5821 Commits

Author SHA1 Message Date
Ad Schellevis
2eda2d6350 (style, opnsense_standard_table_form) reverse zebra to improve heading, drop first grid line
When using opnsense_standard_table_form on a table, the first visible row contains a top border (because the invisible mobile border is placed first).
The change sets border-top-width on the first td,th to 0px and swaps the zebra printing to keep things more consistent.
2016-08-21 15:06:03 +02:00
Ad Schellevis
2656848254 style 2016-08-21 12:38:20 +02:00
Ad Schellevis
0441cf4cb8 (WOL) fix selection, for https://github.com/opnsense/core/issues/1148 2016-08-21 11:51:46 +02:00
Franco Fichtner
ac00e7f356 ipsec: another round of style fixes
Suggested by: @fabianfrz
2016-08-20 11:09:48 +02:00
Franco Fichtner
fb5e786353 ipsec: allow tunnel isolation compatibility mode
At least FortiGate doesn't like meshing the phase 2 entries so
instead isolete each phase 2 entry in its own tunnel.  This is
supposedly IKEv1 trickery, but it works...

Also see: https://wiki.strongswan.org/projects/strongswan/wiki/FAQ#Multiple-subnets-per-SA
Also see: https://lists.strongswan.org/pipermail/users/2013-March/004478.html
2016-08-19 18:44:02 +02:00
Franco Fichtner
e7140a581e ipsec: very minor IKEv1 fixing/style adaption 2016-08-19 18:27:19 +02:00
Franco Fichtner
95391d2105 ipsec: only need these IKEv2 entries once per *subnet assignment 2016-08-19 17:00:32 +02:00
Franco Fichtner
c00c8ba21b ipsec: small style updates 2016-08-19 16:59:37 +02:00
Ad Schellevis
629ead66b4 (proxy) fix description 2016-08-19 15:06:11 +02:00
Ad Schellevis
459362eff4 reneg-sec also valid for server_user 2016-08-19 14:50:10 +02:00
Ad Schellevis
11bd0171ea (openvpn) add reneg-sec to server, closes https://github.com/opnsense/core/issues/1147 2016-08-19 14:44:35 +02:00
Ad Schellevis
a36bb78d09 vpn_openvpn_export.php, fix jquery match 2016-08-19 14:38:14 +02:00
Ad Schellevis
636e2cea57 (configd, templates) copy parents permissions, without exec bit 2016-08-19 13:32:08 +02:00
Ad Schellevis
05aeb71957 Revert "(configd, templates) copy parents permissions"
This reverts commit f85e688c3e873e9449ebedd34e821370f3a089f4.
2016-08-19 11:48:30 +02:00
Ad Schellevis
f85e688c3e (configd, templates) copy parents permissions 2016-08-19 11:44:37 +02:00
Ad Schellevis
fb91e313ef (proxy) style changes 2016-08-19 10:54:38 +02:00
Ad Schellevis
263c2f4a5a Merge pull request #1125 from fabiomello/master
Filter URL Only at HTTPS Filter
2016-08-19 10:34:29 +02:00
Franco Fichtner
686f6a9226 system: tweak previous
Prodded by: @fabianfrz
2016-08-19 10:30:31 +02:00
Franco Fichtner
96ffce7cff system: default all admins to shell access; closes #1144 2016-08-19 08:27:01 +02:00
Franco Fichtner
273692e574 system: add sudo configure option to permit admins access; closes #990
This is especially useful for "sudo su" in manually created admins
to gain access to the console menu without compromising the root
password.
2016-08-19 08:07:59 +02:00
Franco Fichtner
5f50315c00 firewall: fix typo 2016-08-18 20:15:18 +02:00
Franco Fichtner
9f315cec93 rc: update glue for upcoming major updates 2016-08-18 09:00:06 +02:00
Franco Fichtner
a52ec237b1 system: fixup scattered gettext() usage in the user manager 2016-08-17 19:23:34 +02:00
Franco Fichtner
0c1e5723b5 mvc: translate page title
Needs more fixing/unification with the proper way of doing it,
but for now let these strings trickle through the translation
machinery for maximum effect.
2016-08-17 09:04:02 +02:00
Franco Fichtner
706d2804e1 rc: scrub extensions.ini writing following a FreeBSD ports change
We don't have to do anything here anymore.  Since we started using
pkg(8) the extensions.ini was always consistent, but we needed to
make sure that the order is correct.  Some more cleverness was added
to no prevent other PHP modules from simply "plugging in", but since
they are not in one extensions.ini anymore it won't matter.

Expecting some splatter during upgrade, but hopefully also no more
php-suhosin clashes with php56-session not loaded.  :)
2016-08-17 07:51:24 +02:00
Ad Schellevis
a7e3a8bf5a (services_dnsmasq.php) colspan not compatible with mobile/opnsense_standard_table_form, closes https://github.com/opnsense/core/issues/1142 2016-08-16 21:42:09 +02:00
Franco Fichtner
c0b10d0691 src: more translation tweaks
Suggested by: @Antonio-Prado
2016-08-16 21:38:55 +02:00
Franco Fichtner
9b65221677 proxy: adapt "kB" style like previous 2016-08-16 21:28:34 +02:00
Franco Fichtner
a0c0a25434 system: small translation tweaks 2016-08-16 21:22:59 +02:00
Franco Fichtner
3442cf091d vpn: zap dot on previous
Suggested by: @DokuKaefer
2016-08-16 08:02:46 +02:00
Franco Fichtner
fb3d5e0bba mvc: apply new style rule 2016-08-16 04:40:56 +02:00
Franco Fichtner
50e9ebb6c1 make: add ruleset.xml for better style checks 2016-08-16 04:39:37 +02:00
Franco Fichtner
944de05c91 vpn: fix a typo
Suggested by: @Antonio-Prado
2016-08-16 06:31:49 +02:00
Ad Schellevis
7412df81ba (proxy) add constraint on filename for remoteacl, closes https://github.com/opnsense/core/issues/700 2016-08-15 19:44:25 +02:00
Franco Fichtner
2c8e35ccd4 mvc: stype/whitespace sweep 2016-08-15 19:07:01 +02:00
Franco Fichtner
556e6a4307 make: add `test' target wrapper
Whitelisting in Suhosin is needed to make this work, but
unfortunately this will disable whitelisting for all of
phar.  A pretty debatable design choice, but for now we
keep this on -devel until we know what to do...
2016-08-15 18:59:01 +02:00
Ad Schellevis
7960bace55 whitespace 2016-08-15 18:27:30 +02:00
Ad Schellevis
d656cbf7db (mvc, constraints) rename message to ValidationMessage 2016-08-15 17:48:05 +02:00
Ad Schellevis
5361a64bd1 (mvc, add constraint pattern) for https://github.com/opnsense/core/issues/272
Constraints hook into the default validations, new constraints should derive from BaseConstraint.
This commit contains the code needed to add constraints to our model and a unittest for the UniqueConstraint option.

Add the following to a model field, to force uniqueness for a combination of keys:

<Constraints>
  <check001>                                                 <!--validation name, unique within this field-->
    <message>number should be unique</message>               <!--the message to output on validation failure -->
    <type>OPNsense\Base\Constraints\UniqueConstraint</type>  <!--the class to construct, derived from OPNsense\Base\Constraints\BaseConstraint -->
    <addFields>                                              <!--optional additional fields for the equation, defined in UniqueConstraint -->
       <field1>optfield</field1>
    </addFields>
  </check001>
</Constraints>
2016-08-15 17:37:50 +02:00
Franco Fichtner
b3f3a68b0d dashboard: colour changed, but text did not 2016-08-15 10:42:26 +02:00
Franco Fichtner
123ed735fc interfaces: no reason to store packet capture on root partition
If there is not enough space in /tmp, it's really nothing we
can do about here.  This is not an essential file.
2016-08-15 10:26:47 +02:00
Ad Schellevis
608ed9c67f fix previous 2016-08-15 09:08:18 +02:00
Ad Schellevis
22701ee038 (mvc) propagate ajax errors 2016-08-15 09:02:21 +02:00
Franco Fichtner
d988799a81 src: translations tweaks
Taking the liberty to use this as an opportunity to kill the
usage of "e-mail".

Suggested by: @Antonio-Prado
2016-08-15 07:31:18 +02:00
Ad Schellevis
c5e87ca1da (mvc, api) error handling, set http status code 2016-08-14 20:14:29 +02:00
Ad Schellevis
65471b33de Merge pull request #1140 from pv2b/improve-api-exception-messages
Improve error messages for API calls
2016-08-14 17:27:49 +02:00
Per von Zweigbergk
6839fe81ac (mvc, api) Removed useless escaping 2016-08-14 13:31:37 +00:00
Per von Zweigbergk
7863c124c0 (mvc, api) improve error handling for api calls
Example before: {"errorMessage":"Undefined offset: 0 [8]"}
Example after: {"errorMessage":"Error at \/usr\/local\/etc\/inc\/util.inc:952 - Undefined offset: 0 (errno=8)"}
2016-08-14 13:08:51 +00:00
Ad Schellevis
9ed6406bdc (mvc, api) add error handling for api calls, https://github.com/opnsense/core/issues/1136 2016-08-14 14:23:43 +02:00
Franco Fichtner
720acc9e1d util: make dmesg probing optional #1135
While there, turn the probing upside down for general sanity:

o Only pull dmesg output once
o Pattern-match one pattern only
o Anchor the match to the line start
2016-08-13 20:53:36 +02:00