Franco Fichtner
717c2cbecd
pkg: fix plist for previous commit
2016-10-10 22:39:36 +02:00
Ad Schellevis
302c232381
(mvc, migrations) add 1.0.0 versions to existing models
2016-10-10 20:58:27 +02:00
Franco Fichtner
2d7698a642
rc: we only care about config migration messages on pkg upgrade
2016-10-10 20:30:06 +02:00
Franco Fichtner
bdfe6bfc30
rc: move convert_config() to first place, new code depends on it
2016-10-10 20:11:33 +02:00
Franco Fichtner
804d915b8b
openvpn: go full-circle on zip package
...
We don't need 7z anymore, so it's better to use the lightweight package.
2016-10-10 19:54:32 +02:00
Franco Fichtner
d032a27b74
pkg: it's silly to depend on php56 and python27
2016-10-10 19:49:24 +02:00
Franco Fichtner
407dc8ae92
suricata: fix previous; closes #1212
2016-10-10 19:31:25 +02:00
Ad Schellevis
8459b38f11
(ipsec, "save password") change yes -> 1 for 28673. for https://github.com/opnsense/core/issues/1209
2016-10-10 18:33:54 +02:00
Franco Fichtner
259eb3808e
rc: silence tar's leading slash removal warning
2016-10-10 17:08:06 +02:00
Franco Fichtner
89c7a39f53
services: RA subnets do not have any backend ties
2016-10-10 09:05:37 +02:00
Franco Fichtner
57fb95f8a9
dhcp: url_safe() redirects for #1168
2016-10-10 08:56:16 +02:00
Franco Fichtner
c78c9ced21
config: weave new migrations into convert_config(); closes #1156
2016-10-10 08:38:35 +02:00
Franco Fichtner
152141866b
interfaces: url_safe() redirects for #1168
2016-10-09 18:26:39 +02:00
Franco Fichtner
6d8de7056b
rc: generate package user/group data after updates
2016-10-07 19:12:04 +02:00
Franco Fichtner
436a9fa38b
firmware: add new mirror courtesy of https://fourdots.com/
2016-10-05 20:19:43 +02:00
Franco Fichtner
0fd2743e35
rc: add firmware upgrade bits for major bump
2016-10-05 17:47:53 +02:00
Franco Fichtner
2d2df02658
rc: use blocking reboot here, no need for extra output
2016-10-04 16:21:22 +02:00
Franco Fichtner
6855a212d5
system: remove mention of extended account usage
...
It's only partially true and will be compeltely wrong in
the mid-term future. ;)
2016-10-04 08:29:50 +02:00
Franco Fichtner
c0282c1264
rc: switch to static binary for recovery
2016-10-04 07:12:21 +02:00
Franco Fichtner
884d4ec3c2
Revert "rc: add speaker module here too"
...
This reverts commit e0f9464e28f77885f3225ed354e1cb0c28c21cd5.
This crashes on FreeBSD 11 on boot, ouch...
2016-10-03 20:46:55 +02:00
Franco Fichtner
d65e385527
boot: change branding for -devel
2016-10-03 19:23:46 +02:00
Franco Fichtner
e0f9464e28
rc: add speaker module here too
2016-10-03 14:42:42 +02:00
Franco Fichtner
c6204a3fa4
rc: tweak working on previous
2016-10-03 14:28:39 +02:00
Franco Fichtner
972e2f375d
rc: load vital modules on kernel boot
2016-10-03 14:13:45 +02:00
Ad Schellevis
07401e58d6
Revert "(pam) add test service for demonstration purposes"
...
This reverts commit 3eb11d1643d7a9925f3c6a869b6b129cee197131.
2016-10-02 16:02:19 +02:00
Ad Schellevis
3eb11d1643
(pam) add test service for demonstration purposes
2016-10-02 15:59:47 +02:00
Franco Fichtner
9859d51e8b
vpn: merge export code into single file
2016-10-01 11:02:37 +02:00
Franco Fichtner
0e03967cf5
www: strip plugins.inc from frontend
2016-10-01 10:50:03 +02:00
Franco Fichtner
1d4ca0ff7c
rc: strip pugins.inc from backend files
2016-10-01 10:42:28 +02:00
Franco Fichtner
06307f9eb6
config: push plugins.inc to a vital spot to be included once only
2016-10-01 10:37:47 +02:00
Franco Fichtner
0c3caa6475
pkg: update plist (yay, this works!)
2016-10-01 10:11:34 +02:00
Ad Schellevis
4283c02abf
(filter) remove inaccessible code
2016-09-30 18:22:24 +02:00
Ad Schellevis
edc4097899
work on https://github.com/opnsense/core/issues/993
...
simple start, wrap anchor registration into plugin system, use miniupnpd as an example.
use registerAnchor() to register new anchors for pf into the main firewall script, we've hooked head/tail options and the different anchor types.
anchorToText() will extract the registered anchors back for the specified types and place in the script (head/tail) in text format for pf.
our new codebase was already hooked using legacy_bindings.inc, no additional includes needed to construct \OPNsense\Firewall\Plugin().
2016-09-30 18:14:02 +02:00
Ad Schellevis
9a0c3839c3
(filter) remove unused/unsupported anchors
2016-09-30 15:46:14 +02:00
Ad Schellevis
6e5f235487
(ipsec, psk) missing space in last commit
2016-09-30 09:16:05 +02:00
Ad Schellevis
76c66b2e0c
(ipsec, mobile) bug in writing out psk for mobile clients
2016-09-30 08:58:08 +02:00
Ad Schellevis
57ab36d3f0
(ipsec, psk) writeout base64 instead of plain text, interpret "any" in the process, closes https://github.com/opnsense/core/issues/1205
2016-09-29 22:02:04 +02:00
Ad Schellevis
ab3098d6e6
(openvpn client export) add X-Content-Type-Options: nosniff header, closes https://github.com/opnsense/core/issues/1204
2016-09-29 20:57:42 +02:00
Franco Fichtner
888b9a22ab
rc: sshd rework... #1200
...
Uh, oh: the keys are not purged on factory reset. Since we
now store the explicit host key file names in the config,
it's better to stop writing keys to /usr/local/etc/ssh and
just keep the backup where it was. It's fully compatible
with our approach.
While there, remove the need to softcode commands in variables
as this was done to migrate from base OpenSSH to ports OpenSSH,
which was done in 2015.
2016-09-29 18:45:01 +02:00
Franco Fichtner
383e4bba25
rc: rsa1 keys were removed long ago and we set v2 anyway
...
I pulled this from the attic, but it makes no sense. ;)
2016-09-29 17:58:51 +02:00
Franco Fichtner
c852405968
interfaces: wait for dhcp6c to exit et al for #1202
2016-09-29 07:19:49 +02:00
Franco Fichtner
19fdd02d47
rc: add deprecated host keys if available, but do not generate them; #1200
2016-09-29 07:07:23 +02:00
Franco Fichtner
3126c61690
firewall: allow route-to to loopback gateways
...
The rules edit page can do it, but it was not picked up
by the actual firewall rules...
2016-09-28 17:35:42 +02:00
Franco Fichtner
2a76c4ab9f
wizard: add language selection; closes #648
2016-09-27 21:58:09 +02:00
Franco Fichtner
26814679aa
Revert "(sshd) add HostKey to sshd_config to force available hostkeys. closes https://github.com/opnsense/core/issues/1200 "
...
This reverts commit 4e83616c7ec3d3033b72d28767f0edfae93dc6f6.
We need more input from the reporter, nobody has ran into this error
as far as I could see, testing was ok, and when OpenSSH switches
to the next version this will automatically align itself...
2016-09-27 09:39:31 +02:00
Franco Fichtner
c9e4013094
scripts: upper case for framework directories
2016-09-27 01:56:15 +02:00
Franco Fichtner
79863b19e9
dashboard: previous changes were not 100% equivalent
2016-09-27 09:06:26 +02:00
Franco Fichtner
a10382cae8
dashboard: adjust data collection for previous
2016-09-26 08:09:21 +02:00
Franco Fichtner
63a0231e67
dashboard: according to crash reoirts DynDNS widget can race
...
Fix a few style errors while there.
2016-09-26 07:58:23 +02:00
Ad Schellevis
4e83616c7e
(sshd) add HostKey to sshd_config to force available hostkeys. closes https://github.com/opnsense/core/issues/1200
2016-09-25 19:04:45 +02:00
