ovpnmain.cgi: Remove dead code

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Use SHA512 for hashing by default

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Keep the fallback cipher disabled by default

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Allow to disable the fallback cipher

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Rename cipher selection to fallback cipher

This is to keep ancient clients and clients that have NCP disabled
happy.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lang: Update because of OpenVPN changes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

CSS: Make all <select> and <textarea> use all available space

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Fix the completely fucked table layout

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Move the cryptographic options to the advanced page

Since we don't want people play too much with these, we move them to the
advanced settings page.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Fix resetting compression setting

The compression option was reset (disabled) when the Save button on the
main was being clicked.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Remove crypto error/warning boxes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Remove authorship comments

These are not very useful.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Don't mess with the OpenVPN status file

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Move things that belong together together

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Don't create CCD configuration files on every call

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Reorganise loading external modules

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Don't include lang.pl again when its already loaded in header.pl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Don't load colours when they are already loaded in header.pl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Remove unused variable hack

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Drop newcleanssldatabase()

I have no idea why this was added when there is a function that does the
same already. The remove function also had typos in the path which
probably resulted in it not working very well.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Use the formatting function we already have

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Drop unused refresh code

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Tidy up starting/restarting the RW server

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Use default functions to check what subnets exist

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Remove certificate warnings

I believe that these don't really work and are always shown.
Please see #13634.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Fix some whitespace issues

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Enable debugging

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

linux-firmware: ship needed config txt files.

these files are parsed by the kernel at firmware load and are needed!
don't remove it again.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 6.6.63

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: rootfile update aarch64

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: rebase aarch64 patchset and add nanopi r2s plus oc devicetree

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

transmission: add minipnpc as dependency

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

miniupnpc: change to addon pak

transmission need the lib at runtime.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 6.6.62

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

collectd: fix errormessage on fresh installations

the /etc/collectd.d/ folder must have at least one file in it
so this add an file with a comment that custom configs should placed
there.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 6.6.60

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

networking/red: remove leftover debugging messages.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

hostapd: fix start/stop buttons

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

network-functions: fix add newline in $wireless_status

with the other syntax perl suggest this change.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core190: ship intel-microcode

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

intel-microcode: Update to version 20241029

- Update from version 20240910 to 20241029
- Update of rootfile not required
- Changelog
    20241029
Update for functional issues. Refer to 14th/13th Generation Intel® Core™
 Processor Specification Update for details at
 https://cdrdv2.intel.com/v1/dl/getContent/740518
Updated Platforms
 Processor   Stepping  F-M-S/PI     Old Ver   New Ver   Products
 RPL-E/HX/S  B0        06-b7-01/32  00000129  0000012b  Core Gen13/Gen14

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

suricata: Explicitly ignore IPsec traffic unless enabled

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core190: ship bind

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

bind: Update to 9.20.3

For details see:
https://downloads.isc.org/isc/bind9/9.20.3/doc/arm/html/notes.html#notes-for-bind-9-20-3

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

unbound: Update to 1.22.0

For details see:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-22-0

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core190: ship unbound-dhcp-leases-bridge

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

unbound-dhcp-leases-bridge: Fix expiry check on leases

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

unbound-dhcp-leases-bridge: Don't overwrite static leases

When we import all static leases, their remark will be used as hostname
(because WTF?) and might be overwritten if the device is not sending any
or even the same hostname.

This patch avoids that static leases will be modified.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

unbound-dhcp-leases-bridge: Fix typo

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

unbound-dhcp-leases-bridge: Don't export expired leases to Unbound

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core190: ship dhcp client changes

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

networking: Allow changing DHCP Option Rapid Commit

This option needs to be configurable since some (braindead) ISPs have
started running broken DHCP servers to be bug-compatible with cheap
broken plastic routers.

By default we keep this option enabled, but it can now be turned off
whenever needed.

Suggested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core190: ship files with fixed chown syntax

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

chown: Replace . with : on all shipped scripts

I don't like this messy bootup screen that we have with all sorts of
warnings that actually don't cause any problems, but make the boot
messy and send the wrong message to users.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core190: ship network-hotplug-bridges

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

udev: network-hotplug-bridges: Silence a warning when interfaces have gone away

It can happen that udev has an event for an interface in the queue that
has already gone away - or even just being renamed.

Then reading the MAC address fails. Because the shell expands the
"$(<...)" statement before running the whole line, the read check is
useless.

Because the code would get too complicated otherwise, I decided to use
cat. Not cool, but this does the job.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

wlanap.cgi: Use the correct array to fetch the current interface

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

hostapd: Enable logging to syslog

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 6.6.59

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

gdb: rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Config: add ROOTFILE_APPEND variable to select rootfile

also gcc on riscv64 has to different rootfile at build so make
the selection of an additional rootfile univarsal.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: fix riscv64 rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update riscv64 config and rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

gdb: update rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

ruby: make rootfile arch independend

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

gdb: update aarch64 rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 6.6.58

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

cdrom: add serial console to uEFI menu

this is only needed on systems that support both video out and serial
console to force serial.

flash-images: move sleep 1 to a better place

kpartx trigger the automount feature of some desktop environments
which result in a mounted filesystem if it was created to fast after
kpartx.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

flash-images: add sleep 1 after umount the images

sometime zerofree will not able to write without this delay.
I have no idea why?

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

vdr: update to version 2.6.9

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

lfs/Config: fix used rootfile for linux headers

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

nmap: rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

freeradius: update rootfile and increment PAK_VER

new package is needed because a lib was not shipped with v21

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

whatmask: update rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

pkg-config: update rootfile
:
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

perl-MIME-Tools: update rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

perl-Archive-Zip: update rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

autoconf-archive: update rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

cmake: update rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

make.sh: Check for changes in logs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dhcpcd: Update to version 10.1.0

- Update from version 10.0.10 to 10.1.0
- Update of rootfile not required
- Changelog
    10.1.0
Bug Fixes
dhcp: get_option_uint32/16 only accept options with correct len by
 @taoyl-g in #357
Include frame header in buffer length by @acst1223 in #371
For full changelog see commits delta in
 https://github.com/NetworkConfiguration/dhcpcd/compare/v10.0.10...v10.1.0

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid: Update to 6.12

For details see:
https://github.com/squid-cache/squid/commits/v6

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

monit: Update to 5.34.2

For details see:
https://mmonit.com/monit/changes/

"Fixed: The network protocol test may occasionally fail with a
"Poll failed: Interrupted system call" error."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Avoid finding non-existant rootfiles

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Enable IO uring

This is a feature more and more tools start using now and will help to
keep performance of the OS up.

This was enabled on riscv64 already.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

tshark: Update to version 4.4.1

- Update from version 4.2.7 to 4.4.1
- The 4.4.x series is the new Stable Release replascing the 4.2.x series which becomes
   the Old Stable Release.
- There is an sobump so find-dependencies was run for the three libraries with changes
   but all linked programs are within tshark.
- Changelog is too large to include here. Links provided
    4.4.1
https://www.wireshark.org/docs/relnotes/wireshark-4.4.1.html
    4.4.0
https://www.wireshark.org/docs/relnotes/wireshark-4.4.0.html

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Show rootfiles that contain some architecture

Previously, make.sh just failed but did not explain why it was unhappy.

This patch adds a message which rootfiles contain which architecture.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mympd: update to 18.0.0

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 6.6.56

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

rtl8812au: add missing rootfile.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

monit: Update to 5.34.1

For details see:
https://mmonit.com/monit/changes/

"Fixed: The check program now avoids leaving zombie processes between cycles."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lcdproc: removal as discussed in Conf call 7th Oct

- removal of lfs, rootfile and config files
- backup includes file is also removed, althouigh it was an empty file, so not backing
   anything up.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mpfire: removal as discussed in Conf call 7th Oct

- removal of lfs, rootfile, backup, paks, misc-progs, mpfire perl, language file
   content, mpfire.cgi, mpfire menu references and files, mpfire specific image,
   web-user-interface references and references in manualpages.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core190: Ship ppp

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ppp: Update to version 2.5.1

- Update from version commit e1266c7 to 2.5.1
- Version 2.5.1 has around 34 additional commits from e1266c7. To me all look minor
   changes, some related to other system types such as Solaris that we don't use.
- Update of rootfile
- They have added example to the configuration files to prevent accidental overwriting
   of configuration systems.
- Changelog - There is no longer any changelog provided. Even the one that used to
   exist for version 2.5.0 has been removed. The only option now is to look through the
   commits - https://github.com/ppp-project/ppp/commits/master/?before=d5aeec65752d4a9b3bb46771d0b221c4a4a6539e+35
- Some of the patches had to be updated as the changes were enough that some hunks did
   not get found for patching. Patch file number 6 has been removed as the sed lines are
   no longer to be found in the configure file. The other files that patched successfully
   were renamed to 2.5.1

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'master' into next

hostapd: update to git 64d60bb4

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wlanap.cgi: Fix copying configuration

This allows to uncheck checkboxes again.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wlanap.cgi: Change broadcast SSID to hide SSID

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>