Franco Fichtner
ef7b6375b8
firewall: fix a typo via translation project
2018-06-20 12:50:41 +02:00
Franco Fichtner
d59775fabc
firewall: fix typo in shaper reported via translation project
2018-06-20 12:48:23 +02:00
Franco Fichtner
b0d739a60f
openvpn: tabs vs. spaces
2018-06-19 08:12:59 +02:00
Justin Coffman
246bd932c6
Further KU/EKU fixes. ( #2465 )
...
The matching KUs for EKU "TLS Web Server Authentication" are Digital Signature AND
(Key Encipherment OR Key Agreement). Added for compatibility with externally-generated
certificates.
2018-06-19 08:08:03 +02:00
Franco Fichtner
18422bd9fc
system: tweak previous
2018-06-19 06:06:01 +00:00
Franco Fichtner
79bf33a1ca
system: better dhparam support including RFC 7919
2018-06-19 07:51:29 +02:00
Justin Coffman
1f8fc1295b
Added 3072-bit RSA key length options. ( #2466 )
...
This conforms to current recommendations and best practices for a
128-bit security margin.
2048 is still the minimum recommended, but 2048-bit RSA only aligns to a
112-bit security margin, roughly analogous to 3DES. AES-128, the
minimum recommended cipher, requires a 3072-bit RSA key and a 256-bit digest
(SHA256) to provide an equivalent security level in all cryptographic
components.
2018-06-19 07:04:04 +02:00
Franco Fichtner
ccee4c9927
system: provide default for user language
...
Sometimes users are confused why their user's language does not
change when edited under System: Settings: General. Even during
password change a language is forced so we can avoid it by giving
an empty default which will keep the language tied to the system.
2018-06-18 09:59:46 +02:00
Franco Fichtner
6c6b3e107e
webgui: load mod_setenv for new config parameter
2018-06-18 07:34:04 +02:00
Franco Fichtner
2a1da92b54
system: small tweaks, this state is ok
2018-06-17 21:40:25 +02:00
Franco Fichtner
043ad6e0db
system: mock default file for low level selection
2018-06-17 21:33:39 +02:00
Franco Fichtner
a20aacb4ae
system: custom dh parameter creation for #2466
2018-06-17 21:20:43 +02:00
Franco Fichtner
f4e7d2dc2a
ui: tiny indent issue in default volt
2018-06-17 20:52:31 +02:00
Franco Fichtner
3a518cf680
src: style sweep et al
2018-06-17 18:45:51 +00:00
Franco Fichtner
e64f0d0b51
firmware: test for sample file, not target
...
PR: https://github.com/opnsense/update/issues/35
2018-06-17 18:20:30 +00:00
Franco Fichtner
1f522b2ed6
system: prepare origin.conf -> OPNsense.conf move
...
PR: https://github.com/opnsense/update/issues/35
2018-06-16 18:34:40 +02:00
Ad Schellevis
d6ddb13535
ditch the old tokenizer https://github.com/opnsense/core/issues/2227
2018-06-15 15:28:41 +02:00
Ad Schellevis
925bdcd38b
Tokenize2 has the same issue with blur as https://github.com/opnsense/core/issues/1689 , hook tab to blur event
2018-06-15 15:18:03 +02:00
Franco Fichtner
b92654ca08
reporting: adjust buttons in previous
2018-06-15 11:00:03 +02:00
Ad Schellevis
8f060d4a7a
Netflow/insight and the endless UFS instability... in some cases sqlite can't figure out database inconsistencies by itself. In these cases it is practical to force a repair (rebuild) of the underlaying files manually.
...
This commit adds an option in reporting_settings.php to request a dump/import from https://github.com/opnsense/core/blob/18.1.9/src/opnsense/site-python/sqlite3_helper.py#L69
2018-06-15 10:31:00 +02:00
Ad Schellevis
eaa5428591
and reformat
2018-06-15 09:21:36 +02:00
Ad Schellevis
680b13f10e
fix previous
2018-06-15 09:14:19 +02:00
Justin Coffman
ec9b710b68
Confirm KU/EKU for server certs ( #2463 )
2018-06-15 08:27:45 +02:00
Ad Schellevis
b0a4a27a1f
replace tokenize for Tokenize2 in mvc part, only occurrence to go in legacy code. for https://github.com/opnsense/core/issues/2227
2018-06-14 22:33:20 +02:00
Franco Fichtner
c3dc31a793
rc: log gateway down for dpinger earlier
2018-06-14 20:43:03 +02:00
Ad Schellevis
85f98d121d
oops, switched client/server, in https://github.com/opnsense/core/issues/2459
2018-06-14 20:16:41 +02:00
Franco Fichtner
6c2432a4c7
system: make gateway alarm a bit more prominent
2018-06-14 12:56:28 +02:00
Franco Fichtner
4fe4d8aab5
rc: redirect dpinger alarm message to gateway log
2018-06-14 09:41:48 +02:00
Franco Fichtner
12dae7ec64
rc: better rrd backup, avoids writing empty files
2018-06-13 17:59:49 +00:00
Ad Schellevis
cf82c4092b
drop nsCertType lookup in cert_get_purpose() and replace with check for "TLS Web Client Authentication" on extendedKeyUsage, for https://github.com/opnsense/core/issues/2459
2018-06-13 18:39:24 +02:00
Franco Fichtner
9f407a85d3
rc: rrd backup script fix closes #2462
2018-06-13 15:46:12 +00:00
Franco Fichtner
192f137cf9
rc: RRD XML export formerly known as 58c923b7 #2462
2018-06-13 17:40:37 +02:00
Franco Fichtner
ebbb917b9d
rc: small tweak on previous
2018-06-13 16:05:51 +02:00
Franco Fichtner
dd1376df62
system: this is way cooler for console
2018-06-13 15:58:19 +02:00
Franco Fichtner
aa3523263d
rc: improve netflow backup, closes #2461
2018-06-13 15:39:12 +02:00
Franco Fichtner
f59f778f05
rc: clarify that installer is for installing when SSH is off
...
It's only an issue with config imports in live mode. Not sure
why this wasn't shared text before.
2018-06-13 13:20:06 +02:00
Franco Fichtner
97bb55ca67
firewall: style #2440
2018-06-13 06:49:39 +00:00
Franco Fichtner
00429edb99
system: use non-sample DH files if users request it
2018-06-12 18:19:51 +02:00
Franco Fichtner
5c21656ec2
menu: consistency
2018-06-12 08:59:54 +02:00
Franco Fichtner
307c2c098a
pkg: fix plist, sweep
2018-06-12 08:57:44 +02:00
Franco Fichtner
baf292e91a
interfaces: reconfigure radvd on PPPoE change #2394
2018-06-12 08:39:54 +02:00
Ad Schellevis
42eab8f94f
add Tokenize2 to core, should eventually replace the old one, but better fix functionality first. The old one has quite difficult handling with events, which complicated https://github.com/opnsense/core/issues/1858
...
this item however was also on the list in https://github.com/opnsense/core/issues/2227
2018-06-11 22:46:31 +02:00
Ad Schellevis
c10b69cd05
typo, feedback from poeditor
2018-06-11 17:27:30 +02:00
Franco Fichtner
41a111b056
menu: drop trailing slash part two
2018-06-11 14:38:15 +02:00
Ad Schellevis
5ea028d824
MVC, when pushing attributes to a form using setFormData() tigger onChange event to support custom hooks, a bit related to https://github.com/opnsense/core/issues/1858
2018-06-11 14:24:19 +02:00
Franco Fichtner
5d60c32c75
menu: drop trailing slashes
2018-06-11 14:23:01 +02:00
Ad Schellevis
2408d6a126
change rule "interface address" parsing to use "interface:0" in stead of "interface", for https://github.com/opnsense/core/issues/2457
2018-06-11 09:17:01 +02:00
Franco Fichtner
cf91b51633
rc: migrate files to new rc.syshook layout
2018-06-11 05:24:41 +00:00
Franco Fichtner
bd691df008
rc: rc.syshook ordering issue old vs. new layout
...
Migrate all scripts in order to not break sorting.
2018-06-11 05:18:25 +00:00
Franco Fichtner
5dd6901b2b
rc: sprinkle more exec, better rc.syshook usage in shutdown
2018-06-11 00:03:43 +02:00