]> git.ipfire.org Git - ipfire-2.x.git/blob - config/rootfiles/core/120/update.sh
core120: Ship updated OpenSSL 1.1.0
[ipfire-2.x.git] / config / rootfiles / core / 120 / update.sh
1 #!/bin/bash
2 ############################################################################
3 # #
4 # This file is part of the IPFire Firewall. #
5 # #
6 # IPFire is free software; you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation; either version 3 of the License, or #
9 # (at your option) any later version. #
10 # #
11 # IPFire is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
15 # #
16 # You should have received a copy of the GNU General Public License #
17 # along with IPFire; if not, write to the Free Software #
18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
19 # #
20 # Copyright (C) 2017 IPFire-Team <info@ipfire.org>. #
21 # #
22 ############################################################################
23 #
24 . /opt/pakfire/lib/functions.sh
25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
26
27 core=120
28
29 # Remove old core updates from pakfire cache to save space...
30 for (( i=1; i<=$core; i++ )); do
31 rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
32 done
33
34 # Stop services
35
36 # Extract files
37 extract_files
38
39 # update linker config
40 ldconfig
41
42 # Update Language cache
43 /usr/local/bin/update-lang-cache
44
45 # Changed and new OpenVPN-2.4 directives will wrote to server.conf and renew CRL while update an core update
46 if [ -e /var/ipfire/ovpn/server.conf ]; then
47 openvpnctrl -k
48
49 # Update configuration directives
50 sed -i -e 's/script-security 3 system/script-security 3/' \
51 -e '/status .*/ a ncp-disable' /var/ipfire/ovpn/server.conf
52
53 # Update the OpenVPN CRL
54 openssl ca -gencrl -keyfile /var/ipfire/ovpn/ca/cakey.pem \
55 -cert /var/ipfire/ovpn/ca/cacert.pem \
56 -out /var/ipfire/ovpn/crls/cacrl.pem \
57 -config /var/ipfire/ovpn/openssl/ovpn.cnf
58
59 openvpnctrl -s
60 fi
61
62 # Start services
63 /etc/init.d/apache restart
64
65 # This update needs a reboot...
66 touch /var/run/need_reboot
67
68 # Finish
69 /etc/init.d/fireinfo start
70 sendprofile
71
72 # Update grub config to display new core version
73 if [ -e /boot/grub/grub.cfg ]; then
74 grub-mkconfig -o /boot/grub/grub.cfg
75 fi
76
77 sync
78
79 # Don't report the exitcode last command
80 exit 0