa
interfaces: ipv6 is in the next condition #2458
2018-06-25 16:10:02 +00:00
Franco Fichtner
4a825adc50
interfaces: ok, again #2458
2018-06-25 16:03:50 +00:00
Franco Fichtner
fdfd65c4bf
interfaces: typo #2458
2018-06-25 15:58:37 +00:00
Franco Fichtner
f15d106e51
interfaces: give first-time hint to ajax #2458
2018-06-25 15:55:39 +00:00
Franco Fichtner
0408e32f87
interfaces: add fargw knob, last bits of UX; closes #2458
2018-06-25 15:34:14 +00:00
Franco Fichtner
79b632565b
interfaces: more tweaks #2458
2018-06-25 07:27:50 +00:00
Franco Fichtner
7d439db55a
interfaces: ordering, labels #2458
2018-06-25 07:16:39 +00:00
Franco Fichtner
1982779e72
interfaces: more wording tweaks for #2458
2018-06-25 09:11:24 +02:00
Franco Fichtner
bd46d9c09a
interfaces: IPv6 static gateway for #2458
2018-06-25 09:07:07 +02:00
Franco Fichtner
8fb5059022
system: fix sentence
2018-06-25 08:37:48 +02:00
Franco Fichtner
e8bc3e6ce0
firewall: no need to schedule if scheduled rule is disabled
2018-06-25 06:27:42 +00:00
Franco Fichtner
e13de05e92
firewall: gyphicons gone; closes #2440
2018-06-25 06:24:10 +00:00
Franco Fichtner
088ad6af39
firewall: glyphicon rework #2440
2018-06-25 05:47:54 +00:00
Franco Fichtner
4d27c9b385
firewall: npt and small fix in 1to1 #2440
2018-06-23 19:42:24 +00:00
Franco Fichtner
a29c516a87
firewall: one-to-one glyphicon removal #2440
2018-06-23 19:29:54 +00:00
Ad Schellevis
9ad5d9620b
obey session_timeout parameter in mvc code, ref https://github.com/opnsense/core/issues/2177
2018-06-23 18:16:17 +02:00
Franco Fichtner
819dc79b8a
system: we cannot set session timeout to "0" anymore #2177
2018-06-23 17:36:02 +02:00
Franco Fichtner
6a6e77c3d3
system: cleanup related to #2177
2018-06-23 17:28:01 +02:00
Franco Fichtner
a386ccc2f2
interfaces: experiment with descriptions #2458
2018-06-23 16:26:44 +02:00
Franco Fichtner
313c3b148a
interfaces: keep current selection if not muti-wan #2458
2018-06-23 16:18:05 +02:00
Franco Fichtner
eb96f3c297
interfaces: start to improve #2458
2018-06-23 16:11:21 +02:00
Franco Fichtner
d346577092
unbound: read internal subnets from ifconfig; closes #2472
2018-06-23 12:24:42 +00:00
Franco Fichtner
90e5274b54
interfaces: small style update
2018-06-23 12:24:07 +00:00
Franco Fichtner
e3658979f5
unbound: small tweak in previous
2018-06-23 12:57:04 +02:00
DJFelix
5c6adbcdb8
Unbound - extend access-control feature ( #2474 )
...
add support for "deny_non_local" and "refuse_non_local" ACLs
see: 2c84c28a22
2018-06-23 12:55:58 +02:00
Franco Fichtner
299144a0be
unbound: style in ACL page
2018-06-23 12:54:22 +02:00
Franco Fichtner
66b6bd3d28
unbound: kill ancient and unused code
2018-06-23 12:48:02 +02:00
Franco Fichtner
3b7c0bca06
interfaces: move radvd restart from IPv4 to IPv6 change #2394
2018-06-22 08:37:41 +02:00
Franco Fichtner
f518f709af
pkg: migrate from origin.conf to OPNsense.conf
...
Using the project name in the file makes work flow less confusing,
especially since we have a FreeBSD.conf right next to it.
PR: https://github.com/opnsense/update/issues/35
2018-06-21 15:36:05 +02:00
Franco Fichtner
faaafb136c
rc: suppress message of service not enabled
2018-06-20 15:48:26 +02:00
Franco Fichtner
4e75cfdf51
widget: fix another typo reported via translation project
2018-06-20 12:54:38 +02:00
Franco Fichtner
ef7b6375b8
firewall: fix a typo via translation project
2018-06-20 12:50:41 +02:00
Franco Fichtner
d59775fabc
firewall: fix typo in shaper reported via translation project
2018-06-20 12:48:23 +02:00
Franco Fichtner
b0d739a60f
openvpn: tabs vs. spaces
2018-06-19 08:12:59 +02:00
Justin Coffman
246bd932c6
Further KU/EKU fixes. ( #2465 )
...
The matching KUs for EKU "TLS Web Server Authentication" are Digital Signature AND
(Key Encipherment OR Key Agreement). Added for compatibility with externally-generated
certificates.
2018-06-19 08:08:03 +02:00
Franco Fichtner
18422bd9fc
system: tweak previous
2018-06-19 06:06:01 +00:00
Franco Fichtner
79bf33a1ca
system: better dhparam support including RFC 7919
2018-06-19 07:51:29 +02:00
Justin Coffman
1f8fc1295b
Added 3072-bit RSA key length options. ( #2466 )
...
This conforms to current recommendations and best practices for a
128-bit security margin.
2048 is still the minimum recommended, but 2048-bit RSA only aligns to a
112-bit security margin, roughly analogous to 3DES. AES-128, the
minimum recommended cipher, requires a 3072-bit RSA key and a 256-bit digest
(SHA256) to provide an equivalent security level in all cryptographic
components.
2018-06-19 07:04:04 +02:00
Franco Fichtner
ccee4c9927
system: provide default for user language
...
Sometimes users are confused why their user's language does not
change when edited under System: Settings: General. Even during
password change a language is forced so we can avoid it by giving
an empty default which will keep the language tied to the system.
2018-06-18 09:59:46 +02:00
Franco Fichtner
6c6b3e107e
webgui: load mod_setenv for new config parameter
2018-06-18 07:34:04 +02:00
Franco Fichtner
2a1da92b54
system: small tweaks, this state is ok
2018-06-17 21:40:25 +02:00