webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-23 17:32:57 +02:00
Code Issues Packages Projects Releases Wiki Activity
11,210 Commits 2 Branches 1 Tag
d4092860749a2425a400129cd50cd14d7875c5e2
Commit Graph

1868 Commits

Author SHA1 Message Date
Michael Tremer
d409286074 apache: Ensure that not everyone can read the keys 
This would become a security risk if anyone gets
shell access as any user to copy out the HTTPS keys.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 14:11:49 +00:00
Michael Tremer
beb256e0a0 core117: Reload apache for change of configuration 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-20 15:46:53 +00:00
Michael Tremer
82e295c23e core117: Ship updated CA bundle 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 23:18:00 +00:00
Michael Tremer
0a38f7938a core117: Ship changes in pakfire 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 22:41:58 +00:00
Michael Tremer
b7a5076ca0 core117: Ship latest GeoIP changes 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 22:39:36 +00:00
Michael Tremer
9bb4055367 captive portal: Require authorization before redirecting to proxy 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-11 12:48:54 +00:00
Michael Tremer
81f6550cfb core117: Ship updated routing.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-07 16:20:53 +00:00
Michael Tremer
d6b92a118e core117: Ship updated network-functions.pl 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-07 16:16:50 +00:00
Michael Tremer
b3d2f86b87 core117: Ship changed files of the webUI 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-07 16:14:36 +00:00
Michael Tremer
bb3272dad3 Start Core Update 117 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-07 16:14:36 +00:00
Arne Fitzenreiter
5c8acc789b core116: stop apache before extracting updated files 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-03 16:40:23 +01:00
Arne Fitzenreiter
9843bb7b5a core116: replace apache restart by stop and start 
restart seems not work after replace apache...

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-03 14:28:22 +01:00
Arne Fitzenreiter
ae8e242bc1 core116: ship updated wget 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-03 14:22:19 +01:00
Arne Fitzenreiter
578171927d core116: set need_reboot flag 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-02 22:48:43 +01:00
Arne Fitzenreiter
ee328f16bf core116: ship openssh 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-02 22:46:47 +01:00
Arne Fitzenreiter
6744cd4d68 core116: fix openssl symlink 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-02 22:45:25 +01:00
Michael Tremer
4a510319ca openssl: Update to 1.0.2m 
* bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-02 15:31:04 +00:00
Michael Tremer
7dadc13829 core116: Ship updated apache 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-28 13:36:27 +01:00
Michael Tremer
63420a96b6 core116: Ship updated proxy.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-23 16:29:09 +01:00
Michael Tremer
b47d4bc1ea core116: Ship snort 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-23 16:26:39 +01:00
Michael Tremer
cd8a7fc1eb Start Core Update 116 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-23 16:24:10 +01:00
Arne Fitzenreiter
9064ba72fe drop httpscert and merge to apache initskript 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-10-22 15:50:38 +02:00
Michael Tremer
0d6b6a219f core115: Add missing parameter to actually generate new certificates 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-21 11:20:02 +01:00
Arne Fitzenreiter
fb1eb40f9b core115: add extrahd.cgi to updater 
this file was missing in early core114 testbuilds so ship it again.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-10-18 21:25:45 +02:00
Michael Tremer
7207d80c4e core115: Ship logrotate 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-16 19:20:20 +01:00
Michael Tremer
b62c826fd8 PDF-API2: Add optional dependencies to read TrueType fonts 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-16 17:43:32 +01:00
Michael Tremer
e3c3625c34 Make perl-PDF-API2 part of the base system 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-16 17:31:51 +01:00
Peter Müller
78fa47700d generate ECDSA key on existing installations 
This is required since Apache crashes if any of the key/certificate files
does not exist.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-11 20:05:55 +01:00
Peter Müller
fbc9cfd769 ship changed files for Apache and ECDSA 
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-11 20:05:53 +01:00
Michael Tremer
2f27148cbb core115: Ship updated extrahd.pl 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-11 12:20:44 +01:00
Michael Tremer
ebf697a097 core115: Ship latest OpenVPN changes 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-11 11:56:07 +01:00
Peter Müller
dc6ed83537 delete unused dial.cgi file 
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-10 12:22:19 +01:00
Michael Tremer
436479a29f core115: No need to reload apache after it has been restarted 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-09 14:58:41 +01:00
Michael Tremer
c8e03c7c53 core115: Regenerate IPsec configuration 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-09 14:58:26 +01:00
Michael Tremer
bfa0f1dfc0 core115: Rebuild language cache during update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-09 14:50:29 +01:00
Michael Tremer
2ac90665e8 core115: Ship updated apache 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-09 14:49:34 +01:00
Michael Tremer
6772cc8035 Download ISO images from https://downloads.ipfire.org 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-06 13:03:40 +01:00
Michael Tremer
1294c52ca5 core115: Include captive portal in updater 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-06 11:48:49 +01:00
Michael Tremer
112a09508e core115: Add captive portal cron jobs to updater 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-05 11:38:05 +01:00
Michael Tremer
e2d934cf2b core115: Ship update for OpenVPN 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-09-30 12:34:37 +01:00
Michael Tremer
36f5d20ef7 core115: Ship cosmetic improvements in proxy.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-09-24 20:23:06 +01:00
Arne Fitzenreiter
c42237247a start core115 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-09-24 15:51:12 +02:00
Arne Fitzenreiter
2083519a64 core114: add php to updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-09-24 13:35:01 +02:00
Arne Fitzenreiter
595c6470dd core114: force update addons after core update 
apache needs new vhost configs so all addons must updated to work with new
apache.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-09-23 10:34:54 +02:00
Michael Tremer
a041054941 core114: Update apache configuration of all add-ons that have one 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-09-04 13:09:43 +01:00
Michael Tremer
5f7487f676 core114: Ship updated apache2 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-09-04 13:02:43 +01:00
Arne Fitzenreiter
a51ce2defa core114: add unbound initskript to updater. 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-08-30 19:03:15 +02:00
Michael Tremer
0c55ec5a49 strongswan: Update to 5.6.0 
Fixes CVE-2017-11185:

Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input validation
when verifying RSA signatures, which requires decryption with the operation m^e mod n,
where m is the signature, and e and n are the exponent and modulus of the public key.
The value m is an integer between 0 and n-1, however, the gmp plugin did not verify this.
So if m equals n the calculation results in 0, in which case mpz_export() returns NULL.
This result wasn't handled properly causing a null-pointer dereference.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-08-23 20:03:21 +01:00
Michael Tremer
455f261b15 core114: Ship updated squid 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-08-23 11:33:41 +01:00
Michael Tremer
fa9c7bd047 core114: Ship updated gnutls 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-08-23 11:31:56 +01:00