17312 Commits

Author SHA1 Message Date
Franco Fichtner
6e1be9df8a openssh: port to plugins_argument_map() 2024-09-18 11:32:18 +02:00
Franco Fichtner
9d154beea2 system: port web GUI to plugins_argument_map() 2024-09-18 08:54:44 +02:00
Franco Fichtner
2c718a54f7 dhcrelay: refactor for plugins_argument_map() use
Shift names around a bit more to make it clearer why we sometimes
handle IDs and other times interfaces and how they relate to each
other.
2024-09-18 08:47:26 +02:00
Monviech
a1f6987f47 mvc: Remove bold text from base_tabs_header.volt 2024-09-17 15:19:12 +02:00
Franco Fichtner
9422d6435e system: kill these dashboard-only entries
They are already disabled and do exist elsewhere. lint-acl doesn't
complain either and now the risk of false positives is zero.
2024-09-17 08:30:08 +02:00
Franco Fichtner
f10604cda7 interfaces: straighten out VIP status ACLs 2024-09-17 08:27:48 +02:00
Franco Fichtner
01e3d9eccc dhcrelay: *_interfaces() is reserved and should not be used here 2024-09-17 08:26:00 +02:00
Franco Fichtner
2d0536c259 system: fix typos, clarify
PR: https://forum.opnsense.org/index.php?topic=42862.0
2024-09-17 07:30:07 +02:00
Franco Fichtner
842075ca06 interfaces: move legacy RFC2136 to plugin hook
We can't remove it now and we can't widen the call since local
and newwanip_map are mostly the same, but also different.

Use the selector trick to just invoke what we need and lose the
configd error.

PR: https://www.reddit.com/r/opnsense/comments/1fi5mw3/rfc2136_errors_in_audit_log/
2024-09-16 16:49:13 +02:00
Franco Fichtner
5c7f4ab166 system: squelch warning 2024-09-16 14:12:43 +02:00
Stephan de Wit
630d380728 system: typo in previous 2024-09-16 10:36:54 +02:00
Franco Fichtner
05739a0898 system: improve previous and widen its use 2024-09-16 10:13:16 +02:00
Stephan de Wit
4f6b9ec726
system: make dpinger_configure_do map aware (#7867) 2024-09-16 10:01:53 +02:00
Franco Fichtner
0176a47c36 interfaces: refactor a bit for PPP 2024-09-16 08:50:43 +02:00
Franco Fichtner
af62c482e2 interfaces: add 'spoofmac' device option and enforce it
PR: https://forum.opnsense.org/index.php?topic=42798.0
2024-09-14 13:37:17 +02:00
Ad Schellevis
922907a931 System: Trust: silence cryptography deprecation warnings 2024-09-13 20:08:53 +02:00
Stephan de Wit
b2bcd4c73f system: save immediately on picture removal 2024-09-13 14:30:37 +02:00
Stephan de Wit
7c29a5a420 dashboard: remove resize handles 2024-09-13 14:02:03 +02:00
Stephan de Wit
de06e2c349 dashboard: other defaults, sane button centering for services widget 2024-09-13 13:51:31 +02:00
Stephan de Wit
ceeffbb9cb dashboard: change default dashboard layout 2024-09-13 13:10:12 +02:00
Franco Fichtner
8ee66110dc Scripts: extend script for plugins 2024-09-13 12:13:44 +02:00
Stephan de Wit
4b344259f9 dashboard: link styling 2024-09-13 11:32:37 +02:00
Stephan de Wit
02be73127e dashboard: ACL lint sweep 2024-09-13 11:12:10 +02:00
Franco Fichtner
0d2fe84fc9 system: fix cpu widget again via @swhite2 2024-09-13 11:00:38 +02:00
Franco Fichtner
4c77605cb1 Scripts: fix wildcard to lower path wildcard edge case 2024-09-13 10:47:34 +02:00
Stephan de Wit
1822897717 dashboard: fixup ipsec endpoint definitions 2024-09-13 10:44:38 +02:00
Franco Fichtner
effe597d33 Scripts: do one wildcard expansion on final ACL lookup 2024-09-13 10:36:35 +02:00
Franco Fichtner
447b471b37 Scripts: check ACL definition, too; closes #7821
Causes more breakage, but we'll discuss.
2024-09-13 10:21:35 +02:00
Franco Fichtner
fc0466fa88 interfaces: put back arcane gateway definition as it seems to work for some
PR: https://forum.opnsense.org/index.php?topic=42803.0
2024-09-13 10:18:05 +02:00
Franco Fichtner
1fbc89f6e0 Scripts: unbreak POSIX shell 2024-09-13 09:56:48 +02:00
Franco Fichtner
962e58c367 system: fix lint in Cpu.js 2024-09-13 09:31:30 +02:00
Stephan de Wit
9f565344b5 dashboard: add referral links 2024-09-13 09:29:09 +02:00
Franco Fichtner
c02aabc109 make: add lint-acl and finish first script iteration #7821 2024-09-13 09:25:46 +02:00
Franco Fichtner
4de945bdae interfaces: routing configuration on changed interfaces only 2024-09-12 22:17:15 +02:00
Franco Fichtner
0d951209e5 interfaces: 6RD/6to4 route creation should be limited to IPv6 2024-09-12 22:15:07 +02:00
Franco Fichtner
a85bd197c2 system: make system_routing_configure() deal with interface maps 2024-09-12 22:13:26 +02:00
Franco Fichtner
bb9353dba9 plugins: add plugins_argument_map() helper
This helper parses "mapped" arguments for batch reloads of e.g.
interfaces or devices or items related to that (like gateway
names).  The rules are simple:

o If the mapped argument is null reload in full (return true)
o If the mapped argument is an array handle it under later conditionals (return true)
o If the mapped argument is of an unsupported type do nothing (return false)
o If the mapped argument is not null but empty do nothing (return false)
o If the argument is a string convert it to an array, splitting the string
  by comma (return true)
o Modify the $map argument to be either null or a non-empty array to normalize
  the passed map (also for backwards-compatible reasons of newwanip_map
  and vpn_map intermediate steps).
2024-09-12 22:06:41 +02:00
Stephan de Wit
3327890ab4
dashboard: add Picture widget (#7860)
---------

Co-authored-by: Franco Fichtner <franco@opnsense.org>
2024-09-12 16:54:53 +02:00
Franco Fichtner
c31f22f23f
system: render header for failed active widgets to allow removal (#7858)
* system: render header for failed active widgets to allow removal

If there is a syntax error in the widget JS code we will not be
able to remove it from the dashboard.  This is only a POC as it
doesn't fully work for varying reasons, but details where the
problem lies.

* dashboard: account for failed module imports or class instantiations

---------

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>
2024-09-12 12:02:59 +02:00
Franco Fichtner
a610cf8ed2 plugins: make an important note 2024-09-12 10:09:33 +02:00
Franco Fichtner
3dd3c9fe6f interfaces: annotate future plans 2024-09-12 09:49:56 +02:00
Franco Fichtner
b6e2bb49d4 Scripts: sort widgets #7821 2024-09-12 09:09:54 +02:00
Franco Fichtner
2159b9a92f Scripts: add endpoint reader for dashboard widgets #7821 2024-09-12 09:01:43 +02:00
Franco Fichtner
194fb1ba0c firmware: fix PHP warning 2024-09-11 14:50:10 +02:00
Franco Fichtner
e8212a6116 src: more whitespace 2024-09-11 06:55:15 +02:00
Franco Fichtner
5497d27ba1 src: whitespace 2024-09-11 06:50:46 +02:00
Franco Fichtner
76f84fdf67 src: style and stuff 2024-09-10 21:43:38 +02:00
Ad Schellevis
0378c650d4
Add System: Trust: Settings page (#7854)
* System: Trust: Settings - add boilerplate and move existing store_intermediate_certs setting to new module including migration

* System: Trust: Settings - add configuration constraints and glue to flush CRL's to local trust store when requested.

This implements the following options:

* Enable/Disable legacy providers (enabled by default, which is the current default)
* Option to write specific configuration constraints, when enabled, CipherString, Ciphersuites and MinProtocol[DTS] can be configured

One last piece of the puzzle is the "crl" event action, which should deploy to the local trust store as well ehen requested.

* Update src/opnsense/mvc/app/models/OPNsense/Core/Menu/Menu.xml

Co-authored-by: Franco Fichtner <franco@opnsense.org>

* System: Trust: Settings - process review comments https://github.com/opnsense/core/pull/7854

* System: Trust: Settings - flush CRL's when "Store CRL's" is selected

---------

Co-authored-by: Franco Fichtner <franco@opnsense.org>
2024-09-10 21:15:11 +02:00
Ad Schellevis
72472c37be System: Trust: Revocation - add missing CRL changed event
Although the current impact is likely low, when CRL's are updated, they should trigger this event to update the consumers of this information (as it was pre-migration)
2024-09-10 20:38:35 +02:00
Ad Schellevis
fb9cb1e4ca System: Trust: Certificates - store private key when creating a csr, closes https://github.com/opnsense/core/issues/7856 2024-09-10 20:19:00 +02:00