aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* openvswitch: only libopenvswitch depends on libunbound, libunwindYousong Zhou2020-07-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is to make explicit the conditional select of libunwind is only needed for libopenvswitch. If we spill it over other packages, the generated kconfig will have recursive dependency issue. 2 new patches were made for this goal The other thing is that "+libunwind" will cause it to be built if any of the packages defined in this Makefile is enabled (y or m). This is at the moment by-design of the build system. Libunwind does not support architectures like arc. Use conditional select To avoid (libunwind) build failures like the following, checking for ELF helper width... configure: error: Unknown ELF target: arc make[3]: *** [Makefile:65: /data/openwrt/build_dir/target-arc_arc700_uClibc/ libunwind-1.3.1/.configured_68b329da9893e34099c7d8ad5cb9c940] Error 1 Things like "+PACKAGE_openvswitch-libopenvswitch:libunwind" will also result in recursive deps error for chains of 3 nodes. Kconfig construct like the following will be made config A tristate select B depends on !(C) || (x) config B tristate select C config C tristate config x bool Other changes include - Shared use of variable ovs__common_depends was removed - Ovn doc build was patched out Link: https://github.com/openwrt/packages/pull/12959#issuecomment-665021413 Reported-by: Adrian Schmutzler <freifunk@adrianschmutzler.de> Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openvswitch: rename shared var name ovs{,_}_common_dependsYousong Zhou2020-07-30
| | | | | | | To avoid conflict with package ovs_common_depends of package openvswitch-common Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openvswitch: backport patch fixing build for 4.14.187Yousong Zhou2020-07-30
| | | | | | Supersedes openwrt/packages#12932 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* sshfs: update to 3.7.0Rosen Penev2020-07-29
| | | | | | | | | | | | Simplified Makefile as a result of meson transition. Fixed license information. Updated URL. Added patch to fix linking issue. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* fping: update to 4.4Rosen Penev2020-07-28
| | | | | | | | Remove upstreamed patch. Whitespace Makefile cleanups. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* Merge pull request #12948 from TDT-AG/pr/20200724-mwan3Florian Eckert2020-07-28
|\ | | | | mwan3: update to version 2.8.12
| * mwan3: update version to 2.8.12Florian Eckert2020-07-28
| | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * mwan3: unify variable checkFlorian Eckert2020-07-28
| | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * mwan3: remove lock file entirelyFlorian Eckert2020-07-28
| | | | | | | | | | | | Removing the lock file ist not necessary Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * mwan3: revert: also cleanup lock on mwan3 stopFlorian Eckert2020-07-28
| | | | | | | | | | | | | | | | | | | | | | | | This reverts commit cde2a77ed3b3b0df9e693e121dccdc97ef163156. Applying this change has shown that it is even quicker to provoke the race condtition on simultan mwan3 commands execution. By reversing the change we have the same behaviour as before. But the race condition on mwan3 execute at the same time still exists. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * mwan3: fix race condition on mwan3 restartFlorian Eckert2020-07-28
| | | | | | | | | | | | | | This adjustment of the locks fixes the race condition when a mwan3 hotplug script and a mwan3 command are running at the same time. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | openvswitch: adds new UCI section ovs_bridgeSimon Kinane2020-07-28
| | | | | | | | | | | | | | | | | | | | This new config section in package openvswitch supports creating a named bridge, and setting its' OpenFlow controller end-point. An example config is included in /rom/etc/config/openvswitch Signed-off-by: Simon Kinane <skinane@fb.com>
* | nginx: remove PROVIDES on depending packagepeter-stadler2020-07-27
| | | | | | | | | | Fix recursive dependency for `make menuconfig`. Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | haproxy: Update HAProxy to v2.2.1Christian Lachner2020-07-27
|/ | | | | | | | | - New major version (LTS release) - Update haproxy download URL and hash - Remove obsolete dladdr1-dependency-patch as it has been upstreamed - USE_REGPARM is obsolete and therefore removed from our Makefile Signed-off-by: Christian Lachner <gladiac@gmail.com>
* nextdns: Update to version 1.7.1Olivier Poitrey2020-07-26
| | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* Merge pull request #12929 from peter-stadler/nginx-always-sslRosen Penev2020-07-26
|\ | | | | nginx: enable ssl for all variants and remove nginx-util w/o ssl
| * nginx: enable ssl for all variants and remove nginx-util w/o sslPeter Stadler2020-07-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Make the plain nginx version the same as nginx-ssl. In a further change we will replace nginx by a dummy package, depending on +nginx-ssl instead. This allows a smooth upgrade. For nginx-util leave the ssl and the ssl-nopcre versions only. For nginx-mod-luci remove the duplicate ssl version. Replace the removed packages by dummies for a smooth upgrade. The dummy packages will be removed after a transition period. Additionally, enable the http2 module for nginx-ssl by default and cleanup the nginx.init file. Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | Merge pull request #12915 from lucize/frrupRosen Penev2020-07-26
|\ \ | |/ |/| frr: update to 7.4 and latest backports
| * frr: update to 7.4 and latest backportsLucian Cristian2020-07-24
| | | | | | | | | | | | changelogs: https://github.com/FRRouting/frr/releases/tag/frr-7.4 Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | Merge pull request #12916 from kenkeys/spoofer-v146Rosen Penev2020-07-24
|\ \ | |/ |/| spoofer: Update to 1.4.6
| * spoofer: Update to 1.4.6Ken Keys2020-07-24
| | | | | | | | | | | | | | Includes a new CA file for compatibility with upcoming change to spoofer server SSL cert Signed-off-by: Ken Keys <kkeys@caida.org>
* | yggdrasil: Ygg-over-ygg bugfixWilliam Fleurant2020-07-23
| | | | | | | | Signed-off-by: William Fleurant <meshnet@protonmail.com>
* | zerotier: disable pie supportRosen Penev2020-07-23
| | | | | | | | | | | | | | The Makefile is already patched for it. But PKG_ASLR_PIE still needs to be disabled. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | Merge pull request #12893 from ja-pa/tor-0.4.3.6Rosen Penev2020-07-23
|\ \ | |/ |/| tor: update to version 0.4.3.6 (security fix)
| * tor: update to version 0.4.3.6 (security fix)Jan Pavlinec2020-07-21
| | | | | | | | | | | | | | Fixes CVE-2020- 15572 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | Merge pull request #12799 from aaronjg/openfortivpn/netifdRosen Penev2020-07-21
|\ \ | | | | | | openfortivpn: use standard 'peerdns' config option on netifd script
| * | openfortivpn: use standard 'peerdns' argument on netifd scriptAaron Goodman2020-07-19
| | | | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
* | | gnunet: update to version 0.13.1Daniel Golle2020-07-22
| | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | Merge pull request #12879 from TDT-AG/pr/20200720-mwan3Rosen Penev2020-07-20
|\ \ \ | | | | | | | | mwan3: update to version 2.8.11
| * | | mwan3: update version to 2.8.11Florian Eckert2020-07-20
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: add online and uptime to detail outputFlorian Eckert2020-07-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Add also online time value and uptime time value from netifd to the detail output view. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: add workaround for procd changeFlorian Eckert2020-07-20
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: also cleanup lock on mwan3 stopFlorian Eckert2020-07-20
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: fix rtmon routing table function generationFlorian Eckert2020-07-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If the uci option family is not set in the interface section, then there is no default value set as in the `config_load / config_get` API. The problem here is that if the family is not set, the default value ipv4 is normaly assumed. But the comparison fails here because the value is empty and therefore the dedicated routing table for this interface is not compared with the other routes from the main table and so not updated. To fix this set the default value for this config option which is`false` for enabled and `ipv4` for family. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | Merge pull request #12848 from BKPepe/squidRosen Penev2020-07-20
|\ \ \ \ | |/ / / |/| | | squid: update to version 4.12 (security update)
| * | | squid: update to version 4.12Josef Schlehofer2020-07-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Fixes CVEs: CVE-2019-12519 CVE-2019-12520 CVE-2019-12521 CVE-2019-12523 CVE-2019-12524 CVE-2019-12525 CVE-2019-12526 CVE-2019-12527 CVE-2019-12528 CVE-2019-12529 CVE-2019-12824 CVE-2019-12854 CVE-2019-13345 CVE-2019-18676 CVE-2019-18677 CVE-2019-18678 CVE-2019-18679 CVE-2020-8449 CVE-2020-8450 CVE-2020-11945 CVE-2020-14058 CVE-2020-15049 - Remove patch for cross-compilation The patch should not be included in the OpenWrt at all without any commit message/description. Is not needed and there should be used HOST variables instead of BUILD variables (e.g. HOSTCXX) However, the BUILDCXX is set in Makefile to HOSTCXX - Renumber glibc patch and refresh it Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | Merge pull request #12814 from aaronjg/improvements/mwan3-misc-improvements-rbFlorian Eckert2020-07-20
|\ \ \ \ | |_|/ / |/| | | mwan3: clean up ipv4/ipv6 duplicated code and misc. improvments
| * | | mwan3: fix IPv6 routing add handlingFlorian Eckert2020-07-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes routing handling. Introduced with the last version update. The following message disappears on the shell when mwan3 is called with 'mwna3 restart`. `Error: Invalid gateway address.` Signed-off-by: Florian Eckert <fe@dev.tdt.de> [aaronjg@stanford.edu: fully unset variable and handle ipv4 as well] Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | mwan3: fix idx calculationFlorian Eckert2020-07-19
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de> [aaronjg@stanford.edu: fix syntax error] Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | mwan3: version bumpAaron Goodman2020-07-19
| | | | | | | | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | mwan3: cleanup duplicate ipv4 and ipv6 logicAaron Goodman2020-07-19
| | | | | | | | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | mwan3: don't send iptable setup failures to /dev/nullAaron Goodman2020-07-19
| | | | | | | | | | | | | | | | | | | | | | | | silencing failing rules makes debugging more difficult Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | mwan3: add default rule for ipv6 in example configAaron Goodman2020-07-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | default rule only applied to ipv4 with dest_ip 0.0.0.0/0 and error was hidden when trying to apply it in ip6table Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | mwan3: don't try to use ipv6 if not installedAaron Goodman2020-07-19
| | | | | | | | | | | | | | | | | | | | | | | | fix issue #11826 Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | mwan3: be more efficient with sleep after killing trackersAaron Goodman2020-07-16
| | | | | | | | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | mwan3: don't add single ipv4 to connected list if already covered by a cidrAaron Goodman2020-07-16
| |/ / | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
* | | Merge pull request #12864 from aaronjg/bugfix/openfortivpn-pingRosen Penev2020-07-19
|\ \ \ | | | | | | | | openfortivpn: add host up test back
| * | | openfortivpn: add option to use ither curl or ping to test host statusAaron Goodman2020-07-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | allow use of curl rather than ping to test if a host is up since a host may not respond to ping, but an https request is part of the openfortivpn connection, so this is a more reliable test also clean up overly verbose logging Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
* | | | Merge pull request #12861 from neheb/apiRosen Penev2020-07-19
|\ \ \ \ | | | | | | | | | | apinger: fix compilation with GCC 10
| * | | | apinger: fix compilation with GCC 10Rosen Penev2020-07-17
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>