]> git.ipfire.org Git - ipfire-2.x.git/blob - config/rootfiles/core/115/update.sh
core115: Add missing parameter to actually generate new certificates
[ipfire-2.x.git] / config / rootfiles / core / 115 / update.sh
1 #!/bin/bash
2 ############################################################################
3 # #
4 # This file is part of the IPFire Firewall. #
5 # #
6 # IPFire is free software; you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation; either version 3 of the License, or #
9 # (at your option) any later version. #
10 # #
11 # IPFire is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
15 # #
16 # You should have received a copy of the GNU General Public License #
17 # along with IPFire; if not, write to the Free Software #
18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
19 # #
20 # Copyright (C) 2017 IPFire-Team <info@ipfire.org>. #
21 # #
22 ############################################################################
23 #
24 . /opt/pakfire/lib/functions.sh
25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
26
27 core=115
28
29 # Remove old core updates from pakfire cache to save space...
30 for (( i=1; i<=$core; i++ )); do
31 rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
32 done
33
34 # Stop services
35 openvpnctrl -k
36 openvpnctrl -kn2n
37
38
39 # Extract files
40 extract_files
41
42 # Remove files
43 rm -vf \
44 /srv/web/ipfire/html/dial.cgi
45
46 # update linker config
47 ldconfig
48
49 # Update Language cache
50 /usr/local/bin/update-lang-cache
51
52 # generate ECDSA key on existing installations to prevent Apache from crashing
53 /usr/local/bin/httpscert new
54
55 # Start services
56 /etc/rc.d/init.d/apache2 restart
57 openvpnctrl -s
58 openvpnctrl -sn2n
59
60 grep -q "captivectrl" /var/spool/cron/root.orig || cat <<EOF >> /var/spool/cron/root.orig
61 # Cleanup captive clients
62 %hourly * /usr/bin/captive-cleanup
63
64 # Reload captive firewall rules
65 %nightly * 23-1 /usr/local/bin/captivectrl >/dev/null
66 EOF
67 fcrontab -z
68
69 # Load captive portal configuration
70 /etc/rc.d/init.d/firewall restart
71
72 # Regenerate IPsec configuration
73 sudo -u nobody /srv/web/ipfire/cgi-bin/vpnmain.cgi
74 if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then
75 /etc/init.d/ipsec restart
76 fi
77
78 # Let pakfire forget the perl-PDF-API2 package
79 rm -fv /opt/pakfire/db/rootfiles/perl-PDF-API2
80 rm -fv /opt/pakfire/db/*/meta-perl-PDF-API2
81
82 # This update need a reboot...
83 #touch /var/run/need_reboot
84
85 # Finish
86 /etc/init.d/fireinfo start
87 sendprofile
88
89 # Update grub config to display new core version
90 if [ -e /boot/grub/grub.cfg ]; then
91 grub-mkconfig -o /boot/grub/grub.cfg
92 fi
93
94 sync
95
96 # Don't report the exitcode last command
97 exit 0