aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
| * | mwan3: update to 2.11.3Florian Eckert2022-10-17
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | mwan3: only send disconnected event if interface was connected beforeFlorian Eckert2022-10-17
| | | | | | | | | | | | | | | | | | | | | | | | Up to now on every interface down event a mwan3 disconnected event was send. This is wrong because if the interface was never connected, then a disconnected event should not get generated. This commit fixes this bug. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | mwan3: change log message on already added routeFlorian Eckert2022-10-17
| | | | | | | | | | | | | | | | | | Only show message on already set route, if debugging is enabled. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | keepalived-sync: switch from busybox-timeout to coreutils-timeoutFlorian Eckert2022-10-18
| | | | | | | | | | | | | | | | | | | | | | | | So that the busybox configuration does not have to be adapted, the dependency has been changed to coreutils-timeout, which provides the same functionality. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | ddns-scripts: fix cloudflare&digitalocean providesMichal Vasilek2022-10-18
| |/ |/| | | | | | | | | | | Fixes mistake in dbe79e409d4d772d607364b47116a108508bb466, the cloudflare PROVIDES got mixed up with digitalocean. Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* | Merge pull request #19597 from paper42/ddns-scripts-rename-providesFlorian Eckert2022-10-18
|\ \ | | | | | | ddns-scripts: add PROVIDES for old package names
| * | ddns-scripts: add PROVIDES for old package namesMichal Vasilek2022-10-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * ddns-scripts-services: provide ddns-scripts_service * ddns-scripts-cloudflare: provide ddns-scripts_digitalocean.com-v2 * ddns-scripts-freedns: provide ddns-scripts_freedns_42_pl * ddns-scripts-godaddy: provide ddns-scripts_godaddy.com-v1 * ddns-scripts-noip: provide ddns-scripts_no-ip_com * ddns-scripts-nsupdate: provide ddns-scripts_nsupdate * ddns-scripts-route53: provide ddns-scripts_route53-v1 * ddns-scripts-cnkuai: provide ddns-scripts_cnkuai_cn https://github.com/openwrt/packages/pull/13509 renamed many ddns-scripts packages, but didn't include a PROVIDES for the old package names to make updates work well. Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* | | Merge pull request #19586 from stangri/master-nebulaStan Grishin2022-10-17
|\ \ \ | | | | | | | | nebula: implement netifd support
| * | | nebula: implement netifd supportStan Grishin2022-10-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit contains the following: * Update binary to version 1.6.1 * Update README URLs in the Makefile to link OpenWrt-specific info * Separate the binary, the init script and netifd script into 3 packages: nebula, nebula-service and nebula-proto accordingly * implement yml parser for init script to fetch variables from it * add the netifd script for nebula protocol * update test file to address all built packages * make the PKG_VERSION variable of init/proto scripts readonly Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | Merge pull request #19374 from jempatel/improve_keepalived-uci-syncFlorian Eckert2022-10-17
|\ \ \ \ | |_|_|/ |/| | | keepalived: high-availability files and data sync
| * | | keepalived: high-availability files and data syncJaymin Patel2022-10-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | add new package keepalived-sync to synchronize files and data between master and backup node. The master node uses SSH over rsync to send and the backup node will use inotifywatch to watch received files. The master node can track rsync.sh script to send configuration file on a backup node based on the vrrp_script configuration of the same script. The backup node will have a keepalived-inotify service, which would watch for newly received files and it would call hotplug event. Each service can keep its respective script under the keepalived hotplug directory and executes commands to stop, start service or update any config in real-time. Whenever a switchover will happen, the backup node would have the latest config and data files from the master node. Hotplug events can be used to apply config when files are received. Signed-off-by: Jaymin Patel <jem.patel@gmail.com>
* | | | Merge pull request #19611 from stangri/master-https-dns-proxyStan Grishin2022-10-16
|\ \ \ \ | | | | | | | | | | https-dns-proxy: upstream bugfix for ca_info
| * | | | https-dns-proxy: upstream bugfix for ca_infoStan Grishin2022-10-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * upstream bugfix: Add a forgotten 'NULL' initialize for ca_info if not manually set * make init script PKG_VERSION variable readonly so that a shellcheck excettion can be removed * add procd interface trigger to 'wan6' if IPv6 wan interface name cannot be obtained on start Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | Merge pull request #19606 from Gingernut1978/samba4Florian Eckert2022-10-17
|\ \ \ \ \ | | | | | | | | | | | | samba4: change perl dependency to fix menuconfig
| * | | | | samba4: change perl dependency to fix menuconfigAndrew Sim2022-10-14
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adding perlbase-json-pp to samba4-libs dependencies was the wrong approach and caused samba packages not to be offered by menuconfig. AFAIK perlbase-json-pp is a perl helper to building samba4 and seems to be already included in perl/host so use that instead to fix the menuconfig issues. Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
| * | | | Revert "wget: update to 1.21.3"Josef Schlehofer2022-10-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With the newer wget version, wget-nossl can not be compiled due to missing library, so let's revert it. Package wget-nossl is missing dependencies for the following libraries: libnettle.so.8 This reverts commit 5075f5b7010617ba916f251b418ef7c79b760b0a. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
| * | | | Merge pull request #19577 from PolynomialDivision/update-wget-1-21-3Hannu Nyman2022-10-13
| |\ \ \ \ | | |_|_|/ | |/| | | wget: update to 1.21.3
| | * | | wget: update to 1.21.3Nick Hainke2022-10-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release Notes: https://lists.gnu.org/archive/html/info-gnu/2022-02/msg00017.html Remove the patch "100-fix-sts-time". This patch was replaced upstream by several other fixes, see: https://git.savannah.gnu.org/cgit/wget.git/log/src/hsts.c Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | tailscale: add version testsMichal Vasilek2022-10-13
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* | | | | tailscale: fix -versionMichal Vasilek2022-10-13
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | tailscale version, tailscaled -version and the web UI reported the wrong version number which doesn't cause any issues, but it can be confusing. This is fixed by specifying the version in go ldflags similar to how it's done in many other go packages and the official tailscale Dockerfile. version.Long version can not be specified in GO_PKG_LDFLAGS_X because it contains a space and GO_PKG_LDFLAGS_X is always split at a space. Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* | | | smartdns: update to 1.2022.38.1Nick Peng2022-10-12
| | | | | | | | | | | | | | | | Signed-off-by: Nick Peng <pymumu@gmail.com>
* | | | arp-scan: update to latest 1.9.8 releaseAndrew Sim2022-10-12
| |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | Maintainer: Sergey Urushkin urusha.v1.0@gmail.com Compile tested: mediatek:mt7622 Run tested: mediatek:mt7622 Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
* | | stunnel: update version to 5.66Florian Eckert2022-10-10
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | curl: error out if wolfSSL is not usablePetr Štetiar2022-10-10
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When we explicitly declare, that we would like to have curl built with wolfSSL support using `--with-wolfssl` configure option, then we should make sure, that we either endup with curl having that support, or it shouldn't be available at all, otherwise we risk, that we end up with regressions like following: configure:25299: checking for wolfSSL_Init in -lwolfssl configure:25321: x86_64-openwrt-linux-musl-gcc -o conftest [snip] In file included from target-x86_64_musl/usr/include/wolfssl/wolfcrypt/dsa.h:33, from target-x86_64_musl/usr/include/wolfssl/wolfcrypt/asn_public.h:35, from target-x86_64_musl/usr/include/wolfssl/ssl.h:35, from conftest.c:47: target-x86_64_musl/usr/include/wolfssl/wolfcrypt/integer.h:37:14: fatal error: wolfssl/wolfcrypt/sp_int.h: No such file or directory #include <wolfssl/wolfcrypt/sp_int.h> ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ compilation terminated. and in the end thus produce curl without https support: curl: (1) Protocol "https" not supported or disabled in libcurl So fix it, by making the working wolfSSL mandatory and error out in configure step when that's not the case: checking for wolfSSL_Init in -lwolfssl... no configure: error: --with-wolfssl but wolfSSL was not found or doesn't work References: #19005, #19547 Upstream-Status: Accepted [https://github.com/curl/curl/pull/9682] Signed-off-by: Petr Štetiar <ynezz@true.cz>
* | unbound: update control cert uci processingRob Ekl2022-10-09
| | | | | | | | Signed-off-by: Rob Ekl <ekl.rob@gmail.com>
* | Merge pull request #19451 from graysky2/rsyncfixAlexandru Ardelean2022-10-09
|\ \ | | | | | | rsync: incorporate upstream fixes
| * | rsync: incorporate upstream fixesJohn Audia2022-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | Upstream is requesting that packagers cherry-pick two commits to fix the current release.[1] 1. https://www.mail-archive.com/rsync@lists.samba.org/msg33576.html Signed-off-by: John Audia <therealgraysky@proton.me>
* | | Merge pull request #19546 from PolynomialDivision/update-iperf3Alexandru Ardelean2022-10-09
|\ \ \ | | | | | | | | iperf3: update to 3.12
| * | | iperf3: update to 3.12Nick Hainke2022-10-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Release Notes: https://groups.google.com/g/iperf-dev/c/_DgSWrpl9Gk?pli=1 Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | cloudflared: Update to 2022.10.0Tianling Shen2022-10-08
| | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | Merge pull request #19529 from blocktrron/qcsuperDavid Bauer2022-10-08
|\ \ \ \ | | | | | | | | | | qcsuper: add Package w/ necessary dependencies
| * | | | qcsuper: add packageDavid Bauer2022-10-06
| | | | | | | | | | | | | | | | | | | | Signed-off-by: David Bauer <mail@david-bauer.net>
* | | | | Merge pull request #19543 from stangri/master-https-dns-proxyStan Grishin2022-10-07
|\ \ \ \ \ | | | | | | | | | | | | https-dns-proxy: update to 2022-08-12-1
| * | | | | https-dns-proxy: update to 2022-08-12-1Stan Grishin2022-10-07
| | |/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update to upstream version 2022-08-12 * add ca_certs_file option for CA certs file for curl * add procd_add_interface_trigger for wan6 (hopefully fixes https://github.com/openwrt/packages/issues/19531) Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | samba4: remove duplicate entry from libldb-fix-musl-libc-unkown-type-error.patchAndrew Sim2022-10-07
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
* | | | | samba4: update to 4.17.0Andrew Sim2022-10-07
|/ / / / | | | | | | | | | | | | Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
* | | | snowflake: update to version 2.3.1Daniel Golle2022-10-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | 03b2b56f Fix broker race condition 36f03dfd Record proxy type for proxy relay stats Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | gnunnet: halt build if any command failsEneas U de Queiroz2022-10-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There are many places in the packages' install recipes whith multiple commands being executed in the same shell invocation, separated with a semicolon (;). The return status will depend only on the last command being run. The same thing happens in loops, where only the last file will determine the result of the command. Change the ';' to '&&', and exit the loop if any operation fails. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* | | | gnunnet: don't copy non-existing filesEneas U de Queiroz2022-10-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There are six places pointing to files that do not exist any more: - gns-import.sh in package gnunet-gns (dropped in v0.11.0) - libgnunetdnsstub.so* in gnunet-vpn (integrated into util in v0.11.0) - libgnunettun.so* in gnunet-vpn (integrated into util in v0.11.0) - gnunet-service-ats-new in package gnunet (dropped in v0.12.0) - libgnunetreclaimattribute.so.* (integrated into reclaim in v0.13.0) - libgnunetabe.so.* in gnunet-reclaim (dropped in v0.17.2) They were not noticed because their failing copy commands were part of loops in which only the last operation had its exit status checked. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* | | | gnunet: gnunet-rest: add libjose dependencyEneas U de Queiroz2022-10-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | According to the package's configure.ac, reclaimID OpenID Connect plugin depends on jose. It is installed by the gnunet-rest plugin package: libgnunnetrest_openid_connect.so. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* | | | acme: remove help info of unused commandGlen Huang2022-10-06
| | | | | | | | | | | | | | | | Signed-off-by: Glen Huang <i@glenhuang.com>
* | | | acme: fix acmesh dnsapi dependenciesGlen Huang2022-10-06
|/ / / | | | | | | | | | Signed-off-by: Glen Huang <i@glenhuang.com>
* | | Merge pull request #19532 from ↵Philip Prindeville2022-10-05
|\ \ \ | | | | | | | | | | | | | | | | pprindeville/isc-dhcp-drop-gratuitous-named-reload isc-dhcp: avoid gratuitous reload of named
| * | | isc-dhcp: avoid gratuitous reload of namedPhilip Prindeville2022-10-05
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | lighttpd: remove deprecated modulesGlenn Strauss2022-10-05
| | | | | | | | | | | | | | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* | | | Merge pull request #19520 from dyarkovoy/masterFlorian Eckert2022-10-05
|\ \ \ \ | | | | | | | | | | mwan3: support offload routing modifier
| * | | | mwan3: support offload routing modifierDenys Yarkovyi2022-10-05
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Denys Yarkovyi <dyarkovoy@gmail.com>
* | | | | https-dns-proxy: add settings for canary domainsStan Grishin2022-10-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add setting to enable/disable blocking access to iCloud Private Relay resolvers * add setting to enable/disable blocking access to Mozilla resolvers * rename variables loaded from config in the init script Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | https-dns-proxy: bugfix: prevent canary domains duplicatesStan Grishin2022-10-04
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | treewide: fix security issues by bumping all packages using libwolfsslPetr Štetiar2022-10-04
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As wolfSSL is having hard time maintaining ABI compatibility between releases, we need to manually force rebuild of packages depending on libwolfssl and thus force their upgrade. Otherwise due to the ABI handling we would endup with possibly two libwolfssl libraries in the system, including the patched libwolfssl-5.5.1, but still have vulnerable services running using the vulnerable libwolfssl-5.4.0. So in order to propagate update of libwolfssl to latest stable release done in commit ec8fb542ec3e4 ("wolfssl: fix TLSv1.3 RCE in uhttpd by using 5.5.1-stable (CVE-2022-39173)") which fixes several remotely exploitable vulnerabilities, we need to bump PKG_RELEASE of all packages using wolfSSL library. Same bump has been done in buildroot in commit f1b7e1434f66 ("treewide: fix security issues by bumping all packages using libwolfssl"). Signed-off-by: Petr Štetiar <ynezz@true.cz>