]>
git.ipfire.org Git - people/mfischer/ipfire-2.x.git/log
Erik Kapfer [Wed, 28 May 2014 06:12:52 +0000 (08:12 +0200)]
openvpn: Added DH parameter to CA chart.
Added also a 'Default' mark in N2N cipher menu for AES-256-CBC.
(cherry picked from commit
c16d97c617b8a7a663f536da61f7b161251c6500 )
Erik Kapfer [Mon, 26 May 2014 12:14:44 +0000 (14:14 +0200)]
openvpn: Fixed some typos
(cherry picked from commit
b585282abfc3666feedd9e1464095297e76a8aaf )
Michael Tremer [Wed, 28 May 2014 18:23:41 +0000 (20:23 +0200)]
core78: Add sudo to update.
Michael Tremer [Mon, 26 May 2014 21:44:53 +0000 (23:44 +0200)]
sudo: Update to 1.8.10p3.
Disable linking against PAM which is not configured
in IPFire 2.
Arne Fitzenreiter [Sun, 25 May 2014 22:07:38 +0000 (00:07 +0200)]
close core78.
Arne Fitzenreiter [Sun, 25 May 2014 22:06:40 +0000 (00:06 +0200)]
core78: add sshd initskript to updater.
Arne Fitzenreiter [Sun, 25 May 2014 08:06:05 +0000 (10:06 +0200)]
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Sun, 25 May 2014 08:03:58 +0000 (10:03 +0200)]
Revert "kernel: change compression of pae kernel to bz2."
This reverts commit
3e8286210f4e167c9ad2bb20b7fe3a56d2435b52 .
bz2 is not supported by debian xen. So users that have problems
with xz compression need to update the pygrub on the host.
Stefan Schantl [Sat, 24 May 2014 13:05:56 +0000 (15:05 +0200)]
setddns.pl: Fix function call of udmedia and twodns.
Arne Fitzenreiter [Fri, 23 May 2014 20:16:17 +0000 (22:16 +0200)]
installer: increase size of root partition.
Arne Fitzenreiter [Thu, 22 May 2014 21:54:43 +0000 (23:54 +0200)]
qemu: bump package version to force reinstall.
Arne Fitzenreiter [Thu, 22 May 2014 21:53:24 +0000 (23:53 +0200)]
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Thu, 22 May 2014 21:52:46 +0000 (23:52 +0200)]
kernel: update intel vendor modules.
Michael Tremer [Thu, 22 May 2014 21:11:43 +0000 (23:11 +0200)]
Merge remote-tracking branch 'ms/firewall-block-green' into next
Arne Fitzenreiter [Thu, 22 May 2014 19:21:53 +0000 (21:21 +0200)]
xen-image-maker: fix linux-pae metafile create.
Arne Fitzenreiter [Thu, 22 May 2014 18:56:10 +0000 (20:56 +0200)]
xen-image-maker: fix variable in README file.
Arne Fitzenreiter [Thu, 22 May 2014 16:40:13 +0000 (18:40 +0200)]
xen-image-maker: add support vor XenCenter xva image output.
Arne Fitzenreiter [Thu, 22 May 2014 06:11:11 +0000 (08:11 +0200)]
xen-image-maker: default fs to ext3.
many xen server still not support ext4.
Arne Fitzenreiter [Thu, 22 May 2014 06:08:56 +0000 (08:08 +0200)]
xen-image-maker: remove legacy xen kernel.
Arne Fitzenreiter [Wed, 21 May 2014 20:47:13 +0000 (22:47 +0200)]
Merge remote-tracking branch 'origin/master' into next
Arne Fitzenreiter [Wed, 21 May 2014 20:29:47 +0000 (22:29 +0200)]
kernel: change compression of pae kernel to bz2.
Many xen systems does not support load of xz compressed kernel.
fixes #10542
Arne Fitzenreiter [Tue, 20 May 2014 09:23:57 +0000 (11:23 +0200)]
kernel: build cpufreq hardware drivers as module.
Michael Tremer [Tue, 20 May 2014 09:41:23 +0000 (11:41 +0200)]
firewall: Allow blocking access to GREEN from GREEN.
Michael Tremer [Tue, 20 May 2014 09:27:24 +0000 (11:27 +0200)]
firewall: Rename GUIINPUT chain to ICMPINPUT.
The name of the chain does not really explain what it does.
Michael Tremer [Tue, 20 May 2014 09:25:48 +0000 (11:25 +0200)]
Merge remote-tracking branch 'origin/master' into next
Arne Fitzenreiter [Mon, 19 May 2014 18:12:00 +0000 (20:12 +0200)]
Revert "sshd: add fallback for oom setings with old kernel."
This reverts commit
1566fb6b5531247bd60d291716da1d5a017e9dce .
xen kernel was dropped and in the code are missing brackets.
Arne Fitzenreiter [Mon, 19 May 2014 18:07:18 +0000 (20:07 +0200)]
Merge remote-tracking branch 'arne_f/kernel-test'
Arne Fitzenreiter [Mon, 19 May 2014 08:04:06 +0000 (10:04 +0200)]
kernel: add pie packet sheduler.
Michael Tremer [Sun, 18 May 2014 11:35:02 +0000 (13:35 +0200)]
Re-add missing language string "DNS Servers".
Erik Kapfer [Sat, 17 May 2014 19:59:45 +0000 (21:59 +0200)]
openvpn: Changed directioning and added additional generation for ta.key.
Deleted the direction parameter 0 and 1 in ta.key directive for
compatibility purposes.
Added the ta.key generation also in PKI build process.
Replaced the ta.key to /certs instead of /ca and adapted the
apropriate paths.
Erik Kapfer [Sat, 17 May 2014 19:48:50 +0000 (21:48 +0200)]
openvpn: Drop unused code from cgi file.
Deleted the following unused functions:
* checkportfw
* checkportoverlap
* checkportinc
* disallowreserved
Erik Kapfer [Sat, 17 May 2014 19:32:55 +0000 (21:32 +0200)]
openvpn: Deleted double entries for TLSAUTH and DAUTH.
Also drop remaining if clauses for Engines.
Michael Tremer [Sat, 17 May 2014 13:32:56 +0000 (15:32 +0200)]
core78: Update filelist.
Michael Tremer [Sat, 17 May 2014 13:27:53 +0000 (15:27 +0200)]
Merge remote-tracking branch 'stevee/ddns-providers' into next
Stefan Schantl [Fri, 16 May 2014 20:07:14 +0000 (22:07 +0200)]
snort: Update url's for rule download.
Michael Tremer [Sat, 17 May 2014 13:18:52 +0000 (15:18 +0200)]
Merge remote-tracking branch 'alpha197/patch-1' into next
Michael Tremer [Sat, 17 May 2014 13:18:43 +0000 (15:18 +0200)]
Merge remote-tracking branch 'origin/master' into next
Michael Tremer [Fri, 16 May 2014 15:12:43 +0000 (17:12 +0200)]
sslscan: New package.
Stefan Schantl [Thu, 15 May 2014 16:47:13 +0000 (18:47 +0200)]
setddns.pl: Switch off debuging output.
Switch off accidently enabled debugging output from commit
dc98645fd42873dfeda01188243565e2f977f4a9
Alf Høgemark [Wed, 14 May 2014 19:56:42 +0000 (21:56 +0200)]
cgi-bin: Add title attribute to input type image where missing
Almost all of <input type="image"... has both an alt and a
title attribute, but some are missing title, and when the icon
is not very clear, it makes it harder to understand what the icon
does. By adding title, the browser displays text when mouse pointer
is over the icon.
Also add missing quotes for alt and title attributes where needed.
Alf Høgemark [Tue, 18 Feb 2014 17:48:57 +0000 (17:48 +0000)]
cgi-bin: Use readonly="readonly" attribute on html input elements
The proper way to mark readonly is to use readonly="readonly", not
readonly="true", like it was done some places.
Alf Høgemark [Wed, 14 May 2014 19:54:27 +0000 (21:54 +0200)]
ovpnmain.cgi: Use language string keys already defined
Alf Høgemark [Wed, 14 May 2014 19:51:50 +0000 (21:51 +0200)]
vpnmain.cgi: htmlcleanup, change html tags from uppercase to lowercase
Alexander Marx [Fri, 31 Jan 2014 20:23:21 +0000 (21:23 +0100)]
openvpn: Wrong subnet calculation bug fix.
Fixes #10466.
Michael Tremer [Sun, 12 Jan 2014 14:40:50 +0000 (15:40 +0100)]
Re-apply: OpenVPN: Fix daemon stuck in WAIT state.
When the client is in the WAIT state, it is usally connected
to the server.
Conflicts:
html/cgi-bin/index.cgi
html/cgi-bin/ovpnmain.cgi
Michael Tremer [Wed, 14 May 2014 19:32:04 +0000 (21:32 +0200)]
core78: Add updated theme functions.pl.
Michael Tremer [Wed, 14 May 2014 19:30:50 +0000 (21:30 +0200)]
Merge branch 'master' into next
Michael Tremer [Wed, 14 May 2014 19:28:45 +0000 (21:28 +0200)]
openvpn: Remove RC2 as a cipher option.
Erik Kapfer [Wed, 14 May 2014 17:37:15 +0000 (19:37 +0200)]
ovpn_fixes: Fixed some typos and strcture.
Fixes #10462#c21.
Conflicts:
html/cgi-bin/ovpnmain.cgi
langs/de/cgi-bin/de.pl
langs/en/cgi-bin/en.pl
Michael Tremer [Wed, 14 May 2014 18:42:41 +0000 (20:42 +0200)]
core78: Add OpenVPN changes.
Michael Tremer [Wed, 14 May 2014 18:39:36 +0000 (20:39 +0200)]
daq: Update to version 2.0.2.
Michael Tremer [Wed, 14 May 2014 18:33:33 +0000 (20:33 +0200)]
core78: Add all recently changes files and packages.
Michael Tremer [Wed, 14 May 2014 18:31:12 +0000 (20:31 +0200)]
core78: Don't remove the ipfire theme.
Michael Tremer [Wed, 14 May 2014 18:20:36 +0000 (20:20 +0200)]
ppp: Import some more patches from Fedora.
Michael Tremer [Wed, 14 May 2014 18:02:55 +0000 (20:02 +0200)]
ppp: Try longer to connect via PPPoE (60 seconds).
Stefan Schantl [Wed, 14 May 2014 17:52:06 +0000 (19:52 +0200)]
Change update url for spDNS.de.
Arne Fitzenreiter [Wed, 14 May 2014 16:59:22 +0000 (18:59 +0200)]
backupiso: change to hybrid image.
Arne Fitzenreiter [Wed, 14 May 2014 16:53:51 +0000 (18:53 +0200)]
start core78.
Arne Fitzenreiter [Wed, 14 May 2014 07:20:40 +0000 (09:20 +0200)]
kernel: update to 3.10.40.
Michael Tremer [Tue, 13 May 2014 18:36:58 +0000 (20:36 +0200)]
openvpn: Fix wrong default port number.
alpha197 [Tue, 13 May 2014 17:00:04 +0000 (19:00 +0200)]
xen-image-maker: Fix wrong menu entry for pygrub
Should fix https://bugzilla.ipfire.org/show_bug.cgi?id=10499
Bernhard Bitsch [Mon, 12 May 2014 17:50:50 +0000 (19:50 +0200)]
DDNS: Add support for spdns.de.
This commit adds support for the dynamic dns service provider spdns.de.
Fixes #10533.
Michael Tremer [Mon, 12 May 2014 17:30:02 +0000 (19:30 +0200)]
Merge remote-tracking branch 'stevee/snort-update' into next
Michael Tremer [Mon, 12 May 2014 11:49:12 +0000 (13:49 +0200)]
Merge remote-tracking branch 'glotzi/nut-update' into next
Michael Tremer [Mon, 12 May 2014 11:21:24 +0000 (13:21 +0200)]
proxy.pac: Don't use proxy for direct domain access.
Bernhard Bitsch [Mon, 12 May 2014 11:16:43 +0000 (13:16 +0200)]
proxy.pac: Only grant direct access for actual subnets.
Fixes #10324.
Michael Tremer [Thu, 8 May 2014 23:28:56 +0000 (01:28 +0200)]
squid: Update to 3.4.5.
Michael Tremer [Mon, 12 May 2014 10:54:08 +0000 (12:54 +0200)]
openvpn: Update translation.
DH keys are actually called DH parameters.
Stefan Ernst [Sun, 11 May 2014 17:53:00 +0000 (19:53 +0200)]
DDNS: Add support for variomedia.de.
This commit adds support for the dynamic dns service provider variomedia.de.
Fixes #10485.
Stefan Schantl [Wed, 29 Jan 2014 14:31:23 +0000 (15:31 +0100)]
DDNS: Add support for twodns.de.
This commit adds support for the dynamic dns service provider twodns.de.
Fixes #10418.
Stefan Schantl [Sun, 11 May 2014 17:26:32 +0000 (19:26 +0200)]
snort: Update to 2.9.6.1.
Arne Fitzenreiter [Sun, 11 May 2014 17:01:45 +0000 (19:01 +0200)]
clamav: update to 0.98.3.
Michael Tremer [Sun, 11 May 2014 16:47:11 +0000 (18:47 +0200)]
Merge remote-tracking branch 'ummeegge/openvpn' into next
Conflicts:
html/cgi-bin/ovpnmain.cgi
langs/de/cgi-bin/de.pl
langs/en/cgi-bin/en.pl
Michael Tremer [Sun, 11 May 2014 16:34:34 +0000 (18:34 +0200)]
Revert "OpenVPN:Add HMAC, cipher 'n2n' and DH key selection. Fixes and new design."
This reverts commit
c2b5d12b3453c55afce7ef84451a65e130b0d80f .
Conflicts:
langs/de/cgi-bin/de.pl
langs/en/cgi-bin/en.pl
Michael Tremer [Sun, 11 May 2014 16:27:50 +0000 (18:27 +0200)]
Merge remote-tracking branch 'ummeegge/OpenVPN' into next
Erik Kapfer [Sun, 11 May 2014 07:28:53 +0000 (09:28 +0200)]
OpenVPN: Update to version 2.3.4
Erik Kapfer [Sun, 11 May 2014 07:24:04 +0000 (09:24 +0200)]
OpenVPN:Add HMAC, cipher 'n2n' and DH key selection. Fixes and new design.
Added HMAC algorithm selection menu for N2N and RW.
Added cipher selection menu for N2N connections.
Added DH key selection also for existing installations incl. DH key upload possibility.
Adjusted the ovpn main WUI design to IPSec WUI.
Extend key lenght for CA, cert and control channel with faktor 2.
Some code and typo cleanup.
Bugfixes for #10317, #10149, #10462, #10463
V.2 New changes:
Integrated changes in langs and ovpnmain.cgi until 20.03.2014 2.15-Beta3.
ovpn.cnf have now default bits of 2048 instead of 1024.
ovpn.cnf default_md works now with sha256 instead of md5.
Bugfix: By new installation the auth directive for RWs is faded out #10462 Comment 15.
Added error message if the crl should be displayed but no crl is present.
v.3 New changes #10462 Comment 20:
Updated to core version 77.
Deleted manual name award in DH key upload section, name will be given automatically now.
Added sha512WithRSAEncryption instead of sha1WithRSAEncryption for "Root Certificate".
Added tls-auth support for Roadwarriors.
Added crypto engine support for N2N and Roadwarriors.
Michael Tremer [Sat, 10 May 2014 12:25:36 +0000 (14:25 +0200)]
theme: Fix spacing of version string in footer.
Ersan Yildirim [Fri, 9 May 2014 13:01:17 +0000 (15:01 +0200)]
Update Turkish translation of the installer and setup.
Michael Tremer [Thu, 8 May 2014 23:31:43 +0000 (01:31 +0200)]
Merge branch 'master' into next
Conflicts:
doc/language_issues.nl
doc/language_issues.tr
Dirk Wagner [Thu, 8 May 2014 19:22:22 +0000 (21:22 +0200)]
nut addon: increased package version.
Arne Fitzenreiter [Thu, 8 May 2014 15:03:21 +0000 (17:03 +0200)]
set version to IPFire 2.15-core77.
Arne Fitzenreiter [Thu, 8 May 2014 14:47:17 +0000 (16:47 +0200)]
GeoIP: update db
06052014 .
Arne Fitzenreiter [Thu, 8 May 2014 14:37:07 +0000 (16:37 +0200)]
usb-modeswitch: update to 2.1.1 and db
20140327 .
Arne Fitzenreiter [Thu, 8 May 2014 14:15:13 +0000 (16:15 +0200)]
Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-2.x
Arne Fitzenreiter [Thu, 8 May 2014 14:13:25 +0000 (16:13 +0200)]
kernel: add Marvel uAP module (dreamplug).
Dirk Wagner [Wed, 7 May 2014 19:37:51 +0000 (21:37 +0200)]
nut addon: Update to 2.7.2
Alexander Marx [Wed, 7 May 2014 10:09:28 +0000 (12:09 +0200)]
Firewall: Fix slow generation of host table in firewall groups
Alexander Marx [Wed, 7 May 2014 05:53:21 +0000 (07:53 +0200)]
Firewall: Add ip addres after alias name in dropdown for source and target
Michael Tremer [Wed, 7 May 2014 10:00:11 +0000 (12:00 +0200)]
core77: Remove dialctrl.pl call from crontab.
Michael Tremer [Wed, 7 May 2014 09:54:53 +0000 (11:54 +0200)]
core77: Only add timezone-transition rules when needed.
Arne Fitzenreiter [Tue, 6 May 2014 16:30:51 +0000 (18:30 +0200)]
kernel: update to 3.10.39.
Michael Tremer [Tue, 6 May 2014 11:21:40 +0000 (13:21 +0200)]
Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-2.x
Alexander Marx [Tue, 6 May 2014 10:40:05 +0000 (12:40 +0200)]
Firewall: When using custom hosts and not having BLUE or ORANGE, the Ruletable took very long to display every Line
With this commit the page is shown quickly because there's now a check
if ORANGE or BLUE exist before we test if a host might be in that
subnet.
Arne Fitzenreiter [Mon, 5 May 2014 11:58:41 +0000 (13:58 +0200)]
initrd: add some dependency modules and remove wirless cards.
this fix pxe boot on e1000e some other cards.
Ersan Yildirim [Mon, 5 May 2014 10:00:38 +0000 (12:00 +0200)]
Update Turkish translation.
Arne Fitzenreiter [Sun, 4 May 2014 09:07:05 +0000 (11:07 +0200)]
xen-downloader: update script.
-new legacy kernel package.
-add console variable.
-fix file permissions.
Arne Fitzenreiter [Sun, 4 May 2014 09:06:20 +0000 (11:06 +0200)]
installer: make it silence 2nd try.
Arne Fitzenreiter [Sat, 3 May 2014 13:16:15 +0000 (15:16 +0200)]
installer: remove error outputs at devicesearch.
Arne Fitzenreiter [Sat, 3 May 2014 13:12:34 +0000 (15:12 +0200)]
installer: change modulename iso9660 -> isofs;