Commit Graph

10265 Commits

Author SHA1 Message Date
Glen Huang
e36a55c9ed openssh: preserve authorized_keys
The root user is usually the user that clients ssh into with, so in most
cases its authorized_keys determines what clients are allowed to ssh
into this device. Without preserving this file, they could potentially
be locked out after upgrading.

Signed-off-by: Glen Huang <me@glenhuang.com>
2023-04-25 07:23:01 +03:00
Glen Huang
0436897323 strongswan: add missing PKG_MOD_AVAILABLE
Without these charon will warn with messages like:

plugin 'kdf': failed to load - kdf_plugin_create not found and no plugin file available
plugin 'drbg': failed to load - drbg_plugin_create not found and no plugin file available

Signed-off-by: Glen Huang <me@glenhuang.com>
2023-04-24 22:40:18 +08:00
Philip Prindeville
6a3e5464ca Merge pull request #20832 from hgl/strongswan
strongswan: enable nonce unconditionally
2023-04-24 08:34:55 -06:00
Glen Huang
e67eb58312 strongswan: enable nonce unconditionally
Without nonce, charon won't start, so it's not an optional plugin. I
asked one of the strongSwan maintainers (ecdsa), and he confirmed this:

> It definitely has to be enabled unconditionally. The only other
> provider for the NONCE_GEN plugin feature is in charon-tkm, so
> completely irrelevant on OpenWrt

Signed-off-by: Glen Huang <me@glenhuang.com>
2023-04-24 15:51:28 +08:00
John Audia
fbbe30622a snort3: update to 3.1.60.0
Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>
2023-04-24 05:08:17 +08:00
Dirk Brenken
c5d9b3ded2 banip: release 0.8.4-1
* add support for a custom feeds file (/etc/banip/banip.custom.feeds). Add new or edit existing banIP feeds on your own with the integrated custom feed editor (LuCI-component
* add a new option 'ban_blockpolicy' to overrule the default bblock policy (block all chains), see readme for details
* change the feed file format and add a new ipthreat feed, see readme
* refine (debug) logging
* multiple small fixes and improvements
* readme update
* luci update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2023-04-23 22:03:09 +02:00
Andrew Sim
837c0f7f1c ksmbd-tools: update to 3.4.8 release
Changelog: https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.4.8

Maintainer: nobody
Compile tested: Mediatek filogic, Asus TUF AX4200, lastest master
Run tested: Mediatek filogic, Asus TUF AX4200, lastest master

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
2023-04-23 16:02:14 +08:00
Kirill Fertikov
d1ad585ca9 shadowsocks-libev: ACL support
Link: https://github.com/openwrt/packages/pull/20647
Signed-off-by: Kirill Fertikov <kirill.fertikov@gmail.com>
[indentation fix]
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2023-04-23 13:54:08 +08:00
Philip Prindeville
9569c7c03f Merge pull request #20857 from pprindeville/strongswan-drop-local_gateway
strongswan: local_gateway unused in swanctl.init
2023-04-22 22:58:28 -06:00
Philip Prindeville
5f3840c765 strongswan: local_gateway unused in swanctl.init
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-04-22 18:20:38 -06:00
Paul Fertser
0c10c224be treewide: remove AUTORELEASE
Automatically compute and substitute current values for all
$(AUTORELEASE) instances as this feature is deprecated and shouldn't be
used.

The following temporary change was made to the core:

diff --git a/rules.mk b/rules.mk
index 57d7995d4fa8..f16367de87a8 100644
--- a/rules.mk
+++ b/rules.mk
@@ -429,7 +429,7 @@ endef
 abi_version_str = $(subst -,,$(subst _,,$(subst .,,$(1))))

 COMMITCOUNT = $(if $(DUMP),0,$(call commitcount))
-AUTORELEASE = $(if $(DUMP),0,$(call commitcount,1))
+AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile))

 all:
 FORCE: ;

And this command used to fix affected packages:

for i in $(cd feeds/packages; git grep -l PKG_RELEASE:=.*AUTORELEASE | \
                              sed 's^.*/\([^/]*\)/Makefile^\1^';);
do
  make package/$i/download
done

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2023-04-21 22:46:58 +02:00
Christian Marangi
8b144f0dc3 nginx: split DAV_EXT from standard nginx DAV config
Split DAV_EXT from standard nginx DAV config as additional WebDAV
methods are provided by an external module.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-04-20 07:45:30 +02:00
Florian Eckert
e14a7073b6 Merge pull request #20846 from johnfzc/sscep-license
scep: fix license
2023-04-20 08:16:34 +02:00
Peter van Dijk
8686e69765 pdns-recursor: update to 4.8.4
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2023-04-19 17:57:01 +02:00
Peter van Dijk
b74c966c7c pdns: update to 4.7.4
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2023-04-19 17:55:26 +02:00
John Marrett
e51fb51c58 scep: fix license
Signed-off-by: John Marrett <johnf@zioncluster.ca>
2023-04-19 08:52:04 -04:00
Glenn Strauss
7fda9563de lighttpd: adjust packages for built-in modules
(.so is no longer built, but package still contains config files)

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2023-04-19 11:48:48 +08:00
Glenn Strauss
ae5135a913 lighttpd: fix package DEPENDS syntax
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
Co-authored-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-19 11:48:48 +08:00
Tianling Shen
c1019c64ea xray-core: Update to 1.8.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-19 04:12:30 +08:00
Tianling Shen
9ff57568f5 dnsproxy: Update to 0.49.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-19 04:11:52 +08:00
Josef Schlehofer
9959c3c007 Merge pull request #20826 from jefferyto/obfs4proxy-0.0.14
obfs4proxy: Update to 0.0.14
2023-04-18 16:51:55 +02:00
Peter van Dijk
39a7b4f69e dnsdist: update to 1.8.0
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2023-04-18 16:38:08 +02:00
Othmar Truniger
f8ae64cf96 knxd: bump to new upstream release 0.14.58
Signed-off-by: Othmar Truniger <github@truniger.ch>
2023-04-18 17:31:42 +03:00
Christian Marangi
0d8fc4124c znc: add push external module
Add push external module. This is very useful for an IRC Bounder as this
module permits to register various services and receive a push
notification on the registered service.

One example is attaching a telegram bot and receive notification on your
phone when an user tags you in one of the connected channels.

Bump and drop AUTORELEASE from PKG_RELEASE since we are adding a new
module.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-04-17 18:52:16 +02:00
Christian Marangi
b1d68f3c97 znc: drop playback patch and reference from github repository
We currently inclde the playback external module with a separate patch.
This is ugly and can be better handled.

Add required changes to download the external module from his own github
repository. Then create a link in the znc modules to reference the cpp
source.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-04-17 18:52:12 +02:00
Tianling Shen
8674af1b0a v2ray-core: Update to 5.4.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-17 23:27:11 +08:00
Jeffery To
0759341cd8 obfs4proxy: Update to 0.0.14
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-17 22:05:51 +08:00
Nuno Gonçalves
61c3a9a3b9 nmap: refresh patch
Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
2023-04-17 09:49:07 +01:00
Nuno Gonçalves
0563e5092c nmap: update license
Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
2023-04-15 23:54:20 +01:00
Nuno Gonçalves
43c990c43f nmap: bump to 7.93
Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
2023-04-15 23:31:49 +01:00
Stefan Weil
32af3694fc sshtunnel: fix type, case and whitespace issues
Signed-off-by: Stefan Weil <sw@weilnetz.de>
2023-04-15 16:49:30 +01:00
Tianling Shen
e43676a92f dnsproxy: Update to 0.49.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-14 00:24:48 +08:00
Tianling Shen
b8d7376411 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-14 00:24:35 +08:00
Tianling Shen
62fdfb8278 cloudflared: Update to 2023.4.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-13 03:15:49 +08:00
Josef Schlehofer
0a8fa9b8a7 Merge pull request #20795 from Payne-X6/master
knot: update to version 3.2.6
2023-04-12 20:15:55 +02:00
Dirk Brenken
d178bf5d35 banip: update 0.8.3-2
* more init fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
2023-04-12 15:31:31 +02:00
Jan Hák
bb946a19cd knot: update to version 3.2.6
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2023-04-12 11:16:04 +02:00
John Marrett
49e9c5e20d sscep: add package
Signed-off-by: John Marrett <johnf@zioncluster.ca>
2023-04-12 02:34:57 +08:00
John Audia
799f8cd6c9 snort3: update to 3.1.59.0
Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>
2023-04-11 05:22:12 +08:00
Glen Huang
d347448ffb strongswan: add support for remote cacerts
Signed-off-by: Glen Huang <me@glenhuang.com>
2023-04-10 17:16:07 +08:00
Glen Huang
08a0f7bb94 strongswan: add support for pools section
Signed-off-by: Glen Huang <me@glenhuang.com>
2023-04-10 17:16:07 +08:00
Tianling Shen
23e1348166 v2raya: Update to 2.0.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-10 03:48:23 +08:00
Andre Heider
e7d9c86503 treewide: refactor to use PKG_BUILD_FLAGS:=lto
See commit 07730ff3 "treewide: add support for "lto" in PKG_BUILD_FLAGS"
on the main repository.

Note: Some packages only added `-flto` to CFLAGS and not LDFLAGS. This
fixes it and properly enables LTO.

Signed-off-by: Andre Heider <a.heider@gmail.com>
2023-04-08 08:38:54 +02:00
Andre Heider
35f4ef76e0 treewide: refactor to use PKG_BUILD_FLAGS:=gc-sections
See commit da370098 "treewide: add support for "gc-sections" in
PKG_BUILD_FLAGS" on the main repository.

Note: This only touches packages which use all three parts
(-ffunction-sections, -fdata-sections and -Wl,--gc-sections) enabled by
this build flag. Some packages only use a subset, and these are left
unchanged for now.

Signed-off-by: Andre Heider <a.heider@gmail.com>
2023-04-08 08:38:54 +02:00
Andre Heider
565866a472 treewide: refactor to use PKG_BUILD_FLAGS:=no-mips16
See commit 5c545bdb "treewide: replace PKG_USE_MIPS16:=0 with
PKG_BUILD_FLAGS:=no-mips16" on the main repository.

Signed-off-by: Andre Heider <a.heider@gmail.com>
2023-04-08 08:38:54 +02:00
Philip Prindeville
c8e1dd7d60 Merge pull request #20731 from pprindeville/isc-dhcp-update-4.4.3-P1
isc-dhcp: Update to 4.4.3-P1
2023-04-07 12:38:30 -06:00
Philip Prindeville
5354fa5df9 Merge pull request #20730 from pprindeville/strongswan-fix-cicd-kmod
strongswan: Fix CI/CD complaints about kmod dependencies
2023-04-07 12:11:31 -06:00
Dirk Brenken
c07fae25e7 banip: release 0.8.3-1
* add the new init command 'lookup', to lookup the IPs of domain names in the local lists and update them
* significant acceleration of the domain lookup function
* multiple small fixes and improvements
* readme update
* luci update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2023-04-06 19:43:46 +02:00
Tianling Shen
04d5fa8dfc dnsproxy: Update to 0.48.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-06 18:49:30 +08:00
Zhang Rui
5c32126d39 tinyproxy: Update to 1.11.1
Signed-off-by: Zhang Rui <rui.crater@gmail.com>
2023-04-05 23:47:30 +08:00