16104 Commits

Author SHA1 Message Date
Franco Fichtner
7e95b9d133 mvc: style sweep 2023-11-27 16:26:59 +01:00
Stephan de Wit
5da37a7fac
interfaces: revamp overview page (#7019)
This commit omits some of the link-specific information such as ppp uptime, disconnect/release mechanism, as well as wireless and bridge information. Since there is more of this type of information available than was originally being handled by get_interfaces_info(), perhaps it makes more sense to extend the backend script with the relevant bits in time.
2023-11-27 15:52:04 +01:00
Franco Fichtner
e90571fe6b mvc: style sweep 2023-11-27 08:38:59 +01:00
Ad Schellevis
ef1d1552bf auth - improve config revision auditability, closes https://github.com/opnsense/core/issues/7033
This commit contains the following changes to improve revision visibility.

* add username and api token for external (non-gui) callers.
* offer the ability to merge revision information into configuration saves. (getRevisionContext / setRevisionContext)
* merge session attributes starting with xrevision_ into a revision item, for example. xrevision_impersonated_by would be recorded as impersonated_by
* add "impersonated_by" to audit log when specified (for future use)
* remove revision attributes before adding, this prevents attributes sticking around.
2023-11-26 18:37:40 +01:00
Ad Schellevis
7f6ac2ae6c KEA DHCP - add xmlrpc sync for https://github.com/opnsense/core/issues/6971 2023-11-26 11:01:32 +01:00
Maurice Walker
e1682cc306 openssh: include IPv6 link-local interface addresses
I tested this, a link-local ListenAddress works fine.
2023-11-25 21:31:03 +01:00
Maurice Walker
9ef93c1b78 webgui: include IPv6 link-local interface addresses
Link-local works, lighttpd supports this since at least 1.4.41.
2023-11-25 21:31:03 +01:00
Stephan de Wit
74a9f11b9a web proxy: typo 2023-11-23 15:24:45 +01:00
Franco Fichtner
9ea0f7d6ef web proxy: prep for #7030
The plugin package is "os-squid" fitting better into the naming
conventions.  With "DNS" and "DHCP" following a similar naming
convention start stuffing "Squid" before menu name and descriptive
labels so users can find it using any desireable key word and
the documentation doesn't have to change (much).
2023-11-23 13:36:29 +01:00
Franco Fichtner
c404e662fa web proxy: not less code but better strucuture
Find out which directory we want and keep it in an array.
Use the first one that exists and ignore the others.  This
allows us to do a late fallback into "en" language on top
which wasn't handled gracefully before.
2023-11-23 13:26:47 +01:00
Ad Schellevis
cee33f5393 Firewall log - prevent memory exhaustion using the new streaming functions. closes https://github.com/opnsense/core/issues/6680 2023-11-22 21:56:50 +01:00
Ad Schellevis
28b99101d4 MVC : Backend - split configdRun() in order to return a resource which the controller can stream with minimal memory consumption.
To be used in combination with 42fd27df77
2023-11-22 21:56:50 +01:00
Franco Fichtner
9e26e00eac src: style sweep 2023-11-22 21:26:10 +01:00
Ad Schellevis
af46866998 VPN: IPsec: Connections - remote authentication. Add support for radis class groups, fix missing mapping in 928d2f8299 for https://github.com/opnsense/core/issues/3295 2023-11-22 18:39:50 +01:00
Ad Schellevis
1dab8ca715 Services / DHCP - rename DHCP to ISC DHCP 2023-11-22 18:28:50 +01:00
Ad Schellevis
42fd27df77 configd - support streaming output using the "stream_output" handler.
This commit adds the connection to the action.execute() method which offers the ability to flush data back to the client instantly without having to wait for the call to end. As the existing types are only slighly modified, the impact of this change should be rather low. To demonstrate the streaming capability, also adjust configctl to flush output when received.

Example usage:

[find]
command:find / ; xxx
parameters:
type:stream_output
message:test stream output
2023-11-22 18:15:13 +01:00
Franco Fichtner
99fcbaf933 system: one more that is annoying 2023-11-22 14:33:48 +01:00
Franco Fichtner
ac0dc0ff89 firewall: fix bootstrap-select update fallout
data-width="auto" use is probably still broken in a few places
but better fix these per user report.
2023-11-22 14:30:32 +01:00
Ad Schellevis
928d2f8299 VPN: IPsec: Connections - remote authentication. Add support for radius class groups. closes https://github.com/opnsense/core/pull/6826
Add groups attribute to remote auth, to avoid random input hook the names to our local account management and require the user to create a local group first, which is similar to other areas of our system. We don't have to store the membership in this case in our local user db.

Only enable "class_group" attribute when there is at least one enabled connection using these groups.
2023-11-22 14:00:00 +01:00
Franco Fichtner
020cac564b interfaces: fix slectpicker sizing 2023-11-22 12:17:52 +01:00
Ad Schellevis
286ed62e6e VPN: IPsec: Connections - add aes256-sha256 without PFS to the list, closes https://github.com/opnsense/core/issues/6928 2023-11-22 11:40:15 +01:00
Franco Fichtner
9d818e51e6 system: refactor get_single_sysctl() while here #6969 2023-11-22 09:59:25 +01:00
Franco Fichtner
ace7740da0 openvpn: multi-line text in XML has clear disadvantages
... for the translations embedding all kinds of weird whitespace
pattern that cause syntax errors in gettext compile worst case.
2023-11-22 09:36:40 +01:00
Ad Schellevis
00532bc31e VPN: OpenVPN: Instances - be more specific about nobind. ref https://github.com/opnsense/core/issues/7028 2023-11-22 09:13:31 +01:00
Franco Fichtner
56d2ea6ce5 Revert "interfaces: follow upstream commit"
This reverts commit 60b1397c246b5cb41dcd001d793261412a6d92d0.
2023-11-22 08:43:43 +01:00
Franco Fichtner
60b1397c24 interfaces: follow upstream commit
See: https://reviews.freebsd.org/D38908
2023-11-22 08:32:49 +01:00
Franco Fichtner
0127f1deec firmware: asset cache refresh before long running action
Move to firmware configuration script for neatness.
2023-11-22 08:09:21 +01:00
Franco Fichtner
8bcc796304 src: style sweep 2023-11-22 07:49:41 +01:00
Ad Schellevis
6cd5d2e67b dhcp: offer KEA as DHCPv4 alternative - high-availabilty and control agent (https://github.com/opnsense/core/issues/6971)
Offer configuration access for the kea control agent needed for high availabilty and basic peer setup.

o add Control Agent menu item with basic settings
o split dhcpv4 settings in general and ha
o add peer configuration
2023-11-21 21:38:54 +01:00
Franco Fichtner
3f25fa25ab web proxy: fix setting unknown directory
Not great, needs a full refactor.
2023-11-21 17:25:36 +01:00
Ad Schellevis
e76bc6ead8 configd / configuration templates - add helpers.file_exists to check for file existence. closes https://github.com/opnsense/core/issues/7023 2023-11-21 16:45:43 +01:00
Ad Schellevis
eb74bd05ff VPN: IPsec: Virtual Tunnel Interfaces - add secondary tunnel address pair for dual-stack purposes. closes https://github.com/opnsense/core/issues/6777 2023-11-21 16:18:57 +01:00
Ad Schellevis
3f5bec4a1e VPN: IPsec: Virtual Tunnel Interfaces - fix typo in protocol family parsing, part one of https://github.com/opnsense/core/issues/6777 2023-11-21 16:08:09 +01:00
Ad Schellevis
ada90c819a Interfaces: Diagnostics: Packet Capture - missing type="button" toggling button on enter. 2023-11-21 13:33:56 +01:00
Franco Fichtner
137e7af193 interfaces: improve VIP validation, fix broadcast generation
In a /31 there are only two addresses and these are generally
allowed to be used so adjust the network/broadcast check to
only trigger on /30 or below.
2023-11-21 09:12:15 +01:00
Franco Fichtner
f509117ff4 mvc: style update 2023-11-21 08:44:41 +01:00
Ad Schellevis
e36123c99f MVC / ApiMutableModelControllerBase - scope xxxBase validations to the item in question, which should prevent automatically applied defaults triggering validation issues which can't be fixed from the caller in question. To prevent setAction() not triggering on consecutive calls we should validate all items when executed.
Ideally we should only force validation on the requested node and its children, but since we currently don't have a method for this and the performance decrease is likely low, we just request full validation on performValidation().

closes https://github.com/opnsense/core/issues/6978
2023-11-20 20:19:26 +01:00
0nnyx
30146f1757
Update sslbl.xml (#7021)
ruleset using sticky buffers, which comes with a performance increase compared to the standard ruleset - see https://urlhaus.abuse.ch/api/#ids
2023-11-20 19:44:37 +01:00
Franco Fichtner
3d68d98e47 interfaces: dot validate vip without a netmask 2023-11-20 14:51:35 +01:00
Ad Schellevis
ad40bb99ce ystem: Trust: Revocation - add uniqueness validation, closes https://github.com/opnsense/core/issues/7015 2023-11-20 13:26:25 +01:00
Stephan de Wit
8d2cfd21dd dashboard: point gateways widget in the right direction 2023-11-20 08:56:32 +01:00
Franco Fichtner
10458747e2 firewall: mock selection in title for consistency; closes #7016
Do not translate these values in case the translation would make
this more weird than it has to be.
2023-11-16 12:12:37 +01:00
Franco Fichtner
8b378cd4e7 ui: unify dropdown width
Fix a nasty scroll bar bug with alias proto selector, style
and adjust all manual widths accordingly.  For a strange reason
the text inputs are 2px shorter in the base forms than the modals
and the static pages so adjust the width to 346 in that case.
2023-11-16 11:29:16 +01:00
Ad Schellevis
2a58142ddb Captive Portal - fix log target so we don't subscribe to other services logging. 2023-11-16 09:10:19 +01:00
Franco Fichtner
b7f34d02eb ipsec: mute ipsec.conf related load errors
PR: https://forum.opnsense.org/index.php?topic=33126.0
2023-11-15 20:45:04 +01:00
Franco Fichtner
11209256e2 openvpn: log line style 2023-11-15 16:40:53 +01:00
Ad Schellevis
bdaa47ee35 VPN: OpenVPN - obey username_as_common_name setting, closes https://github.com/opnsense/core/issues/6915 2023-11-15 16:18:36 +01:00
Ad Schellevis
59d599b2c8 VPN: OpenVPN: Client Specific Overrides - add log entry when searching for a CSO, might help track https://github.com/opnsense/core/issues/6915 2023-11-15 14:04:53 +01:00
Franco Fichtner
fdc8cc34fa firewall: move click() from tr to button #6991
Plus minor cleanups.
2023-11-15 10:15:06 +01:00
Ad Schellevis
5aaada600a Firewall / Rules - add section for automatic rules being added at the end of the ruleset. Although technically the presentation is not 100% accurate (shown before rules, after groups), the text should be clear enough now. closes https://github.com/opnsense/core/issues/6991 2023-11-15 09:58:33 +01:00