aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | Merge pull request #15507 from hswong3i/master-SQUID_enable-ssl-crtdRosen Penev2021-04-25
|\ \ \ | | | | | | | | squid: Enable dynamic SSL certificate generation
| * | | squid: Enable dynamic SSL certificate generationWong Hoi Sing Edison2021-04-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: @neheb / @BKPepe / @zhanhb Compile tested: ipq806x, generic, netgear_r7800, master Run tested: ipq806x, generic, netgear_r7800, openwrt-19.07 Description: Squid now only support HTTPS proxy in TCP tunnel mode (e.g. `ssl_bump splice all`): https_port 3128 ssl-bump tls-cert=/etc/squid/squid.pem generate-host-certificates=on ssl_bump splice all In order to operate in SSL Bump mode, we need to compile with `--enable-ssl-crtd` for following configuration: https_port 3128 ssl-bump tls-cert=/etc/squid/squid.pem generate-host-certificates=on sslcrtd_program /usr/lib/squid/security_file_certgen -s /car/cache/squid/ssl_db -M 4MB ssl_bump stare all ssl_bump bump all This PR switch the `SQUID_enable-ssl-crtd` into `default y`, therefore default enable SSL Bump mode. Signed-off-by: Wong Hoi Sing Edison <hswong3i@pantarei-design.com>
* | | | conntrack-tools: add a patch to fix endianness issueTao Gong2021-04-24
| | | | | | | | | | | | | | | | Signed-off-by: Tao Gong <gongtao0607@gmail.com>
* | | | coremark: bump to 2021-03-12Aleksander Jan Bajkowski2021-04-24
|/ / / | | | | | | | | | Signed-off-by: Aleksander Jan Bajkowski <A.Bajkowski@stud.elka.pw.edu.pl>
* | | ksmbd: update to 3.3.9Rosen Penev2021-04-24
| | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | ksmbd-tools: update to 3.3.9Rosen Penev2021-04-24
| | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | uacme: add use_auto_stagingLeonardo Mörlein2021-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Staging certificates have the advantage that their retry limits are loose. Therefore they can be obtained quickly when automatic retries are used. Unfortunately they can not be used for deployments because their CA is not accepted by clients. Production certificates do not have this limitation, but their retry limits are strict. For production certificates, automatic retries can only be performed a few times per hour. This makes automatic obtainment of certificates tenacious. With use_auto_staging=1, the advantages of the two certificate types are combined. Uacme will first obtain a staging certificate. When the staging certificate is successfully obtained, uacme will switch and obtain a production certificate. Since the staging certificate has already been successfully obtained, we can ensure that the production certificate is successfully obtained in the first attempt. This means that "retries" are performed on the staging certificate and the production certificate is obtained in the first attempt. In summary, this feature enables fast obtaining of production certificates when automatic retries are used. By default, this feature is set to use_auto_staging=0, which means that uacme will behave as before by default. Signed-off-by: Leonardo Mörlein <git@irrelefant.net>
* | | uacme: do not override production state dir variableLeonardo Mörlein2021-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With this commit, issue_cert() can be called multiple times alternating between staging and production certificates within a script. Before this commit, the production state dir was stored in $STATE_DIR. But in the case of $use_staging=1, this variable was overwritten in issue_cert() with $STAGING_STATE_DIR. This made it impossible to call issue_cert() with $use_staging=0 afterwards. Now the production state dir is stored in $PRODUCTION_STATE_DIR. This way it is not overridden anymore and issue_cert() can be called multiple times alternating with production and staging. Signed-off-by: Leonardo Mörlein <git@irrelefant.net>
* | | Merge pull request #15466 from cotequeiroz/muttRosen Penev2021-04-24
|\ \ \ | | | | | | | | mutt: don't use host mailpath definition
| * | | mutt: don't use host mailpath definitionEneas U de Queiroz2021-04-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use configure --with-mailpath=/var/mail instead of letting it guess the value base on the host path. If configure can't find it, the package will fail to build. The path was taken from the current bot build. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* | | | fwknop: Remove unnecessary get_bool() function.Oldřich Jedlička2021-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The get_bool() functionality was already merged to lib/functions.sh, so it is redundant in the init script. Remove it. Signed-off-by: Oldřich Jedlička <oldium.pro@gmail.com>
* | | | gummiboot: add new packageOskari Rauta2021-04-24
| | | | | | | | | | | | | | | | Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | gnu-efi: add new packageOskari Rauta2021-04-24
| | | | | | | | | | | | | | | | Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | Merge pull request #15505 from gstrauss/lighttpd-1.4.59-2Rosen Penev2021-04-24
|\ \ \ \ | | | | | | | | | | lighttpd: patches from upstream
| * | | | lighttpd: patches from upstreamGlenn Strauss2021-04-23
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - ignore Content-Length from backend if 101 Switching Protocols - close HTTP/2 connection after bad password - skip cert chain build for self-issued certs - meson zstd fix - ls-hpack upstream update - discard some HTTP/2 DATA frames received after response Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* | | | Merge pull request #15503 from dibdot/banipDirk Brenken2021-04-23
|\ \ \ \ | | | | | | | | | | banip: fix housekeeping
| * | | | banip: fix housekeepingDirk Brenken2021-04-23
|/ / / / | | | | | | | | | | | | | | | | | | | | * fix whitelist housekeeping if you switch between normal- and 'whitelist only' mode Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | Merge pull request #15488 from Ansuel/improve-atlasJosef Schlehofer2021-04-23
|\ \ \ \ | | | | | | | | | | atlas-sw-probe: improve key creation
| * | | | atlas-sw-probe: improve key creationAnsuel Smith2021-04-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Exit start if a probe_key is not present - Add create_key command to generate a private_key based on the provided username in the atlas config. - Add registration instruction in /etc/atlas - Rework script to save probe_key on sysupgrade (the key are now adviced to be placed in the /etc/atlas dir and a link is used to make them accessible in the atlas-sw-scripts etc dir) Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
* | | | | Merge pull request #15493 from dibdot/banIPDirk Brenken2021-04-22
|\ \ \ \ \ | | | | | | | | | | | | banip: update to 0.7.7
| * | | | | banip: update to 0.7.7Dirk Brenken2021-04-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add a "whitelist only" mode, this option allows to restrict Internet access from/to a small number of secure websites/IPs, and block access from/to the rest of the Internet. Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | gnunet: update to v0.14.1Daniel Golle2021-04-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * lots of fixes for many subsystems * new messenger group chat service * 'abd' temporarily removed due to upstream issue Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | | Merge pull request #15494 from mstorchak/tmuxRosen Penev2021-04-21
|\ \ \ \ \ \ | | | | | | | | | | | | | | tmux: update to 3.2
| * | | | | | tmux: update to 3.2Maxim Storchak2021-04-22
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - switch to $(AUTORELEASE) - change dependency from libevent2 to libevent2-core Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
* | | | | | Merge pull request #15495 from mkrkn/masterRosen Penev2021-04-21
|\ \ \ \ \ \ | |/ / / / / |/| | | | | openvpn: update to 2.5.2
| * | | | | openvpn: update to 2.5.2Magnus Kroken2021-04-22
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes two related security vulnerabilities (CVE-2020-15078) which under very specific circumstances allow tricking a server using delayed authentication (plugin or management) into returning a PUSH_REPLY before the AUTH_FAILED message, which can possibly be used to gather information about a VPN setup. In combination with "--auth-gen-token" or a user-specific token auth solution it can be possible to get access to a VPN with an otherwise-invalid account. OpenVPN 2.5.2 also includes other bug fixes and improvements. Add CI build test script. Signed-off-by: Magnus Kroken <mkroken@gmail.com>
* | | | | uvol: improve autopart and lvm scripts, fix F2FS volumesDaniel Golle2021-04-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use sfdisk to get GPT partition by name as partition names are not known by the kernel if added via partx. Make sure physical volume names are unique, if possible correlate with the disks serial number and/or card's cid. mkf2fs apparently returns 134 even in case format succeeded, so don't fail in that case (this fixes rw volumes large enough for F2FS to be selected by the lvm scripts of uvol). Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | node: Resolve ICU conflictHirokazu MORIKAWA2021-04-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Resolve conflicts between OpenWrt's ICU package and the ICU shipped with node.js. https://github.com/openwrt/packages/issues/15437 Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* | | | | dockerd: Updated to 20.10.6Gerard Ryan2021-04-21
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* | | | | docker: Updated to 20.10.6Gerard Ryan2021-04-21
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* | | | | libnetwork: Updated to 2021-01-26 for docker 20.10.6Gerard Ryan2021-04-21
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* | | | | containerd: Updated to 1.4.4 for docker 20.10.6Gerard Ryan2021-04-21
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* | | | | Merge pull request #15471 from TDT-AG/pr/20200420-stunnelFlorian Eckert2021-04-21
|\ \ \ \ \ | |/ / / / |/| | | | stunnel: update to 5.59
| * | | | stunnel: update to 5.59Florian Eckert2021-04-20
| | |_|/ | |/| | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | Merge pull request #15483 from oskarirauta/feature_mtoolsRosen Penev2021-04-20
|\ \ \ \ | | | | | | | | | | mtools: add new package
| * | | | mtools: add new packageOskari Rauta2021-04-21
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | | Merge pull request #15449 from SibrenVasse/masterRosen Penev2021-04-20
|\ \ \ \ \ | | | | | | | | | | | | openssh: update to 8.6p1
| * | | | | openssh: update to 8.6p1Sibren Vasse2021-04-20
| | |/ / / | |/| | | | | | | | | | | | | Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
* | | | | Merge pull request #15476 from rs/nextdns-1.32.0-masterRosen Penev2021-04-20
|\ \ \ \ \ | | | | | | | | | | | | nextdns: Update to version 1.32.0
| * | | | | nextdns: Update to version 1.32.0Olivier Poitrey2021-04-20
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | | | | Merge pull request #15480 from oskarirauta/podman-311Rosen Penev2021-04-20
|\ \ \ \ \ \ | | | | | | | | | | | | | | podman: update to 3.1.1
| * | | | | | podman: update to 3.1.1Oskari Rauta2021-04-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Add support for AppArmor - Gracefully stop containers and pods on shutdown I found out that If you change location of containers to persistent storage instead of tmpfs, starting them will fail unless they have been stopped. If this is the case that reboot has occurred before pods and containers have been stopped, they cannot be started, they have to be removed and re-created. Change in initscript tries to avoid that. Even if containers are running at tmpfs, this won't hurt. Still, if something happens and system hangs/reboots/etc, script won't save you from that. It's just a attempt to make things better. I also enabled AppArmor support for future possibilities. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | | | | Merge pull request #15473 from ClaymorePT/boost_1.76.0Rosen Penev2021-04-20
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | boost: Bump to version 1.76.0
| * | | | | | | boost: Bump to version 1.76.0Carlos Miguel Ferreira2021-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit updates boost to version 1.76.0 There are no new libraries in this version More info about Boost 1.76.0 can be found at the usual place [1]. Note: This package update includes a fix merged to Boost.Fiber in [2] which did not make into this version but it will be present in the next one. For now, the patch is needed, but it will be removed in version 1.77.0 [1]: https://www.boost.org/users/history/version_1_76_0.html [2]: https://github.com/boostorg/fiber/pull/276 Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
* | | | | | | | cni-plugins-nft: add new packageOskari Rauta2021-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | | | | | generate-ipv6-address: fix PIC compilationRosen Penev2021-04-20
| |_|/ / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a single C file. Don't bother using the Makefile. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #15472 from sartura/uci2-updateLuka Perkov2021-04-20
|\ \ \ \ \ \ \ | |_|_|/ / / / |/| | | | | | uci2: update revision
| * | | | | | uci2: update revisionJakov Petrina2021-04-20
|/ / / / / / | | | | | | | | | | | | | | | | | | Signed-off-by: Jakov Petrina <jakov.petrina@sartura.hr>
* | | | | | Merge pull request #15343 from accwebs/feature/udp-broadcast-relay-reduxRosen Penev2021-04-19
|\ \ \ \ \ \ | | | | | | | | | | | | | | udp-broadcast-relay-redux: Add package
| * | | | | | udp-broadcast-relay-redux: Add packageAaron Curley2021-04-19
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit is largely based on the work from Daniel Dickinson in PR #2096 which was never merged. I tweaked it in a number of ways. All bugs with this package are mine, not his. Signed-off-by: Aaron Curley <accwebs@gmail.com>
Powered by cgit, Themed by Ted Yin.