ipfire-2.x.git
2 years agoUpdate for numerous lfs-files: removed deprecated configure options
Matthias Fischer [Mon, 4 Dec 2017 17:25:55 +0000 (18:25 +0100)] 
Update for numerous lfs-files: removed deprecated configure options

Also includes some reformatting, but no changes to configuration.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoOpenVPN: Allow to set routes to IPsec networks
Michael Tremer [Mon, 4 Dec 2017 17:51:53 +0000 (17:51 +0000)] 
OpenVPN: Allow to set routes to IPsec networks

This makes hub-and-spoke designs with OpenVPN RW and
IPsec N2N easier to configure

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoIPsec: Allow configuring inactivity timeout when in on-demand mode
Michael Tremer [Mon, 4 Dec 2017 17:31:53 +0000 (17:31 +0000)] 
IPsec: Allow configuring inactivity timeout when in on-demand mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoIPsec: Drop support for MODP with subgroup
Michael Tremer [Mon, 4 Dec 2017 13:12:38 +0000 (13:12 +0000)] 
IPsec: Drop support for MODP with subgroup

These come from questionable sources and are not considered
to be secure any more: https://eprint.iacr.org/2016/961

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship updated CGI files
Michael Tremer [Sat, 2 Dec 2017 12:25:09 +0000 (12:25 +0000)] 
core117: Ship updated CGI files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agodisplay GeoIP information on active network connections
Peter Müller [Wed, 15 Nov 2017 22:10:43 +0000 (23:10 +0100)] 
display GeoIP information on active network connections

Display GeoIP information on active network connections in WebUI.
Use newly implemented function in /var/ipfire/geoip-functions.pl .

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agodisplay GeoIP information on ipinfo.cgi
Peter Müller [Wed, 15 Nov 2017 21:56:36 +0000 (22:56 +0100)] 
display GeoIP information on ipinfo.cgi

Display GeoIP information on ipinfo.cgi and use newly implemented
function in /var/ipfire/geoip-functions.pl .

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship updated sudo package
Michael Tremer [Sat, 2 Dec 2017 12:23:39 +0000 (12:23 +0000)] 
core117: Ship updated sudo package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomc: Update to 4.8.20
Matthias Fischer [Wed, 29 Nov 2017 17:16:46 +0000 (18:16 +0100)] 
mc: Update to 4.8.20

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agosudo: Fix for lfs-file (Typo)
Matthias Fischer [Sat, 2 Dec 2017 09:10:23 +0000 (10:10 +0100)] 
sudo: Fix for lfs-file (Typo)

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agonano: Update to 2.9.1
Matthias Fischer [Sat, 2 Dec 2017 09:16:39 +0000 (10:16 +0100)] 
nano: Update to 2.9.1

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop separate ffmpeg-libs package
Michael Tremer [Sat, 2 Dec 2017 12:22:00 +0000 (12:22 +0000)] 
Drop separate ffmpeg-libs package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agostrip: Explicitely call right binaries
Michael Tremer [Fri, 1 Dec 2017 16:31:25 +0000 (16:31 +0000)] 
strip: Explicitely call right binaries

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoffmpeg: Update to 3.4
Michael Tremer [Fri, 1 Dec 2017 15:41:15 +0000 (15:41 +0000)] 
ffmpeg: Update to 3.4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agonasm: Update to 2.13.02
Michael Tremer [Thu, 30 Nov 2017 17:01:24 +0000 (17:01 +0000)] 
nasm: Update to 2.13.02

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoUpdate strongswan rootfile
Michael Tremer [Thu, 30 Nov 2017 16:09:48 +0000 (16:09 +0000)] 
Update strongswan rootfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomisc-progs: syslogdctrl: Fix data type of protocol variable
Michael Tremer [Thu, 30 Nov 2017 14:36:28 +0000 (14:36 +0000)] 
misc-progs: syslogdctrl: Fix data type of protocol variable

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Regenerate language cache
Michael Tremer [Wed, 29 Nov 2017 12:41:16 +0000 (12:41 +0000)] 
core117: Regenerate language cache

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship updated strongswan
Michael Tremer [Wed, 29 Nov 2017 12:40:53 +0000 (12:40 +0000)] 
core117: Ship updated strongswan

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agostrongswan: Update to 5.6.1
Michael Tremer [Wed, 29 Nov 2017 12:39:04 +0000 (12:39 +0000)] 
strongswan: Update to 5.6.1

Drop support for Padlock which is not in wide usage
any more and creates some rootfile trouble every time.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoEnglish is the reference language
Michael Tremer [Wed, 29 Nov 2017 12:15:41 +0000 (12:15 +0000)] 
English is the reference language

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocaptive: Translate times for coupon expiry time
Michael Tremer [Wed, 29 Nov 2017 12:11:58 +0000 (12:11 +0000)] 
captive: Translate times for coupon expiry time

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship updated netexternal.cgi
Michael Tremer [Wed, 29 Nov 2017 12:06:01 +0000 (12:06 +0000)] 
core117: Ship updated netexternal.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoadd GeoIP and rDNS information to used nameservers
Peter Müller [Wed, 15 Nov 2017 21:49:00 +0000 (22:49 +0100)] 
add GeoIP and rDNS information to used nameservers

Add GeoIP and rDNS information to DNS nameserver list at netexternal.cgi

Use newly implemented GeoIP function in /var/ipfire/geoip-functions.pl

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship updated ids.dat
Michael Tremer [Wed, 29 Nov 2017 12:04:05 +0000 (12:04 +0000)] 
core117: Ship updated ids.dat

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoshow IDS rule names correctly in WebUI log
Peter Müller [Tue, 21 Nov 2017 19:27:45 +0000 (20:27 +0100)] 
show IDS rule names correctly in WebUI log

The WebUI IDS log did not display the rule name for alerts
where a signature with a five digit number was triggered
(some Emerging Threats signatures are using them).

Changing the regular expression so it will match on five
digit SIDs, too.

Fixes #11519.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship updated index.cgi
Michael Tremer [Wed, 29 Nov 2017 12:02:50 +0000 (12:02 +0000)] 
core117: Ship updated index.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agolink to DNS server status page on index.cgi
Peter Müller [Fri, 24 Nov 2017 19:28:02 +0000 (20:28 +0100)] 
link to DNS server status page on index.cgi

Show a link to the DNS server status at netexternal.cgi
on index.cgi in WebUI.

For the lazy ones... :-)

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocorrect wrong headline at hardwaregraphs.cgi
Peter Müller [Fri, 24 Nov 2017 19:32:55 +0000 (20:32 +0100)] 
correct wrong headline at hardwaregraphs.cgi

The page description (title and headline) should print
"hardware graphs" instead of only mentioning HDDs.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship updated netother.cgi
Michael Tremer [Wed, 29 Nov 2017 12:00:33 +0000 (12:00 +0000)] 
core117: Ship updated netother.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoUpdate translations
Michael Tremer [Wed, 29 Nov 2017 12:00:13 +0000 (12:00 +0000)] 
Update translations

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agotranslate 'firewall hits' at netother.cgi
Peter Müller [Fri, 24 Nov 2017 19:39:34 +0000 (20:39 +0100)] 
translate 'firewall hits' at netother.cgi

Also translate 'firewall hits' at the network status
(other) page in WebUI.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship updated credits.cgi
Michael Tremer [Wed, 29 Nov 2017 11:59:08 +0000 (11:59 +0000)] 
core117: Ship updated credits.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoupdate links to www.ipfire.org at credits.cgi
Peter Müller [Tue, 28 Nov 2017 19:41:53 +0000 (20:41 +0100)] 
update links to www.ipfire.org at credits.cgi

The links to the IPFire homepage in the credits.cgi file should
point to the HTTPS version of the site now.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocaptive: Escape any special characters in title on PDF vouchers
Michael Tremer [Wed, 29 Nov 2017 11:57:37 +0000 (11:57 +0000)] 
captive: Escape any special characters in title on PDF vouchers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Create /tools_${arch} link only when building a toolchain
Michael Tremer [Wed, 29 Nov 2017 11:54:37 +0000 (11:54 +0000)] 
make.sh: Create /tools_${arch} link only when building a toolchain

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship latest updates of syslogging
Michael Tremer [Tue, 28 Nov 2017 17:49:25 +0000 (17:49 +0000)] 
core117: Ship latest updates of syslogging

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoadd language strings
Peter Müller [Mon, 20 Nov 2017 18:40:32 +0000 (19:40 +0100)] 
add language strings

Add language strings for changed config.dat CGI file.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoallow changing remote syslog protocol to TCP
Peter Müller [Mon, 20 Nov 2017 18:40:17 +0000 (19:40 +0100)] 
allow changing remote syslog protocol to TCP

Add option to change remote syslog protocol to TCP, which
is more reliable than UDP, but might be unsupported  on
older syslog servers.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoallow remote syslog via TCP in syslogdctrl.c
Peter Müller [Mon, 20 Nov 2017 18:40:11 +0000 (19:40 +0100)] 
allow remote syslog via TCP in syslogdctrl.c

Make syslogctrl.c use TCP as remote logging file if specified so.

Thanks to Michael for reviewing this.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Simplify maths to determine cursor position
Michael Tremer [Tue, 28 Nov 2017 17:44:49 +0000 (17:44 +0000)] 
make.sh: Simplify maths to determine cursor position

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Improve formatting of options
Michael Tremer [Tue, 28 Nov 2017 17:36:07 +0000 (17:36 +0000)] 
make.sh: Improve formatting of options

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Fix position of SKIP message when building packages
Michael Tremer [Tue, 28 Nov 2017 17:34:02 +0000 (17:34 +0000)] 
make.sh: Fix position of SKIP message when building packages

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agossl: Drop package which isn't maintained any more
Michael Tremer [Tue, 28 Nov 2017 17:14:29 +0000 (17:14 +0000)] 
ssl: Drop package which isn't maintained any more

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop vsftpd which isn't actively maintained any more
Michael Tremer [Tue, 28 Nov 2017 13:46:07 +0000 (13:46 +0000)] 
Drop vsftpd which isn't actively maintained any more

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopound: Drop package which isn't very actively maintained any more
Michael Tremer [Tue, 28 Nov 2017 15:55:19 +0000 (15:55 +0000)] 
pound: Drop package which isn't very actively maintained any more

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Drop generating a global rootfile
Michael Tremer [Tue, 28 Nov 2017 17:28:09 +0000 (17:28 +0000)] 
make.sh: Drop generating a global rootfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Fix printing a log line
Michael Tremer [Tue, 28 Nov 2017 17:27:36 +0000 (17:27 +0000)] 
make.sh: Fix printing a log line

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Continue producing nice output after screen has been resized
Michael Tremer [Tue, 28 Nov 2017 17:22:23 +0000 (17:22 +0000)] 
make.sh: Continue producing nice output after screen has been resized

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship updated vpnmain.cgi
Michael Tremer [Tue, 28 Nov 2017 17:19:27 +0000 (17:19 +0000)] 
core117: Ship updated vpnmain.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agovpnmain.cgi: Disable compression by default
Michael Tremer [Tue, 28 Nov 2017 17:17:22 +0000 (17:17 +0000)] 
vpnmain.cgi: Disable compression by default

The compression is causing some interoperatibility issues
and does not really compress data very much - even when the
data is quite compressible.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoapache: Wait until apache has stopped when we want to stop it
Michael Tremer [Tue, 28 Nov 2017 14:14:16 +0000 (14:14 +0000)] 
apache: Wait until apache has stopped when we want to stop it

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoapache: Ensure that not everyone can read the keys
Michael Tremer [Tue, 7 Nov 2017 20:30:52 +0000 (20:30 +0000)] 
apache: Ensure that not everyone can read the keys

This would become a security risk if anyone gets
shell access as any user to copy out the HTTPS keys.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoboost: disable parallel build
Arne Fitzenreiter [Tue, 28 Nov 2017 06:01:33 +0000 (07:01 +0100)] 
boost: disable parallel build

this need more than 1GB ram on arm

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agosamba: import security updates from redhead
Arne Fitzenreiter [Mon, 27 Nov 2017 17:20:59 +0000 (18:20 +0100)] 
samba: import security updates from redhead

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agomake.sh: Don't try to dump a non-existing logfile
Michael Tremer [Thu, 23 Nov 2017 16:09:00 +0000 (16:09 +0000)] 
make.sh: Don't try to dump a non-existing logfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Show architecture we are building the toolchain for
Michael Tremer [Thu, 23 Nov 2017 16:07:42 +0000 (16:07 +0000)] 
make.sh: Show architecture we are building the toolchain for

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Fix typo
Michael Tremer [Thu, 23 Nov 2017 16:06:59 +0000 (16:06 +0000)] 
make.sh: Fix typo

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Refactor build status code
Michael Tremer [Thu, 23 Nov 2017 14:46:55 +0000 (14:46 +0000)] 
make.sh: Refactor build status code

This replaces the old lines that make the build
output pretty and replaces it by a version that showns
progress as it is going on as well as providing useful
output when the console is non-interactive.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoCompress toolchain using XZ
Michael Tremer [Thu, 23 Nov 2017 11:56:18 +0000 (11:56 +0000)] 
Compress toolchain using XZ

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Refactor renice and root check
Michael Tremer [Thu, 23 Nov 2017 12:39:57 +0000 (12:39 +0000)] 
make.sh: Refactor renice and root check

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Cleanup prepareenv
Michael Tremer [Thu, 23 Nov 2017 12:35:17 +0000 (12:35 +0000)] 
make.sh: Cleanup prepareenv

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: TARGET_ARCH has been replaced by BUILD_ARCH
Michael Tremer [Thu, 23 Nov 2017 12:24:38 +0000 (12:24 +0000)] 
make.sh: TARGET_ARCH has been replaced by BUILD_ARCH

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Merge make-functions into make.sh
Michael Tremer [Thu, 23 Nov 2017 12:18:41 +0000 (12:18 +0000)] 
make.sh: Merge make-functions into make.sh

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoMove toolchain from /tools to /tools_${arch}
Michael Tremer [Thu, 23 Nov 2017 11:39:23 +0000 (11:39 +0000)] 
Move toolchain from /tools to /tools_${arch}

This will allow us to run multiple builds on the same
system at the same time (or at least have them on disk).

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Drop option to generate a source ISO
Michael Tremer [Thu, 23 Nov 2017 12:01:39 +0000 (12:01 +0000)] 
make.sh: Drop option to generate a source ISO

This is a very weird way to distribute sources in 2017.
Let's save the environment and stop using CDs.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Reload apache for change of configuration
Michael Tremer [Mon, 20 Nov 2017 15:46:53 +0000 (15:46 +0000)] 
core117: Reload apache for change of configuration

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agodisable SSL compression and session tickets in Apache
Peter Müller [Sun, 19 Nov 2017 16:24:36 +0000 (17:24 +0100)] 
disable SSL compression and session tickets in Apache

Ensure that Apache never uses SSL compression, which is vulnerable,
and turn off session tickets since the might cause impact to PFS.

Based against next, supersedes first version.

Reported-by: Wolfgang Apolinarski <wolfgang.apolinarski@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoRetire the IPFire CA
Michael Tremer [Mon, 13 Nov 2017 23:18:55 +0000 (23:18 +0000)] 
Retire the IPFire CA

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship updated CA bundle
Michael Tremer [Mon, 13 Nov 2017 23:18:00 +0000 (23:18 +0000)] 
core117: Ship updated CA bundle

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoupdate ca-certificate CA bundle
Peter Müller [Sun, 12 Nov 2017 06:49:53 +0000 (07:49 +0100)] 
update ca-certificate CA bundle

Update the CA certificate list to what Mozilla NSS ships currently.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship changes in pakfire
Michael Tremer [Mon, 13 Nov 2017 22:41:58 +0000 (22:41 +0000)] 
core117: Ship changes in pakfire

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agovalidate GPG keys by fingerprint
Peter Müller [Sun, 12 Nov 2017 14:40:28 +0000 (15:40 +0100)] 
validate GPG keys by fingerprint

Validate GPG keys by fingerprint and not by 8-bit key-ID.

This makes exploiting bug #11539 harder, but not impossible
and does not affect existing installations.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship latest GeoIP changes
Michael Tremer [Mon, 13 Nov 2017 22:39:36 +0000 (22:39 +0000)] 
core117: Ship latest GeoIP changes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoGeoIP: Add lookup function for convenience
Michael Tremer [Thu, 9 Nov 2017 22:32:04 +0000 (22:32 +0000)] 
GeoIP: Add lookup function for convenience

Instead of opening the database again for each lookup,
we will read it into memory on first use and every lookup
after that will be coming from cache.

Reviewed-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agogeoip-functions.pl: Fix typos and formatting
Michael Tremer [Thu, 9 Nov 2017 22:32:03 +0000 (22:32 +0000)] 
geoip-functions.pl: Fix typos and formatting

Reviewed-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Default to armv5tel on armv7* build hosts
Michael Tremer [Mon, 13 Nov 2017 21:56:27 +0000 (21:56 +0000)] 
make.sh: Default to armv5tel on armv7* build hosts

We won't offer a native port to ARMv7 in the near future
and to default to an architecture that is working on these
machines, we select armv5tel as default

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoRevert "make.sh: Use -pipe in CFLAGS when host has >1GB of memory"
Michael Tremer [Mon, 13 Nov 2017 21:49:15 +0000 (21:49 +0000)] 
Revert "make.sh: Use -pipe in CFLAGS when host has >1GB of memory"

This reverts commit 7e1639a4810e5e70db94fdb0a0a98593d50d4290.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocaptive portal: Require authorization before redirecting to proxy
Michael Tremer [Sat, 11 Nov 2017 12:47:37 +0000 (12:47 +0000)] 
captive portal: Require authorization before redirecting to proxy

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship updated routing.cgi
Michael Tremer [Tue, 7 Nov 2017 16:20:53 +0000 (16:20 +0000)] 
core117: Ship updated routing.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoBUG11466: fix routing.cgi the function call in routing.cgi was fixed to call the...
Alexander Marx [Tue, 7 Nov 2017 14:10:06 +0000 (15:10 +0100)] 
BUG11466: fix routing.cgi the function call in routing.cgi was fixed to call the new "exact" function.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoNetwork-functions: add check if variables are defined
Alexander Marx [Tue, 7 Nov 2017 13:53:27 +0000 (14:53 +0100)] 
Network-functions: add check if variables are defined

in function network_equal and network2bin a check for undefined variables were missing.
added them.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship updated network-functions.pl
Michael Tremer [Tue, 7 Nov 2017 16:16:50 +0000 (16:16 +0000)] 
core117: Ship updated network-functions.pl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoBUG11466: Fix network_equal function
Alexander Marx [Tue, 7 Nov 2017 13:17:27 +0000 (14:17 +0100)] 
BUG11466: Fix network_equal function

The network_equal function only tested the subnet addresses of two given networks which lead to
errormessages saying "This is the green network"
The fix tests netwok and subnet IP's to fix this

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore117: Ship changed files of the webUI
Michael Tremer [Mon, 6 Nov 2017 18:11:49 +0000 (18:11 +0000)] 
core117: Ship changed files of the webUI

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agolink to HTTPS version of www.ipfire.org in WebUI
Peter Müller [Mon, 6 Nov 2017 17:12:48 +0000 (18:12 +0100)] 
link to HTTPS version of www.ipfire.org in WebUI

Change links to www.ipfire.org in WebUI themes since the website
now uses HTTPS.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoTor: Use relay mode as default setting
Peter Müller [Mon, 6 Nov 2017 17:27:04 +0000 (18:27 +0100)] 
Tor: Use relay mode as default setting

Set the default operating mode to "relay" in the Tor WebUI
configuration page.

Running a Tor exit relay may cause legal trouble in some
countries and should not be the default setting to prevent
users from accidentally running an exit router.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoStart Core Update 117
Michael Tremer [Mon, 6 Nov 2017 18:10:02 +0000 (18:10 +0000)] 
Start Core Update 117

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agounbound: Silence error when upstream name servers cannot be read
Michael Tremer [Tue, 7 Nov 2017 15:02:28 +0000 (16:02 +0100)] 
unbound: Silence error when upstream name servers cannot be read

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Calculate MAKETUNING depending on available memory
Michael Tremer [Tue, 7 Nov 2017 14:43:14 +0000 (15:43 +0100)] 
make.sh: Calculate MAKETUNING depending on available memory

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Remove setting the EDITOR variable which we don't use
Michael Tremer [Tue, 7 Nov 2017 14:27:31 +0000 (15:27 +0100)] 
make.sh: Remove setting the EDITOR variable which we don't use

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Add function to determine how many CPU cores the build host has
Michael Tremer [Tue, 7 Nov 2017 14:25:11 +0000 (15:25 +0100)] 
make.sh: Add function to determine how many CPU cores the build host has

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Use -pipe in CFLAGS when host has >1GB of memory
Michael Tremer [Tue, 7 Nov 2017 14:26:25 +0000 (15:26 +0100)] 
make.sh: Use -pipe in CFLAGS when host has >1GB of memory

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Determine how much memory the build host has
Michael Tremer [Tue, 7 Nov 2017 14:23:59 +0000 (15:23 +0100)] 
make.sh: Determine how much memory the build host has

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocaptive: One month is only 30 days instead of 210
Michael Tremer [Mon, 6 Nov 2017 19:07:10 +0000 (19:07 +0000)] 
captive: One month is only 30 days instead of 210

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore116: stop apache before extracting updated files v2.19-core116
Arne Fitzenreiter [Fri, 3 Nov 2017 15:40:23 +0000 (16:40 +0100)] 
core116: stop apache before extracting updated files

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agocore116: replace apache restart by stop and start
Arne Fitzenreiter [Fri, 3 Nov 2017 13:28:22 +0000 (14:28 +0100)] 
core116: replace apache restart by stop and start

restart seems not work after replace apache...

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agocore116: ship updated wget
Arne Fitzenreiter [Fri, 3 Nov 2017 13:22:19 +0000 (14:22 +0100)] 
core116: ship updated wget

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agofinish core116
Arne Fitzenreiter [Thu, 2 Nov 2017 21:48:58 +0000 (22:48 +0100)] 
finish core116

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agocore116: set need_reboot flag
Arne Fitzenreiter [Thu, 2 Nov 2017 21:47:59 +0000 (22:47 +0100)] 
core116: set need_reboot flag

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>