Franco Fichtner
eb72ff6d8a
unbound: reject invalid cache data
2021-08-02 09:53:58 +02:00
Franco Fichtner
56af05bb7b
mvc: bring back bind_textdomain_codeset() removed in f3e2f8ea3e; closes #5071
...
PR: https://github.com/opnsense/core/issues/5132
2021-08-02 08:10:24 +02:00
Ad Schellevis
54e14d4ddd
unbound - dhcp watcher, support configurable domains per ip range, add required configuration file (configd template)
...
closes https://github.com/opnsense/core/issues/5118
2021-08-01 14:59:19 +02:00
Ad Schellevis
b9b6e3eb8d
System / Trust - split between generic server use in cert_get_purpose() and id-kp-serverAuth according to rfc3280, for https://github.com/opnsense/core/issues/5128
2021-08-01 11:37:42 +02:00
Franco Fichtner
7165b665eb
firmware: sync plugins in console update; closes #5136
2021-08-01 11:27:05 +02:00
Ad Schellevis
ccd00f6875
Firewall / Rules - state options only make sense when there's some sort of state. closes https://github.com/opnsense/core/issues/5133
2021-08-01 10:55:41 +02:00
Ad Schellevis
2909e86088
unbound - dhcp watcher, support configurable domains per ip range, for https://github.com/opnsense/core/issues/5118
2021-07-30 23:01:55 +02:00
Ad Schellevis
41b311ecc2
Revert "Firewall / Aliases - append most likely cause for pfctl error (Invalid argument isn't very explanatory by itself). closes https://github.com/opnsense/core/issues/5127 "
...
This reverts commit 2ea90801290856f453126b1e6d63e66c79a5ca6f.
2021-07-30 18:45:40 +02:00
Ad Schellevis
2ea9080129
Firewall / Aliases - append most likely cause for pfctl error (Invalid argument isn't very explanatory by itself). closes https://github.com/opnsense/core/issues/5127
2021-07-30 17:47:18 +02:00
Franco Fichtner
2b0c2caa44
unbound: support insecure-domain for #5104
2021-07-30 14:38:30 +02:00
Franco Fichtner
00062ae8f8
openvpn: improve the cipher parsing
...
It had verbose text in it. Sort better while here.
2021-07-30 13:46:48 +02:00
Franco Fichtner
c5c622fd77
openvpn: untie server-ipv6 from server directive
...
PR: https://forum.opnsense.org/index.php?topic=24094.0
2021-07-30 13:25:09 +02:00
Franco Fichtner
51e7ba17d5
src: style sweep
2021-07-30 13:00:10 +02:00
Franco Fichtner
1176f829cb
openvpn: remove remnamts of tun-ipv6
...
PR: https://forum.opnsense.org/index.php?topic=24094.15
See also: https://community.openvpn.net/openvpn/wiki/DeprecatedOptions#Option:--tun-ipv6
2021-07-30 12:52:22 +02:00
Franco Fichtner
60d62437f2
ui: rewor the rework of the subnet selector; closes #5129
2021-07-30 12:33:33 +02:00
Ad Schellevis
be8a6cd514
VPN / OpenVPN / Client Export - return empty list when /api/openvpn/export/accounts/ is called without parameters.
...
found some of these in the crash reports: ArgumentCountError: Too few arguments to function OPNsense\OpenVPN\Api\ExportController::accountsAction(), 0 passed and exactly 1 expected in /usr/local/opnsense/mvc/app/controllers/OPNsense/OpenVPN/Api/ExportController.php:204
2021-07-29 13:57:08 +02:00
Ad Schellevis
8622b93c15
Interfaces / Diagnostics / Packet Capture - fix "PHP Warning: in_array() expects parameter 2 to be array, null given in /usr/local/www/diag_packet_capture.php on line 355"
2021-07-29 13:49:21 +02:00
braninl
9f60452eb9
Update AliasField.php to fix misspelling ( #5122 )
...
Fixed the misspelling of limitting to limiting.
2021-07-29 07:32:39 +02:00
Ad Schellevis
92f96b2aa0
Interfaces / Diagnostics / Packet Capture - easy (de)select all interfaces button, saves some work when trying to figure out where traffic is leaving.
2021-07-28 18:21:08 +02:00
Ad Schellevis
4738eb409e
OpenVPN/Server - genkey format changed, leading to warnings. ref 0d80b562e4
2021-07-28 11:19:24 +02:00
Franco Fichtner
f331061387
firmware: changes for EoL of 21.1
...
o Remove revoked business fingerprints that were never used
o Revoke fingerprint for 21.1 as it is no longer needed
o Remove upgrade hint file to avoid development version upgrade loops
2021-07-27 16:04:57 +02:00
Franco Fichtner
10e25cdf87
firmware: final stepping stone
2021-07-27 07:55:55 +02:00
Franco Fichtner
4ae1555e07
firewall: change "proto" to "protonum" to avoid ambiguity
2021-07-23 09:02:22 +02:00
Franco Fichtner
538e2f04c2
firewall: update filterlog reader slightly
...
CARP in IPv4 and IPv6 uses the IP header's "ttl" or "hoplimit" so
that we use the same name for reading it to avoid duplication.
The values are the same in any case.
Change "flowlabel" to "flow" to avoid confusion with "label".
Change IP "version" to "ipversion" and consolidate CARP "version(2)"
into "version".
2021-07-23 08:14:36 +02:00
Franco Fichtner
1aeb520631
firewall: parse ridentifier as rid if != '0' #5016
2021-07-22 17:34:02 +02:00
Franco Fichtner
5979fb50e5
mvc: give a little more context on default error; closes #5061
2021-07-22 12:24:31 +02:00
Franco Fichtner
bf8604d9b8
plugins: widen error scope loosely related to #5061
2021-07-22 12:07:17 +02:00
Franco Fichtner
4bdc777bef
mvc: catch all errors (including syntax error and class not found)
...
PR: https://github.com/opnsense/core/issues/5061
2021-07-22 11:56:46 +02:00
Franco Fichtner
8f5f53121e
system: allow cron-based restarts of all [restart] providers; closes #5030
2021-07-22 10:42:13 +02:00
Franco Fichtner
5e860053e1
firmware: mask subscription in GUI output
2021-07-22 10:16:04 +02:00
kulikov-a
35b373407c
openvpn: check ipv4 tunnel prefix. v2 ( #5114 )
...
* wizard.inc: check ipv4 tunnel prefix
* vpn_openvpn_server.php: check ipv4 tunnel prefix
2021-07-22 09:02:55 +02:00
Ad Schellevis
be90cf00a6
Firewall / Diagnostics / States, Sessions - fix some minor glitches.
...
o mark unsortable columns
o fix type validations (avg=* isn't an int).
o better to return an empty structure than [], avoid JS errors in the frontend
2021-07-21 18:49:10 +02:00
kulikov-a
74ccf1683b
wizard.inc: make working rules ( #5112 )
2021-07-21 19:13:28 +02:00
Franco Fichtner
5028c93393
pkg: actually demote to warning
2021-07-21 09:20:29 +02:00
Franco Fichtner
ed4ffa894c
pkg: give CORE_ABI hint anyway, remove safety belt
...
Just let it crash and burn worst case.
PR: https://forum.opnsense.org/index.php?topic=23996.0
2021-07-21 08:53:16 +02:00
Franco Fichtner
2e8269bc21
pkg: fix plist
2021-07-21 07:55:18 +02:00
Ad Schellevis
e4aa3e4f5e
Firewall / Diagnostics - time to kill legacy diag_system_pftop.php and replace it with "Sessions", which offers insights into the top sessions on the firewall related to rules and network segments.
2021-07-20 21:53:33 +02:00
Franco Fichtner
75d91570a0
unbound: minimal cleanups, closes #4327
2021-07-20 20:52:45 +02:00
Franco Fichtner
07d7c28c80
unbound: shrink implementation of previous #4327
2021-07-20 17:23:59 +02:00
Franco Fichtner
3e66f270b1
unbound: migrate to single model #4327
2021-07-20 16:50:54 +02:00
Franco Fichtner
073681f895
mvc: allow to unset attribute via setAttributeValue
...
SimpleXML elements have no way of removing attributes so let
the base field do the work.
2021-07-20 16:46:58 +02:00
Franco Fichtner
8d20e2587d
unbound: add qname-minimisation-strict option #4327
...
While here get rid of the "apply" dialog on this page at least.
Removing all dialogs is difficult with the pages and settings
cluttered in the static page area depending on each other.
2021-07-20 11:54:48 +02:00
Franco Fichtner
72e6ca2fee
unbound: more refactoring, less pages, blacklist -> blocklist
...
PR: https://github.com/opnsense/core/issues/4327
2021-07-20 11:00:00 +02:00
Franco Fichtner
dac9a74479
interfaces: if it looks like SLAAC get rid of it
...
PR: http://forum.opnsense.org/index.php?topic=8985.0
2021-07-20 09:27:54 +02:00
Franco Fichtner
d6d0971677
unbound: integrade DoT grid; closes #5101
...
Extensive rewrite based on the original PR, but the models
have been merged into one Unbound.xml and the migration will
follow in the next commit.
2021-07-19 15:00:30 +02:00
Ad Schellevis
f5264d9085
usermanager - ldap import, prevent excessive config writes.
2021-07-16 14:07:05 +02:00
Ad Schellevis
e8079f0fcf
usermanager - missing ldap import button (regression in 18ad4dbbd3) cc @fichtner
2021-07-16 14:00:44 +02:00
Franco Fichtner
83cd07eda4
firmware: add version/date header here as well
2021-07-14 09:22:46 +02:00
Franco Fichtner
376ee793c9
system: do not split password into multiple pieces
...
PR: https://forum.opnsense.org/index.php?topic=23640.0
2021-07-13 15:50:00 +02:00
Franco Fichtner
b1241aeb74
shell: fix IPv4 /31 assignment
...
PR: https://forum.opnsense.org/index.php?topic=23878.0
2021-07-13 13:56:44 +02:00