12877 Commits

Author SHA1 Message Date
Ad Schellevis
2ba6da4eef OpenVPN export: offer the ability to export a user without a certificate and increase consistency between export types. 2021-05-18 10:08:07 +02:00
rawtaz
408ef03b6a
shell: Clarify revert to HTTP for web GUI question (#4992) 2021-05-17 18:42:36 +02:00
Ad Schellevis
8fb5da296b webui / javascript - upgrade chart.js and chartjs-plugin-streaming to please dependabot. chart.js 2.9.4 seems to be the prefered version for stable chartjs-plugin-streaming 1.9.0, which does seem to deliver a functional combination.
(we had some issues with newer versions earlier)

Affected components:
o traffic view (Reporting -> Traffic)
o traffic widget (dashboard)
2021-05-16 18:46:04 +02:00
Ad Schellevis
714ad52b3a Firewall / alias - proper wildcard validation for https://github.com/opnsense/core/issues/4952 and make sure to obey ! when being provided. 2021-05-07 22:29:00 +02:00
Ad Schellevis
611304a8ad Firewall/util: isSubnet() accepting invalid input like 0.0.255.0, found while looking at https://github.com/opnsense/core/issues/4952 2021-05-07 22:06:29 +02:00
Maurice Walker
e780346dbd
lighttpd: set HSTS max-age to 1 year (#4976) 2021-05-06 09:19:55 +02:00
Ad Schellevis
05d3224e70 Firewall / alias - calculate wildcard netmasks for https://github.com/opnsense/core/issues/4952 in alias backed code. 2021-05-03 18:33:14 +02:00
Franco Fichtner
3b2b03f380 src: whitespace and lint sweep 2021-05-02 17:36:38 +02:00
Franco Fichtner
bb1940d17f pkg: fix plist 2021-05-02 16:42:17 +02:00
Ad Schellevis
5e5e2ada3a filter - automatic outbound nat rules missing IPsec mobile clients. closes https://github.com/opnsense/core/issues/4948 2021-04-30 19:28:25 +02:00
Ad Schellevis
2b976a491d System / Settings / Logging - targets: TLS trasnport, fix previous for https://github.com/opnsense/core/issues/4937
(use generic system ca file)
2021-04-30 18:52:47 +02:00
Ad Schellevis
64c2e02b0b System / Settings / Logging - targets: add TLS transport option
closes https://github.com/opnsense/core/issues/4937
2021-04-30 17:54:29 +02:00
Ad Schellevis
d485b40096 MVC - MenuSystem - order interfaces in groups, for https://github.com/opnsense/core/pull/4960 2021-04-30 16:26:42 +02:00
Martin Wasley
4b4d5dcd8f
Edit Alias fix (#4964)
When the Edit panel is opened to edit an existing Alias, the proto type is visible. If you select another type of Alias and then return to the Dynamic IPv6 type the proto has gone. This PR just adds a hide proto selectpicker.
2021-04-30 16:05:12 +02:00
Maurice Walker
6481c6ae84 NPTv6: remove redundant binat rule 2021-04-30 09:15:11 +02:00
Ad Schellevis
89a2a8d51b Firewall / Aliases - Dynamic Ipv6 fw rules handling
for https://github.com/opnsense/core/issues/4923 , https://github.com/opnsense/core/pull/4941

o add validations for new type
o rename dyninterface to interface to make the attribute more generic (in case of future use)
o move address logic to interface class
2021-04-29 15:56:14 +02:00
Martin Wasley
7311b413f6 Dynamic Ipv6 fw rules handling
IPv6 Prefix changes by the ISP  cause any fw rules created for specific clients on the LAN interface(s) to become invalid.

Update AliasNameField.php

Remove fieldtype
2021-04-29 15:56:14 +02:00
Ad Schellevis
eb1c6b800d Merge branch 'FingerlessGlov3s-patch-1' 2021-04-28 19:50:23 +02:00
FingerlessGloves
3885107568
Rotate interface statistics widget
Rotate interface statistics widget, this fixes the issue where after x number of interfaces, the widget's interfaces go off the screen, causing an unwanted horizontal scroll bar.
2021-04-28 22:33:35 +01:00
Kacper Why
ec400a0495
dhcpd4: support ignore-client-uids, Fixes opnsense#3673 (#4954) 2021-04-28 16:01:00 +02:00
Ad Schellevis
64e88b3360 Revert "IPSec: quote fqdn, keyid when selected, related to https://github.com/opnsense/core/issues/4860"
This reverts commit 7ac2b966a8c2c9b0dcbded71132223314bec9c99.

https://wiki.strongswan.org/projects/strongswan/wiki/IdentityParsing
2021-04-28 14:06:26 +02:00
Ad Schellevis
7ac2b966a8 IPSec: quote fqdn, keyid when selected, related to https://github.com/opnsense/core/issues/4860 2021-04-28 09:36:05 +02:00
Ad Schellevis
761e55184c IPSec: prepend fqdn when selected, related to https://github.com/opnsense/core/issues/4860 2021-04-28 09:25:04 +02:00
Ad Schellevis
45b697f6db IPsec - typo in auto generated rules. closes https://github.com/opnsense/core/issues/4920 2021-04-26 18:21:49 +02:00
Ad Schellevis
ca67acc9d8 OpenVPN wizard broken, seems like a regression from 71d6d0adeb closes https://github.com/opnsense/core/issues/4943 2021-04-26 08:49:42 +02:00
Franco Fichtner
7c59484dc1 pkg: fix plist 2021-04-23 10:09:18 +02:00
Franco Fichtner
0dbfddd864 firmware: exclude /etc/csh.cshrc for #4936 2021-04-22 17:16:10 +02:00
Ad Schellevis
2eebd08278 Shell inactivity timeout (for [t]csh). closes https://github.com/opnsense/core/issues/4936 2021-04-22 17:06:50 +02:00
Ad Schellevis
08dcb63b0d XMLRPC / HA sync - remove services from filter_configure_xmlrpc. closes https://github.com/opnsense/core/issues/4771
o add dpinger to routing, missed a spot there
2021-04-22 12:06:05 +02:00
Ad Schellevis
a9a844148d MVC: add uuid in ApiMutableModelControllerBase::validateAndSave() when a node is defined and has one. closes https://github.com/opnsense/core/issues/4904 2021-04-22 11:28:50 +02:00
Ad Schellevis
e2534f5a09 add "keyingtries" to IPsec Phase1 config, closes https://github.com/opnsense/core/issues/4204 2021-04-21 18:26:22 +02:00
Ad Schellevis
cdf328078b add policy based routing support for "dynamic gateway policy" type interfaces. closes https://github.com/opnsense/core/issues/4905
o expose gateway_interface property on gateway so consumers can act upon it
o exclude gateway_interface gateways on automatic "let out anything from firewall host itself (force gw)" rules to avoid side affects
o construct proper route-to statement when address is omitted
o construct proper reply-to statement when address is omitted and a reply-to property is set in the (dynamic) rule
2021-04-21 17:04:44 +02:00
Franco Fichtner
d3bc697309 importer: -p was never documented
It was actually written for the installer migration. \o/
2021-04-21 14:25:33 +02:00
Ad Schellevis
ca21b966a2 audit log: rename webgui to audit for https://github.com/opnsense/core/issues/4925 2021-04-20 10:34:30 +02:00
Franco Fichtner
75f9880a94 pkg: fix plist 2021-04-20 10:27:50 +02:00
Ad Schellevis
cfb84fe8e9 Add audit log target and move related syslog messages (https://github.com/opnsense/core/issues/4925)
o add new "audit" log target
o move user auth log entries into the new scope
o send config changes to audit log including message if provided
o add messages in user and group administration
2021-04-19 18:04:35 +02:00
Franco Fichtner
253a888c26 installer: remove fluff 2021-04-19 14:19:04 +02:00
Greelan
19af1dc369
webgui: clarify help text for firewall rules traffic direction (#4848) 2021-04-19 13:51:22 +02:00
Ad Schellevis
65637ce15a phalcon 4, missed another Syslog for https://github.com/opnsense/core/issues/4012 2021-04-18 17:10:23 +02:00
Ad Schellevis
001325988c missed some small spots in https://github.com/opnsense/core/issues/4012
o one syslog unwrapped
o testsuite return class path missing
2021-04-18 17:04:34 +02:00
Franco Fichtner
e70427d9de system: leave an audit comment 2021-04-15 12:24:37 +02:00
Franco Fichtner
8bf56bf837 src: PHP error in Phalcon port
Fatal error: Declaration of OPNsense\Base\ViewTranslator::query($translateKey, array $placeholders = Array): string must be compatible with Phalcon\Translate\Adapter\Gettext::query($index, $placeholders = NULL) in /usr/core/src/opnsense/mvc/app/library/OPNsense/Base/ViewTranslator.php on line 45
2021-04-15 11:46:16 +02:00
Franco Fichtner
3a98ebb22f
Phalcon 4 migration (#4921)
phalcon 4 migration  #4012

o replace Phalcon\Session\Adapter\Files with new Phalcon\Session\Adapter\Stream adapter
o replace router->setUriSource() with handle() parameter
o combining sessions between phalcon and legacy php seems to be a bit problematic, first issue seems to be the legacy csrf check. refactor to use phalcon's method and legacy session
o Fix Phalcon Syslog usage in ControllerRoot (wrap in Logger class)
o session seems to miss standard prefix.
o also Gettext seems to like being wrapped...
o Gettext inheritance
o another handle()
o Volt: handle registerEngines / VoltEngine changes
o volt templates - missing session reference, bootstrap in ControllerBase
o router getRewriteUri() deprecated
o another handle() in index.php
o  Phalcon\Dispatcher::EXCEPTION_* moved to  Phalcon\Dispatcher\Exception::EXCEPTION_*
o changes in filter handling.
o fix plist
o Syslog usage changes
o refactor Validation changes
o FILTER_ALNUM - replaced FILTER_ALPHANUM
2021-04-15 11:36:57 +02:00
Franco Fichtner
cefe1069e4 installer: ok, one more ;) 2021-04-14 20:15:55 +02:00
Ad Schellevis
8d245d6d13 ipsec: fix php warning:
PHP Warning:  min(): Array must contain at least one element in /usr/local/etc/inc/plugins.inc.d/ipsec.inc on line 534
2021-04-14 13:19:59 +02:00
Franco Fichtner
161523247e installer: avoid padding to make this look fresh 2021-04-14 08:55:02 +02:00
Franco Fichtner
f9dd232a39 installer: remove old workaround 2021-04-13 15:01:30 +02:00
Franco Fichtner
55e4e45dac installer: no longer requires this 2021-04-13 14:06:18 +02:00
Franco Fichtner
3f3ebd9687 system: also pick up root user 2021-04-13 14:03:36 +02:00
Franco Fichtner
e8832a22fa rc: another zfs requirement for arm64 2021-04-13 13:34:36 +02:00