Ad Schellevis
a219bf134f
Traffic shaper: safeguard deletes, using https://github.com/opnsense/core/issues/1897
2019-11-08 18:51:25 +01:00
Ad Schellevis
d19ad59201
MVC: on ApiMutableModelControllerBase add opt-in parameter $internalModelUseSafeDelete to check for referential integrity before delete, throwing a UserException when the uuid is found inside a tag which logically originates from a model. (has a uuid attribute and a version attribute in one of its parents)
...
closes https://github.com/opnsense/core/issues/1897
2019-11-08 18:27:12 +01:00
Ad Schellevis
e1883f34ac
MVC: refactor JsonKeyValueStoreField type, skip unit test since it depends on configd. for https://github.com/opnsense/core/issues/3252
2019-11-08 16:04:00 +01:00
Ad Schellevis
5324f35ceb
MVC: refactor InterfaceField and add unit tests for https://github.com/opnsense/core/issues/3252
2019-11-08 15:29:13 +01:00
Ad Schellevis
10be0e4585
MVC: refactor CountryField and add unit test for https://github.com/opnsense/core/issues/3252
2019-11-08 14:32:19 +01:00
Ad Schellevis
50da9e3190
MVC: fix a validation bug while working on https://github.com/opnsense/core/issues/3252
...
InclusionIn() validation only works when using string, php seems to convert keys automatically, in which case the following input:
$data = ["101" => "abc", "102" => "cde"];
would lead to these keys:
array_keys($data) ==> [101, 102]
when validating if 101,100 is a valid item in the list InclusionIn() seems to think so....
2019-11-08 12:33:36 +01:00
Ad Schellevis
75a94d86f5
MVC: missed default validation message for https://github.com/opnsense/core/issues/3252
2019-11-08 12:18:55 +01:00
Ad Schellevis
9f579672b9
MVC: refactor AuthGroupField and add unit test for https://github.com/opnsense/core/issues/3252
2019-11-08 11:57:21 +01:00
Ad Schellevis
172f1aa1e9
MVC: cleanup debug info for https://github.com/opnsense/core/issues/3252
2019-11-08 11:56:25 +01:00
Ad Schellevis
def2513344
MVC: refactor AuthenticationServerField for https://github.com/opnsense/core/issues/3252 (unittest already in place)
2019-11-08 11:24:12 +01:00
Ad Schellevis
fdd95b6640
MVC: cleanup imports for https://github.com/opnsense/core/issues/3252
2019-11-08 11:23:16 +01:00
Ad Schellevis
f0e6e1e89f
MVC: refactor ConfigdActionsField, skip unit test since we don't want to mock configd at the moment. for https://github.com/opnsense/core/issues/3252
2019-11-08 11:16:52 +01:00
Ad Schellevis
f5b5d0def7
MVC: refactor CertificateField and add unit test for https://github.com/opnsense/core/issues/3252
2019-11-08 11:07:02 +01:00
Ad Schellevis
72800ba34c
MVC: refactor OptionField and add unit test for https://github.com/opnsense/core/issues/3252
2019-11-08 10:34:41 +01:00
Ad Schellevis
b2d84c812f
MVC: add BaseListField type for https://github.com/opnsense/core/issues/3252
2019-11-08 10:33:00 +01:00
Ad Schellevis
d547bc48bc
fix forceReload() closes https://github.com/opnsense/core/issues/3801
2019-11-08 10:06:38 +01:00
Ad Schellevis
01b74e60b1
Monit: disable unit test, since it can't be executed without an environment. Either fix in some future release or remove.
2019-11-08 09:54:07 +01:00
Ad Schellevis
e39474de90
Update CONTRIBUTING.md
...
add explicit timeout period
2019-11-07 17:08:41 +01:00
Ad Schellevis
196d462383
filter-list_counters skip empty lines, for https://github.com/opnsense/core/issues/3798
2019-11-07 09:26:45 +01:00
Ad Schellevis
8a83b3bb12
filter live log, ignore tag keyword in pfctl output. closes https://github.com/opnsense/core/issues/3796
2019-11-05 21:28:57 +01:00
Franco Fichtner
4c4da7dfed
openvpn: move to shared device plugin spot
...
We already create interfaces on demand in interface_configure()
so it's ok to create remaining interfaces where IPsec and VXLAN
is done as well.
2019-11-04 08:31:29 +01:00
Franco Fichtner
11106c4990
vxlan: the idea was to have pluggable device code :)
...
While here change the expected device name from "vxlan.X" to "vxlanX",
since "." denotes the newer FreeBSD VLAN ID syntax on top of parent
devices (e.g. "igb0.12") and all devices should follow the regex of
"^[a-z]+[0-9]+".
2019-11-03 12:28:56 +01:00
Ad Schellevis
5db422e0cc
VXLAN model version and proper description
2019-11-02 16:01:50 +01:00
Ad Schellevis
6628ae2e40
VXLAN support ( #3787 )
...
* VXLAN: hook vxlan_configure_interface to newwanip event, move interface (address) configuration responisibilty there as well. This might be a better spot for other device setups as well.
2019-11-01 21:25:27 +01:00
Franco Fichtner
c20b0083ef
firmware: add /etc/remote to whitelist, NTP GPS uses it
2019-11-01 20:13:49 +01:00
Franco Fichtner
b97789b2d9
plugins: extend reach to "configurable" reject spots
2019-11-01 15:31:49 +01:00
Franco Fichtner
f2d6a44b4c
plugins: add plugins_devices() facility for device plugging
2019-11-01 11:13:48 +01:00
Ad Schellevis
2afb3777b8
MVC: NetworkField type, add "NetMaskAllowed" option to validate on single addresses
2019-10-31 16:30:14 +01:00
Franco Fichtner
a2aec6c76e
reporting: empty netflow egress default passes validation
2019-10-31 11:23:42 +01:00
Franco Fichtner
296a7e3c39
system: generate self-signed server certificate for web GUI
2019-10-31 10:13:09 +01:00
Franco Fichtner
48e0c47a96
interfaces: remove the "Directly send SOLICIT" option
...
We already do a more-or-less hybrid approach by starting rtsold
even if it isn't used at all. Now we also have ISPs which do
not seem to send router advertisements after successful connect
so that the reconnect misses the HUP for dhcp6c to fix the
connectivity again.
To change that remove the option and its only conditional to
behave unconditionally which has few reasons to cause regressions.
2019-10-31 09:14:35 +01:00
Ad Schellevis
4465f108bf
Proxy: fix validation, missed backreference
2019-10-30 15:36:11 +01:00
Ad Schellevis
5b159832eb
Firmware: add "copy to clipboard" button in update textbox.
2019-10-30 13:22:20 +01:00
Franco Fichtner
f621e1ff3c
system: small style update on previous
2019-10-30 10:36:30 +01:00
Ad Schellevis
875a1e2d4a
authentication: extend opnsense-auth to respond with json encoded data when the authenticator received additional properties (such as framed ip addresses, groups, etc). needed for https://github.com/opnsense/core/issues/3266 should be a non-breaking change, since current authentication sequences only use the return code.
2019-10-30 10:25:01 +01:00
Franco Fichtner
f098b3a9ba
pkg: suricata with RUST builtin doesn't work everywhere yet
2019-10-29 12:04:09 +01:00
Franco Fichtner
4e677c2b62
webproxy: indent
2019-10-29 11:02:59 +01:00
Franco Fichtner
ee0e6c2cef
webproxy: constraint to proper place
2019-10-29 10:57:33 +01:00
Ad Schellevis
bb06e1a5e1
Switch backup to Google api php client v2 ( #3778 )
2019-10-29 10:34:23 +01:00
Franco Fichtner
900b23a97b
unbound: add reload
...
PR: https://github.com/opnsense/plugins/pull/1554
2019-10-29 09:17:20 +01:00
Franco Fichtner
df0734b37b
firmware: expect pkg to be installed as non-automatic #3473
2019-10-28 10:44:34 +01:00
Franco Fichtner
d643488126
reporting: a bit more shell script style
2019-10-28 09:20:03 +01:00
Franco Fichtner
820d5c2f32
ipsec: a bit more coding style
2019-10-28 09:13:42 +01:00
Franco Fichtner
25e4673c67
src: whitespace sweep
2019-10-27 18:42:31 +01:00
Frank Brendel
5b6b56aac8
netflow: improve error handling in rc.d script ( #3658 )
2019-10-27 15:08:33 +01:00
Ad Schellevis
9cbc0aa5af
HASync, oops, needed an array. also for https://github.com/opnsense/core/issues/3779
2019-10-24 10:22:18 +02:00
Ad Schellevis
63769daaa9
HAsync, missed a spot for https://github.com/opnsense/core/issues/3779
2019-10-24 10:18:43 +02:00
Ad Schellevis
c6cb6df8ff
HASync, add interface groups for https://github.com/opnsense/core/issues/3779
2019-10-24 10:09:28 +02:00
Franco Fichtner
953ada8761
system: Syslog-ng 3.24
2019-10-23 16:20:49 +02:00
Ad Schellevis
ac80046261
access space in previous
2019-10-18 08:58:38 +02:00