Franco Fichtner
33ad50456a
system: defer start of lighttpd on newwanip event #6351
...
Looks like improvements in 23.1.4 made the problem worse, indicating
that the direction this is going is a bit doubtful. Instead, funnel
the restart through configd to reach some state of serialization
similar to what filter_configure() is doing.
While here move the service definition to the correct file.
2023-03-22 08:00:57 +01:00
Franco Fichtner
bbbed94a93
Revert "dhcp: radvd HUP brings back the infamous "can't join ipv6-allrouters" error"
...
This reverts commit 38049e4ea8b342b6c5f7705e69c2e0034dc67914.
This can be fixed in radvd.
2023-03-21 21:18:53 +01:00
Franco Fichtner
b50e529511
openvpn: style sweep
2023-03-21 19:50:50 +01:00
Franco Fichtner
38049e4ea8
dhcp: radvd HUP brings back the infamous "can't join ipv6-allrouters" error
...
PR: https://forum.opnsense.org/index.php?topic=33148.0
2023-03-21 19:05:10 +01:00
Ad Schellevis
c8970545a7
VPN: OpenVPN: Connection Status - empty (null || '') on start/stop/restart should respond with an error. as discussed with @fichtner
2023-03-21 16:32:13 +01:00
Ad Schellevis
b9a1633a18
VPN: OpenVPN: Connection Status - refactor to MVC closes https://github.com/opnsense/core/issues/6382
...
o rename virtual_addr --> virtual_address in status call out
o add new endpoints to search connections and routes, kill sessions and service control
o remove old status page status_openvpn.php and change ACL and Menu registration
o offer two tab view on sessions / routes
o service controls (restart/start/stop) are shown for non client based records (p2p and client mode) or when no clients are connected.
2023-03-21 15:25:59 +01:00
Franco Fichtner
2d31af2a5e
firewall: remove debug
2023-03-21 10:07:42 +01:00
Franco Fichtner
cc6857e597
ui: since touched make it 100% correct
2023-03-21 09:56:33 +01:00
Franco Fichtner
25f7d0e407
unbound: use deferred.reject() to clear spinner
2023-03-21 09:50:43 +01:00
Franco Fichtner
3032474e9f
unbound: fix typo and adjust message
...
Try to to point user to do something and instead just tell them why
this cannot be accepted.
2023-03-21 09:31:00 +01:00
Franco Fichtner
0a43ee9041
unbound: validation message can trigger twice, but it's only about the port
2023-03-21 09:25:41 +01:00
Franco Fichtner
97e683e99d
Revert "unbound: fixup defaults in migration and namespace changes"
...
This reverts commit ffc1c438e02ae209b8ad690907d3fad8f74a6248 to be able
to test the migration easily. We didn't set the full data (at least
local_zone_type was missing) but then again we do not have to.
Also seeing that we did not have OPNsense section before or version
attribute let us try to keep this status quo for a little longer.
2023-03-21 09:15:29 +01:00
Franco Fichtner
7e470ec60b
unbound: according to model this value is required/has a default
...
For the function maybe it's better to pass a model than read MVC data
via legacy config access.
2023-03-21 09:11:22 +01:00
Franco Fichtner
d0553f74d5
system: yep, need script_output
2023-03-21 08:47:35 +01:00
Franco Fichtner
66c93c6835
system: also add status since we have it
2023-03-21 08:45:56 +01:00
Franco Fichtner
c02198fa58
firmware: extend messages for subscription errors; closes #6373
2023-03-21 08:37:13 +01:00
Ad Schellevis
4ef3c1fbe8
Interfaces: Virtual IPs: Settings - ip alias + vhid validation issue, likely fix for https://github.com/opnsense/core/issues/6422
2023-03-20 20:19:43 +01:00
Franco Fichtner
d22144e3a9
unbound: simplify description and remove hint
2023-03-20 10:44:36 +01:00
Stephan de Wit
bc05c8f59d
unbound: general: update port description and default to disabled
2023-03-20 10:06:54 +01:00
Stephan de Wit
e9285f254b
unbound: blocklists: adjust to rename
2023-03-20 09:15:49 +01:00
Franco Fichtner
e2d0376e0c
system: service API cleanups
2023-03-20 09:14:39 +01:00
Stephan de Wit
b8d3e6a7ef
unbound: blocklists: lowercase all domains
...
while here, also add size check to cached blocklists, as they might be empty
due to network errors.
2023-03-20 09:05:52 +01:00
Franco Fichtner
667b50d564
network time: fix minor warnings in code
2023-03-20 08:41:56 +01:00
Stephan de Wit
ffc1c438e0
unbound: fixup defaults in migration and namespace changes
2023-03-17 15:57:30 +01:00
Franco Fichtner
a50897b517
firmware: make error messages for subscriptions clearer #6373
...
These are the backend issues we have been having. We can improve the
messages later, perhaps add better instructions.
2023-03-17 10:03:41 +01:00
Franco Fichtner
42e519d089
firmware: add advanced/help toggles, cancel button #6373
2023-03-17 08:45:26 +01:00
Ad Schellevis
d1468a3f82
Interfaces: Diagnostics: Ping - minor adjustments for https://github.com/opnsense/core/issues/6378 , limit the maximum runtime to a day, fix form help an add source address
2023-03-16 21:35:15 +01:00
Franco Fichtner
ffcda5bd14
system: fix ACL, copied from @adschellevis ;)
2023-03-16 21:05:18 +01:00
Ad Schellevis
83ccec4330
Interfaces: Diagnostics: Ping - refactor diagnostics tool ( https://github.com/opnsense/core/issues/6378 )
2023-03-16 20:23:22 +01:00
Ad Schellevis
f7d7dafccd
stylefix
2023-03-16 17:30:42 +01:00
Franco Fichtner
617bd3faf5
system: convert widget to API use with aut-refresh; closes #6376
2023-03-16 12:56:47 +01:00
Ad Schellevis
b528952260
VPN/OpenVPN - add missing static-challenge parsing, should fix https://forum.opnsense.org/index.php?topic=32939.msg159861#msg159861
2023-03-16 10:26:43 +01:00
Ad Schellevis
3f7452cb0b
System: Settings: Tunables - prevent applying tunables which are already set, this should fix some issues with buggy drivers resetting when setting a tunable to the value it already had.
2023-03-16 10:19:22 +01:00
Ad Schellevis
4b2b600509
VPN/OpenVPN - reintroduce "cipher" keyword for older clients. closes https://github.com/opnsense/core/issues/6420 partly reverts 1e28d5b352 , only remove "none" cipher for now and assure its not being set by default for new connections.
2023-03-16 09:37:06 +01:00
Franco Fichtner
9f771860a7
system: disable checkboxes in service list but keep visually appealing padding
2023-03-16 09:07:06 +01:00
Franco Fichtner
e42b8a3018
unbound: move this here
...
Perhaps we should break with the "empty" default value as the model is
more capable of ensuring defaults and it avoids a bit of bootstrapping
in cases we need to read a value. Port 53 is not likely going to change
away for DNS.
2023-03-16 08:50:47 +01:00
Franco Fichtner
678368fa66
src: style sweep
2023-03-15 20:32:47 +01:00
Stephan de Wit
5492d4477c
Unbound: migrate General page to MVC ( #6418 )
2023-03-15 13:00:22 +01:00
Franco Fichtner
03ac997fa4
system: migrate services page to MVC #6376
...
Widget is next. While here set configd to 'locked'.
2023-03-15 12:29:07 +01:00
Franco Fichtner
3111b79d99
web proxy: cleanup
2023-03-15 10:06:57 +01:00
Franco Fichtner
4d2c1c2217
system: simplify dump, likely won't need plain boolean status #6376
...
It's easier to use but the MVC already runs on parsing for
"is running" so we don't have to change the world here and
introduce new things.
2023-03-15 09:24:05 +01:00
Franco Fichtner
2511790cb8
ipsec: same for strongswan status
2023-03-15 09:18:09 +01:00
Franco Fichtner
7b9b1a69ff
unbound: replace with portable call
...
The MVC mutable controller looks for "is running" which is
always given if enabled and running. If not enabled the control
will not show and if not running it will say so.
2023-03-15 09:14:39 +01:00
Franco Fichtner
179c6e4f37
system: fix service control bugs, dedup and oddities plus new #6376
...
service_name() and service_message() make this more usable. Also
add a status command for -s mode that emulates rc system output.
2023-03-15 09:06:43 +01:00
Franco Fichtner
0fc88f2d3d
system: yup yup #6376
...
Most likely this is backend material which needs to be filtered/
used to render page content and react on via formalized API request
in order to avoid leaking data.
The nice thing about the filtering is that we only ever have to look
up service status for matching services making the lookup faster.
2023-03-14 16:09:11 +01:00
Franco Fichtner
c56bb65762
system: small service list dump via pluginctl for #6376
...
We may have to fill out runtime information as well and filter
correctly just in case the API ever requires it as it's not a
lot of work.
2023-03-14 15:45:49 +01:00
Franco Fichtner
fa955f66bc
network time: migrate to PID file
2023-03-14 12:16:33 +01:00
Franco Fichtner
b60d7769b4
scripts: last bits of killbypid() converted
2023-03-14 10:45:13 +01:00
Franco Fichtner
6b719e9411
system: killbypid() in web GUI
2023-03-14 10:36:12 +01:00
Franco Fichtner
9316f4fbbd
system: killbypid() in RRD
2023-03-14 10:35:16 +01:00