6432 Commits

Author SHA1 Message Date
Franco Fichtner
baa813eb95 plugins: protect calls to functions as done elsewhere 2016-11-30 15:32:08 +01:00
Franco Fichtner
0a972db96d firmware: fix style in audit print 2016-11-30 08:24:33 +01:00
Franco Fichtner
09ed08e899 web proxy: default to enabled for new remote lists 2016-11-30 08:17:07 +01:00
Franco Fichtner
53ee7f5734 rc: pkg-static spams about major upgrade warning...
... but we already know that because we are performing one.
2016-11-30 07:32:14 +01:00
Franco Fichtner
19dfa96cc2 intrusion detection: rotate eve-log every (almost) 500 MB
Should probably remove the weekly/daily rotation in favour of a
setting of the value in KB on the GUI instead...
2016-11-30 07:27:19 +01:00
Franco Fichtner
3983919a02 interfaces: slurp wlan devices into available devs
This is required for FreeBSD 11.0.
2016-11-29 18:45:07 +00:00
Franco Fichtner
ae4e38bcb3 ldap: auth containers are not appended to base dn
Still need to fix the help text in the server settings.
2016-11-29 18:36:09 +01:00
Franco Fichtner
d870e03d95 radvd: match running metric with how its handled underneath
We checked for IPs, but the code runs the service in all cases.
2016-11-29 18:35:20 +01:00
Franco Fichtner
88aab655a4 rc: further boot rework 2016-11-29 08:06:07 +01:00
Franco Fichtner
b234d36f9e ldap: further tweaks according to user feedback
Puts LDAP back in into its supposed working state.
2016-11-29 07:47:23 +01:00
Fabian Franz
340da9725c translation fix in services_ntpd_pps.php 2016-11-28 19:06:11 +01:00
Franco Fichtner
b8a33bc8a4 pkg: fix plist 2016-11-28 19:02:46 +01:00
Franco Fichtner
bd2d28c622 auth: tweak previous, hide implementation details; closes #1282 2016-11-28 19:02:23 +01:00
pioorg
2a025de404 Improved password hashes.
Replaced crypt($password, '$6$') with password_hash and password_verify in order to produce salted hashes from passwords.
2016-11-28 18:17:15 +01:00
Franco Fichtner
d4fe7fbc71 rc: more $verbose conversion 2016-11-28 15:53:49 +01:00
Ad Schellevis
6162649447 (mvc) routing, switch to new routing, deduplicates code.... 2016-11-28 15:17:13 +01:00
Ad Schellevis
a81aab8956 (mvc) add separate class for ui/api routing, adds functionality to map thirth party controllers on the same module level as OPNsense components 2016-11-28 15:11:28 +01:00
Franco Fichtner
7c65a076d6 rc: remove cruft, it's gone out of style
See: https://github.com/pfsense/pfsense/commit/e93db4a1f8e
2016-11-28 14:04:26 +01:00
Franco Fichtner
68739fbbb7 system: q.e.d. previous 2016-11-28 09:45:35 +01:00
Franco Fichtner
8b6d43f5f3 system: console setup is rocket science... 2016-11-28 09:43:55 +01:00
Franco Fichtner
e21aa229e4 system: move VGA to top so it defaults to the default 2016-11-28 09:39:50 +01:00
Franco Fichtner
fbfb00191b system: refactor previous for single kldload spot 2016-11-28 09:34:47 +01:00
Franco Fichtner
af8e12f550 system: another logic fail :) 2016-11-28 09:30:27 +01:00
Franco Fichtner
6b0b2569cd system: make sure vital kernel modules are loaded and refactor
This partially reverts commit 8ecaf5f9102e329f6163ddc16f84647040d53485.
2016-11-28 09:21:17 +01:00
Franco Fichtner
7e4c3cf76e system: logic error on previous 2016-11-28 07:12:26 +01:00
Franco Fichtner
d28b79a90d system: improve writing etc/ttys even more to disable virtual 2016-11-28 07:08:20 +01:00
Ad Schellevis
1b442b8e48 (proxy, remote acl's) add option to disable cert validation, closes https://github.com/opnsense/core/issues/1271 2016-11-27 15:11:10 +01:00
Franco Fichtner
9bc6342fa5 system: disable tty completely 2016-11-26 13:39:21 +01:00
Franco Fichtner
6b19b43646 system: typo in previous 2016-11-26 13:33:25 +01:00
Franco Fichtner
a7fbf99b62 system: disable all boot loader output for nullconsole usage 2016-11-26 13:31:53 +01:00
Franco Fichtner
85e6220415 system: deprecate 'enableserial' and refactor a bit
We don't need the flag anymore, it must be set through primary or
secondary console explicitly.
2016-11-26 13:09:32 +01:00
Ad Schellevis
2601843ed2 Merge pull request #1278 from fabianfrz/validation_message
add validation message
2016-11-26 11:09:00 +01:00
Fabian Franz
fc1a15dfb3 add validation message 2016-11-26 10:47:15 +01:00
Ad Schellevis
fc39bb33b3 (captive portal) don't try to generate invalid vouchers, closes https://github.com/opnsense/core/issues/1253
Let's keep this simple for now, just don't leave the dialog as long as the input isn't valid yet....
2016-11-26 09:57:34 +01:00
Franco Fichtner
8e78fd702a system: write boot.config later, when the auto-detect has been done 2016-11-26 09:34:10 +01:00
Franco Fichtner
d5969056ca system: always write consoles, figure out when serial is on 2016-11-26 09:16:49 +01:00
Franco Fichtner
f00d4309c5 system: add nullconsole setting
PR: https://forum.opnsense.org/index.php?topic=3972
2016-11-26 09:11:11 +01:00
Franco Fichtner
9e5aa0c76a filter: fix typo in previous
PR: https://forum.opnsense.org/index.php?topic=3979.0
2016-11-25 17:08:43 +01:00
Ad Schellevis
a257070187 (proxy) some small performance improvements 2016-11-25 16:59:20 +01:00
Franco Fichtner
621d703a67 openvpn: provide all local routes to export
PR: https://github.com/opnsense/core/issues/1275
2016-11-25 16:45:20 +01:00
Franco Fichtner
df469d3268 dashboard: do not arbitrarily split descriptions in services
PR: https://github.com/opnsense/core/issues/1277
2016-11-25 16:31:38 +01:00
Franco Fichtner
0ec8569296 radvd: fix two regressions from 16.7.9
o Mark interface used in case of interface tracking
o Don't inject local DNS server when there is no IP

PR: https://github.com/opnsense/core/issues/1273
2016-11-25 12:23:40 +01:00
Franco Fichtner
5cc1515bfd firmware: add audit feature, @jschellevis will like this... 2016-11-25 08:27:18 +01:00
Ad Schellevis
dd80bded16 (plugins, xmlrpc sync) use standard help if none available 2016-11-25 07:55:33 +01:00
Franco Fichtner
5d65669ee0 firmware: tweak wording on the console dialog 2016-11-25 06:41:46 +01:00
Franco Fichtner
28ea1d7390 ldap: the config setting for ldap_scope is 'subtree'
This doesn't really matter in the current code as it is the
default and only 'one' makes the implementation change its
scope, but for the sake of consistency let this be fixed.
2016-11-25 06:25:57 +01:00
Ad Schellevis
0f881bc4d0 (ldap) re-enable ldap_scope and legacy auth containers. 2016-11-24 20:56:26 +01:00
Franco Fichtner
364738997f firmware: getting ready for 17.1-BETA 2016-11-24 18:38:26 +01:00
Franco Fichtner
33d00edd0a pkg: make building 17.1 a bit easier
We're switching to PHP 7.0 (or 7.1 maybe), php-suhosin seems dead,
and maybe someone wants to work on a newer python base.
2016-11-24 18:19:17 +01:00
Franco Fichtner
8e01375337 upnp: fix regression introduced in 16.7.8
PR: https://forum.opnsense.org/index.php?topic=3976
2016-11-24 16:54:09 +01:00