webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-23 09:22:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
11,723 Commits 2 Branches 1 Tag
783f6aa36d825ee2da57b3eae714aa4e0f618fc5
Commit Graph

5842 Commits

Author SHA1 Message Date
Arne Fitzenreiter
783f6aa36d Merge remote-tracking branch 'origin/master' into kernel-4.14 2018-04-03 20:15:58 +02:00
Michael Tremer
d6d058a56b core120: Update pakfire keystore 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-03 17:34:24 +01:00
Michael Tremer
6ae5439e5c core120: Ship changed pakfire files 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-03 17:33:04 +01:00
Arne Fitzenreiter
6703371d2d Merge remote-tracking branch 'origin/core120' into kernel-4.14 2018-04-02 17:11:45 +02:00
Arne Fitzenreiter
718119b897 Merge branch 'master' into core119 2018-04-02 16:56:02 +02:00
Michael Tremer
4d888e6854 curl: Drop old compatibility symlink 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-02 15:50:09 +01:00
Michael Tremer
e7cda9ac7f curl: Rootfile update 
Main library was missing

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-02 15:48:50 +01:00
Michael Tremer
0471d32b85 core120: Import new pakfire keys 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-02 15:46:40 +01:00
Michael Tremer
74e715a5a2 pakfire: Import old key, too 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-02 15:46:40 +01:00
Michael Tremer
397d3a8e15 pakfire: Rename new key to pakfire-2018.key 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-02 15:46:40 +01:00
Arne Fitzenreiter
3e7dee5951 core120: add pakfire script to updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-04-02 11:22:19 +02:00
Arne Fitzenreiter
1b06675c00 openssl: update rootfile 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-31 10:02:01 +02:00
Arne Fitzenreiter
e12d216eec kernel: x86_64 rootfile update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-31 09:56:48 +02:00
Arne Fitzenreiter
b465322d7c kernel: x86_64 enable DEVFREQ modules 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-30 16:39:02 +02:00
Arne Fitzenreiter
302dba205b Merge remote-tracking branch 'origin/master' into kernel-4.14 2018-03-30 10:26:01 +02:00
Arne Fitzenreiter
36600cef36 Merge branch 'core119' into next 2018-03-30 09:35:28 +02:00
Michael Tremer
f7e9c14842 Rootfile update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-29 13:49:44 +01:00
Michael Tremer
d97f43b309 Rootfile update for curl 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-28 11:22:06 +01:00
Michael Tremer
d9e656bb82 asterisk: Ship documentation 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-27 20:56:31 +01:00
Michael Tremer
c98304604b core120: Ship updated QoS script and gnupg 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-26 19:04:41 +01:00
Matthias Fischer
be7878d5c9 Fix typo in 'makeqosscripts.pl' 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-26 19:03:30 +01:00
Arne Fitzenreiter
50bee0291d xr819-firmware: move rootfile to common 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-26 07:29:51 +02:00
Arne Fitzenreiter
66b5b4d12c kernel: update to 4.14.30 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-25 20:26:47 +02:00
Arne Fitzenreiter
37b86fa99b xr819-firmware: add firmware for xradio xr-819 wlan 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-25 13:27:03 +02:00
Arne Fitzenreiter
0a21d63f26 kernel: updated arm config and image build 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-25 11:41:20 +02:00
Arne Fitzenreiter
ea9d53c822 inittab: change tty1 to console 
this reduce the differences between tty and scon installations
and make it easier to switch between.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-24 13:26:32 +01:00
Arne Fitzenreiter
5bc33236ca swconfig: remove old swconfig utility 
this is not compatible with kernel 4.14
todo: replace swconfig calls in initskript

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-24 12:49:10 +01:00
Arne Fitzenreiter
4df5cc2f75 rpi-firmware: update to 2018-03-16 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-24 12:41:57 +01:00
Arne Fitzenreiter
2a0947f2e3 u-boot: update to 2018.03 
todo: check wandboard version. there are internal changes to merge
the different wandboard images to one and u-boot.imx is not build
anymore. Which file is needed to boot on wandboard?

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-24 11:14:24 +01:00
Michael Tremer
dfdfafc7af core120: Ship updated vnstat 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-20 20:36:15 +00:00
Michael Tremer
eb68e27dd2 pakfire: Import key when system boots up 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-19 19:44:50 +00:00
Michael Tremer
5876642d17 ffmpeg: Ship libraries correctly 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-19 18:07:49 +00:00
Michael Tremer
35cdaa194a Fix python-m2crypto rootfile 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-19 11:52:44 +00:00
Michael Tremer
b2318b5e35 core120: Ship updated logrotate and restart unbound 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:51:38 +00:00
Matthias Fischer
9e9fdb39e6 unbound: Update to 1.7.0 
For details see:
http://www.unbound.net/download.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:49:40 +00:00
Erik Kapfer
e779b6bc7a PAM: Delete old lib and symlinks 
Core 119 update delivers an updated PAM whereby the libdir has been changed from /lib to /usr/lib
but the old libraries and symlinks are still presant. Since the system searches /lib before
/usr/lib , the old libs and symlinks are used which ends up in an `LIBPAM_EXTENSION_1.1' not found.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:44:04 +00:00
Arne Fitzenreiter
1682e5fc69 kernel: drop rpi config 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-16 20:48:56 +01:00
Michael Tremer
35b892b0dd pakfire: Drop old key import mechanism 
This was error-prone and allowed to potentially inject another
key.

Fixes: #11539
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-16 14:37:21 +00:00
Michael Tremer
ceed3534e1 core120: Import new pakfire PGP key 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-16 14:28:17 +00:00
Michael Tremer
5e5c2e5413 Import new Pakfire Signing Key 
We will swap the key that we use to sign Pakfire packages
since the current one is considered outdated cryptography.

Fixes: #11539

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-16 14:26:07 +00:00
Arne Fitzenreiter
bf19f5c6a0 kernel: drop rpi kernel 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-14 19:39:23 +01:00
Michael Tremer
dcd60d274e core120: Ship updated qos.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-06 15:13:56 +00:00
Michael Tremer
318434affb core120: Ship updated proxy.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-06 15:12:42 +00:00
Michael Tremer
01bec95655 core120: Ship updated unbound init script 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-05 15:21:56 +00:00
Michael Tremer
568a227bd3 vpnmain.cgi: Fix reading common names from certificates 
OpenSSL has changed the output of the subject lines of
certificates.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-01 19:59:14 +00:00
Michael Tremer
63b515dc26 apache: Require TLSv1.2 for access to the web user interface 
This will work fine for FF 27 or newer, Chrome 30 or newer,
IE 11 on Windows 7 or newer, Opera 17 or newer, Safari 9 or
newer, Android 5.0 or newer and Java 8 or newer

Since IPFire is not supposed to host any other applications and
all have been removed in the last few Core Updates, only the web
user interface is served over HTTPS here. We clearly prefer
security over compatibility.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-02-28 11:55:35 +00:00
Peter Müller
464426d363 change Apache TLS cipher list to "Mozilla Modern" 
Change the TLS cipher list of Apache to "Mozilla Modern".

ECDSA is preferred over RSA to save CPU time on both server
and client. Clients without support for TLS 1.2 and AES will
experience connection failures.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-02-28 11:54:08 +00:00
Michael Tremer
e707599d2c core120: Call openvpnctrl with full path 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-02-28 10:48:29 +00:00
Arne Fitzenreiter
1a7cfc2f10 Merge remote-tracking branch 'origin/core119' into kernel-4.14 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-02-27 12:38:18 +01:00
Michael Tremer
d192815e83 core120: Ship everything that is linked against OpenSSL 
This will make sure that everything is using the new version
of the library.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-02-26 16:22:32 +00:00