Michael Tremer
00793c27c9
GeoIP: Add lookup function for convenience
...
Instead of opening the database again for each lookup,
we will read it into memory on first use and every lookup
after that will be coming from cache.
Reviewed-by: Peter Müller <peter.mueller@link38.eu >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-11-13 22:37:19 +00:00
Alexander Marx
51141b150d
BUG11466: fix routing.cgi the function call in routing.cgi was fixed to call the new "exact" function.
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-11-07 16:20:29 +00:00
Peter Müller
725396af2c
link to HTTPS version of www.ipfire.org in WebUI
...
Change links to www.ipfire.org in WebUI themes since the website
now uses HTTPS.
Signed-off-by: Peter Müller <peter.mueller@link38.eu >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-11-07 16:14:36 +00:00
Peter Müller
eea4969dff
Tor: Use relay mode as default setting
...
Set the default operating mode to "relay" in the Tor WebUI
configuration page.
Running a Tor exit relay may cause legal trouble in some
countries and should not be the default setting to prevent
users from accidentally running an exit router.
Signed-off-by: Peter Müller <peter.mueller@link38.eu >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-11-07 16:14:36 +00:00
Michael Tremer
ad1204e4eb
captive: One month is only 30 days instead of 210
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-11-06 19:07:10 +00:00
Matthias Fischer
c4b12981e2
proxy.cgi: Even more cosmetics
...
Another clickable link for 'proxy.cgi', this time for 'Cache Manager Interface' - this one opens in a new window.
And: This time - hopefully - with correct '_blank'-attribute (deleted the backslashes) - based on current 'next'.
Plus: Deleted some "blind" tabs - found by chance.
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-23 16:28:29 +01:00
Matthias Fischer
49f7ee5d72
snort: Update to 2.9.11
...
For details see:
Release notes:
https://snort.org/downloads/snort/release_notes_2.9.11.txt
Changelog:
https://snort.org/downloads/snort/changelog_2.9.11.txt
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-23 16:24:46 +01:00
Arne Fitzenreiter
fcd8ab4c23
Merge branch 'master' into core115
2017-10-18 21:20:23 +02:00
Michael Tremer
af6c5929b0
captive: Simplify coupon time selection
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-17 15:05:53 +02:00
Michael Tremer
f32174956e
captive: Reindent code for better readability
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-17 12:43:42 +01:00
Michael Tremer
3a62dca68e
captive: Localise GREEN/BLUE
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-17 12:41:17 +01:00
Michael Tremer
a54350cdb9
captive: Allow PDF export of coupons
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-16 16:36:24 +02:00
Michael Tremer
ebfb899693
captive: Add headline to T&C box
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-16 15:03:39 +02:00
Michael Tremer
e2bd5a6eb9
captive: Allow editing terms in coupon mode
...
Since the terms are always shown when set, we need a way
to edit them in coupon mode as well.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-11 14:52:03 +01:00
Erik Kapfer
b66b02ab73
OpenVPN: Fix for '--ns-cert-type server is deprecated' .
...
- Added extended key usage based on RFC3280 TLS rules for OpenVPNs OpenSSL configuration,
so '--remote-cert-tls' can be used instead of the old and deprecated '--ns-cert-type'
if the host certificate are newely generated with this options.
Nevertheless both directives (old and new) will work also with old CAs.
- Automatic detection if the host certificate uses the new options.
If it does, '--remote-cert-tls server' will be automatically set into the client
configuration files for Net-to-Net and Roadwarriors connections.
If it does NOT, the old '--ns-cert-type server' directive will be set in the client
configuration file.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-11 11:55:16 +01:00
Peter Müller
dc6ed83537
delete unused dial.cgi file
...
Signed-off-by: Peter Müller <peter.mueller@link38.eu >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-10 12:22:19 +01:00
Peter Müller
e34e72b6e1
add missing check for Curve25519 in vpnmain.cgi
...
This fixes bug #11501 which causes IPsec connections to crash if
Curve25519 has been enabled.
Signed-off-by: Peter Müller <peter.mueller@link38.eu >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-09 14:54:37 +01:00
Michael Tremer
bef7ad5bbe
captive: Fix saving empty terms
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-09 14:34:21 +01:00
Michael Tremer
bbc69f228d
captive portal: Correctly initialise an array for 8h timeout
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-05 11:11:32 +01:00
Michael Tremer
027614d2dc
Merge branch 'captive-portal' into next
2017-10-04 16:10:07 +01:00
Michael Tremer
0a219160ac
captive portal: Allow sessions to expire after 8 hours
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-04 14:21:12 +01:00
Michael Tremer
1f06098ba7
captive-portal: Serve Ubuntu font files locally
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-04 12:55:17 +01:00
Matthias Fischer
d5f061e9e7
Apache 2.4.27 breaks ExtraHD-GUI
...
Opening 'extrahd.cgi' led to:
"Response header name 'scanhd idescanhd partitionsCache-control' contains
invalid characters, aborting request".
https://forum.ipfire.org/viewtopic.php?f=27&t=19550#p111030
https://forum.ipfire.org/viewtopic.php?f=50&t=19563&sid=575337ac1caf1df492fced01ca6243de#p111048
https://forum.ipfire.org/viewtopic.php?f=22&t=19563#p111052
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-10-02 19:27:52 +01:00
Matthias Fischer
082771c1f4
proxy.cgi: Some cosmetics for the absolutely lazy ones (V2)
...
Added clickable links for 'URL filter' and 'Update accelerator' for faster access,
this time without the need to alter the language-files.
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-24 20:22:45 +01:00
Michael Tremer
5f1b951102
captive: Show access page in browser language
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
Tested-by: Daniel Weismüller <daniel.weismüller@ipfire.org >
2017-09-22 19:00:04 +01:00
Michael Tremer
963beecdb8
captive: Fix passing redirection URL
...
Reported-by: Daniel Weismüller <daniel.weismueller@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 19:00:04 +01:00
Michael Tremer
45b1b7cf65
captive: Do not show checkbox when in coupon mode
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
497b910855
captive: Verify that the user actually accepted the terms and conditions
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
eb3e3017cb
captive: Style any error messages
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
aed55ef9f8
captive: Show a message when no coupon code was entered
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
8b0679cc89
captive: Fix some template updates that I forgot
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
792f1a3bdf
captive: Drop duplicate function to list active clients
...
There was a function with different name but essentially
same functionality which is already existant in &show_clients().
Therefore this patch drops the old function without any functional
changes.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
41964aba09
captive: Redesign clients list box
...
Mostly code cleanup
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
a0b271e474
captive: Redesign generated coupons table
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
733932de74
captive: Correctly set coupon lifetime
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
9cba29f119
captive: Remember selected coupon expiry time
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
5cd9e28bc4
captive: Allow creating multiple coupons in bulk
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
4f75fbfe12
captive: Cleanup coupon generation block
...
No functional changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
810198110e
captive: Cleanup logo upload
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
e7d16ea553
captive: Cleanup authentication selection
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
a41fe924ae
captive: Code cleanup
...
No functional changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
b7a126d9c8
captive: Allow uploading JPEG images, too
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
8802d70a28
captive: Serve logo through an extra CGI script
...
This CGI script makes saving the logo easier (especially for
backup purposes).
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
e2752bfe71
captive: Save logo in /var/ipfire/captive
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
278309b9ef
captive: Allow selecting the session expiry time for terms
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:56:04 +01:00
Michael Tremer
297ebdd47b
captive: Group settings together and create branding section
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:55:27 +01:00
Michael Tremer
827d3f61da
captive: Some more CGI cleanup
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:55:27 +01:00
Michael Tremer
97b91e8a94
captive: Rename "Voucher" mode to "Coupon"
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:55:27 +01:00
Michael Tremer
9735e1670a
captive: Rename "License" mode to "Terms & Conditions"
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:55:27 +01:00
Michael Tremer
f8d35875d8
captive: Allow selecting highlight colour in web interface
...
To be able to customise the access page, we now allow the
user to select a brand colour.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-09-22 18:55:27 +01:00