webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-05-09 08:48:27 +02:00
Code Issues Packages Projects Releases Wiki Activity
11,104 Commits 2 Branches 1 Tag
ebf697a097f38c11a603e22f7f742e24bba601a2
Commit Graph

1838 Commits

Author SHA1 Message Date
Michael Tremer
ebf697a097 core115: Ship latest OpenVPN changes 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-11 11:56:07 +01:00
Peter Müller
dc6ed83537 delete unused dial.cgi file 
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-10 12:22:19 +01:00
Michael Tremer
436479a29f core115: No need to reload apache after it has been restarted 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-09 14:58:41 +01:00
Michael Tremer
c8e03c7c53 core115: Regenerate IPsec configuration 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-09 14:58:26 +01:00
Michael Tremer
bfa0f1dfc0 core115: Rebuild language cache during update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-09 14:50:29 +01:00
Michael Tremer
2ac90665e8 core115: Ship updated apache 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-09 14:49:34 +01:00
Michael Tremer
6772cc8035 Download ISO images from https://downloads.ipfire.org 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-06 13:03:40 +01:00
Michael Tremer
1294c52ca5 core115: Include captive portal in updater 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-06 11:48:49 +01:00
Michael Tremer
112a09508e core115: Add captive portal cron jobs to updater 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-05 11:38:05 +01:00
Michael Tremer
e2d934cf2b core115: Ship update for OpenVPN 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-09-30 12:34:37 +01:00
Michael Tremer
36f5d20ef7 core115: Ship cosmetic improvements in proxy.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-09-24 20:23:06 +01:00
Arne Fitzenreiter
c42237247a start core115 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-09-24 15:51:12 +02:00
Arne Fitzenreiter
2083519a64 core114: add php to updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-09-24 13:35:01 +02:00
Arne Fitzenreiter
595c6470dd core114: force update addons after core update 
apache needs new vhost configs so all addons must updated to work with new
apache.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-09-23 10:34:54 +02:00
Michael Tremer
a041054941 core114: Update apache configuration of all add-ons that have one 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-09-04 13:09:43 +01:00
Michael Tremer
5f7487f676 core114: Ship updated apache2 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-09-04 13:02:43 +01:00
Arne Fitzenreiter
a51ce2defa core114: add unbound initskript to updater. 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-08-30 19:03:15 +02:00
Michael Tremer
0c55ec5a49 strongswan: Update to 5.6.0 
Fixes CVE-2017-11185:

Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input validation
when verifying RSA signatures, which requires decryption with the operation m^e mod n,
where m is the signature, and e and n are the exponent and modulus of the public key.
The value m is an integer between 0 and n-1, however, the gmp plugin did not verify this.
So if m equals n the calculation results in 0, in which case mpz_export() returns NULL.
This result wasn't handled properly causing a null-pointer dereference.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-08-23 20:03:21 +01:00
Michael Tremer
455f261b15 core114: Ship updated squid 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-08-23 11:33:41 +01:00
Michael Tremer
fa9c7bd047 core114: Ship updated gnutls 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-08-23 11:31:56 +01:00
Michael Tremer
38b95ad5d9 core114: Ship updated unbound 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-08-23 11:29:55 +01:00
Michael Tremer
1d7d4460d6 core114: Ship updated hdparm 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-08-21 12:21:45 +01:00
Michael Tremer
05e7808cd6 Start Core Update 114 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-08-21 12:21:14 +01:00
Michael Tremer
3bee566f45 core113: Ship openvpn which has been missing in core112 updater 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-08-17 13:15:27 +01:00
Arne Fitzenreiter
e4837ceffe core113: add strongswan-padlock to updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-08-16 20:12:45 +02:00
Michael Tremer
0e7d340f2b core113: Ship packages that have not been shipped with 112 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-08-16 11:32:43 +01:00
Arne Fitzenreiter
05478072cd unbound/ntp: move not working DNS fallback from ntp to unbound initskript 
the ntp initskript will only run at first connection try. If this fails
and the connection can established later DNS will not work if the clock
is too far away.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-08-15 20:20:16 +02:00
Arne Fitzenreiter
874eabd6f5 serial-console: remove baudrate from inittab 
new versions of agetty missinterpretes the baudrate and set it as TERM
without the parameter agetty use the previous rate that was set by the
kernel via console=XXX,Baudrate parameter.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-08-15 20:08:22 +02:00
Michael Tremer
5564841b10 core113: Add latest packages 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-08-15 11:58:38 +01:00
Michael Tremer
12b0bd949a Start Core Update 113 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-08-15 11:44:50 +01:00
Arne Fitzenreiter
71481bd8bb core112: reload init to allow correct unmount at reboot 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-07-07 10:14:37 +02:00
Michael Tremer
19404c954f core112: Ship updated util-linux 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-07-05 17:23:52 +01:00
Michael Tremer
9b5302d2ce Archive Core Updates 110 + 111 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-07-01 12:45:16 +01:00
Michael Tremer
ea938f6289 Package Core Update 112 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-07-01 12:44:48 +01:00
Arne Fitzenreiter
203601bf68 Merge branch 'core110' 2017-05-30 21:29:20 +02:00
Michael Tremer
ebf64a93ee Fix shutting down unbound when red is STATIC 
Unbound was trying to check availability of the upstream name servers
when /var/ipfire/red/active is present. This patch removes it first
and then brings down the red device.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-05-27 11:23:58 +01:00
Michael Tremer
206113d398 core111: Ship updated openssl 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-05-25 21:03:59 +01:00
Michael Tremer
7da2b89f5d core111: Ship updated OpenVPN 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-05-22 18:42:36 +01:00
Michael Tremer
488c7e7e31 core111: Ship updated cpio 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-05-18 11:55:20 +01:00
Michael Tremer
a0ab2f880e Start Core Update 111 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-05-18 11:47:07 +01:00
Arne Fitzenreiter
9598998f68 core110: remove avahi startlinks 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-04-22 08:19:05 +02:00
Arne Fitzenreiter
5b62ae49d8 core110: remove avahi from system and pakfire db 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-04-20 20:26:38 +02:00
Arne Fitzenreiter
d191cd7e76 core110: fix legacy theme css path 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-04-07 23:13:09 +02:00
Michael Tremer
d986a632cb core110: Ship updated legacy style CSS 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-07 12:05:35 +01:00
Michael Tremer
621dcd8609 pakfire: Fix dependency resolver 
The old algorithm could potentially lock itself in an endless
recursion when there were packages with circular dependencies.

This version does not do this and is also faster.

Reported-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-07 12:04:02 +01:00
Michael Tremer
be3d3959d2 openssh: Remove deprecated configuration options 
This was used for SSH version 1 which is not supported
any more

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-04 19:08:34 +01:00
Michael Tremer
73b3a1264f core110: Ship updated ntp package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-03-28 17:20:50 +01:00
Michael Tremer
2170bad5b9 setup: Allow setting netmask to 255.255.255.255 
Some hosters require that the subnet mask of the RED network
is set to 255.255.255.255. This was not possible to save before.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-03-28 17:17:03 +01:00
Michael Tremer
cda384a280 ipsec: Do not reject connections in on-demand mode 
When an on-demand VPN connection is not up, the packets will
traverse the firewall and be rejected by the IPSECBLOCK chain
which will cause that an ICMP error message will be sent to
the client. If that does not happen and the packet is being
silently dropped, the client will retransmit and by then
the VPN connection will hopefully be up.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-03-24 13:24:42 +01:00
Michael Tremer
65c3b7c913 Revert "BUG11278: enable creation from subnets of internal networks" 
This reverts commit ff6cc71107.

This patch causes that no new networks can be created and
an error message is shown that the created network is the GREEN
network which is incorrect.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-03-22 11:15:44 +00:00