aboutsummaryrefslogtreecommitdiff
path: root/package/network/services
Commit message (Collapse)AuthorAge
* odhcpd: update to Git HEAD (2024-05-08)Christian Marangi2024-05-08
| | | | | | | | | | | | | | 99dd990690bc treewide: refactor pref(erred) to preferred_lt (lifetime) 4c2b51eab368 treewide: refactor valid to valid_lt (lifetime) 3b4e06055900 router: inherit user-assigned preferred_lifetime e164414aa184 router: limit prefix preferred_lt to valid_lt in accordance with RFC4861 a2176af7bdeb treewide: spell-fixes and new comments for extra clarification 4590efd3a2b3 treewide: normalize spaces to tabs 2edc60cb7c7a router: rename minvalid to lowest_found_lifetime 7ee72ee17bfa router: disambiguate and clarify 'no route' messages a29882318a4c config: set RFC defaults for preferred lifetime Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* dropbear: use ssh-keygen as an alias for dropbearkeySergey Ponomarev2024-05-06
| | | | | | | | | | | | | | | | The DropBear's dropbearkey supports limited set of arguments of OpenSSH ssh-keygen: -t, -q -N -Y After the change you can generate a key with the same command. Still many features of the original OpenSSH ssh-keygen are absent in the dropbearkey. If it's needed then users should install openssh-keygen package that will replace the /usr/bin/ssh-keygen with the full version. Signed-off-by: Sergey Ponomarev <stokito@gmail.com> Link: https://github.com/openwrt/openwrt/pull/14174 [ wrap commit description to 80 columns ] Link: https://github.com/openwrt/openwrt/pull/14174 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* hostapd: fix a null pointer dereference in wpa_supplicant on teardownFelix Fietkau2024-05-01
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: Fix compile against mbedtsl 3.6Hauke Mehrtens2024-04-28
| | | | | | Fix compile of the mbedtls extension for hostapd. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* package/network/services/dropbear: fix PKG_CPE_IDFabrice Fontaine2024-04-27
| | | | | | | | | | | cpe:/a:dropbear_ssh_project:dropbear_ssh is the correct CPE ID for dropbear: https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:dropbear_ssh_project:dropbear_ssh Fixes: c61a2395140d92cdd37d3d6ee43a765427e8e318 (add PKG_CPE_ID ids to package and tools) Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Link: https://github.com/openwrt/openwrt/pull/15290 Signed-off-by: Robert Marko <robimarko@gmail.com>
* lldpd: fix reload bug: advertisements shall default to onPaul Donald2024-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | Because these capability advertisements default to on in lldpd, they became absent at reload, and not restart, due to how the reload logic works ( keep daemon running, send unconfigured and then the new config via socket ), and it was not evident unless you happened to be looking for it (e.g. via pcap or tcpdump). It was also not evident from the manpage ( have now sent patches upstream ). At reload time, the unconfigure logic disabled them unless they were explicitly enabled (compare with other settings where 'unconfigure' just resets them). Now they default to on/enabled at init time, and are explicitly 'unconfigure'd at startup if the user disables them via: lldp_mgmt_addr_advertisements=0 lldp_capability_advertisements=0 In other words: explicit is necessary to disable the advertisements. The same applies to 'configure system capabilities enabled'. Technically 'unconfigure'd is the default but now it is explicit at reload. Tested on: 23.05.3 Signed-off-by: Paul Donald <newtwen+github@gmail.com>
* ustp: update to Git HEAD (2023-05-29)Paul Donald2024-04-27
| | | | | | a85a5bc83bde netif_utils: correctly close fd on read error Signed-off-by: Paul Donald <newtwen+github@gmail.com>
* bridger: update to Git HEAD (2024-04-22)Felix Fietkau2024-04-22
| | | | | | | ec8c620fd5f4 split bridge-local disable into rx and tx 40b1c5b6be4e flow: do not attempt to offload bridge-local flows Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ppp: add sourcefilter option supportChen Minqiang2024-04-22
| | | | | | | This make source based IPv6 routing option available for ppp/pptp/pppoe/pppoa Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
* lldpd: extended interface(s) parsing to handle patternsPaul Donald2024-04-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | For interface type parameters, the man page documents patterns: ``` *,!eth*,!!eth1 uses all interfaces, except interfaces starting with "eth", but including "eth1". ``` * Renamed `_ifname` to `_l2dev`. * get the l2dev via network_get_physdev (and not l3dev) * Glob pattern `*` is also valid - use noglob for this The net result is that now interface 'names' including globs '*' and '!' inversions are included in the generated lldpd configs. Temporarily `set -o noglob` and then `set +o noglob` to disable & enable globbing respectively, because when we pass `*` as an interface choice, other file and pathnames get sucked in from where the init script runs, and the `*` never makes it to lldpd. Tested extensively on: 22.03.6, 23.05.3 Signed-off-by: Paul Donald <newtwen+github@gmail.com> [ squash with commit bumping release version ] Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* bridger: update to Git HEAD (2024-04-15)Felix Fietkau2024-04-15
| | | | | | | | 3159bbe0a2eb improve isolation when selecting a fixed output port c77a7a1ff74d nl: fix getting flow offload stats a08e51e679dd add support for disabling bridge-local flows via config Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: fix a crash corner caseFelix Fietkau2024-04-13
| | | | | | On some setup failures, iface->bss can be NULL Signed-off-by: Felix Fietkau <nbd@nbd.name>
* lldpd: make management address advertisement controllablePaul Donald2024-04-12
| | | | | | | | | | Defaults to off. Available from >= 0.7.15 These are sent in TLV Signed-off-by: Paul Donald <newtwen+github@gmail.com>
* lldpd: make capabilities advertisement controllablePaul Donald2024-04-12
| | | | | | | | | | Defaults to off. Only available from >= 1.0.15 These capabilities are sent in TLV. Signed-off-by: Paul Donald <newtwen+github@gmail.com>
* lldpd: note about capabilitiesPaul Donald2024-04-12
| | | | | | | | | only available from >= 1.0.15 Comments are useful. Apparently this config parameter was committed when openwrt used an older version of lldpd which did not yet support it. Signed-off-by: Paul Donald <newtwen+github@gmail.com>
* lldpd: fix restartPaul Donald2024-04-12
| | | | | | | | | | | | | | | | | | | Redirection broke in 5364fe0f01ca ("lldpd: shellcheck fixes") redirects to /dev/null shall be handled correctly (i.e. last). This fixes these errors on `/etc/init.d/lldpd reload`: 2024-03-16T20:39:00 [WARN/lldpctl] unknown command from argument 1: `/dev/null` 2024-03-16T20:39:00 [WARN/lldpctl] unknown command from argument 1: `/dev/null` 2024-03-16T20:39:00 [WARN/lldpctl] unknown command from argument 1: `/dev/null` 2024-03-16T20:39:00 [WARN/lldpctl] unknown command from argument 1: `/dev/null` Tested-on: 22.03.6 Fixes: 5364fe0f01ca ("lldpd: shellcheck fixes") Signed-off-by: Paul Donald <newtwen+github@gmail.com> [ improve commit description, add fixes tag ] Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* treewide: update PKG_MIRROR_HASH to zstPaul Spooren2024-04-06
| | | | | | | When using zst instead of xz, the hash changes. This commit fixes the hash for packages and tools in core. Signed-off-by: Paul Spooren <mail@aparcar.org>
* hostapd: fix Config.in dependenciesFelix Fietkau2024-04-05
| | | | | | | hostapd packages were accidentally left out. Clean up this mess by changing the dependencies to hostapd-common Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: slightly clean up patchesFelix Fietkau2024-04-04
| | | | | | | | - move build/ifdef related changes together to the 200 patch range - reduce adding/removing include statements across patches - move patches away from the 99x patch range to simplify maintenance Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: replace "argument list too long" fix with a simpler versionFelix Fietkau2024-04-04
| | | | | | Less convoluted and more robust Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: remove workaround for broken WPA IEs in ancient devicesFelix Fietkau2024-04-04
| | | | | | Affected devices were already quite old when this patch was added. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: adjust patches to work with git amEneas U de Queiroz2024-04-04
| | | | | | | | | | | | | | | | | This adds From:, Date: and Subject: to patches, allowing one to run 'git am' to import the patches to a hostapd git repository. From: and Date: fields were taken from the OpenWrt commit where the patches were first introduced. Most of the Subject: also followed suit, except for: - 300-noscan.patch: Took the description from the LuCI web interface - 350-nl80211_del_beacon_bss.patch: Used the file name The order of the files in the patch was changed to match what git format-patch does. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* hostapd: remove unused fixEneas U de Queiroz2024-04-04
| | | | | | | | | | | | Patch 050-build_fix.patch fixes the abscence of sha384-kdf.o from the list of needed objetct files when FILS is selected without any other option that will select the .o file. While it is a bug waiting to be fixes upstream, it is not needed for OpenWrt use case, because OWE already selects sha384-kdf.o, and FILS is selected along with OWE. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* hostapd: bump to 2024-03-09Eneas U de Queiroz2024-04-04
| | | | | | | | | | | | | | | | | This brings many changes, including fixes for a couple of memory leaks, and improved interoperability with 802.11r. There are also many changes related to 802.11be, which is not enabled at this time. Fixed upstream: - 022-hostapd-fix-use-of-uninitialized-stack-variables.patch - 180-driver_nl80211-fix-setting-QoS-map-on-secondary-BSSs.patch - 993-2023-10-28-ACS-Fix-typo-in-bw_40-frequency-array.patch Switch PKG_SOURCE_URL to https, since http is not currently working. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com> Tested-by: Ilya Katsnelson <me@0upti.me> Tested by: Andrew Sim <andrewsimz@gmail.com>
* unetd: fix PKG_MIRROR_HASHPaul Spooren2024-04-03
| | | | | | | | | | | | | | | | | | | | | | | Our CI on GitHub as well as my local machine generates a different PKG_MIRROR_HASH from what Felix uploaded the other day. After receiving Felix file, both have indeed different hashes, however when unpackaged via `xz -d` both have the same tarball content. Below the checksums to compare: a62bef497078c7b825f11fc8358c1a43f5db3e6d4b97812044f7653d60747d5b dl/unetd-2024.03.31~80645766.tar.xz fbdac59581742bf208c18995b1d69d9848c93bfce487e57ba780d959e0d62fc4 dl/unetd-2024.03.31~80645766_felix.tar.xz After unpacking: a7189cae90bc600abf3a3bff3620dc17a9143be8c27d27412de6eb66a1cf1b7d dl/unetd-2024.03.31~80645766.tar a7189cae90bc600abf3a3bff3620dc17a9143be8c27d27412de6eb66a1cf1b7d dl/unetd-2024.03.31~80645766_felix.tar The tarball with the wrong hash was accidentally generated without the xz revert to version 5.4.6 Signed-off-by: Paul Spooren <mail@aparcar.org>
* unetd: update to Git HEAD (2024-03-31)Felix Fietkau2024-03-31
| | | | | | | | | | | | | 52144f723bec pex: after receiving data update req, notify peer of local address/port 29aacb9386e0 pex: track indirect hosts (reachable via gateway) as peers without adding them to wg 48049524d4fc pex: do not send peer notifications for hosts with a gateway 12ac684ee22a pex: do not query for hosts with a gateway 203c88857354 pex: fix endian issues on config transfer a29d45c71bca network: fix endian issue in converting port to network id cbbe9d337a17 unet-cli: emit id by default 806457664ab6 unet-cli: strip initial newline in usage message Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: fix Argument list too long build errorRobert Marko2024-03-25
| | | | | | | | | | | | | | | Currently, both CI and local builds of wpa-supplicant will fail with: /bin/sh: Argument list too long Its happening as the argument list for mkdir in build.rules is too large and over the MAX_ARG_STRLEN limit. It seems that recent introduction of APK compatible version schema has increased the argument size and thus pushed it over the limit uncovering the issue. Fixes: e8725a932e16 ("treewide: use APK compatible version schema") Signed-off-by: Robert Marko <robimarko@gmail.com>
* treewide: use APK compatible version schemaPaul Spooren2024-03-22
| | | | | | | | | | | | | | | | | Different from OPKG, APK uses a deterministic version schema which chips the version into chunks and compares them individually. This enforces a certain schema which was previously entirely flexible. - Releases are added at the very and end prefixed with an `r` like `1.2.3-r3`. - Hashes are prefixed with a `~` like `1.2.3~abc123`. - Dates become semantic versions, like `2024.04.01` - Extra tags are possible like `_git`, `_alpha` and more. For full details see the APK test list: https://gitlab.alpinelinux.org/alpine/apk-tools/-/blob/master/test/version.data Signed-off-by: Paul Spooren <mail@aparcar.org>
* umdns: fix PKG_MIRROR_HASHDaniel Golle2024-03-20
| | | | | | | | PKG_MIRROR_HASH was accidentally generated with already APK-adapted version string in the filename. That can't work (yet). Regenerate and hash the file with the currently used version scheme to fix that. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* umdns: update to git HEADDaniel Golle2024-03-20
| | | | | | | | | e91ed40 ubus: assume that the service iface can be NULL 4094a3c interface: remove unused peer field 8a0c9db interface: add missing cache cleanup on interface free 3b341f4 add the ability to announce additional hostnames Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* umdns: add /etc/umdns/ to mount namespace jailDaniel Golle2024-03-20
| | | | | | | Make sure /etc/umdns/ is accessiable for the umdns process if it exists and umdns is run with umdns.@umdns[0].jail='1'. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* dnsmasq: Backport 2 upstream patchesHauke Mehrtens2024-03-20
| | | | | | | These two patches are fixing minor problems with DNSSEC found shortly after the dnsmasq 2.90 release. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* dnsmasq: reset PKG_RELEASERobert Marko2024-03-13
| | | | | | | dnsmasq was recently updated to 2.90, but PKG_RELEASE was not reset to 1. Fixes: 838a27f64f56 ("dnsmasq: version 2.90") Signed-off-by: Robert Marko <robimarko@gmail.com>
* lldpd: update URLPaul Donald2024-03-12
| | | | | | update Makefile URL Signed-off-by: Paul Donald <newtwen@gmail.com>
* lldpd: shellcheck fixesPaul Donald2024-03-12
| | | | | | | | No functionality/behaviour changes; code is synonymous Tested on: 22.03.6 Signed-off-by: Paul Donald <newtwen@gmail.com>
* lldpd: implement lldp_policy parameterPaul Donald2024-03-12
| | | | | | | | | | | | | | For certain lldp_class scenarios (2 & 3) a policy must be set also. Class 4 is default, although it's good to handle the policy eventuality. Here, set a default lldp_policy for all lldp_class scenarios. Any lldp_policy can now be set. Depends on PR #14584 (which introduced an `if` block) Tested on 22.03.5, 22.03.6 Signed-off-by: Paul Donald <newtwen@gmail.com>
* lldpd: Implement location parameterPaul Donald2024-03-11
| | | | | | | | | | | | | | | | | Previously only partially implemented. After commit 5007f488bb5e1b556052ef246bd3822fed8d09d2 lldp_location was never removed Now, add the value of lldp_location to the generated config. The location param has a few syntaxes, so the config acquires the first usage from the man page: 'address country EU' Supplementary fix for PR #14193 (this param was included in the original PR #13018 but the lldp_location fixes were absent from PR #14193). Tested on 22.03.5, 22.03.6 Signed-off-by: Paul Donald <newtwen@gmail.com>
* lldpd: fix error "sh: XXXms: bad number"Paul Donald2024-03-11
| | | | | | | | | | | | from commit 3ce909914a12647bec52bcee0a162dd6d158a4f6 The lldpd man page says that "configure lldp tx-interval" can specify an interval value in milliseconds by appending a "ms" suffix to the figure. Thus mandating string handling, and not integer comparison. Tested on 22.03.5 Signed-off-by: Paul Donald <newtwen@gmail.com>
* lldpd: refactor out ifaces derivation; reuse functionPaul Donald2024-03-11
| | | | | | | | | | | | | | | from commit 909f0630663d7ae1471c76154516e3299992a150 Now pass two params to get_config_cid_ifaces() for: cid_interface interface Each of which is a CSV of interfaces. Tested on 22.03.5 Signed-off-by: Paul Donald <newtwen@gmail.com>
* lldpd: remove unneeded quotesPaul Donald2024-03-11
| | | | | | | | from commit a5f715da713304972467612d6934130ce3aa2837 Tested on 22.03.5 Signed-off-by: Paul Donald <newtwen@gmail.com>
* lldpd: remove unneeded quotes and variable quotingPaul Donald2024-03-11
| | | | | | | | | | | | | | | | | | | | from commit ac771313ebedd2c4bfda8adef47650d45d77c32d portidsubtype takes 1 of 2 possible keywords which do not need quoting: configure lldp portidsubtype ifname | macaddress The third keyword 'local' is used in the syntax when individual ports are being defined: configure [ports ethX [,…]] lldp portidsubtype local value When this syntax is used, quoting is useful (see test cases for lldpd). In the init file, the 'local' syntax is unused. Tested on 22.03.5 Signed-off-by: Paul Donald <newtwen@gmail.com>
* lldpd: remove unneeded quotes and variable quotingPaul Donald2024-03-11
| | | | | | | | | | | | | from commit c98ee4dbb3db0f064d990941cdd82e872da76946 agent-type takes 1 of 3 possible keywords which do not require quoting: configure lldp agent-type nearest-bridge | nearest-non-tpmr-bridge | nearest-customer-bridge Tested on 22.03.5 Signed-off-by: Paul Donald <newtwen@gmail.com>
* lldpd: remove unneeded quotes and variable quotingPaul Donald2024-03-11
| | | | | | | | | | from commit 3ce909914a12647bec52bcee0a162dd6d158a4f6 'capabilities enabled x' where x is a string of CSV Tested on 22.03.5 Signed-off-by: Paul Donald <newtwen@gmail.com>
* lldpd: remove unneeded quotesPaul Donald2024-03-11
| | | | | | | | from commit 3ce909914a12647bec52bcee0a162dd6d158a4f6 Tested on 22.03.5 Signed-off-by: Paul Donald <newtwen@gmail.com>
* lldpd: remove unneeded quotes and variable quotingPaul Donald2024-03-11
| | | | | | | | from commit 24176a6bdd8f26040a97960868fd0d9ee968d695 Tested on 22.03.5 Signed-off-by: Paul Donald <newtwen@gmail.com>
* lldpd: fix a paste errorPaul Donald2024-03-11
| | | | | | | | | | from commit 1be2088a5247b2cfabe8be991c1e52ddaf780a16 The original PR #13018 did not exhibit this. Tested on 22.03.5 Signed-off-by: Paul Donald <newtwen@gmail.com>
* lldpd: spell fixesPaul Donald2024-03-11
| | | | | | | | Supplementary fix for PR #14193 Tested on 22.03.5 Signed-off-by: Paul Donald <newtwen@gmail.com>
* lldpd: fix -k 'lldp_no_version' rowPaul Donald2024-03-11
| | | | | | | | | Supplementary fix for PR #14193 and commit b67182008fd124706be0ec3ce67347447554ffd5 Tested on 22.03.5 Signed-off-by: Paul Donald <newtwen@gmail.com>
* dnsmasq: version 2.90Nathaniel Wesley Filardo2024-03-11
| | | | | | | | | | | Bump to 2.90 to get upstream's fix for DNSSEC KeyTrap (CVE-2023-50387, CVE-2023-50868) among many other goodies and fixes (notably, upstream 568fb024... fixes a UAF in cache_remove_uid that was routinely crashing dnsmasq in my deployment). Catch up our 200-ubus_dns.patch, too. Signed-off-by: Nathaniel Wesley Filardo <nwfilardo@gmail.com>
* umdns: prevent a few 'uci: Entry not found'Paul Donald2024-02-27
| | | | | | pass '-q' switch to uci to prevent spurious output Signed-off-by: Paul Donald <newtwen@gmail.com>
Powered by cgit, Themed by Ted Yin.