16087 Commits

Author SHA1 Message Date
Franco Fichtner
ac0dc0ff89 firewall: fix bootstrap-select update fallout
data-width="auto" use is probably still broken in a few places
but better fix these per user report.
2023-11-22 14:30:32 +01:00
Ad Schellevis
928d2f8299 VPN: IPsec: Connections - remote authentication. Add support for radius class groups. closes https://github.com/opnsense/core/pull/6826
Add groups attribute to remote auth, to avoid random input hook the names to our local account management and require the user to create a local group first, which is similar to other areas of our system. We don't have to store the membership in this case in our local user db.

Only enable "class_group" attribute when there is at least one enabled connection using these groups.
2023-11-22 14:00:00 +01:00
Franco Fichtner
020cac564b interfaces: fix slectpicker sizing 2023-11-22 12:17:52 +01:00
Ad Schellevis
286ed62e6e VPN: IPsec: Connections - add aes256-sha256 without PFS to the list, closes https://github.com/opnsense/core/issues/6928 2023-11-22 11:40:15 +01:00
Franco Fichtner
9d818e51e6 system: refactor get_single_sysctl() while here #6969 2023-11-22 09:59:25 +01:00
Franco Fichtner
ace7740da0 openvpn: multi-line text in XML has clear disadvantages
... for the translations embedding all kinds of weird whitespace
pattern that cause syntax errors in gettext compile worst case.
2023-11-22 09:36:40 +01:00
Ad Schellevis
00532bc31e VPN: OpenVPN: Instances - be more specific about nobind. ref https://github.com/opnsense/core/issues/7028 2023-11-22 09:13:31 +01:00
Franco Fichtner
56d2ea6ce5 Revert "interfaces: follow upstream commit"
This reverts commit 60b1397c246b5cb41dcd001d793261412a6d92d0.
2023-11-22 08:43:43 +01:00
Franco Fichtner
60b1397c24 interfaces: follow upstream commit
See: https://reviews.freebsd.org/D38908
2023-11-22 08:32:49 +01:00
Franco Fichtner
0127f1deec firmware: asset cache refresh before long running action
Move to firmware configuration script for neatness.
2023-11-22 08:09:21 +01:00
Franco Fichtner
8bcc796304 src: style sweep 2023-11-22 07:49:41 +01:00
Ad Schellevis
6cd5d2e67b dhcp: offer KEA as DHCPv4 alternative - high-availabilty and control agent (https://github.com/opnsense/core/issues/6971)
Offer configuration access for the kea control agent needed for high availabilty and basic peer setup.

o add Control Agent menu item with basic settings
o split dhcpv4 settings in general and ha
o add peer configuration
2023-11-21 21:38:54 +01:00
Franco Fichtner
3f25fa25ab web proxy: fix setting unknown directory
Not great, needs a full refactor.
2023-11-21 17:25:36 +01:00
Ad Schellevis
e76bc6ead8 configd / configuration templates - add helpers.file_exists to check for file existence. closes https://github.com/opnsense/core/issues/7023 2023-11-21 16:45:43 +01:00
Ad Schellevis
eb74bd05ff VPN: IPsec: Virtual Tunnel Interfaces - add secondary tunnel address pair for dual-stack purposes. closes https://github.com/opnsense/core/issues/6777 2023-11-21 16:18:57 +01:00
Ad Schellevis
3f5bec4a1e VPN: IPsec: Virtual Tunnel Interfaces - fix typo in protocol family parsing, part one of https://github.com/opnsense/core/issues/6777 2023-11-21 16:08:09 +01:00
Ad Schellevis
ada90c819a Interfaces: Diagnostics: Packet Capture - missing type="button" toggling button on enter. 2023-11-21 13:33:56 +01:00
Franco Fichtner
137e7af193 interfaces: improve VIP validation, fix broadcast generation
In a /31 there are only two addresses and these are generally
allowed to be used so adjust the network/broadcast check to
only trigger on /30 or below.
2023-11-21 09:12:15 +01:00
Franco Fichtner
f509117ff4 mvc: style update 2023-11-21 08:44:41 +01:00
Ad Schellevis
e36123c99f MVC / ApiMutableModelControllerBase - scope xxxBase validations to the item in question, which should prevent automatically applied defaults triggering validation issues which can't be fixed from the caller in question. To prevent setAction() not triggering on consecutive calls we should validate all items when executed.
Ideally we should only force validation on the requested node and its children, but since we currently don't have a method for this and the performance decrease is likely low, we just request full validation on performValidation().

closes https://github.com/opnsense/core/issues/6978
2023-11-20 20:19:26 +01:00
0nnyx
30146f1757
Update sslbl.xml (#7021)
ruleset using sticky buffers, which comes with a performance increase compared to the standard ruleset - see https://urlhaus.abuse.ch/api/#ids
2023-11-20 19:44:37 +01:00
Franco Fichtner
3d68d98e47 interfaces: dot validate vip without a netmask 2023-11-20 14:51:35 +01:00
Ad Schellevis
ad40bb99ce ystem: Trust: Revocation - add uniqueness validation, closes https://github.com/opnsense/core/issues/7015 2023-11-20 13:26:25 +01:00
Stephan de Wit
8d2cfd21dd dashboard: point gateways widget in the right direction 2023-11-20 08:56:32 +01:00
Franco Fichtner
10458747e2 firewall: mock selection in title for consistency; closes #7016
Do not translate these values in case the translation would make
this more weird than it has to be.
2023-11-16 12:12:37 +01:00
Franco Fichtner
8b378cd4e7 ui: unify dropdown width
Fix a nasty scroll bar bug with alias proto selector, style
and adjust all manual widths accordingly.  For a strange reason
the text inputs are 2px shorter in the base forms than the modals
and the static pages so adjust the width to 346 in that case.
2023-11-16 11:29:16 +01:00
Ad Schellevis
2a58142ddb Captive Portal - fix log target so we don't subscribe to other services logging. 2023-11-16 09:10:19 +01:00
Franco Fichtner
b7f34d02eb ipsec: mute ipsec.conf related load errors
PR: https://forum.opnsense.org/index.php?topic=33126.0
2023-11-15 20:45:04 +01:00
Franco Fichtner
11209256e2 openvpn: log line style 2023-11-15 16:40:53 +01:00
Ad Schellevis
bdaa47ee35 VPN: OpenVPN - obey username_as_common_name setting, closes https://github.com/opnsense/core/issues/6915 2023-11-15 16:18:36 +01:00
Ad Schellevis
59d599b2c8 VPN: OpenVPN: Client Specific Overrides - add log entry when searching for a CSO, might help track https://github.com/opnsense/core/issues/6915 2023-11-15 14:04:53 +01:00
Franco Fichtner
fdc8cc34fa firewall: move click() from tr to button #6991
Plus minor cleanups.
2023-11-15 10:15:06 +01:00
Ad Schellevis
5aaada600a Firewall / Rules - add section for automatic rules being added at the end of the ruleset. Although technically the presentation is not 100% accurate (shown before rules, after groups), the text should be clear enough now. closes https://github.com/opnsense/core/issues/6991 2023-11-15 09:58:33 +01:00
Franco Fichtner
db4b90d218 ui: improve saveFormToEndpoint() UX; closes #6898
One of the issues with disabling the "bug" dialog are tabbed
pages.  This removes some of the "bug" dialogs where validation
is properly rendered in the form, but also opens the probable
tab where the validation errors are thrown to better locate them.
2023-11-14 14:59:45 +01:00
Franco Fichtner
3fc63f4452 mvc: instead of failing invalidate a non-match 2023-11-14 14:02:17 +01:00
Franco Fichtner
49a531f33e firewall: allow multiple networks given to wrap in the GUI 2023-11-14 13:28:45 +01:00
Ad Schellevis
58f5afba8e config - lock access to root and wheel group (ro), to align with backup storage. closes https://github.com/opnsense/core/issues/6831 2023-11-14 10:29:20 +01:00
Franco Fichtner
56404c7c03 src: style sweep 2023-11-14 09:38:35 +01:00
Franco Fichtner
6f8b460c00 system: fix a couple of PHP warnings in auth servers 2023-11-14 09:38:07 +01:00
Franco Fichtner
b8b3da07db firmware: fold this down to the portable opnsense-update -X call 2023-11-14 09:33:12 +01:00
Jeremy Huylebroeck
2921576302 System: Configuration: Backups - adds support for Google Shared drives and some minor cleanups. closes https://github.com/opnsense/core/issues/7008 2023-11-14 08:38:11 +01:00
Ad Schellevis
22f939bb8d MVC / MenuInitException - handle broken menu xml files more gracefully, dump to error log, but don't crash out with a fatal exception. 2023-11-13 10:08:01 +01:00
Ad Schellevis
53b8f0f8f0 plist-fix 2023-11-12 19:15:28 +01:00
Ad Schellevis
a94757f9e0 Kea / Dhcp - DHCPv4 replacement, add basic leases (v4) grid https://github.com/opnsense/core/issues/6971 2023-11-12 19:13:54 +01:00
Franco Fichtner
c53393c612 src: style sweep 2023-11-12 15:00:02 +01:00
Ad Schellevis
d16683d7fa remove OpenSSL flavor from bug template (https://github.com/opnsense/src/pull/189) 2023-11-11 15:42:17 +01:00
Ad Schellevis
39bc101684 Kea / Dhcp - DHCPv4 replacement, add hostname in reservations https://github.com/opnsense/core/issues/6971 2023-11-11 09:48:18 +01:00
Franco Fichtner
29d456e877 interfaces: uasort() is required, key was binding address 2023-11-11 09:22:09 +01:00
Ad Schellevis
392a549c9f VPN: WireGuard: Settings - minor regression in addClient, not adding created uuid. (47ccdcc078) 2023-11-10 18:47:32 +01:00
Ad Schellevis
7dc48d47fb MVC: searchable arrays in searchRecordsetBase(), simplify 89a60bfdae cc @swhite2 2023-11-10 18:36:51 +01:00