Commit Graph

30 Commits

Author SHA1 Message Date
Michael Tremer
39f4488a62 core120: Regenerate IPsec configuration
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-24 14:25:55 +01:00
Arne Fitzenreiter
98ae3af844 Merge branch 'master' into core120 2018-04-09 22:25:53 +02:00
Michael Tremer
c79cbc1594 core120: Update OepnVPN configurations for PMTU changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-09 11:36:46 +01:00
Arne Fitzenreiter
a554acea16 core120: don't (re)move old packfire/gpg databases
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-04 21:38:24 +02:00
Michael Tremer
d6d058a56b core120: Update pakfire keystore
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-03 17:34:24 +01:00
Michael Tremer
6ae5439e5c core120: Ship changed pakfire files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-03 17:33:04 +01:00
Michael Tremer
0471d32b85 core120: Import new pakfire keys
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-02 15:46:40 +01:00
Michael Tremer
74e715a5a2 pakfire: Import old key, too
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-02 15:46:40 +01:00
Michael Tremer
397d3a8e15 pakfire: Rename new key to pakfire-2018.key
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-02 15:46:40 +01:00
Michael Tremer
c98304604b core120: Ship updated QoS script and gnupg
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-26 19:04:41 +01:00
Michael Tremer
dfdfafc7af core120: Ship updated vnstat
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-20 20:36:15 +00:00
Michael Tremer
eb68e27dd2 pakfire: Import key when system boots up
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-19 19:44:50 +00:00
Michael Tremer
b2318b5e35 core120: Ship updated logrotate and restart unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-18 13:51:38 +00:00
Erik Kapfer
e779b6bc7a PAM: Delete old lib and symlinks
Core 119 update delivers an updated PAM whereby the libdir has been changed from /lib to /usr/lib
but the old libraries and symlinks are still presant. Since the system searches /lib before
/usr/lib , the old libs and symlinks are used which ends up in an `LIBPAM_EXTENSION_1.1' not found.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-18 13:44:04 +00:00
Michael Tremer
35b892b0dd pakfire: Drop old key import mechanism
This was error-prone and allowed to potentially inject another
key.

Fixes: #11539
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-16 14:37:21 +00:00
Michael Tremer
ceed3534e1 core120: Import new pakfire PGP key
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-16 14:28:17 +00:00
Michael Tremer
dcd60d274e core120: Ship updated qos.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-06 15:13:56 +00:00
Michael Tremer
318434affb core120: Ship updated proxy.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-06 15:12:42 +00:00
Michael Tremer
01bec95655 core120: Ship updated unbound init script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-05 15:21:56 +00:00
Michael Tremer
568a227bd3 vpnmain.cgi: Fix reading common names from certificates
OpenSSL has changed the output of the subject lines of
certificates.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-01 19:59:14 +00:00
Michael Tremer
e707599d2c core120: Call openvpnctrl with full path
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-28 10:48:29 +00:00
Michael Tremer
d192815e83 core120: Ship everything that is linked against OpenSSL
This will make sure that everything is using the new version
of the library.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-26 16:22:32 +00:00
Michael Tremer
1c0cfaa594 Disable Path MTU discovery
This seems to be a failed concept and causes issues with transferring
large packets through an IPsec tunnel connection.

This configures the kernel to still respond to PMTU ICMP discovery
messages, but will not try this on its own.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-26 15:37:49 +00:00
Michael Tremer
f0e308ab2f core120: Fix typo in initscript name
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-26 15:34:10 +00:00
Michael Tremer
0eccedd1c8 dhcp: Allow adding extra DHCP interfaces
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-26 11:12:20 +00:00
Erik Kapfer via Development
39d11d265e OpenVPN: Ship missing OpenSSL configuration file for update
Core 115 delivered a patch which prevents the '--ns-cert-type server is deprecated' message
and introduced also '--remote-cert-tls server' -->
https://patchwork.ipfire.org/patch/1441/ whereby the changed ovpn.cnf has not been delivered.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-26 10:15:30 +00:00
Michael Tremer
8b080ef12b core120: Remove deprecated sshd configuration option
This just created a warning and is now dropped

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-21 13:06:22 +00:00
Michael Tremer
c8e4391ecc core120: Remove forgotten PHP file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-21 12:41:05 +00:00
Michael Tremer
53929f5ae8 core120: Ship updated OpenSSL 1.1.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-21 12:39:55 +00:00
Michael Tremer
cb8a6bf5a4 Start Core Update 120
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-21 12:20:57 +00:00