Commit Graph

12016 Commits

Author SHA1 Message Date
Peter Müller
df5cc48dd6 update StrongSwan to 5.6.3
This also takes advantage of changed crypto plugins (see first
patch) and updates the rootfile.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 12:36:11 +01:00
Peter Müller
0779907e1b libgcrypt: update to 1.8.3
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 12:36:09 +01:00
Matthias Fischer
79d32988c5 unbound: Update to 1.7.3
For details see:
http://www.unbound.net/download.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 12:36:04 +01:00
Erik Kapfer
1ff69fca2a OpenVPN: Update to version 2.4.6
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 12:36:00 +01:00
Peter Müller
c6e5fcdf12 conntrack-tools: update to 1.4.5
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 12:35:54 +01:00
Peter Müller
eeab80f8dc libnetfilter_conntrack: update to 1.0.7
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 12:35:53 +01:00
Peter Müller
733fae2abe iptables: update to 1.6.2
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 12:35:52 +01:00
Michael Tremer
46a5bac6ed vpnmain.cgi: Remove unused code that prevented the page from loading without GREEN
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 12:24:25 +01:00
Michael Tremer
080e79f149 Don't show proxy configuration pages when GREEN is not available
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 12:21:59 +01:00
Michael Tremer
dc845b6c81 AWS: Hide certain things on the web UI
Those are practically unusable on AWS.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 12:15:00 +01:00
Michael Tremer
eb7ccf87c5 AWS: Store instance id
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 11:54:51 +01:00
Michael Tremer
464c27554c aws: Re-enable check if we are actually running on EC2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 11:52:54 +01:00
Michael Tremer
9a56118b61 aws: Suppress any output from ending dhclient
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 11:51:39 +01:00
Michael Tremer
787469ebd6 aws: No need to wake up udev again
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 11:51:18 +01:00
Michael Tremer
475ae4b3db firewall: Suppress more warnings when initialising without GREEN
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 11:49:57 +01:00
Michael Tremer
470e85c365 AWS: Rename network interfaces only when necessary
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 11:44:14 +01:00
Michael Tremer
2e42a9eaa1 AWS: Import SSH keys before meddling with the network
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 11:43:35 +01:00
Michael Tremer
48a7737fdd firewall: Allow starting without a green interface
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 10:32:31 +01:00
Michael Tremer
f487e37393 AWS: No need to restart udev any more
The renames the network interfaces itself now

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-30 20:35:29 +01:00
Michael Tremer
4c0bd63ea4 localnet: Don't write local hostname to /etc/hosts
This is now being provided by nss-myhostname

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-30 19:58:42 +01:00
Michael Tremer
a1c5ceeb34 nsswitch.conf: Use nss-myhostname to resolve local hostname
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-30 19:56:56 +01:00
Michael Tremer
4e9000b4d8 nss-myhostname: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-30 19:51:38 +01:00
Michael Tremer
c7141f0479 AWS: Rename all interfaces when booting up
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-30 19:40:31 +01:00
Michael Tremer
8f2c3b49b6 aws: Apply SSH configuration changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-30 19:25:29 +01:00
Michael Tremer
16c31d1004 openssh: Write port 22 into the default configuration file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-30 19:25:15 +01:00
Michael Tremer
7d06d0de7b AWS: Restart udev to rename network interfaces
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-28 11:15:29 +01:00
Michael Tremer
0f224ad770 AWS: Add support for ORANGE
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-28 11:01:33 +01:00
Michael Tremer
1a0d8b0573 AWS: Remove some debugging line
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-28 10:57:50 +01:00
Michael Tremer
c86fd963d2 AWS: Calculate gateway and DNS IP addresses only for RED
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-28 10:57:13 +01:00
Michael Tremer
607240e28c AWS: Use correct IP address for the internal DNS
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-28 10:56:06 +01:00
Michael Tremer
3273ff48f0 aws: Write HOSTNAME and DOMAINNAME when not set
Previously we expected the entire settings file to be empty
but since we are now shipping some defaults for other settings.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-27 10:05:55 +01:00
Michael Tremer
0009de91e8 Ship default settings for language, theme, etc. in all images
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-27 09:59:47 +01:00
Michael Tremer
8b59ef085e aws: Ensure that SSH checkbox is enabled, too
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-27 09:56:32 +01:00
Michael Tremer
7fa83c2fe7 aws: Enable SSH on the first start
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-27 09:55:39 +01:00
Michael Tremer
fd52e82a72 setup: Write /etc/hosts in initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-25 11:08:04 +01:00
Michael Tremer
d97ba75fe5 setup: Don't write configuration files for TCP wrapper any more
This has been removed from the distribution a long time ago

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-25 11:01:24 +01:00
Michael Tremer
6723afef09 apache: Write hostname into configuration at boot time
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-25 10:59:49 +01:00
Michael Tremer
bd3bcb45d6 AWS: Import aws setup script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-25 10:55:39 +01:00
Michael Tremer
563c502163 dhcp: Ship dhclient
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-25 10:54:36 +01:00
Michael Tremer
3483602929 ssh: Update default configuration
This patch removes an old switch to enable SSH 1 and
makes port 22 the default port.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-25 10:53:53 +01:00
Michael Tremer
1c21ebf8d5 Add initscript that automatically configures IPFire on AWS EC2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-21 16:45:40 +01:00
Michael Tremer
1f2a90b552 flash-image: Make sure that GRUB boots the first entry
This is required when importing an image into AWS EC2 or
the import of the image fails.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-21 16:45:40 +01:00
Michael Tremer
bc91a66281 core123: Ship updated iana-etc
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:34:38 +01:00
Peter Müller
319aedce97 iana-etc: update to 2.30
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:34:25 +01:00
Erik Kapfer
823c6d270a libstatgrab: Update tp 0.91
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:33:51 +01:00
Erik Kapfer
e3dda65eba OpenVPN: Delete 1024 bit DH-parameter from menu
Since OpenVPN-2.4.x do not accepts 1024 bit DH-parameter for security concerns anymore,
    it has been removed from the menu.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:31:19 +01:00
Michael Tremer
1feef6be7c core123: Ship /var/ipfire/backup/exclude
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:31:01 +01:00
Erik Kapfer
291bfda71e backup: Exclude OpenVPNs ovpn.cnf from backup
This fixes also bug #11773

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:30:40 +01:00
Michael Tremer
b1f4acadde core123: Ship updated gnupg
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:30:26 +01:00
Peter Müller
e4529a9bc0 gnupg: update to 1.4.23
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:29:46 +01:00