Ad Schellevis
b02c7bb02f
Fix style issues for https://github.com/opnsense/core/pull/3768 and make sure openssl_pkey_get_private using the correct params ( https://www.php.net/manual/en/function.openssl-pkey-get-private.php ).
2019-10-17 18:41:08 +02:00
Ad Schellevis
7431745c71
Merge branch 'master' of https://github.com/strima/core into strima-master
2019-10-17 17:51:17 +02:00
Franco Fichtner
bdfefacbc3
system: partial removal on previous #3770
2019-10-17 09:36:34 +02:00
Franco Fichtner
1a5da5c0a6
system: correct sysctl description; closes #3770
2019-10-17 09:35:26 +02:00
Martin Strigl
f0efe0f014
* added getKeyType to correctly handle private key type and therefore skip hardcoded RSA type in ipsec.secrets
2019-10-16 21:30:00 +02:00
Franco Fichtner
9299386602
system: fix PHP loop fail in tunable
...
Maybe 7.2.23 is broken, never seen this before. oO
PR: https://forum.opnsense.org/index.php?topic=14652.0
2019-10-14 09:23:29 +02:00
Ad Schellevis
4f3781cfa9
dpinger: missing $gateways_arr in dpinger_status(), closes https://github.com/opnsense/core/issues/3759
2019-10-13 15:18:11 +02:00
Ad Schellevis
d5bd3a6cb7
dpinger: add details to status, so we can easily reproduce the outcome. for https://github.com/opnsense/core/issues/3759
2019-10-13 12:52:21 +02:00
Ad Schellevis
bb7557d38f
pluginctl, add run mode, so we can execute things like "pluginctl -r return_gateways_status". easier to ask the user when debugging.
...
while looking into https://github.com/opnsense/core/issues/3759
2019-10-13 12:39:09 +02:00
Ad Schellevis
7a5a2712cd
tokenize2 fix for https://github.com/opnsense/core/issues/3760
...
a4217d8fcc calls tokenize2() before it seems to be inititalized, lets check for content before calling clear.
2019-10-10 20:54:55 +02:00
Frank Wall
89918fc1de
captive portal/ipsec: add description to restart actions ( #3755 )
2019-10-10 14:49:04 +02:00
sooslaca
69139fcbb2
Hide leaking hostname on SSH password auth ( #3754 )
2019-10-10 13:35:50 +02:00
Ad Schellevis
817be51986
configd: improve error handling while configd is either not active or not functional.
...
- reconnecting the socket stream_socket_client() is safe while not executing commands
- if configd dies during communication, we should log and retun an empty response. The caller should handle operation, since you can't be sure restarting the action is a safe operation.
closes https://github.com/opnsense/core/pull/3744
2019-10-10 09:59:08 +02:00
Franco Fichtner
65212fcded
pkg: can't help it, change space to tab :D
2019-10-09 19:40:08 +02:00
Ad Schellevis
c4fba1c62e
LDAP/StartTLS userimport, start using correct url and move logic to legacy page. for https://github.com/opnsense/core/issues/3445
2019-10-09 17:52:21 +02:00
Ad Schellevis
ec613d3042
switch to suricata 5.0.0-rc1 for -devel version
2019-10-09 16:15:01 +02:00
Ad Schellevis
1a46ff7399
Firewall/Log, uppercase IPv6 proto, closes https://github.com/opnsense/core/issues/3734
2019-10-07 21:40:18 +02:00
Ad Schellevis
da4a241cfd
Firewall/SourceNat, don't store interace address, but a reference. closes https://github.com/opnsense/core/issues/3712
2019-10-07 21:34:48 +02:00
Ad Schellevis
371447e6f1
system_certmanager.php: download p12, disable button when confirm<>password. closes https://github.com/opnsense/core/issues/3739
2019-10-07 20:44:28 +02:00
Franco Fichtner
d976413808
interfaces: fpassthru() crashes with memory exceeded
...
Use a hybrid fix of the old and new code.
PR: https://forum.opnsense.org/index.php?topic=13897.0
2019-10-07 16:50:45 +02:00
Franco Fichtner
9f10421ac6
scripts: PSR12 style fixes test drive
...
Mostly spacing around = , + - etc with a dash of conditional
formatting madness, but rules are rules.
2019-10-07 16:17:37 +02:00
Franco Fichtner
26a6738036
make: change to PSR12 standard style, lots of noise coming up
2019-10-07 16:17:37 +02:00
Franco Fichtner
046d821fef
ipsec: clear $dpdline correctly if not set #3752
2019-10-07 16:07:05 +02:00
Franco Fichtner
7ff6b2013f
firmware: we need to be aware of locks here
2019-10-07 11:35:21 +02:00
Franco Fichtner
b4929f5332
firmware: use opnsense-revert to reinstall
...
Since the health check complains about a lot of different things
and opnsense-revert can repair most of it it is only fair to offer
this fix through GUI reinstall buttons via opnsense-revert for
an overly pleasing UX.
2019-10-07 11:15:09 +02:00
Franco Fichtner
c83daaa54b
sbin: usage print tweaks
2019-10-07 11:07:47 +02:00
Franco Fichtner
690602ecd5
system: bump memory limit to 512MB
...
Was waiting for ticket, but never came. On 20.1 we are not bound to
i386 so we can up this value, something about FRR not beging able to
handle large deployments.
2019-10-07 08:50:04 +02:00
Ad Schellevis
09c34b272f
authservers: PHP Warning: implode(): Invalid arguments ... , closes https://github.com/opnsense/core/issues/3742
2019-10-05 17:57:07 +02:00
Ad Schellevis
b2affd161d
LDAP, hook ssl/tls setup into system wide system_trust_configure() for https://github.com/opnsense/core/issues/3742 and cleanup settings.
2019-10-04 09:14:36 +02:00
Ad Schellevis
6f246b0b30
add mirror [MARWAN (Moroccan Academic & Research Wide Area Network)]
2019-10-03 18:50:59 +02:00
Franco Fichtner
9f853b8149
make: magical part of the syslog-ng version integration
2019-10-02 07:57:31 +02:00
Franco Fichtner
c9e395e6f8
system: replace syslog-ng version via build
...
Next step is using a form of CORE_SYSLOGNG to select
the syslog-ng package suffix. More testing needed.
2019-10-01 22:45:09 +02:00
Ad Schellevis
cf28023d16
Syslog, new version number in config file... should match running syslog-ng version
2019-10-01 18:34:41 +02:00
Franco Fichtner
d62277ca8f
LICENSE: sync
2019-10-01 14:35:53 +02:00
Franco Fichtner
b2560c6eb4
services: split code to get rid of shallow services.inc #3736
2019-10-01 08:33:15 +02:00
Franco Fichtner
9c3cfc58c4
plugins: make pluginctl service restart verbose
2019-10-01 08:09:43 +02:00
Franco Fichtner
6bb03c1806
firewall: remove two sentences via IRC question raised
...
The default implies to leave it that way if unsure. The ominous
warning means nothing without explanation, but the effect is
clear for people wanting to use another setting for direction:
o Egress rules filter on outbound, so half the performance passing
traffic inwards is already wasted by not dropping it on inbound.
o Egress rules cannot set policy routes since policy routes set
outbound interface on inbound and thus the decision was already
made.
2019-09-30 09:28:39 +02:00
Franco Fichtner
d2500110ea
services: typo
2019-09-30 07:36:14 +02:00
Franco Fichtner
5868dda2cf
services: remove services_get() by flattening it into plugins_services()
2019-09-30 07:27:43 +02:00
Franco Fichtner
00eedc8f67
dhcp: should work without global include now
2019-09-30 07:16:08 +02:00
Franco Fichtner
6be4951dbf
dhcp: typo spotted by @azdps
2019-09-30 07:10:48 +02:00
Franco Fichtner
2993ae8dcc
dhcp: factually correct annotation, no clobbering of existing strings
2019-09-29 15:15:33 +02:00
Franco Fichtner
3f69b12fc8
firmware: move echo to more appropriate spot
2019-09-29 12:47:49 +02:00
Franco Fichtner
058ee11a06
firmware: verify mtree signature if there #3473
2019-09-25 13:29:59 +02:00
Ad Schellevis
a4217d8fcc
Tokenize2 / ordered lists mangled when setting the same content twice, closes https://github.com/opnsense/plugins/issues/1494
2019-09-25 13:13:21 +02:00
Ad Schellevis
680bd22980
IPsec: add margintime + rekeyfuzz ( https://wiki.strongswan.org/projects/strongswan/wiki/ExpiryRekey ), closes https://github.com/opnsense/core/issues/3722
2019-09-24 21:53:45 +02:00
Franco Fichtner
08e7fca0fc
firmware: pkg is part of core, no need to double-check #3473
2019-09-24 09:40:59 +02:00
Franco Fichtner
959eea632f
firmware: tie pkg dependency to core #3473
2019-09-24 09:39:59 +02:00
Franco Fichtner
982712a824
firmware: extend health check #3473
2019-09-24 09:09:40 +02:00
stumbaumr
201ed6894f
devd does not pick up on laggX_vlanXXXX devices... ( #3721 )
...
...since the underscore devices are filtered out.
2019-09-24 08:23:36 +02:00