aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
* | | | shadowsocks-libev: support ss-server option local_{ipv4,ipv6}_addressYousong Zhou2020-08-03
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | At the moment ss-server seems to be the only component using these two options. It also accepts "local_address" of either ip4 or ip6 address, but the meaning is different from that of ss-local, ss-tunnel etc. where it is for listen bind With this commit, we start deprecation process of uci option "bind_address". The name was replaced with "local_addr" in upstream project commit 5fa98a66 ("Fix #1911") and available as json config option "local_address". This upstream change was released in 3.2.0 Link: https://github.com/shadowsocks/shadowsocks-libev/commit/4a42da641b6e0039497998614e84c94205939c24 Link: https://github.com/openwrt/packages/issues/12931 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | softethervpn: fix compilation with clangRosen Penev2020-08-02
| | | | | | | | | | | | | | | | | | Needs , not = for the rpath parameter. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | ola: fix compilation with clangRosen Penev2020-08-02
| | | | | | | | | | | | | | | | | | Needs , not = for the rpath parameter. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #12899 from aaronjg/openwrtize-openfortivpnRosen Penev2020-08-01
|\ \ \ | | | | | | | | openfortivpn: use a more 'OpenWRT' paradigm throughout the code
| * | | openfortivpn: remove explicit handling of peerdns and defaultrouteAaron Goodman2020-07-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | netifd is clever enough to handle the peerdns and default route arguments, so we can just let them get passed along, and when ppp-up invokes proto_send_update, netifd will only apply what is needed Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | openfortivpn: improve loggingAaron Goodman2020-07-30
| | | | | | | | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | openfortivpn: add defaultroute optionAaron Goodman2020-07-30
| | | | | | | | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | openfortivpn: use functions/network.sh to access interface paramsAaron Goodman2020-07-30
| | | | | | | | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | openfortivpn: use proper method to access configuration in hotplugAaron Goodman2020-07-30
| | | | | | | | | | | | | | | | | | | | | | | | Use functions.sh to get configuration variables rather than calling uci Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | openfortivpn: version bump to 1.14.1-6Aaron Goodman2020-07-28
| | | | | | | | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | openfortivpn: don't report error if symlink already existsAaron Goodman2020-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If two openfortivpn scripts are started at the same time, a race condition can occur where the conditional evaluates to true, but the symlink exists by the time the other script tries to create it Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | openfortivpn: minor formatting changesAaron Goodman2020-07-28
| | | | | | | | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | openfortivpn: block restart after authentication failureAaron Goodman2020-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Block restart of the interface if the openfortivpn fails to authenticate. Without this check, with a bad password, netifd will continually hit the VPN endpoint with connection attempts Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | openfortivpn: Only start autostart interfaces on hotplug eventAaron Goodman2020-07-21
| |/ / | | | | | | | | | Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
* | | Merge pull request #12904 from odmdas/odmdas-freeradius3-MakefileRosen Penev2020-08-01
|\ \ \ | | | | | | | | freeradius3: add missing conffiles to Makefile
| * | | freeradius3: add missing conffiles to MakefileAlexey Dobrovolsky2020-08-01
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Config files /etc/freeradius3/policy.d/accounting /etc/freeradius3/policy.d/filter /etc/freeradius3/proxy.conf /etc/freeradius3/sites-available/default and link /etc/freeradius3/sites-enabled/default are in the freeradius3 package and are mentioned in the main config file /etc/freeradius3/radiusd.conf Thus, they must be explicitly specified in the Makefile. File /etc/freeradius3/sites/default is not included in the package, is not created during installation, is not mentioned in the main config file and should therefore be excluded from the Makefile. Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
* | | haproxy: Update HAProxy to v2.2.2Christian Lachner2020-07-31
| | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash - This new version also adds LUA 5.4 support Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | Merge pull request #12594 from hnyman/nlbwHannu Nyman2020-07-31
|\ \ \ | | | | | | | | nlbwmon: add hotplug script to reload after interface ifup
| * | | nlbwmon: add hotplug script to reload after interface ifupHannu Nyman2020-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a hotplug script to reload nlbwmon's config after interface ifup actions. That should improve the detection of the IPv6 LAN address that can get enabled a bit later in the boot process. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | Merge pull request #12975 from ja-pa/clamav-security-fixJosef Schlehofer2020-07-30
|\ \ \ \ | | | | | | | | | | clamav: update to version 0.102.4 (security fix)
| * | | | clamav: update to version 0.102.4 (security fix)Jan Pavlinec2020-07-30
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2020-3481 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | modemmanager: avoid requiring autoreconf to build packageAleksander Morgado2020-07-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Do not manually overwrite the paths of gdbus-codegen or glib-mkenums in the ModemManager package build, as modifying the configure.ac ends up requiring a full autoreconf. Since MM 1.14, git builds or autoreconf-ed source package builds require autoconf-archive installed in the build system, and so the build would fail if this happens. The update to overwrite the paths was to force using the gdbus-codegen and glib-mkenums provided by the "host" glib2 package instead of the "target" glib2 package (see fa8ad6e69c41d694b1220e04ec4f45bb8e8c1edf), but these tools are really the same in both as they're python programs, arch independent. Tested in a local build where the setup detects and uses the correct glib tool paths from the target: /home/user/openwrt/staging_dir/target-mips_24kc_musl/usr/bin/gdbus-codegen /home/user/openwrt/staging_dir/target-mips_24kc_musl/usr/bin/glib-mkenums Fixes https://github.com/openwrt/packages/issues/12958 Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
* | | | Merge pull request #12970 from EricLuehrsen/unbound_11100Rosen Penev2020-07-30
|\ \ \ \ | | | | | | | | | | unbound: update to 1.11.0
| * | | | unbound: update to 1.11.0Eric Luehrsen2020-07-29
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
* | | | | openvswitch: remove explicit dependency on librtYousong Zhou2020-07-30
|/ / / / | | | | | | | | | | | | | | | | | | | | Selection of librt will be handled by the build system Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | openvswitch: only libopenvswitch depends on libunbound, libunwindYousong Zhou2020-07-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is to make explicit the conditional select of libunwind is only needed for libopenvswitch. If we spill it over other packages, the generated kconfig will have recursive dependency issue. 2 new patches were made for this goal The other thing is that "+libunwind" will cause it to be built if any of the packages defined in this Makefile is enabled (y or m). This is at the moment by-design of the build system. Libunwind does not support architectures like arc. Use conditional select To avoid (libunwind) build failures like the following, checking for ELF helper width... configure: error: Unknown ELF target: arc make[3]: *** [Makefile:65: /data/openwrt/build_dir/target-arc_arc700_uClibc/ libunwind-1.3.1/.configured_68b329da9893e34099c7d8ad5cb9c940] Error 1 Things like "+PACKAGE_openvswitch-libopenvswitch:libunwind" will also result in recursive deps error for chains of 3 nodes. Kconfig construct like the following will be made config A tristate select B depends on !(C) || (x) config B tristate select C config C tristate config x bool Other changes include - Shared use of variable ovs__common_depends was removed - Ovn doc build was patched out Link: https://github.com/openwrt/packages/pull/12959#issuecomment-665021413 Reported-by: Adrian Schmutzler <freifunk@adrianschmutzler.de> Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | openvswitch: rename shared var name ovs{,_}_common_dependsYousong Zhou2020-07-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | To avoid conflict with package ovs_common_depends of package openvswitch-common Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | openvswitch: backport patch fixing build for 4.14.187Yousong Zhou2020-07-30
| | | | | | | | | | | | | | | | | | | | | | | | Supersedes openwrt/packages#12932 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | sshfs: update to 3.7.0Rosen Penev2020-07-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Simplified Makefile as a result of meson transition. Fixed license information. Updated URL. Added patch to fix linking issue. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | fping: update to 4.4Rosen Penev2020-07-28
|/ / / | | | | | | | | | | | | | | | | | | | | | Remove upstreamed patch. Whitespace Makefile cleanups. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #12948 from TDT-AG/pr/20200724-mwan3Florian Eckert2020-07-28
|\ \ \ | | | | | | | | mwan3: update to version 2.8.12
| * | | mwan3: update version to 2.8.12Florian Eckert2020-07-28
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: unify variable checkFlorian Eckert2020-07-28
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: remove lock file entirelyFlorian Eckert2020-07-28
| | | | | | | | | | | | | | | | | | | | | | | | Removing the lock file ist not necessary Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: revert: also cleanup lock on mwan3 stopFlorian Eckert2020-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit cde2a77ed3b3b0df9e693e121dccdc97ef163156. Applying this change has shown that it is even quicker to provoke the race condtition on simultan mwan3 commands execution. By reversing the change we have the same behaviour as before. But the race condition on mwan3 execute at the same time still exists. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: fix race condition on mwan3 restartFlorian Eckert2020-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This adjustment of the locks fixes the race condition when a mwan3 hotplug script and a mwan3 command are running at the same time. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | openvswitch: adds new UCI section ovs_bridgeSimon Kinane2020-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This new config section in package openvswitch supports creating a named bridge, and setting its' OpenFlow controller end-point. An example config is included in /rom/etc/config/openvswitch Signed-off-by: Simon Kinane <skinane@fb.com>
* | | | nginx: remove PROVIDES on depending packagepeter-stadler2020-07-27
| | | | | | | | | | | | | | | | | | | | Fix recursive dependency for `make menuconfig`. Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | | haproxy: Update HAProxy to v2.2.1Christian Lachner2020-07-27
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | - New major version (LTS release) - Update haproxy download URL and hash - Remove obsolete dladdr1-dependency-patch as it has been upstreamed - USE_REGPARM is obsolete and therefore removed from our Makefile Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | nextdns: Update to version 1.7.1Olivier Poitrey2020-07-26
| | | | | | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | Merge pull request #12929 from peter-stadler/nginx-always-sslRosen Penev2020-07-26
|\ \ \ | | | | | | | | nginx: enable ssl for all variants and remove nginx-util w/o ssl
| * | | nginx: enable ssl for all variants and remove nginx-util w/o sslPeter Stadler2020-07-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Make the plain nginx version the same as nginx-ssl. In a further change we will replace nginx by a dummy package, depending on +nginx-ssl instead. This allows a smooth upgrade. For nginx-util leave the ssl and the ssl-nopcre versions only. For nginx-mod-luci remove the duplicate ssl version. Replace the removed packages by dummies for a smooth upgrade. The dummy packages will be removed after a transition period. Additionally, enable the http2 module for nginx-ssl by default and cleanup the nginx.init file. Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | | Merge pull request #12915 from lucize/frrupRosen Penev2020-07-26
|\ \ \ \ | |/ / / |/| | | frr: update to 7.4 and latest backports
| * | | frr: update to 7.4 and latest backportsLucian Cristian2020-07-24
| | | | | | | | | | | | | | | | | | | | | | | | changelogs: https://github.com/FRRouting/frr/releases/tag/frr-7.4 Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | Merge pull request #12916 from kenkeys/spoofer-v146Rosen Penev2020-07-24
|\ \ \ \ | |/ / / |/| | | spoofer: Update to 1.4.6
| * | | spoofer: Update to 1.4.6Ken Keys2020-07-24
| |/ / | | | | | | | | | | | | | | | | | | Includes a new CA file for compatibility with upcoming change to spoofer server SSL cert Signed-off-by: Ken Keys <kkeys@caida.org>
* | | yggdrasil: Ygg-over-ygg bugfixWilliam Fleurant2020-07-23
| | | | | | | | | | | | Signed-off-by: William Fleurant <meshnet@protonmail.com>
* | | zerotier: disable pie supportRosen Penev2020-07-23
| | | | | | | | | | | | | | | | | | | | | The Makefile is already patched for it. But PKG_ASLR_PIE still needs to be disabled. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #12893 from ja-pa/tor-0.4.3.6Rosen Penev2020-07-23
|\ \ \ | |/ / |/| | tor: update to version 0.4.3.6 (security fix)
| * | tor: update to version 0.4.3.6 (security fix)Jan Pavlinec2020-07-21
| | | | | | | | | | | | | | | | | | | | | Fixes CVE-2020- 15572 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Powered by cgit, Themed by Ted Yin.