Commit Graph

18147 Commits

Author SHA1 Message Date
Peter Müller
53378856a8 Merge branch 'master' into temp-c165-development 2022-02-18 22:28:55 +00:00
Adolf Belka
bff444621e acct.en.pl: Update to use proxy accounting - Bug#12772
-Replace the variable names used for the accounting page with proxy accounting in a
  consistent manner
- Tested on a vm system and confirmed to have a consistent naming approach now

Fixes: Bug#12772
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-18 22:09:12 +00:00
Adolf Belka
796a6e526c acct.pl: Change name of package in Error message - Bug#12772
- Change package name from squid accounting to proxy accounting in mail Subject line

Fixes: Bug#12772
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-18 22:09:00 +00:00
Adolf Belka
adb4174fa4 squid-accounting: Rename to proxy-accounting - bug#12772
- Rename lfs, rootfile and paks directory
- Change name in make.sh
- Tested out in a vm system and worked

Fixes: Bug#12772
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-18 22:08:55 +00:00
Adolf Belka
ab50bf41fe accounting.cgi: Change some variables to alphanumeric - Bug#12777
- The Postcode in the address only allowed numeric postcodes. The Netherlands and Great
   Britain are at lease two countries that use alphanumeric postcodes with spaces. Changed
   the postcode check from numeric to alphanumeric.
- The Bank Code in the Providers details only allowed numeric Bank Codes. In Great Britain
   the Bank Code, also known as the Sort Code is made up of three groups of digits separated
   by a - .
- Adjusted the regex for the alphanumeric check to include a space and a - . The original
   comment indicated that a - was allowed but it was not included in the regex.
- Tested on a vm system and confirmed that a postcode from The Netherlands and Great Britain
   and a Sort Code from Breat Britain are now accepted.

Fixes: Bug#12777
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
2022-02-18 22:06:35 +00:00
Peter Müller
772d3dbd60 Core Update 165: Ship wpa_supplicant
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-18 21:57:28 +00:00
Matthias Fischer
f51f8b1303 wpa_supplicant: Update to 2.10
For details see:
https://w1.fi/cgit/hostap/plain/wpa_supplicant/ChangeLog

"2022-01-16 - v2.10
	* SAE changes
	  - improved protection against side channel attacks
	    [https://w1.fi/security/2022-1/]
	  - added support for the hash-to-element mechanism (sae_pwe=1 or
	    sae_pwe=2); this is currently disabled by default, but will likely
	    get enabled by default in the future
	  - fixed PMKSA caching with OKC
	  - added support for SAE-PK
	* EAP-pwd changes
	  - improved protection against side channel attacks
	  [https://w1.fi/security/2022-1/]
	* fixed P2P provision discovery processing of a specially constructed
	  invalid frame
	  [https://w1.fi/security/2021-1/]
	* fixed P2P group information processing of a specially constructed
	  invalid frame
	  [https://w1.fi/security/2020-2/]
	* fixed PMF disconnection protection bypass in AP mode
	  [https://w1.fi/security/2019-7/]
	* added support for using OpenSSL 3.0
	* increased the maximum number of EAP message exchanges (mainly to
	  support cases with very large certificates)
	* fixed various issues in experimental support for EAP-TEAP peer
	* added support for DPP release 2 (Wi-Fi Device Provisioning Protocol)
	* a number of MKA/MACsec fixes and extensions
	* added support for SAE (WPA3-Personal) AP mode configuration
	* added P2P support for EDMG (IEEE 802.11ay) channels
	* fixed EAP-FAST peer with TLS GCM/CCM ciphers
	* improved throughput estimation and BSS selection
	* dropped support for libnl 1.1
	* added support for nl80211 control port for EAPOL frame TX/RX
	* fixed OWE key derivation with groups 20 and 21; this breaks backwards
	  compatibility for these groups while the default group 19 remains
	  backwards compatible
	* added support for Beacon protection
	* added support for Extended Key ID for pairwise keys
	* removed WEP support from the default build (CONFIG_WEP=y can be used
	  to enable it, if really needed)
	* added a build option to remove TKIP support (CONFIG_NO_TKIP=y)
	* added support for Transition Disable mechanism to allow the AP to
	  automatically disable transition mode to improve security
	* extended D-Bus interface
	* added support for PASN
	* added a file-based backend for external password storage to allow
	  secret information to be moved away from the main configuration file
	  without requiring external tools
	* added EAP-TLS peer support for TLS 1.3 (disabled by default for now)
	* added support for SCS, MSCS, DSCP policy
	* changed driver interface selection to default to automatic fallback
	  to other compiled in options
	* a large number of other fixes, cleanup, and extensions"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-18 21:57:05 +00:00
Matthias Fischer
6491a92335 hostapd: Update to 2.10
For details see:
https://w1.fi/cgit/hostap/plain/hostapd/ChangeLog

"2022-01-16 - v2.10
	* SAE changes
	  - improved protection against side channel attacks
	    [https://w1.fi/security/2022-1/]
	  - added option send SAE Confirm immediately (sae_config_immediate=1)
	    after SAE Commit
	  - added support for the hash-to-element mechanism (sae_pwe=1 or
	    sae_pwe=2)
	  - fixed PMKSA caching with OKC
	  - added support for SAE-PK
	* EAP-pwd changes
	  - improved protection against side channel attacks
	    [https://w1.fi/security/2022-1/]
	* fixed WPS UPnP SUBSCRIBE handling of invalid operations
	  [https://w1.fi/security/2020-1/]
	* fixed PMF disconnection protection bypass
	  [https://w1.fi/security/2019-7/]
	* added support for using OpenSSL 3.0
	* fixed various issues in experimental support for EAP-TEAP server
	* added configuration (max_auth_rounds, max_auth_rounds_short) to
	  increase the maximum number of EAP message exchanges (mainly to
	  support cases with very large certificates) for the EAP server
	* added support for DPP release 2 (Wi-Fi Device Provisioning Protocol)
	* extended HE (IEEE 802.11ax) support, including 6 GHz support
	* removed obsolete IAPP functionality
	* fixed EAP-FAST server with TLS GCM/CCM ciphers
	* dropped support for libnl 1.1
	* added support for nl80211 control port for EAPOL frame TX/RX
	* fixed OWE key derivation with groups 20 and 21; this breaks backwards
	  compatibility for these groups while the default group 19 remains
	  backwards compatible; owe_ptk_workaround=1 can be used to enabled a
	  a workaround for the group 20/21 backwards compatibility
	* added support for Beacon protection
	* added support for Extended Key ID for pairwise keys
	* removed WEP support from the default build (CONFIG_WEP=y can be used
	  to enable it, if really needed)
	* added a build option to remove TKIP support (CONFIG_NO_TKIP=y)
	* added support for Transition Disable mechanism to allow the AP to
	  automatically disable transition mode to improve security
	* added support for PASN
	* added EAP-TLS server support for TLS 1.3 (disabled by default for now)
	* a large number of other fixes, cleanup, and extensions"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-18 21:57:02 +00:00
Stefan Schantl
1bd6e152c4 Core 165: Export location DB in new format.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-18 09:28:44 +00:00
Stefan Schantl
83085ae97c firewall: Load ipset list before creating rules for DROP_HOSTILE.
Otherwise there is no ipset list use-able and the feature will not work.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-18 09:28:30 +00:00
Stefan Schantl
bae9b5dcca rules.pl: Adjust check against loading the same lists multiple times.
This check now has been moved to the ipset_restore() function, which
will help to keep the code clean and maintain-able.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-17 19:32:42 +00:00
Leo-Andres Hofmann
b67cf71b2d manualpages: Drop p2p-block entry
The p2p-block CGI has been removed. Therefore the link to its
manual page can be removed as well.

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-17 19:23:47 +00:00
Peter Müller
26674f2d5c Core Update 165: Fixed symlink after renaming Perl packages
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-17 19:23:15 +00:00
Peter Müller
b84666930e Core Update 165: Ship bind
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-17 19:22:49 +00:00
Matthias Fischer
c8ddb9ef1f bind: Update to 9.16.26
For details see:
https://downloads.isc.org/isc/bind9/9.16.26/doc/arm/html/notes.html#notes-for-bind-9-16-26

"Notes for BIND 9.16.26
Feature Changes

    The DLZ API has been updated: EDNS Client-Subnet (ECS) options sent
    by a client are now included in the client information sent to DLZ
    modules when processing queries. [GL #3082]

Bug Fixes

    Previously, recvmmsg support was enabled in libuv 1.35.0 and 1.36.0,
    but not in libuv versions 1.37.0 or greater, reducing the maximum
    query-response performance. This has been fixed. [GL #3095]

    A failed view configuration during a named reconfiguration procedure
    could cause inconsistencies in BIND internal structures, causing
    a crash or other unexpected errors. This has been fixed. [GL #3060]

    Previously, named logged a “quota reached” message when it hit its
    hard quota on the number of connections. That message was
    accidentally removed but has now been restored. [GL #3125]

    Build errors were introduced in some DLZ modules due to an
    incomplete change in the previous release. This has been fixed. [GL
    #3111]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-17 19:22:26 +00:00
Arne Fitzenreiter
10148970eb core164: fix adding additional optionfw settings
the old code erase the settings and cannot reinstalled.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-02-17 17:07:28 +00:00
Peter Müller
cf5356763f libloc: Update to 0.9.10
Please refer to https://lists.ipfire.org/pipermail/location/2022-February/000530.html
for this version's changelog.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-16 17:37:55 +00:00
Peter Müller
db9ba592ca make.sh: SIGKILL and SIGSTOP cannot be trapped
There is no sense in instructing "trap" to catch signals it cannot trap
whatsoever.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-16 17:37:30 +00:00
Adolf Belka
f28ca0c175 perl-XML-Parser: Renamed from XML-Parser
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
220ca16fbe perl-URI: Renamed from URI
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
9b68834a31 perl-Unix-Syslog: Renamed from Unix-Syslog
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
2567ad4d22 perl-Text-Tabs+Wrap: Renamed from Text-Tabs+Wrap
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
73260d326f perl-Net-Telnet: Renamed from Net-Telnet
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
b001452d30 perl-Net_SSLeay: Renamed from Net_SSLeay
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
e01f7df178 perl-Net-Server: Renamed from Net-Server
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
35bd25d382 perl-Net-IPv4Addr: Renamed from Net-IPv4Addr
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
d7f179df01 perl-Net-DNS: Renamed from Net-DNS
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
2c2f393953 perl-MIME-Tools: Renamed from MIME-Tools
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
5987badae0 perl-Mail-Tools: Renamed from Mail-Tools
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
313899b015 perl-libwww: Renamed from libwww-perl
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
b4c74c9fd3 perl-IO-Stringy: Renamed from IO-Stringy
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
747440a573 perl-IO-Socket-SSL: Renamed from IO-Socket-SSL
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
46b8d1914d perl-HTML-Template: Renamed from HTML-Template
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
61320ea2ca perl-HTML-Tagset: Renamed from HTML-Tagset
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
79e1d40e33 perl-HTML-Parser: Renamed from HTML-Parser
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
5ebc703e02 perl-GD-TextUtil: Renamed from GD-TextUtil
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
ea1744d421 perl-GD-Graph: Renamed from GD-Graph
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
b8c4670070 perl-ExtUtils-PkgConfig: Renamed from ExtUtils-PkgConfig
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
cbd39ddae0 perl-Digest-SHA1: Renamed from Digest-SHA1
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
ddf87f1ae5 perl-Digest: Renamed from Digest
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
d45bba3b6a perl-Digest-HMAC: Renamed from Digest-HMAC
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
e2c711c6d6 perl-Convert-UUlib: Renamed from Convert-UUlib
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
741fa99f3b perl-Convert-UUlib: Renamed from Convert-UUlib
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
225cad2bf2 perl-Convert-TNEF: Renamed from Convert-TNEF
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
30fbc67ea9 perl-Compress-Zlib: Renamed from Compress-Zlib
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
a47fc3aa12 perl-Canary-Stability: Renamed from Canary-Stability
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
14cf575741 perl-BerkeleyDB: Renamed from BerkeleyDB
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
8b08a90326 perl-Archive-Zip: Renamed from Archive-Zip
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
e1f8b41f00 perl-Archive-Tar: Renamed from Archive-Tar
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
3ad4e75697 make.sh: name all perl packages to start with perl
- Currently some perl packages start with perl, others don't have perl in the name
   at all and one has perl at the end of the IPFire name.
- This patch series places perl at the start of all lfs and rootfile files for perl
   packages in a similar way as is done for python3.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00