Franco Fichtner
6da1836636
rc: root file system print, closes #1408
2017-07-23 16:03:26 +02:00
Franco Fichtner
566fe52edc
etc: last batch for #1733
2017-07-22 18:10:00 +02:00
Ad Schellevis
b7f61727cd
php7.1 filter.inc https://github.com/opnsense/core/issues/1733
2017-07-22 14:55:20 +02:00
Ad Schellevis
cd4b958840
fix some more config handling for php 7.1, https://github.com/opnsense/core/issues/1733
2017-07-21 17:43:32 +02:00
Ad Schellevis
678aa412b5
some more config handling fixes in inc directory, for https://github.com/opnsense/core/issues/1733
2017-07-21 17:38:19 +02:00
Ad Schellevis
57c478f9af
remove legacy migrations (upgrade_config.inc), as discussed with @fichtner
2017-07-21 17:18:29 +02:00
Ad Schellevis
39fe8d838c
fix config handling for auth.inc, https://github.com/opnsense/core/issues/1733
2017-07-21 16:12:48 +02:00
Franco Fichtner
e5b0401626
rc: allow to stop launch of configd
...
https://forum.opnsense.org/index.php?topic=5531.0
2017-07-21 10:38:51 +02:00
Franco Fichtner
ea6b5bda52
interfaces: protect call of new WAN IPv6 #1668
2017-07-20 12:53:04 +02:00
Franco Fichtner
ac40e5218a
interfaces: annotate binary data #1730
2017-07-20 11:21:58 +02:00
Franco Fichtner
4c179c235d
openvpn: fix config handling on PHP 7.1 #1733
...
The day has come that this "bootstrap" logic broke horribly,
preventing us from upgrading to PHP 7.1 with the initial 17.7.
Add a config_read_array() function that emulates *all* potentially
required steps and grabs the array reference so that the code can
be migrated easily.
Hopefully this also works on PHP 7.0. ;)
2017-07-20 08:41:35 +02:00
velati
7681a2915d
interfaces: Host-Uniq field in PPPoE connection; closes #1730
...
PR: https://forum.opnsense.org/index.php?topic=5307.0
2017-07-19 17:29:43 +02:00
Franco Fichtner
36f0ff51dc
openvpn: normalise line endings like webgui does
...
PR: https://github.com/opnsense/core/issues/1727
2017-07-19 13:28:17 +02:00
Franco Fichtner
81eeab656d
regenerate dh parameters
2017-07-16 12:13:52 +02:00
Ad Schellevis
218b37df45
login, cookies. set secure; HttpOnly on test_cookie as well to avoid false positives on pci scan
2017-07-16 11:55:47 +02:00
Ad Schellevis
d2ab500ac6
webgui, remove cipher TLS_RSA_WITH_3DES_EDE_CBC_SHA (SWEET32)
2017-07-16 11:32:18 +02:00
Ad Schellevis
46c460bb3f
cleanup, move link_interface_to_vlans to interfaces_assign.php and remove unused code
2017-07-14 22:10:48 +02:00
Ad Schellevis
5525a08adb
interfaces.inc, fix mtu setup for vlans, for https://github.com/opnsense/core/issues/1709
2017-07-14 22:05:07 +02:00
Ad Schellevis
4ff07cad63
lagg interfaces, restructure interface_lagg_configure() and add mtu option, for https://github.com/opnsense/core/issues/1709
2017-07-14 16:38:12 +02:00
Ad Schellevis
e5e914c90f
add mtu to legacy_interfaces_details()
2017-07-14 16:17:09 +02:00
Ad Schellevis
cebc6c7e11
legacy_interfaces_details() parse issue on fetching laggports, needed for https://github.com/opnsense/core/issues/1709
2017-07-14 15:03:08 +02:00
Ad Schellevis
093895e37e
Networking, side affects. when an "other type" interface is configured it's automatically created, but if the interface got unconfigured it's dropped,leading to broken laggs for example.
...
We should trust the "other type" create/drop to handle the interface itself and interface_bring_down() should only unconfigure it, so possible parent/child interfaces won't break for no reason.
Fixes part of https://github.com/opnsense/core/issues/1709
2017-07-14 09:42:54 +02:00
Franco Fichtner
04f9fd6425
rc: another minor tweak for compat
2017-07-13 20:06:01 +02:00
Franco Fichtner
749ef5cdc4
rc: mock '-h 0' behaviour of pw usermod for easier installer access
2017-07-13 20:00:41 +02:00
Franco Fichtner
76eb058d32
allow to run this with args to change the password
2017-07-13 19:28:15 +02:00
Franco Fichtner
5cb149d7fc
interfaces: silly-willy-wlan-fix
2017-07-13 12:49:35 +02:00
Franco Fichtner
a42e3b68a6
firmware: rather don't use -f, useful for testing but that's done
2017-07-12 08:04:41 +02:00
Franco Fichtner
93072dd807
firmware: cron-parameter ALLOW_RISKY_MAJOR_UPGRADE for auto-update; closes #1376
2017-07-11 16:38:44 +02:00
Franco Fichtner
77401d6add
system: add optional swap file for SSD; closes #1554
2017-07-11 15:31:37 +02:00
Franco Fichtner
286bbf6511
rc: switch crash dump back to default
2017-07-11 07:24:28 +02:00
Franco Fichtner
fa04749813
filter: different approach, fix gateways generation to include local routes
2017-07-10 10:58:24 +02:00
Franco Fichtner
1b970b3752
rc: batch-run bootup command before starting services; closes #1699
2017-07-09 11:50:27 +02:00
Franco Fichtner
d4b0b2af88
rc: rebuild the command line backup restore
...
This is a shell script to make recovery as recoverable as
possible, now with a clear license and the ability to apply
inline or reboot for a clean configuration cycle.
2017-07-09 10:51:55 +02:00
Franco Fichtner
9d392294ab
unbound: remove recently recovered optimization, because...
...
error: setsockopt(..., SO_RCVBUF, ...) failed: No buffer space available
2017-07-07 10:35:06 +02:00
Ad Schellevis
511cdd471e
filter, cleanup, closes https://github.com/opnsense/core/issues/1681
2017-07-04 20:31:24 +02:00
Ad Schellevis
e5711dfb25
filter, replace macro with internal name, for https://github.com/opnsense/core/issues/1702
...
In the longrun all macro entries should go, but for now a replace should be sufficient.
2017-07-04 20:22:17 +02:00
Ad Schellevis
d57dbf5a07
ipsec, cleanup non-functional nat before ipsec logic and ui for 17.7. In case the feature will reemerge at some point, it would be better to move it to the firewall section anyway. for reference about this long standing issue see https://github.com/opnsense/core/issues/440
2017-07-04 20:05:45 +02:00
Ad Schellevis
c5f11e99a0
webgui, harden ssl. https://weakdh.org/
2017-07-03 20:32:09 +02:00
Ad Schellevis
c7786bded7
rework last, add Secure/HttpOnly attributes on logout, remove duplicate sessionid cookie
2017-07-03 19:43:53 +02:00
Ad Schellevis
73dbbcd72c
csrf/cookie, fix Secure Attribute and align session cookie in authgui.inc
2017-07-03 19:17:13 +02:00
Franco Fichtner
70253d9448
pkg: add fingerprint for 17.7 signing
2017-06-26 00:41:52 +02:00
Franco Fichtner
0f73d88f4f
unbound: tweak previous
2017-06-25 16:21:46 +02:00
Franco Fichtner
32e545ef7a
unbound: warning in PHP 7.1, the code can't really work
2017-06-25 16:16:10 +02:00
Franco Fichtner
8f15ca00a9
dyndns: move to plugins
2017-06-25 14:45:51 +02:00
Franco Fichtner
7884e3456e
rfc2136: move to plugins
2017-06-25 14:34:59 +02:00
Franco Fichtner
59200fb2df
system: Swedish was removed due to no progress
2017-06-25 13:35:44 +02:00
Alexander Leisentritt
6d8812c8a4
Fix DynDNS update for IPv6
2017-06-23 22:40:09 +02:00
Ad Schellevis
013f3c7e8f
remove debug output
2017-06-12 13:01:32 +02:00
Ad Schellevis
d0ef517669
firewall, plugin. Add schedules back again, move state kill to end of processing and out of the rule registration.
2017-06-12 13:01:32 +02:00
Ad Schellevis
d18c97e731
ditch filter_generate_gateways()
2017-06-12 13:01:32 +02:00