Ad Schellevis
218b37df45
login, cookies. set secure; HttpOnly on test_cookie as well to avoid false positives on pci scan
2017-07-16 11:55:47 +02:00
Ad Schellevis
d2ab500ac6
webgui, remove cipher TLS_RSA_WITH_3DES_EDE_CBC_SHA (SWEET32)
2017-07-16 11:32:18 +02:00
Ad Schellevis
46c460bb3f
cleanup, move link_interface_to_vlans to interfaces_assign.php and remove unused code
2017-07-14 22:10:48 +02:00
Ad Schellevis
5525a08adb
interfaces.inc, fix mtu setup for vlans, for https://github.com/opnsense/core/issues/1709
2017-07-14 22:05:07 +02:00
Ad Schellevis
8236ddcc5f
interfaces.php, rework last
2017-07-14 21:17:10 +02:00
Ad Schellevis
576799a181
interfaces.php, vlan mtu, check with actual parent
2017-07-14 18:54:40 +02:00
Ad Schellevis
4ff07cad63
lagg interfaces, restructure interface_lagg_configure() and add mtu option, for https://github.com/opnsense/core/issues/1709
2017-07-14 16:38:12 +02:00
Ad Schellevis
e5e914c90f
add mtu to legacy_interfaces_details()
2017-07-14 16:17:09 +02:00
Ad Schellevis
cebc6c7e11
legacy_interfaces_details() parse issue on fetching laggports, needed for https://github.com/opnsense/core/issues/1709
2017-07-14 15:03:08 +02:00
Ad Schellevis
093895e37e
Networking, side affects. when an "other type" interface is configured it's automatically created, but if the interface got unconfigured it's dropped,leading to broken laggs for example.
...
We should trust the "other type" create/drop to handle the interface itself and interface_bring_down() should only unconfigure it, so possible parent/child interfaces won't break for no reason.
Fixes part of https://github.com/opnsense/core/issues/1709
2017-07-14 09:42:54 +02:00
Franco Fichtner
9cf6655b46
wizard: do not force change of root password
...
We are forcing a change through the installer, which is where
the majority starts from. We don't want to enforce a change
twice.
We can't really see if we installed or went through a factory
reset, so this is (was) the best of both worlds in conjunction
with the new installer feature.
While here, annotate that it is possible to leave it "empty".
This reverts commit 5eb2c986ca7233f0f94f372968433b145b4b3249.
2017-07-14 06:49:13 +02:00
Franco Fichtner
04f9fd6425
rc: another minor tweak for compat
2017-07-13 20:06:01 +02:00
Franco Fichtner
749ef5cdc4
rc: mock '-h 0' behaviour of pw usermod for easier installer access
2017-07-13 20:00:41 +02:00
Franco Fichtner
76eb058d32
allow to run this with args to change the password
2017-07-13 19:28:15 +02:00
Franco Fichtner
5cb149d7fc
interfaces: silly-willy-wlan-fix
2017-07-13 12:49:35 +02:00
Franco Fichtner
865b27310a
Auth: small tweak for previous makes it easier to read
2017-07-13 08:11:41 +02:00
Franco Fichtner
20ec899ae5
Auth: allow to reverse password / token order in TOTP
...
PR: https://forum.opnsense.org/index.php?topic=5466.0
2017-07-12 20:56:14 +02:00
Franco Fichtner
738f998375
ipsec: ikev2 can handle multiple phase 1 with the same IP
...
PR: https://github.com/opnsense/core/issues/1714
2017-07-12 16:25:19 +02:00
Franco Fichtner
a42e3b68a6
firmware: rather don't use -f, useful for testing but that's done
2017-07-12 08:04:41 +02:00
Franco Fichtner
93072dd807
firmware: cron-parameter ALLOW_RISKY_MAJOR_UPGRADE for auto-update; closes #1376
2017-07-11 16:38:44 +02:00
Franco Fichtner
77401d6add
system: add optional swap file for SSD; closes #1554
2017-07-11 15:31:37 +02:00
Franco Fichtner
286bbf6511
rc: switch crash dump back to default
2017-07-11 07:24:28 +02:00
Franco Fichtner
951ea35c3a
firmware: always perform all upgrades from here
...
opnsense-update can still be used to selectively upgrade, but
here we shouldn't take any chances. Worst case the system will
reboot prompting "nothing to do", which isn't true because we
only know about the base and kernel, not the packages state.
2017-07-11 07:04:47 +02:00
Ad Schellevis
cbc2292f49
vlans, style glitch
2017-07-10 15:40:24 +02:00
Franco Fichtner
fa04749813
filter: different approach, fix gateways generation to include local routes
2017-07-10 10:58:24 +02:00
Franco Fichtner
f20f0c91fa
filter: Null4 and Null6 are special keywords, patch route-to for now
2017-07-10 10:43:27 +02:00
Franco Fichtner
ebdc35c550
firmware: tweak working
2017-07-10 09:11:46 +02:00
Franco Fichtner
29899040f0
firmware: now we can pull the major upgrade changelog :)
2017-07-10 09:09:07 +02:00
Franco Fichtner
d80cb40a7a
firmware: make this clearer
2017-07-10 09:03:47 +02:00
Franco Fichtner
c985c5d5f4
firmware: remove spinner on failure
2017-07-10 09:00:39 +02:00
Franco Fichtner
6a745665dc
firmware: spinner for major upgrade button
2017-07-10 08:57:29 +02:00
Franco Fichtner
321c46c462
firmware: fetch changelogs -> update changelogs
2017-07-10 08:49:30 +02:00
Franco Fichtner
39710372ed
firmware: fix spinner attribution
2017-07-10 08:45:44 +02:00
Franco Fichtner
f83f556a61
firmware: pass argument, why not...
2017-07-10 08:42:36 +02:00
Franco Fichtner
5daf7785e6
firmware: fetch changelogs in between, separate upgrade button
2017-07-10 08:37:43 +02:00
Franco Fichtner
5f5e438f64
firmware: pull changelog fetch out of check
...
We want to pull changelogs also when we look for upgrade instructions,
in order to safely show then afterwards if we can indeed upgrade from
there.
2017-07-10 08:19:06 +02:00
Franco Fichtner
ae54d39218
pkg: fix annotation that will be wrong when 2.5 comes out
2017-07-10 06:47:27 +02:00
Franco Fichtner
e9f999d0db
firmware: minor tweak in button colour #1707
2017-07-09 16:06:41 +02:00
Franco Fichtner
650254c1ba
firmware: tweak reboot messages; closes #1707
2017-07-09 16:00:47 +02:00
Franco Fichtner
4f88f025e7
firmware: dialog primary buttons and less trigger-happy process #1707
2017-07-09 13:31:31 +02:00
Franco Fichtner
b73c0e7db6
firmware: major upgrade button for #1707
2017-07-09 12:59:52 +02:00
Franco Fichtner
5198b7d47b
firmware: show EoL notice as a modal #1707
2017-07-09 12:35:51 +02:00
Franco Fichtner
3d28e83421
firmware: point major upgrade to upcoming 17.7.r1
2017-07-09 12:16:01 +02:00
Franco Fichtner
386ea4f4ee
firmware: fix previous
2017-07-09 12:12:44 +02:00
Franco Fichtner
7e7af55d02
firmware: add GUI backend update glue
...
This performs the full update, now we need to figure out how
this will look from the frontend side...
2017-07-09 12:09:30 +02:00
Franco Fichtner
1b970b3752
rc: batch-run bootup command before starting services; closes #1699
2017-07-09 11:50:27 +02:00
Franco Fichtner
d4b0b2af88
rc: rebuild the command line backup restore
...
This is a shell script to make recovery as recoverable as
possible, now with a clear license and the ability to apply
inline or reboot for a clean configuration cycle.
2017-07-09 10:51:55 +02:00
Franco Fichtner
9d392294ab
unbound: remove recently recovered optimization, because...
...
error: setsockopt(..., SO_RCVBUF, ...) failed: No buffer space available
2017-07-07 10:35:06 +02:00
Franco Fichtner
92d1886cde
layout: update to Font-Awesome 4.7
2017-07-06 13:03:06 +02:00
Ad Schellevis
511cdd471e
filter, cleanup, closes https://github.com/opnsense/core/issues/1681
2017-07-04 20:31:24 +02:00