Commit Graph

11989 Commits

Author SHA1 Message Date
Michael Tremer
1a0d8b0573 AWS: Remove some debugging line
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-28 10:57:50 +01:00
Michael Tremer
c86fd963d2 AWS: Calculate gateway and DNS IP addresses only for RED
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-28 10:57:13 +01:00
Michael Tremer
607240e28c AWS: Use correct IP address for the internal DNS
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-28 10:56:06 +01:00
Michael Tremer
3273ff48f0 aws: Write HOSTNAME and DOMAINNAME when not set
Previously we expected the entire settings file to be empty
but since we are now shipping some defaults for other settings.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-27 10:05:55 +01:00
Michael Tremer
0009de91e8 Ship default settings for language, theme, etc. in all images
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-27 09:59:47 +01:00
Michael Tremer
8b59ef085e aws: Ensure that SSH checkbox is enabled, too
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-27 09:56:32 +01:00
Michael Tremer
7fa83c2fe7 aws: Enable SSH on the first start
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-27 09:55:39 +01:00
Michael Tremer
fd52e82a72 setup: Write /etc/hosts in initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-25 11:08:04 +01:00
Michael Tremer
d97ba75fe5 setup: Don't write configuration files for TCP wrapper any more
This has been removed from the distribution a long time ago

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-25 11:01:24 +01:00
Michael Tremer
6723afef09 apache: Write hostname into configuration at boot time
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-25 10:59:49 +01:00
Michael Tremer
bd3bcb45d6 AWS: Import aws setup script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-25 10:55:39 +01:00
Michael Tremer
563c502163 dhcp: Ship dhclient
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-25 10:54:36 +01:00
Michael Tremer
3483602929 ssh: Update default configuration
This patch removes an old switch to enable SSH 1 and
makes port 22 the default port.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-25 10:53:53 +01:00
Michael Tremer
1c21ebf8d5 Add initscript that automatically configures IPFire on AWS EC2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-21 16:45:40 +01:00
Michael Tremer
1f2a90b552 flash-image: Make sure that GRUB boots the first entry
This is required when importing an image into AWS EC2 or
the import of the image fails.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-21 16:45:40 +01:00
Michael Tremer
bc91a66281 core123: Ship updated iana-etc
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:34:38 +01:00
Peter Müller
319aedce97 iana-etc: update to 2.30
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:34:25 +01:00
Erik Kapfer
823c6d270a libstatgrab: Update tp 0.91
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:33:51 +01:00
Erik Kapfer
e3dda65eba OpenVPN: Delete 1024 bit DH-parameter from menu
Since OpenVPN-2.4.x do not accepts 1024 bit DH-parameter for security concerns anymore,
    it has been removed from the menu.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:31:19 +01:00
Michael Tremer
1feef6be7c core123: Ship /var/ipfire/backup/exclude
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:31:01 +01:00
Erik Kapfer
291bfda71e backup: Exclude OpenVPNs ovpn.cnf from backup
This fixes also bug #11773

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:30:40 +01:00
Michael Tremer
b1f4acadde core123: Ship updated gnupg
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:30:26 +01:00
Peter Müller
e4529a9bc0 gnupg: update to 1.4.23
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:29:46 +01:00
Erik Kapfer
beac479f2d OpenVPN: Prevent that a Roadwarrior name will be set two times
Fixes bug #11307

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-18 16:48:24 +01:00
Michael Tremer
28aacf565b Start Core Update 123
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-18 16:43:04 +01:00
Erik Kapfer
87ea30ff56 OpenVPN: Fix upload check for root and host certificate
Fix for #11766 .
Since the new OpenSSL output differs in the 'Subject' section, the regex needed to be adapted.
Old and new output should now be possible.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-18 16:31:48 +01:00
Erik Kapfer
c0a7c9b278 OpenVPN: Set default of 730 days for client certificate validity
Since OpenSSL 1.1.0x it is required to set a value for the 'valid til (days)' field.
The WUI delivers now a guide value of two years.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-18 15:49:24 +01:00
Erik Kapfer
7ea54fee01 ipset: Update to 6.38
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-18 15:06:22 +01:00
Erik Kapfer
425465ede9 OpenVPN: Valid til days is required with OpenVPN-2.4.x
Check has been integrated that the OpenSSL maximum of '999999' valid days can not be exceeded.
Check for needed entry in 'Valid til days' field has been integrated.
Asterisk for 'Valid til days' field has been set to mark it as required field.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-18 15:06:20 +01:00
Erik Kapfer
35db8d06fa tmux: Update to 2.7
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-18 14:12:43 +01:00
Erik Kapfer
e64526f952 mtr: Update to 0.92
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-18 14:12:43 +01:00
Erik Kapfer
690edaed67 fping: update to 4.0
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-18 14:12:43 +01:00
Michael Tremer
5f12becaa7 ovpnmain.cgi: Add missing closing bracket
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-18 14:11:39 +01:00
Peter Müller
1f606aefce validate certificates in ids.cgi
Fixes #11770.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-17 18:20:09 +01:00
Peter Müller
dec940e157 tzdata: update to 2018e
Some lines in the rootfile were sort incorrectly, this has been fixed.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-17 18:20:08 +01:00
Peter Müller
c069312790 coreutils: update to 8.29
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-17 18:20:07 +01:00
Peter Müller
ba05c8af80 libgcrypt: update to 1.8.2
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-17 18:20:06 +01:00
Peter Müller
770b458766 attr: fix rootfile
There was a man page missing in the attr rootfile.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-17 18:20:03 +01:00
Peter Müller
f610f1b1cd tor: update to 0.3.3.7
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-17 18:20:00 +01:00
Peter Müller
44b507c9e9 postfix: update to 3.2.6
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-17 18:19:59 +01:00
Peter Müller
7a3772381f unbound: update to 1.7.2
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-17 18:19:56 +01:00
Michael Tremer
595d86de05 Update translations
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-13 15:49:22 +01:00
Michael Tremer
237f3ab7d3 IPsec: Allow to configure a connection in waiting state
This allows to create an IPsec connection that will never actively
try to reach the other peer. It helps in environments where this is
not desired or impossible because of NAT.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-13 15:47:57 +01:00
Michael Tremer
b50b9521fb make.sh: Bump toolchain date
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-06 16:20:36 +01:00
Michael Tremer
fd9a531f71 Bump version to 2.21
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-06 14:03:07 +01:00
Michael Tremer
05b2d72588 core121: Create updater
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-06 14:03:07 +01:00
Matthias Fischer
c22976907e tar: Update to 1.30 (V3)
For details see:
https://www.gnu.org/software/tar/

Since new 'tar' has changes in commandline option parsing,
it was necessary to adjust 'lfs/Config, 'lfs/cdrom' and
'lfs/core-updates' (thanks to Marcel for diffs and Michael for
corrections).

I have tried to make only the most necessary changes.

As always, please check.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-06 14:03:07 +01:00
Arne Fitzenreiter
779706b5f8 flash-image: increase boot partition to match with iso install
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-06-06 14:52:55 +02:00
Arne Fitzenreiter
a4923c7f75 Config: follow symlinks at rootfile check
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-06-06 11:28:11 +02:00
Arne Fitzenreiter
c03e8bd6ef kernel: update to 4.14.48
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-06-06 07:26:55 +02:00