11376 Commits

Author SHA1 Message Date
Ad Schellevis
c6cb6df8ff HASync, add interface groups for https://github.com/opnsense/core/issues/3779 2019-10-24 10:09:28 +02:00
Franco Fichtner
953ada8761 system: Syslog-ng 3.24 2019-10-23 16:20:49 +02:00
Ad Schellevis
ac80046261 access space in previous 2019-10-18 08:58:38 +02:00
Ad Schellevis
7f3703d99d filter/schedules: log cause of reload in case of scheduled filter reconfigure. (to explain messages like kernel: pflog0: promiscuous mode disabled on periodic intervals) 2019-10-18 08:56:18 +02:00
Ad Schellevis
b609eed0c7 plugins, log executed tasks in configute and run. closes https://github.com/opnsense/core/issues/3771 2019-10-18 08:34:35 +02:00
Ad Schellevis
fa6bec1725 Merge branch 'strima-master' 2019-10-17 18:41:52 +02:00
Ad Schellevis
b02c7bb02f Fix style issues for https://github.com/opnsense/core/pull/3768 and make sure openssl_pkey_get_private using the correct params (https://www.php.net/manual/en/function.openssl-pkey-get-private.php). 2019-10-17 18:41:08 +02:00
Ad Schellevis
7431745c71 Merge branch 'master' of https://github.com/strima/core into strima-master 2019-10-17 17:51:17 +02:00
Franco Fichtner
bdfefacbc3 system: partial removal on previous #3770 2019-10-17 09:36:34 +02:00
Franco Fichtner
1a5da5c0a6 system: correct sysctl description; closes #3770 2019-10-17 09:35:26 +02:00
Martin Strigl
f0efe0f014 * added getKeyType to correctly handle private key type and therefore skip hardcoded RSA type in ipsec.secrets 2019-10-16 21:30:00 +02:00
Franco Fichtner
9299386602 system: fix PHP loop fail in tunable
Maybe 7.2.23 is broken, never seen this before.  oO

PR: https://forum.opnsense.org/index.php?topic=14652.0
2019-10-14 09:23:29 +02:00
Ad Schellevis
4f3781cfa9 dpinger: missing $gateways_arr in dpinger_status(), closes https://github.com/opnsense/core/issues/3759 2019-10-13 15:18:11 +02:00
Ad Schellevis
d5bd3a6cb7 dpinger: add details to status, so we can easily reproduce the outcome. for https://github.com/opnsense/core/issues/3759 2019-10-13 12:52:21 +02:00
Ad Schellevis
bb7557d38f pluginctl, add run mode, so we can execute things like "pluginctl -r return_gateways_status". easier to ask the user when debugging.
while looking into https://github.com/opnsense/core/issues/3759
2019-10-13 12:39:09 +02:00
Ad Schellevis
7a5a2712cd tokenize2 fix for https://github.com/opnsense/core/issues/3760
a4217d8fcc calls tokenize2() before it seems to be inititalized, lets check for content before calling clear.
2019-10-10 20:54:55 +02:00
Frank Wall
89918fc1de captive portal/ipsec: add description to restart actions (#3755) 2019-10-10 14:49:04 +02:00
sooslaca
69139fcbb2 Hide leaking hostname on SSH password auth (#3754) 2019-10-10 13:35:50 +02:00
Ad Schellevis
817be51986 configd: improve error handling while configd is either not active or not functional.
- reconnecting the socket stream_socket_client() is safe while not executing commands
- if configd dies during communication, we should log and retun an empty response. The caller should handle operation, since you can't be sure restarting the action is a safe operation.

closes https://github.com/opnsense/core/pull/3744
2019-10-10 09:59:08 +02:00
Franco Fichtner
65212fcded pkg: can't help it, change space to tab :D 2019-10-09 19:40:08 +02:00
Ad Schellevis
c4fba1c62e LDAP/StartTLS userimport, start using correct url and move logic to legacy page. for https://github.com/opnsense/core/issues/3445 2019-10-09 17:52:21 +02:00
Ad Schellevis
ec613d3042 switch to suricata 5.0.0-rc1 for -devel version 2019-10-09 16:15:01 +02:00
Ad Schellevis
1a46ff7399 Firewall/Log, uppercase IPv6 proto, closes https://github.com/opnsense/core/issues/3734 2019-10-07 21:40:18 +02:00
Ad Schellevis
da4a241cfd Firewall/SourceNat, don't store interace address, but a reference. closes https://github.com/opnsense/core/issues/3712 2019-10-07 21:34:48 +02:00
Ad Schellevis
371447e6f1 system_certmanager.php: download p12, disable button when confirm<>password. closes https://github.com/opnsense/core/issues/3739 2019-10-07 20:44:28 +02:00
Franco Fichtner
d976413808 interfaces: fpassthru() crashes with memory exceeded
Use a hybrid fix of the old and new code.

PR: https://forum.opnsense.org/index.php?topic=13897.0
2019-10-07 16:50:45 +02:00
Franco Fichtner
9f10421ac6 scripts: PSR12 style fixes test drive
Mostly spacing around = , + - etc with a dash of conditional
formatting madness, but rules are rules.
2019-10-07 16:17:37 +02:00
Franco Fichtner
26a6738036 make: change to PSR12 standard style, lots of noise coming up 2019-10-07 16:17:37 +02:00
Franco Fichtner
046d821fef ipsec: clear $dpdline correctly if not set #3752 2019-10-07 16:07:05 +02:00
Franco Fichtner
7ff6b2013f firmware: we need to be aware of locks here 2019-10-07 11:35:21 +02:00
Franco Fichtner
b4929f5332 firmware: use opnsense-revert to reinstall
Since the health check complains about a lot of different things
and opnsense-revert can repair most of it it is only fair to offer
this fix through GUI reinstall buttons via opnsense-revert for
an overly pleasing UX.
2019-10-07 11:15:09 +02:00
Franco Fichtner
c83daaa54b sbin: usage print tweaks 2019-10-07 11:07:47 +02:00
Franco Fichtner
690602ecd5 system: bump memory limit to 512MB
Was waiting for ticket, but never came.  On 20.1 we are not bound to
i386 so we can up this value, something about FRR not beging able to
handle large deployments.
2019-10-07 08:50:04 +02:00
Ad Schellevis
09c34b272f authservers: PHP Warning: implode(): Invalid arguments ... , closes https://github.com/opnsense/core/issues/3742 2019-10-05 17:57:07 +02:00
Ad Schellevis
b2affd161d LDAP, hook ssl/tls setup into system wide system_trust_configure() for https://github.com/opnsense/core/issues/3742 and cleanup settings. 2019-10-04 09:14:36 +02:00
Ad Schellevis
6f246b0b30 add mirror [MARWAN (Moroccan Academic & Research Wide Area Network)] 2019-10-03 18:50:59 +02:00
Franco Fichtner
9f853b8149 make: magical part of the syslog-ng version integration 2019-10-02 07:57:31 +02:00
Franco Fichtner
c9e395e6f8 system: replace syslog-ng version via build
Next step is using a form of CORE_SYSLOGNG to select
the syslog-ng package suffix.  More testing needed.
2019-10-01 22:45:09 +02:00
Ad Schellevis
cf28023d16 Syslog, new version number in config file... should match running syslog-ng version 2019-10-01 18:34:41 +02:00
Franco Fichtner
d62277ca8f LICENSE: sync 2019-10-01 14:35:53 +02:00
Franco Fichtner
b2560c6eb4 services: split code to get rid of shallow services.inc #3736 2019-10-01 08:33:15 +02:00
Franco Fichtner
9c3cfc58c4 plugins: make pluginctl service restart verbose 2019-10-01 08:09:43 +02:00
Franco Fichtner
6bb03c1806 firewall: remove two sentences via IRC question raised
The default implies to leave it that way if unsure.  The ominous
warning means nothing without explanation, but the effect is
clear for people wanting to use another setting for direction:

o Egress rules filter on outbound, so half the performance passing
  traffic inwards is already wasted by not dropping it on inbound.

o Egress rules cannot set policy routes since policy routes set
  outbound interface on inbound and thus the decision was already
  made.
2019-09-30 09:28:39 +02:00
Franco Fichtner
d2500110ea services: typo 2019-09-30 07:36:14 +02:00
Franco Fichtner
5868dda2cf services: remove services_get() by flattening it into plugins_services() 2019-09-30 07:27:43 +02:00
Franco Fichtner
00eedc8f67 dhcp: should work without global include now 2019-09-30 07:16:08 +02:00
Franco Fichtner
6be4951dbf dhcp: typo spotted by @azdps 2019-09-30 07:10:48 +02:00
Franco Fichtner
2993ae8dcc dhcp: factually correct annotation, no clobbering of existing strings 2019-09-29 15:15:33 +02:00
Franco Fichtner
3f69b12fc8 firmware: move echo to more appropriate spot 2019-09-29 12:47:49 +02:00
Franco Fichtner
058ee11a06 firmware: verify mtree signature if there #3473 2019-09-25 13:29:59 +02:00