Commit Graph

2768 Commits

Author SHA1 Message Date
Luka Perkov
dc9e334239 Merge pull request #4434 from sartura/sysrepo-timeouts
sysrepo: larger timeouts
2017-06-07 09:47:32 +02:00
Hannu Nyman
29b32556c2 Merge pull request #4449 from wvdakker/master
shorewall(6)-lite: Fixed build-error.
2017-06-07 10:19:40 +03:00
W. van den Akker
adc918d15c Fixed shorewall6-lite build error.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-06-07 07:51:44 +02:00
Hannu Nyman
6950c73a7c Merge pull request #4433 from aTanW/master
ipsec: add ability to configure "none" SA
2017-06-06 09:53:56 +03:00
Florian Fainelli
fdd3f3f7f9 smartsnmpd: Properly pass down TARGET_CPPFLAGS
The smartsnmpd SConstruct file only accepts setting CFLAGS and does not
use CPPFLAGS, so pass both down using CFLAGS.

This fixes build errors with external toolchains that don't
automatically search for headers in $(STAGING_DIR).

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
2017-06-05 17:18:51 -07:00
Florian Fainelli
bb1c950c52 tgt: Pass down TARGET_CPPFLAGS and TARGET_LDFLAGS
Make sure we pass down TARGET_CPPFLAGS and TARGET_LDFLAGS to fix build
with external toolchains that don't automatically search for headers and
libraries in $(STAGING_DIR).

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
2017-06-05 17:18:51 -07:00
Florian Fainelli
20891e8d42 tgt: Drop dependency against KERNEL_DIRECT_IO
This was removed in LEDE commit 0b7ed65cec8084bb98ae0e2758b7aca6c447cd4b
("kernel: remove out of tree direct-io disable hack")

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
2017-06-05 17:18:51 -07:00
Alexandru Ardelean
2675e6813c netatalk: fix config files permissions
After checking in the ipkg-install dir of netatalk,
it seems that the permissions it sets to the conf-files
are 644.

 # ls -la lede/build_dir/target-mips_24kc_musl/netatalk-3.1.11/ipkg-install/etc
 -rw-r--r-- 1 sandu sandu   226 iun  5 20:53 afp.conf
 -rw-r--r-- 1 sandu sandu  1948 iun  5 20:53 dbus-session.conf
 -rw-r--r-- 1 sandu sandu 25037 iun  5 20:53 extmap.conf

While the Package/netatalk/install build rule overrides
them to 600.

According to
* https://github.com/openwrt/packages/issues/4318
* https://forum.lede-project.org/t/help-with-apple-filesharing-protocol-for-time-machine/3259/5
this is a problem in some setups.

So, this patch changes them to what the netatalk
package creators intended initially (i.e. 644).

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-06-05 21:02:09 +03:00
Hauke Mehrtens
b83d982bcd Merge pull request #3769 from wvdakker/master
Added Shorewall(6)-lite.
2017-06-05 18:51:18 +02:00
Philip Prindeville
9fdba25e04 openssh: if we don't generate a dsa key we shouldn't look for it
The earlier commit ea119211b2 removed 'dsa' as one of the ssh_host_*_key
types that got generated.  Problem was that it didn't remove that key
as one of the paths that the server looks for by default.  As a
consequence, your log file might fill up with messages like:

    2017-06-01T15:43:07-06:00 openwrt sshd[31929]: error: Could not load host key: /etc/ssh/ssh_host_dsa_key

The patch is forunately trivial.  Don't set the path for the dsa
key file in the server configuration.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-06-05 18:22:04 +02:00
Daniel Golle
d96c092a00 Revert "The earlier commit ea119211b2 removed 'dsa' as one of the ssh_host_*_key"
The author (@pprindeville) of the original commit noted that the wrong
commit was picked, see
325b7d2cd2 (commitcomment-22387528)
"Err... looks like the wrong fix got committed. I was hoping that this
commit d902e5d would have gone in instead."

This reverts commit 325b7d2cd2.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-06-05 18:22:03 +02:00
W. van den Akker
7c8990cac5 Add package shorewall(6)-lite.
Bump to version 5.1.4.1

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-06-05 17:54:59 +02:00
Alexandru Ardelean
820d998a97 netatalk: switch maintainer to me
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-06-05 18:25:56 +03:00
Daniel Golle
bef4c67bd1 Merge pull request #4402 from commodo/netatalk-upgrade
netatalk: upgrade to version 3.1.11
2017-06-05 17:08:33 +02:00
Daniel Golle
92b2a187bb Merge pull request #4099 from dangowrt/freeradius3-ldap
freeradius3: build and package support for LDAP
2017-06-05 16:51:38 +02:00
Hauke Mehrtens
f243d7c2bc Merge pull request #4284 from bmork/conserver
conserver: add advanced serial console package
2017-06-05 15:33:08 +02:00
Daniel Golle
3548a8b2c2 Merge pull request #4423 from pprindeville/lighttpd-use-procd
lighttpd: use procd-based init.d script
2017-06-05 14:47:32 +02:00
Antonio Paunovic
a8dbabeaf9 sysrepo: larger timeouts
Signed-off-by: Antonio Paunovic <antonio.paunovic@sartura.hr>
2017-06-05 11:09:35 +00:00
Hannu Nyman
28e97784b7 Merge pull request #4419 from danrl/wireguard
wireguard: version bump
2017-06-05 09:20:12 +03:00
aTanW
df0e0bc17b ipsec: add ability to configure "none" SA
Also added myself as co-maintainer

Signed-Off-By: Vitaly Protsko <villy@sft.ru>
---
 Makefile           |    5 +++--
 files/functions.sh |   35 +++++++++++++++++++++++++++++++++++
 files/racoon       |    4 ++++
 files/racoon.init  |   12 ++++++++----
 4 files changed, 50 insertions(+), 6 deletions(-)
2017-06-05 08:25:09 +03:00
Florian Fainelli
4eec08f225 fossil: Explicitly link with libm
Fixes the following build error with an external toolchain:

./bld/sqlite3.o: In function `fts5Bm25Function':
sqlite3.c:(.text+0x27234): undefined reference to `log'
./bld/piechart.o: In function `piechart_render':
piechart_.c:(.text+0x430): undefined reference to `sincos'
piechart_.c:(.text+0x47c): undefined reference to `sincos'
piechart_.c:(.text+0x548): undefined reference to `sincos'
collect2: error: ld returned 1 exit status
src/main.mk:526: recipe for target 'fossil' failed
make[3]: *** [fossil] Error 1

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
2017-06-04 19:48:46 -07:00
Florian Fainelli
b493f36887 linuxptp: Remove unnecessary netdb.h includes
This backports a patch that has been accepted upstream in linuxptp:
8b61aa2c3f3103db1d4ca1d1e49bb4f8831c1abf ("udp: Avoid including
netdb.h") to fix build errors with external glibc toolchains that
provide rpc/types.h.

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
2017-06-04 14:01:27 -07:00
Bjørn Mork
f42caaffb8 conserver: add advanced serial console package
Conserver is an application that allows multiple users to use
serial consoles at the same time, with logging.  It has a client-
server design which makes it easy to manage a distributed set
of serial consoles.  Logging makes post-crash analyses easier.

Signed-off-by: Bjørn Mork <bjorn@mork.no>
2017-06-04 11:22:43 +02:00
Hauke Mehrtens
93811f98a0 Merge pull request #4220 from p-wassi/atftp
net/atftp: update source URL and checksum
2017-06-04 00:29:40 +02:00
Ted Hess
870a621107 Merge pull request #4427 from diizzyy/patch-57
net/socat: Update to 1.7.3.2
2017-06-03 15:23:22 -04:00
Peter Wagner
325b7d2cd2 The earlier commit ea119211b2 removed 'dsa' as one of the ssh_host_*_key
types that got generated.  Problem was that it didn't remove that key
as one of the paths that the server looks for by default.  As a
consequence, your log file might fill up with messages like:

    2017-06-01T15:43:07-06:00 openwrt sshd[31929]: error: Could not load host key: /etc/ssh/ssh_host_dsa_key

The patch is forunately trivial.  Don't set the path for the dsa
key file in the server configuration.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-06-03 01:04:27 +02:00
Daniel Engberg
076eba07f4 net/socat: Update to 1.7.3.2
Update socat to 1.7.3.2
Remove SSLv3 patch, workaround added upstream
Remove inclusion of stddef.h, fix added upstream
Replace obsolete tarball hash variable with PKG_HASH

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2017-06-02 13:43:06 +02:00
Philip Prindeville
79f9f1a3ec lighttpd: use procd-based init.d script
This will allow procd to restart the service if it crashes or otherwise
exits.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2017-06-01 20:12:58 -06:00
Luka Perkov
ea7046d634 Merge pull request #4403 from sartura/symlink-soversion-sysrepo
sysrepo: modify copy of .so files
2017-06-01 15:53:35 +02:00
Luka Perkov
c3dad17728 Merge pull request #4388 from sartura/netopeer2-dependency
sysrepo: add patch for disabling autostart
2017-06-01 15:53:11 +02:00
danrl
a9f39cff42 wireguard: version bump
From upstreams changelog:
 This rather large snapshot touches quite a few sensitive areas, so I'm
  releasing it now rather than later to receive feedback on any possible issues.
  It also contains fixes, so everybody should upgrade.

  * man: fix psk mention in wg-quick man page
  * man: update wg-quick(8) to show Debian resolvconf braindamage

  Documentation cleanups.

  * wg-quick: use src routing for default routes in v6

  ip-rule(8) doesn't do the right thing with source addresses, unless we
  explicitly set it inside the route. This fixes wg-quick on IPv6 systems.

  * curve25519: actually, do some things on heap sometimes
  * curve25519: align the basepoint to 32 bytes
  * curve25519: add NEON versions for ARM
  * data: enable BH during parallel crypto on ARM/NEON
  * chacha20poly1305: move constants to rodata
  * chacha20poly1305: add NEON versions for ARM and ARM64

  We now have faster primitives on ARM and ARM64 processors, which should
  improve performance.

  * handshake: process in parallel

  Handshakes are now processed in parallel using all cores, which should improve
  throughput during a storm.

  * noise: no need to store ephemeral public key
  * noise: precompute static-static ECDH operation

  We can precompute the ECDH(s, s) calculation, which improves handshake
  initiation message performance by double.

  * style: spaces after for loops
  * peer: use iterator macro instead of callback

  The most unreadable C ever produced. It might be wise to find a sexier-looking
  alternative at some point.

  * compat: remove warning for < 4.1
  * compat: ship padata if kernel doesn't have it

  The usual array of annoying compat things.

  * rust test: convert screech test to snow
  * rust test: add icmp ping

  We now use Jake's snow library for Noise in the test, which we've expanded to
  complete a ping.

  * config: do not error out when getting if no peers
  * tools: allow creating device with no peers

  Fixing some small things in the tool/config interaction.

  * device: keep going when share_check fails
  * routingtable: remove unnecessary check in node_placement()
  * config: it's faster to memcpy than strncpy
  * timers: fix typo in comment

  Nits.

  * debug: print interface name in dmesg

  For those who compile with `make debug`, you'll be happy to see a bit better
  information in dmesg.

  * timers: rework handshake reply control flow
  * timers: the completion of a handshake also is on key confirmation
  * timers: reset retry-attempt counter when not retrying

  Tightening up our timer implementation, which is quite important.

Signed-off-by: Dan Luedtke <mail@danrl.com>
2017-06-01 10:54:25 +02:00
Hannu Nyman
d1936da414 Merge pull request #4400 from starcms/master
net/dnscrypt-proxy: add support for LogLevel; update dnscrypt-proxy-resolvers
2017-05-31 18:57:40 +03:00
starcms
a032c44a50 net/dnscrypt-proxy: add LogLevel support, update dnscrypt-resolvers.csv,
bump version number.

Signed-off-by: Chris Saaidi <starcms@gmail.com>
2017-05-30 19:56:27 -05:00
Christian Schoenebeck
80ae569ba7 radicale: update to version 1.1.3
update to version 1.1.3

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2017-05-30 21:47:15 +02:00
Stijn Tintel
4660504c61 strongswan: fix typo
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-05-30 19:25:54 +02:00
Stijn Tintel
916f14aacf Merge pull request #4208 from dedeckeh/pr-netsnmp-fw
net-snmp: add inbound firewall rule support
2017-05-30 16:01:40 +02:00
Stijn Tintel
a268689adc strongswan: add curve25519 plugin
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-05-30 15:14:13 +02:00
Stijn Tintel
960006be50 strongswan: bump to 5.5.3
Fixes CVE-2017-9022, CVE-2017-9023.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-05-30 15:14:04 +02:00
Hannu Nyman
9334f1e787 Merge pull request #4381 from commodo/ovs-fix
openvswitch: fix build for ovs python libs & related packages
2017-05-30 10:49:09 +03:00
Antonio Paunovic
0a45a4e85b sysrepo: modify copy of .so files
Signed-off-by: Antonio Paunovic <antonio.paunovic@sartura.hr>
2017-05-29 12:07:00 +00:00
Alexandru Ardelean
59ec879f11 netatalk: upgrade to version 3.1.11
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-05-29 14:40:52 +03:00
Karl Palsson
f49e1138f1 net/mosquitto: bump to 1.4.12 for CVE-2017-7650
Dot release, primarily due to CVE-2017-7650 but also rolls up some
earlier patches.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2017-05-29 10:49:08 +00:00
Thomas Heil
d1d28ed9de Merge pull request #4379 from val-kulkov/nginx-package
nginx: update to 1.12.0, the latest stable version
2017-05-28 19:05:10 +02:00
Damiano Renfer
c3b0a36db4 net/dnscrypt-proxy: fix block_ipv6 param in init script
Signed-off-by: Damiano Renfer <damiano.renfer@gmail.com>
2017-05-27 11:12:47 +02:00
Peter Wagner
a4fbcb44fe git: update to 2.13.0
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-05-27 02:34:29 +02:00
Antonio Paunovic
f531ca0dd9 sysrepo: bump PKG_RELEASE version
Signed-off-by: Antonio Paunovic <antonio.paunovic@sartura.hr>
2017-05-26 15:37:12 +00:00
Antonio Paunovic
48ab73fafc sysrepo: add patch for diabling autostart
Signed-off-by: Antonio Paunovic <antonio.paunovic@sartura.hr>
2017-05-26 15:01:46 +00:00
Antonio Paunovic
2f7782e241 netopeer2-keystored: add new dependency
Signed-off-by: Antonio Paunovic <antonio.paunovic@sartura.hr>
2017-05-26 14:10:03 +00:00
Alexandru Ardelean
3b8c6e01b1 openvswitch: disable built-in kernel module build
Since we're using the kernel's module, this is
un-necessary.
Should speed up the build a bit.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-05-25 16:31:27 +03:00
kuoruan
9c24d46ce7 webui-aria2: Bump to 2017-05-21
Signed-off-by: kuoruan <kuoruan@gmail.com>
2017-05-25 11:35:37 +08:00