Franco Fichtner
2a7a4b2bf0
ipsec: rewrite former resolve_retry() as ipsec_resolve()
...
PR: https://github.com/opnsense/core/issues/2369
2018-04-25 14:27:02 +00:00
Franco Fichtner
a65b09f051
mvc: this looks unsafe, adapt to what exec_safe() is doing
2018-04-25 11:15:46 +02:00
Franco Fichtner
b2b926d7ad
system: remove duplicate addresses before binding #2375
2018-04-25 11:02:03 +02:00
Franco Fichtner
9374a0862a
ipsec: fix regression in d482a93ecdb8
2018-04-25 07:30:09 +00:00
Ad Schellevis
d725673393
auth/tester, display array types as well.
2018-04-24 21:10:24 +02:00
Ad Schellevis
2cdaee4366
Auth/Radius, fix Framed-Route parsing, slightly related to https://github.com/opnsense/core/issues/2348
2018-04-24 21:09:13 +02:00
Franco Fichtner
2b6a6c11cd
system: syslog is local, syslog-ng will be remote
2018-04-24 15:38:38 +02:00
Ad Schellevis
21cfcaaf51
add another mirror
2018-04-24 09:42:42 +02:00
Franco Fichtner
200f92b755
interfaces: no spurious redirection for dhclient; #2372
2018-04-23 18:14:23 +02:00
Ad Schellevis
f9acc51bb7
CaptivePortal, fix typo, when calling stopAccounting() check if stopAccounting() exists and not startAccounting() (although both are true ;) )
2018-04-22 18:59:17 +02:00
CJ
fb8b63f4c4
Add traffic data and IP address to Radius Accounting messages ( #2364 )
2018-04-22 18:56:22 +02:00
Ad Schellevis
d482a93ecd
ditch resolve_retry(), closes https://github.com/opnsense/core/issues/2369
2018-04-22 18:46:07 +02:00
Franco Fichtner
80758e642e
ipkg: fix plist via ´make plist-fix'
2018-04-22 18:27:09 +02:00
Ad Schellevis
b145465a3f
backup/restore, cleanup. move crypt.inc to diag_backup.php since it's only used there now.
2018-04-22 18:08:48 +02:00
Ad Schellevis
870b17e09e
OpenVPN, cleanup client specific override generation, don't save to disk as the connect or auth process is taking care of that now. for https://github.com/opnsense/core/issues/2348
2018-04-22 18:01:12 +02:00
Ad Schellevis
9e851f0cf0
fix plist for previous
2018-04-22 17:58:34 +02:00
Ad Schellevis
3c46a4f7ca
OpenVPN, minor fix for https://github.com/opnsense/core/issues/2348 , when using non tls/ssl mode the csc was ignored.
2018-04-22 17:40:19 +02:00
Ad Schellevis
4c97c990fb
OpenVPN, save client specific overrides for non user auth types on client connect and cleanup on disconnect, this should remove the need to flush all and cleanup when a csc changes or when server changes occur and is more aligned with how the user authenticated overrides function now.
...
The attributes.sh still looks a bit weird, kept the state reset, although it looks odd that we only do this for part of the server options.
Next step is cleanup and additional testing. for https://github.com/opnsense/core/issues/2348
2018-04-22 17:20:28 +02:00
Ad Schellevis
1cde411bb3
OpenVPN cleanups, found this unused gem with possible side affects while working on https://github.com/opnsense/core/issues/2348
2018-04-22 12:49:56 +02:00
Franco Fichtner
59b811712e
unbound: fix format string
2018-04-21 00:49:50 +02:00
Franco Fichtner
7c1904c10f
openvpn: flatten trailing else
2018-04-20 21:25:30 +02:00
Franco Fichtner
fa7c114359
interfaces: ETOOMANYPARENS
2018-04-20 20:38:59 +02:00
Ad Schellevis
a8f54d2e77
MVC/Content-Security-Policy settings, allow per controller overrides, see https://github.com/opnsense/core/pull/2212
2018-04-20 18:43:25 +02:00
Ad Schellevis
e2bd521ffa
OpenVPN, handle radius Framed-IP-Address Framed-IP-Network attributes, for https://github.com/opnsense/core/issues/2348
2018-04-20 17:34:41 +02:00
Ad Schellevis
a713189076
OpenVPN, only write client specific override if there is any and cleanup old one if not valid anymore. for https://github.com/opnsense/core/issues/2348
2018-04-20 17:18:57 +02:00
Ad Schellevis
41cbf22e8e
OpenVPN, oops missed some debug output in https://github.com/opnsense/core/issues/2348
2018-04-20 17:07:43 +02:00
Ad Schellevis
07791dcb47
OpenVPN, cleanup tls-verify.php script
2018-04-20 17:06:01 +02:00
Franco Fichtner
d23bc12e45
services: plug blind spots, want to know what failed
2018-04-20 12:41:25 +02:00
Franco Fichtner
eab13ff0fc
services: sadly link-local is ok for routing but not transporting
2018-04-20 12:36:54 +02:00
Franco Fichtner
9f4837d11a
services: hybrid approach to previous
...
Finally, this makes sense and avoids probing already global
addresses...
1. If a private IPv4 or link-local IPv6 we can try to
use the web test.
2. If anything else just pass it through, it should be
reachable if configured correctly.
2018-04-20 10:49:20 +02:00
Franco Fichtner
1547ecce67
services: if ip detection fails don't leak private IPv4
...
PR: https://github.com/opnsense/core/issues/2368
2018-04-20 09:59:24 +02:00
Franco Fichtner
2b9ee69f10
rc: IPv6 is trigger-happy, we only need this once
...
The unique file id was used to prevent overwrites from different
interfaces but we can just use the argument in the file so that
everything is rewritten in place causing the renewals to boil down
to one.
See a previous run with a WAN-only setup:
>>> Invoking start script 'newwanip'
Reconfiguring IPv4: OK
Reconfiguring IPv6: OK
Reconfiguring IPv6: OK
Reconfiguring IPv6: OK
Reconfiguring IPv6: OK
Reconfiguring IPv6: OK
>>> Invoking start script 'freebsd'
While here, also display the interface for clarity now:
>>> Invoking start script 'newwanip'
Reconfiguring IPv4 on em0: OK
Reconfiguring IPv6 on em0: OK
>>> Invoking start script 'freebsd'
2018-04-20 08:18:32 +02:00
Franco Fichtner
9cff964f2c
src: style fixes
2018-04-19 19:54:25 +02:00
Ad Schellevis
370750b499
Revert "Add support UTF-8 domain names in black, white and exclude lists. ( #1892 )"
...
This reverts commit baab54de6f29c92aa3ed27c1f78c85e9b9d8c2ba.
2018-04-19 16:25:31 +02:00
Ad Schellevis
de405eb21d
Proxy, IDN support for whitelists and blacklists. requires cf3ebcae01 closes https://github.com/opnsense/core/pull/2327
2018-04-19 16:23:14 +02:00
Ad Schellevis
c9132db422
remove Content-Security-Policy "default-src 'self'; see https://github.com/opnsense/core/pull/2212
2018-04-19 12:57:38 +02:00
Franco Fichtner
7eb6157b9c
mvc: fix typo spotted by @fabianfrz
2018-04-17 09:50:58 +02:00
Franco Fichtner
8e504fdf62
firmware: whitespace and order
2018-04-17 08:58:38 +02:00
Franco Fichtner
2c94aa083c
openvpn: retain openvpn_ prefix in file
...
Way easier to spot where a function belongs to.
2018-04-17 08:37:50 +02:00
Ad Schellevis
017b00ee9b
OpenVPN, cleanups for csc generation. for https://github.com/opnsense/core/issues/2348
...
* isolate write_openvpn_csc_conf so we can write out a new one with server and csc settings
* add and use openvpn_fetch_csc_list to return a simple representation for the csc administration currently known for all servers
2018-04-16 22:15:21 +02:00
Ad Schellevis
c716d2cf1b
Captive portal, fix render issue in Firefox and reformat empty "expires at" properly while there. for https://github.com/opnsense/core/issues/2362
2018-04-16 21:00:44 +02:00
Ad Schellevis
f50c9266fd
OpenVPN, refactor auth-user script, keeping it functionally the same. preparation for https://github.com/opnsense/core/issues/2348
2018-04-16 18:21:00 +02:00
Ad Schellevis
f1697c4a2e
OpenVPN/server, minor visual improvements, switch dropdown boxes to selectpicker
2018-04-15 19:55:44 +02:00
Ad Schellevis
cf3ebcae01
configd/templates, add decode_idna and encode_idna to template parser, see https://github.com/opnsense/core/pull/2327
2018-04-15 16:29:50 +02:00
Ad Schellevis
075a0b7a4a
CARP/VIP, remove address requirement for virtual ip's, closes https://github.com/opnsense/core/issues/2358
2018-04-15 15:37:09 +02:00
Franco Fichtner
1daf7466d4
pkg: fix plist
2018-04-15 13:30:04 +02:00
Ad Schellevis
33b03e0bf4
Firmware, move configuration to pluggable xml which can easily be modified or removed by other vendors. also support removal of custom input while we are here.
2018-04-15 13:24:01 +02:00
Franco Fichtner
9efc4df843
captive portal: indent on web server config
2018-04-15 13:00:08 +02:00
Ad Schellevis
72309df97f
MVC/unit tests, add DependConstraint test and do some cleanups
2018-04-14 14:00:20 +02:00
Ad Schellevis
a114dc67bf
Traffic shaper, add buckets option https://github.com/opnsense/core/issues/2359
2018-04-14 13:07:06 +02:00