Ad Schellevis
c3daf44a7c
(cron) add some spacing
2016-09-04 16:44:37 +02:00
Franco Fichtner
d73199570f
dashboard: this needs absolte redirects, some missed spots
...
Relative redirect is used almost everywhere, but to be honest
it looks safer to make all paths absolute.
PR: https://github.com/opnsense/core/issues/1168
2016-09-02 10:06:01 +02:00
Franco Fichtner
a85a46b8d0
dashboard: url_safe() redirects
...
PR: https://github.com/opnsense/core/issues/1168
2016-09-02 09:55:20 +02:00
Franco Fichtner
73e585432c
pkg: small typo in keyword file
2016-09-02 09:20:27 +02:00
Franco Fichtner
bd66467db8
rc: do not clobber php.ini up front
...
PR: https://forum.opnsense.org/index.php?topic=3573.0
2016-09-02 08:29:40 +02:00
Ad Schellevis
f95082442a
add ksort() to previous
2016-09-01 20:59:43 +02:00
Ad Schellevis
74e8e203b1
(openvpn) refactor openvpn_get_cipherlist and openvpn_get_digestlist, fix compatibilty with both --show-ciphers outputs
2016-09-01 20:52:46 +02:00
Franco Fichtner
6f503e565a
system: add dynamic DNS update to cron
2016-09-01 20:50:58 +02:00
Franco Fichtner
c6d2cca0e9
lang: s/Automagic/Automatic/g
...
Suggested by: SimonB
2016-08-31 16:19:49 +02:00
Franco Fichtner
927f4e0efe
plugins: do not call write_config() in plugins_interfaces()
...
Since we weaved the latter into the former, we can now get rid of
the transition code. The behaviour doesn't change.
2016-08-31 09:36:49 +02:00
Franco Fichtner
143e759f00
ids: first pass for simpler ruleset handling #1129
...
This does:
o Enable/disable all text as opposed to confusing icons of
checkboxes. Also mark them as "primary".
o Make the info button a pencil / edit button as we can modify
data from there.
o Minor cleanups.
Missing:
o Removing the toggle buttons for each rule (the edit button
is sufficient). Haven't done this because the rowtoggle
mechanism is probably better adapted by @adschellevis.
o Maybe move the enable disable all buttons back to the bottom.
2016-08-31 08:40:33 +02:00
Franco Fichtner
1611955b2d
openvpn: more tweaks for previous
...
There is no need to visually overload the field descriptions with
stop chars like a slash, the help is sufficient in explaining that
multiple networks can be used and the chances are high that most
will only ever use one network here.
2016-08-31 07:54:26 +02:00
Franco Fichtner
db356ac9b0
openvpn: annotate IPv4 where appropriate
...
Suggested by: SimonB via Pootle
2016-08-31 07:48:23 +02:00
Franco Fichtner
9a557bdf8f
make: and once more ;)
2016-08-29 20:32:09 +02:00
Franco Fichtner
75e4f8ee2a
make: tweak previous
2016-08-29 20:27:33 +02:00
Franco Fichtner
571bc8c9a6
make: make use of WRKSRC and PKGDIR
2016-08-29 20:08:47 +02:00
Ad Schellevis
8eae446e8b
rework https://github.com/opnsense/core/pull/1160
2016-08-29 20:04:20 +02:00
Ad Schellevis
1372e8a23c
Merge pull request #1160 from fabianfrz/add_constraint
...
Camellia can only be used with IKEv2
2016-08-29 19:56:25 +02:00
Franco Fichtner
82bece2a6d
pkg: shadow the sample files, delete on uninstall is undesired
...
While there also get rid of the need for a /usr/ports dir (this will
make tools.git crash and burn for sure.)
shadow.ucl adapted from https://github.com/freebsd/freebsd-ports/blob/master/Keywords/sample.ucl
2016-08-29 19:46:37 +02:00
Fabian Franz
a5e24cadf5
Camellia can only be used with IKEv2
2016-08-29 17:17:02 +02:00
Ad Schellevis
a0664f1116
Merge pull request #1159 from fabianfrz/ipsec_camellia
...
add camellia to cipher list
2016-08-29 16:46:44 +02:00
Fabian Franz
d640e5b179
add camellia to cipher list
2016-08-29 14:26:55 +02:00
Franco Fichtner
ab4f67c872
openvpn: treat all pages with plugins.inc require
2016-08-29 10:26:53 +02:00
Ad Schellevis
f3f36924b8
(status_gateway_groups) missed a sport, for https://github.com/opnsense/core/issues/1132
2016-08-29 10:06:13 +02:00
Franco Fichtner
5dc170e2ad
src: whitespace sweep
2016-08-29 10:04:37 +02:00
Franco Fichtner
5c3b07504d
ipsec: "pre shared key" display on main page annoys me
2016-08-29 09:25:03 +02:00
Franco Fichtner
5585e10967
src: strip gettext() from write_config(); closes #1158
2016-08-29 09:18:17 +02:00
Franco Fichtner
b1af5b7b2f
ipsec: improve interface plugging; closes #1157
...
Required a little soft-coding in areas that could be thought of as
"pluggable" firewall rules. It looks very doable for 17.7, we could
potentially make IPsec and OpenVPN plugins! Or at least prove that
the plugin framework is capable of plugging in a complex VPN tech.
2016-08-29 08:48:25 +02:00
Ad Schellevis
f8b1879908
(status_gateway_groups.php) wrong status, https://github.com/opnsense/core/issues/1132
2016-08-29 08:39:53 +02:00
Franco Fichtner
1811e1d204
openvpn: improve plugging further for #1157
2016-08-29 07:25:00 +02:00
Franco Fichtner
1d73b3b59d
plugins: follow the footsteps of plugins_syslog() and plugins_services()
...
This looks simple enough now. Discussed with @adschellevis.
2016-08-29 07:10:29 +02:00
Franco Fichtner
74870bbf05
ipsec: iron out code oddities with apply/enable handling
2016-08-28 17:31:17 +02:00
Franco Fichtner
3947fff487
ipsec: more interface plugging after previous
2016-08-28 17:10:26 +02:00
Franco Fichtner
ca3f686dca
ipsec: only plug when enabled and has phase 1 entries
...
Spotted by: @adschellevis
2016-08-28 16:57:37 +02:00
Franco Fichtner
8c32e798c4
openvpn/ipsec: properly handle interface deletion artefact
...
The array was still there, and even though empty evaluated as
being filled with data that requires an interface.
2016-08-28 13:28:13 +02:00
Franco Fichtner
47c3fee71e
openvpn: missed plugins.inc dependency on previous
2016-08-28 12:47:34 +02:00
Franco Fichtner
0b11965202
rc: plugins_interfaces() shouldn't be enforced here
...
With the previous call-sites in place we don't need this
"fixup" anymore, assuming that interface groups, OpenVPN
and IPsec settings are now consistent under the new state,
which is true, because right now it was enforced by the
rc system anyway.
2016-08-28 12:39:25 +02:00
Franco Fichtner
0fe677c28e
ipsec: do previous for IPsec
...
Phase 1 add/delete is the best call spot for this as it
defines a "physical" connection.
2016-08-28 12:39:25 +02:00
Franco Fichtner
3355029993
openvpn: plug interface plugging into the add/delete paths
...
This wasn't completely right before, trying to plug into rules
reload paths and caused issues with people adding/deleting their
OpenVPN devices, but the rules tab not properly indicating this
since OpenVPN has become a pluggable interface.
2016-08-28 12:39:25 +02:00
Ad Schellevis
63968b418e
(auth, totp) isolate TOTP functionality into a trait, refactor LocalTOTP. all needed for https://github.com/opnsense/core/issues/1030
2016-08-28 12:17:10 +02:00
Ad Schellevis
c6fdfee89a
(model, fieldtypes) add update only text field type, closes https://github.com/opnsense/core/issues/1045
2016-08-27 19:02:20 +02:00
Ad Schellevis
5c09fbdf43
(mvc) support inheritance of OPNsense\Base\FieldTypes\BaseField children.
2016-08-27 18:58:13 +02:00
Ad Schellevis
3c8e146500
(IDS) remove duplicate end tag
2016-08-27 09:29:58 +02:00
Ad Schellevis
4b3a556b79
(IDS) move multiselect on top, for https://github.com/opnsense/core/issues/1129
2016-08-25 17:02:05 +02:00
Ad Schellevis
342337f35a
(status_gateway_groups) show missing gateways and status "monitoring disabled", for https://github.com/opnsense/core/issues/1132
2016-08-25 16:43:35 +02:00
Ad Schellevis
765164a0ea
(openvpn) add "Use common name" option to control username-as-common-name, closes https://github.com/opnsense/core/issues/1154
2016-08-25 16:17:05 +02:00
Franco Fichtner
b218ce7d1a
src: feedback on previous
...
Suggested by: @fabianfrz
2016-08-24 21:23:05 +02:00
Franco Fichtner
f2caa97d19
ipsec: add newline to auto statement
2016-08-24 10:35:42 +02:00
Ad Schellevis
bcd96a58cd
(legacy, interfaces) it doesn't look very usefull to fill empty "provider" with 1.
2016-08-23 19:56:34 +02:00
Franco Fichtner
7f9fcfb2db
src: translation corrections
...
Suggested by: @Antonio-Prado
2016-08-23 09:41:39 +02:00