Adjust the variant definition so that DEFAULT_VARIANT is only applied
to the full variant.
Set the title of the full variant to 'full' for menuconfig.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
The initial EPS is stored on the modem side. When establishing a connection,
it must therefore be deleted if no EPS has been configured. This is because
the system does not know whether one was configured previously.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
The pppd supports the option to configure the name of the network interface
at startup using the ifname option.
The pppd can overwrite the name of the network interface at startup using
the 'ifname' configuration option. If this option is not specified, the new
network interface is created according to the following scheme:
ppp<number>, e.g. ppp0, ppp1 and so on. This can therefore change with
every start if the number has been already assigned to another ppp connection.
In order to always get the same interface name with the modemmanger proto via
ppp, it is created according to the new scheme by setting the 'ifname':
ppp-<uci network interface name>, e.g. ppp-wwan.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
To prevent the keepalived service from starting if there is no valid
configuration yet, the new option enabled is added. This must be set to
true for keepalived to start.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Only add the first two pieces of information to the configuration file if
there is a valid '/etc/config/keepalived'.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Before keepalived version '2.3.0' the compilation was not reproducable
because the compile date and other information has been added to the binary.
Starting with version '2.3.0', there is a new compilation option
'--enable-reproducible-build' that makes the binary reproducible.
The data that prevented this has been moved to a separate file,
'/etc/keepalived/keepalived.config-opts'.
This commit enables the reproducable build.
[1] 30d2f75978
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Bugfixes:
* Fixed infinite loop triggered by OCSP URL parsing errors (thx to Richard Könning for reporting).
* Fixed OPENSSL_NO_OCSP build issues (thx to Dmitry Mostovoy for reporting).
* Fixed default curve selection in FIPS mode with OpenSSL 3.4+.
* Fixed tests with modern Python versions.
* Fixed tests with multiple OpenSSL versions installed.
Features:
* Added provider URI support for "cert" and "key" options.
* Added new "CAstore" service-level option (OpenSSL 3.0+).
* Added "provider" (OpenSSL 3.0+), "providerParameter" (OpenSSL 3.5+), and "setEnv" global options.
* Key file/URI path added to passphrase prompt on Unix.
* PKCS#11 provider installed on Windows.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Bugfixes:
* Fixed a stapling cache deallocation crash.
* Fixed "redirect" with protocol negotiation.
Features:
* "protocolHost" support for "socks" protocol clients.
* More detailed logs in OpenSSL 3.0 or later.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Bugfixes
* Fixed a memory leak while reloading stunnel.conf sections with
"client=yes" and "delay=no".
* Fixed TIMEOUTocsp with values greater than 4.
* Fix the IPv6 test on a non-IPv6 machine.
Features
* HELO replaced with EHLO in the post-STARTTLS SMTP protocol negotiation
* OCSP stapling fetches moved away from server threads.
* improved client-side session resumption.
* Added support for the mimalloc allocator.
* Check for protocolHost moved to configuration file processing for the
client-side CONNECT protocol.
* Clarified some confusing OpenSSL's certificate verification error messages.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
The '/etc/init.d/acme start' crontab migration
should also delete the existing
'/etc/init.d/acme start' line.
Otherwise, on every sysupgrade that carries
forward existing configurations, a new
'0 0 * * * /etc/init.d/acme renew' line is
added to the crontab.
Furthermore, do not add an 'acme renew' crontab
line if it already exists.
Signed-off-by: Satadru Pramanik, DO, MPH, MEng <satadru@gmail.com>
Bump to latest release and removed upstreamed patch.
Resulting libs give a fully functional snort3 which was built against
this new version.
Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150 based box)
Signed-off-by: John Audia <therealgraysky@proton.me>
IPv6 via PPPoE often receives a prefix, not an address. In that case
mwan3_get_src_ip would not find an address and fall back to ::. However
in case of multiple IPv6 upstreams, this no longer means a ping (such as
done by uptime check) succeeds, for there are multiple addresses.
With this, mwan3 can effectively load-balance/fail-over on a PPPoE IPv6
prefix and a secondary (LTE) acquired /64 without immediately disabling
the IPv6 prefix interface as soon as the secondary IPv6 interface comes
up.
I think this change is also a fix to #26690
but I'm not 100% sure of that.
Signed-off-by: Fabian Groffen <grobian@bitzolder.nl>
`pq' yields with GNU sed:
sed: -e expression #1, char 15: extra characters after command
so, make q a separate command instead.
busybox accepts this too, and still returns only the first match (q
quits processing)
Signed-off-by: Fabian Groffen <grobian@bitzolder.nl>
The tiny version disables tailscale by default for small package size.
OpenWrt also has the tailscale package as an alternative. We prefer
to keep the base version has the same build tags with the upstream
releases for compatibility.
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
3.3.9 release includes the following security fix of default gems:
- CVE-2025-24294: Possible Denial of Service in resolv gem
And the following fixes for build issues:
- GCC 15.1
- Visual Studio 2022 Version 17.14
3.3.7 and 3.3.8 are routine update that includes minor bug fixes.
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
libtorrent only links to boost headers since boost 1.69.
Remove boost-system from the dependencies and add boost as build
dependency.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
- Use GitHub for sources URL
- Remove autoreconf fixup (it works out-of-the-box)
- Remove squid-mod-cachemgr package since cachemgr.cgi was removed upstream
- Rename ac_cv_epoll_works to squid_cv_epoll_works to follow upstream
- Don't customize target CFLAGS and LDFLAGS (they work as is)
- Remove nettle configure patch - upstream handles it correctly now
- Remove dummy comment in config menu
Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
Looking at the official CPE dictionary [1], `cpe:/a:nginx:nginx` was
only used until 1.21.4 inclusively. Later it was renamed to
`cpe:/a:f5:nginx`, and it showed up in a few more non-contiguous
versions numbers after 1.21.4.
In all nginx security advisories [2] starting from year 2024, the CPE
ID used is `cpe:/a:f5:nginx_open_source`. This includes versions 1.25.0
and newer.
Update the CPE ID to the newest known value of `cpe:/a:f5:nginx_open_source`
used in nginx's own security advirosies/CVEs.
[1]: https://nvd.nist.gov/products/cpe
[2]: https://nginx.org/en/security_advisories.html
Signed-off-by: Roman Azarenko <roman.azarenko+gh@genexis.eu>
This project can be used with the OpenWrt SDK to generate a package
for ampr-ripd. It is intended for use only by licensed amateur radio
operators. ampr-ripd is a modified RIPv2 listener that provides
route information for ARDC IPIP Mesh tunnels.
Signed-off-by: Dan Srebnick <k2ie@k2ie.net>
Version 1.3.7 introduced a feature which moved symbols into an optional
database section[1]. Add corresponding configure args to fix the build
with our packages. This commit adds the new option to ensure client
packages (snort, rpcbind, lsof, etc.) build without error.
Build system: x86/64 (using external toolchain from snapshot)
Build-tested: x86/64
Co-authored-by: Hannu Nyman <hannu.nyman@iki.fi>
Signed-off-by: John Audia <therealgraysky@proton.me>
- Update Telegraf to v1.35.4
- Adjust GO_PKG_LDFLAGS_X to reflect upstream changes in version metadata
- Add default configuration file (Telegraf no longer includes one)
- Drop deprecated tcp_listener and udp_listener plugins from telegraf-small
- Rework how plugins for small variant are specified to reflect upstream changes
- Add -static TARGET_LDFLAGS for MIPS target to avoid R_MIPS_26 relocation errors during build
Signed-off-by: Niklas Thorild <niklas@thorild.se>
README:
* update header
Init-script:
* set an earlier start to get triggers to work
* better str_contains
* improve readability of json() by getting rid of cascading case statements
* add new errors/status messages to get_text()
* prepare get_text() for localization by switching to inline printf
* adjust shellcheck disable comments where needed
* parse unbound config for DNS hijack ports
* test if the archived cache exists on boot and proceed to use it if it does
* add trigger waiting status so that luci app can display correct status
* do not run adb_config_update on boot, speeding up trigger setup
Signed-off-by: Stan Grishin <stangri@melmac.ca>
This reverts commit 002e0559a5.
sing-box 1.12.3 is apparently buggy and crashes.
Reference to #27346 and #27339
Let's revert the upgrade.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
The lm-sensors build was failing on glibc-based targets with:
ld: cannot find -liconv: No such file or directory
which occurred because the upstream Makefile unconditionally links
against -liconv, but glibc has iconv functionality built-in and does not
provide a separate libiconv library.
I submitted the new patch upstream to fix this:
https://github.com/hramrach/lm-sensors/pull/14
This change is backward compatible based on my testing building
lm-sensors for x86/64 with glibc and again with musl after having
applied the patch.
Build system: x86/64
Build-tested: x86/64-glibc and x86/64
Run-tested: x86/64-glibc (Intel N150 based box)
Signed-off-by: John Audia <therealgraysky@proton.me>
f1f093852aba poemgr: drop prefix from json-c include
adfb382a996a poemgr: Fix missing/unused includes
27d53374601b Makefile: compile object files before linking
e07fdec5e1cf Makefile: use LDLIBS to link libraries
1e6659b786e8 Makefile: mark targets without any output
f7f147977891 Makefile: reference output file using variable
aa3ae603099a Makefile: Add missing license header
Signed-off-by: Sven Eckelmann <sven@narfation.org>
