Josh Soref
20a3c3da38
Spelling ( #5885 )
2022-07-18 13:59:03 +02:00
Ad Schellevis
a4f48f7a91
Services / Web proxy - possible ownership issue on template directory.
...
It's probably better to chown the error pages directory, just like we for other squid related directories, to prevent ownership issues. Although this doesn't seem to go wrong, the files are intended for squid.
closes https://github.com/opnsense/core/issues/4703
2021-02-12 21:11:26 +01:00
Franco Fichtner
6e2375b044
src: fix a couple of copyright header misalignments
2020-11-19 16:26:23 +01:00
Ad Schellevis
f32e4b29fb
Proxy: custom error pages ( https://github.com/opnsense/core/issues/4174 )
...
o add template download configd call
o align controller and ui to use the download call (flush config to disk, request "active" error_pages)
o refactor deploy_error_pages.py to ease download_error_pages.py implementation
2020-06-22 15:36:45 +02:00
Franco Fichtner
06189b4b9e
src: fix lint pass
2020-06-22 14:15:55 +02:00
Ad Schellevis
53460ce519
proxy: custom error pages. for https://github.com/opnsense/core/issues/4174
...
o change ProxyTemplates() class and move overlay functionality to callers (so we can reuse the same class to download the templates later)
o rename install_template.py to deploy_error_pages.py and use overlay_enabled() method to figure out if "custom" or "opnsense" is selected
o add a configd action to deploy the error pages, for future use.
o hook deploy_error_pages.py in start/stop/restart/reconfigure actions
2020-06-19 19:03:25 +02:00
Ad Schellevis
d7abe75207
Proxy: work in progress https://github.com/opnsense/core/issues/4174
...
o move templates to src/opnsense/data/proxy, avoid lint issues
o initial version of install script (overlay and embed css)
o change squid.conf output, when error_page is provided use error_directory /usr/local/etc/squid/errors/local directory (install location)
o flush template data to error_directory.in (json) which is used as override
overlay logic needs some work to be able to use something similar on download. install hook should be called before squid startup to ensure proper error_pages.
2020-06-19 17:58:52 +02:00
Ad Schellevis
b4212f73cb
Proxy: wireframe for https://github.com/opnsense/core/issues/4174
...
o cleanup default (English) error templates, rename to .html for easier editting. move css to include, which should be imported inline using our scripts.
o add frontend code
o extend model with template option.
2020-06-18 16:44:03 +02:00
Ad Schellevis
981a718da0
squid, ssl_crtd is called security_file_certgen in squid 4 it seems, for https://github.com/opnsense/core/issues/3584
2019-07-18 14:15:41 +02:00
Ad Schellevis
645fdcffd6
proxy, remote access control convert to python 3
2019-05-13 15:30:12 +02:00
Michael Steenbeek
2c61e068a2
Small fixes ( #3096 )
2019-01-04 09:26:16 +01:00
Ad Schellevis
e9dfa48953
Revert "squid, deleay startup during boot, for https://github.com/opnsense/core/issues/2569 "
...
This reverts commit 72af231b41403447c682dc9337301ebde786a168.
2018-08-14 10:54:21 +02:00
Ad Schellevis
72af231b41
squid, deleay startup during boot, for https://github.com/opnsense/core/issues/2569
2018-08-13 16:49:52 +02:00
Franco Fichtner
0c2fefab03
src: transform Ad's copyrights, add e-mail everywhere
2017-08-06 11:19:35 +02:00
Franco Fichtner
4ab6e69742
src: transform Jos' copyright to individual one with e-mail
2017-08-06 11:07:31 +02:00
Franco Fichtner
d87c6ff556
Scripts: add a license generator for GitHub
2017-08-05 20:21:35 +02:00
Franco Fichtner
b306aaae5b
config: migration could be stripped, global vars are always global
2017-05-11 13:24:15 +02:00
Ad Schellevis
e52e251e5e
(proxy) decode content when downloading ACL, closes https://github.com/opnsense/core/issues/1510
2017-03-30 06:56:59 +02:00
Ad Schellevis
1dbaaca2b6
(proxy, acl download) minor performance improvments + python3 compatibility additions
2016-12-13 10:29:20 +01:00
Franco Fichtner
101fc8449d
templates: remove files in the way of directories
...
Way better fix for the squid file transition. Does not require
a manual restart anymore.
2016-12-10 19:27:47 +01:00
Ad Schellevis
1b442b8e48
(proxy, remote acl's) add option to disable cert validation, closes https://github.com/opnsense/core/issues/1271
2016-11-27 15:11:10 +01:00
Ad Schellevis
a257070187
(proxy) some small performance improvements
2016-11-25 16:59:20 +01:00
Ad Schellevis
c3e8468518
(proxy) add ftp support again for remote acl download. We switched to python's requests library, which doesn't support ftp. Some people still use ftp though.
2016-11-22 18:29:31 +01:00
Franco Fichtner
528866c5d0
proxy: rc.conf.d subdir for squid, only way to merge configs
2016-10-26 19:34:30 +02:00
Ad Schellevis
f864511762
(proxy) add basic auth support for remote ACL's, replace urllib2 with requests.
2016-10-17 22:13:37 +02:00
Franco Fichtner
b08d58270e
src/opnsense: apply style here too
2016-09-25 10:03:21 +02:00
Ad Schellevis
73fcb8719f
(proxy) cleanse cert output before writing
2016-04-20 11:51:11 +02:00
Ad Schellevis
4b9c1e0bef
style fixes fetchACLs
2016-03-30 19:53:46 +02:00
Ad Schellevis
d4d4b2ee9a
(proxy) missing -N when generating cache dirs, closes https://github.com/opnsense/core/issues/847
2016-03-22 21:48:54 +01:00
Ad Schellevis
048d5be4fc
(proxy) finish sslbump
2016-03-21 21:04:33 +01:00
Ad Schellevis
92883b237d
(proxy) work in progress ssl-bump
2016-03-21 13:38:36 +01:00
Ad Schellevis
7d18504ced
(proxy) work in progress sslbum, some work to be done....
2016-03-20 20:34:36 +01:00
Ad Schellevis
b1034aab94
(proxy) better match url overlaps in acl, https://github.com/opnsense/core/issues/824
2016-03-16 20:04:24 +01:00
Ad Schellevis
8c02d8cbd0
(proxy) lowercase all domains to avoid collisions
2016-03-02 16:47:29 +01:00
Ad Schellevis
8362757267
(proxy) regression in zip file download
2016-03-01 20:04:17 +01:00
Ad Schellevis
be78a42671
(proxy) fix variable
2016-03-01 19:29:40 +01:00
Ad Schellevis
a03cc14f96
(proxy) improve remote acl handling, sort and structure output for squid.
2016-03-01 18:43:48 +01:00
Ad Schellevis
9e33951541
(proxy) exclude some file patterns for remote acl's, add one level
2016-03-01 10:07:09 +01:00
Ad Schellevis
7df30b7dfa
(proxy) add optional filter for remote blacklist
2016-02-29 22:28:11 +01:00
Ad Schellevis
932e2d6948
(proxy) optimize acl download, split domains/urls and add index file
2016-02-29 21:02:29 +01:00
Franco Fichtner
3d7d907889
proxy: s/txz/tgz/g
2016-01-27 15:01:40 +01:00
Ad Schellevis
c5299dba74
(proxy) add txz as valid download format
2016-01-27 13:56:41 +01:00
Ad Schellevis
26c2053609
(proxy) add support for downloading compressed lists (tar.gz/gz/zip), closes https://github.com/opnsense/core/issues/231
2016-01-21 13:17:28 +01:00
Ad Schellevis
dfe12a46d7
(proxy) add transparant proxy option to squid including a template for the firewall_nat rules to forward traffic to it
2015-07-30 16:30:21 +00:00
Franco Fichtner
148ecb8adb
src: prune (our) copyrights for clartity
...
We did the same sanity cleanup for all other code. Easier on the
eyes and easier to fork. ;)
Discussed with: ad@
2015-07-20 17:27:31 +02:00
Franco Fichtner
da377461f6
proxy: fix startup on /var memory disk
2015-07-10 08:00:18 +02:00
Jos Schellevis
7f0709dfcb
(proxy) add path for deteting old acl files
2015-07-02 09:25:23 +02:00
Jos Schellevis
82f33c6c85
(proxy) remove disabled acls from filesystem
2015-07-02 09:16:43 +02:00
Jos Schellevis
bf5767892e
(proxy) script and action for fething external acls
2015-06-23 16:21:05 +02:00