Franco Fichtner
ac0dc0ff89
firewall: fix bootstrap-select update fallout
...
data-width="auto" use is probably still broken in a few places
but better fix these per user report.
2023-11-22 14:30:32 +01:00
Ad Schellevis
928d2f8299
VPN: IPsec: Connections - remote authentication. Add support for radius class groups. closes https://github.com/opnsense/core/pull/6826
...
Add groups attribute to remote auth, to avoid random input hook the names to our local account management and require the user to create a local group first, which is similar to other areas of our system. We don't have to store the membership in this case in our local user db.
Only enable "class_group" attribute when there is at least one enabled connection using these groups.
2023-11-22 14:00:00 +01:00
Franco Fichtner
020cac564b
interfaces: fix slectpicker sizing
2023-11-22 12:17:52 +01:00
Ad Schellevis
286ed62e6e
VPN: IPsec: Connections - add aes256-sha256 without PFS to the list, closes https://github.com/opnsense/core/issues/6928
2023-11-22 11:40:15 +01:00
Franco Fichtner
9d818e51e6
system: refactor get_single_sysctl() while here #6969
2023-11-22 09:59:25 +01:00
Franco Fichtner
ace7740da0
openvpn: multi-line text in XML has clear disadvantages
...
... for the translations embedding all kinds of weird whitespace
pattern that cause syntax errors in gettext compile worst case.
2023-11-22 09:36:40 +01:00
Ad Schellevis
00532bc31e
VPN: OpenVPN: Instances - be more specific about nobind. ref https://github.com/opnsense/core/issues/7028
2023-11-22 09:13:31 +01:00
Franco Fichtner
56d2ea6ce5
Revert "interfaces: follow upstream commit"
...
This reverts commit 60b1397c246b5cb41dcd001d793261412a6d92d0.
2023-11-22 08:43:43 +01:00
Franco Fichtner
60b1397c24
interfaces: follow upstream commit
...
See: https://reviews.freebsd.org/D38908
2023-11-22 08:32:49 +01:00
Franco Fichtner
0127f1deec
firmware: asset cache refresh before long running action
...
Move to firmware configuration script for neatness.
2023-11-22 08:09:21 +01:00
Franco Fichtner
8bcc796304
src: style sweep
2023-11-22 07:49:41 +01:00
Ad Schellevis
6cd5d2e67b
dhcp: offer KEA as DHCPv4 alternative - high-availabilty and control agent ( https://github.com/opnsense/core/issues/6971 )
...
Offer configuration access for the kea control agent needed for high availabilty and basic peer setup.
o add Control Agent menu item with basic settings
o split dhcpv4 settings in general and ha
o add peer configuration
2023-11-21 21:38:54 +01:00
Franco Fichtner
3f25fa25ab
web proxy: fix setting unknown directory
...
Not great, needs a full refactor.
2023-11-21 17:25:36 +01:00
Ad Schellevis
e76bc6ead8
configd / configuration templates - add helpers.file_exists to check for file existence. closes https://github.com/opnsense/core/issues/7023
2023-11-21 16:45:43 +01:00
Ad Schellevis
eb74bd05ff
VPN: IPsec: Virtual Tunnel Interfaces - add secondary tunnel address pair for dual-stack purposes. closes https://github.com/opnsense/core/issues/6777
2023-11-21 16:18:57 +01:00
Ad Schellevis
3f5bec4a1e
VPN: IPsec: Virtual Tunnel Interfaces - fix typo in protocol family parsing, part one of https://github.com/opnsense/core/issues/6777
2023-11-21 16:08:09 +01:00
Ad Schellevis
ada90c819a
Interfaces: Diagnostics: Packet Capture - missing type="button" toggling button on enter.
2023-11-21 13:33:56 +01:00
Franco Fichtner
137e7af193
interfaces: improve VIP validation, fix broadcast generation
...
In a /31 there are only two addresses and these are generally
allowed to be used so adjust the network/broadcast check to
only trigger on /30 or below.
2023-11-21 09:12:15 +01:00
Franco Fichtner
f509117ff4
mvc: style update
2023-11-21 08:44:41 +01:00
Ad Schellevis
e36123c99f
MVC / ApiMutableModelControllerBase - scope xxxBase validations to the item in question, which should prevent automatically applied defaults triggering validation issues which can't be fixed from the caller in question. To prevent setAction() not triggering on consecutive calls we should validate all items when executed.
...
Ideally we should only force validation on the requested node and its children, but since we currently don't have a method for this and the performance decrease is likely low, we just request full validation on performValidation().
closes https://github.com/opnsense/core/issues/6978
2023-11-20 20:19:26 +01:00
0nnyx
30146f1757
Update sslbl.xml ( #7021 )
...
ruleset using sticky buffers, which comes with a performance increase compared to the standard ruleset - see https://urlhaus.abuse.ch/api/#ids
2023-11-20 19:44:37 +01:00
Franco Fichtner
3d68d98e47
interfaces: dot validate vip without a netmask
2023-11-20 14:51:35 +01:00
Ad Schellevis
ad40bb99ce
ystem: Trust: Revocation - add uniqueness validation, closes https://github.com/opnsense/core/issues/7015
2023-11-20 13:26:25 +01:00
Stephan de Wit
8d2cfd21dd
dashboard: point gateways widget in the right direction
2023-11-20 08:56:32 +01:00
Franco Fichtner
10458747e2
firewall: mock selection in title for consistency; closes #7016
...
Do not translate these values in case the translation would make
this more weird than it has to be.
2023-11-16 12:12:37 +01:00
Franco Fichtner
8b378cd4e7
ui: unify dropdown width
...
Fix a nasty scroll bar bug with alias proto selector, style
and adjust all manual widths accordingly. For a strange reason
the text inputs are 2px shorter in the base forms than the modals
and the static pages so adjust the width to 346 in that case.
2023-11-16 11:29:16 +01:00
Ad Schellevis
2a58142ddb
Captive Portal - fix log target so we don't subscribe to other services logging.
2023-11-16 09:10:19 +01:00
Franco Fichtner
b7f34d02eb
ipsec: mute ipsec.conf related load errors
...
PR: https://forum.opnsense.org/index.php?topic=33126.0
2023-11-15 20:45:04 +01:00
Franco Fichtner
11209256e2
openvpn: log line style
2023-11-15 16:40:53 +01:00
Ad Schellevis
bdaa47ee35
VPN: OpenVPN - obey username_as_common_name setting, closes https://github.com/opnsense/core/issues/6915
2023-11-15 16:18:36 +01:00
Ad Schellevis
59d599b2c8
VPN: OpenVPN: Client Specific Overrides - add log entry when searching for a CSO, might help track https://github.com/opnsense/core/issues/6915
2023-11-15 14:04:53 +01:00
Franco Fichtner
fdc8cc34fa
firewall: move click() from tr to button #6991
...
Plus minor cleanups.
2023-11-15 10:15:06 +01:00
Ad Schellevis
5aaada600a
Firewall / Rules - add section for automatic rules being added at the end of the ruleset. Although technically the presentation is not 100% accurate (shown before rules, after groups), the text should be clear enough now. closes https://github.com/opnsense/core/issues/6991
2023-11-15 09:58:33 +01:00
Franco Fichtner
db4b90d218
ui: improve saveFormToEndpoint() UX; closes #6898
...
One of the issues with disabling the "bug" dialog are tabbed
pages. This removes some of the "bug" dialogs where validation
is properly rendered in the form, but also opens the probable
tab where the validation errors are thrown to better locate them.
2023-11-14 14:59:45 +01:00
Franco Fichtner
3fc63f4452
mvc: instead of failing invalidate a non-match
2023-11-14 14:02:17 +01:00
Franco Fichtner
49a531f33e
firewall: allow multiple networks given to wrap in the GUI
2023-11-14 13:28:45 +01:00
Ad Schellevis
58f5afba8e
config - lock access to root and wheel group (ro), to align with backup storage. closes https://github.com/opnsense/core/issues/6831
2023-11-14 10:29:20 +01:00
Franco Fichtner
56404c7c03
src: style sweep
2023-11-14 09:38:35 +01:00
Franco Fichtner
6f8b460c00
system: fix a couple of PHP warnings in auth servers
2023-11-14 09:38:07 +01:00
Franco Fichtner
b8b3da07db
firmware: fold this down to the portable opnsense-update -X call
2023-11-14 09:33:12 +01:00
Jeremy Huylebroeck
2921576302
System: Configuration: Backups - adds support for Google Shared drives and some minor cleanups. closes https://github.com/opnsense/core/issues/7008
2023-11-14 08:38:11 +01:00
Ad Schellevis
22f939bb8d
MVC / MenuInitException - handle broken menu xml files more gracefully, dump to error log, but don't crash out with a fatal exception.
2023-11-13 10:08:01 +01:00
Ad Schellevis
53b8f0f8f0
plist-fix
2023-11-12 19:15:28 +01:00
Ad Schellevis
a94757f9e0
Kea / Dhcp - DHCPv4 replacement, add basic leases (v4) grid https://github.com/opnsense/core/issues/6971
2023-11-12 19:13:54 +01:00
Franco Fichtner
c53393c612
src: style sweep
2023-11-12 15:00:02 +01:00
Ad Schellevis
d16683d7fa
remove OpenSSL flavor from bug template ( https://github.com/opnsense/src/pull/189 )
2023-11-11 15:42:17 +01:00
Ad Schellevis
39bc101684
Kea / Dhcp - DHCPv4 replacement, add hostname in reservations https://github.com/opnsense/core/issues/6971
2023-11-11 09:48:18 +01:00
Franco Fichtner
29d456e877
interfaces: uasort() is required, key was binding address
2023-11-11 09:22:09 +01:00
Ad Schellevis
392a549c9f
VPN: WireGuard: Settings - minor regression in addClient, not adding created uuid. ( 47ccdcc078)
2023-11-10 18:47:32 +01:00
Ad Schellevis
7dc48d47fb
MVC: searchable arrays in searchRecordsetBase(), simplify 89a60bfdae cc @swhite2
2023-11-10 18:36:51 +01:00