aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* speedtest-netperf: new package to measure network performanceTony Ambardar2019-02-22
| | | | | | | | | | | | | | | | | | | The speedtest-netperf.sh script measures the network throughput while monitoring latency under load and capturing key CPU usage and frequency statistics. The script can emulate a web-based speed test by downloading and then uploading from an internet server, or perform simultaneous download and upload to mimic the stress of the FLENT test program. It simplifies tasks such as validating ISP provisioned speeds or setting up and fine-tuning SQM, directly on the router. The CPU usage details can also help determine if the demands of SQM, routing and other tasks such as the test itself are exhausting the device's CPUs. This script leverages earlier scripts from the CeroWrt project used for bufferbloat mitigation, betterspeedtest.sh and netperfrunner.sh. They are used with the permission of the author, Rich Brown. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
* Merge pull request #8275 from dibdot/travelmateDirk Brenken2019-02-22
|\ | | | | travelmate: update 1.3.6
| * travelmate: update 1.3.6Dirk Brenken2019-02-22
| | | | | | | | | | | | | | * add captive portal domains automatically to the related domain whitelist (dhcp option 'rebind_domain'), if rebind protection/RFC1918 is enabled Signed-off-by: Dirk Brenken <dev@brenken.org>
* | Merge pull request #8254 from neheb/patch-5Hannu Nyman2019-02-20
|\ \ | | | | | | haproxy: Don't select OPENSSL_WITH_DEPRECATED
| * | haproxy: Don't select OPENSSL_WITH_DEPRECATEDRosen Penev2019-02-19
| | | | | | | | | | | | | | | Deprecated APIs are already patched out. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #8206 from dengqf6/xtHans Dedecker2019-02-19
|\ \ \ | | | | | | | | xtables-addons: fix build on 4.19 for xt_DNETMAP and xt_pknock
| * | | xtables-addons: fix build on 4.19 for xt_DNETMAP and xt_pknockDeng Qingfang2019-02-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Backport 2 commits to fix build on 4.19: https://github.com/nawawi/xtables-addons/commit/3ea761a1ed338241fbc79bef8e433307e108b6cd https://github.com/nawawi/xtables-addons/commit/2b76b68c65c97fc11409088c3c30993324df8500 Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
* | | | nfs-kernel-server: update patchesPeter Wagner2019-02-19
| | | | | | | | | | | | | | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | obfsproxy: Use default compileJeffery To2019-02-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This updates the package to use the default PyBuild/Compile, instead of defining a custom Build/Compile. This also updates the source url and adds a src package. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | shadowsocks-libev: move --no-delay into json config fileYousong Zhou2019-02-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | It was introduced in 3.1.0 as a command line argument and was part of the json config since 3.1.1 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | shadowsocks-libev: use jshn.sh for making json configYousong Zhou2019-02-19
| |/ / |/| | | | | | | | | | | | | | As suggested by Jeffery To in openwrt/packages#8233 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | twisted: Rename package, fix errorsJeffery To2019-02-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This renames the Python 2 twisted package to python-twisted, and updates dependents (i.e. obfsproxy) to reference the updated name. This also fixes conflicts between the Python 2 and 3 packages. Twisted installs some scripts to /usr/bin, and previously scripts for both packages used the same names. This adds a "3" suffix to scripts installed by python3-twisted. This also adds python[3]-setuptools as a dependency, as the scripts installed to /usr/bin depend on pkg_resources (part of setuptools). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | git: Fix compilation without deprecated OpenSSL APIsRosen Penev2019-02-18
| | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | vallumd: bump to 0.1.4Stijn Tintel2019-02-17
| | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | irssi: Fix OpenSSL without deprecated APIs compilationRosen Penev2019-02-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When OpenSSL is built without deprecated APIs, pkg-config first tries OpenSSL in the staging directory but fails as it cannot find the deprecated SSL_library_init function and ends up finding the system one. Added PKG_BUILD_PARALLEL for faster compilation. Added -Wl,--gc-sections to LDFLAGS to save ~10KB from the resulting ipk. Reworked configure section as some of those options were renamed or removed. Removed EXTRA_* hacks that are no longer necessary. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | nfs-kernel-server: fix freeaddrinfo usage in nfs-kernel-server, because ↵Peter Wagner2019-02-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | freeaddrinfo in musl after the 1.1.21 update, doesn't handly NULL pointers (which seems to spec conform) see https://www.openwall.com/lists/musl/2019/02/03/3 for more info Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | Merge pull request #8219 from Apteryks/masterStijn Tintel2019-02-16
|\ \ \ | | | | | | | | net-snmp: disable support for perl
| * | | net-snmp: disable support for perlMaxim Cournoyer2019-02-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Using an external toolchain, it was discovered that net-snmp would link with the Perl library (-lperl) from the host rather than from the target. Since we do not provide Perl as a dependency to net-snmp, the solution is to disable support for it. Fixes issue #8217. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@savoirfairelinux.com>
* | | | Merge pull request #5821 from kbabioch/feat/ipNetToPhysicalTableStijn Tintel2019-02-16
|\ \ \ \ | | | | | | | | | | net-snmp: Enable MIB ip-mib/inetNetToMediaTable
| * | | | net-snmp: Enable MIB ip-mib/inetNetToMediaTableKarol Babioch2018-03-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This enables the table `inetNetToMediaTable` from `ip-mib`, which implements the `ipNetToPhysicalTable`. The former one is already enabled with the current configuraiton, but it has been deprecatd by the IP version-neutral `ipNetToMediaTable`, which also supports IPv6 entries [1]. It also disables all other submodules from this MIB to keep the footprint small. [1]: http://net-snmp.sourceforge.net/docs/mibs/IP-MIB.txt Signed-off-by: Karol Babioch <karol@babioch.de>
* | | | | shadowsocks-libev: flush ipv6 ss-rules on service stopYousong Zhou2019-02-16
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | Merge pull request #8224 from dibdot/travelmateDirk Brenken2019-02-15
|\ \ \ \ \ | |_|/ / / |/| | | / | | |_|/ | |/| | travelmate: update 1.3.5
| * | | travelmate: update 1.3.5Dirk Brenken2019-02-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * rework procd trigger handling - react immediately on if down network events - remove needless apply hook in LuCI Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | Merge pull request #7894 from neheb/spoofHannu Nyman2019-02-14
|\ \ \ \ | | | | | | | | | | spoofer: Fix compilation without deprecated OpenSSL APIs
| * | | | spoofer: Fix compilation without deprecated OpenSSL APIsRosen Penev2019-01-06
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | mosquitto: update to 1.5.7Karl Palsson2019-02-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a minor bugfix release. Full changelog available at: https://mosquitto.org/blog/2019/02/version-1-5-7-released/ Most relevant to OpenWrt are probably: * fixing persistent store bloat * fix sorting of included config files * fix errors related to per_listener_settings Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | Merge pull request #8190 from cshoredaniel/pr-gitolite-dropbearHannu Nyman2019-02-13
|\ \ \ \ \ | |_|_|_|/ |/| | | | gitolite: Drop openssh dependency
| * | | | gitolite: Drop openssh dependencyDaniel F. Dickinson2019-01-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Current dropbear is sufficient for gitolite purposes, so don't require openssh (we don't do a dependency on either dropbear or openssh as they are not yet drop-in replacements in terms of packaging for the functions shared between them). To achieve tihs we also eliminate the dependency on ssh-keygen. Previously gitolite used ssh-keygen to generate fingerprints from OpenSSH keys to ensure non-duplication of keys when processing them to create / manage user ssh access to the git repositories. Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
* | | | | iotivity: Backport upstream patch to fix GCC 7+ compilationRosen Penev2019-02-12
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Merge pull request #8192 from gladiac1337/feature-haproxy-v1.8.19Hannu Nyman2019-02-12
|\ \ \ \ \ | | | | | | | | | | | | haproxy: Update HAProxy to v1.8.19
| * | | | | haproxy: Update HAProxy to v1.8.19Christian Lachner2019-02-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | | | shadowsocks-libev: ss-rules: fix flushing ipv6 rulesYousong Zhou2019-02-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | "-6" has to be the first argument Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | | shadowsocks-libev: ss-rules: tweak for readabilityYousong Zhou2019-02-12
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - quash errors on detection of ipv6 nat - remove unnecessary rule args "--comment ..." and "-p ..." Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | irssi: update to 1.2.0Peter Wagner2019-02-12
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | | Merge pull request #8135 from ja-pa/unbound-updateHannu Nyman2019-02-11
|\ \ \ \ \ | | | | | | | | | | | | unbound: update to version 1.9.0 and remove old patch
| * | | | | unbound: update to version 1.9.0Jan Pavlinec2019-02-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes: -remove old dns64 patch -refresh openssl deprecated patch -add DoT error log patch https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=4206 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | shadowsocks-libev: flush ss rules on entryYousong Zhou2019-02-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes issue reported in openwrt/luci#2527 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | | openssh: patch scp security issuesJan Pavlinec2019-02-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2019-6109 CVE-2019-6111 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | uwsgi-cgi: update to 2.0.18 and use official tarballDeng Qingfang2019-02-10
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
* | | | | | Merge pull request #8111 from neheb/ngHannu Nyman2019-02-08
|\ \ \ \ \ \ | | | | | | | | | | | | | | ngircd: Update to 25
| * | | | | | ngircd: Update to 25Rosen Penev2019-02-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove upstreamed patch. Switch to .xz archives for smaller size. Add PKG_BUILD_PARALLEL to speed up compilation. Remove maintainer. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #8126 from jefferyto/tgt-initHannu Nyman2019-02-08
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | tgt: Update init script
| * | | | | | | tgt: Update init scriptJeffery To2019-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This replaces the use of uci_validate_section() with uci_load_validate(), which removes the need to declare local variables for every config option. This also adds a service_triggers() function, removes a duplicate option, and removes some unnecessary curly brackets. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | | | Merge ACME fixesToke Høiland-Jørgensen2019-02-08
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Closes #8149 Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
| * | | | | | | | acme: Bump package revisionToke Høiland-Jørgensen2019-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
| * | | | | | | | acme: Fix loading credentialsAdrien DAURIAT2019-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Move loading credential function before cert renewal call as credentials might be needed for some renewal operations ( ex: DNS ) Signed-off-by: Adrien DAURIAT <16813527+dauriata@users.noreply.github.com> [toke@toke.dk: Port to master branch] Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
| * | | | | | | | net/acme: commit uhttpd configuration if update_httpd setAlexey I. Froloff2019-02-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | uhttpd configuration should be commited when update_uhttpd set. Signed-off-by: Alexey I. Froloff <raorn@raorn.name>
| * | | | | | | | net/acme: issue_cert should always call post_checks on exitAlexey I. Froloff2019-02-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | issue_cert fuction may return without calling post_checks, which leaves port 80 open and uhttpd configuration is not restored is listen_http was set. Always call post_checks when returning from issue_cert. Signed-off-by: Alexey I. Froloff <raorn@raorn.name>
* | | | | | | | | mosquitto: bump to 1.5.6Karl Palsson2019-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a bugfix and security release. CVE-2018-12551: If Mosquitto is configured to use a password file for authentication, any malformed data in the password file will be treated as valid. This typically means that the malformed data becomes a username and no password. If this occurs, clients can circumvent authentication and get access to the broker by using the malformed username. In particular, a blank line will be treated as a valid empty username. Other security measures are unaffected. => Users who have only used the mosquitto_passwd utility to create and modify their password files are unaffected by this vulnerability. CVE-2018-12550: If an ACL file is empty, or has only blank lines or comments, then mosquitto treats the ACL file as not being defined, which means that no topic access is denied. Although denying access to all topics is not a useful configuration, this behaviour is unexpected and could lead to access being incorrectly granted in some circumstances. CVE-2018-12546. If a client publishes a retained message to a topic that they have access to, and then their access to that topic is revoked, the retained message will still be delivered to future subscribers. This behaviour may be undesirable in some applications, so a configuration option `check_retain_source` has been introduced to enforce checking of the retained message source on publish. Plus the following bugfixes: * wills not sent to websocket clients * spaces now allowed in bridge usernames * durable clients not receiving offline messages with per_listener_settings==true * compilation with openssl without deprecated apis * TLS working over SOCKS * better comment handling in config files Full changelog available at: https://github.com/eclipse/mosquitto/blob/fixes/ChangeLog.txt#L1 Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | | | | Merge pull request #8114 from neheb/avHannu Nyman2019-02-07
|\ \ \ \ \ \ \ \ \ | |/ / / / / / / / |/| | | | | | | | davfs2: Update to 1.5.5
Powered by cgit, Themed by Ted Yin.