aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* subversion: fix compilation with full NLSRosen Penev2020-12-11
| | | | | | Needs a linker flag. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* i2pd: backport upstream fix for i386Rosen Penev2020-12-11
| | | | | | Fixes compilation. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* curl: update to version 7.74.0 (security fix)Jan Pavlinec2020-12-11
| | | | | | | | | Fixes: CVE-2020-8286 CVE-2020-8285 CVE-2020-8284 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* Merge pull request #14191 from luizluca/easy-rsa-3.0.8Rosen Penev2020-12-10
|\ | | | | openvpn-easy-rsa: bump to 3.0.8
| * openvpn-easy-rsa: bump to 3.0.8Luiz Angelo Daros de Luca2020-12-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | New easyrsa will look for missing vars and x509-types where easyrsa is located (following symlink). /usr/bin/easyrsa is now a link to /usr/lib/easyrsa/easyrsa and /usr/lib/easyrsa/{vars,x509-types} a link to /etc/easyrsa/{vars,x509-types}. This keeps the same previous OpenWrt easyrsa behavior which tries to use $PWD/pki and /etc/easyrsa/{vars,x509-types}, but without patching it. Easyrsa can also use env vars to set pki root path (instead of /usr/lib/easyrsa), pki path (instead of $PWD/pki) and vars path. Those variables are commented in /etc/profile.d/50-openvpn-easy-rsa.sh as an example of how to make easyrsa run independent of $PWD. That scriptlet also sets $EASYRSA_TEMP_DIR from $EASYRSA_PKI/tmp to /tmp in order to avoid writing to persistent media (normally flash). However, as a profile scriptlet, it will only be used after session is restarted. The "build" tgz was replaced by the "source" tar. "build" version has a different file structure, making any patch backports too complex. I'm also putting myself as maintainer. Closes openwrt/openwrt#2926, since it moved to openwrt/packages. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* | Merge pull request #14135 from simm42/masterRosen Penev2020-12-10
|\ \ | | | | | | Add support to darkstat to allow multiple local networks to be specified for montioring
| * | darkstat: bump package versionSimon Day2020-12-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Developer's Certificate of Origin 1.1 By making a contribution to this project, I certify that: (a) The contribution was created in whole or in part by me and I have the right to submit it under the open source license indicated in the file; or (b) The contribution is based upon previous work that, to the best of my knowledge, is covered under an appropriate open source license and I have the right under that license to submit that work with modifications, whether created in whole or in part by me, under the same open source license (unless I am permitted to submit under a different license), as indicated in the file; or (c) The contribution was provided directly to me by some other person who certified (a), (b) or (c) and I have not modified it. (d) I understand and agree that this project and the contribution are public and that a record of the contribution (including all personal information I submit with it, including my sign-off) is maintained indefinitely and may be redistributed consistent with this project or the open source license(s) involved Signed-off-by: Simon Day <email@simonday.info>
| * | darkstat: Add support to darkstat to allow multiple local networks to beSimon Day2020-12-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | specified for montioring eg allows ipv4 and ipv6 forwarded traffic to be monitored from both main network and dmz in single graph Developer's Certificate of Origin 1.1 By making a contribution to this project, I certify that: (a) The contribution was created in whole or in part by me and I have the right to submit it under the open source license indicated in the file; or (b) The contribution is based upon previous work that, to the best of my knowledge, is covered under an appropriate open source license and I have the right under that license to submit that work with modifications, whether created in whole or in part by me, under the same open source license (unless I am permitted to submit under a different license), as indicated in the file; or (c) The contribution was provided directly to me by some other person who certified (a), (b) or (c) and I have not modified it. (d) I understand and agree that this project and the contribution are public and that a record of the contribution (including all personal information I submit with it, including my sign-off) is maintained indefinitely and may be redistributed consistent with this project or the open source license(s) involved Signed-off-by: Simon Day <email@simonday.info>
| * | darkstat: Add support to darkstat to allow multiple local networks to beSimon Day2020-12-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | specified for montioring eg allows ipv4 and ipv6 forwarded traffic to be monitored from both main network and dmz in single graph Developer's Certificate of Origin 1.1 By making a contribution to this project, I certify that: (a) The contribution was created in whole or in part by me and I have the right to submit it under the open source license indicated in the file; or (b) The contribution is based upon previous work that, to the best of my knowledge, is covered under an appropriate open source license and I have the right under that license to submit that work with modifications, whether created in whole or in part by me, under the same open source license (unless I am permitted to submit under a different license), as indicated in the file; or (c) The contribution was provided directly to me by some other person who certified (a), (b) or (c) and I have not modified it. (d) I understand and agree that this project and the contribution are public and that a record of the contribution (including all personal information I submit with it, including my sign-off) is maintained indefinitely and may be redistributed consistent with this project or the open source license(s) involved Signed-off-by: Simon Day <email@simonday.info>
* | | curl: fix host config fileRosen Penev2020-12-10
| | | | | | | | | | | | | | | | | | | | | | | | Fix the prefix instead. Replace custom Compile section with PKG_INSTALL. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | gnurl: fix host config fileRosen Penev2020-12-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix the prefix instead. Replace custom Compile section with PKG_INSTALL. Minor cleanups for consistency between packages. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | iftop: fix compilation with GCC 10Rosen Penev2020-12-09
| | | | | | | | | | | | | | | | | | | | | | | | GCC 10 defaults to fno-common, which demands unique defenitions. Patch taken from buildroot. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | iftop: add packagePaul Spooren2020-12-09
| | | | | | | | | | | | | | | | | | Moved over from openwrt.git Signed-off-by: Paul Spooren <mail@aparcar.org>
* | | https-dns-proxy: update binary to 2020-08-21Stan Grishin2020-12-09
| | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* | | modemmanager: bump releaseRosen Penev2020-12-09
| | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #13009 from valexi7/masterRosen Penev2020-12-09
|\ \ \ | | | | | | | | modemmanager: Added options
| * | | modemmanager: added new proto optionsValtteri Holopainen2020-08-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added signal refresh rate option modemmanager: update readme.md Added description for added proto options. Added compile option to compile --with-at-command-via-dbus for allowing AT commands to modem without --debug flag Changes to be committed: modified: net/modemmanager/Config.in modified: net/modemmanager/Makefile modified: net/modemmanager/files/modemmanager.init modified: net/modemmanager/files/modemmanager.proto modified: README.md Signed-off-by: Valtteri Holopainen <valtsu@gmail.com>
* | | | Merge pull request #14159 from ja-pa/git-2.29.2Rosen Penev2020-12-08
|\ \ \ \ | | | | | | | | | | git: update to version 2.29.2
| * | | | git: update to version 2.29.2Jan Pavlinec2020-12-07
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | Merge pull request #14175 from Andy2244/samba-4.13.2Rosen Penev2020-12-08
|\ \ \ \ \ | | | | | | | | | | | | samba4: update to 4.13.2
| * | | | | samba4: update to 4.13.2Andy Walsh2020-12-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update to 4.13.2 * remove outdated option "write cache size" Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* | | | | | wsdd2: update to git (2020-11-19)Andy Walsh2020-12-08
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | * update to git (2020-11-19) Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* | | | | Mosquitto: major update to version 2.0Karl Palsson2020-12-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Major release, full release notes available at: https://mosquitto.org/blog/2020/12/version-2-0-0-released/ Tested on ath79, ssl full, ssl trimmed and non-ssl builds, and also all at the same time. Users may/will run into some of the changes in default authentication. Note https://mosquitto.org/documentation/migrating-to-2-0/ for tips on migrating. Patch included has already merged upstream, but didn't make the release: https://github.com/eclipse/mosquitto/pull/1930 Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | subversion: update to 1.14.0Rosen Penev2020-12-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove several configure options. apr-(utils) has been fixed, which makes them useless. Also removed PKG_BUILD_DEPENDS for that reason. Simplify NLS with autoreconf_bool. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | krb5: install krb5-config to hostRosen Penev2020-12-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Helps old packages that don't use pkgconfig. Fix prefix paths. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Merge pull request #12049 from pprindeville/xtables-addons-preserve-databaseRosen Penev2020-12-07
|\ \ \ \ \ | | | | | | | | | | | | xtables-addons: iptgeoip: preserve database across sysupgrade
| * | | | | xtables-addons: iptgeoip: preserve database across sysupgradePhilip Prindeville2020-12-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating the system image or the package should not obliterate the downloaded/unpacked geolocation database. If you use xt_geoip in /etc/firewall.user you don't want the database disappearing when sysupgrade runs and then reboots your system as you'll be left exposed. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | | Merge pull request #14038 from TDT-AG/pr/20201127-ddns-scriptsRosen Penev2020-12-07
|\ \ \ \ \ \ | | | | | | | | | | | | | | ddns-scripts: add gandi.net provider
| * | | | | | ddns-scripts: add gandi.net providerFlorian Eckert2020-11-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | | | Merge pull request #14086 from zhanhb/frpRosen Penev2020-12-07
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | frp: update to 0.34.3
| * | | | | | | frp: update to 0.34.3Huangbin Zhan2020-11-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
* | | | | | | | Merge pull request #14127 from xdarklight/ksmbd-3.3.1Rosen Penev2020-12-07
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | ksmbd and ksmbd-tools 3.3.1
| * | | | | | | | ksmbd-tools: update to 3.3.1Martin Blumenstingl2020-12-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Major change for version 3.3.1 are: * Fix a segfault issue in ksmbd.mountd. * Reorganize ndr write functions. Major changes for version 3.3.0 are: * Add samr and lsarpc RPC support. * Generate subauth values for domain. * Add Kerberos support. Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
* | | | | | | | | Merge pull request #14153 from gstrauss/lighttpd-1.4.56-5Rosen Penev2020-12-07
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | lighttpd: wolfssl complex preproc logic for SNI
| * | | | | | | | | lighttpd: wolfssl complex preproc logic for SNIGlenn Strauss2020-12-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* | | | | | | | | | Merge pull request #14160 from ja-pa/dnstap-0.3.0Rosen Penev2020-12-07
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | dnstap: update to version 0.3.0
| * | | | | | | | | | dnstap: update to version 0.3.0Jan Pavlinec2020-12-07
| | |_|_|_|_|/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | | | | | zerotier: add patch to avoid including sys/auxv.hRosen Penev2020-12-06
| |_|_|_|_|_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It seems it's not needed and not supported under uClibc-ng. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | miniupnpd: Don't override ipv6_listening_ipJitao Lu2020-12-07
| |/ / / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: https://github.com/openwrt/packages/issues/14145 Signed-off-by: Jitao Lu <dianlujitao@gmail.com>
* | | | | | | | ocserv: updated to 1.1.2Nikos Mavrogiannopoulos2020-12-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* | | | | | | | squid: fix compilation with ccacheRosen Penev2020-12-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added a patch to remove BUILDCXXFLAGS. For some reason, TARGET_CXXFLAGS are leaking. Removed custom Build/Compile section. There's already PKG_INSTALL. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | Merge pull request #14143 from gstrauss/lighttpd-1.4.56-4Rosen Penev2020-12-05
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | lighttpd: wolfssl TLS compat module detection
| * | | | | | | | lighttpd: wolfssl TLS compat module detectionGlenn Strauss2020-12-05
| | |_|_|_|/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | x-ref: "[lighttpd] -mod-wolfssl fails (requires dependency on -mod-openssl?)" https://github.com/openwrt/packages/issues/14139 github: closes #14139 Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* / | | | | | | i2pd: Update to 2.35.0David Yang2020-12-05
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: David Yang <mmyangfl@gmail.com>
* | | | | | | Merge pull request #14136 from EricLuehrsen/unbound_011300Rosen Penev2020-12-04
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | unbound: update to 1.13.0
| * | | | | | | unbound: update to 1.13.0Eric Luehrsen2020-12-04
| | |_|_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
* / | | | | | frr: update to 7.5Lucian Cristian2020-12-04
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | switch to codeload for latest patches applied to stable branch Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | Merge pull request #14097 from neheb/ovnRosen Penev2020-12-03
|\ \ \ \ \ \ | | | | | | | | | | | | | | openvpn: import from base
| * | | | | | openvpn: disable LZO support by defaultMagnus Kroken2020-12-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | OpenVPN recommends disabling compression, as it may weaken the security of the connection. For users who need compression, we build with LZ4 support by default. LZO in OpenVPN pulls in liblzo at approx. 32 kB. OpenWrt users will no longer be able to connect to OpenVPN peers that require LZO compression, unless they build the OpenVPN package themselves. Signed-off-by: Magnus Kroken <mkroken@gmail.com>
| * | | | | | openvpn: update to 2.5.0Magnus Kroken2020-12-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | New features: * Per client tls-crypt keys * ChaCha20-Poly1305 can be used to encrypt the data channel * Routes are added/removed via Netlink instead of ifconfig/route (unless iproute2 support is enabled). * VLAN support when using a TAP device Significant changes: * Server support can no longer be disabled. * Crypto support can no longer be disabled, remove nossl variant. * Blowfish (BF-CBC) is no longer implicitly the default cipher. OpenVPN peers prior to 2.4, or peers with data cipher negotiation disabled, will not be able to connect to a 2.5 peer unless option data_fallback_ciphers is set on the 2.5 peer and it contains a cipher supported by the client. Signed-off-by: Magnus Kroken <mkroken@gmail.com>