Arne Fitzenreiter
0e2f9b011b
openssl: disable ssse3 on amd cpu's
...
amd with ssse3 (bulldozer and fusion) has serious performance problems
with the vpaes code. (-evp is 40% slower)
2015-04-28 20:51:03 +02:00
Michael Tremer
3bcb59ab21
vpnmain.cgi: Fix prefix for elliptic curve algorithms
2015-04-28 13:22:00 +02:00
Jochen Kauz
a24062d12b
vpnmain.cgi: dpd_delay/dpd_timeout wrong entry in ipsec.conf
...
Fixes #10636
2015-04-28 11:30:05 +02:00
Michael Tremer
cbdee67e06
openssl: Don't ship an SSE-optimised version of libssl
...
This one does not benefit at all from any optimisations
of this kind. Only libcrypto.so.10 which holds the implementation
of ciphers and hashes gains better performance by using SSE2.
2015-04-28 11:15:38 +02:00
Michael Tremer
1cbc5ca0a4
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
2015-04-28 11:14:45 +02:00
Michael Tremer
eb7e5ec69f
tzdata: Update to version 2015d
2015-04-28 11:13:03 +02:00
Arne Fitzenreiter
f68ae02d39
openssl: auto enable padlock engine.
2015-04-27 22:15:20 +02:00
Michael Tremer
30ca037fb3
glibc: Fix CVE-2013-7423 and CVE-2015-1781
...
CVE-2013-7423: Fix invalid file descriptor reuse while sending DNS query
CVE-2015-1781: Fix buffer overflow in gethostbyname_r with misaligned buffer
2015-04-27 21:20:46 +02:00
Arne Fitzenreiter
7fe5669502
openssl: change sse2 optimization to i686.
2015-04-27 21:19:46 +02:00
Michael Tremer
ffe32bf7ae
strongswan: Increase stroke buffer size to 8k
2015-04-27 20:58:45 +02:00
Michael Tremer
6ac0a1a38f
dnsmasq: Import latest fixes from upstream
2015-04-27 18:10:34 +02:00
Arne Fitzenreiter
e0c923f424
Add rootfile check for hardcoded machine type.
2015-04-25 13:23:34 +02:00
Arne Fitzenreiter
7f16c66647
libsrtp: update rootfile.
2015-04-25 09:49:37 +02:00
Arne Fitzenreiter
0594323b79
core90: remove missing file from openssl-0.9.8-files.
2015-04-24 20:06:13 +02:00
Arne Fitzenreiter
f3c7938540
openssl: fix ssl2 rootfile handling.
...
KCFG will added to the lfs filename at determine the filename in config/rootfiles folder.
2015-04-24 20:03:45 +02:00
Dirk Wagner
67a0c5180d
asterisk addon: upate to 11.17.1
2015-04-24 10:22:14 +02:00
Dirk Wagner
d0b47c7a8f
libsrtp: upgrade to 1.5.2
2015-04-24 10:21:39 +02:00
Arne Fitzenreiter
432bc116fb
openssl: fix typo on arm config.
2015-04-23 23:31:58 +02:00
Arne Fitzenreiter
991082e936
core90: ship backupiso withupdate.
...
this file was missing in core87.
2015-04-23 21:18:42 +02:00
Michael Tremer
45ff420ec7
Drop openssl-compat package
2015-04-23 14:28:41 +02:00
Michael Tremer
37de68c965
openssl: Enable all assembly optimisations build SSE2 optimised version
...
Fixes #10814
2015-04-23 13:33:35 +02:00
Alexander Marx
69a419b19a
BUG10812: fix missing slash in path
2015-04-23 10:53:05 +02:00
Arne Fitzenreiter
4ad384c68d
rootfiles: fix build on arm.
...
i586 -> MACHINE
2015-04-22 22:15:27 +02:00
Stefan Schantl
ba1abcb658
Core 90: Ship modified country.cgi.
2015-04-22 18:35:00 +02:00
Stefan Schantl
8e41b85287
tor: Increase PAK_VER for shipping modified CGI file.
2015-04-22 18:28:58 +02:00
Stefan Schantl
851a984121
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
2015-04-22 18:25:25 +02:00
Stefan Schantl
b013822b99
Rename Locale::Country to Locale::Codes::Country in various scripts.
...
The new Locale-Country version needs to be loaded and used by specifing
Locale::Codes::Country since an upstream API change. Adjusting various perl
scripts to use the module in the proper way again.
2015-04-22 18:18:38 +02:00
Michael Tremer
07e1b6c0af
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
2015-04-22 16:08:42 +02:00
Alexander Marx
0a11f8761a
BUG10812: change ovpnserver config if needed
2015-04-22 15:14:06 +02:00
Michael Tremer
a4d24f9052
vpnmain.cgi: Order ciphers by strength
...
strongSwan uses them in the defined order. Hence it makes
much more sense to present them to the user as well in that
order.
2015-04-22 14:45:10 +02:00
Michael Tremer
78039c1585
vpnmain.cgi: Use integrity functions as PRF for AEAD
2015-04-22 14:44:16 +02:00
Michael Tremer
e8b3bb0edc
vpnmain.cgi: Rewrite algorithm generation code
2015-04-22 14:08:41 +02:00
Alexander Marx
92a6d92e82
squid-accounting: fix mistakenly deleted lines from last commit
2015-04-22 13:34:51 +02:00
Michael Tremer
334620ee2b
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
2015-04-22 13:07:30 +02:00
Michael Tremer
db1078ff11
index.cgi: Hide blue and green if not enabled
...
Those were shown when a blue or orange interface
was assigned which is not the same as enabled.
2015-04-22 13:06:52 +02:00
Alexander Marx
0fa8d28e8f
Squid-accounting: new Version 1.0.3 (graph updates, movedb update)
...
New Version. Now the data is correctly moved to hist table when month
has changed.
Also the graphs for old month starts by zero. In old version graphdata
was started by total amount of bytes.
2015-04-21 20:47:31 +02:00
Michael Tremer
a47376207f
ipsec: Always enable support for IKE fragmentation
2015-04-21 19:36:40 +02:00
Stefan Schantl
a54ec49e18
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
2015-04-21 19:20:26 +02:00
Stefan Schantl
c4e106d181
Revert "Revert "perl-Locale-Country: Update country codes to version 3.33.""
...
This reverts commit cbc5a4374f
2015-04-21 19:16:26 +02:00
Stefan Schantl
b3c1c8342c
Revert "Revert roofile update for Locale-Country."
...
This reverts commit 91d6b6ef07
2015-04-21 19:16:03 +02:00
Arne Fitzenreiter
2b4830c5ab
kernel: update to 3.14.39
2015-04-21 14:02:47 +02:00
Arne Fitzenreiter
0505af9dc0
rules.pl: fix geoip initialisation.
2015-04-20 23:14:11 +02:00
Arne Fitzenreiter
785c919520
remove ipp2p patches.
...
ipp2p is build by xtables addons now.
2015-04-20 22:57:24 +02:00
Arne Fitzenreiter
2e28ecea3e
functions.network: update dhcp client commandline.
...
this fix trailing space before hostname.
2015-04-20 22:48:46 +02:00
Stefan Schantl
0c89de6716
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
2015-04-20 19:03:52 +02:00
Stefan Schantl
fde9c9dd03
ovpnmain.cgi: Update the certificate revocation list when a connection has been deleted.
...
Reference #10554 .
2015-04-19 12:51:44 +02:00
Michael Tremer
1245aa72df
openssl: Fix build by updating the patches
2015-04-19 11:59:19 +02:00
Matthias Fischer
2805275ecc
openssl: Update to 1.0.2a
2015-04-19 11:29:02 +02:00
Stefan Schantl
dc127e0faa
Core 90: Add changed css files.
2015-04-19 01:23:18 +02:00
Stefan Schantl
c98b743c09
firewall.cgi: Dynamically show/hide DNAT and SNAT configure elements.
...
Fixes #10732 .
2015-04-19 01:19:11 +02:00
