Ad Schellevis
ed0f68c2ff
mvc/theme add svg support, for https://github.com/opnsense/core/issues/2379
2018-04-27 16:39:24 +02:00
Ad Schellevis
057a7ef48d
mvc/volt templates, add file_exists function, needed for https://github.com/opnsense/core/issues/2379
2018-04-27 16:38:27 +02:00
Ad Schellevis
c1f7d7725f
theme, add svg support for legacy pages. for https://github.com/opnsense/core/issues/2379
2018-04-27 16:37:31 +02:00
noctarius aka Christoph Engelbert
a0bb26b529
Fixed RA setup of tracked interfaces which should be handled by the s… ( #2371 )
2018-04-27 07:56:08 +02:00
Franco Fichtner
3505c231e7
firmware: speedup! #2066
2018-04-26 08:50:08 +00:00
Franco Fichtner
d222879577
mvc: small audit on configdRun(), only use when needed
2018-04-26 06:55:12 +00:00
Franco Fichtner
cf6b28574d
firmware: configdpRun, not configdRun #2066
2018-04-26 06:15:10 +00:00
Franco Fichtner
fe61822b29
firmware: change to full package install probing #2066
2018-04-25 20:05:18 +00:00
Franco Fichtner
2400a6eff2
firmware: move all parsing into single for loop #2066
2018-04-25 17:06:06 +00:00
Franco Fichtner
6239acec5c
firmware: progress on speedup and elaborate release type change #2066
2018-04-25 16:11:08 +00:00
Franco Fichtner
4b07ed39ca
firmware: fix spurious display of major upgrade on release type change
2018-04-25 16:11:08 +00:00
Franco Fichtner
2a7a4b2bf0
ipsec: rewrite former resolve_retry() as ipsec_resolve()
...
PR: https://github.com/opnsense/core/issues/2369
2018-04-25 14:27:02 +00:00
Franco Fichtner
a65b09f051
mvc: this looks unsafe, adapt to what exec_safe() is doing
2018-04-25 11:15:46 +02:00
Franco Fichtner
b2b926d7ad
system: remove duplicate addresses before binding #2375
2018-04-25 11:02:03 +02:00
Franco Fichtner
9374a0862a
ipsec: fix regression in d482a93ecdb8
2018-04-25 07:30:09 +00:00
Ad Schellevis
d725673393
auth/tester, display array types as well.
2018-04-24 21:10:24 +02:00
Ad Schellevis
2cdaee4366
Auth/Radius, fix Framed-Route parsing, slightly related to https://github.com/opnsense/core/issues/2348
2018-04-24 21:09:13 +02:00
Franco Fichtner
2b6a6c11cd
system: syslog is local, syslog-ng will be remote
2018-04-24 15:38:38 +02:00
Ad Schellevis
21cfcaaf51
add another mirror
2018-04-24 09:42:42 +02:00
Franco Fichtner
200f92b755
interfaces: no spurious redirection for dhclient; #2372
2018-04-23 18:14:23 +02:00
Ad Schellevis
f9acc51bb7
CaptivePortal, fix typo, when calling stopAccounting() check if stopAccounting() exists and not startAccounting() (although both are true ;) )
2018-04-22 18:59:17 +02:00
CJ
fb8b63f4c4
Add traffic data and IP address to Radius Accounting messages ( #2364 )
2018-04-22 18:56:22 +02:00
Ad Schellevis
d482a93ecd
ditch resolve_retry(), closes https://github.com/opnsense/core/issues/2369
2018-04-22 18:46:07 +02:00
Franco Fichtner
80758e642e
ipkg: fix plist via ´make plist-fix'
2018-04-22 18:27:09 +02:00
Ad Schellevis
b145465a3f
backup/restore, cleanup. move crypt.inc to diag_backup.php since it's only used there now.
2018-04-22 18:08:48 +02:00
Ad Schellevis
870b17e09e
OpenVPN, cleanup client specific override generation, don't save to disk as the connect or auth process is taking care of that now. for https://github.com/opnsense/core/issues/2348
2018-04-22 18:01:12 +02:00
Ad Schellevis
9e851f0cf0
fix plist for previous
2018-04-22 17:58:34 +02:00
Ad Schellevis
3c46a4f7ca
OpenVPN, minor fix for https://github.com/opnsense/core/issues/2348 , when using non tls/ssl mode the csc was ignored.
2018-04-22 17:40:19 +02:00
Ad Schellevis
4c97c990fb
OpenVPN, save client specific overrides for non user auth types on client connect and cleanup on disconnect, this should remove the need to flush all and cleanup when a csc changes or when server changes occur and is more aligned with how the user authenticated overrides function now.
...
The attributes.sh still looks a bit weird, kept the state reset, although it looks odd that we only do this for part of the server options.
Next step is cleanup and additional testing. for https://github.com/opnsense/core/issues/2348
2018-04-22 17:20:28 +02:00
Ad Schellevis
1cde411bb3
OpenVPN cleanups, found this unused gem with possible side affects while working on https://github.com/opnsense/core/issues/2348
2018-04-22 12:49:56 +02:00
Franco Fichtner
59b811712e
unbound: fix format string
2018-04-21 00:49:50 +02:00
Franco Fichtner
7c1904c10f
openvpn: flatten trailing else
2018-04-20 21:25:30 +02:00
Franco Fichtner
fa7c114359
interfaces: ETOOMANYPARENS
2018-04-20 20:38:59 +02:00
Ad Schellevis
a8f54d2e77
MVC/Content-Security-Policy settings, allow per controller overrides, see https://github.com/opnsense/core/pull/2212
2018-04-20 18:43:25 +02:00
Ad Schellevis
e2bd521ffa
OpenVPN, handle radius Framed-IP-Address Framed-IP-Network attributes, for https://github.com/opnsense/core/issues/2348
2018-04-20 17:34:41 +02:00
Ad Schellevis
a713189076
OpenVPN, only write client specific override if there is any and cleanup old one if not valid anymore. for https://github.com/opnsense/core/issues/2348
2018-04-20 17:18:57 +02:00
Ad Schellevis
41cbf22e8e
OpenVPN, oops missed some debug output in https://github.com/opnsense/core/issues/2348
2018-04-20 17:07:43 +02:00
Ad Schellevis
07791dcb47
OpenVPN, cleanup tls-verify.php script
2018-04-20 17:06:01 +02:00
Franco Fichtner
d23bc12e45
services: plug blind spots, want to know what failed
2018-04-20 12:41:25 +02:00
Franco Fichtner
eab13ff0fc
services: sadly link-local is ok for routing but not transporting
2018-04-20 12:36:54 +02:00
Franco Fichtner
9f4837d11a
services: hybrid approach to previous
...
Finally, this makes sense and avoids probing already global
addresses...
1. If a private IPv4 or link-local IPv6 we can try to
use the web test.
2. If anything else just pass it through, it should be
reachable if configured correctly.
2018-04-20 10:49:20 +02:00
Franco Fichtner
1547ecce67
services: if ip detection fails don't leak private IPv4
...
PR: https://github.com/opnsense/core/issues/2368
2018-04-20 09:59:24 +02:00
Franco Fichtner
2b9ee69f10
rc: IPv6 is trigger-happy, we only need this once
...
The unique file id was used to prevent overwrites from different
interfaces but we can just use the argument in the file so that
everything is rewritten in place causing the renewals to boil down
to one.
See a previous run with a WAN-only setup:
>>> Invoking start script 'newwanip'
Reconfiguring IPv4: OK
Reconfiguring IPv6: OK
Reconfiguring IPv6: OK
Reconfiguring IPv6: OK
Reconfiguring IPv6: OK
Reconfiguring IPv6: OK
>>> Invoking start script 'freebsd'
While here, also display the interface for clarity now:
>>> Invoking start script 'newwanip'
Reconfiguring IPv4 on em0: OK
Reconfiguring IPv6 on em0: OK
>>> Invoking start script 'freebsd'
2018-04-20 08:18:32 +02:00
Franco Fichtner
9cff964f2c
src: style fixes
2018-04-19 19:54:25 +02:00
Ad Schellevis
370750b499
Revert "Add support UTF-8 domain names in black, white and exclude lists. ( #1892 )"
...
This reverts commit baab54de6f29c92aa3ed27c1f78c85e9b9d8c2ba.
2018-04-19 16:25:31 +02:00
Ad Schellevis
de405eb21d
Proxy, IDN support for whitelists and blacklists. requires cf3ebcae01 closes https://github.com/opnsense/core/pull/2327
2018-04-19 16:23:14 +02:00
Ad Schellevis
c9132db422
remove Content-Security-Policy "default-src 'self'; see https://github.com/opnsense/core/pull/2212
2018-04-19 12:57:38 +02:00
Franco Fichtner
7eb6157b9c
mvc: fix typo spotted by @fabianfrz
2018-04-17 09:50:58 +02:00
Franco Fichtner
8e504fdf62
firmware: whitespace and order
2018-04-17 08:58:38 +02:00
Franco Fichtner
2c94aa083c
openvpn: retain openvpn_ prefix in file
...
Way easier to spot where a function belongs to.
2018-04-17 08:37:50 +02:00