9574 Commits

Author SHA1 Message Date
Franco Fichtner
b9ba4f60ea system: fix ACL for previous 2018-10-07 16:19:57 +02:00
Franco Fichtner
913d80037d system: "firmware" log idea inspired by HardenedBSD 2018-10-07 16:13:29 +02:00
Franco Fichtner
777ff4acfd src: style sweep 2018-10-07 14:04:07 +02:00
Franco Fichtner
5828ad5f3d src: whitespace sweep 2018-10-07 14:02:49 +02:00
Franco Fichtner
cbb3cbaa4b pkg: fix plist 2018-10-07 13:59:34 +02:00
Ad Schellevis
8d08b67d28 Firewall/alias, keep previous content for url alias type on fetch error. closes https://github.com/opnsense/core/issues/2793 2018-10-05 22:59:33 +02:00
Ad Schellevis
a00e646ca2 IDS, replace tls.fingerprint with tls_fingerprint for better performance in custom rules 2018-10-05 16:16:00 +02:00
opnsenseuser
81c2ec9721 opnsense theme chrome browser outline fix
opnsense theme chrome browser outline fix
@fichtner
2018-10-05 15:56:56 +02:00
marjohn56
cceb1bcd8c Add FTI/ to password - tidy end of useridhex 2018-10-05 09:49:31 +02:00
Ad Schellevis
89802d77b6 MVC, add SingleSelectConstraint type and fixup unittest, closes https://github.com/opnsense/core/issues/2757 2018-10-04 14:03:44 +02:00
marjohn56
bb5144ed88 Correct missing '"'' at the end of the userclass field 2018-10-04 09:44:17 +02:00
Ad Schellevis
fa461dd77c dhcp/language, align messages (same message used in 3 places) 2018-10-04 08:15:05 +02:00
Ad Schellevis
4709d7b59e OpenVPN/client export, work in progress https://github.com/opnsense/core/issues/2787
Add an empty boilerplate for our new client export module
2018-10-03 18:04:38 +02:00
Ad Schellevis
943ca1f6b2 config/legacy, speedup parsing very large config files.
When using toArray() on a config, it would try to detect sequential items by reading all keys using isArraySequential(), this may cost a lot of time (seconds) if the config
contains a lot of items. Found when testing Sensei.

This change doesn't impact mvc style components.
2018-10-03 16:34:25 +02:00
marjohn56
472f5d8967 interfaces: Add RFC 3118 Option; closes #2781
This allows us to call a funcion which will generate the correct
credentials where they need to be hashed or not. In the function
in this PR, the function returns all of the request and send
options required for Orange France and fills in the client fields
automatically.

Also in the case of Orange France an extra entry box appears to
allow the entry of the LiveBox_ID.

The PR is a work in progress, but all that is needed to make it
work for Orange France is the hash routine.

It's also possible to use the functions create the hex strings
needed for other ISPs and auto fill the options as needed.
2018-10-03 16:02:22 +02:00
Ad Schellevis
e8908f4a32 Firewall/alias, extend /api/firewall/alias_util/ alias to support instant address additions and deletions, saved to config when applicable.
-- /api/firewall/alias_util/add/[alias]
-- /api/firewall/alias_util/delete/[alias]

both accepting address as parameter, sample usage added to the pfTables diagnostic page
2018-10-02 21:46:16 +02:00
opnsenseuser
651bccc47f ui: sticky sub-submenu; closes #2782
sticky sub-submenu on mouseout when next item does not have a sub-submenu
-> https://github.com/opnsense/core/issues/2554
2018-10-02 20:56:23 +02:00
Ad Schellevis
8b79dd1672 Firewall/alias, regression in toggle, closes https://github.com/opnsense/core/issues/2759 2018-10-02 20:28:24 +02:00
Ad Schellevis
ce98b297fa MVC, integrate menu endpoint better, remove auth hooks, align with logout page. for https://github.com/opnsense/core/issues/2778 2018-10-02 17:31:37 +02:00
Ad Schellevis
597df08183 MVC, replace __items with iterateItems() for https://github.com/opnsense/core/issues/2670 2018-10-02 16:31:44 +02:00
Ad Schellevis
8fba640bc6 mvc, refactor __items usage in BaseField type, for https://github.com/opnsense/core/issues/2670 2018-10-01 22:01:33 +02:00
Ad Schellevis
faca533367 Firewall/alias, refactor __items. for https://github.com/opnsense/core/issues/2670 2018-10-01 21:56:25 +02:00
Ad Schellevis
1cd0c08082 Merge branch 'fprina-master' 2018-10-01 21:46:15 +02:00
Ad Schellevis
c314ac09e4 small cleanups for https://github.com/opnsense/core/pull/2748 2018-10-01 21:45:41 +02:00
Ad Schellevis
076ec93ce4 Merge branch 'master' of https://github.com/fprina/core into fprina-master 2018-10-01 21:28:29 +02:00
Ad Schellevis
bd8c938ba0 usermanager, ldap import: add [de]select all 2018-10-01 15:17:14 +02:00
Franco Fichtner
475e2e438f firewall: hover on new colours does no longer work
And this now underlines " / " in between both icons.
2018-09-30 13:30:38 +02:00
framer99
480fb97b8a Alter schedule legend in footer for active/inactive icon 2018-09-30 12:05:49 +02:00
framer99
c1c5ef115e make Schedule icon reflect current schedule state
On firewall_rules.php, there is no indication whether a schedule-based
rule is active. This change to the schedule icon applies the same styles
that are applied to a disabled/enabled Pass rule icon (text-muted and
text-success).

The break added to the foreach loop is needed to retain reference to the
attached schedule for the filter_get_time_based_rule_status() call
2018-09-30 12:03:59 +02:00
opnsenseuser
26615835f3 ui: sidebar focus fix; closes #2773
if you click on a link and then leave it, the focus remains on this link.
With this fix, this is now also fixed.
2018-09-29 19:13:13 +02:00
Franco Fichtner
5ecf13681b src: style sweep 2018-09-29 13:20:26 +02:00
Franco Fichtner
e3b05abbf5 ui: style in previous 2018-09-29 11:48:43 +02:00
opnsenseuser
d3c46be537 more space submenu-width
more space submenu-width
2018-09-29 11:20:52 +02:00
René
a687edb673 sidebar - hover in and out fix (#2770) 2018-09-29 11:17:38 +02:00
opnsenseuser
fc22da1ecd Navigation optimisation
".collapsing" not needed anymore!
grouping classes for optimisation
2018-09-28 20:36:48 +02:00
Ad Schellevis
a4ab0d30ac Firewall/Alias, fix migration issue in case source description doesn't fit model definition. 2018-09-28 18:46:57 +02:00
opnsenseuser
fe803f8d57 opnsense theme (no expansion delay / animation)
expansion delay / animation -> https://github.com/opnsense/core/issues/2554
sidebar toggle-button ->  animation definition is not needed anymore
2018-09-28 18:37:31 +02:00
Franco Fichtner
383d39bd10 system: follow b -> y change in previous commit 2018-09-28 18:34:00 +02:00
Franco Fichtner
7e2f825bf9 system: remove FreeBSD 10 password workaround 2018-09-28 18:29:40 +02:00
Franco Fichtner
996923d464 system: comment cleanups
The "mschapv2" code referenced was removed in 2b17ad9077 and
additional dead code in bd2d28c6223.

See also: https://github.com/pfsense/pfsense/commit/651d468705
2018-09-28 18:24:30 +02:00
Franco Fichtner
84f35e7088 system: start to cleanup legacy notifications #2408 2018-09-28 17:59:46 +02:00
Ad Schellevis
4e3ce5c180 Firewall/alias, add legacy fallback as discussed with @fichtner 2018-09-28 11:32:01 +02:00
Ad Schellevis
7092d3c782 MVC/model migrations, show error message in run_migrations.php when migration fails. 2018-09-27 20:27:08 +02:00
Franco Fichtner
62fa8b5d66 firewall: proper alias sync in our new world order 2018-09-27 09:15:13 +02:00
Franco Fichtner
9e525528ba system: legacy alias restore node no longer exists 2018-09-27 09:04:02 +02:00
Ad Schellevis
8967d76f70 prettify attribute access in BaseField type and replace uuid retrieval in ApiMutableModelControllerBase, close https://github.com/opnsense/core/issues/2760 2018-09-26 21:39:30 +02:00
CJ
2918fb59d6 Add uuid field to the result of addBase
PR for opnsense/core#2760
2018-09-26 21:39:30 +02:00
Franco Fichtner
a7dbe83957 version: improved crypto flavour reading
product_flavour is embedded in the release package but the
package itself does not insist on a particular flavour other
than having knowledge about the flavour the package was
built for originally.  This is ok and direct crypto deps
seem to have failed to produce reliable upgrade / sidegrade
results in recent tests anyway.

Long story short: find out the real crypto flavour installed
from the OpenSSL binary or fall back to the metadata if said
binary cannot be found.
2018-09-26 20:30:45 +02:00
Ad Schellevis
63d38e58a7 Firewall/aliases, util controller, work in progress. The util controller should provide easy access to delete/add items, which in case of static items should also update the configuration. To make this work, we need to update the local running config as well, to prevent a full reload of the template. 2018-09-26 18:58:17 +02:00
Franco Fichtner
f8178e98d3 interfaces: 6RD IPv4 prefix is prefix only #2662 2018-09-26 15:29:43 +02:00