Franco Fichtner
6eea44ffe1
ipsec: tweak previous a wee bit
2016-10-12 13:08:12 +02:00
Ad Schellevis
5dc95bac60
(ipsec shared secrets) fix spacing, add type. closes https://github.com/opnsense/core/issues/1214
2016-10-12 12:12:09 +02:00
Franco Fichtner
029393adf2
firewall: url_safe() conversion, closes #1168
...
While there, kill "if (write_config())" constructs as this
really isn't a thing.
2016-10-12 08:36:16 +02:00
Franco Fichtner
34604d5a71
dhcp: crash report and stray array_shift() for prefixes.php
2016-10-11 18:02:57 +02:00
Franco Fichtner
e6fa852e1f
firmware: piped status return was wrong
2016-10-11 08:47:19 +02:00
Franco Fichtner
f7ffa6e4d6
firewall: $tableaddrs cannot be empty
...
Not sure if this works, but it looks better than before.
2016-10-11 08:37:13 +02:00
Franco Fichtner
143a9b340f
inc: url_safe() for #1168
...
This doesn't do anything in particular, because we don't know
what the input is without parsing it further. It's not worse
than before in any case. ;)
2016-10-11 08:30:13 +02:00
Franco Fichtner
f39ce32b96
services: url_safe() for #1168
2016-10-11 08:23:59 +02:00
Franco Fichtner
c5ab052b67
system: url_safe() for #1168
2016-10-11 08:11:12 +02:00
Franco Fichtner
717c2cbecd
pkg: fix plist for previous commit
2016-10-10 22:39:36 +02:00
Ad Schellevis
302c232381
(mvc, migrations) add 1.0.0 versions to existing models
2016-10-10 20:58:27 +02:00
Franco Fichtner
2d7698a642
rc: we only care about config migration messages on pkg upgrade
2016-10-10 20:30:06 +02:00
Franco Fichtner
bdfe6bfc30
rc: move convert_config() to first place, new code depends on it
2016-10-10 20:11:33 +02:00
Franco Fichtner
804d915b8b
openvpn: go full-circle on zip package
...
We don't need 7z anymore, so it's better to use the lightweight package.
2016-10-10 19:54:32 +02:00
Franco Fichtner
d032a27b74
pkg: it's silly to depend on php56 and python27
2016-10-10 19:49:24 +02:00
Franco Fichtner
407dc8ae92
suricata: fix previous; closes #1212
2016-10-10 19:31:25 +02:00
Ad Schellevis
8459b38f11
(ipsec, "save password") change yes -> 1 for 28673. for https://github.com/opnsense/core/issues/1209
2016-10-10 18:33:54 +02:00
Franco Fichtner
259eb3808e
rc: silence tar's leading slash removal warning
2016-10-10 17:08:06 +02:00
Franco Fichtner
89c7a39f53
services: RA subnets do not have any backend ties
2016-10-10 09:05:37 +02:00
Franco Fichtner
57fb95f8a9
dhcp: url_safe() redirects for #1168
2016-10-10 08:56:16 +02:00
Franco Fichtner
c78c9ced21
config: weave new migrations into convert_config(); closes #1156
2016-10-10 08:38:35 +02:00
Franco Fichtner
152141866b
interfaces: url_safe() redirects for #1168
2016-10-09 18:26:39 +02:00
Franco Fichtner
6d8de7056b
rc: generate package user/group data after updates
2016-10-07 19:12:04 +02:00
Franco Fichtner
436a9fa38b
firmware: add new mirror courtesy of https://fourdots.com/
2016-10-05 20:19:43 +02:00
Franco Fichtner
0fd2743e35
rc: add firmware upgrade bits for major bump
2016-10-05 17:47:53 +02:00
Franco Fichtner
2d2df02658
rc: use blocking reboot here, no need for extra output
2016-10-04 16:21:22 +02:00
Franco Fichtner
6855a212d5
system: remove mention of extended account usage
...
It's only partially true and will be compeltely wrong in
the mid-term future. ;)
2016-10-04 08:29:50 +02:00
Franco Fichtner
c0282c1264
rc: switch to static binary for recovery
2016-10-04 07:12:21 +02:00
Franco Fichtner
884d4ec3c2
Revert "rc: add speaker module here too"
...
This reverts commit e0f9464e28f77885f3225ed354e1cb0c28c21cd5.
This crashes on FreeBSD 11 on boot, ouch...
2016-10-03 20:46:55 +02:00
Franco Fichtner
d65e385527
boot: change branding for -devel
2016-10-03 19:23:46 +02:00
Franco Fichtner
e0f9464e28
rc: add speaker module here too
2016-10-03 14:42:42 +02:00
Franco Fichtner
c6204a3fa4
rc: tweak working on previous
2016-10-03 14:28:39 +02:00
Franco Fichtner
972e2f375d
rc: load vital modules on kernel boot
2016-10-03 14:13:45 +02:00
Ad Schellevis
07401e58d6
Revert "(pam) add test service for demonstration purposes"
...
This reverts commit 3eb11d1643d7a9925f3c6a869b6b129cee197131.
2016-10-02 16:02:19 +02:00
Ad Schellevis
3eb11d1643
(pam) add test service for demonstration purposes
2016-10-02 15:59:47 +02:00
Franco Fichtner
9859d51e8b
vpn: merge export code into single file
2016-10-01 11:02:37 +02:00
Franco Fichtner
0e03967cf5
www: strip plugins.inc from frontend
2016-10-01 10:50:03 +02:00
Franco Fichtner
1d4ca0ff7c
rc: strip pugins.inc from backend files
2016-10-01 10:42:28 +02:00
Franco Fichtner
06307f9eb6
config: push plugins.inc to a vital spot to be included once only
2016-10-01 10:37:47 +02:00
Franco Fichtner
0c3caa6475
pkg: update plist (yay, this works!)
2016-10-01 10:11:34 +02:00
Ad Schellevis
4283c02abf
(filter) remove inaccessible code
2016-09-30 18:22:24 +02:00
Ad Schellevis
edc4097899
work on https://github.com/opnsense/core/issues/993
...
simple start, wrap anchor registration into plugin system, use miniupnpd as an example.
use registerAnchor() to register new anchors for pf into the main firewall script, we've hooked head/tail options and the different anchor types.
anchorToText() will extract the registered anchors back for the specified types and place in the script (head/tail) in text format for pf.
our new codebase was already hooked using legacy_bindings.inc, no additional includes needed to construct \OPNsense\Firewall\Plugin().
2016-09-30 18:14:02 +02:00
Ad Schellevis
9a0c3839c3
(filter) remove unused/unsupported anchors
2016-09-30 15:46:14 +02:00
Ad Schellevis
6e5f235487
(ipsec, psk) missing space in last commit
2016-09-30 09:16:05 +02:00
Ad Schellevis
76c66b2e0c
(ipsec, mobile) bug in writing out psk for mobile clients
2016-09-30 08:58:08 +02:00
Ad Schellevis
57ab36d3f0
(ipsec, psk) writeout base64 instead of plain text, interpret "any" in the process, closes https://github.com/opnsense/core/issues/1205
2016-09-29 22:02:04 +02:00
Ad Schellevis
ab3098d6e6
(openvpn client export) add X-Content-Type-Options: nosniff header, closes https://github.com/opnsense/core/issues/1204
2016-09-29 20:57:42 +02:00
Franco Fichtner
888b9a22ab
rc: sshd rework... #1200
...
Uh, oh: the keys are not purged on factory reset. Since we
now store the explicit host key file names in the config,
it's better to stop writing keys to /usr/local/etc/ssh and
just keep the backup where it was. It's fully compatible
with our approach.
While there, remove the need to softcode commands in variables
as this was done to migrate from base OpenSSH to ports OpenSSH,
which was done in 2015.
2016-09-29 18:45:01 +02:00
Franco Fichtner
383e4bba25
rc: rsa1 keys were removed long ago and we set v2 anyway
...
I pulled this from the attic, but it makes no sense. ;)
2016-09-29 17:58:51 +02:00
Franco Fichtner
c852405968
interfaces: wait for dhcp6c to exit et al for #1202
2016-09-29 07:19:49 +02:00
