8650 Commits

Author SHA1 Message Date
Franco Fichtner
2a7a4b2bf0 ipsec: rewrite former resolve_retry() as ipsec_resolve()
PR: https://github.com/opnsense/core/issues/2369
2018-04-25 14:27:02 +00:00
Franco Fichtner
a65b09f051 mvc: this looks unsafe, adapt to what exec_safe() is doing 2018-04-25 11:15:46 +02:00
Franco Fichtner
b2b926d7ad system: remove duplicate addresses before binding #2375 2018-04-25 11:02:03 +02:00
Franco Fichtner
9374a0862a ipsec: fix regression in d482a93ecdb8 2018-04-25 07:30:09 +00:00
Ad Schellevis
d725673393 auth/tester, display array types as well. 2018-04-24 21:10:24 +02:00
Ad Schellevis
2cdaee4366 Auth/Radius, fix Framed-Route parsing, slightly related to https://github.com/opnsense/core/issues/2348 2018-04-24 21:09:13 +02:00
Franco Fichtner
2b6a6c11cd system: syslog is local, syslog-ng will be remote 2018-04-24 15:38:38 +02:00
Ad Schellevis
21cfcaaf51 add another mirror 2018-04-24 09:42:42 +02:00
Franco Fichtner
200f92b755 interfaces: no spurious redirection for dhclient; #2372 2018-04-23 18:14:23 +02:00
Ad Schellevis
f9acc51bb7 CaptivePortal, fix typo, when calling stopAccounting() check if stopAccounting() exists and not startAccounting() (although both are true ;) ) 2018-04-22 18:59:17 +02:00
CJ
fb8b63f4c4 Add traffic data and IP address to Radius Accounting messages (#2364) 2018-04-22 18:56:22 +02:00
Ad Schellevis
d482a93ecd ditch resolve_retry(), closes https://github.com/opnsense/core/issues/2369 2018-04-22 18:46:07 +02:00
Franco Fichtner
80758e642e ipkg: fix plist via ´make plist-fix' 2018-04-22 18:27:09 +02:00
Ad Schellevis
b145465a3f backup/restore, cleanup. move crypt.inc to diag_backup.php since it's only used there now. 2018-04-22 18:08:48 +02:00
Ad Schellevis
870b17e09e OpenVPN, cleanup client specific override generation, don't save to disk as the connect or auth process is taking care of that now. for https://github.com/opnsense/core/issues/2348 2018-04-22 18:01:12 +02:00
Ad Schellevis
9e851f0cf0 fix plist for previous 2018-04-22 17:58:34 +02:00
Ad Schellevis
3c46a4f7ca OpenVPN, minor fix for https://github.com/opnsense/core/issues/2348, when using non tls/ssl mode the csc was ignored. 2018-04-22 17:40:19 +02:00
Ad Schellevis
4c97c990fb OpenVPN, save client specific overrides for non user auth types on client connect and cleanup on disconnect, this should remove the need to flush all and cleanup when a csc changes or when server changes occur and is more aligned with how the user authenticated overrides function now.
The attributes.sh still looks a bit weird, kept the state reset, although it looks odd that we only do this for part of the server options.

Next step is cleanup and additional testing. for https://github.com/opnsense/core/issues/2348
2018-04-22 17:20:28 +02:00
Ad Schellevis
1cde411bb3 OpenVPN cleanups, found this unused gem with possible side affects while working on https://github.com/opnsense/core/issues/2348 2018-04-22 12:49:56 +02:00
Franco Fichtner
59b811712e unbound: fix format string 2018-04-21 00:49:50 +02:00
Franco Fichtner
7c1904c10f openvpn: flatten trailing else 2018-04-20 21:25:30 +02:00
Franco Fichtner
fa7c114359 interfaces: ETOOMANYPARENS 2018-04-20 20:38:59 +02:00
Ad Schellevis
a8f54d2e77 MVC/Content-Security-Policy settings, allow per controller overrides, see https://github.com/opnsense/core/pull/2212 2018-04-20 18:43:25 +02:00
Ad Schellevis
e2bd521ffa OpenVPN, handle radius Framed-IP-Address Framed-IP-Network attributes, for https://github.com/opnsense/core/issues/2348 2018-04-20 17:34:41 +02:00
Ad Schellevis
a713189076 OpenVPN, only write client specific override if there is any and cleanup old one if not valid anymore. for https://github.com/opnsense/core/issues/2348 2018-04-20 17:18:57 +02:00
Ad Schellevis
41cbf22e8e OpenVPN, oops missed some debug output in https://github.com/opnsense/core/issues/2348 2018-04-20 17:07:43 +02:00
Ad Schellevis
07791dcb47 OpenVPN, cleanup tls-verify.php script 2018-04-20 17:06:01 +02:00
Franco Fichtner
d23bc12e45 services: plug blind spots, want to know what failed 2018-04-20 12:41:25 +02:00
Franco Fichtner
eab13ff0fc services: sadly link-local is ok for routing but not transporting 2018-04-20 12:36:54 +02:00
Franco Fichtner
9f4837d11a services: hybrid approach to previous
Finally, this makes sense and avoids probing already global
addresses...

1. If a private IPv4 or link-local IPv6 we can try to
   use the web test.

2. If anything else just pass it through, it should be
   reachable if configured correctly.
2018-04-20 10:49:20 +02:00
Franco Fichtner
1547ecce67 services: if ip detection fails don't leak private IPv4
PR: https://github.com/opnsense/core/issues/2368
2018-04-20 09:59:24 +02:00
Franco Fichtner
2b9ee69f10 rc: IPv6 is trigger-happy, we only need this once
The unique file id was used to prevent overwrites from different
interfaces but we can just use the argument in the file so that
everything is rewritten in place causing the renewals to boil down
to one.

See a previous run with a WAN-only setup:

  >>> Invoking start script 'newwanip'
  Reconfiguring IPv4: OK
  Reconfiguring IPv6: OK
  Reconfiguring IPv6: OK
  Reconfiguring IPv6: OK
  Reconfiguring IPv6: OK
  Reconfiguring IPv6: OK
  >>> Invoking start script 'freebsd'

While here, also display the interface for clarity now:

  >>> Invoking start script 'newwanip'
  Reconfiguring IPv4 on em0: OK
  Reconfiguring IPv6 on em0: OK
  >>> Invoking start script 'freebsd'
2018-04-20 08:18:32 +02:00
Franco Fichtner
9cff964f2c src: style fixes 2018-04-19 19:54:25 +02:00
Ad Schellevis
370750b499 Revert "Add support UTF-8 domain names in black, white and exclude lists. (#1892)"
This reverts commit baab54de6f29c92aa3ed27c1f78c85e9b9d8c2ba.
2018-04-19 16:25:31 +02:00
Ad Schellevis
de405eb21d Proxy, IDN support for whitelists and blacklists. requires cf3ebcae01 closes https://github.com/opnsense/core/pull/2327 2018-04-19 16:23:14 +02:00
Ad Schellevis
c9132db422 remove Content-Security-Policy "default-src 'self'; see https://github.com/opnsense/core/pull/2212 2018-04-19 12:57:38 +02:00
Franco Fichtner
7eb6157b9c mvc: fix typo spotted by @fabianfrz 2018-04-17 09:50:58 +02:00
Franco Fichtner
8e504fdf62 firmware: whitespace and order 2018-04-17 08:58:38 +02:00
Franco Fichtner
2c94aa083c openvpn: retain openvpn_ prefix in file
Way easier to spot where a function belongs to.
2018-04-17 08:37:50 +02:00
Ad Schellevis
017b00ee9b OpenVPN, cleanups for csc generation. for https://github.com/opnsense/core/issues/2348
* isolate write_openvpn_csc_conf so we can write out a new one with server and csc settings
* add and use openvpn_fetch_csc_list to return a simple representation for the csc administration currently known for all servers
2018-04-16 22:15:21 +02:00
Ad Schellevis
c716d2cf1b Captive portal, fix render issue in Firefox and reformat empty "expires at" properly while there. for https://github.com/opnsense/core/issues/2362 2018-04-16 21:00:44 +02:00
Ad Schellevis
f50c9266fd OpenVPN, refactor auth-user script, keeping it functionally the same. preparation for https://github.com/opnsense/core/issues/2348 2018-04-16 18:21:00 +02:00
Ad Schellevis
f1697c4a2e OpenVPN/server, minor visual improvements, switch dropdown boxes to selectpicker 2018-04-15 19:55:44 +02:00
Ad Schellevis
cf3ebcae01 configd/templates, add decode_idna and encode_idna to template parser, see https://github.com/opnsense/core/pull/2327 2018-04-15 16:29:50 +02:00
Ad Schellevis
075a0b7a4a CARP/VIP, remove address requirement for virtual ip's, closes https://github.com/opnsense/core/issues/2358 2018-04-15 15:37:09 +02:00
Franco Fichtner
1daf7466d4 pkg: fix plist 2018-04-15 13:30:04 +02:00
Ad Schellevis
33b03e0bf4 Firmware, move configuration to pluggable xml which can easily be modified or removed by other vendors. also support removal of custom input while we are here. 2018-04-15 13:24:01 +02:00
Franco Fichtner
9efc4df843 captive portal: indent on web server config 2018-04-15 13:00:08 +02:00
Ad Schellevis
72309df97f MVC/unit tests, add DependConstraint test and do some cleanups 2018-04-14 14:00:20 +02:00
Ad Schellevis
a114dc67bf Traffic shaper, add buckets option https://github.com/opnsense/core/issues/2359 2018-04-14 13:07:06 +02:00