]>
git.ipfire.org Git - people/pmueller/ipfire-2.x.git/log
Michael Tremer [Wed, 29 Nov 2017 12:04:05 +0000 (12:04 +0000)]
core117: Ship updated ids.dat
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Tue, 21 Nov 2017 19:27:45 +0000 (20:27 +0100)]
show IDS rule names correctly in WebUI log
The WebUI IDS log did not display the rule name for alerts
where a signature with a five digit number was triggered
(some Emerging Threats signatures are using them).
Changing the regular expression so it will match on five
digit SIDs, too.
Fixes #11519.
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 29 Nov 2017 12:02:50 +0000 (12:02 +0000)]
core117: Ship updated index.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Fri, 24 Nov 2017 19:28:02 +0000 (20:28 +0100)]
link to DNS server status page on index.cgi
Show a link to the DNS server status at netexternal.cgi
on index.cgi in WebUI.
For the lazy ones... :-)
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Fri, 24 Nov 2017 19:32:55 +0000 (20:32 +0100)]
correct wrong headline at hardwaregraphs.cgi
The page description (title and headline) should print
"hardware graphs" instead of only mentioning HDDs.
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 29 Nov 2017 12:00:33 +0000 (12:00 +0000)]
core117: Ship updated netother.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 29 Nov 2017 12:00:13 +0000 (12:00 +0000)]
Update translations
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Fri, 24 Nov 2017 19:39:34 +0000 (20:39 +0100)]
translate 'firewall hits' at netother.cgi
Also translate 'firewall hits' at the network status
(other) page in WebUI.
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 29 Nov 2017 11:59:08 +0000 (11:59 +0000)]
core117: Ship updated credits.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Tue, 28 Nov 2017 19:41:53 +0000 (20:41 +0100)]
update links to www.ipfire.org at credits.cgi
The links to the IPFire homepage in the credits.cgi file should
point to the HTTPS version of the site now.
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 29 Nov 2017 11:57:37 +0000 (11:57 +0000)]
captive: Escape any special characters in title on PDF vouchers
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 29 Nov 2017 11:54:37 +0000 (11:54 +0000)]
make.sh: Create /tools_${arch} link only when building a toolchain
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 28 Nov 2017 17:49:25 +0000 (17:49 +0000)]
core117: Ship latest updates of syslogging
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Mon, 20 Nov 2017 18:40:32 +0000 (19:40 +0100)]
add language strings
Add language strings for changed config.dat CGI file.
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Mon, 20 Nov 2017 18:40:17 +0000 (19:40 +0100)]
allow changing remote syslog protocol to TCP
Add option to change remote syslog protocol to TCP, which
is more reliable than UDP, but might be unsupported on
older syslog servers.
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Mon, 20 Nov 2017 18:40:11 +0000 (19:40 +0100)]
allow remote syslog via TCP in syslogdctrl.c
Make syslogctrl.c use TCP as remote logging file if specified so.
Thanks to Michael for reviewing this.
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 28 Nov 2017 17:44:49 +0000 (17:44 +0000)]
make.sh: Simplify maths to determine cursor position
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 28 Nov 2017 17:36:07 +0000 (17:36 +0000)]
make.sh: Improve formatting of options
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 28 Nov 2017 17:34:02 +0000 (17:34 +0000)]
make.sh: Fix position of SKIP message when building packages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 28 Nov 2017 17:14:29 +0000 (17:14 +0000)]
ssl: Drop package which isn't maintained any more
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 28 Nov 2017 13:46:07 +0000 (13:46 +0000)]
Drop vsftpd which isn't actively maintained any more
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 28 Nov 2017 15:55:19 +0000 (15:55 +0000)]
pound: Drop package which isn't very actively maintained any more
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 28 Nov 2017 17:28:09 +0000 (17:28 +0000)]
make.sh: Drop generating a global rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 28 Nov 2017 17:27:36 +0000 (17:27 +0000)]
make.sh: Fix printing a log line
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 28 Nov 2017 17:22:23 +0000 (17:22 +0000)]
make.sh: Continue producing nice output after screen has been resized
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 28 Nov 2017 17:19:27 +0000 (17:19 +0000)]
core117: Ship updated vpnmain.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 28 Nov 2017 17:17:22 +0000 (17:17 +0000)]
vpnmain.cgi: Disable compression by default
The compression is causing some interoperatibility issues
and does not really compress data very much - even when the
data is quite compressible.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 28 Nov 2017 14:14:16 +0000 (14:14 +0000)]
apache: Wait until apache has stopped when we want to stop it
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 7 Nov 2017 20:30:52 +0000 (20:30 +0000)]
apache: Ensure that not everyone can read the keys
This would become a security risk if anyone gets
shell access as any user to copy out the HTTPS keys.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Tue, 28 Nov 2017 06:01:33 +0000 (07:01 +0100)]
boost: disable parallel build
this need more than 1GB ram on arm
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Mon, 27 Nov 2017 17:20:59 +0000 (18:20 +0100)]
samba: import security updates from redhead
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Thu, 23 Nov 2017 16:09:00 +0000 (16:09 +0000)]
make.sh: Don't try to dump a non-existing logfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 23 Nov 2017 16:07:42 +0000 (16:07 +0000)]
make.sh: Show architecture we are building the toolchain for
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 23 Nov 2017 16:06:59 +0000 (16:06 +0000)]
make.sh: Fix typo
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 23 Nov 2017 14:46:55 +0000 (14:46 +0000)]
make.sh: Refactor build status code
This replaces the old lines that make the build
output pretty and replaces it by a version that showns
progress as it is going on as well as providing useful
output when the console is non-interactive.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 23 Nov 2017 11:56:18 +0000 (11:56 +0000)]
Compress toolchain using XZ
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 23 Nov 2017 12:39:57 +0000 (12:39 +0000)]
make.sh: Refactor renice and root check
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 23 Nov 2017 12:35:17 +0000 (12:35 +0000)]
make.sh: Cleanup prepareenv
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 23 Nov 2017 12:24:38 +0000 (12:24 +0000)]
make.sh: TARGET_ARCH has been replaced by BUILD_ARCH
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 23 Nov 2017 12:18:41 +0000 (12:18 +0000)]
make.sh: Merge make-functions into make.sh
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 23 Nov 2017 11:39:23 +0000 (11:39 +0000)]
Move toolchain from /tools to /tools_${arch}
This will allow us to run multiple builds on the same
system at the same time (or at least have them on disk).
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 23 Nov 2017 12:01:39 +0000 (12:01 +0000)]
make.sh: Drop option to generate a source ISO
This is a very weird way to distribute sources in 2017.
Let's save the environment and stop using CDs.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 20 Nov 2017 15:46:53 +0000 (15:46 +0000)]
core117: Reload apache for change of configuration
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Sun, 19 Nov 2017 16:24:36 +0000 (17:24 +0100)]
disable SSL compression and session tickets in Apache
Ensure that Apache never uses SSL compression, which is vulnerable,
and turn off session tickets since the might cause impact to PFS.
Based against next, supersedes first version.
Reported-by: Wolfgang Apolinarski <wolfgang.apolinarski@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 13 Nov 2017 23:18:55 +0000 (23:18 +0000)]
Retire the IPFire CA
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 13 Nov 2017 23:18:00 +0000 (23:18 +0000)]
core117: Ship updated CA bundle
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Sun, 12 Nov 2017 06:49:53 +0000 (07:49 +0100)]
update ca-certificate CA bundle
Update the CA certificate list to what Mozilla NSS ships currently.
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 13 Nov 2017 22:41:58 +0000 (22:41 +0000)]
core117: Ship changes in pakfire
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Sun, 12 Nov 2017 14:40:28 +0000 (15:40 +0100)]
validate GPG keys by fingerprint
Validate GPG keys by fingerprint and not by 8-bit key-ID.
This makes exploiting bug #11539 harder, but not impossible
and does not affect existing installations.
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 13 Nov 2017 22:39:36 +0000 (22:39 +0000)]
core117: Ship latest GeoIP changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 9 Nov 2017 22:32:04 +0000 (22:32 +0000)]
GeoIP: Add lookup function for convenience
Instead of opening the database again for each lookup,
we will read it into memory on first use and every lookup
after that will be coming from cache.
Reviewed-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 9 Nov 2017 22:32:03 +0000 (22:32 +0000)]
geoip-functions.pl: Fix typos and formatting
Reviewed-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 13 Nov 2017 21:56:27 +0000 (21:56 +0000)]
make.sh: Default to armv5tel on armv7* build hosts
We won't offer a native port to ARMv7 in the near future
and to default to an architecture that is working on these
machines, we select armv5tel as default
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 13 Nov 2017 21:49:15 +0000 (21:49 +0000)]
Revert "make.sh: Use -pipe in CFLAGS when host has >1GB of memory"
This reverts commit
7e1639a4810e5e70db94fdb0a0a98593d50d4290 .
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 11 Nov 2017 12:47:37 +0000 (12:47 +0000)]
captive portal: Require authorization before redirecting to proxy
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 7 Nov 2017 16:20:53 +0000 (16:20 +0000)]
core117: Ship updated routing.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Alexander Marx [Tue, 7 Nov 2017 14:10:06 +0000 (15:10 +0100)]
BUG11466: fix routing.cgi the function call in routing.cgi was fixed to call the new "exact" function.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Alexander Marx [Tue, 7 Nov 2017 13:53:27 +0000 (14:53 +0100)]
Network-functions: add check if variables are defined
in function network_equal and network2bin a check for undefined variables were missing.
added them.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 7 Nov 2017 16:16:50 +0000 (16:16 +0000)]
core117: Ship updated network-functions.pl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Alexander Marx [Tue, 7 Nov 2017 13:17:27 +0000 (14:17 +0100)]
BUG11466: Fix network_equal function
The network_equal function only tested the subnet addresses of two given networks which lead to
errormessages saying "This is the green network"
The fix tests netwok and subnet IP's to fix this
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 6 Nov 2017 18:11:49 +0000 (18:11 +0000)]
core117: Ship changed files of the webUI
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Mon, 6 Nov 2017 17:12:48 +0000 (18:12 +0100)]
link to HTTPS version of www.ipfire.org in WebUI
Change links to www.ipfire.org in WebUI themes since the website
now uses HTTPS.
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Mon, 6 Nov 2017 17:27:04 +0000 (18:27 +0100)]
Tor: Use relay mode as default setting
Set the default operating mode to "relay" in the Tor WebUI
configuration page.
Running a Tor exit relay may cause legal trouble in some
countries and should not be the default setting to prevent
users from accidentally running an exit router.
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 6 Nov 2017 18:10:02 +0000 (18:10 +0000)]
Start Core Update 117
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 7 Nov 2017 15:02:28 +0000 (16:02 +0100)]
unbound: Silence error when upstream name servers cannot be read
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 7 Nov 2017 14:43:14 +0000 (15:43 +0100)]
make.sh: Calculate MAKETUNING depending on available memory
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 7 Nov 2017 14:27:31 +0000 (15:27 +0100)]
make.sh: Remove setting the EDITOR variable which we don't use
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 7 Nov 2017 14:25:11 +0000 (15:25 +0100)]
make.sh: Add function to determine how many CPU cores the build host has
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 7 Nov 2017 14:26:25 +0000 (15:26 +0100)]
make.sh: Use -pipe in CFLAGS when host has >1GB of memory
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 7 Nov 2017 14:23:59 +0000 (15:23 +0100)]
make.sh: Determine how much memory the build host has
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 6 Nov 2017 19:07:10 +0000 (19:07 +0000)]
captive: One month is only 30 days instead of 210
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Fri, 3 Nov 2017 15:40:23 +0000 (16:40 +0100)]
core116: stop apache before extracting updated files
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 3 Nov 2017 13:28:22 +0000 (14:28 +0100)]
core116: replace apache restart by stop and start
restart seems not work after replace apache...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 3 Nov 2017 13:22:19 +0000 (14:22 +0100)]
core116: ship updated wget
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 2 Nov 2017 21:48:58 +0000 (22:48 +0100)]
finish core116
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 2 Nov 2017 21:47:59 +0000 (22:47 +0100)]
core116: set need_reboot flag
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 2 Nov 2017 21:46:47 +0000 (22:46 +0100)]
core116: ship openssh
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 2 Nov 2017 21:45:25 +0000 (22:45 +0100)]
core116: fix openssl symlink
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Thu, 2 Nov 2017 15:37:27 +0000 (15:37 +0000)]
wget: Update file extension
Upstream does not distribute XZ compressed tarballs any more
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 2 Nov 2017 15:29:01 +0000 (15:29 +0000)]
openssl: Update to 1.0.2m
* bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735)
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sun, 29 Oct 2017 18:33:03 +0000 (18:33 +0000)]
wget: Update to 1.19.2
Fixes CVE-2017-13089
A stack-based buffer overflow when processing chunked, encoded HTTP
responses was found in wget. By tricking an unsuspecting user into
connecting to a malicious HTTP server, an attacker could exploit
this flaw to potentially execute arbitrary code.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 28 Oct 2017 12:36:27 +0000 (13:36 +0100)]
core116: Ship updated apache
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Wolfgang Apolinarski [Sat, 28 Oct 2017 10:52:03 +0000 (12:52 +0200)]
Update to Apache 2.4.29
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 23 Oct 2017 15:29:09 +0000 (16:29 +0100)]
core116: Ship updated proxy.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Fri, 13 Oct 2017 20:29:20 +0000 (22:29 +0200)]
proxy.cgi: Even more cosmetics
Another clickable link for 'proxy.cgi', this time for 'Cache Manager Interface' - this one opens in a new window.
And: This time - hopefully - with correct '_blank'-attribute (deleted the backslashes) - based on current 'next'.
Plus: Deleted some "blind" tabs - found by chance.
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 23 Oct 2017 15:26:39 +0000 (16:26 +0100)]
core116: Ship snort
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Fri, 13 Oct 2017 20:23:25 +0000 (22:23 +0200)]
snort: Update to 2.9.11
For details see:
Release notes:
https://snort.org/downloads/snort/release_notes_2.9.11.txt
Changelog:
https://snort.org/downloads/snort/changelog_2.9.11.txt
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 23 Oct 2017 15:24:10 +0000 (16:24 +0100)]
Start Core Update 116
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Thu, 19 Oct 2017 19:16:02 +0000 (21:16 +0200)]
xz: Update to 5.2.3
For details see:
https://git.tukaani.org/?p=xz.git;a=blob;f=NEWS;hb=HEAD
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Sun, 22 Oct 2017 13:50:38 +0000 (15:50 +0200)]
drop httpscert and merge to apache initskript
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Sat, 21 Oct 2017 10:20:02 +0000 (11:20 +0100)]
core115: Add missing parameter to actually generate new certificates
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Wed, 18 Oct 2017 19:25:59 +0000 (21:25 +0200)]
finish core115
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 18 Oct 2017 19:24:43 +0000 (21:24 +0200)]
core115: add extrahd.cgi to updater
this file was missing in early core114 testbuilds so ship it again.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 18 Oct 2017 19:20:23 +0000 (21:20 +0200)]
Merge branch 'master' into core115
Peter Müller [Tue, 17 Oct 2017 17:49:07 +0000 (19:49 +0200)]
redirect to TLS WebUI if authorisation required
Do not allow credentials being submitted in plaintext to Apache.
Instead, redirect the user with a 301 to the TLS version of IPFire's
web interface.
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 18 Oct 2017 11:35:19 +0000 (12:35 +0100)]
Revert "Use best XZ compression for smaller images and packages"
This reverts commit
5fd54721c2275def506ac54cc2e4e810f57fa491 .
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 18 Oct 2017 11:35:04 +0000 (12:35 +0100)]
Revert "cdrom: Use -8 as compression parameter"
This reverts commit
77ad762c430761bbf2d4be03bf2836d99685359d .
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 17 Oct 2017 20:16:41 +0000 (21:16 +0100)]
cdrom: Use -8 as compression parameter
This is a better compromise on memory usage and file size
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 17 Oct 2017 14:23:26 +0000 (15:23 +0100)]
Use best XZ compression for smaller images and packages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 17 Oct 2017 13:58:52 +0000 (14:58 +0100)]
cdrom: Change format to XZ and compress in parallel
This allows us to use all processor cores to compress
the image faster.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>