49 Commits

Author SHA1 Message Date
Josh Soref
20a3c3da38
Spelling (#5885) 2022-07-18 13:59:03 +02:00
Ad Schellevis
a4f48f7a91 Services / Web proxy - possible ownership issue on template directory.
It's probably better to chown the error pages directory, just like we for other squid related directories, to prevent ownership issues. Although this doesn't seem to go wrong, the files are intended for squid.

closes https://github.com/opnsense/core/issues/4703
2021-02-12 21:11:26 +01:00
Franco Fichtner
6e2375b044 src: fix a couple of copyright header misalignments 2020-11-19 16:26:23 +01:00
Ad Schellevis
f32e4b29fb Proxy: custom error pages (https://github.com/opnsense/core/issues/4174)
o add template download configd call
o align controller and ui to use the download call (flush config to disk, request "active" error_pages)
o refactor deploy_error_pages.py to ease download_error_pages.py implementation
2020-06-22 15:36:45 +02:00
Franco Fichtner
06189b4b9e src: fix lint pass 2020-06-22 14:15:55 +02:00
Ad Schellevis
53460ce519 proxy: custom error pages. for https://github.com/opnsense/core/issues/4174
o change ProxyTemplates() class and move overlay functionality to callers (so we can reuse the same class to download the templates later)
o rename install_template.py to deploy_error_pages.py and use overlay_enabled() method to figure out if "custom" or "opnsense" is selected
o add a configd action to deploy the error pages, for future use.
o hook deploy_error_pages.py in start/stop/restart/reconfigure actions
2020-06-19 19:03:25 +02:00
Ad Schellevis
d7abe75207 Proxy: work in progress https://github.com/opnsense/core/issues/4174
o move templates to src/opnsense/data/proxy, avoid lint issues
o initial version of install script (overlay and embed css)
o change squid.conf output, when error_page is provided use error_directory /usr/local/etc/squid/errors/local directory (install location)
o flush template data to error_directory.in (json) which is used as override

overlay logic needs some work to be able to use something similar on download. install hook should be called before squid startup to ensure proper error_pages.
2020-06-19 17:58:52 +02:00
Ad Schellevis
b4212f73cb Proxy: wireframe for https://github.com/opnsense/core/issues/4174
o cleanup default (English) error templates, rename to .html for easier editting. move css to include, which should be imported inline using our scripts.
o add frontend code
o extend model with template option.
2020-06-18 16:44:03 +02:00
Ad Schellevis
981a718da0 squid, ssl_crtd is called security_file_certgen in squid 4 it seems, for https://github.com/opnsense/core/issues/3584 2019-07-18 14:15:41 +02:00
Ad Schellevis
645fdcffd6 proxy, remote access control convert to python 3 2019-05-13 15:30:12 +02:00
Michael Steenbeek
2c61e068a2 Small fixes (#3096) 2019-01-04 09:26:16 +01:00
Ad Schellevis
e9dfa48953 Revert "squid, deleay startup during boot, for https://github.com/opnsense/core/issues/2569"
This reverts commit 72af231b41403447c682dc9337301ebde786a168.
2018-08-14 10:54:21 +02:00
Ad Schellevis
72af231b41 squid, deleay startup during boot, for https://github.com/opnsense/core/issues/2569 2018-08-13 16:49:52 +02:00
Franco Fichtner
0c2fefab03 src: transform Ad's copyrights, add e-mail everywhere 2017-08-06 11:19:35 +02:00
Franco Fichtner
4ab6e69742 src: transform Jos' copyright to individual one with e-mail 2017-08-06 11:07:31 +02:00
Franco Fichtner
d87c6ff556 Scripts: add a license generator for GitHub 2017-08-05 20:21:35 +02:00
Franco Fichtner
b306aaae5b config: migration could be stripped, global vars are always global 2017-05-11 13:24:15 +02:00
Ad Schellevis
e52e251e5e (proxy) decode content when downloading ACL, closes https://github.com/opnsense/core/issues/1510 2017-03-30 06:56:59 +02:00
Ad Schellevis
1dbaaca2b6 (proxy, acl download) minor performance improvments + python3 compatibility additions 2016-12-13 10:29:20 +01:00
Franco Fichtner
101fc8449d templates: remove files in the way of directories
Way better fix for the squid file transition.  Does not require
a manual restart anymore.
2016-12-10 19:27:47 +01:00
Ad Schellevis
1b442b8e48 (proxy, remote acl's) add option to disable cert validation, closes https://github.com/opnsense/core/issues/1271 2016-11-27 15:11:10 +01:00
Ad Schellevis
a257070187 (proxy) some small performance improvements 2016-11-25 16:59:20 +01:00
Ad Schellevis
c3e8468518 (proxy) add ftp support again for remote acl download. We switched to python's requests library, which doesn't support ftp. Some people still use ftp though. 2016-11-22 18:29:31 +01:00
Franco Fichtner
528866c5d0 proxy: rc.conf.d subdir for squid, only way to merge configs 2016-10-26 19:34:30 +02:00
Ad Schellevis
f864511762 (proxy) add basic auth support for remote ACL's, replace urllib2 with requests. 2016-10-17 22:13:37 +02:00
Franco Fichtner
b08d58270e src/opnsense: apply style here too 2016-09-25 10:03:21 +02:00
Ad Schellevis
73fcb8719f (proxy) cleanse cert output before writing 2016-04-20 11:51:11 +02:00
Ad Schellevis
4b9c1e0bef style fixes fetchACLs 2016-03-30 19:53:46 +02:00
Ad Schellevis
d4d4b2ee9a (proxy) missing -N when generating cache dirs, closes https://github.com/opnsense/core/issues/847 2016-03-22 21:48:54 +01:00
Ad Schellevis
048d5be4fc (proxy) finish sslbump 2016-03-21 21:04:33 +01:00
Ad Schellevis
92883b237d (proxy) work in progress ssl-bump 2016-03-21 13:38:36 +01:00
Ad Schellevis
7d18504ced (proxy) work in progress sslbum, some work to be done.... 2016-03-20 20:34:36 +01:00
Ad Schellevis
b1034aab94 (proxy) better match url overlaps in acl, https://github.com/opnsense/core/issues/824 2016-03-16 20:04:24 +01:00
Ad Schellevis
8c02d8cbd0 (proxy) lowercase all domains to avoid collisions 2016-03-02 16:47:29 +01:00
Ad Schellevis
8362757267 (proxy) regression in zip file download 2016-03-01 20:04:17 +01:00
Ad Schellevis
be78a42671 (proxy) fix variable 2016-03-01 19:29:40 +01:00
Ad Schellevis
a03cc14f96 (proxy) improve remote acl handling, sort and structure output for squid. 2016-03-01 18:43:48 +01:00
Ad Schellevis
9e33951541 (proxy) exclude some file patterns for remote acl's, add one level 2016-03-01 10:07:09 +01:00
Ad Schellevis
7df30b7dfa (proxy) add optional filter for remote blacklist 2016-02-29 22:28:11 +01:00
Ad Schellevis
932e2d6948 (proxy) optimize acl download, split domains/urls and add index file 2016-02-29 21:02:29 +01:00
Franco Fichtner
3d7d907889 proxy: s/txz/tgz/g 2016-01-27 15:01:40 +01:00
Ad Schellevis
c5299dba74 (proxy) add txz as valid download format 2016-01-27 13:56:41 +01:00
Ad Schellevis
26c2053609 (proxy) add support for downloading compressed lists (tar.gz/gz/zip), closes https://github.com/opnsense/core/issues/231 2016-01-21 13:17:28 +01:00
Ad Schellevis
dfe12a46d7 (proxy) add transparant proxy option to squid including a template for the firewall_nat rules to forward traffic to it 2015-07-30 16:30:21 +00:00
Franco Fichtner
148ecb8adb src: prune (our) copyrights for clartity
We did the same sanity cleanup for all other code.  Easier on the
eyes and easier to fork.  ;)

Discussed with: ad@
2015-07-20 17:27:31 +02:00
Franco Fichtner
da377461f6 proxy: fix startup on /var memory disk 2015-07-10 08:00:18 +02:00
Jos Schellevis
7f0709dfcb (proxy) add path for deteting old acl files 2015-07-02 09:25:23 +02:00
Jos Schellevis
82f33c6c85 (proxy) remove disabled acls from filesystem 2015-07-02 09:16:43 +02:00
Jos Schellevis
bf5767892e (proxy) script and action for fething external acls 2015-06-23 16:21:05 +02:00