| Commit message (Collapse) | Author | Age |
|
|
|
|
|
| |
support tcp mux and default to turn it on
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
|
|
|
|
| |
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
|
|
|
|
|
|
| |
Required for sifiveu target.
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
|
|\
| |
| | |
strongswan: add kernel module dependency on chapoly
|
| |
| |
| |
| | |
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Previously it was using killall with procd respand enabled
This was causing yggdrasil to restart after being killed
root@r3test-hap:/# service yggdrasil stop ; echo $? ; sleep 10s ; ps | grep yggdrasil
Terminated
143
6701 root 653m S /usr/sbin/yggdrasil -useconffile /tmp/yggdrasil.conf
6748 root 1308 S grep yggdrasil
Now it's just using whatever procd is using and see there, it actually stops
root@r3test-hap:/# service yggdrasil stop ; echo $? ; sleep 10s ; ps | grep yggdrasil
0
6802 root 1308 S grep yggdrasil
I assume there was some procd bug that kept it from being used properly
Signed-off-by: Maciej Krüger <mkg20001@gmail.com>
|
| |
| |
| |
| |
| |
| | |
Fixes https://github.com/openwrt/packages/issues/18182
Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
|
| |
| |
| |
| | |
Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
|
| |
| |
| |
| |
| |
| |
| |
| | |
According to David Woodhouse, OpenConnect has no issues reconnecting on any
interface. Make the host dependency optional, as it can cause issues in multiple
WAN scenarios.
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The --juniper switch has been deprecated in favour of --protocol=nc. Fix the
proto script thusly, while keeping compatibility with existing configurations.
Note that, as far as UCI is concerned, if both options juniper and vpn_protocol
are specified, the latter takes precedence.
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
|
| |
| |
| |
| |
| |
| | |
This is the preferred way, according to the wiki.
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Using resolveip is more robust and predictable than depending on nslookup and
awk.
This reverts commit 131ec7b3bd6895aa3f86f57169dd23c15f174fe2.
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
|
| |
| |
| |
| | |
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
|
| |
| |
| |
| | |
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
|
| |
| |
| |
| | |
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
|
| |
| |
| |
| |
| |
| | |
Updated geodata to latest version while at it.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
| |
| |
| |
| | |
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
| |
| |
| |
| |
| |
| |
| | |
* Update to 2.42.1
* Replace spaces with tabulation in init file
Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
|
| |
| |
| |
| |
| |
| |
| | |
banIP 0.7.x is not compatible with new nft firewall (default in master and 22.03).
Mark the package as BROKEN for now.
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
| |
| |
| |
| |
| |
| |
| |
| | |
Force restart stubby if any of the trigger interfaces goes up or down.
Avoids DoT DNS lookup timeouts when default route changes, in case of multiple
upstream interfaces.
Signed-off-by: Aleksandr V. Piskunov <aleksandr.v.piskunov@gmail.com>
|
| |
| |
| |
| |
| |
| | |
The new version of vpnc supports additional DH groups for improved key exchange security.
Signed-off-by: Andreas Erhard <andreas.erhard@i-med.ac.at>
|
| |
| |
| |
| |
| |
| | |
- Update haproxy download URL and hash
Signed-off-by: Christian Lachner <gladiac@gmail.com>
|
| |
| |
| |
| | |
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
| |
| |
| |
| | |
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
| |
| |
| |
| |
| |
| | |
Otherwise, OpenConnect will fail to connect with DTLS.
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
|
| |
| |
| |
| |
| |
| | |
If it exists (if it isn't built-in), it will be loaded automatically at boot.
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
|
| |
| |
| |
| |
| |
| | |
We have nslookup and awk, let's use them.
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
|
| |
| |
| |
| | |
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This commit fixes two issues on macos:
1. Added a patch to fix 'echo -n' issue with MacOS shell
(backported from upstream)
2. Redefined sys.platform='linux' for target build if build host is
MacOS (otherwise, build script tries to use MacOS logic for
OpenWrt(Linux) target build)
Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
|
| |
| |
| |
| |
| |
| |
| |
| | |
Use nft instead of iptables to open port 80 in the firewall when getting a
cert. Since nft doesn't allow deleting a rule by its contents, capture and
save the handle when creating the rule, and use that to delete.
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
|
| |
| |
| |
| |
| |
| |
| |
| | |
Backport a patch in order to allow building OpenConnect against OpenSSL 1.1.x
without the need for deprecated API (further fixes will be required for OpenSSL
3.x, though).
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
On systems using seccomp, the hostapd socket files will be owned by the
'network' user/group ([source][0]). In this case, if wifi-presence is
run as root/root, then it does not have permissions to open the
hostapd socket files. This was discussed in awilliams/wifi-presence#3.
This change allows the process user/group to be specified in
/etc/config/wifi-presence. If no explicit user/group is set, then the
init script will use the owner of the socket files in /var/run/hostapd/
to determine the appropriate process user/group.
[0]: https://github.com/openwrt/openwrt/blob/ec6293febc244d187e71a6e54f44920be679cde4/package/network/services/hostapd/files/wpad.init#L35-L36
Signed-off-by: Adam Williams <pwnfactory@gmail.com>
|
| |
| |
| |
| |
| |
| | |
The elfutils package moved to tools and elfutils/host no longer exists.
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
|
| |
| |
| |
| | |
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
|
|\ \
| | |
| | | |
https-dns-proxy: 2021-11-22-3: add support for Canary Domains
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Fixes https://github.com/stangri/source.openwrt.melmac.net/issues/155.
Background: https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
| | |
| | |
| | |
| | |
| | |
| | | |
7afab96 usteer: Fix better candidate not being set in policy
Signed-off-by: David Bauer <mail@david-bauer.net>
|
|\ \ \
| | | |
| | | | |
kcptun: add tcp option
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Zheng Qian <sotux82@gmail.com>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
softflowd can filter the traffic with an optional bpf program,
specified on the command-line as a BPF expression
Signed-off-by: Jesus Fernandez Manzano <jesus.manzano@galgus.net>
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: W. Michael Petullo <mike@flyn.org>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
The new connection dispatcher scripts support integrated in
ModemManager 1.18.8 allows us to provide a openwrt-specific dispatcher
script used to report netifd that the underlying network connection is
down.
See also https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/merge_requests/775
Fixes https://github.com/openwrt/openwrt/issues/8368
Fixes https://github.com/openwrt/packages/issues/14096
Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
The FCC unlock scripts are installed but not enabled by default.
Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Also removed two patches that are already included in the upstream
release.
Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
|
|\ \ \ \
| | | | |
| | | | | |
privoxy: prevent killing the init script itself when stopping service
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
1. Fixed init script would kill itself when trying to stop a service.
2. Upgrade privoxy release to 3.0.33
3. Set PKG_RELEASE to AUTORELEASE
Signed-off-by: He Xian <hexian000@outlook.com>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
- Update haproxy download URL and hash
Signed-off-by: Christian Lachner <gladiac@gmail.com>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
nut: add cable type nut driver config
|