| Commit message (Collapse) | Author | Age |
... | |
|/
|
|
|
|
|
|
|
| |
* add support for destination port & protocol limitations for external feeds (see readme for details),
useful for lan-forward ad- or DoH-blocking, e.g. only tcp ports 80 and 443
* add turris sentinel blocklist feed
* update readme
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
|
|
|
|
|
| |
Make it more practical to easier get an idea
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
| |
The new validation_method option can be: dns, webroot or standalone.
Previously we guessed the challenge type:
1. if the DNS provider is specified then it's dns
2. if standalone=1
3. fallback to webroot
The logic is preserved and if the validation_method wasn't set explicitly we'll guess it in old manner.
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
| |
The new validation_method option can be: dns, webroot or standalone.
Previously we guessed the challenge type:
1. if the DNS provider is specified then it's dns
2. if standalone=1
3. fallback to webroot
The logic is preserved and if the validation_method wasn't set explicitly we'll guess it in old manner.
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
|
|
|
|
| |
Signed-off-by: Igor Bezzubchenko <garikello@gmail.com>
|
|
|
|
|
|
| |
* final vpn tweaks
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
|
|
|
| |
Signed-off-by: brvphoenix <brvphoenix@gmail.com>
|
|
|
|
|
|
| |
* minimal fix with reporting interface 'any'
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
|\
| |
| | |
inotify-tools: fix link error on x86
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Previous commit removed unnecessary linking with libstdc++
but introduced another error on x86 platforms:
undefined reference to `__stack_chk_fail_local'
Fix it by explicitly linking libssp_nonshared.a
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|\ \
| | |
| | | |
openthread-br: fix build and modernize
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
- ':BOOL' suffix is not needed
- Don't set options which are matching the defaults
- Rename non-existing OT_BORDER_ROUTING_NAT64 to OTBR_NAT64
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
The patch is not needed since it is implemented in
https://github.com/openthread/ot-br-posix/pull/1908
and included into the current version.
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|/ /
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
On some builders the package was failing to build:
```
cp: cannot overwrite non-directory '[..]/var' with directory '[..]/var
```
Here we're moving the creation of /var/lib/thread into runtime script,
which eliminates the error.
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|/
|
|
|
|
|
| |
rclone has switched to use fuse3 since v1.62.0.
Reported-by: qiuzi <gxfclql@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
|
|
|
| |
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
XSK support is set to auto by default and on some hosts it is detected as
on and leads to:
```
In file included from dnsdist-backend.cc:32:
xsk.hh:28:10: fatal error: bits/types/struct_timespec.h: No such file or
directory
28 | #include <bits/types/struct_timespec.h>
```
Here we disable XSK so configure will behave more deterministically and
hopefully fix the builders.
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|
|
|
|
|
|
| |
Now that libe2p is separated from e2fsprogs;
midnight commander needs it added to depends.
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
|
|\
| |
| | |
php8/pecl8-pecl-*: use https URLs for PKG_SOURCE_URLs
|
| |
| |
| |
| |
| |
| |
| | |
Most packages already use https URLs and for PHP and PECL
package downloads https is working properly.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- Update package URLs
- Use local tarball for sources
- Switch to CMake
- Drop obsolete patches including 'minimize' (ipk size +3KB only)
- Add 3 new patches to fix musl, openssl and cmake issues
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|/
|
|
|
|
|
| |
Package CPU features detection is not supporting soft float ARM.
So we disable it altogether.
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|
|
|
| |
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
|
|
|
| |
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
|
|
|
| |
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
|
|
|
| |
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
|
|
|
|
|
|
| |
Auto-detect LVM2 volume on boot device used with fitblk uImage.FIT
sub-image driver.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
|
|
|
|
|
| |
- Workaround superfluous linking with libstdccp
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|
|
|
|
|
|
| |
- Use .xz for source archive
- Refresh patches
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Should provide increases in snort3 performance thanks to thread-
caching malloc provided by gperftools. Avg CPU usage is down.
Another user reported higher throughput achieved with snort3
compiled with this on samba transfers on system with CPU-limited
snort3 performance.[1]
1. https://forum.openwrt.org/t/some-help-with-a-makefile-gperftools/165656/22
Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne
Signed-off-by: John Audia <therealgraysky@proton.me>
|
|
|
|
|
|
|
|
|
|
| |
Get rid of codeload and use local tarballs.
Fixes compilation with newer fmt.
Minor cleanups.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|
|
|
| |
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
|
|
|
|
|
|
|
| |
* more re-connections tweaks
* made travelmate generated emails responsive
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
|
|
|
| |
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Changelog: https://github.com/snort3/snort3/releases/tag/3.1.81.0
,,_ -*> Snort++ <*-
o" )~ Version 3.1.81.0
'''' By Martin Roesch & The Snort Team
http://snort.org/contact#team
Copyright (C) 2014-2024 Cisco and/or its affiliates. All rights reserved.
Copyright (C) 1998-2013 Sourcefire, Inc., et al.
Using DAQ version 3.0.14
Using LuaJIT version 2.1.0-beta3
Using OpenSSL 3.0.13 30 Jan 2024
Using libpcap version 1.10.4 (with TPACKET_V3)
Using PCRE version 8.45 2021-06-15
Using ZLIB version 1.3.1
Using Hyperscan version 5.4.2 2024-02-16
Using LZMA version 5.4.6
Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne
Signed-off-by: John Audia <therealgraysky@proton.me>
|
|
|
|
|
|
|
|
|
|
|
| |
When looping through addrinfo lists in AddrsMatch, keep a copy of the
original addrinfo pointers to free instead of ending up at the terminating
NULLs and trying to free those.
OpenWRT uses musl in which freeaddrinfo(NULL) is not safe (which is
fine, it's not required by the spec) so this fixes a segfault.
Signed-off-by: Darren Tucker <dtucker@dtucker.net>
|
|
|
|
|
|
|
|
| |
- Switch package URLs to HTTPS
- Use .gz for source archive since .xz is no longer available
- Remove upstreamed patches
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|
|
|
| |
Signed-off-by: Oldřich Jedlička <oldium.pro@gmail.com>
|
|
|
|
|
|
| |
- Fix version to be properly configured
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|
|
|
|
|
|
| |
- Update package URL
- Don't set default CMake options
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|
|
|
|
|
|
|
| |
- libftdi, libhidapi, libusb-0.1 was incorrectly leaking into the build.
- libgpiod was incorrectly missing out despite LINUXGPIO feature
was explicitly requested.
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Thread-caching malloc provided by this package improves snort3
performance. I have been running with this for over seven months
without issues. Avg CPU usage is down. Another user reported
higher throughput achieved with snort3 compiled with this on
samba transfers on system with CPU-limited snort performance.[1]
1. https://forum.openwrt.org/t/some-help-with-a-makefile-gperftools/165656/22
Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64
Signed-off-by: John Audia <therealgraysky@proton.me>
|
|
|
|
|
|
|
|
|
|
|
| |
* various vpn optimizations
* remove obsololete trm_maxscan option
* small fixes for net status and captive portal handling
* add an additional login variant to the h-hotels login script
* fix the wifibahn login script work again with wifionice hotspots again
* update readme
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
|
|
|
| |
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
|
|
|
|
|
|
| |
Depending only on 'xz' hides the package when 'xz-utils' is not selected
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|
|
|
|
|
|
|
| |
Package imagemagick is missing dependencies for the following libraries:
libzip.so.5.
Fixes: 7b697342e9fc ("imagemagick: update to 7.1.1-28")
Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
|
|
|
|
|
|
| |
- Fix NEON mis-detection which was breaking builds on some platforms
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
|
|
|
|
|
|
| |
package fails to build with mold linker due to unregocnized flag.
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- license change is now complete, and all code has been re-licensed
under the new license (still GPLv2, but with new linking exception
for Apache2 licensed code).
Code that could not be re-licensed has been removed or rewritten.
- add support for building with mbedTLS 3.x.x
- new option "--force-tls-key-material-export" to only accept clients
that can do TLS keying material export to generate session keys
(mostly an internal option to better deal with TLS 1.0 PRF failures).
- Windows: bump vcpkg-ports/pkcs11-helper to 1.30
- Log incoming SSL alerts in easier to understand form and move logging
from "--verb 8" to "--verb 3".
- protocol_dump(): add support for printing "--tls-crypt" packets
and other fixes
For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.9/Changes.rst
Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Use $(CP) macro rather than $(INSTALL_DATA) to preserve symlinks
on shared objects which saves approx 11.8 M of space.
From hyperscan-runtime_5.4.2-1:
% ls -lh /usr/lib/libhs*
-rw-r--r-- 1 root root 4.7M Feb 16 14:29 /usr/lib/libhs.so
-rw-r--r-- 1 root root 4.7M Feb 16 14:29 /usr/lib/libhs.so.5
-rw-r--r-- 1 root root 4.7M Feb 16 14:29 /usr/lib/libhs.so.5.4.2
-rw-r--r-- 1 root root 1.2M Feb 16 14:29 /usr/lib/libhs_runtime.so
-rw-r--r-- 1 root root 1.2M Feb 16 14:29 /usr/lib/libhs_runtime.so.5
-rw-r--r-- 1 root root 1.2M Feb 16 14:29 /usr/lib/libhs_runtime.so.5.4.2
% grep Installed-Size /usr/lib/opkg/info/hyperscan-runtime.control
Installed-Size: 18370560
From hyperscan-runetime_5.4.2-2 (created by this PR):
% ls -lh /usr/lib/libhs*
lrwxr-xr-x 1 root root 10 Feb 22 15:56 /usr/lib/libhs.so -> libhs.so.5
lrwxr-xr-x 1 root root 14 Feb 22 15:56 /usr/lib/libhs.so.5 -> libhs.so.5.4.2
-rwxr-xr-x 1 root root 4.6M Feb 22 15:27 /usr/lib/libhs.so.5.4.2
lrwxr-xr-x 1 root root 18 Feb 22 15:56 /usr/lib/libhs_runtime.so -> libhs_runtime.so.5
lrwxr-xr-x 1 root root 22 Feb 22 15:56 /usr/lib/libhs_runtime.so.5 -> libhs_runtime.so.5.4.2
-rwxr-xr-x 1 root root 1.2M Feb 22 15:27 /usr/lib/libhs_runtime.so.5.4.2
% grep Installed-Size /usr/lib/opkg/info/hyperscan-runtime.control
Installed-Size: 5918720
Credit to @efahl for pointing this out.
Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne
Signed-off-by: John Audia <therealgraysky@proton.me>
|