13132 Commits

Author SHA1 Message Date
Franco Fichtner
af7543e79b firmware: visibility issue on #5136 2021-08-05 13:05:23 +02:00
Franco Fichtner
1c895ed435 firmware: also check plugins for up to date core pkg #5136 2021-08-05 10:05:23 +02:00
Franco Fichtner
4ff5fe0365 openvpn: same same but different 2021-08-05 09:58:55 +02:00
Ad Schellevis
98ac4f4d77 OpenVPN - regression in dc6215633a adding "client-config-dir" when server directive isn't set on a /30 tunnel. 2021-08-05 09:55:24 +02:00
Ad Schellevis
5c9341820d Interface / Diagnostics / Netstat - add tree search and improve layout a bit 2021-08-03 19:04:57 +02:00
Ad Schellevis
f969d857ad firewall - make sure net.pf.request_maxcount and table-entries are always aligned, related to https://github.com/opnsense/core/issues/5127 as discussed with @fichtner 2021-08-03 18:18:39 +02:00
Franco Fichtner
6799f2e624 src: whitespace sweep 2021-08-03 12:34:27 +02:00
Franco Fichtner
f9f9dd28c1 firmware: remove spurious grep 2021-08-03 12:30:10 +02:00
Franco Fichtner
16a3559747 firmware: replace php with pkg version compare
As a small bonus now also corectly check if an upgrade
for opnsense-update is available.  If not, we are now
able to ignore the downgrade.
2021-08-03 12:23:54 +02:00
Franco Fichtner
5969d20641 firmware: backend now supports reinstall like opnsense-bootstrap -q 2021-08-03 11:49:20 +02:00
Franco Fichtner
4472a23596 firmware: switch to FreeBSD where appropriate 2021-08-02 21:48:29 +02:00
Ad Schellevis
5c9ac97e17 Javavscript: update jQtree to 1.6.1 2021-08-02 17:31:25 +02:00
Franco Fichtner
e16b1343eb pkg: fix plist 2021-08-02 12:26:59 +02:00
Ad Schellevis
f886c24f90 Dashboard / widgets - use ifinfo counters instead of pfctl in interface traffic widget. closes https://github.com/opnsense/core/issues/5137 2021-08-02 11:37:54 +02:00
Franco Fichtner
580e6c7cc8 unbound: automatically add do-not-query-localhost: no when needed
Hasn't been in the system for quite some time but since we set
forward-addr we likely expect it to allow a query to it.
2021-08-02 10:08:55 +02:00
Franco Fichtner
2fa400beca unbound: automatically add do-not-query-localhost: no on DoT when needed 2021-08-02 10:08:02 +02:00
Franco Fichtner
eb72ff6d8a unbound: reject invalid cache data 2021-08-02 09:53:58 +02:00
Franco Fichtner
56af05bb7b mvc: bring back bind_textdomain_codeset() removed in f3e2f8ea3e; closes #5071
PR: https://github.com/opnsense/core/issues/5132
2021-08-02 08:10:24 +02:00
Ad Schellevis
54e14d4ddd unbound - dhcp watcher, support configurable domains per ip range, add required configuration file (configd template)
closes  https://github.com/opnsense/core/issues/5118
2021-08-01 14:59:19 +02:00
Ad Schellevis
b9b6e3eb8d System / Trust - split between generic server use in cert_get_purpose() and id-kp-serverAuth according to rfc3280, for https://github.com/opnsense/core/issues/5128 2021-08-01 11:37:42 +02:00
Franco Fichtner
7165b665eb firmware: sync plugins in console update; closes #5136 2021-08-01 11:27:05 +02:00
Ad Schellevis
ccd00f6875 Firewall / Rules - state options only make sense when there's some sort of state. closes https://github.com/opnsense/core/issues/5133 2021-08-01 10:55:41 +02:00
Ad Schellevis
2909e86088 unbound - dhcp watcher, support configurable domains per ip range, for https://github.com/opnsense/core/issues/5118 2021-07-30 23:01:55 +02:00
Ad Schellevis
41b311ecc2 Revert "Firewall / Aliases - append most likely cause for pfctl error (Invalid argument isn't very explanatory by itself). closes https://github.com/opnsense/core/issues/5127"
This reverts commit 2ea90801290856f453126b1e6d63e66c79a5ca6f.
2021-07-30 18:45:40 +02:00
Ad Schellevis
2ea9080129 Firewall / Aliases - append most likely cause for pfctl error (Invalid argument isn't very explanatory by itself). closes https://github.com/opnsense/core/issues/5127 2021-07-30 17:47:18 +02:00
Franco Fichtner
2b0c2caa44 unbound: support insecure-domain for #5104 2021-07-30 14:38:30 +02:00
Franco Fichtner
00062ae8f8 openvpn: improve the cipher parsing
It had verbose text in it.  Sort better while here.
2021-07-30 13:46:48 +02:00
Franco Fichtner
c5c622fd77 openvpn: untie server-ipv6 from server directive
PR: https://forum.opnsense.org/index.php?topic=24094.0
2021-07-30 13:25:09 +02:00
Franco Fichtner
51e7ba17d5 src: style sweep 2021-07-30 13:00:10 +02:00
Franco Fichtner
1176f829cb openvpn: remove remnamts of tun-ipv6
PR:       https://forum.opnsense.org/index.php?topic=24094.15
See also: https://community.openvpn.net/openvpn/wiki/DeprecatedOptions#Option:--tun-ipv6
2021-07-30 12:52:22 +02:00
Franco Fichtner
60d62437f2 ui: rewor the rework of the subnet selector; closes #5129 2021-07-30 12:33:33 +02:00
Ad Schellevis
be8a6cd514 VPN / OpenVPN / Client Export - return empty list when /api/openvpn/export/accounts/ is called without parameters.
found some of these in the crash reports:  ArgumentCountError: Too few arguments to function OPNsense\OpenVPN\Api\ExportController::accountsAction(), 0 passed and exactly 1 expected in /usr/local/opnsense/mvc/app/controllers/OPNsense/OpenVPN/Api/ExportController.php:204
2021-07-29 13:57:08 +02:00
Ad Schellevis
8622b93c15 Interfaces / Diagnostics / Packet Capture - fix "PHP Warning: in_array() expects parameter 2 to be array, null given in /usr/local/www/diag_packet_capture.php on line 355" 2021-07-29 13:49:21 +02:00
braninl
9f60452eb9
Update AliasField.php to fix misspelling (#5122)
Fixed the misspelling of limitting to limiting.
2021-07-29 07:32:39 +02:00
Ad Schellevis
92f96b2aa0 Interfaces / Diagnostics / Packet Capture - easy (de)select all interfaces button, saves some work when trying to figure out where traffic is leaving. 2021-07-28 18:21:08 +02:00
Ad Schellevis
4738eb409e OpenVPN/Server - genkey format changed, leading to warnings. ref 0d80b562e4 2021-07-28 11:19:24 +02:00
Franco Fichtner
f331061387 firmware: changes for EoL of 21.1
o Remove revoked business fingerprints that were never used
o Revoke fingerprint for 21.1 as it is no longer needed
o Remove upgrade hint file to avoid development version upgrade loops
2021-07-27 16:04:57 +02:00
Franco Fichtner
10e25cdf87 firmware: final stepping stone 2021-07-27 07:55:55 +02:00
Franco Fichtner
4ae1555e07 firewall: change "proto" to "protonum" to avoid ambiguity 2021-07-23 09:02:22 +02:00
Franco Fichtner
538e2f04c2 firewall: update filterlog reader slightly
CARP in IPv4 and IPv6 uses the IP header's "ttl" or "hoplimit" so
that we use the same name for reading it to avoid duplication.
The values are the same in any case.

Change "flowlabel" to "flow" to avoid confusion with "label".

Change IP "version" to "ipversion" and consolidate CARP "version(2)"
into "version".
2021-07-23 08:14:36 +02:00
Franco Fichtner
1aeb520631 firewall: parse ridentifier as rid if != '0' #5016 2021-07-22 17:34:02 +02:00
Franco Fichtner
5979fb50e5 mvc: give a little more context on default error; closes #5061 2021-07-22 12:24:31 +02:00
Franco Fichtner
bf8604d9b8 plugins: widen error scope loosely related to #5061 2021-07-22 12:07:17 +02:00
Franco Fichtner
4bdc777bef mvc: catch all errors (including syntax error and class not found)
PR: https://github.com/opnsense/core/issues/5061
2021-07-22 11:56:46 +02:00
Franco Fichtner
8f5f53121e system: allow cron-based restarts of all [restart] providers; closes #5030 2021-07-22 10:42:13 +02:00
Franco Fichtner
5e860053e1 firmware: mask subscription in GUI output 2021-07-22 10:16:04 +02:00
kulikov-a
35b373407c
openvpn: check ipv4 tunnel prefix. v2 (#5114)
* wizard.inc: check ipv4 tunnel prefix
* vpn_openvpn_server.php: check ipv4 tunnel prefix
2021-07-22 09:02:55 +02:00
Ad Schellevis
be90cf00a6 Firewall / Diagnostics / States, Sessions - fix some minor glitches.
o mark unsortable columns
o fix type validations (avg=* isn't an int).
o better to return an empty structure than [], avoid JS errors in the frontend
2021-07-21 18:49:10 +02:00
kulikov-a
74ccf1683b
wizard.inc: make working rules (#5112) 2021-07-21 19:13:28 +02:00
Franco Fichtner
5028c93393 pkg: actually demote to warning 2021-07-21 09:20:29 +02:00