network.git
8 weeks agosecurity-policies: performance: Remove CBC ciphers master
Michael Tremer [Mon, 24 Jun 2019 12:28:12 +0000 (13:28 +0100)] 
security-policies: performance: Remove CBC ciphers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
8 weeks agoMakefile: Add network-vpn-ipsec(8)
Michael Tremer [Mon, 24 Jun 2019 12:28:01 +0000 (13:28 +0100)] 
Makefile: Add network-vpn-ipsec(8)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoAdd documentation for the IPsec VPN
Jonatan Schlag [Mon, 24 Jun 2019 11:30:14 +0000 (13:30 +0200)] 
Add documentation for the IPsec VPN

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoMake generating man-pages optional
Michael Tremer [Fri, 21 Jun 2019 13:37:03 +0000 (14:37 +0100)] 
Make generating man-pages optional

Fixes: #11862
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
8 weeks agofirewall: Fix generating systemd file
Michael Tremer [Sun, 23 Jun 2019 15:37:41 +0000 (15:37 +0000)] 
firewall: Fix generating systemd file

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
8 weeks agoip-tunnel: Support setting MTU on tunnels
Michael Tremer [Sun, 23 Jun 2019 11:57:17 +0000 (11:57 +0000)] 
ip-tunnel: Support setting MTU on tunnels

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
8 weeks agobird: Start service when needed and not already running
Michael Tremer [Sun, 23 Jun 2019 10:33:48 +0000 (10:33 +0000)] 
bird: Start service when needed and not already running

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
8 weeks agowireless: Do not attempt DFS when reg domain is set to world
Michael Tremer [Sun, 23 Jun 2019 10:30:17 +0000 (10:30 +0000)] 
wireless: Do not attempt DFS when reg domain is set to world

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agofirewall: Drop firewall-config command in favour of "firewall settings"
Michael Tremer [Sat, 22 Jun 2019 14:16:07 +0000 (14:16 +0000)] 
firewall: Drop firewall-config command in favour of "firewall settings"

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agofirewall: Fix reading/writing settings
Michael Tremer [Sat, 22 Jun 2019 14:11:15 +0000 (14:11 +0000)] 
firewall: Fix reading/writing settings

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoRevert "firewall: Disable PMTU by default"
Michael Tremer [Sat, 22 Jun 2019 13:55:00 +0000 (13:55 +0000)] 
Revert "firewall: Disable PMTU by default"

This reverts commit b3a66a5c00bc4e39ce0db34e2ac96c4911b4e31a.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agofirewall: Drop initialisation helper script
Michael Tremer [Sat, 22 Jun 2019 13:52:09 +0000 (13:52 +0000)] 
firewall: Drop initialisation helper script

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agofirewall: Add init action to main script
Michael Tremer [Sat, 22 Jun 2019 13:50:00 +0000 (13:50 +0000)] 
firewall: Add init action to main script

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agosystemd: Remove double firewall scripts
Michael Tremer [Sat, 22 Jun 2019 13:43:04 +0000 (13:43 +0000)] 
systemd: Remove double firewall scripts

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agofirewall: Drop separate scripts for IPv6 and IPv4
Michael Tremer [Fri, 21 Jun 2019 05:34:23 +0000 (06:34 +0100)] 
firewall: Drop separate scripts for IPv6 and IPv4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoinetcalc: Fix compiler warnings
Michael Tremer [Sat, 22 Jun 2019 13:31:03 +0000 (13:31 +0000)] 
inetcalc: Fix compiler warnings

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoFix creating new configs
Stefan Schantl [Sat, 22 Jun 2019 09:52:37 +0000 (09:52 +0000)] 
Fix creating new configs

The id argument was missing for the zone_config_settings_write.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoconfigure: Break when asciidoc cannot be found
Michael Tremer [Fri, 21 Jun 2019 05:30:44 +0000 (06:30 +0100)] 
configure: Break when asciidoc cannot be found

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoDo not try to start Bird during boot process
Michael Tremer [Thu, 20 Jun 2019 21:09:01 +0000 (23:09 +0200)] 
Do not try to start Bird during boot process

We should not do this in the network script and let just
systemd take care of this. Otherwise we would end up in
an infinite loop during the boot process.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agovlan: Add support for 802.1ad (QinQ)
Michael Tremer [Mon, 3 Jun 2019 11:17:06 +0000 (13:17 +0200)] 
vlan: Add support for 802.1ad (QinQ)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoutil: Add abort() which will stop the program immediately
Michael Tremer [Mon, 3 Jun 2019 11:16:47 +0000 (13:16 +0200)] 
util: Add abort() which will stop the program immediately

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agovlan: Validate ID
Michael Tremer [Mon, 3 Jun 2019 10:41:36 +0000 (12:41 +0200)] 
vlan: Validate ID

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agovlan: Rename tag to id
Michael Tremer [Mon, 3 Jun 2019 10:34:49 +0000 (12:34 +0200)] 
vlan: Rename tag to id

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agovlan: Drop ebtables stuff
Michael Tremer [Mon, 3 Jun 2019 10:30:48 +0000 (12:30 +0200)] 
vlan: Drop ebtables stuff

We no longer have ebtables

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agovlan: Create partent port (if necessary)
Michael Tremer [Mon, 3 Jun 2019 10:29:57 +0000 (12:29 +0200)] 
vlan: Create partent port (if necessary)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agovlan: Refactor vlan_create()
Michael Tremer [Mon, 3 Jun 2019 10:28:17 +0000 (12:28 +0200)] 
vlan: Refactor vlan_create()

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agovlan: Simplify vlan_remove()
Michael Tremer [Mon, 3 Jun 2019 10:15:41 +0000 (12:15 +0200)] 
vlan: Simplify vlan_remove()

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agovlan: Check if parent device exists before bringing it up
Michael Tremer [Mon, 3 Jun 2019 10:15:01 +0000 (12:15 +0200)] 
vlan: Check if parent device exists before bringing it up

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agovlan: Rename PARENT_DEVICE to PARENT_PORT
Michael Tremer [Mon, 3 Jun 2019 10:08:05 +0000 (12:08 +0200)] 
vlan: Rename PARENT_DEVICE to PARENT_PORT

It technically is a port

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agovlan: Fail when unknown command line parameters are being passed
Michael Tremer [Mon, 3 Jun 2019 10:02:15 +0000 (12:02 +0200)] 
vlan: Fail when unknown command line parameters are being passed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agovlan: Validate and always set MAC address
Michael Tremer [Mon, 3 Jun 2019 10:00:02 +0000 (12:00 +0200)] 
vlan: Validate and always set MAC address

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agovlan: Convert hook to use parse_cmdline function
Michael Tremer [Mon, 3 Jun 2019 09:55:35 +0000 (11:55 +0200)] 
vlan: Convert hook to use parse_cmdline function

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agohooks: Add overwritable function to determine the port name
Michael Tremer [Mon, 3 Jun 2019 09:50:13 +0000 (11:50 +0200)] 
hooks: Add overwritable function to determine the port name

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Make syntax format more similar across files
Michael Tremer [Mon, 1 Apr 2019 17:49:01 +0000 (19:49 +0200)] 
man: Make syntax format more similar across files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Fix authorship warnings
Michael Tremer [Mon, 1 Apr 2019 10:47:02 +0000 (12:47 +0200)] 
man: Fix authorship warnings

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Do not generate HTML documentation in normal build
Michael Tremer [Mon, 1 Apr 2019 10:45:55 +0000 (12:45 +0200)] 
man: Do not generate HTML documentation in normal build

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoMakefile: Add target to upload HTML man pages
Michael Tremer [Mon, 1 Apr 2019 10:31:53 +0000 (12:31 +0200)] 
Makefile: Add target to upload HTML man pages

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: network-route-static: Fix name
Michael Tremer [Sun, 31 Mar 2019 18:17:09 +0000 (20:17 +0200)] 
man: network-route-static: Fix name

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Include include files in tarball
Michael Tremer [Sun, 31 Mar 2019 18:14:34 +0000 (20:14 +0200)] 
man: Include include files in tarball

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Make distcheck happy
Michael Tremer [Sun, 31 Mar 2019 18:08:00 +0000 (20:08 +0200)] 
man: Make distcheck happy

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Cleanup XML files
Michael Tremer [Sun, 31 Mar 2019 18:01:00 +0000 (20:01 +0200)] 
man: Cleanup XML files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-zone-wireless(8) to asciidoc
Michael Tremer [Sun, 31 Mar 2019 15:53:20 +0000 (17:53 +0200)] 
man: Convert network-zone-wireless(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-zone-pppoe(8) to asciidoc
Michael Tremer [Sun, 31 Mar 2019 15:42:10 +0000 (17:42 +0200)] 
man: Convert network-zone-pppoe(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-zone-modem(8) to asciidoc
Michael Tremer [Sun, 31 Mar 2019 15:34:10 +0000 (17:34 +0200)] 
man: Convert network-zone-modem(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-zone-ip-tunnel(8) to asciidoc
Michael Tremer [Sun, 31 Mar 2019 15:23:07 +0000 (17:23 +0200)] 
man: Convert network-zone-ip-tunnel(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-zone-config-pppoe-server(8) to asciidoc
Michael Tremer [Sun, 31 Mar 2019 15:15:50 +0000 (17:15 +0200)] 
man: Convert network-zone-config-pppoe-server(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-zone-bridge(8) to asciidoc
Michael Tremer [Sun, 31 Mar 2019 14:59:10 +0000 (16:59 +0200)] 
man: Convert network-zone-bridge(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-zone(8) to asciidoc
Michael Tremer [Sun, 31 Mar 2019 14:46:07 +0000 (16:46 +0200)] 
man: Convert network-zone(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-vpn-security-policies(8) to asciidoc
Michael Tremer [Sun, 31 Mar 2019 14:30:26 +0000 (16:30 +0200)] 
man: Convert network-vpn-security-policies(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-vpn(8) to asciidoc
Michael Tremer [Sun, 31 Mar 2019 13:59:21 +0000 (15:59 +0200)] 
man: Convert network-vpn(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-settings(8) to asciidoc
Michael Tremer [Sun, 31 Mar 2019 13:47:14 +0000 (15:47 +0200)] 
man: Convert network-settings(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-route-static(8) to asciidoc
Michael Tremer [Sun, 31 Mar 2019 13:34:19 +0000 (15:34 +0200)] 
man: Convert network-route-static(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months ago.gitignore: Ignore DS_Store
Michael Tremer [Sun, 31 Mar 2019 13:10:49 +0000 (15:10 +0200)] 
.gitignore: Ignore DS_Store

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-route(8) to asciidoc
Michael Tremer [Sun, 31 Mar 2019 13:08:46 +0000 (15:08 +0200)] 
man: Convert network-route(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Fix page headers
Michael Tremer [Sun, 30 Sep 2018 20:55:51 +0000 (22:55 +0200)] 
man: Fix page headers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Drop old network-color(8) man page
Michael Tremer [Sun, 30 Sep 2018 20:54:02 +0000 (22:54 +0200)] 
man: Drop old network-color(8) man page

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Use include for color commands
Michael Tremer [Sun, 30 Sep 2018 20:53:20 +0000 (22:53 +0200)] 
man: Use include for color commands

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Converting network-quick-start(8) to asciidoc
Michael Tremer [Sun, 30 Sep 2018 20:40:35 +0000 (22:40 +0200)] 
man: Converting network-quick-start(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-port(8) to asciidoc
Michael Tremer [Sun, 30 Sep 2018 20:27:40 +0000 (22:27 +0200)] 
man: Convert network-port(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-performance-tuning(8) to asciidoc
Michael Tremer [Sun, 30 Sep 2018 20:04:08 +0000 (22:04 +0200)] 
man: Convert network-performance-tuning(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-dns-server(8) to asciidoc
Michael Tremer [Sun, 30 Sep 2018 19:59:01 +0000 (21:59 +0200)] 
man: Convert network-dns-server(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-dhcp(8) to asciidoc
Michael Tremer [Sun, 30 Sep 2018 19:46:49 +0000 (21:46 +0200)] 
man: Convert network-dhcp(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-device(8) to asciidoc
Michael Tremer [Sun, 30 Sep 2018 19:40:53 +0000 (21:40 +0200)] 
man: Convert network-device(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-description(8) to asciidoc
Michael Tremer [Sun, 30 Sep 2018 19:24:48 +0000 (21:24 +0200)] 
man: Convert network-description(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert firewall-settings to asciidoc
Michael Tremer [Sun, 30 Sep 2018 19:16:10 +0000 (21:16 +0200)] 
man: Convert firewall-settings to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: network-color: Add synopsis
Michael Tremer [Wed, 26 Sep 2018 22:47:19 +0000 (00:47 +0200)] 
man: network-color: Add synopsis

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Drop test page
Michael Tremer [Wed, 26 Sep 2018 22:36:02 +0000 (00:36 +0200)] 
man: Drop test page

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network-color(8) to asciidoc
Michael Tremer [Wed, 26 Sep 2018 22:34:35 +0000 (00:34 +0200)] 
man: Convert network-color(8) to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Convert network(8) from docbook to asciidoc
Michael Tremer [Wed, 26 Sep 2018 22:25:12 +0000 (00:25 +0200)] 
man: Convert network(8) from docbook to asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Add asciidoc configuration file
Michael Tremer [Wed, 26 Sep 2018 22:22:59 +0000 (00:22 +0200)] 
man: Add asciidoc configuration file

This adds a short command to link to other man pages

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Use asciidoc to generate HTML pages directly
Michael Tremer [Wed, 26 Sep 2018 21:04:35 +0000 (23:04 +0200)] 
man: Use asciidoc to generate HTML pages directly

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoman: Add test page for asciidoc
Michael Tremer [Wed, 26 Sep 2018 20:42:36 +0000 (22:42 +0200)] 
man: Add test page for asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoconfigure: Require asciidoc
Michael Tremer [Wed, 26 Sep 2018 20:14:27 +0000 (22:14 +0200)] 
configure: Require asciidoc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agobird: Make sure the daemon is always running
Michael Tremer [Sun, 31 Mar 2019 12:28:44 +0000 (14:28 +0200)] 
bird: Make sure the daemon is always running

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months ago.gitignore: Ignore vim's swp files
Michael Tremer [Sun, 31 Mar 2019 12:21:18 +0000 (14:21 +0200)] 
.gitignore: Ignore vim's swp files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoDrop code for radvd
Michael Tremer [Sun, 31 Mar 2019 12:20:40 +0000 (14:20 +0200)] 
Drop code for radvd

This is now being replaced by bird.

Bird is running anyways and can do this job just as well.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agobird: Write IPv6 router advertisement configuration
Michael Tremer [Sun, 31 Mar 2019 12:14:55 +0000 (14:14 +0200)] 
bird: Write IPv6 router advertisement configuration

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agohostapd: Require MFP for SAE when it is enabled
Michael Tremer [Sun, 31 Mar 2019 11:10:30 +0000 (13:10 +0200)] 
hostapd: Require MFP for SAE when it is enabled

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agolock: Cleanup lock files
Michael Tremer [Sat, 30 Mar 2019 18:03:24 +0000 (19:03 +0100)] 
lock: Cleanup lock files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoip-tunnel: Enable support for 6in4 tunnels
Michael Tremer [Sat, 30 Mar 2019 17:56:04 +0000 (18:56 +0100)] 
ip-tunnel: Enable support for 6in4 tunnels

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoDrop old locking functions
Michael Tremer [Sat, 30 Mar 2019 17:51:13 +0000 (18:51 +0100)] 
Drop old locking functions

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agowireless-ap: Check that secret has the correct length and no invalid characters
Michael Tremer [Sat, 30 Mar 2019 17:14:07 +0000 (18:14 +0100)] 
wireless-ap: Check that secret has the correct length and no invalid characters

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agohooks: Add HOOK_UNIQUE which stops us from creating multiple instances
Michael Tremer [Sat, 30 Mar 2019 16:05:58 +0000 (17:05 +0100)] 
hooks: Add HOOK_UNIQUE which stops us from creating multiple instances

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agodhcp: Fix syntax error in last commit
Michael Tremer [Sat, 30 Mar 2019 16:05:44 +0000 (17:05 +0100)] 
dhcp: Fix syntax error in last commit

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agodhcp: Rename "enabled" from configuration parameters
Michael Tremer [Sat, 30 Mar 2019 15:57:31 +0000 (16:57 +0100)] 
dhcp: Rename "enabled" from configuration parameters

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agohook: Rename HOOK_CONFIG_SETTINGS to HOOK_SETTINGS
Michael Tremer [Sat, 30 Mar 2019 15:54:04 +0000 (16:54 +0100)] 
hook: Rename HOOK_CONFIG_SETTINGS to HOOK_SETTINGS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agohooks: Use cli_get_bool convenience function where ever possible
Michael Tremer [Sat, 30 Mar 2019 15:30:05 +0000 (16:30 +0100)] 
hooks: Use cli_get_bool convenience function where ever possible

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agowireless-ap: Enable 802.11w by default
Michael Tremer [Sat, 30 Mar 2019 15:23:55 +0000 (16:23 +0100)] 
wireless-ap: Enable 802.11w by default

This causes some problems on broken Intel systems, but I
guess it is better to prefer security than compatibility in the
default settings.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agohostapd: Allow WPA2 authentication only with SHA256
Michael Tremer [Sat, 30 Mar 2019 15:22:45 +0000 (16:22 +0100)] 
hostapd: Allow WPA2 authentication only with SHA256

This experimental change disables support for the legacy WPA2
authentication that does not support SHA256.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agohotplug-rename: Drop unused variable
Michael Tremer [Sat, 30 Mar 2019 15:19:24 +0000 (16:19 +0100)] 
hotplug-rename: Drop unused variable

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agowireless-ap: Add support for WPA3 and rewrite WPA2
Michael Tremer [Sat, 30 Mar 2019 15:12:53 +0000 (16:12 +0100)] 
wireless-ap: Add support for WPA3 and rewrite WPA2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agowireless-ap: Remove support for WPA
Michael Tremer [Sat, 30 Mar 2019 14:02:34 +0000 (15:02 +0100)] 
wireless-ap: Remove support for WPA

This is a deprecated protocol and not secure.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agohotplug: Remove multiple copies of the same function
Michael Tremer [Sat, 30 Mar 2019 13:58:12 +0000 (14:58 +0100)] 
hotplug: Remove multiple copies of the same function

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoports: Drop HOOK_SETTINGS variable
Michael Tremer [Sat, 30 Mar 2019 13:14:56 +0000 (14:14 +0100)] 
ports: Drop HOOK_SETTINGS variable

This does not need to be passed to the port_settings_* functions
any more which makes them more easy to use

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agosettings: Some code refactoring
Michael Tremer [Sat, 30 Mar 2019 13:04:35 +0000 (14:04 +0100)] 
settings: Some code refactoring

No functional changes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agoConvert HOOK_SETTINGS into an array
Michael Tremer [Sat, 30 Mar 2019 12:49:08 +0000 (13:49 +0100)] 
Convert HOOK_SETTINGS into an array

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agohooks: Import zone default settings, too
Michael Tremer [Sat, 30 Mar 2019 12:10:58 +0000 (13:10 +0100)] 
hooks: Import zone default settings, too

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agohooks: Automatically set defaults for all port hooks
Michael Tremer [Sat, 30 Mar 2019 12:03:59 +0000 (13:03 +0100)] 
hooks: Automatically set defaults for all port hooks

Before, this was broken so that all configuration parameters
had to be passed all the time.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agohostapd: Enable WPA authentication with SHA256
Michael Tremer [Sat, 30 Mar 2019 11:47:32 +0000 (12:47 +0100)] 
hostapd: Enable WPA authentication with SHA256

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 months agowireless-ap: Automatically enable all supported ciphers
Michael Tremer [Sat, 30 Mar 2019 10:27:50 +0000 (11:27 +0100)] 
wireless-ap: Automatically enable all supported ciphers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>