2507 Commits

Author SHA1 Message Date
Ad Schellevis
c314ac09e4 small cleanups for https://github.com/opnsense/core/pull/2748 2018-10-01 21:45:41 +02:00
Ad Schellevis
076ec93ce4 Merge branch 'master' of https://github.com/fprina/core into fprina-master 2018-10-01 21:28:29 +02:00
Franco Fichtner
7e2f825bf9 system: remove FreeBSD 10 password workaround 2018-09-28 18:29:40 +02:00
Franco Fichtner
996923d464 system: comment cleanups
The "mschapv2" code referenced was removed in 2b17ad9077 and
additional dead code in bd2d28c6223.

See also: https://github.com/pfsense/pfsense/commit/651d468705
2018-09-28 18:24:30 +02:00
Franco Fichtner
84f35e7088 system: start to cleanup legacy notifications #2408 2018-09-28 17:59:46 +02:00
Franco Fichtner
f8178e98d3 interfaces: 6RD IPv4 prefix is prefix only #2662 2018-09-26 15:29:43 +02:00
Franco Fichtner
737d4ba002 firewall: Traffic Shaper -> Shaper
A personal dream come true!
2018-09-23 18:52:51 +02:00
Franco Fichtner
4096b0e9e7 system: zap a few global $config references 2018-09-23 11:44:49 +02:00
Franco Fichtner
4ebb368b2c unbound: hello bitrot my old friend :P
* Base unbound is no longer installed.  Path is /usr/local/...
* remotecontrol.conf is not enough, need to use unbound.conf
* shuffle remote-control content into unbound.conf
* disable cache dump / load until its more clever

Case in point of how useless is it to have unused scripts hitching
along for the ride.
2018-09-23 10:59:05 +02:00
Franco Fichtner
993b205cb6 unbound: cache dump / load / flush 2018-09-23 10:04:09 +02:00
Franco Fichtner
da3a25b66d system: unused return 0 2018-09-22 23:44:05 +02:00
Franco Fichtner
7ec2804f59 system: listen ips no more; closes #1257 2018-09-22 22:32:23 +02:00
Franco Fichtner
f5d2ee6fea system: no more arguments for last two callers of function 2018-09-22 21:46:06 +02:00
Franco Fichtner
d93f60bf08 system: stop using get_possible_listen_ips() 2018-09-22 21:39:34 +02:00
Franco Fichtner
772ea4ace1 interfaces: tweak interfaces_addresses() slightly
* Input an array of interfaces to get addresses from,
  saving multiple calls to ifconfig in the best case.

* Return interface name, family and scope along with
  the actual address for further analysis.
2018-09-22 21:15:41 +02:00
Fabio Prina
f83e6cfc59 openvpn, option to match CSO against common_name or login 2018-09-22 19:42:48 +02:00
Franco Fichtner
93518e6ccd interfaces: new static helpers and a bit of refactoring 2018-09-19 19:10:45 +02:00
Franco Fichtner
8fcda9f8aa firmware: make firmware-upgrade the version file 2018-09-16 23:15:55 +02:00
Franco Fichtner
90296833f9 firmware: firmware-product, src/opnsense/version/opnsense, etc.
Now that we have metadata injection at build time read it instead
of its auxiliary files.  Allow live-mount to snoop the metadata and
afterwards we can start to marry the version and firmware-product
file.

Last puzzle piece will be a tool called "opnsense-version" to read
the JSON metadata and return it in a piecemeal fashion of a part
of the system requires that info, especially from the shell.
2018-09-16 20:38:15 +02:00
Franco Fichtner
490a68e8c1 unbound: remove superflous msort() function 2018-09-16 18:49:05 +02:00
Franco Fichtner
a0d9ce9c3c dnsmasq: skip link-local as well
If we can't set the scope chances are this doesn't
work properly anyway.
2018-09-16 18:08:34 +02:00
Franco Fichtner
c6706805a2 interfaces: interfaces_addresses() because...
... realif can be different for IPv6.
2018-09-16 18:04:11 +02:00
Franco Fichtner
1cf39968ad unbound: remove get_possible_listen_ips() usage #1257 2018-09-16 17:05:02 +02:00
Franco Fichtner
7b0d16ec54 src: why not get rid of get_possible_listen_ips()
Kill what we can already.  Only one plugin uses it (obsolete SNMP).
2018-09-16 15:14:04 +02:00
Franco Fichtner
18c3d97ef2 unbound: always bind to loopback
get_possible_listen_ips() should go away and Dnsmasq already
does the right thing so let Unbound follow.

While here get rid of writing empty values into the config
and even offering them on the GUI...
2018-09-16 15:14:04 +02:00
Franco Fichtner
866ff2ba92 src: allow login/error page to use cache_safe()
Now that we don't have version leakage we can extend the use
to the login page without risk (except that people know it's
at least the version that feature was introduced in).
2018-09-16 12:25:38 +02:00
Franco Fichtner
574bd308be src: remove trailing dot workaround by removing trailing dots 2018-09-16 11:44:13 +02:00
Franco Fichtner
c1c27c3f61 ipsec: reverse ordering #1852 2018-09-13 07:05:44 +00:00
Franco Fichtner
36cde519cd ipsec: multiple phase 1 dh groups #1852 2018-09-12 19:09:02 +02:00
Franco Fichtner
037a92f2ca ipsec: multiple hash algos in phase 1 #1852 2018-09-12 15:11:34 +00:00
Franco Fichtner
1418e7a8da src: more $config access avoidance 2018-09-12 09:00:00 +02:00
Franco Fichtner
21d3ff051f system: iterate over gateways without $config access
Positive side-effect is we don't have to sanity-check access
anymore.
2018-09-12 08:59:26 +02:00
Franco Fichtner
baa43590d7 src: remove get_configured_interface_with_descr()'s $withdisabled 2018-09-11 22:16:31 +02:00
Franco Fichtner
a35b40a4a7 src: remove unused $only_opt 2018-09-11 21:52:34 +02:00
Franco Fichtner
8c00114edc src: removal of get_configured_interface_list() 2/2 2018-09-11 21:30:53 +02:00
Franco Fichtner
7c853d62a9 src: get rid of get_configured_interface_list() 1/2 2018-09-11 21:14:53 +02:00
Franco Fichtner
6d5444f95b src: unused/spurious $config spots 2018-09-11 20:37:30 +02:00
Franco Fichtner
6f6f8397e7 util: this is unused 2018-09-11 19:27:16 +02:00
Franco Fichtner
66430a8a02 services: cleanup after PR 2018-09-11 14:28:28 +00:00
marjohn56
195a0f6f42 dhcpd6 PD Auto tracking additons
Does not use dhcp6c mods. uses existing functions to deterrmine the PD length.
2018-09-11 15:31:12 +02:00
Franco Fichtner
6b805ffbe3 services: cleanups
* In override mode turn radvd off until enabled, same as DHCPv6
* Guard radvd against is_radvd_enabled(), same as DHCPv6
* Avoid extra hoops of using global $config where possible
2018-09-11 14:59:19 +02:00
Franco Fichtner
5eb0dd5f11 interfaces: fix edge cases in make_ipv6_64_address()
empty("00") != empty("0") so ::1000:0 would produce a suffix of ::1000
while ::1000:00 would correctly generate ::1000:00
2018-09-11 09:58:31 +00:00
Franco Fichtner
9d4552b5e7 interfaces: fix a typo 2018-09-10 19:22:08 +02:00
Franco Fichtner
3192f8f5cc interfaces: some progress on IPv6 address for trackers #1993 2018-09-10 08:51:45 +02:00
Franco Fichtner
70e0fea6ca interfaces: revert the prefix snooping for now 2018-09-09 10:23:51 +02:00
Franco Fichtner
a241040662 interfaces: do not give all trackers the same IPv6 in 6rd / 6to4
PR: https://github.com/opnsense/core/issues/2663
2018-09-08 16:43:23 +02:00
Franco Fichtner
2cb88d030e interfaces: snoop prefix from wan for 6rd /64, slaac and dhcpv6 pd len "none"
PR: https://github.com/opnsense/core/issues/2663
2018-09-08 16:13:30 +02:00
Franco Fichtner
45a6e35c3d interfaces: radvd stuff for diagnostics 2018-09-08 15:06:58 +02:00
Franco Fichtner
d8e41511da interfaces: allow IPv4 address override in 6RD; closes #2662 2018-09-08 12:19:16 +00:00
Franco Fichtner
78662d76ba interfaces: lower MTU via tracked interface MTU; closes #2643 2018-09-08 11:24:24 +00:00