Michael Tremer
39f4488a62
core120: Regenerate IPsec configuration
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-24 14:25:55 +01:00
Arne Fitzenreiter
98ae3af844
Merge branch 'master' into core120
2018-04-09 22:25:53 +02:00
Michael Tremer
c79cbc1594
core120: Update OepnVPN configurations for PMTU changes
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-09 11:36:46 +01:00
Arne Fitzenreiter
a554acea16
core120: don't (re)move old packfire/gpg databases
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-04 21:38:24 +02:00
Michael Tremer
d6d058a56b
core120: Update pakfire keystore
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-03 17:34:24 +01:00
Michael Tremer
6ae5439e5c
core120: Ship changed pakfire files
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-03 17:33:04 +01:00
Michael Tremer
0471d32b85
core120: Import new pakfire keys
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-02 15:46:40 +01:00
Michael Tremer
74e715a5a2
pakfire: Import old key, too
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-02 15:46:40 +01:00
Michael Tremer
397d3a8e15
pakfire: Rename new key to pakfire-2018.key
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-02 15:46:40 +01:00
Michael Tremer
c98304604b
core120: Ship updated QoS script and gnupg
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-26 19:04:41 +01:00
Michael Tremer
dfdfafc7af
core120: Ship updated vnstat
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-20 20:36:15 +00:00
Michael Tremer
eb68e27dd2
pakfire: Import key when system boots up
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-19 19:44:50 +00:00
Michael Tremer
b2318b5e35
core120: Ship updated logrotate and restart unbound
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-18 13:51:38 +00:00
Erik Kapfer
e779b6bc7a
PAM: Delete old lib and symlinks
...
Core 119 update delivers an updated PAM whereby the libdir has been changed from /lib to /usr/lib
but the old libraries and symlinks are still presant. Since the system searches /lib before
/usr/lib , the old libs and symlinks are used which ends up in an `LIBPAM_EXTENSION_1.1' not found.
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-18 13:44:04 +00:00
Michael Tremer
35b892b0dd
pakfire: Drop old key import mechanism
...
This was error-prone and allowed to potentially inject another
key.
Fixes : #11539
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-16 14:37:21 +00:00
Michael Tremer
ceed3534e1
core120: Import new pakfire PGP key
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-16 14:28:17 +00:00
Michael Tremer
dcd60d274e
core120: Ship updated qos.cgi
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-06 15:13:56 +00:00
Michael Tremer
318434affb
core120: Ship updated proxy.cgi
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-06 15:12:42 +00:00
Michael Tremer
01bec95655
core120: Ship updated unbound init script
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-05 15:21:56 +00:00
Michael Tremer
568a227bd3
vpnmain.cgi: Fix reading common names from certificates
...
OpenSSL has changed the output of the subject lines of
certificates.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-01 19:59:14 +00:00
Michael Tremer
e707599d2c
core120: Call openvpnctrl with full path
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-28 10:48:29 +00:00
Michael Tremer
d192815e83
core120: Ship everything that is linked against OpenSSL
...
This will make sure that everything is using the new version
of the library.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-26 16:22:32 +00:00
Michael Tremer
1c0cfaa594
Disable Path MTU discovery
...
This seems to be a failed concept and causes issues with transferring
large packets through an IPsec tunnel connection.
This configures the kernel to still respond to PMTU ICMP discovery
messages, but will not try this on its own.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-26 15:37:49 +00:00
Michael Tremer
f0e308ab2f
core120: Fix typo in initscript name
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-26 15:34:10 +00:00
Michael Tremer
0eccedd1c8
dhcp: Allow adding extra DHCP interfaces
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-26 11:12:20 +00:00
Erik Kapfer via Development
39d11d265e
OpenVPN: Ship missing OpenSSL configuration file for update
...
Core 115 delivered a patch which prevents the '--ns-cert-type server is deprecated' message
and introduced also '--remote-cert-tls server' -->
https://patchwork.ipfire.org/patch/1441/ whereby the changed ovpn.cnf has not been delivered.
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-26 10:15:30 +00:00
Michael Tremer
8b080ef12b
core120: Remove deprecated sshd configuration option
...
This just created a warning and is now dropped
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-21 13:06:22 +00:00
Michael Tremer
c8e4391ecc
core120: Remove forgotten PHP file
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-21 12:41:05 +00:00
Michael Tremer
53929f5ae8
core120: Ship updated OpenSSL 1.1.0
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-21 12:39:55 +00:00
Michael Tremer
cb8a6bf5a4
Start Core Update 120
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-21 12:20:57 +00:00