webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-05-11 09:48:24 +02:00
Code Issues Packages Projects Releases Wiki Activity
11,755 Commits 2 Branches 1 Tag
bf1e75985f9231932409519f7648c4079d4a4dd5
Commit Graph

11755 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Tremer
e9a57acd12 make.sh: Simplify maths to determine cursor position 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:44:49 +00:00
Michael Tremer
fa8c758efe make.sh: Improve formatting of options 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:36:07 +00:00
Michael Tremer
405ee2b400 make.sh: Fix position of SKIP message when building packages 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:34:02 +00:00
Michael Tremer
f19f5e2366 ssl: Drop package which isn't maintained any more 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:30:56 +00:00
Michael Tremer
56720befc7 Drop vsftpd which isn't actively maintained any more 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:30:08 +00:00
Michael Tremer
d38edcf8b4 pound: Drop package which isn't very actively maintained any more 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:29:55 +00:00
Michael Tremer
77b9a869ae make.sh: Drop generating a global rootfile 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:29:34 +00:00
Michael Tremer
dc4ae0b78d make.sh: Fix printing a log line 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:29:27 +00:00
Michael Tremer
401a1edc56 make.sh: Continue producing nice output after screen has been resized 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:29:22 +00:00
Michael Tremer
aceb943b23 core117: Ship updated vpnmain.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:19:27 +00:00
Michael Tremer
120d77b33c vpnmain.cgi: Disable compression by default 
The compression is causing some interoperatibility issues
and does not really compress data very much - even when the
data is quite compressible.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:17:46 +00:00
Michael Tremer
11e900e0b4 apache: Wait until apache has stopped when we want to stop it 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 14:14:16 +00:00
Michael Tremer
d409286074 apache: Ensure that not everyone can read the keys 
This would become a security risk if anyone gets
shell access as any user to copy out the HTTPS keys.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 14:11:49 +00:00
Arne Fitzenreiter
9d5d057dac boost: disable parallel build 
this need more than 1GB ram on arm

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-28 07:13:10 +01:00
Arne Fitzenreiter
d895399850 samba: import security updates from redhead 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-28 07:12:40 +01:00
Arne Fitzenreiter
b5aca95b94 boost: disable parallel build 
this need more than 1GB ram on arm

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-28 07:01:33 +01:00
Arne Fitzenreiter
0476a6570d samba: import security updates from redhead 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-27 18:20:59 +01:00
Arne Fitzenreiter
f952832418 kernel: updated i586 config and rootfiles 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-26 09:32:47 +01:00
Arne Fitzenreiter
23b57c7022 kernel: update to 4.14.2 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-25 23:05:00 +01:00
Michael Tremer
66028310ce make.sh: Don't try to dump a non-existing logfile 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-23 16:09:00 +00:00
Michael Tremer
f3b7cf47ca make.sh: Show architecture we are building the toolchain for 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-23 16:08:03 +00:00
Michael Tremer
543286056e make.sh: Fix typo 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-23 16:06:59 +00:00
Michael Tremer
f978327791 make.sh: Refactor build status code 
This replaces the old lines that make the build
output pretty and replaces it by a version that showns
progress as it is going on as well as providing useful
output when the console is non-interactive.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-23 15:58:47 +00:00
Michael Tremer
f74072a24a Compress toolchain using XZ 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-23 15:58:45 +00:00
Michael Tremer
658232a64c make.sh: Refactor renice and root check 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-23 15:58:13 +00:00
Michael Tremer
aecbe1232b make.sh: Cleanup prepareenv 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-23 15:58:03 +00:00
Michael Tremer
813659f268 make.sh: TARGET_ARCH has been replaced by BUILD_ARCH 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-23 15:57:58 +00:00
Michael Tremer
69a6ec55ad make.sh: Merge make-functions into make.sh 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-23 15:57:50 +00:00
Michael Tremer
6c4cc7ea1b Move toolchain from /tools to /tools_${arch} 
This will allow us to run multiple builds on the same
system at the same time (or at least have them on disk).

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-23 15:57:28 +00:00
Michael Tremer
f1effdf758 make.sh: Drop option to generate a source ISO 
This is a very weird way to distribute sources in 2017.
Let's save the environment and stop using CDs.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-23 15:55:05 +00:00
Arne Fitzenreiter
2e1fe3c816 kernel: update to 4.14.1 
only x86_config has updated yet and grsecurity is removed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-22 12:29:36 +01:00
Arne Fitzenreiter
346a3e8fec xtables-addons: disable DNETMAP module 
this will not build with kernel 4.14

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-22 11:24:32 +01:00
Arne Fitzenreiter
7a192dedb9 xtables-addons: update to 2.13 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-22 11:23:47 +01:00
Michael Tremer
beb256e0a0 core117: Reload apache for change of configuration 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-20 15:46:53 +00:00
Peter Müller
a57f4a9f5d disable SSL compression and session tickets in Apache 
Ensure that Apache never uses SSL compression, which is vulnerable,
and turn off session tickets since the might cause impact to PFS.

Based against next, supersedes first version.

Reported-by: Wolfgang Apolinarski <wolfgang.apolinarski@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-20 15:45:52 +00:00
Michael Tremer
f574f9ea02 Retire the IPFire CA 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 23:18:55 +00:00
Michael Tremer
82e295c23e core117: Ship updated CA bundle 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 23:18:00 +00:00
Peter Müller
2d735404b6 update ca-certificate CA bundle 
Update the CA certificate list to what Mozilla NSS ships currently.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 23:14:59 +00:00
Michael Tremer
0a38f7938a core117: Ship changes in pakfire 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 22:41:58 +00:00
Peter Müller
bb6481a820 validate GPG keys by fingerprint 
Validate GPG keys by fingerprint and not by 8-bit key-ID.

This makes exploiting bug #11539 harder, but not impossible
and does not affect existing installations.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 22:41:21 +00:00
Michael Tremer
b7a5076ca0 core117: Ship latest GeoIP changes 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 22:39:36 +00:00
Michael Tremer
00793c27c9 GeoIP: Add lookup function for convenience 
Instead of opening the database again for each lookup,
we will read it into memory on first use and every lookup
after that will be coming from cache.

Reviewed-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 22:37:19 +00:00
Michael Tremer
b1ad5b8b6c geoip-functions.pl: Fix typos and formatting 
Reviewed-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 22:37:03 +00:00
Michael Tremer
5a4fb99e8a make.sh: Default to armv5tel on armv7* build hosts 
We won't offer a native port to ARMv7 in the near future
and to default to an architecture that is working on these
machines, we select armv5tel as default

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 21:56:27 +00:00
Michael Tremer
32e6d3e320 Revert "make.sh: Use -pipe in CFLAGS when host has >1GB of memory" 
This reverts commit 7e1639a481.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 21:49:15 +00:00
Michael Tremer
9bb4055367 captive portal: Require authorization before redirecting to proxy 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-11 12:48:54 +00:00
Arne Fitzenreiter
bdfbc09f98 kernel: update to 4.9.61 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-09 16:01:03 +01:00
Michael Tremer
81f6550cfb core117: Ship updated routing.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-07 16:20:53 +00:00
Alexander Marx
51141b150d BUG11466: fix routing.cgi the function call in routing.cgi was fixed to call the new "exact" function. 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-07 16:20:29 +00:00
Alexander Marx
3f3974b711 Network-functions: add check if variables are defined 
in function network_equal and network2bin a check for undefined variables were missing.
added them.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-07 16:19:23 +00:00