| Commit message (Collapse) | Author | Age |
|
|
|
|
|
|
| |
* When $wan/$wan6 are empty but double-quoted, it leads to creation
of an interface trigger with empty interface
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
|
|
|
|
|
| |
* bugfix: canary domains persistence (as described in
https://forum.openwrt.org/t/https-dns-proxy-canary-domain-persistance/139967)
* minor: remove global variables and make them local in
service_start/service_stop/service_triggers
* minor: split DEFAULT_BOOTSTRAP into BOOTSTRAP_CF and BOOTSTRAP_GOOGLE for
better code readability
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
| |
* fixes https://github.com/openwrt/packages/issues/19631
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
|
|
|
|
|
| |
* upstream bugfix: Add a forgotten 'NULL' initialize for ca_info
if not manually set
* make init script PKG_VERSION variable readonly so that a
shellcheck excettion can be removed
* add procd interface trigger to 'wan6' if IPv6 wan interface name
cannot be obtained on start
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
|
|
|
| |
* update to upstream version 2022-08-12
* add ca_certs_file option for CA certs file for curl
* add procd_add_interface_trigger for wan6 (hopefully fixes
https://github.com/openwrt/packages/issues/19531)
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
|
|
| |
* add setting to enable/disable blocking access to iCloud Private Relay resolvers
* add setting to enable/disable blocking access to Mozilla resolvers
* rename variables loaded from config in the init script
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
|
|
| |
* switch to using uci wrappers instead of direct uci calls
* add support for iCloud canary domains
https://developer.apple.com/support/prepare-your-network-for-icloud-private-relay
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
|
| |
Fixes https://github.com/stangri/source.openwrt.melmac.net/issues/155.
Background: https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
|
| |
* consolidate dnsmasq config manipulation into one function
* more elegant code for PROCD data processing (Thanks @jow-!)
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
|
|
|
|
| |
* update to 2021-11-22 upstream source
* update patch file
* update init script to preserve manual entries
(fixes https://github.com/stangri/source.openwrt.melmac.net/issues/149)
* update init script service_triggers
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* update to [2021-09-27](https://github.com/aarond10/https_dns_proxy/commit/da2501f542a732167a78f1851a511d9c0abc2fd8)
* fixes https://github.com/aarond10/https_dns_proxy/issues/125
* restart instead of reload on interface hotplug
* fixes https://github.com/openwrt/packages/issues/16794
* produce output and log entries on service start/stop
* prevent unnecessary dnsmasq restarts if service has previously updated dnsmasq settings
* allow both named and typed dnsmasq instance settings to be updated
* update 010-fix-cmakelists patch file
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
|
|
|
|
|
|
|
| |
This fixes compilation issues with ASLR PIE enabled
We were compiling with '-g -DDEBUG'
https-dns-proxy_2021-07-29-*_arm_cortex-a9_vfpv3-d16.ipk
shrink from 19514 to 19095
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* update binary to the latest commit (2021-07-29) to fix #16222 and #16239
* add hotplug.d/iface file and update Makefile to install it
* use Cloudflare's and Google's bootstrap DNS if bootstrap DNS is missing
* minor improvements in append_bool function
* add append_counter function for verbosity setting
* add append_bootstrap function (and supporting functions) to parse/sanitize bootstrap setting
* move firewall array from 'main' instance to the first proxy instance
* delete useless 'main' instace
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
|
|
| |
Ninja was merged to base and therefore we can now use normal cmake.mk
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
| |
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
|
|
|
|
| |
* Reapplied daf538d8c63a2be72e32f87276ca06db7dc7df5e
* Updated README
* Replaced the ipv4_resolvers option with a ipv6_resolvers_only option
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
|
|
|
|
|
|
|
|
|
| |
* Added optional ipv4 resolvers UCI config option
* Added logging to logd
* Refactored verbosity UCI config option
* Filtered out any address from being added to dnsmasq
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
|
|
|
|
|
| |
* Added optional ipv4 resolvers UCI config option
* Added logging to logd
* Refactored verbosity UCI config option
* Filtered out any address from being added to dnsmasq
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
| |
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
|
|
|
|
|
|
|
|
| |
Otherwise compilation fails when clang-tidy is found in the host:
-- clang-tidy found: /usr/lib/llvm/7/bin/clang-tidy
error: unknown argument: '-fhonour-copts' [clang-diagnostic-error]
error: unknown argument:'-iremap[...]:https_dns_proxy-2018-04-23'
[clang-diagnostic-error]
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
|
|
| |
+ add option for resolver_url_prefix
Signed-off-by: Jemy Zhang <jemy.zhang@gmail.com>
|
|
|
|
|
|
|
|
| |
+ initial DNS resolve via proxy
+ option of subnet address
+ option of proxy server
Signed-off-by: Jemy Zhang <jemy.zhang@gmail.com>
|
|
|
|
|
|
|
|
|
|
| |
Add dependency on ca-bundle without which the HTTPS fetches fail.
Add "-x" option to force HTTP/1.1 instead of HTTP/2.0
Add a workaround for bug in libcurl <7.530 that prevents it from
working at all when built with mbedtls.
Signed-off-by: Darren Tucker <dtucker@dtucker.net>
Acked-by: Aaron Drew <aarond10@gmail.com>
|
|
|
|
|
|
|
|
|
|
| |
fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git
(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
|
|
|
|
| |
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
|
|
|
|
| |
Init scripts were configuring daemon to write log to file "127.0.0.1" instead.
Signed-off-by: Aaron Drew <aarond10@gmail.com>
|
|
|
| |
Signed-off-by: Aaron Drew <aarond10@gmail.com>
|
|
|
|
|
| |
Version bump. Now includes support for SRV records, cap on concurrent requests.
Signed-off-by: Aaron Drew <aarond10@gmail.com>
|
|
|
|
| |
Signed-off-by: Aaron Drew <aarond10@gmail.com>
|
|
|
|
|
|
| |
Standard assignment is immediate expansion without any extraneous spacing, RFC822 compliant email addresses without any quotation marks and long git hashes
Signed-off-by: Stephen Walker <stephendwalker+github@gmail.com>
|