Merge branch 'master' into next

core150: Ship libloc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

crontab: Update misleading comment

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

fcron: Fix invalid syntax in update-location-database cronjob

Fixes: #12484
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libloc: Update rootfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libloc: Update to 0.9.4

Also update to the shipped database to 2020-09-21.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xinetd: Depend on libtirpc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openvmtools: Depend on libtirpc

Fixes: #12487
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libloc: Update rootfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

crontab: Update misleading comment

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssl: Update to 1.1.1h

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xinetd: Depend on libtirpc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

fcron: Fix invalid syntax in update-location-database cronjob

Fixes: #12484
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship libloc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libloc: Update to 0.9.4

Also update to the shipped database to 2020-09-21.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ipinfo.cgi: Allow to display multiple flags.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Delete Locale::Codes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Locale-Country: Drop package.

All used functions from this module now is done by libloc, so
this package safely can be dropped.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship ipinfo.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ipinfo.cgi: Display network flags of the given addresses.

Use the libloc data for gathering and displaying the stored network
flags, like "Anonymous Proxy" for the addresses.

The notice of a flag only will be displayed, if a flag is set for the
network which contains the given address.

Currently this notice text is "hardcoded" in englisch language, because
the entire other content of the page is in Englisch (responses from RIR's)
and also the flag names like "Anonymous Proxy" are only availabe in
English.

IMHO there is no need to to translate the string "This address is marked
as" into different languages, because of the reasons abouve.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship general-functions.pl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

general-functions.pl: Drop unused use of Locale::Codes::Country.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

guardian: Bump package version

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

guardian.cgi: Drop unused use of Locale::Codes::Country.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

tor: Bump package version

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

tor.cgi: Use own location functions.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship country.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

country.cgi: Use own location-functions.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

location-functions.pl: Add address_has_flag() function.

This function can be used to check if a given address has
one of the known flags like "Anonymous Proxy".

If this is true, the mapped special country code will be returned.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

location-functions.pl: Refactor get_full_country_name() function to use the Location module.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship location-functions.pl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

location-functions.pl: Refactor get_locations() function to use the Location module.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship updated IPsec CGI and control binary

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

IPsec: Bring down connections after reloading configuration

It could happen that the remote peer re-established the connection
before "ipsec reload" removed it from the daemon.

Now, we write the configuration files first, reload them
and then bring down any connections that are still established.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship logwatch

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

logwatch: Update to 7.5.4

Sorry, there is no changelog available.

For a better overview I moved 'logwatch-7.3.6-date_manip6.patch' to a directory of its own.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

guardian: Bump package version to ship updated translation

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

guardian: Update french translation

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship lmdb

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package: lmdb 0.9.24 - required for knot 3.0.0

Lightning Memory-mapped Database from symas.

For details see:
https://symas.com/lmdb/

In contrast to the information from the knot documentation
(see: https://www.knot-dns.cz/docs/3.0/html/requirements.html#required-libraries),
this library is no longer included.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

knot: Update to 3.0.0

For details see:
https://www.knot-dns.cz/2020-09-09-version-300.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship collectd

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

collectd: Link against libip4tc

libiptc is no longer being shipped by iptables and has been split
into a version for IPv4 and IPv6.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship conntrack-tools

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

conntrack-tools: Update to 1.4.6

- Update conntrack-tools from version 1.4.5 to 1.4.6

Supporting request from Peter Müller
Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship libnetfilter_conntrack

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libnetfilter_conntrack: Update to 1.0.8

- Update libnetfilter_conntrack from version 1.0.7 to 1.0.8
- No change to rootfiles

Supporting request from Peter Müller
Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship libnetfilter_queue

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libnetfilter_queue: Update to 1.0.5

- Update libnetfilter_queue from version 1.0.3 to 1.0.5

Supporting request from Peter Müller
Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship iptables

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

iptables: Update to 1.8.5

- Update iptables from version 1.8.3 to 1.8.5
    See: https://www.netfilter.org/projects/iptables/files/changes-iptables-1.8.5.txt

Supporting request from Peter Müller
Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship knot

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

knot: Update to 2.9.6

For details see:
https://www.knot-dns.cz/2020-08-31-version-296.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Update cmake to 3.18.1

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship boost

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Update boost to 1.71.0

I did not update to the current version 1.74.0 because another package
I want to submit do not build with the current version.

I do not think this is a big show stopper because other distributions
are not on the latest version either.

The removed switch do not seem to be availavle in this version anymore.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship strongswan

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strongswan: Update to 5.9.0

- Update strongswan from version 5.8.4 to 5.9.0
  see https://wiki.strongswan.org/versions/78

Supporting request from Peter Müller
Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update after fresh build

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

foomatic: Drop files that are now provided by cups-filter

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cups-filters: Update to 1.27.4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cups: Update to 2.3.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship poppler-data

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

poppler-data: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

avahi: Update to 0.8

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship poppler

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

poppler: Update to 0.89.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship lcms2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lcms2: Update to 2.9

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship qpdf

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

qpdf: Update to 10.0.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship openjpeg

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openjpeg: New package

This package adds encoding/decoding JPEG-2000 image files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship freetype

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

freetype: Update to 2.10.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship fontconfig

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

fontconfig: update to 2.13.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship libgcrypt

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libgcrypt: Update to 1.8.6

For details see:
https://lists.gnu.org/archive/html/info-gnu/2020-07/msg00001.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship libidn

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libidn: Update to 1.36

For details see:
https://lists.gnu.org/archive/html/info-gnu/2020-07/msg00004.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship updaated pakfire.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pakfire.cgi: Partially fixes Bug #12049

I added translations for package uninstallation but didn't know how to fix
the missing list of affected dependencies during uninstallation, see:

=> https://forum.ipfire.org/viewtopic.php?f=17&t=21912&p=120466#p120593

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hostapd: Bump version to ship updated wlanap.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wlanap.cgi: Add on/off translations for Management Frame Protection radio buttons

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship dhcpcd

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dhcpcd: Update to 9.1.4

For details (9.1.2 => 9.1.3 => 9.1.4) see:

https://roy.marples.name/blog/dhcpcd-9-1-3-released.html

        "configure: Fix fallout with disabling embedded config
        inet6: Add support for reporting Mobile IPv6 RA's
        inet6: Report RA Proxy flag if set
        BSD: Allow non NetBSD and OpenBSD to set IN6_IFF_AUTOCONF
        privsep: Don't handle any signals meant for the main process
        eloop: Try and survive a signal storm
        configure: add --with-eghook=foo
        dhcpcd: Add an option to poll the interface carrier state
        script: Make visible some link level parameters to lease dumping
        Linux: ignore unsupported interfaces by default, such as sit0
        Linux: support aarch64 for reading cpu info
        Linux: keep the generic netlink socket around to get ssid with privsep
        Linux: restore fix when no address is returned by getifaddrs(3)
        inet6: Don't regen temp addresses we didn't add
        privsep: Don't limit file writes if logging to a file
        DHCP6: Fix lease timings with nodelay option"

https://roy.marples.name/blog/dhcpcd-9-1-4-released.html

    "Fix SMALL builds
    Ensure DBDIR exists at startup"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libmicrohttpd 0.9.71: Fix for rootfile

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libmicrohttpd: Update to 0.9.71

For details see:
https://www.gnu.org/software/libmicrohttpd/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Net_SSLeay 1.88: Fix for rootfile

My Devel complained that the first line was missing and wanted it commented...

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship Digest-HMAC

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Digest-HMAC: Update to 1.03

For details see:
https://metacpan.org/source/GAAS/Digest-HMAC-1.03/Changes

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship Digest-SHA1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Digest-SHA1: Update to 2.13

For details see:
https://metacpan.org/source/GAAS/Digest-SHA1-2.13/Changes

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core151: Ship Net-DNS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Net-DNS: Update to 1.25

For details see:
https://metacpan.org/source/NLNETLABS/Net-DNS-1.25/Changes

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Add lshw to build

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lshw-B.02.19.2

>>> https://ezix.org/project/wiki/HardwareLiSter <<<

lshw (Hardware Lister) is a small tool to provide detailed information on
the hardware configuration of the machine.
It can report exact memory configuration, firmware version,
mainboard configuration, CPU version and speed,
cache configuration, bus speed, etc.

Signed-off-by: Marcel Follert (Smooky) <smooky@16.de>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Add ncdu to build

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ncdu-1.15.1

>>> https://dev.yorhel.nl/ncdu <<<

Ncdu is a disk usage analyzer with an ncurses interface.
It is designed to find space hogs on a remote server where you don't
have an entire graphical setup available,
but it is a useful tool even on regular desktop systems.
Ncdu aims to be fast, simple and easy to use,
and should be able to run in any minimal POSIX-like environment
with ncurses installed.

Signed-off-by: Marcel Follert (Smooky) <smooky@16.de>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>