aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* stubby: add SPKI pin set for Cloudflare certTony Ambardar2018-09-23
| | | | | | | | | | | | | Add an SPKI pin for Cloudflare to help prevent MITM and downgrade attacks, as described in RFC7858 (DNS over TLS). The setup of SPKI and the specific SHA256 certificate hash are taken from Cloudflare's DoT configuration guide published at https://developers.cloudflare.com/1.1.1.1/dns-over-tls/. Note that the certificate is valid to March 25th 2020, 13:00 CET, which provides ample time for issuance of a backup pin to support future key rollover. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
* stubby: add Cloudflare 1.0.0.1 and ::1001 serversTony Ambardar2018-09-23
| | | | Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
* stubby: use EDNS client-subnet privacy by defaultTony Ambardar2018-09-23
| | | | | | | | Retain the upstream value since privacy is usually the key user motivation for using DNS-over-TLS, and simply note that those encountering sub-optimal routing may consider disabling the setting. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
* stubby: fix config file definitionTony Ambardar2018-09-23
| | | | | | | The config file /etc/stubby/stubby.yml is not registered properly and any local changes are being overwritten on upgrade or reinstall. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
* stubby: rearrange Makefile for clarityTony Ambardar2018-09-23
| | | | Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
* Merge pull request #6995 from neheb/odbcThomas Heil2018-09-23
|\ | | | | unixodbc: Update to 2.3.7
| * unixodbc: Update to 2.3.7Rosen Penev2018-09-10
| | | | | | | | | | | | | | | | | | | | | | Switched to HTTP as FTP can be problematic. uscan for example has issues figuring out the latest version. Added PKG_CPE_ID for proper CVE tracking. Reorganized Makefile for consistency with other projects. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | Merge pull request #7074 from neheb/patch-41Thomas Heil2018-09-23
|\ \ | | | | | | apr: Update to 1.6.5
| * | apr: Update to 1.6.5Rosen Penev2018-09-18
| | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #7086 from gladiac1337/feature-haproxy-v1.8.14Thomas Heil2018-09-23
|\ \ \ | | | | | | | | haproxy: Update HAProxy to v1.8.14
| * | | haproxy: Update HAProxy to v1.8.14Christian Lachner2018-09-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash - Removed all obsolete patches - This fixes CVE-2018-14645 (See: https://nvd.nist.gov/vuln/detail/CVE-2018-14645) Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | php7: update to 7.2.10Michael Heimpold2018-09-23
| | | | | | | | | | | | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | glib2: update to 2.56.3Peter Wagner2018-09-23
| | | | | | | | | | | | | | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | Merge pull request #6899 from diizzyy/patch-12champtar2018-09-23
|\ \ \ \ | | | | | | | | | | libs/sqlite: Update to 3.24.0
| * | | | libs/sqlite: Update to 3.24.0Daniel Engberg2018-08-28
| | | | | | | | | | | | | | | | | | | | | | | | | Update sqlite to 3.24.0 Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* | | | | Merge pull request #6633 from cotequeiroz/libftdi1_cmake-3.12Hannu Nyman2018-09-23
|\ \ \ \ \ | | | | | | | | | | | | libftdi1: Fix compilation with cmake 3.12
| * | | | | libftdi1: Fix compilation with cmake 3.12Eneas U de Queiroz2018-07-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Applied a patch submitted upstream that fixes a compilation error with cmake >= 3.12 Error: Unable to find 'swig.swg' [...] 'python.swg' Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
* | | | | | Merge pull request #6538 from FireCulex/bonnie++Hannu Nyman2018-09-23
|\ \ \ \ \ \ | | | | | | | | | | | | | | bonnie++ 1.97.3
| * | | | | | bonnie: 1.97.3Matthew M. Dean2018-07-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update to fix compilation issues with GCC7 Signed-off-by: Matthew M. Dean <fireculex@gmail.com>
* | | | | | | nano: update to 3.1Hannu Nyman2018-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Update nano editor to 3.1 * Apply a post-release upstream patch to fix compilation Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | | | | Merge pull request #7025 from Andy2244/krb5-keyutil-fixDirk Brenken2018-09-23
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | krb5: fix keyutils dependency
| * | | | | | | krb5: fix keyutils dependencyAndy Walsh2018-09-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * if <keyutils.h> is found krb5 pulls in the lib, which than fails to link because of a missing -fPic in libkeyutils.so * keyutils 1.5.11 will depend on krb5, so we disable it in krb5 to avoid circular dependency Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* | | | | | | | Merge pull request #6796 from MikePetullo/syslog-ngDirk Brenken2018-09-22
|\ \ \ \ \ \ \ \ | |_|_|_|_|/ / / |/| | | | | | | syslog-ng: update to 3.17.2
| * | | | | | | syslog-ng: update to 3.17.2W. Michael Petullo2018-09-22
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* | | | | | | Merge pull request #7079 from valdi74/update_package_aria2Dirk Brenken2018-09-22
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | aria2: handle check_certificate=false config option
| * | | | | | | aria2: handle check_certificate=false config optionWaldemar Konik2018-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Waldemar Konik <informatyk74@interia.pl>
* | | | | | | | Merge pull request #7008 from TDT-AG/pr/20180912-keepalived-enable-ipvsDirk Brenken2018-09-22
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | net/keepalived: update to version 2.0.7 and enable ipvs support
| * | | | | | | | net/keepalived: enable lvs supportFlorian Eckert2018-09-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Enable IPVS support. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | | | | net/keepalived: update to version 2.0.7Florian Eckert2018-09-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update keepalived to version 2.0.7. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | | | | | Merge pull request #6990 from ptpt52/mwan3-fixDirk Brenken2018-09-22
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | mwan3: optimize the process of copying routing tables
| * | | | | | | | | mwan3: optimize the process of copying routing tablesChen Minqiang2018-09-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - The original copy process is to delete all routing tables first, then add new routing table. This process is too slow and very dirty. - We use grep to identify the changes and apply them. - ignore ipv6 unreachable routes - update version number Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
* | | | | | | | | | Merge pull request #7030 from ↵Dirk Brenken2018-09-22
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | jonathanunderwood/stubby_ca_certificates_dependency stubby: add missing dependency on ca-certificates
| * | | | | | | | | | stubby: add missing dependency on ca-certificatesTony Ambardar2018-09-16
| | |_|_|/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
* | | | | | | | | | Merge pull request #7046 from neheb/patch-27Dirk Brenken2018-09-22
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | python-pcapy: Update to 0.11.4
| * | | | | | | | | | python-pcapy: Update to 0.11.4Rosen Penev2018-09-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Switched to regular tarballs from standard pythonhosted source. Small Makefile rearrangements for consistency. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | | | git: simplify install codePeter Wagner2018-09-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | | | | | | | | git: don't hard link to symlinks, to avoid ending up with a git executeable ↵Peter Wagner2018-09-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | with 0777 access rights Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | | | | | | | | boost: Bump PKG_RELEASE to force buildbot re-buildsTed Hess2018-09-21
| |_|/ / / / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Ted Hess <thess@kitschensync.net>
* | | | | | | | | | Merge pull request #7081 from thess/boost-workTed Hess2018-09-20
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | boost: Fix mips32r1 cpu builds (exclude Boost.fiber)
| * | | | | | | | | | boost: Fix mips32r1 cpu builds (exclude Boost.fiber)Ted Hess2018-09-20
|/ / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Ted Hess <thess@kitschensync.net>
* | | | | | | | | | Merge pull request #7068 from neheb/joolHannu Nyman2018-09-20
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | jool: Update to 3.5.7 and switch to tarballs
| * | | | | | | | | | jool: Update to 3.5.7 and switch to tarballsRosen Penev2018-09-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Should be faster. Rearranged Makefile slightly for consistency with other packages. Version 3.5.6 and above are relicensed to GPL-2.0. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | | | Merge pull request #7076 from mlichvar/chrony-update-3.4Hannu Nyman2018-09-20
|\ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | chrony: update to 3.4
| * | | | | | | | | | | chrony: update to 3.4Miroslav Lichvar2018-09-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
* | | | | | | | | | | | Merge pull request #7069 from sartura/geth_1.8.15Hannu Nyman2018-09-19
|\ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | geth: Update to 1.8.15
| * | | | | | | | | | | | geth: Update to 1.8.15Mislav Novakovic2018-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
* | | | | | | | | | | | | acme: Fix arithmetic syntaxToke Høiland-Jørgensen2018-09-19
| |/ / / / / / / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Thanks to @jow- for pointing out the mistake. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* | | | | | | | | | | | Merge branch 'acme-nginx'Toke Høiland-Jørgensen2018-09-19
|\ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Closes #6513 Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
| * | | | | | | | | | | | acme: Fix whitespace and long lines, bump package revToke Høiland-Jørgensen2018-09-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
| * | | | | | | | | | | | acme: add support for nginx webserverAnsuel Smith2018-09-19
|/ / / / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds a metapakcge for acme luci ap without uhttpd dependency and adds entities and check to stop handle nginx server and modify the certificate set automatically. Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
Powered by cgit, Themed by Ted Yin.