7788 Commits

Author SHA1 Message Date
Ad Schellevis
18c49439b8 (firewall) some missing alias options, spotted by @jschellevis 2016-11-30 18:33:21 +01:00
Franco Fichtner
107e782561 firmware: let us do 9999 updates until this breaks
Or: only display 12 changelogs, let user expand if desired

Requested by: @jschellevis
2016-11-30 18:15:22 +01:00
Franco Fichtner
31e26e2349 firmware: auto-rerun on package manager update 2016-11-30 17:40:04 +01:00
Franco Fichtner
4c68e8c246 firmware: two problems
o Licenses are only readable from installed files, back out of plugins
o Audit did overwrite the "done" message for plugin ops et al
2016-11-30 17:02:34 +01:00
Franco Fichtner
85e4bef09a system: protect all JS with html_safe(); closes #1285 2016-11-30 16:02:11 +01:00
Valentin Deville
235049b9ce Fix bug in some languages with quotes 2016-11-30 16:02:11 +01:00
Franco Fichtner
baa813eb95 plugins: protect calls to functions as done elsewhere 2016-11-30 15:32:08 +01:00
Franco Fichtner
0a972db96d firmware: fix style in audit print 2016-11-30 08:24:33 +01:00
Franco Fichtner
09ed08e899 web proxy: default to enabled for new remote lists 2016-11-30 08:17:07 +01:00
Franco Fichtner
53ee7f5734 rc: pkg-static spams about major upgrade warning...
... but we already know that because we are performing one.
2016-11-30 07:32:14 +01:00
Franco Fichtner
19dfa96cc2 intrusion detection: rotate eve-log every (almost) 500 MB
Should probably remove the weekly/daily rotation in favour of a
setting of the value in KB on the GUI instead...
2016-11-30 07:27:19 +01:00
Franco Fichtner
3983919a02 interfaces: slurp wlan devices into available devs
This is required for FreeBSD 11.0.
2016-11-29 18:45:07 +00:00
Franco Fichtner
ae4e38bcb3 ldap: auth containers are not appended to base dn
Still need to fix the help text in the server settings.
2016-11-29 18:36:09 +01:00
Franco Fichtner
d870e03d95 radvd: match running metric with how its handled underneath
We checked for IPs, but the code runs the service in all cases.
2016-11-29 18:35:20 +01:00
Franco Fichtner
88aab655a4 rc: further boot rework 2016-11-29 08:06:07 +01:00
Franco Fichtner
b234d36f9e ldap: further tweaks according to user feedback
Puts LDAP back in into its supposed working state.
2016-11-29 07:47:23 +01:00
Fabian Franz
340da9725c translation fix in services_ntpd_pps.php 2016-11-28 19:06:11 +01:00
Franco Fichtner
b8a33bc8a4 pkg: fix plist 2016-11-28 19:02:46 +01:00
Franco Fichtner
bd2d28c622 auth: tweak previous, hide implementation details; closes #1282 2016-11-28 19:02:23 +01:00
pioorg
2a025de404 Improved password hashes.
Replaced crypt($password, '$6$') with password_hash and password_verify in order to produce salted hashes from passwords.
2016-11-28 18:17:15 +01:00
Franco Fichtner
d4fe7fbc71 rc: more $verbose conversion 2016-11-28 15:53:49 +01:00
Ad Schellevis
6162649447 (mvc) routing, switch to new routing, deduplicates code.... 2016-11-28 15:17:13 +01:00
Ad Schellevis
a81aab8956 (mvc) add separate class for ui/api routing, adds functionality to map thirth party controllers on the same module level as OPNsense components 2016-11-28 15:11:28 +01:00
Franco Fichtner
7c65a076d6 rc: remove cruft, it's gone out of style
See: https://github.com/pfsense/pfsense/commit/e93db4a1f8e
2016-11-28 14:04:26 +01:00
Franco Fichtner
68739fbbb7 system: q.e.d. previous 2016-11-28 09:45:35 +01:00
Franco Fichtner
8b6d43f5f3 system: console setup is rocket science... 2016-11-28 09:43:55 +01:00
Franco Fichtner
e21aa229e4 system: move VGA to top so it defaults to the default 2016-11-28 09:39:50 +01:00
Franco Fichtner
fbfb00191b system: refactor previous for single kldload spot 2016-11-28 09:34:47 +01:00
Franco Fichtner
af8e12f550 system: another logic fail :) 2016-11-28 09:30:27 +01:00
Franco Fichtner
6b0b2569cd system: make sure vital kernel modules are loaded and refactor
This partially reverts commit 8ecaf5f9102e329f6163ddc16f84647040d53485.
2016-11-28 09:21:17 +01:00
Franco Fichtner
7e4c3cf76e system: logic error on previous 2016-11-28 07:12:26 +01:00
Franco Fichtner
d28b79a90d system: improve writing etc/ttys even more to disable virtual 2016-11-28 07:08:20 +01:00
Ad Schellevis
1b442b8e48 (proxy, remote acl's) add option to disable cert validation, closes https://github.com/opnsense/core/issues/1271 2016-11-27 15:11:10 +01:00
Franco Fichtner
9bc6342fa5 system: disable tty completely 2016-11-26 13:39:21 +01:00
Franco Fichtner
6b19b43646 system: typo in previous 2016-11-26 13:33:25 +01:00
Franco Fichtner
a7fbf99b62 system: disable all boot loader output for nullconsole usage 2016-11-26 13:31:53 +01:00
Franco Fichtner
85e6220415 system: deprecate 'enableserial' and refactor a bit
We don't need the flag anymore, it must be set through primary or
secondary console explicitly.
2016-11-26 13:09:32 +01:00
Ad Schellevis
2601843ed2 Merge pull request #1278 from fabianfrz/validation_message
add validation message
2016-11-26 11:09:00 +01:00
Fabian Franz
fc1a15dfb3 add validation message 2016-11-26 10:47:15 +01:00
Ad Schellevis
fc39bb33b3 (captive portal) don't try to generate invalid vouchers, closes https://github.com/opnsense/core/issues/1253
Let's keep this simple for now, just don't leave the dialog as long as the input isn't valid yet....
2016-11-26 09:57:34 +01:00
Franco Fichtner
8e78fd702a system: write boot.config later, when the auto-detect has been done 2016-11-26 09:34:10 +01:00
Franco Fichtner
d5969056ca system: always write consoles, figure out when serial is on 2016-11-26 09:16:49 +01:00
Franco Fichtner
f00d4309c5 system: add nullconsole setting
PR: https://forum.opnsense.org/index.php?topic=3972
2016-11-26 09:11:11 +01:00
Franco Fichtner
9e5aa0c76a filter: fix typo in previous
PR: https://forum.opnsense.org/index.php?topic=3979.0
2016-11-25 17:08:43 +01:00
Ad Schellevis
a257070187 (proxy) some small performance improvements 2016-11-25 16:59:20 +01:00
Franco Fichtner
621d703a67 openvpn: provide all local routes to export
PR: https://github.com/opnsense/core/issues/1275
2016-11-25 16:45:20 +01:00
Franco Fichtner
df469d3268 dashboard: do not arbitrarily split descriptions in services
PR: https://github.com/opnsense/core/issues/1277
2016-11-25 16:31:38 +01:00
Franco Fichtner
0ec8569296 radvd: fix two regressions from 16.7.9
o Mark interface used in case of interface tracking
o Don't inject local DNS server when there is no IP

PR: https://github.com/opnsense/core/issues/1273
2016-11-25 12:23:40 +01:00
Franco Fichtner
5cc1515bfd firmware: add audit feature, @jschellevis will like this... 2016-11-25 08:27:18 +01:00
Ad Schellevis
dd80bded16 (plugins, xmlrpc sync) use standard help if none available 2016-11-25 07:55:33 +01:00