9028 Commits

Author SHA1 Message Date
Franco Fichtner
0fdf8efeb7 pkg: fix plist 2018-06-27 11:38:12 +02:00
Franco Fichtner
25b3feab64 pkg: add new fingerprints for repos 2018-06-27 08:08:44 +02:00
Ad Schellevis
697705a8b1 Firewall/Alias, cleanup and minor improvements https://github.com/opnsense/core/issues/1858 2018-06-26 18:26:14 +02:00
Ad Schellevis
19bbaeaa29 Firewall/Alias, phalcon's Callback() validator sends all received data and expects the callback to filter them, which forces us to include the fieldname in the validator to prevent feeding the wrong results. for https://github.com/opnsense/core/issues/1858 2018-06-26 18:03:11 +02:00
Ad Schellevis
51bd00cf82 Firewall/Alias, work in progress UI parts, for https://github.com/opnsense/core/issues/1858 2018-06-26 17:32:46 +02:00
Ad Schellevis
9350297f18 Firewall/Alias, add list countries action, for https://github.com/opnsense/core/issues/1858 2018-06-26 17:30:11 +02:00
Ad Schellevis
9ad0cbc19c configd/templates, idna encode fails when starting with [.], this may not be a complete fix, but seems to resolv the most likely issues. closes https://github.com/opnsense/core/pull/2484 2018-06-26 16:59:58 +02:00
Franco Fichtner
c425bcd601 rc: whitespace issue in previous 2018-06-26 09:57:24 +02:00
Franco Fichtner
eb95e8f53e rc: allow config import from plain MSDOS drives; closes #1372
For now we only import on demand, but we could make this more automatic
in the near future as this proves to be useful.
2018-06-26 09:52:52 +02:00
Franco Fichtner
caabf014aa interfaces: ipv6 is in the next condition #2458 2018-06-25 16:10:02 +00:00
Franco Fichtner
4a825adc50 interfaces: ok, again #2458 2018-06-25 16:03:50 +00:00
Franco Fichtner
fdfd65c4bf interfaces: typo #2458 2018-06-25 15:58:37 +00:00
Franco Fichtner
f15d106e51 interfaces: give first-time hint to ajax #2458 2018-06-25 15:55:39 +00:00
Franco Fichtner
0408e32f87 interfaces: add fargw knob, last bits of UX; closes #2458 2018-06-25 15:34:14 +00:00
Franco Fichtner
79b632565b interfaces: more tweaks #2458 2018-06-25 07:27:50 +00:00
Franco Fichtner
7d439db55a interfaces: ordering, labels #2458 2018-06-25 07:16:39 +00:00
Franco Fichtner
1982779e72 interfaces: more wording tweaks for #2458 2018-06-25 09:11:24 +02:00
Franco Fichtner
bd46d9c09a interfaces: IPv6 static gateway for #2458 2018-06-25 09:07:07 +02:00
Franco Fichtner
8fb5059022 system: fix sentence 2018-06-25 08:37:48 +02:00
Franco Fichtner
e8bc3e6ce0 firewall: no need to schedule if scheduled rule is disabled 2018-06-25 06:27:42 +00:00
Franco Fichtner
e13de05e92 firewall: gyphicons gone; closes #2440 2018-06-25 06:24:10 +00:00
Franco Fichtner
088ad6af39 firewall: glyphicon rework #2440 2018-06-25 05:47:54 +00:00
Franco Fichtner
4d27c9b385 firewall: npt and small fix in 1to1 #2440 2018-06-23 19:42:24 +00:00
Franco Fichtner
a29c516a87 firewall: one-to-one glyphicon removal #2440 2018-06-23 19:29:54 +00:00
Ad Schellevis
9ad5d9620b obey session_timeout parameter in mvc code, ref https://github.com/opnsense/core/issues/2177 2018-06-23 18:16:17 +02:00
Franco Fichtner
819dc79b8a system: we cannot set session timeout to "0" anymore #2177 2018-06-23 17:36:02 +02:00
Franco Fichtner
6a6e77c3d3 system: cleanup related to #2177 2018-06-23 17:28:01 +02:00
Franco Fichtner
a386ccc2f2 interfaces: experiment with descriptions #2458 2018-06-23 16:26:44 +02:00
Franco Fichtner
313c3b148a interfaces: keep current selection if not muti-wan #2458 2018-06-23 16:18:05 +02:00
Franco Fichtner
eb96f3c297 interfaces: start to improve #2458 2018-06-23 16:11:21 +02:00
Franco Fichtner
d346577092 unbound: read internal subnets from ifconfig; closes #2472 2018-06-23 12:24:42 +00:00
Franco Fichtner
90e5274b54 interfaces: small style update 2018-06-23 12:24:07 +00:00
Franco Fichtner
e3658979f5 unbound: small tweak in previous 2018-06-23 12:57:04 +02:00
DJFelix
5c6adbcdb8 Unbound - extend access-control feature (#2474)
add support for "deny_non_local" and "refuse_non_local" ACLs

see: 2c84c28a22
2018-06-23 12:55:58 +02:00
Franco Fichtner
299144a0be unbound: style in ACL page 2018-06-23 12:54:22 +02:00
Franco Fichtner
66b6bd3d28 unbound: kill ancient and unused code 2018-06-23 12:48:02 +02:00
Franco Fichtner
3b7c0bca06 interfaces: move radvd restart from IPv4 to IPv6 change #2394 2018-06-22 08:37:41 +02:00
Franco Fichtner
f518f709af pkg: migrate from origin.conf to OPNsense.conf
Using the project name in the file makes work flow less confusing,
especially since we have a FreeBSD.conf right next to it.

PR: https://github.com/opnsense/update/issues/35
2018-06-21 15:36:05 +02:00
Franco Fichtner
faaafb136c rc: suppress message of service not enabled 2018-06-20 15:48:26 +02:00
Franco Fichtner
4e75cfdf51 widget: fix another typo reported via translation project 2018-06-20 12:54:38 +02:00
Franco Fichtner
ef7b6375b8 firewall: fix a typo via translation project 2018-06-20 12:50:41 +02:00
Franco Fichtner
d59775fabc firewall: fix typo in shaper reported via translation project 2018-06-20 12:48:23 +02:00
Franco Fichtner
b0d739a60f openvpn: tabs vs. spaces 2018-06-19 08:12:59 +02:00
Justin Coffman
246bd932c6 Further KU/EKU fixes. (#2465)
The matching KUs for EKU "TLS Web Server Authentication" are Digital Signature AND
(Key Encipherment OR Key Agreement). Added for compatibility with externally-generated
certificates.
2018-06-19 08:08:03 +02:00
Franco Fichtner
18422bd9fc system: tweak previous 2018-06-19 06:06:01 +00:00
Franco Fichtner
79bf33a1ca system: better dhparam support including RFC 7919 2018-06-19 07:51:29 +02:00
Justin Coffman
1f8fc1295b Added 3072-bit RSA key length options. (#2466)
This conforms to current recommendations and best practices for a
128-bit security margin.

2048 is still the minimum recommended, but 2048-bit RSA only aligns to a
112-bit security margin, roughly analogous to 3DES. AES-128, the
minimum recommended cipher, requires a 3072-bit RSA key and a 256-bit digest
(SHA256) to provide an equivalent security level in all cryptographic
components.
2018-06-19 07:04:04 +02:00
Franco Fichtner
ccee4c9927 system: provide default for user language
Sometimes users are confused why their user's language does not
change when edited under System: Settings: General.  Even during
password change a language is forced so we can avoid it by giving
an empty default which will keep the language tied to the system.
2018-06-18 09:59:46 +02:00
Franco Fichtner
6c6b3e107e webgui: load mod_setenv for new config parameter 2018-06-18 07:34:04 +02:00
Franco Fichtner
2a1da92b54 system: small tweaks, this state is ok 2018-06-17 21:40:25 +02:00