Ad Schellevis
2c60ff3d5f
VPN: IPsec: Advanced Settings - skip empty values and leave them default when generating strongswan.conf via our model. for https://github.com/opnsense/core/issues/7648
2024-08-03 16:45:29 +02:00
Ad Schellevis
b3aa910438
System: Trust: Certificates - export p12 resulted in mangled binary blob. closes https://github.com/opnsense/core/issues/7703
...
It looks like out atob() resulted in sending broken data back to the client, the easiest way to prevent this is to keep our endpoint b64 encoded data as is and let the client handle it.
Accoring to https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URLs , we should be able to suffix ;base64 in these cases.
While here, also make sure the result status is as expected.
2024-08-03 14:29:26 +02:00
Ad Schellevis
809e3be395
VPN: IPsec: Status Overview - add aggregated totals to phase 1 view (total bytes, max time).
2024-08-02 21:37:03 +02:00
Franco Fichtner
af74aa42ab
system: fix display of multiple sources in thermal sensor widget
...
PR: https://www.reddit.com/r/opnsense/comments/1eb1mhj/comment/lg3ru1o/
2024-08-02 13:08:04 +02:00
Franco Fichtner
6f10caef26
system: adjust address display in interfaces widget #7707
2024-08-02 11:08:37 +02:00
Franco Fichtner
ec7d2f9ac1
system: when interface is omitted pull all interface addresses
...
Also fix silly inconsistency on empty array to JSON.
2024-08-02 10:28:57 +02:00
Franco Fichtner
80914fe00d
interfaces: extend the backend job accordingly
2024-08-02 09:02:34 +02:00
Franco Fichtner
f987804668
system: allow to request both -46 in one run from pluginctl
...
This changes presentation but makes it slightly more consistent
in JSON output.
2024-08-02 09:00:26 +02:00
Franco Fichtner
12db8b5b2b
system: patch -6 address support into pluginctl
2024-08-01 22:02:35 +02:00
Ad Schellevis
9b112c1c20
System: Trust: Certificates - better define "in use" flag and safety guards. closes https://github.com/opnsense/core/issues/7702
2024-08-01 18:48:20 +02:00
Franco Fichtner
9240c5a15c
firewall: show inspect in xs, it does show two columns
...
PR: https://forum.opnsense.org/index.php?topic=41882.0
2024-08-01 08:10:13 +02:00
Ad Schellevis
2ad84c1932
VPN: OpenVPN: Client Export - use new trust model to link users by common_name. closes https://github.com/opnsense/core/issues/7696
...
It looks like we left some old code in the openvpn export, since our model parses the certificate data already, we should be able to reuse the same data for a more consistent approach.
Common name is the only relevant linking pin between a user and the certificate, which also means there can only be one link. To avoid api breakage, keep the return format as it was, but make sure we only return one name when found. In the long run we might consider changing the ui to just mark the record with an icon so the user knows an entity exists.
2024-07-31 20:46:29 +02:00
Franco Fichtner
aadc34d6a0
interfaces: extend does_interface_exist slightly related to #7692
2024-07-31 12:07:03 +02:00
Franco Fichtner
4501c593ec
system: guard destroy on traffic widget
...
PR: https://forum.opnsense.org/index.php?topic=41729.msg205775#msg205775
2024-07-31 09:52:55 +02:00
Franco Fichtner
f827497f15
system: actually required
2024-07-31 09:22:57 +02:00
Franco Fichtner
f9ed428138
system: allow debug kernels not to panic too soon
...
This requires KASSERT_PANIC_OPTIONAL but it also allows us
to trace actual non-INVARIANTS panics seen in the wild without
running into INVARANTS panics that may or may not be related.
2024-07-31 08:35:05 +02:00
Jonny5
d2ef070687
Update suricata.yaml and remove two deprecated settings and add a few useful settings ( #7667 )
2024-07-29 13:51:50 +02:00
Franco Fichtner
973e744fb0
system: increase widget timeout to 5 seconds
...
Start with a small increase here.
2024-07-29 12:27:12 +02:00
Franco Fichtner
804be3bb7e
src: mop up after IPsec settings conversion
2024-07-29 08:27:26 +02:00
Ad Schellevis
7a7e81c777
VPN: IPsec: Advanced Settings - mvc conversion, for https://github.com/opnsense/core/issues/7648
...
move legacy settings to mvc including conversion, also expose some of our staticly configured strongswan.conf settings into the form for clarity.
2024-07-28 20:22:16 +02:00
Franco Fichtner
287c13beb8
interfaces: avoid touching SLAAC address for now
2024-07-27 10:03:45 +02:00
Ad Schellevis
897d3cce3a
MVC: Response->setContentType() default to empty, closes https://github.com/opnsense/core/pull/7655
2024-07-26 10:31:01 +02:00
Ad Schellevis
724f8494d6
webgui: long lasting calls and locking the request pipeline. work-around for https://github.com/opnsense/core/issues/7651
...
The number of php processes we offer to lighttpd is quite low (2 x 3), which results in a global lock when 2 dashboards are open at the same time.
Although we should increase the limit, we also should figure out a way to limit the number of long running processes as well.
2024-07-26 08:53:01 +02:00
Franco Fichtner
678eaf2fb9
system: cores and threads flipped
2024-07-26 08:23:28 +02:00
Ad Schellevis
89135cdc7b
VPN: OpenVPN: Servers [legacy] - disable DCO, only supported for new instances (and prevents server startup for tun devices).
2024-07-25 19:41:10 +02:00
Franco Fichtner
c95f42b84d
firmware: remove upgrade hint and revoke old fingerprints
2024-07-25 19:39:12 +02:00
Franco Fichtner
482b9d0361
make: switch to 24.7 track
2024-07-25 19:34:06 +02:00
Ad Schellevis
9024abe3f8
MVC: fix API regression caused by d7d016f400, closes https://github.com/opnsense/core/issues/7645
2024-07-25 13:45:35 +02:00
b0nes
ba49c8b65f
Add monitor IP to API results. ( #7646 )
...
Co-authored-by: Herman Bonnes <herman@sentillia.com>
2024-07-25 13:22:09 +02:00
Ad Schellevis
95812e2786
Interfaces: Virtual IPs: Settings - polish diff calculation a bit when using the new peer settings (avoid re-apply when unchanged)
2024-07-25 13:17:27 +02:00
Ad Schellevis
cca9149e05
Firewall: NAT: One-to-One - fix migration issue, in the old setup external without a subnet wsa also a valid option...
2024-07-25 10:18:58 +02:00
Franco Fichtner
db192a6140
system: swtich twitter to reddit; closes #7643
2024-07-24 22:14:46 +02:00
Franco Fichtner
94a9231a8f
system: fix disk widget glitching during install
...
"B" unit was not properly handled during multiplication. ;)
2024-07-24 08:14:56 +02:00
Franco Fichtner
a2e1ae103c
firmware: point to the flexible 24.7 release from 24.1's perspective
2024-07-23 13:39:54 +02:00
Ad Schellevis
228ccc0722
VPN: OpenVPN: Client Export - dev_type should be constraint to either tun or tap, DCO uses ovpn, which equals tun for the client
2024-07-23 12:08:58 +02:00
Franco Fichtner
7669567944
interfaces: refuse to set an empty MAC address
...
This goes for the LAGG claming their original hardware address
is zeroed which is true but not really helpful at all, but also
for when this MAC address was requested by the user in the settings
which likely makes it stop working altogether anyway.
2024-07-23 10:00:03 +02:00
Jaka Prašnikar
efea542952
Update BaseGaugeWidget.js ( #7640 )
...
dashboard: allow custom fonts in the Widgets with Gauges
2024-07-22 19:48:12 +02:00
Ad Schellevis
c7444334a7
plist
2024-07-22 11:30:02 +02:00
Ad Schellevis
8291ca38b5
System: Configuration: Backups - flush local history on restore (optional), closes https://github.com/opnsense/plugins/issues/4105
2024-07-22 10:00:03 +02:00
Ad Schellevis
314d975679
Lobby: Dashboard - set short Cache-Control lifetime for widgets, for https://github.com/opnsense/core/issues/7244
2024-07-20 09:30:55 +02:00
Franco Fichtner
821de0a9b1
firmware: prefer ZFS over UFS
2024-07-19 13:49:23 +02:00
Franco Fichtner
714f87aece
firmware: hint at RC2
2024-07-19 09:13:38 +02:00
Ad Schellevis
822df6cc69
Lobby: Dashboard - add a safety fence in productInfoFeedAction() in case the firewall has no intrenet access.
...
Fixes:
Error: Call to a member function children() on null in /usr/local/opnsense/mvc/app/controllers/OPNsense/Core/Api/DashboardController.php:201
Stack trace:
2024-07-19 08:39:46 +02:00
Stephan de Wit
68ec1d79b7
dashboard: persist locked state and add confirmation window to the restore option
2024-07-18 17:04:21 +02:00
Ad Schellevis
3934f74a5a
mvc: hook default action in api.php in case someone bolds an api call to the controller index.
2024-07-18 13:36:17 +02:00
Franco Fichtner
17f3f43e97
src: style sweep
2024-07-18 08:33:00 +02:00
René
f8c2bae28c
Sidebar - optimisation and fixes ( #7586 )
2024-07-18 07:50:48 +02:00
Stephan de Wit
684ee270f1
dashboard: properly clean up selectpicker
2024-07-17 15:21:25 +02:00
Ad Schellevis
d7d016f400
mvc: remove some stray code in api handling for https://github.com/opnsense/core/issues/6389 .
...
Fixes:
Error: Call to undefined method OPNsense\Mvc\Dispatcher::getParams() in /usr/local/opnsense/mvc/app/controllers/OPNsense/Base/ApiControllerBase.php:284
dispatch errors are handled inside the Dispatch->resolve() now
2024-07-17 15:18:49 +02:00
Stephan de Wit
fa800fcc5c
dashboard: move async config retrieval out of loop
2024-07-17 15:17:42 +02:00