17797 Commits

Author SHA1 Message Date
John Fieber
c375cc5050
mvc: fix NetworkValidator for IPv4-mapped addresses with netmask (#8228)
The NetworkValidator fails on IPv4-mapped addresses[1], for example ::ffff:198.51.100.0/120.  Inferring IPv4 from the presence of a period (.) fails as these IPv6 address forms contain periods. Inferring IPv6 from the presence of a colon (:) should be more robust.

1. https://www.rfc-editor.org/rfc/rfc4291#section-2.2
2025-01-21 19:45:15 +01:00
Franco Fichtner
c38dbab3d2 installer: seems to be the other way around 2025-01-21 18:50:31 +01:00
Franco Fichtner
814e983052 system: fix 'installer' user's use of $force_password
While here simplify the unlock code and correct the comment.
2025-01-21 17:05:20 +01:00
Franco Fichtner
c8871daa07 installer: allow halting after install
PR: https://github.com/opnsense/installer/issues/20
2025-01-21 15:49:07 +01:00
Franco Fichtner
60f297f5a6 plugins: turning binary data into JSON may fail globally
By ignoring invalid UTF-8 we can get the bulk of the data.  It's
not likely we are ever going to get unencoded binary data through
JSON, especially in pluginctl.

PR: https://forum.opnsense.org/index.php?topic=45194.0
2025-01-21 13:33:28 +01:00
Franco Fichtner
2862db60b3 src: style 2025-01-21 11:41:05 +01:00
Ad Schellevis
e14cb5c415 webui: increase max header size (max-request-field-size), closes https://github.com/opnsense/core/issues/8230 2025-01-21 11:32:03 +01:00
Franco Fichtner
0e8d2c5589 firmware: upgrade hint also 2025-01-21 11:30:08 +01:00
Ad Schellevis
0b2195b0bd theme: compile sass for d3466788f0 2025-01-21 08:31:35 +01:00
Ad Schellevis
6cd26612f7 filter:bogons - remove duplicate table definition and make sure bogonsv6 always exists, closes https://github.com/opnsense/core/issues/8212
In the long run, we should consider moving the bogons alias functionality to our standard table update, perhaps by implementing a "file" type to link a local file.
For now just remove the duplication and make sure bogonsv6 always exists, even when its empty.
2025-01-20 21:22:46 +01:00
Franco Fichtner
14bdcc9d3d unbound: fixup permission on copy; closes #8133 2025-01-17 21:09:07 +01:00
Franco Fichtner
0e2043c92b system: oops #8221 2025-01-17 20:50:45 +01:00
Stephan de Wit
d09cb928a3 system: remove status delay
With the introduction of the banners, the delay has become
a bit of a nuisance due to shifting elements
2025-01-17 15:49:51 +01:00
Stephan de Wit
49f1b0d0b3 users: remove unused client certificate field for now
There's no model property backing it so this is probably a leftover
from the implementation.
2025-01-17 13:57:34 +01:00
Stephan de Wit
8a8d411f77 system: adjust ACL for system status accordingly for previous 2025-01-17 11:32:22 +01:00
Stephan de Wit
1b2abc89c1 system: handle privileges for notifications 2025-01-17 11:25:02 +01:00
Franco Fichtner
6d75f5d0c7 mvc: allow to reset StoreB64Field values #8221 2025-01-17 10:42:06 +01:00
Franco Fichtner
d85bf8c0d8 system: configdpRun() needs to be used #8221
In the group case that is a refactor, in the user case that
is a bugfix because the argument was not passed...
2025-01-17 10:34:09 +01:00
Franco Fichtner
672c3da6e6 system: more of the same, logic repair #8221 2025-01-17 10:15:25 +01:00
Franco Fichtner
ad358ed999 system: more of the same for #8221 2025-01-17 10:11:11 +01:00
Franco Fichtner
43cf2fccea system: root shell is implicit #8221 2025-01-17 09:47:53 +01:00
Stephan de Wit
32b8e9b05b system: overzealous status dot in UI due to banner/notification intermingling
While here, the dismissStatus relied on an objectMap being set, requiring
us to collect status in the constructor anyway.
2025-01-17 09:46:23 +01:00
Franco Fichtner
f32b64f850 firmware: getting ready for 25.1-RC1 2025-01-17 09:20:18 +01:00
Franco Fichtner
ddbb390542 system: style 2025-01-16 17:52:59 +01:00
Stephan de Wit
a77b5a39ca system: add scope to status class to limit banner notifications to specific pages
While here, marking a status as a banner will exclude it from the notifications
popup
2025-01-16 16:58:25 +01:00
Stephan de Wit
fd39bafe72 system: adjust for overrides banner
Introduces the isBanner property, which explicitly defines the message
as a banner, which doesn't necessarily have a relation to
the persistent property. While here, update the UI to remove
cursor events when the message doesn't have a location set.
2025-01-16 15:11:23 +01:00
Franco Fichtner
1850661335 system: dismissStatus() already implemented as such 2025-01-14 16:47:59 +01:00
Franco Fichtner
7235dd5e43 pkg: fix plist 2025-01-14 16:35:01 +01:00
Neil Greatorex
99a4563c1e
system: allow custom additions to sshd_config (#8206) 2025-01-14 16:34:43 +01:00
Franco Fichtner
20402d1d6a LICENSE: sync 2025-01-14 13:33:33 +01:00
Franco Fichtner
8e44615f86 src: minor style issues 2025-01-14 13:32:28 +01:00
ja-softdevel
97327f29ff
dashboard: Show "Active" beside the active gateway in the Gateways Widget on the Dashboard (#8208) 2025-01-13 15:10:57 +01:00
Stephan de Wit
d3466788f0 dashboard: minor UI fixes
- proper overflow handling and combined tooltips for grid table cells
- remove widget border radius
2025-01-13 14:53:13 +01:00
Sebastian Pucilowski
88530c33df src: fix 'adresses' -> 'address' typo 2025-01-13 13:53:25 +01:00
Sebastian Pucilowski
e58197e5a5 test: testIpAddress typo fix 2025-01-13 13:53:25 +01:00
Sebastian Pucilowski
e8f6a825b7 src: fix IKEAdressField -> IKEAddressField typo 2025-01-13 13:53:25 +01:00
Stephan de Wit
798c82ba84 system: define thresholds based on absolute space 2025-01-13 11:27:43 +01:00
Franco Fichtner
26de190bad network time: ignore tentative as originally intended
PR: https://forum.opnsense.org/index.php?topic=44743.msg225705#msg225705
2025-01-13 10:51:34 +01:00
Stephan de Wit
9e660d360b system: add disk space status check
above 95% usage triggers a persistent banner.

while here, fix a small issue that excluded persistent notification
types from counting towards the icon color used.
2025-01-13 10:38:21 +01:00
Franco Fichtner
0733e3bd4d mvc: copyright style here 2025-01-10 10:14:50 +01:00
Franco Fichtner
fd0960a6e0 src: style sweep 2025-01-10 09:50:39 +01:00
Franco Fichtner
03bd82881f mvc: make getCurrentValue() never return null; closes #8195 2025-01-09 14:02:38 +01:00
Franco Fichtner
be42113aa5 interfaces: adhere to DAD during VIP recreation in rc.newwanipv6
PR: https://forum.opnsense.org/index.php?topic=44743.msg225133#msg225133
2025-01-09 10:17:08 +01:00
Franco Fichtner
596a15e7e6 mvc: style sweep 2025-01-09 10:16:13 +01:00
Franco Fichtner
b2cc8168c6 network time: go the extra mile and ditch explicit vip/carp support
Since we latch on to VIP/CARP since the previous commit we can
simplify this.
2025-01-09 09:19:46 +01:00
Franco Fichtner
c6e700fbae network time: take IPv6 addresses into account; closes #7934
Adhere to standard binding behaviour of other components:

Use the address read to get all addresses and binding ok instead
of using the arcane "interface name" bind option.  CARP VIPs are
ignored although allowed to be selected... something we should just
remove since interfaces_addresses() will load all aliases as well.

We also will not get tentative or otherwise unusable addresses.
Next stop for this code is probaby MVC conversion.
2025-01-09 08:48:23 +01:00
Franco Fichtner
e628c48968 interfaces: fix value lookup in LinkAddressField #8161
Do not use internalValue since it is only the default.
2025-01-09 08:13:19 +01:00
Franco Fichtner
d40a4dcc5a system: historic quirk 2025-01-09 08:13:19 +01:00
Franco Fichtner
031ca59591 make: clean up after tests so I don't have to
It has the downside of losing changes to config.xml but
we are far more likely to run the tests than to change
the file.  Ideally, the UUIDs should not shift.
2025-01-09 08:08:57 +01:00
Ad Schellevis
793d925e71 mvc:model - support lazy loading (skip_dynamic_info) on alias models and use it in NetworkAliasField to improve performance by ignoring fields we're not going to use anyway.
The configd call "filter diag table_size" is quite convenient when inspecting the aliases grid, but if we're only interested in the names and descriptions, it adds quite some overhead.
We can skip the collection of this information by constructing with $skip_dynamic_info set to "true" now, which increases performance quite a bit.
2025-01-08 21:30:26 +01:00