| Commit message (Collapse) | Author | Age |
|
|
|
|
|
| |
* use kernel fs to get the hostname, drop domainname
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
|
|\
| |
| | |
stubby: enable configuration through uci system
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This commit brings UCI support to the stubby package.
o All options are documented in the README.md file.
o The README.md file has been re-written to include a short usage
manual.
o The default configuration now includes more Cloudflare addresses.
o The stubby service is (re)started using procd triggers from a
specified interface with a configurable time delay.
o Round robin use of upstream resolvers is now activated by
default.
o Client privacy is now activated by default.
o Options are added for specifying the log level of the daemon and
command line options passed to the stubby command.
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
|
|\ \
| |/
|/| |
rsyslog: Update to 8.38
|
| |
| |
| | |
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|\ \
| | |
| | | |
stubby: some fixes, cleanup, and improvements
|
| | |
| | |
| | |
| | | |
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Remove the limit setting core="unlimited", since this shouldn't be needed
in production use (i.e. non-debug) and on an embedded platform, which is
why it's rarely used by any existing packages.
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Add an SPKI pin for Cloudflare to help prevent MITM and downgrade attacks,
as described in RFC7858 (DNS over TLS). The setup of SPKI and the specific
SHA256 certificate hash are taken from Cloudflare's DoT configuration guide
published at https://developers.cloudflare.com/1.1.1.1/dns-over-tls/.
Note that the certificate is valid to March 25th 2020, 13:00 CET, which
provides ample time for issuance of a backup pin to support future key
rollover.
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Retain the upstream value since privacy is usually the key user motivation
for using DNS-over-TLS, and simply note that those encountering sub-optimal
routing may consider disabling the setting.
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
The config file /etc/stubby/stubby.yml is not registered properly and any
local changes are being overwritten on upgrade or reinstall.
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
|
|\ \ \
| | | |
| | | | |
umurmur: Switch to tarball
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Should be a faster download
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|\ \ \ \
| | | | |
| | | | | |
i2pd: Update to 2.21.0
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: David Yang <mmyangfl@gmail.com>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Sysrepo release 0.7.5
|
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
PR includes switch to codeload tarballs and rename from netopeer2 to
Netopeer2 for better codeload integration.
Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
|
| |/ / / /
| | | | |
| | | | |
| | | | | |
Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
knot: update to 2.7.3
|
| |/ / / /
| | | | |
| | | | |
| | | | | |
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Get downtime information for the tracked mwan3 wan interfaces.
The information shows how long this interface is in disconnected state.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Get uptime information for the tracked mwan3 wan interfaces.
The information shows how long this interface is in connected state.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This is now the same route as in the main table.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
|
|/ / / /
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
If a interface is down, call ubus will return an null message which is
used to json_load, it causes json_get_vars gets value from last load and
l3_device various is nonzero.
Signed-off-by: Kyson Lok <kysonlok@gmail.com>
|
|\ \ \ \
| | | | |
| | | | | |
mwan3: rtmon: filter out linkdown routing table
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
unbound: update to 1.8.1
|
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
bug fixes for memory leaks
bug fixes for DNS over TLS
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|/ / / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Currently luci-app-sqm provided by sqm-scripts depends on luci-base instead
of selecting it, this leads to an indirect circular dependency in kconfig:
tmp/.config-package.in:34646:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:34646: symbol PACKAGE_iptables is selected by PACKAGE_sqm-scripts
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:961: symbol PACKAGE_sqm-scripts is selected by PACKAGE_luci-app-sqm
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:22421: symbol PACKAGE_luci-app-sqm depends on PACKAGE_luci-base
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:21387: symbol PACKAGE_luci-base is selected by PACKAGE_luci-lib-iptparser
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:22899: symbol PACKAGE_luci-lib-iptparser is selected by PACKAGE_luci-app-splash
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:22402: symbol PACKAGE_luci-app-splash is selected by PACKAGE_luci-mod-freifunk-community
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:21552: symbol PACKAGE_luci-mod-freifunk-community depends on PACKAGE_iptables
Solve the issue by turning the dependencies into selecting ones which also
matches the behaviour of other LuCI applications.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This should fix compilation as wolfSSL currently does not define
wolfTLSv1_client_method. And as the comment suggests, this is only TLS 1,
not 1.0 and above.
SSLv23 is TLS 1.1 and above as currently configured in the wolfssl package
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|/ / / /
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Add the ipvsadm command line tool to set up, maintain or inspect the virtual
server table in the Linux kernel.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
|
|\ \ \ \
| | | | |
| | | | | |
tinc: update to 1.0.35 (security update)
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Critical security update for:
* CVE-2018-16737,
* CVE-2018-16738,
* CVE-2018-16758
Announcement:
https://www.tinc-vpn.org/pipermail/tinc/2018-October/005311.html
Signed-off-by: Pacien TRAN-GIRARD <pacien.trangirard@pacien.net>
|
|\ \ \ \ \
| |/ / / /
|/| | | | |
nginx: update to latest release
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
When libnl is enabled and libnl-genl is disabled, libnl-genl-3.so.200 is
installed by InstallDev, and keepalived picks it up anyway.
This causes build to fail with the following error:
Package keepalived is missing dependencies for the following libraries:
libnl-genl-3.so.200
Instead of having a conditional dependency it is better to have a
consistent build. Disable libnl to enforce this.
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Peter Wagner <tripolar@gmx.at>
|
| |_|_|/
|/| | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
This fixes:
* CVE-2018-16151
* CVE-2018-16152
* CVE-2018-17540
Details:
https://strongswan.org/blog/2018/09/24/strongswan-vulnerability-(cve-2018-16151,-cve-2018-16152).html
https://strongswan.org/blog/2018/10/01/strongswan-vulnerability-(cve-2018-17540).html
Signed-off-by: Magnus Kroken <mkroken@gmail.com>
|
|\ \ \ \
| | | | |
| | | | | |
travelmate: update 1.2.4
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
* with the config option 'trm_radio' you can now restrict travelmate
to a single radio (e.g. 'radio1') or change the overall
scanning order (e.g. 'radio1 radio2 radio0')
* LuCI: show QR codes now inline on the overview page
(collapsed by default)
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
|\ \ \ \ \
| | |/ / /
| |/| | | |
nginx: update to latest release
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Make sure gnURL doesn't link against libpsl.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Building against libftdi1 can't be avoided in the presence of libftdi1
headers apparently. As it might be useful for some DMX adapters and
such, depend on libftdi1 from now on.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
No release tarball has been published yet, use v7.61.1 git tag instead.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|