8277 Commits

Author SHA1 Message Date
Franco Fichtner
ef7b6375b8 firewall: fix a typo via translation project 2018-06-20 12:50:41 +02:00
Franco Fichtner
d59775fabc firewall: fix typo in shaper reported via translation project 2018-06-20 12:48:23 +02:00
Franco Fichtner
b0d739a60f openvpn: tabs vs. spaces 2018-06-19 08:12:59 +02:00
Justin Coffman
246bd932c6 Further KU/EKU fixes. (#2465)
The matching KUs for EKU "TLS Web Server Authentication" are Digital Signature AND
(Key Encipherment OR Key Agreement). Added for compatibility with externally-generated
certificates.
2018-06-19 08:08:03 +02:00
Franco Fichtner
18422bd9fc system: tweak previous 2018-06-19 06:06:01 +00:00
Franco Fichtner
79bf33a1ca system: better dhparam support including RFC 7919 2018-06-19 07:51:29 +02:00
Justin Coffman
1f8fc1295b Added 3072-bit RSA key length options. (#2466)
This conforms to current recommendations and best practices for a
128-bit security margin.

2048 is still the minimum recommended, but 2048-bit RSA only aligns to a
112-bit security margin, roughly analogous to 3DES. AES-128, the
minimum recommended cipher, requires a 3072-bit RSA key and a 256-bit digest
(SHA256) to provide an equivalent security level in all cryptographic
components.
2018-06-19 07:04:04 +02:00
Franco Fichtner
ccee4c9927 system: provide default for user language
Sometimes users are confused why their user's language does not
change when edited under System: Settings: General.  Even during
password change a language is forced so we can avoid it by giving
an empty default which will keep the language tied to the system.
2018-06-18 09:59:46 +02:00
Franco Fichtner
6c6b3e107e webgui: load mod_setenv for new config parameter 2018-06-18 07:34:04 +02:00
Franco Fichtner
2a1da92b54 system: small tweaks, this state is ok 2018-06-17 21:40:25 +02:00
Franco Fichtner
043ad6e0db system: mock default file for low level selection 2018-06-17 21:33:39 +02:00
Franco Fichtner
a20aacb4ae system: custom dh parameter creation for #2466 2018-06-17 21:20:43 +02:00
Franco Fichtner
f4e7d2dc2a ui: tiny indent issue in default volt 2018-06-17 20:52:31 +02:00
Franco Fichtner
3a518cf680 src: style sweep et al 2018-06-17 18:45:51 +00:00
Franco Fichtner
e64f0d0b51 firmware: test for sample file, not target
PR: https://github.com/opnsense/update/issues/35
2018-06-17 18:20:30 +00:00
Franco Fichtner
1f522b2ed6 system: prepare origin.conf -> OPNsense.conf move
PR: https://github.com/opnsense/update/issues/35
2018-06-16 18:34:40 +02:00
Ad Schellevis
d6ddb13535 ditch the old tokenizer https://github.com/opnsense/core/issues/2227 2018-06-15 15:28:41 +02:00
Ad Schellevis
925bdcd38b Tokenize2 has the same issue with blur as https://github.com/opnsense/core/issues/1689, hook tab to blur event 2018-06-15 15:18:03 +02:00
Franco Fichtner
b92654ca08 reporting: adjust buttons in previous 2018-06-15 11:00:03 +02:00
Ad Schellevis
8f060d4a7a Netflow/insight and the endless UFS instability... in some cases sqlite can't figure out database inconsistencies by itself. In these cases it is practical to force a repair (rebuild) of the underlaying files manually.
This commit adds an option in reporting_settings.php to request a dump/import from https://github.com/opnsense/core/blob/18.1.9/src/opnsense/site-python/sqlite3_helper.py#L69
2018-06-15 10:31:00 +02:00
Ad Schellevis
eaa5428591 and reformat 2018-06-15 09:21:36 +02:00
Ad Schellevis
680b13f10e fix previous 2018-06-15 09:14:19 +02:00
Justin Coffman
ec9b710b68 Confirm KU/EKU for server certs (#2463) 2018-06-15 08:27:45 +02:00
Ad Schellevis
b0a4a27a1f replace tokenize for Tokenize2 in mvc part, only occurrence to go in legacy code. for https://github.com/opnsense/core/issues/2227 2018-06-14 22:33:20 +02:00
Franco Fichtner
c3dc31a793 rc: log gateway down for dpinger earlier 2018-06-14 20:43:03 +02:00
Ad Schellevis
85f98d121d oops, switched client/server, in https://github.com/opnsense/core/issues/2459 2018-06-14 20:16:41 +02:00
Franco Fichtner
6c2432a4c7 system: make gateway alarm a bit more prominent 2018-06-14 12:56:28 +02:00
Franco Fichtner
4fe4d8aab5 rc: redirect dpinger alarm message to gateway log 2018-06-14 09:41:48 +02:00
Franco Fichtner
12dae7ec64 rc: better rrd backup, avoids writing empty files 2018-06-13 17:59:49 +00:00
Ad Schellevis
cf82c4092b drop nsCertType lookup in cert_get_purpose() and replace with check for "TLS Web Client Authentication" on extendedKeyUsage, for https://github.com/opnsense/core/issues/2459 2018-06-13 18:39:24 +02:00
Franco Fichtner
9f407a85d3 rc: rrd backup script fix closes #2462 2018-06-13 15:46:12 +00:00
Franco Fichtner
192f137cf9 rc: RRD XML export formerly known as 58c923b7 #2462 2018-06-13 17:40:37 +02:00
Franco Fichtner
ebbb917b9d rc: small tweak on previous 2018-06-13 16:05:51 +02:00
Franco Fichtner
dd1376df62 system: this is way cooler for console 2018-06-13 15:58:19 +02:00
Franco Fichtner
aa3523263d rc: improve netflow backup, closes #2461 2018-06-13 15:39:12 +02:00
Franco Fichtner
f59f778f05 rc: clarify that installer is for installing when SSH is off
It's only an issue with config imports in live mode.  Not sure
why this wasn't shared text before.
2018-06-13 13:20:06 +02:00
Franco Fichtner
97bb55ca67 firewall: style #2440 2018-06-13 06:49:39 +00:00
Franco Fichtner
00429edb99 system: use non-sample DH files if users request it 2018-06-12 18:19:51 +02:00
Franco Fichtner
5c21656ec2 menu: consistency 2018-06-12 08:59:54 +02:00
Franco Fichtner
307c2c098a pkg: fix plist, sweep 2018-06-12 08:57:44 +02:00
Franco Fichtner
baf292e91a interfaces: reconfigure radvd on PPPoE change #2394 2018-06-12 08:39:54 +02:00
Ad Schellevis
42eab8f94f add Tokenize2 to core, should eventually replace the old one, but better fix functionality first. The old one has quite difficult handling with events, which complicated https://github.com/opnsense/core/issues/1858
this item however was also on the list in https://github.com/opnsense/core/issues/2227
2018-06-11 22:46:31 +02:00
Ad Schellevis
c10b69cd05 typo, feedback from poeditor 2018-06-11 17:27:30 +02:00
Franco Fichtner
41a111b056 menu: drop trailing slash part two 2018-06-11 14:38:15 +02:00
Ad Schellevis
5ea028d824 MVC, when pushing attributes to a form using setFormData() tigger onChange event to support custom hooks, a bit related to https://github.com/opnsense/core/issues/1858 2018-06-11 14:24:19 +02:00
Franco Fichtner
5d60c32c75 menu: drop trailing slashes 2018-06-11 14:23:01 +02:00
Ad Schellevis
2408d6a126 change rule "interface address" parsing to use "interface:0" in stead of "interface", for https://github.com/opnsense/core/issues/2457 2018-06-11 09:17:01 +02:00
Franco Fichtner
cf91b51633 rc: migrate files to new rc.syshook layout 2018-06-11 05:24:41 +00:00
Franco Fichtner
bd691df008 rc: rc.syshook ordering issue old vs. new layout
Migrate all scripts in order to not break sorting.
2018-06-11 05:18:25 +00:00
Franco Fichtner
5dd6901b2b rc: sprinkle more exec, better rc.syshook usage in shutdown 2018-06-11 00:03:43 +02:00