5890 Commits

Author SHA1 Message Date
Ad Schellevis
c3daf44a7c (cron) add some spacing 2016-09-04 16:44:37 +02:00
Franco Fichtner
d73199570f dashboard: this needs absolte redirects, some missed spots
Relative redirect is used almost everywhere, but to be honest
it looks safer to make all paths absolute.

PR: https://github.com/opnsense/core/issues/1168
2016-09-02 10:06:01 +02:00
Franco Fichtner
a85a46b8d0 dashboard: url_safe() redirects
PR: https://github.com/opnsense/core/issues/1168
2016-09-02 09:55:20 +02:00
Franco Fichtner
73e585432c pkg: small typo in keyword file 2016-09-02 09:20:27 +02:00
Franco Fichtner
bd66467db8 rc: do not clobber php.ini up front
PR: https://forum.opnsense.org/index.php?topic=3573.0
2016-09-02 08:29:40 +02:00
Ad Schellevis
f95082442a add ksort() to previous 2016-09-01 20:59:43 +02:00
Ad Schellevis
74e8e203b1 (openvpn) refactor openvpn_get_cipherlist and openvpn_get_digestlist, fix compatibilty with both --show-ciphers outputs 2016-09-01 20:52:46 +02:00
Franco Fichtner
6f503e565a system: add dynamic DNS update to cron 2016-09-01 20:50:58 +02:00
Franco Fichtner
c6d2cca0e9 lang: s/Automagic/Automatic/g
Suggested by: SimonB
2016-08-31 16:19:49 +02:00
Franco Fichtner
927f4e0efe plugins: do not call write_config() in plugins_interfaces()
Since we weaved the latter into the former, we can now get rid of
the transition code.  The behaviour doesn't change.
2016-08-31 09:36:49 +02:00
Franco Fichtner
143e759f00 ids: first pass for simpler ruleset handling #1129
This does:

o Enable/disable all text as opposed to confusing icons of
  checkboxes.  Also mark them as "primary".
o Make the info button a pencil / edit button as we can modify
  data from there.
o Minor cleanups.

Missing:

o Removing the toggle buttons for each rule (the edit button
  is sufficient).  Haven't done this because the rowtoggle
  mechanism is probably better adapted by @adschellevis.
o Maybe move the enable disable all buttons back to the bottom.
2016-08-31 08:40:33 +02:00
Franco Fichtner
1611955b2d openvpn: more tweaks for previous
There is no need to visually overload the field descriptions with
stop chars like a slash, the help is sufficient in explaining that
multiple networks can be used and the chances are high that most
will only ever use one network here.
2016-08-31 07:54:26 +02:00
Franco Fichtner
db356ac9b0 openvpn: annotate IPv4 where appropriate
Suggested by: SimonB via Pootle
2016-08-31 07:48:23 +02:00
Franco Fichtner
9a557bdf8f make: and once more ;) 2016-08-29 20:32:09 +02:00
Franco Fichtner
75e4f8ee2a make: tweak previous 2016-08-29 20:27:33 +02:00
Franco Fichtner
571bc8c9a6 make: make use of WRKSRC and PKGDIR 2016-08-29 20:08:47 +02:00
Ad Schellevis
8eae446e8b rework https://github.com/opnsense/core/pull/1160 2016-08-29 20:04:20 +02:00
Ad Schellevis
1372e8a23c Merge pull request #1160 from fabianfrz/add_constraint
Camellia can only be used with IKEv2
2016-08-29 19:56:25 +02:00
Franco Fichtner
82bece2a6d pkg: shadow the sample files, delete on uninstall is undesired
While there also get rid of the need for a /usr/ports dir (this will
make tools.git crash and burn for sure.)

shadow.ucl adapted from https://github.com/freebsd/freebsd-ports/blob/master/Keywords/sample.ucl
2016-08-29 19:46:37 +02:00
Fabian Franz
a5e24cadf5 Camellia can only be used with IKEv2 2016-08-29 17:17:02 +02:00
Ad Schellevis
a0664f1116 Merge pull request #1159 from fabianfrz/ipsec_camellia
add camellia to cipher list
2016-08-29 16:46:44 +02:00
Fabian Franz
d640e5b179 add camellia to cipher list 2016-08-29 14:26:55 +02:00
Franco Fichtner
ab4f67c872 openvpn: treat all pages with plugins.inc require 2016-08-29 10:26:53 +02:00
Ad Schellevis
f3f36924b8 (status_gateway_groups) missed a sport, for https://github.com/opnsense/core/issues/1132 2016-08-29 10:06:13 +02:00
Franco Fichtner
5dc170e2ad src: whitespace sweep 2016-08-29 10:04:37 +02:00
Franco Fichtner
5c3b07504d ipsec: "pre shared key" display on main page annoys me 2016-08-29 09:25:03 +02:00
Franco Fichtner
5585e10967 src: strip gettext() from write_config(); closes #1158 2016-08-29 09:18:17 +02:00
Franco Fichtner
b1af5b7b2f ipsec: improve interface plugging; closes #1157
Required a little soft-coding in areas that could be thought of as
"pluggable" firewall rules.  It looks very doable for 17.7, we could
potentially make IPsec and OpenVPN plugins!  Or at least prove that
the plugin framework is capable of plugging in a complex VPN tech.
2016-08-29 08:48:25 +02:00
Ad Schellevis
f8b1879908 (status_gateway_groups.php) wrong status, https://github.com/opnsense/core/issues/1132 2016-08-29 08:39:53 +02:00
Franco Fichtner
1811e1d204 openvpn: improve plugging further for #1157 2016-08-29 07:25:00 +02:00
Franco Fichtner
1d73b3b59d plugins: follow the footsteps of plugins_syslog() and plugins_services()
This looks simple enough now.  Discussed with @adschellevis.
2016-08-29 07:10:29 +02:00
Franco Fichtner
74870bbf05 ipsec: iron out code oddities with apply/enable handling 2016-08-28 17:31:17 +02:00
Franco Fichtner
3947fff487 ipsec: more interface plugging after previous 2016-08-28 17:10:26 +02:00
Franco Fichtner
ca3f686dca ipsec: only plug when enabled and has phase 1 entries
Spotted by: @adschellevis
2016-08-28 16:57:37 +02:00
Franco Fichtner
8c32e798c4 openvpn/ipsec: properly handle interface deletion artefact
The array was still there, and even though empty evaluated as
being filled with data that requires an interface.
2016-08-28 13:28:13 +02:00
Franco Fichtner
47c3fee71e openvpn: missed plugins.inc dependency on previous 2016-08-28 12:47:34 +02:00
Franco Fichtner
0b11965202 rc: plugins_interfaces() shouldn't be enforced here
With the previous call-sites in place we don't need this
"fixup" anymore, assuming that interface groups, OpenVPN
and IPsec settings are now consistent under the new state,
which is true, because right now it was enforced by the
rc system anyway.
2016-08-28 12:39:25 +02:00
Franco Fichtner
0fe677c28e ipsec: do previous for IPsec
Phase 1 add/delete is the best call spot for this as it
defines a "physical" connection.
2016-08-28 12:39:25 +02:00
Franco Fichtner
3355029993 openvpn: plug interface plugging into the add/delete paths
This wasn't completely right before, trying to plug into rules
reload paths and caused issues with people adding/deleting their
OpenVPN devices, but the rules tab not properly indicating this
since OpenVPN has become a pluggable interface.
2016-08-28 12:39:25 +02:00
Ad Schellevis
63968b418e (auth, totp) isolate TOTP functionality into a trait, refactor LocalTOTP. all needed for https://github.com/opnsense/core/issues/1030 2016-08-28 12:17:10 +02:00
Ad Schellevis
c6fdfee89a (model, fieldtypes) add update only text field type, closes https://github.com/opnsense/core/issues/1045 2016-08-27 19:02:20 +02:00
Ad Schellevis
5c09fbdf43 (mvc) support inheritance of OPNsense\Base\FieldTypes\BaseField children. 2016-08-27 18:58:13 +02:00
Ad Schellevis
3c8e146500 (IDS) remove duplicate end tag 2016-08-27 09:29:58 +02:00
Ad Schellevis
4b3a556b79 (IDS) move multiselect on top, for https://github.com/opnsense/core/issues/1129 2016-08-25 17:02:05 +02:00
Ad Schellevis
342337f35a (status_gateway_groups) show missing gateways and status "monitoring disabled", for https://github.com/opnsense/core/issues/1132 2016-08-25 16:43:35 +02:00
Ad Schellevis
765164a0ea (openvpn) add "Use common name" option to control username-as-common-name, closes https://github.com/opnsense/core/issues/1154 2016-08-25 16:17:05 +02:00
Franco Fichtner
b218ce7d1a src: feedback on previous
Suggested by: @fabianfrz
2016-08-24 21:23:05 +02:00
Franco Fichtner
f2caa97d19 ipsec: add newline to auto statement 2016-08-24 10:35:42 +02:00
Ad Schellevis
bcd96a58cd (legacy, interfaces) it doesn't look very usefull to fill empty "provider" with 1. 2016-08-23 19:56:34 +02:00
Franco Fichtner
7f9fcfb2db src: translation corrections
Suggested by: @Antonio-Prado
2016-08-23 09:41:39 +02:00