12322 Commits

Author SHA1 Message Date
Franco Fichtner
1b0ebb2c8b make: more git magic 2021-01-11 08:57:31 +01:00
Manuel Faux
6000c02a4f
Firewall ACLs: Add readonly actions to "Aliases" permission (#4588) 2021-01-10 20:11:46 +01:00
Franco Fichtner
986a49c2f0 LICENSE: sync 2021-01-10 19:40:45 +01:00
Franco Fichtner
7e7c9901eb system: should be the case via 993c9e545fb5 2021-01-10 19:33:46 +01:00
Lucas Held
b138ca38a7
pftop: fix all state value (#4584) 2021-01-10 19:02:39 +01:00
Franco Fichtner
3bb2b4eb14 firmware: print core package name, database checkup first or return 2021-01-09 21:29:17 +01:00
Ad Schellevis
7c50093c12 UI: move sidebar stage from session to local storage to persist between tabs, closes https://github.com/opnsense/core/issues/4580 2021-01-08 19:14:05 +01:00
Franco Fichtner
93e5105f9e src: style sweep 2021-01-08 19:44:45 +01:00
Franco Fichtner
5047bea79f pkg: fix plist 2021-01-08 19:39:57 +01:00
Ad Schellevis
993c9e545f WebGui-Auth: move authentication to unified service implementation. closes https://github.com/opnsense/core/issues/4505
eventually we might want to consider using pam, but at the moment this won't offer much more and would involve additional complexity when it comes to password expiry.
2021-01-08 18:46:30 +01:00
Ad Schellevis
42e36973f7 diag_authentication.php : stylesweep 2021-01-08 18:43:46 +01:00
Ad Schellevis
a57abe792f legacy: ditch is_validaliasname() for good. closes https://github.com/opnsense/core/issues/4470 2021-01-08 17:33:00 +01:00
Ad Schellevis
a539124fe9 firewall: live log - add "host" and "port" filters. closes https://github.com/opnsense/core/issues/4365 2021-01-08 17:22:26 +01:00
Ad Schellevis
2c3c8e7a02 firewall: live log - sort interfaces in log_filters endpoint. closes https://github.com/opnsense/core/pull/4402 2021-01-08 16:24:19 +01:00
Ad Schellevis
bbeb2e71fa firewall: live log - remove dup dst (from https://github.com/opnsense/core/pull/4402) 2021-01-08 16:17:39 +01:00
Ad Schellevis
58abe70aed firewall: live log - pull in "!" filters from https://github.com/opnsense/core/pull/4402 2021-01-08 16:16:11 +01:00
Ad Schellevis
8f929489e4 UI: tooltip service widgets, closes https://github.com/opnsense/core/issues/4188 2021-01-08 16:00:24 +01:00
Franco Fichtner
952637011e console: makes more sense #4572 2021-01-08 09:54:47 +01:00
Franco Fichtner
fb49c70e10 console: more questions, more recovery #4572
I see no easy way to untangle this for now.  At least make sure
the user is asked for the defaults to be restored making this
a little better than before.
2021-01-08 09:50:34 +01:00
Franco Fichtner
6cdf5bb48d openssh: honour MAX_LISTEN_SOCKS; closes #4403 2021-01-08 09:32:24 +01:00
Franco Fichtner
ccb32474bf pkg: fix plist 2021-01-08 09:20:26 +01:00
Franco Fichtner
a70c6a2374 make: on a fresh clone ensure the stable branch exists 2021-01-08 08:50:22 +01:00
Ad Schellevis
41eefdd105 IDPS: revert content part of 09f74fe1ce7b4805c1bb8354e5d0c5b98955497b until ETPro telemetry ships new content. 2021-01-07 20:32:21 +01:00
Ad Schellevis
2bed9fa877 firewall_rules.php: cleanup 2021-01-07 09:10:37 +01:00
Franco Fichtner
646628e593 dhcp: style sweep 2021-01-06 19:30:12 +01:00
Ad Schellevis
b185418cd7 filter / automatic IPv6 rules, add RFC4890 as suggested by @shonjir for https://github.com/opnsense/core/issues/4565 2021-01-06 18:21:47 +01:00
Ad Schellevis
f0b79d0b53 filter: category selector missing caption 2021-01-06 16:41:47 +01:00
Martin Wasley
61ea8d7993
Correct DHCPv6 Custom Options Unsigned Integer field (#4573)
Custom Options is incorrectly inserting quotes around the integer value.
2021-01-06 11:22:45 +01:00
Franco Fichtner
92c019b913 firmware: pretty sure parsing REMOVED was working in pkg 1.12 2021-01-05 17:02:31 +01:00
Franco Fichtner
ecec55ca0c captive portal: no longer needed 2021-01-05 15:52:02 +01:00
Franco Fichtner
8c91019880 system: ok, extra mile on previous 2021-01-05 15:45:59 +01:00
Franco Fichtner
f8844af85d system: unify code to extract issuer/subject
The code was adding an extra ", " at the end.
2021-01-05 15:31:33 +01:00
Franco Fichtner
444b8f405e system: TLS compatibility in custom cipher option for now 2021-01-05 15:01:12 +01:00
Ad Schellevis
d9891b1ff9 filter/aliases: minor regression in maintaining target alias file (/var/db/aliastables/%s.txt). when it's either changed, expired or simply not there, it should dump the contents before loading it with pfctl 2021-01-05 14:52:44 +01:00
Franco Fichtner
f29c0b9728 system: pick up recommendations from #4533
Since the new default is TLS 1.2 only use the upstream recommended
list and fall back to TLS 1.1 and above for less secure ciphers if
the user specificed them manually.

We could support TLS 1.3 now but that seems to be an exclusive option
without a fallback.
2021-01-05 13:46:30 +01:00
Franco Fichtner
a90ecbab5f system: generate a better self-signed certificate 2021-01-05 13:29:56 +01:00
Franco Fichtner
071722a082 github: more issue template foo 2021-01-05 09:43:53 +01:00
Franco Fichtner
77ed9823d7 github: improve bug report template a bit more 2021-01-05 09:31:45 +01:00
Franco Fichtner
cf609e2e6a src: small style update 2021-01-05 09:12:02 +01:00
Franco Fichtner
622a3038ce license: sync 2021-01-05 08:58:56 +01:00
Franco Fichtner
9e2f42abb8 src: style sweep 2021-01-05 08:38:10 +01:00
Franco Fichtner
683f452295 firmware: add fingerprint for 21.1 2021-01-04 14:49:16 +01:00
Franco Fichtner
7216e3a241 system: allow self-signed renew for web GUI; closes #4567
The command to issue a reset is:

  # configctl webgui restart renew
2021-01-04 11:28:30 +01:00
Franco Fichtner
e609494b59 system: adjust lifetime to new recommendation 2021-01-04 11:03:33 +01:00
Franco Fichtner
f187c63502 openvpn: adjust lifetime to new recommendation 2021-01-04 11:03:09 +01:00
Franco Fichtner
c008e97375 github: adjust templates used 2021-01-04 10:19:23 +01:00
Franco Fichtner
4e0fdb516a firewall: add type 128 to outgoing IPv6 essentials #4565 2021-01-03 21:39:52 +01:00
Franco Fichtner
7fda1670ce interfaces: l2tp/pptp cleanup; closes #2707
The interfaces are created by mpd5 daemon during configuration.
We do not seem to have more than one issue here: IPv6 disable
is too soon but that is easily fixed.  Device creation moves
on ok and there is no apparent error in functionality with or
without it.

While here fix the link when a $pppid is set and properly protect
the redirect url.  Previously empty() was too strict and it ignored
$pppid of zero.

Also remove spurious "IP Address" help text from PPP device
configuration.
2021-01-03 20:45:58 +01:00
Franco Fichtner
6b407b51dd openvpn: fix typo in wizard redirect 2021-01-03 20:42:35 +01:00
Ad Schellevis
f3e6a227e5 filter: refactor filter_rules_legacy while fixing antispoof issues on bridge interfaces. closes https://github.com/opnsense/core/issues/4564 2021-01-03 14:18:13 +01:00