12194 Commits

Author SHA1 Message Date
Ad Schellevis
a68ed580d0 CaptivePortal - connected since misformatted due to datetime already being converted in bootgrid, 2e5d8ecf75/src/opnsense/www/js/jquery.bootgrid.js (L1219-L1226) 2021-11-15 20:00:32 +01:00
kulikov-a
035dc45063
IDPS: handle empty metadata value (#5357) 2021-11-15 17:09:26 +01:00
Franco Fichtner
3585c06da6 firmware: only fetch changelogs if the server file changed 2021-11-15 14:18:47 +01:00
Franco Fichtner
2a4c3a4869 firmware: add a configuration file and fix prompt hint 2021-11-15 13:35:14 +01:00
Ad Schellevis
b567ddb1f1 Firewall / Rules - drop policy based routing validation on interface rules as discussed in https://github.com/opnsense/core/issues/5329#issuecomment-968704455 2021-11-15 10:58:19 +01:00
Ad Schellevis
c28567ec1d IDPS: support multiple policy property in metadata, closes https://github.com/opnsense/core/issues/5350
o allow repetitive metadata tags to be used, representing them as multiline options. Since \n can't exist in rules it should be rather save to concat repeating entries
o convert multiline items in the UI (rule info) (convert \n --> <br/>)
2021-11-14 18:59:43 +01:00
Ad Schellevis
012376323a logging / relayd - move syslog target to plugin where it belongs [1], for https://github.com/opnsense/plugins/issues/2643 2021-11-11 19:09:00 +01:00
Franco Fichtner
c9d4643066 ipsec: add copyright to new tunnels template 2021-11-11 08:10:24 +01:00
Franco Fichtner
1b0e30415e interfaces: add a comment to new block 2021-11-10 13:08:42 +01:00
Franco Fichtner
1d785d83eb firmware: also here of course 2021-11-09 13:38:45 +01:00
Franco Fichtner
f68816a8c2 src: fix a couple of stray whitespace issues 2021-11-09 13:33:11 +01:00
Franco Fichtner
9b7c35a630 interfaces: style 2021-11-09 13:15:30 +01:00
Franco Fichtner
6de63630ef system: do not embed link twice 2021-11-09 13:04:09 +01:00
Franco Fichtner
44d015f053 firmware: implement cross-ABI reinstall #5144 2021-11-09 09:46:58 +01:00
Franco Fichtner
c4918b4c99 firmware: change CORE_ALTABI to taret ABI detection for #5144 2021-11-09 09:12:24 +01:00
Franco Fichtner
354d5e09f2 system: better cleanup of *.pkgsave files
These mostly appear on development systems but are basically
not required in any case.
2021-11-09 07:36:06 +01:00
Franco Fichtner
e22a0656f8 system: deal with legacy.conf remnants #5337 2021-11-08 13:42:54 +01:00
Franco Fichtner
0a5d8c71f2 firmware: prep for 22.1.b1 2021-11-08 12:46:35 +01:00
Franco Fichtner
1d43ed1cce system: rename for #5337 2021-11-08 09:52:52 +01:00
Franco Fichtner
8f481dfcc0 system: remove $restart and $async flags
See: https://github.com/opnsense/core/commit/d8c6c21f11e
See: https://github.com/opnsense/core/commit/4e9a8abf987
2021-11-08 09:47:12 +01:00
Ad Schellevis
4b1bb2af98 syslog: remove killbyname('syslogd'); as the service is gone. for https://github.com/opnsense/core/issues/5337 2021-11-08 09:37:04 +01:00
Ad Schellevis
b3e3391943 Syslog - remove clog support
remove all remnants from syslogd and circular log support excluding support from the log readers. When a user upgrades and was using clog, the old files remain and are still readable from the ui, new entries are generated into our syslog-ng directory structure.

for https://github.com/opnsense/core/issues/5337
2021-11-05 21:17:35 +01:00
Franco Fichtner
4aba8cae5d ipsec: back out link_interface_to_ipsec() changes that are not required 2021-11-04 10:32:43 +01:00
Franco Fichtner
29bd7f49c5 interface: small cleanup for #5334 2021-11-04 10:08:24 +01:00
Ad Schellevis
23c80c4083 Interfaces - shift check and improve logging a bit for https://github.com/opnsense/core/issues/5334 2021-11-04 09:43:51 +01:00
Franco Fichtner
27d30a7479 src: style sweep 2021-11-03 19:40:02 +01:00
Franco Fichtner
55ed3528c1 interfaces: comment style and info update 2021-11-03 19:36:17 +01:00
Ad Schellevis
2808a62b84 Interfaces - log and exit interface_configure() when device node doesn't exist, for https://github.com/opnsense/core/issues/5334 2021-11-02 21:33:58 +01:00
Ad Schellevis
abba23fda5 Interfaces - add description to ifconfig output, closes https://github.com/opnsense/core/issues/5331
Since -accept_rtadv is always executed, we can combine setting a description to prevent another call to ifconfig, we already need quite some calls which can slowdown configuration.
(FreeBSD 13 seems to be faster, but limiting calls in this case seems like a fair trade)
2021-11-02 19:06:06 +01:00
Ad Schellevis
ecb34928fb VPN / IPSec / Tunnel settings - Change overview page to support pagination lowering load times on large setups, closes https://github.com/opnsense/core/issues/5279
o remove legacy page and references
o bug fix delete phase 1 button (using wrong id)
2021-11-02 14:46:56 +01:00
Ad Schellevis
da936ef321 MVC - UIBootgrid, prevent event propagation to avoid click() events being forwarded to the row when rowSelect is used. 2021-11-02 14:04:58 +01:00
Ad Schellevis
6e9484e7cc VPN / IPSec / Tunnel settings - Change overview page to support pagination lowering load times on large setups (https://github.com/opnsense/core/issues/5279)
o add phase1/2 to grid heading on load
2021-11-01 21:46:09 +01:00
Ad Schellevis
022e5b4ce4 Firmware - mirrors, remove unavailable Hostcentral mirror 2021-10-31 20:46:36 +01:00
Ad Schellevis
42e8f99918 VPN / IPSec / Tunnel settings - Change overview page to support pagination lowering load times on large setups (https://github.com/opnsense/core/issues/5279)
o add legacy control buttons (edit, clone)
o refactor LegacySubsystemController to include "enable" status and simplify applyConfigAction to be more or less the same as its mvc cousins
o add alternate id fields for phase1/2 search actions
o add toggle phase[1|2] actions
o add toggle IPsec enable action
o copy legacy "apply changes" dialog from key_pairs.volt
2021-10-31 19:49:26 +01:00
Ad Schellevis
3be0173e55 System/Wizard - omit dhcp config when not available, closes https://github.com/opnsense/core/issues/5316 2021-10-30 20:06:17 +02:00
kulikov-a
149564b96a
add live view templates ACL (#5327) 2021-10-31 10:58:31 +01:00
Ad Schellevis
3527717787 VPN / IPSec / Tunnel settings - new overview page, hook in phase1/2 delete actions. for https://github.com/opnsense/core/issues/5279
o since ikeid is unique for a phase1 entry, we should use it as a unique key there.
o phase2 entries don't have a unique key, in which case we can only fallback to sequence, which has concurerrency issues.
2021-10-30 19:46:00 +02:00
kulikov-a
898c1d58f1
Trust / Authorities - get keyid string (#5323)
regression in 5b9d7baccb
2021-10-30 18:22:06 +02:00
Ad Schellevis
b585c331e5 VPN / IPsec / Advanced settings - add sha256_96 flag, minor cleanups for https://github.com/opnsense/core/pull/5321 2021-10-29 19:31:57 +02:00
Patrick M. Hausen
1d733fb95c
VPN / IPsec / Advanced settings - add sha256_96 flag (#5321) 2021-10-30 18:08:24 +02:00
kulikov-a
eab536021e
add new line (#5320)
add trailing new line after each file included so as not to control its presence in each inclusion
2021-10-30 15:50:26 +02:00
Franco Fichtner
412027a885 firmware: new alpha with RSS 2021-10-29 12:28:06 +02:00
Larry Rosenman
510aec3a3f
revise help link for google drive to point to (#5317) 2021-10-29 08:30:54 +02:00
Franco Fichtner
a763313d13 system: remove broken code 2021-10-29 07:54:04 +02:00
Ad Schellevis
2202b028df IPsec - VTI device [re]creation. could be https://github.com/opnsense/core/issues/5263
When local or remote isn't set to an ip address every configure will start removing the current device (and thus routes), although hostnames will likely always be a bit wacky (needs resolving, might change in which case the underlaying components likely miss the event). It's probably still a good idea to resolve when no addresses are used before concluding a device has changed.

In the process change ipsec_resolve() to support both IPv4 and IPv6, but to limit risk, keep callers at IPv4 (which was the old behaviour), since it's not entirely sure we can use the phase 1 protocol for the tunnel itself as well.
2021-10-28 20:13:55 +02:00
Franco Fichtner
bf2b1efa73 interfaces: copy+paste fail in refactor of scoped IPv6 acquire
PR: https://forum.opnsense.org/index.php?topic=25162.0
2021-10-28 16:45:42 +02:00
Ad Schellevis
1c34b86cb5 IDPS: hook et-open to suricata 5 ruleset including migration, brings 41eefdd105 back in 2021-10-28 14:21:22 +02:00
Franco Fichtner
2230a95553 src: style sweep 2021-10-27 10:55:34 +02:00
Ad Schellevis
2fc0287c2f Dashboards / interfaces_list - missing </td>, closes https://github.com/opnsense/core/pull/5302 2021-10-26 18:22:13 +02:00
Ad Schellevis
fed83ecb5a VPN / IPSec / Tunnel settings - work in progress for https://github.com/opnsense/core/issues/5279
bugfix previous
2021-10-26 17:00:51 +02:00