Michael Tremer
abf2b05474
postfix: Don't ship our own configuration
...
This is outdated and half of it is not maintained any more.
Users should configure postfix themselves based on the
default configuration.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-12 11:50:51 +00:00
Michael Tremer
3e8ce0dd86
Drop pammysql
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-12 11:44:28 +00:00
Michael Tremer
e3e17107ba
Drop tcpwrapper
...
This library has been unused for quite a while
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-12 11:42:47 +00:00
Michael Tremer
a350ea6dea
Drop mISDN userspace tools
...
This is unsupported for quite a while and nobody should be using this.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-12 11:41:50 +00:00
Michael Tremer
922ec43f99
Drop capi4k-utils
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-12 11:33:51 +00:00
Michael Tremer
690a8b9d89
core119: Remove dropped lcr package during update
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-12 11:31:14 +00:00
Michael Tremer
0d29afc2c1
core119: Import changed packages
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-12 11:29:53 +00:00
Michael Tremer
338087530c
Start Core Update 119
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-12 11:22:58 +00:00
Michael Tremer
77930de834
Rootfile update for bison
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-12 11:18:01 +00:00
Erik Kapfer
ea6dd5b0ac
OpenVPN: Mark unsecure ciphers and DH-parameter as 'weak' in WUI menu
...
64 bit block ciphers like Blowfish, TDEA and CAST5 are vulnerable to the so called 'Birthday attacks' .
Infos for 'Sweet32' Birthday attacks can be found in here
https://sweet32.info/ .
An Overview of 64 bit clock ciphers can also be found in here
http://en.citizendium.org/wiki/Block_cipher/Catalogs/Cipher_list#64-bit_blocks
1024 bit Diffie-Hellman parameter has also been marked as weak causing the 'Logjam Attack' .
Infos for 'Logjam Attack' can be found in here
https://weakdh.org/ .
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 23:41:42 +00:00
Michael Tremer
cb18f19307
index.cgi: Properly show IPsec subnets
...
Fixes : #11604
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 23:23:54 +00:00
Erik Kapfer
bd42f9f968
CRL updater: Update script for OpenVPNs CRL
...
Update script for OpenVPNs CRL cause OpenVPN refactors the CRL handling since v.2.4.0 .
Script checks the next update field from the CRL and executes an update before it expires.
Script is placed under fcron.daily for daily checks.
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:20:28 +00:00
Michael Tremer
59d77d2eae
openssl: Properly pass CFLAGS and LDFLAGS to build
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
11e78f38b9
Package openssl-compat (1.0.2.n)
...
This is provided for compatibility with binaries that have
been compiled against this version of OpenSSL.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
56f8478e4d
openssl: Rootfile update
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Erik Kapfer
3b83dffc19
OpenVPN: Update to version 2.4.4
...
Changed LFS and ROOTFILE for OpenVPN 2.4.4 update.
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
8b87254a02
python-m2crypto: Install in correct directory
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
1b7cb0484c
openssl: Enable engines
...
Some tools that depend on openssl won't compile without it
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
a46b159a8d
wget: Link against GnuTLS instead of OpenSSL
...
This version does not seem to be compatible with OpenSSL 1.1
and might be changed back to OpenSSL when ever it will compile.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
fd07dae7a4
python-m2crypto: Update to 0.27.0
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
5c82a9f040
python-typing: Required for m2crypto
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
7e63e4f806
transmission: Patch to build against OpenSSL 1.1
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
0d0fe16e22
net-snmp: Patch to build against OpenSSL 1.1
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
3b10b31303
elinks: Patch to build against OpenSSL 1.1
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
2ab923bb8e
ncat: Update to 7.60
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
5809552f2f
krb5: Update to 1.15.2 to build against OpenSSL 1.1
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
07b8dcd0b2
openssh: Update to 7.6p1 and patch against OpenSSL 1.1
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
a82d85131b
Net-SSLeay: Update to 1.82
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
f8ee1cfcfc
cyrus-sasl: Disable OTP to build against OpenSSL 1.1
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
5a9bbaa93d
openssl: Update to version 1.1
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 22:19:45 +00:00
Michael Tremer
0102fcabdb
make.sh: Bump toolchain version
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
e9e3dd9fee
qemu: Make it build with newer glibcs
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
c19196e1c5
nfs: Fix building with newer glibcs
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
59a6d4e439
glibc: Enable obsolete NSL
...
This will re-activate the deprecated NIS code on which lots of
software relies on so that we can have some extra time to migrate.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
c0878e43e1
Config: Set PREFIX either to TOOLS_DIR or /usr
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
b034e75303
make.sh: CFLAGS: There is no evidence that supports enabling retpoline in user space is a good idea
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
ce7f9c3a0e
libtirpc: Fix build against newer glibcs
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
25e33293bd
binutils: Update to 2.30
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
f794504ec6
dma: Don't only use TLSv1
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
b349f4da63
postfix: Temporarily disable NIS
...
This makes postfix FTBFS because glibc has removed their
RPC headers.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
65a75e0ddf
glibc: Update to 2.27
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
f1a5a25a40
flex: Patch against SEGV with newer glibc
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
840f0b9fc2
Revert "make.sh: Add -fstack-clash-protection on platforms that support it"
...
This reverts commit 18b82970b81a5bbd31b8922440a97e43d6f01566.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
54114eb0a5
make.sh: Enable cheap out-of-bounds checks in C++ standard library
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
e8611c9ece
make.sh: Add -fstack-clash-protection on platforms that support it
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
9a9c12104c
make.sh: CFLAGS remove --param=ssp-buffer-size=4
...
This flag is useless with -fstack-protector-strong
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
457fd09ddb
pam: Update to 1.30.0
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
4720fa0d1e
make.sh: make requires pkg-config to run autoconf
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
6ffe2da8c9
iproute2: Update to 4.14.1
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
f6b0901df9
hostname: Update to 3.20
...
Drops dependency to obsolete RPCSVC code in glibc.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-11 20:56:12 +00:00