5483 Commits

Author SHA1 Message Date
Franco Fichtner
884d4ec3c2 Revert "rc: add speaker module here too"
This reverts commit e0f9464e28f77885f3225ed354e1cb0c28c21cd5.

This crashes on FreeBSD 11 on boot, ouch...
2016-10-03 20:46:55 +02:00
Franco Fichtner
d65e385527 boot: change branding for -devel 2016-10-03 19:23:46 +02:00
Franco Fichtner
e0f9464e28 rc: add speaker module here too 2016-10-03 14:42:42 +02:00
Franco Fichtner
c6204a3fa4 rc: tweak working on previous 2016-10-03 14:28:39 +02:00
Franco Fichtner
972e2f375d rc: load vital modules on kernel boot 2016-10-03 14:13:45 +02:00
Ad Schellevis
07401e58d6 Revert "(pam) add test service for demonstration purposes"
This reverts commit 3eb11d1643d7a9925f3c6a869b6b129cee197131.
2016-10-02 16:02:19 +02:00
Ad Schellevis
3eb11d1643 (pam) add test service for demonstration purposes 2016-10-02 15:59:47 +02:00
Franco Fichtner
9859d51e8b vpn: merge export code into single file 2016-10-01 11:02:37 +02:00
Franco Fichtner
0e03967cf5 www: strip plugins.inc from frontend 2016-10-01 10:50:03 +02:00
Franco Fichtner
1d4ca0ff7c rc: strip pugins.inc from backend files 2016-10-01 10:42:28 +02:00
Franco Fichtner
06307f9eb6 config: push plugins.inc to a vital spot to be included once only 2016-10-01 10:37:47 +02:00
Ad Schellevis
4283c02abf (filter) remove inaccessible code 2016-09-30 18:22:24 +02:00
Ad Schellevis
edc4097899 work on https://github.com/opnsense/core/issues/993
simple start, wrap anchor registration into plugin system, use miniupnpd as an example.

use registerAnchor() to register new anchors for pf into the main firewall script, we've hooked head/tail options and the different anchor types.
anchorToText() will extract the registered anchors back for the specified types and place in the script (head/tail) in text format for pf.

our new codebase was already hooked using legacy_bindings.inc, no additional includes needed to construct \OPNsense\Firewall\Plugin().
2016-09-30 18:14:02 +02:00
Ad Schellevis
9a0c3839c3 (filter) remove unused/unsupported anchors 2016-09-30 15:46:14 +02:00
Ad Schellevis
6e5f235487 (ipsec, psk) missing space in last commit 2016-09-30 09:16:05 +02:00
Ad Schellevis
76c66b2e0c (ipsec, mobile) bug in writing out psk for mobile clients 2016-09-30 08:58:08 +02:00
Ad Schellevis
57ab36d3f0 (ipsec, psk) writeout base64 instead of plain text, interpret "any" in the process, closes https://github.com/opnsense/core/issues/1205 2016-09-29 22:02:04 +02:00
Ad Schellevis
ab3098d6e6 (openvpn client export) add X-Content-Type-Options: nosniff header, closes https://github.com/opnsense/core/issues/1204 2016-09-29 20:57:42 +02:00
Franco Fichtner
888b9a22ab rc: sshd rework... #1200
Uh, oh: the keys are not purged on factory reset.  Since we
now store the explicit host key file names in the config,
it's better to stop writing keys to /usr/local/etc/ssh and
just keep the backup where it was.  It's fully compatible
with our approach.

While there, remove the need to softcode commands in variables
as this was done to migrate from base OpenSSH to ports OpenSSH,
which was done in 2015.
2016-09-29 18:45:01 +02:00
Franco Fichtner
383e4bba25 rc: rsa1 keys were removed long ago and we set v2 anyway
I pulled this from the attic, but it makes no sense.  ;)
2016-09-29 17:58:51 +02:00
Franco Fichtner
c852405968 interfaces: wait for dhcp6c to exit et al for #1202 2016-09-29 07:19:49 +02:00
Franco Fichtner
19fdd02d47 rc: add deprecated host keys if available, but do not generate them; #1200 2016-09-29 07:07:23 +02:00
Franco Fichtner
3126c61690 firewall: allow route-to to loopback gateways
The rules edit page can do it, but it was not picked up
by the actual firewall rules...
2016-09-28 17:35:42 +02:00
Franco Fichtner
2a76c4ab9f wizard: add language selection; closes #648 2016-09-27 21:58:09 +02:00
Franco Fichtner
26814679aa Revert "(sshd) add HostKey to sshd_config to force available hostkeys. closes https://github.com/opnsense/core/issues/1200"
This reverts commit 4e83616c7ec3d3033b72d28767f0edfae93dc6f6.

We need more input from the reporter, nobody has ran into this error
as far as I could see, testing was ok, and when OpenSSH switches
to the next version this will automatically align itself...
2016-09-27 09:39:31 +02:00
Franco Fichtner
79863b19e9 dashboard: previous changes were not 100% equivalent 2016-09-27 09:06:26 +02:00
Franco Fichtner
a10382cae8 dashboard: adjust data collection for previous 2016-09-26 08:09:21 +02:00
Franco Fichtner
63a0231e67 dashboard: according to crash reoirts DynDNS widget can race
Fix a few style errors while there.
2016-09-26 07:58:23 +02:00
Ad Schellevis
4e83616c7e (sshd) add HostKey to sshd_config to force available hostkeys. closes https://github.com/opnsense/core/issues/1200 2016-09-25 19:04:45 +02:00
Franco Fichtner
b08d58270e src/opnsense: apply style here too 2016-09-25 10:03:21 +02:00
Franco Fichtner
30d0c1760c src/contrib: aaaaand it's gone ;) 2016-09-25 12:50:04 +02:00
Franco Fichtner
481dc9efba contrib: move contrib stuff to contrib 2016-09-25 12:45:35 +02:00
Franco Fichtner
22928ac86a dashboard: url_safe() for #1168 2016-09-25 10:41:27 +02:00
Franco Fichtner
6aaba83422 www: url_safe() for status pages #1168 2016-09-25 10:40:34 +02:00
Franco Fichtner
c378d4135f vpn: url_safe() for OpenVPN wizard #1168 2016-09-24 15:15:38 +02:00
Franco Fichtner
12a5ac98d7 Mk: allow ROOT fallback, but make sure it's there 2016-09-24 11:48:13 +02:00
Franco Fichtner
28f3f5391f Mk: small fix, /usr/local is our default-default 2016-09-24 11:36:08 +02:00
Franco Fichtner
50f557f4d7 pkg: ok, 500% harder than found in the last commit
Transition away from making the internals known, so rework
the whole tree.mk to expand better to dynamic destinations.
2016-09-24 11:29:10 +02:00
Franco Fichtner
96f5e7faca pkg: hook up src/boot, wow, that was easy 2016-09-24 09:57:24 +02:00
Franco Fichtner
289c349ba3 www: switch to absolute redirects #1168 2016-09-24 09:03:45 +02:00
Franco Fichtner
9b0ed8f8c4 www: diag* updates for #1168 2016-09-24 08:12:59 +02:00
Franco Fichtner
5344b423fa interfaces: fixup packet capture copyrights
The file came from Scott Dale in 2007 like some of the others.
While there, also fix Deciso update from 2014->2016 in our tree.

See: https://github.com/pfsense/pfsense/commit/ab6a5cfc
2016-09-24 08:05:37 +02:00
Franco Fichtner
ca61acd3af widgets: add missing (C) 2016-09-24 08:04:31 +02:00
Franco Fichtner
b60391dab6 services: #1168 for load balancer pages 2016-09-24 07:58:57 +02:00
Franco Fichtner
05b1fa9a31 vpn: url_safe() in IPsec pages 2016-09-24 07:49:28 +02:00
Franco Fichtner
d3bca14121 vpn: url_safe() for OpenVPN pages 2016-09-24 07:42:40 +02:00
Franco Fichtner
0760c96710 captive portal: more typos, some caps 2016-09-24 07:01:44 +02:00
Franco Fichtner
73f61f0687 util: keep the probing file, it prevents spurious writes 2016-09-24 07:00:37 +02:00
Ad Schellevis
98ed70d8ea (Captive portal) fix typo 2016-09-23 21:13:27 +02:00
Ad Schellevis
e52b51f572 fix typo in previous 2016-09-23 19:07:22 +02:00