13233 Commits

Author SHA1 Message Date
Franco Fichtner
cbb402cd0f unbound: never used this unbound cache flush spot 2021-09-17 10:53:22 +02:00
Franco Fichtner
d5d52ac975 system: add xc0 entry video console entry if node exists; closes #4688 2021-09-17 10:33:30 +02:00
Franco Fichtner
e9947f07cd mvc: may be better to hide "nothing to do" messages 2021-09-16 14:04:50 +02:00
Franco Fichtner
9e9971f464 mvc: vim is doing strange things nowadays wanting tabs over spaces ;( 2021-09-16 13:57:03 +02:00
Franco Fichtner
e7e955f573 mvc: retain attributes in single values; closes #4633
Second try: retain attribute values as sibling nodes with
a name up front.  If the sibling does not exist fail silently
like before.  At least from testing this no longer produces
any shift in the config.xml between string nodes with attributes.

Test XML:

<?xml version="1.0"?>
<opnsense>
  <staticroutes version="1.0.0"/>
  <someotherthing version="1.0.0">
    <foo/>
  </someotherthing>
  <thing version="1.0.0"></thing>
  <alias version="1.0.0"/>
  <doesthisdoit></doesthisdoit>
</opnsense>

Test PHP:

<?php

require_once 'config.inc';

OPNsense\Core\Config::getInstance()->fromArray(load_config_from_file('foo.xml'));
print_r(OPNsense\Core\Config::getInstance()->__toString());

Result XML:

<?xml version="1.0"?>
<opnsense>
  <staticroutes version="1.0.0"/>
  <someotherthing version="1.0.0">
    <foo/>
  </someotherthing>
  <thing version="1.0.0"/>
  <alias version="1.0.0"/>
  <doesthisdoit/>
</opnsense>
2021-09-16 13:46:58 +02:00
Franco Fichtner
ca6f461378 ipsec: clear irrelevant upper bits in previous #5201
Shifting bits up has the effect of them lingering if not cleared.
Has no impact on operation on IP address but not good style anyway.
2021-09-16 12:23:25 +02:00
Franco Fichtner
9e44d9a1a9 ipsec: rewrite netmask calculation #5201
We need to make sure both the local and the remote IP belong to
the same CIDR range, which might not be the case if we just
calculate the subnet size required by their direct distance.

Rewrite find_smallest_cidr() to take an array of IPs to calculate
their smallest shared subnet mask.  Code is actually pretty simple
and fast.  However, we are not going to account for network and
broadcast address reservation unless that turns out to be an issue.

In the IPv6 case assume that /64 is a good approximation of the
result.

Remove code cruft in utilities while at it also replacing a simple
function only called once in setaddr.sh.
2021-09-16 09:54:33 +02:00
Franco Fichtner
f51957afbb util: remove unused get_ll_scope() 2021-09-16 09:54:33 +02:00
Franco Fichtner
9b48085538 ipsec: inline only caller of this function
Loosely related to #4749.
2021-09-16 09:54:33 +02:00
kulikov-a
0ee3ecde53 allow /30 for p2p 2021-09-16 09:50:40 +02:00
Franco Fichtner
9335c87a6f interfaces: fix two refactors and remove irrelevant XXX #4749 2021-09-15 21:24:14 +02:00
Franco Fichtner
4583c32ee7 interfaces: find_interface_ip*() no longer in use #4749 2021-09-15 21:12:08 +02:00
Franco Fichtner
f97d35508f interfaces: replace laster callers of find_interface_ipv6() #4749 2021-09-15 21:11:42 +02:00
Franco Fichtner
5475d58b98 interfaces: zap find_interface_ip() in two spots #4749 2021-09-15 21:04:52 +02:00
Franco Fichtner
56467eb82e interfaces: improve naming #4749 2021-09-15 15:07:59 +02:00
Franco Fichtner
8ef7cac570 interfaces: remove primary addresses on down #4749 2021-09-15 14:25:05 +02:00
Franco Fichtner
9147c140b2 interfaces: whitespace for code alignment 2021-09-15 14:24:36 +02:00
Franco Fichtner
6f887fa213 interfaces: change get_interface_ip() internals #4749 2021-09-15 14:23:53 +02:00
Franco Fichtner
65779b80bb interfaces: remove find_interface_ipv6_ll() et al. #4749 2021-09-15 13:34:16 +02:00
Franco Fichtner
5ec2b43f46 system: fix "search" use in resolv.conf #5102 2021-09-15 12:14:28 +02:00
Franco Fichtner
cee9f6a7ba firewall: tweak wording in previous 2021-09-15 09:13:12 +02:00
Franco Fichtner
d2291d21d2 firewall: fixup prio texts and enable relevant sysctl for FreeBSD 13
It only reads or writes VLAN header priority code points.

While here inline the forwarding sysctls instead of setting them all
the time.

PR: https://forum.opnsense.org/index.php?topic=24756.0
2021-09-15 09:08:12 +02:00
Franco Fichtner
35ec0ae1c7 firewall: improve alias description/preview #5199 2021-09-14 16:16:15 +02:00
Franco Fichtner
c9c0055b8b openvpn: do not create empty router file 2021-09-14 10:46:30 +02:00
Franco Fichtner
0d5ef68694 interfaces: sync groups between possible create/destroy operations
Had to tiptope around f2769fe099 which seems useful but counter-
intuitive.  Renaming live groups is a bad concept.

PR: https://github.com/opnsense/core/issues/5189
2021-09-13 14:07:24 +02:00
Franco Fichtner
ba505fb122 interfaces: fix embedded rename in ifconfig scripting 2021-09-13 13:27:40 +02:00
whc2001
15f5ff8755 Correct the melody database directory in manpage 2021-09-12 08:20:48 +02:00
Franco Fichtner
002d7637bd firewall: remove unreachable and incorrect code
PR: https://forum.opnsense.org/index.php?topic=24654.0
2021-09-09 10:19:52 +02:00
Franco Fichtner
7bd5f2ae4c pkg: fix plist, license and parsing thereof 2021-09-09 09:16:18 +02:00
Kyle Evans
c9443c31b7 root: add lualoader brand and logo 2021-09-09 09:13:26 +02:00
Franco Fichtner
503f23bb7b Revert "Fix compare interfaces. (#5173)"
This reverts commit 4b60a9893e2ac4ac0f2576bac0a2f5fd0d21b2c8.
2021-09-08 08:11:30 +02:00
Franco Fichtner
a99a6549eb system: add product title to auth pages; closes #5196
While here get rid of fake HTTP response code in error page.
Need to add jQuery as well for CSRF injection.
2021-09-06 11:02:34 +02:00
Ad Schellevis
4c4266045e System / Configuration / Backups - unescaped source field used for passwords. closes https://github.com/opnsense/core/issues/5197 2021-09-03 22:00:33 +02:00
Franco Fichtner
45c2dde9b9 pkg: fix plist 2021-09-03 14:29:59 +02:00
Franco Fichtner
f5eb97eb5c firmware: add fingerprint for 22.1 testing
Much earlier than usual but we need the time to test it.
2021-09-03 14:29:05 +02:00
Franco Fichtner
4f5348f833 src: whitespace sweep 2021-09-03 07:46:44 +02:00
Ad Schellevis
badd7cd827 syslog - missing acl for target setup. ref https://forum.opnsense.org/index.php?topic=24605.msg117984#msg117984 2021-09-02 19:04:26 +02:00
Franco Fichtner
a232fefaa2 openssh: don't brace, not needed #5182 2021-09-02 08:08:49 +02:00
Franco Fichtner
b826ae3d5c src: whitespace sweep 2021-09-02 07:47:54 +02:00
Franco Fichtner
239a6e5dba firmware: masking vulnerability urls in FreeBSD due to UUID use 2021-09-01 14:36:49 +02:00
Franco Fichtner
6651a03a18 system: weirdness in port parsing that we don't use; closes #5182 2021-09-01 14:09:18 +02:00
Ad Schellevis
53cd1c7183 Squashed commit of the following:
commit 9da181580631e305cf194688479eb311d74dda9d
Author: Ad Schellevis <ad@opnsense.org>
Date:   Tue Aug 31 13:22:39 2021 +0200

    CARP: small cleanups after https://github.com/opnsense/core/pull/5184

commit 9875b53e98aeed173e1603182251b8e2165cabbb
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date:   Sun Aug 29 22:28:03 2021 +0300

    CARP: Fix fetching VIP status

    Implement array safeguards after e44fd48

commit 9c6ff1717741ec7f21a1b88127c57ff3d849085d
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date:   Sun Aug 29 22:23:25 2021 +0300

    CARP: Fix fetching VIP status

    Simplify code after e44fd48

commit 52ffd6ee3d471c09a69599a8fdd02f6e6ea6f2c6
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date:   Sun Aug 29 22:19:26 2021 +0300

    CARP: Fix fetching VIP status

    Simplify code after e44fd48

commit d5ae42623e31138daa29debedc36088fa7ba4811
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date:   Sun Aug 29 22:13:57 2021 +0300

    CARP: Fix fetching VIP status

    Simplify code after e44fd48

commit df99ba8106233a34732bb0cb39f6134d7697e4a4
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date:   Sun Aug 29 16:39:57 2021 +0300

    CARP: Fix fetching VIP status

    Take into account translation issues

commit 45eddeb399b64e631e7d81be8ac29dc2cad97bf2
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date:   Sun Aug 29 16:35:04 2021 +0300

    CARP: Fix fetching VIP status

    Take into account translation issues

commit a068f10cd0a4402e648a09027a6b48b90670e60a
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date:   Sun Aug 29 15:08:51 2021 +0300

    CARP: Fix fetching VIP status

    Whitespace cleanup

commit aa958e1d04938b084a5582dd4080988aef240eaa
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date:   Sun Aug 29 15:05:12 2021 +0300

    CARP: Fix fetching VIP status

    Remove unnecessary require_once call

    Co-authored-by: Franco Fichtner <franco@lastsummer.de>

commit 5966d1c834fe5c69845a675f0f829ec6efcabc2f
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date:   Sun Aug 29 15:04:47 2021 +0300

    CARP: Fix fetching VIP status

    Remove unnecessary require_once call

    Co-authored-by: Franco Fichtner <franco@lastsummer.de>

commit 38d6d952084ed2db4ae2d81aa583850a38f2f7b2
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date:   Sun Aug 29 15:03:57 2021 +0300

    CARP: Fix fetching VIP status

    Remove unnecessary require_once call

    Co-authored-by: Franco Fichtner <franco@lastsummer.de>

commit 3ae8a2f960310b4f373fbae3e77e2eea2b7ced8a
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date:   Sun Aug 29 14:49:46 2021 +0300

    CARP: Fix fetching VIP status

    Eliminate calling get_carp_interface_status() by openvpn.inc

commit bf195f3a66ad6a1ec5c62ecb589e32681eeb86dc
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date:   Sun Aug 29 14:04:16 2021 +0300

    CARP: Fix fetching VIP status

    Refactor the widget to call ifconfig once

commit 26bfe2036a846824b9d163d9c3c8aafd2be3ac36
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date:   Sun Aug 29 13:58:20 2021 +0300

    CARP: Fix fetching VIP status

    Refactor the status page to call ifconfig once

commit 7cdc8eca63acfb9db8da9cf621780c30454df132
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date:   Sun Aug 29 10:22:05 2021 +0300

    CARP: Fix fetching VIP status

    Add a space after vhid to make grep more precise
2021-08-31 13:25:03 +02:00
Franco Fichtner
e7fcd3e2bf interfaces: move two legacy functions to their only callers 2021-08-30 09:44:02 +02:00
Ad Schellevis
293fe8ab43 IPsec, regression in 7be00bc067, $right_spec translated to $ph1ent['remote-gateway'] for non-mobile in earlier versions. closes https://github.com/opnsense/core/issues/5187 2021-08-29 20:57:51 +02:00
Franco Fichtner
b9b8fd9614 src: style sweep 2021-08-29 21:16:28 +02:00
Franco Fichtner
d42dcaaa87 interfaces: function only used once 2021-08-29 20:53:54 +02:00
Ad Schellevis
e44fd48b6a interfaces - index carp entries by vhid's in legacy_interfaces_details() to ease referencing items.
since the indexes themselves aren't used, it should be safe to change the current list interpretation into a named one, this would ease operations like https://github.com/opnsense/core/pull/5184
2021-08-29 13:54:43 +02:00
Franco Fichtner
519311433d interfaces: two and a half cleanups
* Remove the unset-after-write-before-redirect logic of dhcpd on
  WAN that practically does nothing.
* At least since b6b3a5ad1d6c41 interface_bring_down() does not
  tamper with down flag of the interface avoiding the need to
  set the up flag to fix "VLAN" (multiple times).
* Remove debug output that I have never seen before.  The function
  call below will throw an error too if that is even possible.
2021-08-29 15:11:29 +02:00
Ad Schellevis
19a927ce2c firmware: a major upgrade logically also expects a reboot.
The other side could check if the action would be a major upgrade, but it feels more clear to always communicate the correct intention.
If this doesn't have side affects, we could change 1077e0a2a8/src/opnsense/mvc/app/views/OPNsense/Core/firmware.volt (L223) as well

cc @fichtner
2021-08-25 18:07:17 +02:00
Ad Schellevis
302e15ae0a Firewall / Aliases - don't try to fetch GeopIPAlias.zip from BE mirror when no license key is found 2021-08-24 17:22:21 +02:00