]>
git.ipfire.org Git - people/arne_f/ipfire-2.x.git/log
Michael Tremer [Wed, 13 May 2015 20:02:46 +0000 (22:02 +0200)]
Merge remote-tracking branch 'stevee/core90-fixes'
Arne Fitzenreiter [Wed, 13 May 2015 17:51:42 +0000 (19:51 +0200)]
core90: work around dhcp client hang at shutdown after update.
Arne Fitzenreiter [Wed, 13 May 2015 17:46:18 +0000 (19:46 +0200)]
elinks/cyrus-imapd: bump package version openssl 0.9.8 drop.
some old installation has this addon still linked against openssl 0.9.8
so we need to update it.
Arne Fitzenreiter [Wed, 13 May 2015 17:44:15 +0000 (19:44 +0200)]
core90: fix missing filename in metafile.
Stefan Schantl [Tue, 12 May 2015 18:41:35 +0000 (20:41 +0200)]
country.cgi: Rework script.
* Introduce new method to get all country codes. In the past just the countries
has been used for which flag icons where available, which is just not what we
want.
* Finish column when the last element in the array has passed and we have an uneven
amount of items
* Improve code style.
Stefan Schantl [Tue, 12 May 2015 18:39:44 +0000 (20:39 +0200)]
geoip-block.cgi: Finish column after last element and uneven amount of items.
Michael Tremer [Mon, 11 May 2015 12:53:38 +0000 (14:53 +0200)]
core90: Remove old udev configuration
This is not used any more and must be removed with the
update so that the new script is taking effect.
Michael Tremer [Mon, 11 May 2015 10:57:29 +0000 (12:57 +0200)]
vpnmain.cgi: Do not use an other DH key exchange in ESP
Michael Tremer [Sat, 9 May 2015 09:18:08 +0000 (11:18 +0200)]
core90: Ship openldap libraries again
Arne Fitzenreiter [Fri, 8 May 2015 16:31:47 +0000 (18:31 +0200)]
Merge branch 'next'
Arne Fitzenreiter [Fri, 8 May 2015 16:30:31 +0000 (18:30 +0200)]
core90: set pakfire version to 90
Arne Fitzenreiter [Fri, 8 May 2015 11:25:36 +0000 (13:25 +0200)]
kernel: update to 3.14.41
Michael Tremer [Thu, 7 May 2015 20:46:59 +0000 (22:46 +0200)]
apache2: Ship all config files
Michael Tremer [Thu, 7 May 2015 20:42:04 +0000 (22:42 +0200)]
core90: Ship changed ipsecctrl
Michael Tremer [Thu, 7 May 2015 20:40:08 +0000 (22:40 +0200)]
strongswan: Use --wait option for iptables commands
Michael Tremer [Thu, 7 May 2015 19:06:44 +0000 (21:06 +0200)]
ipsecctrl: Use --wait switch for all iptables commands
Michael Tremer [Thu, 7 May 2015 19:05:50 +0000 (21:05 +0200)]
ipsecctrl: Remove unused code block
Arne Fitzenreiter [Wed, 6 May 2015 17:38:07 +0000 (19:38 +0200)]
core90: supply new kernel version to user update script
Arne Fitzenreiter [Wed, 6 May 2015 17:28:40 +0000 (19:28 +0200)]
core90: run user update script at kernel update.
fixes #10767
Arne Fitzenreiter [Wed, 6 May 2015 17:21:05 +0000 (19:21 +0200)]
core90: restart init after glibc update.
Arne Fitzenreiter [Wed, 6 May 2015 17:12:06 +0000 (19:12 +0200)]
qemu: update to 2.3.0
Arne Fitzenreiter [Wed, 6 May 2015 17:10:47 +0000 (19:10 +0200)]
core90: update kernel version in uEnv.txt
Arne Fitzenreiter [Wed, 6 May 2015 17:08:09 +0000 (19:08 +0200)]
core90: add Locale-Country to update
Michael Tremer [Wed, 6 May 2015 14:57:55 +0000 (16:57 +0200)]
Merge remote-tracking branch 'amarx/BUG10834' into next
Alexander Marx [Wed, 6 May 2015 14:18:00 +0000 (16:18 +0200)]
BUG10834: fixes ovpn-ccd-convert
When restoring an old backup, all OpenVPN RW's get the dynamic network.
Michael Tremer [Wed, 6 May 2015 07:44:03 +0000 (09:44 +0200)]
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Michael Tremer [Wed, 6 May 2015 07:43:53 +0000 (09:43 +0200)]
Rootfile update
Arne Fitzenreiter [Tue, 5 May 2015 20:34:30 +0000 (22:34 +0200)]
dracut: add sdhci-pci module to initrd.
fixes #10792
Michael Tremer [Tue, 5 May 2015 18:20:29 +0000 (20:20 +0200)]
Merge remote-tracking branch 'stevee/next' into next
Michael Tremer [Tue, 5 May 2015 12:00:20 +0000 (14:00 +0200)]
Split web-user-interface from apache2 LFS file
It is completely unnecssary to have this in one file
and using options for the LFS is more of a hack than
a solution.
Michael Tremer [Tue, 5 May 2015 10:19:11 +0000 (12:19 +0200)]
core90: Ship updated CGI files
Michael Tremer [Tue, 5 May 2015 10:16:58 +0000 (12:16 +0200)]
Merge remote-tracking branch 'stevee/next-cgi-geoip' into next
Michael Tremer [Tue, 5 May 2015 10:15:55 +0000 (12:15 +0200)]
Merge remote-tracking branch 'stevee/next-flag-icons' into next
Stefan Schantl [Mon, 4 May 2015 18:19:19 +0000 (20:19 +0200)]
Core 90: Add modified cgi files for firewall log statistics.
Stefan Schantl [Mon, 4 May 2015 18:16:24 +0000 (20:16 +0200)]
Merge remote-tracking branch 'stevee/next-cgi-geoip' into next
Stefan Schantl [Mon, 4 May 2015 18:15:24 +0000 (20:15 +0200)]
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Stefan Schantl [Mon, 4 May 2015 18:13:52 +0000 (20:13 +0200)]
geoip-functions: Adjust for new flag-icons and usage of "unknown" icon.
Stefan Schantl [Mon, 4 May 2015 18:10:46 +0000 (20:10 +0200)]
Core90: Drop old and add new flag-icons.
Michael Tremer [Mon, 4 May 2015 14:18:24 +0000 (16:18 +0200)]
core90: Ship updated fireinfo
Michael Tremer [Mon, 4 May 2015 14:02:39 +0000 (16:02 +0200)]
fireinfo: Fix SEGV on QEMU without KVM
Arne Fitzenreiter [Mon, 4 May 2015 05:40:30 +0000 (07:40 +0200)]
squid: rootfile update.
Stefan Schantl [Sun, 3 May 2015 19:53:03 +0000 (21:53 +0200)]
Drop old flag icons.
Stefan Schantl [Sun, 3 May 2015 19:51:04 +0000 (21:51 +0200)]
Update flag icon-set.
Move the flag icon-set into an own lfs file and replace the current
used one by a more recent version.
Arne Fitzenreiter [Sun, 3 May 2015 11:03:25 +0000 (13:03 +0200)]
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Sun, 3 May 2015 11:02:30 +0000 (13:02 +0200)]
toolchain: set version to 9.
Alexander Marx [Sun, 3 May 2015 03:24:39 +0000 (05:24 +0200)]
squid-accounting: fix monthly dbmove funktion to put values in history table
Michael Tremer [Sun, 3 May 2015 10:53:28 +0000 (12:53 +0200)]
core90: Add updated netovpnsrv.cgi to update
Michael Tremer [Sun, 3 May 2015 10:52:50 +0000 (12:52 +0200)]
Merge remote-tracking branch 'amarx/core90' into next
Alexander Marx [Sun, 3 May 2015 03:12:13 +0000 (05:12 +0200)]
Core90: make N2N Graphs higher to them correctly
Graphs in core 89 where not heigh enough so that they where zoomed which
looked bad
Michael Tremer [Sat, 2 May 2015 12:29:46 +0000 (14:29 +0200)]
core90: Also regenerate IPsec configuration during the update
Stefan Schantl [Sat, 2 May 2015 11:45:50 +0000 (13:45 +0200)]
Multiple CGI's: Use &GeoIP::get_flag_icon for getting country flags.
Michael Tremer [Sat, 2 May 2015 10:56:09 +0000 (12:56 +0200)]
squid: Disable SSL support
The SSL support parts of squid are a great security
risk. The majority of all security issues has been
in this area. As we are not using any of that in
production we can as well disable SSL support.
This won't affect squid's possibility to forward
SSL connections with the CONNECT method.
Michael Tremer [Sat, 2 May 2015 09:20:37 +0000 (11:20 +0200)]
squid: Update to 3.4.13
Michael Tremer [Fri, 1 May 2015 14:57:13 +0000 (16:57 +0200)]
vpnmain.cgi: Fix ECP regex again for Brainpool curves
The regular expression did not take into account that
there could be characters like "bp" in case of the Brainpool
curves (ecp512bp).
Arne Fitzenreiter [Thu, 30 Apr 2015 04:50:15 +0000 (06:50 +0200)]
clamav: update to 0.98.7
Arne Fitzenreiter [Wed, 29 Apr 2015 17:47:44 +0000 (19:47 +0200)]
xz: update to 5.2.1
Arne Fitzenreiter [Wed, 29 Apr 2015 17:42:06 +0000 (19:42 +0200)]
kernel: update to 3.14.40
Michael Tremer [Wed, 29 Apr 2015 09:26:35 +0000 (11:26 +0200)]
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Michael Tremer [Wed, 29 Apr 2015 09:26:20 +0000 (11:26 +0200)]
Merge remote-tracking branch 'stevee/core-90-ddnsctrl' into next
Michael Tremer [Wed, 29 Apr 2015 09:24:23 +0000 (11:24 +0200)]
dnsmasq: Import more upstream fixes
Fixes: #10786
Fixes DNSSEC validation when falling back to TCP.
Stefan Schantl [Tue, 28 Apr 2015 19:16:54 +0000 (21:16 +0200)]
Core90: Regenerate ddns config file.
Stefan Schantl [Tue, 28 Apr 2015 19:06:19 +0000 (21:06 +0200)]
ddns: Add more upstream patches.
Arne Fitzenreiter [Tue, 28 Apr 2015 18:51:03 +0000 (20:51 +0200)]
openssl: disable ssse3 on amd cpu's
amd with ssse3 (bulldozer and fusion) has serious performance problems
with the vpaes code. (-evp is 40% slower)
Michael Tremer [Tue, 28 Apr 2015 11:22:00 +0000 (13:22 +0200)]
vpnmain.cgi: Fix prefix for elliptic curve algorithms
Jochen Kauz [Tue, 28 Apr 2015 09:30:05 +0000 (11:30 +0200)]
vpnmain.cgi: dpd_delay/dpd_timeout wrong entry in ipsec.conf
Fixes #10636
Michael Tremer [Tue, 28 Apr 2015 09:15:38 +0000 (11:15 +0200)]
openssl: Don't ship an SSE-optimised version of libssl
This one does not benefit at all from any optimisations
of this kind. Only libcrypto.so.10 which holds the implementation
of ciphers and hashes gains better performance by using SSE2.
Michael Tremer [Tue, 28 Apr 2015 09:14:45 +0000 (11:14 +0200)]
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Michael Tremer [Tue, 28 Apr 2015 09:13:03 +0000 (11:13 +0200)]
tzdata: Update to version 2015d
Arne Fitzenreiter [Mon, 27 Apr 2015 20:15:20 +0000 (22:15 +0200)]
openssl: auto enable padlock engine.
Michael Tremer [Mon, 27 Apr 2015 19:17:17 +0000 (21:17 +0200)]
glibc: Fix CVE-2013-7423 and CVE-2015-1781
CVE-2013-7423: Fix invalid file descriptor reuse while sending DNS query
CVE-2015-1781: Fix buffer overflow in gethostbyname_r with misaligned buffer
Arne Fitzenreiter [Mon, 27 Apr 2015 19:19:46 +0000 (21:19 +0200)]
openssl: change sse2 optimization to i686.
Michael Tremer [Mon, 27 Apr 2015 18:58:45 +0000 (20:58 +0200)]
strongswan: Increase stroke buffer size to 8k
Michael Tremer [Mon, 27 Apr 2015 16:10:34 +0000 (18:10 +0200)]
dnsmasq: Import latest fixes from upstream
Stefan Schantl [Sun, 26 Apr 2015 15:17:36 +0000 (17:17 +0200)]
Add patched ddns to core 90.
Stefan Schantl [Sun, 26 Apr 2015 15:14:36 +0000 (17:14 +0200)]
Drop obsolete ddns patches.
Stefan Schantl [Sun, 26 Apr 2015 15:12:55 +0000 (17:12 +0200)]
ddns: Add upstream patch for fixing bug 10815.
Stefan Schantl [Sun, 26 Apr 2015 14:56:24 +0000 (16:56 +0200)]
Add ddns related files to core 90.
Stefan Schantl [Sun, 26 Apr 2015 14:52:52 +0000 (16:52 +0200)]
ddns.cgi: Use ddnsctrl for instant update.
Stefan Schantl [Sun, 26 Apr 2015 14:48:45 +0000 (16:48 +0200)]
ddnsctrl: New binary.
This helper binary is used to grand the ddns update client super user rights,
when launched out of the webinterface.
Arne Fitzenreiter [Sat, 25 Apr 2015 11:23:34 +0000 (13:23 +0200)]
Add rootfile check for hardcoded machine type.
Arne Fitzenreiter [Sat, 25 Apr 2015 07:49:37 +0000 (09:49 +0200)]
libsrtp: update rootfile.
Arne Fitzenreiter [Fri, 24 Apr 2015 18:06:13 +0000 (20:06 +0200)]
core90: remove missing file from openssl-0.9.8-files.
Arne Fitzenreiter [Fri, 24 Apr 2015 18:03:45 +0000 (20:03 +0200)]
openssl: fix ssl2 rootfile handling.
KCFG will added to the lfs filename at determine the filename in config/rootfiles folder.
Dirk Wagner [Wed, 15 Apr 2015 12:17:34 +0000 (14:17 +0200)]
asterisk addon: upate to 11.17.1
Dirk Wagner [Wed, 15 Apr 2015 12:16:36 +0000 (14:16 +0200)]
libsrtp: upgrade to 1.5.2
Arne Fitzenreiter [Thu, 23 Apr 2015 21:31:58 +0000 (23:31 +0200)]
openssl: fix typo on arm config.
Arne Fitzenreiter [Thu, 23 Apr 2015 19:18:42 +0000 (21:18 +0200)]
core90: ship backupiso withupdate.
this file was missing in core87.
Michael Tremer [Thu, 23 Apr 2015 12:28:41 +0000 (14:28 +0200)]
Drop openssl-compat package
Michael Tremer [Thu, 23 Apr 2015 11:33:35 +0000 (13:33 +0200)]
openssl: Enable all assembly optimisations build SSE2 optimised version
Fixes #10814
Alexander Marx [Thu, 23 Apr 2015 07:20:00 +0000 (09:20 +0200)]
BUG10812: fix missing slash in path
Arne Fitzenreiter [Wed, 22 Apr 2015 20:15:27 +0000 (22:15 +0200)]
rootfiles: fix build on arm.
i586 -> MACHINE
Stefan Schantl [Wed, 22 Apr 2015 16:35:00 +0000 (18:35 +0200)]
Core 90: Ship modified country.cgi.
Stefan Schantl [Wed, 22 Apr 2015 16:28:58 +0000 (18:28 +0200)]
tor: Increase PAK_VER for shipping modified CGI file.
Stefan Schantl [Wed, 22 Apr 2015 16:25:25 +0000 (18:25 +0200)]
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Stefan Schantl [Wed, 22 Apr 2015 16:18:38 +0000 (18:18 +0200)]
Rename Locale::Country to Locale::Codes::Country in various scripts.
The new Locale-Country version needs to be loaded and used by specifing
Locale::Codes::Country since an upstream API change. Adjusting various perl
scripts to use the module in the proper way again.
Michael Tremer [Wed, 22 Apr 2015 14:08:42 +0000 (16:08 +0200)]
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Alexander Marx [Wed, 22 Apr 2015 13:02:02 +0000 (15:02 +0200)]
BUG10812: change ovpnserver config if needed
Michael Tremer [Wed, 22 Apr 2015 12:45:10 +0000 (14:45 +0200)]
vpnmain.cgi: Order ciphers by strength
strongSwan uses them in the defined order. Hence it makes
much more sense to present them to the user as well in that
order.
Michael Tremer [Wed, 22 Apr 2015 12:44:16 +0000 (14:44 +0200)]
vpnmain.cgi: Use integrity functions as PRF for AEAD
Michael Tremer [Wed, 22 Apr 2015 12:08:41 +0000 (14:08 +0200)]
vpnmain.cgi: Rewrite algorithm generation code