8661 Commits

Author SHA1 Message Date
Ad Schellevis
ed0f68c2ff mvc/theme add svg support, for https://github.com/opnsense/core/issues/2379 2018-04-27 16:39:24 +02:00
Ad Schellevis
057a7ef48d mvc/volt templates, add file_exists function, needed for https://github.com/opnsense/core/issues/2379 2018-04-27 16:38:27 +02:00
Ad Schellevis
c1f7d7725f theme, add svg support for legacy pages. for https://github.com/opnsense/core/issues/2379 2018-04-27 16:37:31 +02:00
noctarius aka Christoph Engelbert
a0bb26b529 Fixed RA setup of tracked interfaces which should be handled by the s… (#2371) 2018-04-27 07:56:08 +02:00
Franco Fichtner
3505c231e7 firmware: speedup! #2066 2018-04-26 08:50:08 +00:00
Franco Fichtner
d222879577 mvc: small audit on configdRun(), only use when needed 2018-04-26 06:55:12 +00:00
Franco Fichtner
cf6b28574d firmware: configdpRun, not configdRun #2066 2018-04-26 06:15:10 +00:00
Franco Fichtner
fe61822b29 firmware: change to full package install probing #2066 2018-04-25 20:05:18 +00:00
Franco Fichtner
2400a6eff2 firmware: move all parsing into single for loop #2066 2018-04-25 17:06:06 +00:00
Franco Fichtner
6239acec5c firmware: progress on speedup and elaborate release type change #2066 2018-04-25 16:11:08 +00:00
Franco Fichtner
4b07ed39ca firmware: fix spurious display of major upgrade on release type change 2018-04-25 16:11:08 +00:00
Franco Fichtner
2a7a4b2bf0 ipsec: rewrite former resolve_retry() as ipsec_resolve()
PR: https://github.com/opnsense/core/issues/2369
2018-04-25 14:27:02 +00:00
Franco Fichtner
a65b09f051 mvc: this looks unsafe, adapt to what exec_safe() is doing 2018-04-25 11:15:46 +02:00
Franco Fichtner
b2b926d7ad system: remove duplicate addresses before binding #2375 2018-04-25 11:02:03 +02:00
Franco Fichtner
9374a0862a ipsec: fix regression in d482a93ecdb8 2018-04-25 07:30:09 +00:00
Ad Schellevis
d725673393 auth/tester, display array types as well. 2018-04-24 21:10:24 +02:00
Ad Schellevis
2cdaee4366 Auth/Radius, fix Framed-Route parsing, slightly related to https://github.com/opnsense/core/issues/2348 2018-04-24 21:09:13 +02:00
Franco Fichtner
2b6a6c11cd system: syslog is local, syslog-ng will be remote 2018-04-24 15:38:38 +02:00
Ad Schellevis
21cfcaaf51 add another mirror 2018-04-24 09:42:42 +02:00
Franco Fichtner
200f92b755 interfaces: no spurious redirection for dhclient; #2372 2018-04-23 18:14:23 +02:00
Ad Schellevis
f9acc51bb7 CaptivePortal, fix typo, when calling stopAccounting() check if stopAccounting() exists and not startAccounting() (although both are true ;) ) 2018-04-22 18:59:17 +02:00
CJ
fb8b63f4c4 Add traffic data and IP address to Radius Accounting messages (#2364) 2018-04-22 18:56:22 +02:00
Ad Schellevis
d482a93ecd ditch resolve_retry(), closes https://github.com/opnsense/core/issues/2369 2018-04-22 18:46:07 +02:00
Franco Fichtner
80758e642e ipkg: fix plist via ´make plist-fix' 2018-04-22 18:27:09 +02:00
Ad Schellevis
b145465a3f backup/restore, cleanup. move crypt.inc to diag_backup.php since it's only used there now. 2018-04-22 18:08:48 +02:00
Ad Schellevis
870b17e09e OpenVPN, cleanup client specific override generation, don't save to disk as the connect or auth process is taking care of that now. for https://github.com/opnsense/core/issues/2348 2018-04-22 18:01:12 +02:00
Ad Schellevis
9e851f0cf0 fix plist for previous 2018-04-22 17:58:34 +02:00
Ad Schellevis
3c46a4f7ca OpenVPN, minor fix for https://github.com/opnsense/core/issues/2348, when using non tls/ssl mode the csc was ignored. 2018-04-22 17:40:19 +02:00
Ad Schellevis
4c97c990fb OpenVPN, save client specific overrides for non user auth types on client connect and cleanup on disconnect, this should remove the need to flush all and cleanup when a csc changes or when server changes occur and is more aligned with how the user authenticated overrides function now.
The attributes.sh still looks a bit weird, kept the state reset, although it looks odd that we only do this for part of the server options.

Next step is cleanup and additional testing. for https://github.com/opnsense/core/issues/2348
2018-04-22 17:20:28 +02:00
Ad Schellevis
1cde411bb3 OpenVPN cleanups, found this unused gem with possible side affects while working on https://github.com/opnsense/core/issues/2348 2018-04-22 12:49:56 +02:00
Franco Fichtner
59b811712e unbound: fix format string 2018-04-21 00:49:50 +02:00
Franco Fichtner
7c1904c10f openvpn: flatten trailing else 2018-04-20 21:25:30 +02:00
Franco Fichtner
fa7c114359 interfaces: ETOOMANYPARENS 2018-04-20 20:38:59 +02:00
Ad Schellevis
a8f54d2e77 MVC/Content-Security-Policy settings, allow per controller overrides, see https://github.com/opnsense/core/pull/2212 2018-04-20 18:43:25 +02:00
Ad Schellevis
e2bd521ffa OpenVPN, handle radius Framed-IP-Address Framed-IP-Network attributes, for https://github.com/opnsense/core/issues/2348 2018-04-20 17:34:41 +02:00
Ad Schellevis
a713189076 OpenVPN, only write client specific override if there is any and cleanup old one if not valid anymore. for https://github.com/opnsense/core/issues/2348 2018-04-20 17:18:57 +02:00
Ad Schellevis
41cbf22e8e OpenVPN, oops missed some debug output in https://github.com/opnsense/core/issues/2348 2018-04-20 17:07:43 +02:00
Ad Schellevis
07791dcb47 OpenVPN, cleanup tls-verify.php script 2018-04-20 17:06:01 +02:00
Franco Fichtner
d23bc12e45 services: plug blind spots, want to know what failed 2018-04-20 12:41:25 +02:00
Franco Fichtner
eab13ff0fc services: sadly link-local is ok for routing but not transporting 2018-04-20 12:36:54 +02:00
Franco Fichtner
9f4837d11a services: hybrid approach to previous
Finally, this makes sense and avoids probing already global
addresses...

1. If a private IPv4 or link-local IPv6 we can try to
   use the web test.

2. If anything else just pass it through, it should be
   reachable if configured correctly.
2018-04-20 10:49:20 +02:00
Franco Fichtner
1547ecce67 services: if ip detection fails don't leak private IPv4
PR: https://github.com/opnsense/core/issues/2368
2018-04-20 09:59:24 +02:00
Franco Fichtner
2b9ee69f10 rc: IPv6 is trigger-happy, we only need this once
The unique file id was used to prevent overwrites from different
interfaces but we can just use the argument in the file so that
everything is rewritten in place causing the renewals to boil down
to one.

See a previous run with a WAN-only setup:

  >>> Invoking start script 'newwanip'
  Reconfiguring IPv4: OK
  Reconfiguring IPv6: OK
  Reconfiguring IPv6: OK
  Reconfiguring IPv6: OK
  Reconfiguring IPv6: OK
  Reconfiguring IPv6: OK
  >>> Invoking start script 'freebsd'

While here, also display the interface for clarity now:

  >>> Invoking start script 'newwanip'
  Reconfiguring IPv4 on em0: OK
  Reconfiguring IPv6 on em0: OK
  >>> Invoking start script 'freebsd'
2018-04-20 08:18:32 +02:00
Franco Fichtner
9cff964f2c src: style fixes 2018-04-19 19:54:25 +02:00
Ad Schellevis
370750b499 Revert "Add support UTF-8 domain names in black, white and exclude lists. (#1892)"
This reverts commit baab54de6f29c92aa3ed27c1f78c85e9b9d8c2ba.
2018-04-19 16:25:31 +02:00
Ad Schellevis
de405eb21d Proxy, IDN support for whitelists and blacklists. requires cf3ebcae01 closes https://github.com/opnsense/core/pull/2327 2018-04-19 16:23:14 +02:00
Ad Schellevis
c9132db422 remove Content-Security-Policy "default-src 'self'; see https://github.com/opnsense/core/pull/2212 2018-04-19 12:57:38 +02:00
Franco Fichtner
7eb6157b9c mvc: fix typo spotted by @fabianfrz 2018-04-17 09:50:58 +02:00
Franco Fichtner
8e504fdf62 firmware: whitespace and order 2018-04-17 08:58:38 +02:00
Franco Fichtner
2c94aa083c openvpn: retain openvpn_ prefix in file
Way easier to spot where a function belongs to.
2018-04-17 08:37:50 +02:00