182 Commits

Author SHA1 Message Date
Ad Schellevis
514f87adb8 System: Access: Users - remove support for local passwords
Since https://github.com/opnsense/core/issues/998 we support our authenticators for all service types, for backward compatibility reasons we kept default unix authentication available, since this is hardly used anymore, after 8 years it's time to deprecate this option.
2024-12-19 12:59:54 +01:00
Franco Fichtner
7d18b8aa88 system: drop stale link reference
Cross-links are nice in theory but in practice these are rarely used
and prone to bitrot like seen here.
2024-11-25 08:05:13 +01:00
Franco Fichtner
c5f02d2a86 system: style update 2024-10-16 09:04:09 +02:00
Franco Fichtner
7eb9e3f541 system: style 2024-10-15 12:09:16 +02:00
Franco Fichtner
986b58d108 system: fix syntax for sshd rekey 2024-10-15 12:05:41 +02:00
Ad Schellevis
2fb7965934
System: Settings: Administration - add RekeyLimit with a limited set of choices. In some regulated environments the openssh defaults are not acceptable, in which case we might need to offer some choices. (#7970)
Since RekeyLimit specifies both data and time and we don't want to overcomplicate things, it might be best to just offer some (pre validated) options.
2024-10-14 14:22:29 +02:00
Ad Schellevis
f2603ca710 System: Settings: Administration - fix broken link to Trust section, closes https://github.com/opnsense/core/issues/7811 2024-08-23 20:50:46 +02:00
Franco Fichtner
b6352ce80d system: meh, typo 2024-03-13 09:17:48 +01:00
Franco Fichtner
c149ac2cfb system: fix syslog access for legacy moves
This reverts commit 022ab7ad75a994eb92d8e923ba904e033c593392.
2024-03-13 09:05:50 +01:00
Ad Schellevis
022ab7ad75 System: Settings: Administration - possible issue when syslog container doesn't exist in the config. closes https://github.com/opnsense/core/issues/7323 2024-03-13 08:45:47 +01:00
Stephan de Wit
c94f8fc968 system: typo in previous 2024-03-08 09:32:06 +01:00
Franco Fichtner
a7a842cd08 system: need this too to avoid spurious checked option later on 2024-03-08 09:26:09 +01:00
Franco Fichtner
d5b84cf46e system: move web GUI error log setting to appropriate page #6830
The storage location is wrong but deal with this later.
2024-02-28 12:57:27 +01:00
Franco Fichtner
763d2fd4dd ui: fix the missing dialog padding in some modals
It appears that dialogRef.getModalBody() is one of our
ancient modal implementations and a simple 'message' does
the trick.
2024-01-04 10:47:25 +01:00
Franco Fichtner
25620da2f8 system: fix warnings and SSH fail on empty <ssh/> node
PR: https://forum.opnsense.org/index.php?topic=36866.0
2023-11-09 09:08:56 +01:00
lin-xianming
8f9d7e823b
webgui: prevent PHP session gc from running early (#6499)
With the default PHP settings, there is a 1% chance for the session gc
to trigger upon the start of a session, removing session files with
modification times older than 24 minutes. This can cause sessions to
timeout earlier than indicated by the webgui settings.
2023-04-18 18:23:15 +02:00
Stephan de Wit
2a81e78c41 system: typo 2023-03-03 09:39:10 +01:00
Franco Fichtner
412c0c7b71 system: use system_resolver_configure() everywhere
Do not delete system_resolvconf_generate/system_hosts_generate yet.
We may just end up renaming them in order to get external callers
to adapt to the new layout.
2023-03-02 08:35:19 +01:00
Franco Fichtner
7989daa6ac system: 'ssh' probably empty, issue with PHP 8
PR: https://forum.opnsense.org/index.php?topic=30946.0
2022-11-07 10:40:01 +02:00
Franco Fichtner
e82896026c system: tweak validation message 2022-08-30 08:49:49 +02:00
Ad Schellevis
d31bff3c39 webgui: cipher suites and TLS1.3 validation issues, partial fix for https://github.com/opnsense/core/pull/5993 2022-08-27 11:52:48 +02:00
Franco Fichtner
a256697cbf system: remove debug mode, disable display errors on runtime for development mode #5889 2022-07-19 16:47:00 +02:00
Josh Soref
20a3c3da38
Spelling (#5885) 2022-07-18 13:59:03 +02:00
Franco Fichtner
0819c4232b system: handle "production" mode without introducing a new type
Store debug and deployment and keep production as the implied default
if we want to change this later we can't get out of it without a migration
which we don't have for legacy configuration storage at the moment.
2022-06-10 14:05:49 +02:00
Stephan
0488d3669a PHP80: Add deployment options
Since PHP80 decided to turn certain notices into warnings, a way to silence these is necessary, which also presents us with the opportunity to make this configurable.
2022-06-08 11:30:22 +02:00
Franco Fichtner
7b1f3d7045 system: support 1500000 baudrate selection for ARM
Sticky 115200 when no value was set since it is still the most
common setting.
2022-05-18 07:53:54 +02:00
Franco Fichtner
f5ea62e311 system: usual TAB-dance 2022-01-18 16:48:54 +01:00
Franco Fichtner
17b294b38e system: generic rewrite of ssh advanced opts
o Batch the backend call calling from GUI once and
  only if needed from configuration.
o Turn the configuration into a generic loop.
o Move advanced options to the back of the configuration.
o Warning level for both log messages.
2022-01-18 16:42:16 +01:00
Manuel Faux
3b164749d3
Allow to configure SSH setting PubkeyAcceptedAlgorithms via GUI (#5400)
As OpenSSH 8.8 disables RSA signatures using the SHA-1 hash algorithm
by default some older SSH clients might not be able to connect to
OPNsense anymore. Therefore, it might be needed to manually modify the
PubkeyAcceptedAlgorithms sshd config option.

Prevent generating of invalid configuration values for dynamic
crypto parameters (KexAlgorithms, Ciphers, MACs, HostKeyAlgorithms and
PubkeyAcceptedAlgorithms).
2022-01-18 15:14:59 +01:00
Franco Fichtner
74455307d5 system: prevent use of client certificates in web GUI; closes #3048 2021-07-01 13:18:57 +02:00
Ad Schellevis
2eebd08278 Shell inactivity timeout (for [t]csh). closes https://github.com/opnsense/core/issues/4936 2021-04-22 17:06:50 +02:00
Franco Fichtner
3158956a27 system: fix PHP warning #4474 2020-11-25 08:53:55 +01:00
Franco Fichtner
8fb1a11e33 system: whitespaces :D 2020-11-24 10:33:46 +01:00
Ad Schellevis
96ae155a39 whitespace 2020-11-23 20:09:56 +01:00
Ad Schellevis
d70171bdc5 whitespace system_advanced_admin.php 2020-11-23 20:08:59 +01:00
Ad Schellevis
2c6da85d42 User management: add user OTP seed option in System->Settings->Administration. for https://github.com/opnsense/core/issues/4474 2020-11-23 18:37:35 +01:00
Franco Fichtner
dd526ac8b8 system: small follow-up for correct preset on page load #4373 2020-09-24 14:10:33 +02:00
Ad Schellevis
6cac461e6e System / Settings / Administration: fix defunct "use default" button on Listen Interfaces 2020-09-24 13:59:56 +02:00
Ad Schellevis
116511910d sshd: add HostKeyAlgorithms for https://github.com/opnsense/core/issues/3975 2020-03-13 09:54:59 +01:00
Ad Schellevis
5df590cd13 SSH: optional KexAlgorithms, Ciphers and MACs to harden security. closes https://github.com/opnsense/core/issues/3975 2020-03-12 13:47:56 +01:00
Franco Fichtner
6e727e43d2 system: allow an arbitrary group for sudo like ssh login; closes #3407 2019-05-04 10:43:32 +02:00
Franco Fichtner
ba0c82dd54 dhcpd: naming convention, plugins_configure() use 2019-04-29 07:49:26 +02:00
Franco Fichtner
6d66dd81b2 system: avoid short PHP tag 2019-03-04 07:24:31 +01:00
Ad Schellevis
2f919443dc cherry-pick https://github.com/opnsense/core/pull/3234 2019-03-01 18:35:50 +01:00
Ad Schellevis
4a8e737ced fix some gettext() + html_safe, discussed c4c7f8d732 2019-02-03 20:04:08 +01:00
Michael Steenbeek
6db6598c00 Fix more incorrect HTML tags (#3007) 2018-12-04 10:13:22 +01:00
Franco Fichtner
6bbfcf4b02 system: allow USB-based serial ports; closes #2026 2018-07-15 19:47:43 +02:00
Franco Fichtner
8b73ce3072 system: HSTS option tweaks 2018-05-28 05:12:31 +00:00
Ad Schellevis
4e0ce9b193 webgui, opt-in for htst, for https://github.com/opnsense/core/issues/1722 2018-05-27 20:01:40 +02:00
Franco Fichtner
d13da15cb1 system: move password policy settings to local database server edit #1929
A few review spots and regression fixes as well.
2018-05-01 13:44:38 +00:00