7338 Commits

Author SHA1 Message Date
Ad Schellevis
218b37df45 login, cookies. set secure; HttpOnly on test_cookie as well to avoid false positives on pci scan 2017-07-16 11:55:47 +02:00
Ad Schellevis
d2ab500ac6 webgui, remove cipher TLS_RSA_WITH_3DES_EDE_CBC_SHA (SWEET32) 2017-07-16 11:32:18 +02:00
Ad Schellevis
46c460bb3f cleanup, move link_interface_to_vlans to interfaces_assign.php and remove unused code 2017-07-14 22:10:48 +02:00
Ad Schellevis
5525a08adb interfaces.inc, fix mtu setup for vlans, for https://github.com/opnsense/core/issues/1709 2017-07-14 22:05:07 +02:00
Ad Schellevis
8236ddcc5f interfaces.php, rework last 2017-07-14 21:17:10 +02:00
Ad Schellevis
576799a181 interfaces.php, vlan mtu, check with actual parent 2017-07-14 18:54:40 +02:00
Ad Schellevis
4ff07cad63 lagg interfaces, restructure interface_lagg_configure() and add mtu option, for https://github.com/opnsense/core/issues/1709 2017-07-14 16:38:12 +02:00
Ad Schellevis
e5e914c90f add mtu to legacy_interfaces_details() 2017-07-14 16:17:09 +02:00
Ad Schellevis
cebc6c7e11 legacy_interfaces_details() parse issue on fetching laggports, needed for https://github.com/opnsense/core/issues/1709 2017-07-14 15:03:08 +02:00
Ad Schellevis
093895e37e Networking, side affects. when an "other type" interface is configured it's automatically created, but if the interface got unconfigured it's dropped,leading to broken laggs for example.
We should trust the "other type" create/drop to handle the interface itself and interface_bring_down() should only unconfigure it, so possible parent/child interfaces won't break for no reason.
Fixes part of https://github.com/opnsense/core/issues/1709
2017-07-14 09:42:54 +02:00
Franco Fichtner
9cf6655b46 wizard: do not force change of root password
We are forcing a change through the installer, which is where
the majority starts from.  We don't want to enforce a change
twice.

We can't really see if we installed or went through a factory
reset, so this is (was) the best of both worlds in conjunction
with the new installer feature.

While here, annotate that it is possible to leave it "empty".

This reverts commit 5eb2c986ca7233f0f94f372968433b145b4b3249.
2017-07-14 06:49:13 +02:00
Franco Fichtner
04f9fd6425 rc: another minor tweak for compat 2017-07-13 20:06:01 +02:00
Franco Fichtner
749ef5cdc4 rc: mock '-h 0' behaviour of pw usermod for easier installer access 2017-07-13 20:00:41 +02:00
Franco Fichtner
76eb058d32 allow to run this with args to change the password 2017-07-13 19:28:15 +02:00
Franco Fichtner
5cb149d7fc interfaces: silly-willy-wlan-fix 2017-07-13 12:49:35 +02:00
Franco Fichtner
865b27310a Auth: small tweak for previous makes it easier to read 2017-07-13 08:11:41 +02:00
Franco Fichtner
20ec899ae5 Auth: allow to reverse password / token order in TOTP
PR: https://forum.opnsense.org/index.php?topic=5466.0
2017-07-12 20:56:14 +02:00
Franco Fichtner
738f998375 ipsec: ikev2 can handle multiple phase 1 with the same IP
PR: https://github.com/opnsense/core/issues/1714
2017-07-12 16:25:19 +02:00
Franco Fichtner
a42e3b68a6 firmware: rather don't use -f, useful for testing but that's done 2017-07-12 08:04:41 +02:00
Franco Fichtner
93072dd807 firmware: cron-parameter ALLOW_RISKY_MAJOR_UPGRADE for auto-update; closes #1376 2017-07-11 16:38:44 +02:00
Franco Fichtner
77401d6add system: add optional swap file for SSD; closes #1554 2017-07-11 15:31:37 +02:00
Franco Fichtner
286bbf6511 rc: switch crash dump back to default 2017-07-11 07:24:28 +02:00
Franco Fichtner
951ea35c3a firmware: always perform all upgrades from here
opnsense-update can still be used to selectively upgrade, but
here we shouldn't take any chances.  Worst case the system will
reboot prompting "nothing to do", which isn't true because we
only know about the base and kernel, not the packages state.
2017-07-11 07:04:47 +02:00
Ad Schellevis
cbc2292f49 vlans, style glitch 2017-07-10 15:40:24 +02:00
Franco Fichtner
fa04749813 filter: different approach, fix gateways generation to include local routes 2017-07-10 10:58:24 +02:00
Franco Fichtner
f20f0c91fa filter: Null4 and Null6 are special keywords, patch route-to for now 2017-07-10 10:43:27 +02:00
Franco Fichtner
ebdc35c550 firmware: tweak working 2017-07-10 09:11:46 +02:00
Franco Fichtner
29899040f0 firmware: now we can pull the major upgrade changelog :) 2017-07-10 09:09:07 +02:00
Franco Fichtner
d80cb40a7a firmware: make this clearer 2017-07-10 09:03:47 +02:00
Franco Fichtner
c985c5d5f4 firmware: remove spinner on failure 2017-07-10 09:00:39 +02:00
Franco Fichtner
6a745665dc firmware: spinner for major upgrade button 2017-07-10 08:57:29 +02:00
Franco Fichtner
321c46c462 firmware: fetch changelogs -> update changelogs 2017-07-10 08:49:30 +02:00
Franco Fichtner
39710372ed firmware: fix spinner attribution 2017-07-10 08:45:44 +02:00
Franco Fichtner
f83f556a61 firmware: pass argument, why not... 2017-07-10 08:42:36 +02:00
Franco Fichtner
5daf7785e6 firmware: fetch changelogs in between, separate upgrade button 2017-07-10 08:37:43 +02:00
Franco Fichtner
5f5e438f64 firmware: pull changelog fetch out of check
We want to pull changelogs also when we look for upgrade instructions,
in order to safely show then afterwards if we can indeed upgrade from
there.
2017-07-10 08:19:06 +02:00
Franco Fichtner
ae54d39218 pkg: fix annotation that will be wrong when 2.5 comes out 2017-07-10 06:47:27 +02:00
Franco Fichtner
e9f999d0db firmware: minor tweak in button colour #1707 2017-07-09 16:06:41 +02:00
Franco Fichtner
650254c1ba firmware: tweak reboot messages; closes #1707 2017-07-09 16:00:47 +02:00
Franco Fichtner
4f88f025e7 firmware: dialog primary buttons and less trigger-happy process #1707 2017-07-09 13:31:31 +02:00
Franco Fichtner
b73c0e7db6 firmware: major upgrade button for #1707 2017-07-09 12:59:52 +02:00
Franco Fichtner
5198b7d47b firmware: show EoL notice as a modal #1707 2017-07-09 12:35:51 +02:00
Franco Fichtner
3d28e83421 firmware: point major upgrade to upcoming 17.7.r1 2017-07-09 12:16:01 +02:00
Franco Fichtner
386ea4f4ee firmware: fix previous 2017-07-09 12:12:44 +02:00
Franco Fichtner
7e7af55d02 firmware: add GUI backend update glue
This performs the full update, now we need to figure out how
this will look from the frontend side...
2017-07-09 12:09:30 +02:00
Franco Fichtner
1b970b3752 rc: batch-run bootup command before starting services; closes #1699 2017-07-09 11:50:27 +02:00
Franco Fichtner
d4b0b2af88 rc: rebuild the command line backup restore
This is a shell script to make recovery as recoverable as
possible, now with a clear license and the ability to apply
inline or reboot for a clean configuration cycle.
2017-07-09 10:51:55 +02:00
Franco Fichtner
9d392294ab unbound: remove recently recovered optimization, because...
error: setsockopt(..., SO_RCVBUF, ...) failed: No buffer space available
2017-07-07 10:35:06 +02:00
Franco Fichtner
92d1886cde layout: update to Font-Awesome 4.7 2017-07-06 13:03:06 +02:00
Ad Schellevis
511cdd471e filter, cleanup, closes https://github.com/opnsense/core/issues/1681 2017-07-04 20:31:24 +02:00