Commit Graph

11442 Commits

Author SHA1 Message Date
Stan Grishin 474587a1f4 adblock-fast: bugfix: unbound-related fixes
* include `server:` directive at the top of unbound file
* update unbound-related outputGzip variable to include full path
* return always_nxdomain for blocked domains
* also update copyright stamp/license

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-04-21 14:06:58 +00:00
Stan Grishin d7d1743c83 unbound: pull in adblock-fast generated adb_list
* adblock-fast can generate the compatible adb_list-file, but it's
  only pulled if net/adblock installed, this patch also pulls in the
  adb_list file if net/adblock-fast is installed.
* also bump PKG_RELEASE

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-04-21 13:58:39 +00:00
Josef Schlehofer 46c8b621b0
Merge pull request #23969 from dibdot/curl
curl: fix/bump PKG_RELEASE, remove maintainer
2024-04-20 19:03:20 +02:00
Dirk Brenken d5a13478eb
Merge pull request #23963 from dibdot/banIP
banip: release 0.9.5-1
2024-04-20 13:05:05 +02:00
Dirk Brenken fa80fefe22
banip: release 0.9.5-1
* added a DDoS protection rules in a new pre-routing chain to prevent common ICMP, UDP and SYN flood attacks and drop spoofed tcp flags & invalid conntrack packets, flood tresholds are configured via 'ban_icmplimit' (default 10/s), 'ban_synlimit' (default 10/s) and 'ban_udplimit' (default 100/s)
* the new pre-routing rules are tracked via named nft counters and are part of the standard reporting, set 'ban_logprerouting' accordingly
* block countries dynamically by Regional Internet Registry (RIR)/regions, e.g. all countries related to ARIN. Supported service regions are: AFRINIC, ARIN, APNIC, LACNIC and RIPE, set 'ban_region' accordingly
* it's now possible to always allow certain protocols/destination ports in wan-input and wan-forward chains, set 'ban_allowflag' accordingly - e.g. ' tcp 80 443-445'
* filter/convert possible windows line endings of external feeds during processing
* the cpu core autodetection is now limited to max. 16 cores in parallel, set 'ban_cores' manually to overrule this limitation
* set the default nft priority to -100 for banIP input/forward chains (pre-routing is set to -150)
* update readme
* a couple of bugfixes & performance improvements
* removed abandoned feeds: darklist, ipblackhole
* added new feeds: becyber, ipsum, pallebone, debl (changed URL)
* requires a LuCI frontend update as well (separate PR/commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2024-04-20 12:43:37 +02:00
Hannu Nyman 767b3f2ea8 geoip-shell: remove extra r from PKG_RELEASE
Remove the unnecessary 'r' from PKG_RELEASE as it is
added automatically by the build system to the final versioning.

(Current version leads into  'geoip-shell_0.5-rr2_all.ipk')

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2024-04-20 09:21:07 +03:00
Dirk Brenken afae2776e9
curl: fix/bump PKG_RELEASE, remove maintainer
* make PKG_RELEASE numeric again
* made a release bump due to  a newly added patch (see de4ef9d169 for details)
* remove maintainer (as requested in #23890

Signed-off-by: Dirk Brenken <dev@brenken.org>
2024-04-20 07:41:20 +02:00
Paul Donald b2742ed05d ntpd: update to version 4.2.8p17
Also some spell fixes for README.md

Drop patch-0001 - ntpd >= 4.2.8p16 patched this behaviour. See:

https://bugs.ntp.org/show_bug.cgi?id=3741 (and the linked diff there)
d2a7faef2f

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-04-20 11:15:11 +08:00
Rosen Penev 1bac5b386d udpspeeder: use local tarballs
Simpler, smaller, and avoids PKG_UNPACK.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-04-19 15:54:27 -07:00
Zephyr Lykos 8982c3e61a tailscale: Update to 1.64.1
<https://github.com/tailscale/tailscale/releases/v1.64.1>

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
2024-04-19 14:19:47 -07:00
krant 2650de4686 socat: fix compile error when ccache is enabled
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-04-19 14:19:25 -07:00
Maxim Storchak 8951378aec rsync: support xxhash and lz4
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2024-04-19 21:51:40 +08:00
Rui Salvaterra a7172aec50
Merge pull request #23943 from rsalvaterra/tor-bump
tor: update to 0.4.8.11 stable
2024-04-19 12:36:32 +01:00
Jo-Philipp Wich 3d99f1d2f1
Merge pull request #23821 from friendly-bits/add_geoip-shell
geoip-shell: add package
2024-04-19 13:16:39 +02:00
Tianling Shen c1e6fbbcb0 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-04-19 10:56:03 +08:00
Tianling Shen d7e63d4e24 v2ray-geodata: make PKG_RELEASE numeric again
According to the documentation[1] 'PKG_RELEASE' should be a number,
so polulate the APK-style 'r' via 'VERSION' instead.

1. https://openwrt.org/docs/guide-developer/packages#buildpackage_variables

Fixes: 30796c5948 ("v2ray-geodata: use APK compatible version schema")
Reported-by: Sean Khan <datapronix@protonmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-04-19 10:56:03 +08:00
Felix Fietkau de4ef9d169 curl: fix SSL init with mbedtls 3.6
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2024-04-18 21:58:13 +02:00
Sean Khan 660aa8091f nginx: Use zst + APK style packaging for modules
Generates git tarballs in the new APK style format:

Note that `SOURCE_DATE` was added and need to be updated
as the commit date of the commit hash

Before:
```
nginx-mod-geoip2-1cabd8a1f68ea3998f94e9f3504431970f848fbf.tar.xz
nginx-mod-headers-more-bea1be3bbf6af28f6aa8cf0c01c07ee1637e2bd0.tar.xz
nginx-mod-brotli-25f86f0bac1101b6512135eac5f93c49c63609e3.tar.xz
nginx-mod-rtmp-f0ea62342a4eca504b311cd5df910d026c3ea4cf.tar.xz
nginx-mod-ts-ef2f874d95cc75747eb625a292524a702aefb0fd.tar.xz
nginx-mod-naxsi-d714f1636ea49a9a9f4f06dba14aee003e970834.tar.xz
nginx-mod-lua-c89469e920713d17d703a5f3736c9335edac22bf.tar.xz
nginx-mod-lua-resty-core-2e2b2adaa61719972fe4275fa4c3585daa0dcd84.tar.xz
nginx-mod-lua-resty-lrucache-52f5d00403c8b7aa8a4d4f3779681976b10a18c1.tar.xz
nginx-mod-dav-ext-f5e30888a256136d9c550bf1ada77d6ea78a48af.tar.xz
nginx-mod-ubus-b2d7260dcb428b2fb65540edb28d7538602b4a26.tar.xz
```

After:
```
nginx-mod-geoip2-2020.01.22~1cabd8a1.tar.zst
nginx-mod-headers-more-2022.07.17~bea1be3b.tar.zst
nginx-mod-brotli-2020.04.23~25f86f0b.tar.zst
nginx-mod-rtmp-2018.12.07~f0ea6234.tar.zst
nginx-mod-ts-2017.12.04~ef2f874d.tar.zst
nginx-mod-naxsi-2022.09.14~d714f163.tar.zst
nginx-mod-lua-2023.08.19~c89469e9.tar.zst
nginx-mod-lua-resty-core-2023.09.09~2e2b2ada.tar.zst
nginx-mod-lua-resty-lrucache-2023.08.06~52f5d004.tar.zst
nginx-mod-dav-ext-2018.12.17~f5e30888.tar.zst
nginx-mod-ubus-2020.09.06~b2d7260d.tar.zst
```

Run tested: aarch64, Dynalink DL-WRX36, Master Branch

Signed-off-by: Sean Khan <datapronix@protonmail.com>
2024-04-18 13:11:31 +02:00
Sean Khan caffa410ed nginx: autoload dynamic modules
In current setup, dynamic modules are not autoloaded, requiring users
to create and load additional config files.

We should assume that if a user installs additional modules, they want
them 'on' by default.

This commit does the following:

1.) generates a module load config in '/etc/nginx/modules.d' with the
    format '${module_name}'.module
    (i.e. /etc/nginx/modules.d/ngx_http_geoip2.module)
2.) deletes previous module conf for 'luci'
    /etc/nginx/modules.d/luci.module if it exists, this will prevent
    'module already loaded' errors.

The following is a portion of the final output when using the
default uci template `/etc/nginx/uci.conf.template` (via nginx-util):

```
nginx -T -c '/etc/nginx/uci.conf'

load_module /usr/lib/nginx/modules/ngx_http_brotli_filter_module.so;

load_module /usr/lib/nginx/modules/ngx_http_brotli_static_module.so;

load_module /usr/lib/nginx/modules/ngx_http_dav_ext_module.so;

load_module /usr/lib/nginx/modules/ngx_http_geoip2_module.so;

load_module /usr/lib/nginx/modules/ngx_http_headers_more_filter_module.so;

load_module /usr/lib/nginx/modules/ngx_http_lua_module.so;

load_module /usr/lib/nginx/modules/ngx_http_naxsi_module.so;

load_module /usr/lib/nginx/modules/ngx_http_ts_module.so;

load_module /usr/lib/nginx/modules/ngx_http_ubus_module.so;

load_module /usr/lib/nginx/modules/ngx_rtmp_module.so;

load_module /usr/lib/nginx/modules/ngx_stream_module.so;

load_module /usr/lib/nginx/modules/ngx_stream_geoip2_module.so;
```

Signed-off-by: Sean Khan <datapronix@protonmail.com>
2024-04-18 13:02:42 +02:00
Sean Khan 4cc682c8a4 nginx: fix geoip2 dependency on mod ngx_stream
Since the geoip2 package contains both `http` and `stream` versions. It
requires the module `ngx_stream` be installed and loaded and produces
the error:

```
2024/04/12 18:38:18 [emerg] 4402#0: dlopen()
"/usr/lib/nginx/modules/ngx_stream_geoip2_module.so" failed (Error
relocating /usr/lib/nginx/modules/ngx_stream_geoip2_module.so:
ngx_stream_complex_value: symbol not found) in
/etc/nginx/module.d/ngx_stream_geoip2.module:1 nginx: configuration file
/etc/nginx/uci.conf test failed
```

Add dependency so it's built at build time and installed automatically
by `opkg`

Signed-off-by: Sean Khan <datapronix@protonmail.com>
2024-04-18 13:00:20 +02:00
Anton Khazan fc35918026 geoip-shell: add package
Adds the geoip-shell package to OpenWrt.
geoip-shell is a flexible geoip blocker for Linux with a user-friendly command-line interface.

Signed-off-by: Anton Khazan <antonk.d3v@gmail.com>
2024-04-16 13:45:05 +02:00
Rui Salvaterra 570ee10a13 tor: update to 0.4.8.11 stable
Minor release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.11/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2024-04-16 09:28:27 +01:00
Florian Eckert 7889c520b7 keepalived: remove file sync handling for ucitrack
The ucitrack file hanlding was converted to json. Therefore this is not
needed anymore.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-04-16 08:44:55 +02:00
Stan Grishin 3886eac61c
Merge pull request #23925 from stangri/master-pbr
pbr: bugfix: fix IPv6 interface errors
2024-04-15 14:43:13 -07:00
Stan Grishin 717a800ec5 pbr: bugfix: fix IPv6 interface errors
* update license to AGPL-3.0-or-later
* rename pbr_get_gateway to pbr_get_gateway4 for better readability
* improve IPv6 "gateway" detection/display on start
* prevent IPv6 interface errors on start
* revert release format

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-04-15 19:55:27 +00:00
krant 6a400cce62 squid: update to 6.9
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-04-14 22:45:15 -07:00
Tianling Shen d9419aeabd
cloudflared: Update to 2024.4.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-04-15 13:22:56 +08:00
Tianling Shen 2439e8a8d8
dnsproxy: Update to 0.69.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-04-15 13:22:09 +08:00
dracode f28c81bae2 hcxdumptool: Update to 6.3.4
Version 6.3.4 has some important fixes for the OpenWrt community.
This version properly supports Big-Endian systems (which are many); the previous OpenWrt packaged version crashed on such systems.

Signed-off-by: dracode <github@dragonbyte.org>
2024-04-13 14:12:14 -07:00
Shi JiaYang 68a30a5b7b adguardhome: update to 0.107.48
View the release notes for more information:
https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.48

Signed-off-by: Shi JiaYang <shi05275@163.com>
2024-04-13 14:08:39 -07:00
John Audia 65f6fee7c0 snort3: update to 3.1.84.0
1. Update to latest version
2. Remove redundant section in Makefile

Changelog: https://github.com/snort3/snort3/releases/tag/3.1.84.0

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.1.84.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2024 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.14
           Using LuaJIT version 2.1.0-beta3
           Using OpenSSL 3.0.13 30 Jan 2024
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.3.1
           Using Hyperscan version 5.4.2 2024-04-10
           Using LZMA version 5.4.6

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
2024-04-13 14:06:47 -07:00
John Audia 4e770bf887 rsync: update to 3.3.0
Changelog: https://download.samba.org/pub/rsync/NEWS#3.3.0

$ rsync --version
rsync  version 3.3.0  protocol version 31
Copyright (C) 1996-2024 by Andrew Tridgell, Wayne Davison, and others.
Web site: https://rsync.samba.org/
Capabilities:
    64-bit files, 64-bit inums, 64-bit timestamps, 64-bit long ints,
    no socketpairs, symlinks, symtimes, hardlinks, no hardlink-specials,
    no hardlink-symlinks, IPv6, atimes, batchfiles, inplace, append, no ACLs,
    no xattrs, optional secluded-args, no iconv, prealloc, stop-at,
    no crtimes
Optimizations:
    no SIMD-roll, no asm-roll, no openssl-crypto, asm-MD5
Checksum list:
    md5 md4 none
Compress list:
    zlibx zlib none
Daemon auth list:
    md5 md4

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
2024-04-13 14:05:48 -07:00
David Andreoletti 51e5556ea4 mosquitto: bump PKG_RELEASE since missing in PR #23863
Signed-off-by: David Andreoletti <david@andreoletti.net>
2024-04-13 14:05:30 -07:00
Peter van Dijk 4751f66a32 pdns: unbreak bigendian builds
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-04-13 14:04:32 -07:00
Wesley Gimenes 480ca13e28 netbird: update to 0.27.3
Signed-off-by: Wesley Gimenes <wehagy@proton.me>
2024-04-13 14:04:09 -07:00
krant 5a06e3471b socat: update to 1.8.0.0
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-04-13 14:03:09 -07:00
krant fa5057327c wget: update to 1.24.5
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-04-13 14:01:19 -07:00
Eric Fahlgren 4ce2d741c6 snort3: fix issue caused by ucode semantics change
A recent change in the ucode interpeter caused a failure when using
the 'in' operator.
be767ae197

Reported in a forum post by @graysky2.
https://forum.openwrt.org/t/194218/28

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2024-04-13 13:22:40 +08:00
Glenn Strauss a5557a2a47 lighttpd: update to lighttpd 1.4.76 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2024-04-12 22:16:26 -07:00
Stan Grishin 45998b82b1
Merge pull request #23880 from stangri/master-pbr
pbr: update to 1.1.4-r15
2024-04-12 13:57:44 -07:00
Stan Grishin bb5de23743 pbr: update to 1.1.4-r15
* delete obsolete files/etc/init.d/pbr.init
* add files/etc/uci-defaults/91-pbr-iptables to help update from older OpenWrt
* add files/etc/uci-defaults/91-pbr-nft to help update from older OpenWrt
* update files/etc/uci-defaults/91-pbr-netifd to only add tables to supported ifaces
* re-organize variants in the Makefile so that they hopefull work this time
* update prerm for all variants for better user experience
* update the -netifd prerm to remove leftofver entries from network and rt_tables file

In the init script:
* add decorations for netifd-interfaces related operations (blue ticks)
* add rtTablesFile variables instead of hard-coding the rt_tables file
* add function to check if the table is netifd-derived
* add error messages/hints for failed interface setup and failed WAN discovery
* make cleanup_rt_tables the netifd-compatible
* streamline interface_process function with a clearer case statement
* rename the interface_process `pre-init` option to `pre_init` to conform to the other
  functions options naming style

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-04-12 20:40:58 +00:00
Stan Grishin 1c2429839e
Merge pull request #23872 from stangri/master-adblock-fast
adblock-fast: improve Makefile's prerm
2024-04-12 13:39:51 -07:00
Sean Khan 3cbb7474c3 nebula: Use APK style release number
Maintainer: Stan Grishin <stangri@melmac.ca>

Run tested: aarch64, Dynalink DL-WRX36, Master Branch

Signed-off-by: Sean Khan <datapronix@protonmail.com>
2024-04-12 12:09:59 -04:00
Rafal Macyszyn 80b15f0b9e softflowd: add '-b' option to config
- add '-b' option to enable bidirectional flow probing

Signed-off-by: Rafal Macyszyn <rafal@v92.pl>
2024-04-11 21:54:28 +02:00
Yousong Zhou 020d925f66 pppossh: add option peer_pppd_options
This can be useful for things like making the interface on the peer side
fixed with value like `ifname xx`

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2024-04-11 08:49:13 +08:00
Stan Grishin 9eb61fe02d adblock-fast: improve Makefile's prerm
* improve output of Makefile's prerm routines

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-04-10 23:57:03 +00:00
David Andreoletti 1cfb5ca084 mosquitto: support anonymous user per listener
Signed-off-by: David Andreoletti <david@andreoletti.net>
2024-04-10 09:33:42 +00:00
Peter van Dijk 6809010ef9 dnsdist: update to 1.9.3
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-04-09 20:57:02 -07:00
Florian Eckert c9eb80412b
Merge pull request #23723 from findlayfeng/fix_proto-bonding
proto-bonding: Modify ipaddr as optional
2024-04-08 10:43:09 +02:00
Rosen Penev 7be4cc6411 ola: update to 0.10.9
Use local tarballs instead of codeload. Smaller size.

Patch ola.m4 to support statically linked protobuf. Avoids rpath hacks.

Remove upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-04-08 01:30:31 -07:00
Robert Marko 272f55e87f treewide: refresh hashes after move to use ZSTD as default
With the recent move to using ZSTD as the default compression format
for packaging git repo clones we must refresh all of the hashes for
the packages feed as well.

Signed-off-by: Robert Marko <robimarko@gmail.com>
2024-04-07 12:06:34 +02:00
Jonas Jelonek 6e5a8e7973
croc: update to 9.6.15
changelogs:
9.6.13: https://github.com/schollz/croc/releases/tag/v9.6.13
9.6.14: https://github.com/schollz/croc/releases/tag/v9.6.14
9.6.15: https://github.com/schollz/croc/releases/tag/v9.6.15

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
2024-04-06 22:35:30 +02:00
Andrea Pesaresi 9cf0eae9bc ksmbd-tools: update to version 3.5.2
Major changes are:
 - Add durable handles parameter to ksmbd.conf.
 - Add payload_sz in ksmbd_share_config_response to validate ipc
   response.
 - Fix UAF and cleanups.

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
2024-04-06 19:23:09 +03:00
Christian Marangi 88fdab5d77
nginx: add patch to fix compilation error on mips targets
Add patch to fix compilation error on mips targets. This was triggered
after enabling LTO. It was discovered that -fPIC is enabled on building
dynamic modules in CFLAGS but was missing on linking them. This patch
adds the missing -fPIC also on linking.

Fixes: 3b13b08ad9 ("nginx: Fix compilation with LTO")
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2024-04-06 17:02:58 +02:00
Christian Marangi 9d809674e3
nginx: drop redundant --with-cc-opt configure arg
Drop redundant --with-cc-opt configure arg to mute warning of
cc1: note: someone does not honour COPTS correctly, passed 2 times.

CFLAGS are already parsed and correctly applied without this option and
adding it just makes the CFLAGS appended twice.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2024-04-06 16:56:14 +02:00
Stan Grishin f410661f7b
Merge pull request #23787 from stangri/master-curl
curl: update to 8.7.1
2024-04-04 08:12:24 -07:00
Tianling Shen 06332b0229
v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-04-04 12:17:22 +08:00
Tianling Shen 30796c5948
v2ray-geodata: use APK compatible version schema
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-04-04 12:16:29 +08:00
Philip Prindeville b014ae3f86 strongswan: Backport upstream fix for RNG definition conflict
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-04-03 21:34:36 -06:00
Daniel Golle 428e9da9df libcurl-gnutls: update to verison 8.7.1
See https://curl.se/changes.html#8_7_1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2024-04-04 04:20:37 +01:00
Ivan Pavlov 98a5367982 apcupsd: fix gcc 13 compliation error
On GCC13 build fails:

toolchain-mipsel_24kc_gcc-13.2.0_musl/lib/libsupc++.a(eh_alloc.o): in function `std::__sv_check(unsigned int, unsigned int, char const*)':
toolchain-mipsel_24kc_gcc-13.2.0_musl/gcc-13.2.0-final/mipsel-openwrt-linux-musl/libstdc++-v3/include/string_view:73:
undefined reference to `std::__throw_out_of_range_fmt(char const*, ...)'
collect2: error: ld returned 1 exit status
make[5]: *** [Makefile:33: apcupsd] Error 1

Workaround found at https://lore.kernel.org/buildroot/87wmsbk386.fsf@48ers.dk/T/

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2024-04-03 15:57:01 -07:00
Hannu Nyman 2383185c31 nlbwmon: Fix PKG_MIRROR_HASH after APK changes
Adjust PKG_MIRROR_HASH to the filename logic change due to
APK preparations.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2024-04-03 20:29:56 +03:00
Hannu Nyman e684ab6e76 cgi-io: Fix PKG_MIRROR_HASH after APK changes
Adjust PKG_MIRROR_HASH to the filename change due to
APK preparations.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2024-04-03 20:20:15 +03:00
Robert Marko 639cc3d2e4 mdio-tools: use commit hash as the source version
In light of the recent XZ events, it seems that using the tag as the
source version reference is not ideal as it can be updated by the upstream
lets switch to using the full commit hash as the source.

This also should fix the APK semantic versioning by setting PKG_VERSION as
well updating the PKG_MIRROR_HASH which got broken by recent APK changes.

Signed-off-by: Robert Marko <robimarko@gmail.com>
2024-04-03 13:34:33 +08:00
Remy D. Farley 69a5a8000b yggdrasil: move `yggdrasil-jumper` setup/shutdown logic to `netifd`
Signed-off-by: Remy D. Farley <one-d-wide@protonmail.com>
2024-04-02 21:37:35 +08:00
William Fleurant 828bbd61d6 yggdrasil-jumper: add multiple ygg support
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2024-04-02 21:37:35 +08:00
William Fleurant 3637786850 yggdrasil-jumper: initial commit builds
mips32/xiaomi-4c target bins
stun-tcp ............ 1.7M
yggdrasil-jumper .... 2.3M

Signed-off-by: William Fleurant <meshnet@protonmail.com>
2024-04-02 21:37:35 +08:00
Josef Schlehofer 888c7bb77a
Merge pull request #22599 from vooon/add-net-wgsd
wgsd: add package
2024-04-01 15:08:01 +02:00
Tianling Shen 1b59556d06
xray-core: Update to 1.8.10
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-04-01 15:59:40 +08:00
Tianling Shen 96ffb28c61
alist: Update to 3.33.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-04-01 15:59:24 +08:00
Rui Salvaterra ee8b29de2c tor: update to 0.4.8.10 stable
Bugfix release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.10/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2024-03-31 18:46:18 +01:00
Stan Grishin 227c8daa15 curl: update to 8.7.1
* update to 8.7.1: https://curl.se/changes.html#8_7_1
* use the new --disable-docs flag for configure
* update 200-no_docs_tests.patch
* switch to APK-compatible revision

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-31 16:44:21 +00:00
Andrea Pesaresi f8a7ee7f47 kmsbd-tools: switch to use tagged release
Instead of checking Git sources, we will use now tagged releases.

This solve the strange version 0~3.5.1-r1, now will be 3.5.2-r2

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
2024-03-31 09:52:52 +02:00
jiangslee 1f9349d12a netbird: update to 0.26.6
Signed-off-by: jiangslee <jiangsili@qq.com>
2024-03-30 15:00:07 +08:00
Zephyr Lykos 6c5dc8daff tailscale: Update to 1.62.1
https://github.com/tailscale/tailscale/releases/tag/v1.62.1

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
2024-03-30 14:59:54 +08:00
Findlay Feng 7da6cb31d1
proto-bonding: Modify ipaddr as optional
The configuration of ipaddr in proto-bonding is not necessary,
such as adding the bond interface to the bridge or
performing pppoe dialing on the bond interface, etc.

Signed-off-by: Findlay Feng <i@fengch.me>
2024-03-29 21:16:05 +08:00
Philip Prindeville 509d1ecca7 strongswan: drop unneeded sleep patch
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-27 20:17:40 -06:00
Philip Prindeville b20950a515 strongswan: backport upstream MUSL fix for farp_spoofer.c
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-27 20:17:40 -06:00
Philip Prindeville 04c1d688de strongswan: backport upstream MUSL fix for pf_handler.c
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-27 20:17:40 -06:00
Philip Prindeville 544abeb36a strongswan: simplify MUSL patch
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-27 20:17:40 -06:00
Philip Prindeville a90d387e86 strongswan: Update to 5.9.14
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-27 20:17:40 -06:00
Thibaut VARÈNE bc33522715 uspot: update to Git HEAD (2024-03-25)
56eebdad085e uspot: wrap spotfilter device under tip_mode
1a96d57e5fe0 uspot: client_enable() wrap spotfilter data in tip_mode
fe12f9a7abde uspot: clear ratelimit state on startup/shutdown
976badc4d0b6 update README
53b8cb88a94a Makefile: require minimum ucode version
ff6163190d5a uspot/portal: report client_enable() failure
8601d9199233 include sample radcli dictionaries
c670f6c4b48f update README
094f0df88150 uspot: work around ucode#191 missing in 23.05

Update the package Makefile to reflect the changes from the following
above-listed commit:

53b8cb88a94a Makefile: require minimum ucode version

Fixes: https://github.com/f00b4r0/uspot/issues/4
Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2024-03-27 17:30:57 +08:00
Jan Klos ae870abc89 nginx: update to 1.25.4
Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-26 16:46:42 +01:00
Peca Nesovanovic 152d80ce13 p910nd: fix running multiple instances
Compile tested: (ramips, rb760igs, 23.05 snapshot)
Run tested: (ramips, rb760igs, 23.05 snapshot, tests done)

Description:
In case we have multiple device defined in /etc/config/p910nd then init script will try to start multiple instance with same instance name
drop instance name as resolution

tested on 23.05 snapshot with 2 USB printers

Signed-off-by: Peca Nesovanovic <peca.nesovanovic@sattrakt.com>
2024-03-26 11:57:52 +08:00
brvphoenix 1ca47e0ed4 sing-box: update to 1.8.10
Signed-off-by: brvphoenix <brvphoenix@gmail.com>
2024-03-26 02:36:44 +08:00
brvphoenix da03a29cda sing-box: restart if the specified interfaces start up
Signed-off-by: brvphoenix <brvphoenix@gmail.com>
2024-03-26 02:36:44 +08:00
Michael Heimpold 887805fa95
Merge pull request #23681 from jummo/add_ddns_servercow
ddns-scripts: Add servercow.de as DDNS provider
2024-03-24 16:56:08 +01:00
Stan Grishin aa802e82d6
Merge pull request #23716 from stangri/master-https-dns-proxy
https-dns-proxy: prepare migration to APK
2024-03-24 07:55:05 -06:00
Stan Grishin cef4854ea5
Merge pull request #23717 from stangri/master-adblock-fast
adblock-fast: prepare migration to APK
2024-03-24 07:08:57 -06:00
Stan Grishin cd46684e28
Merge pull request #23715 from stangri/master-nebula
nebula: prepare migration to APK
2024-03-24 07:07:26 -06:00
Stan Grishin 7e4e72373a
Merge pull request #23714 from stangri/master-pbr
pbr: prepare migration to APK
2024-03-24 07:06:32 -06:00
Stan Grishin b8a8c480fc https-dns-proxy: prepare migration to APK
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-24 13:05:05 +00:00
Michal Hrusecky 1131acf57f knot-resolver: Update to version 5.7.1
- Fixes CVE-2023-50868 and CVE-2023-50387
- Also, the resolver has not been called 'Knot DNS Resolver' for quite
some time, so fix that, too.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2024-03-24 11:35:38 +01:00
Šimon Bořek a68397ff77 knot-resolver: enable dnstap module build by default
'dnstap' module will be built but not loaded by default at runtime
(configuration must be provided for it to be loaded). It is still possible to
disable dnstap build manually using menuconfig.

"The dnstap module supports logging DNS requests and responses to a unix socket
in dnstap format using fstrm framing library. This logging is useful if you need
effectively log all DNS traffic."[^1]

Adds dependency on 'protobuf', 'protobuf-c', 'libfstrm'. Listed packages are
available from OpenWrt packages, have uncomplicated manifests and
while 'protobuf-c' doesn't have a maintainer since spring 2020, all the
packages (including 'protobuf-c') seem to be maintained - the last
updates of all of them in autumn 2021.

As stated by Vladimír Čunát from Knot Resolver team they build dnstap
while packaging for majority of standard Linux distributions.
Therefore this change brings us closer to expected default.

[^1]: https://knot-resolver.readthedocs.io/en/stable/modules-dnstap.html

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2024-03-24 11:35:28 +01:00
Šimon Bořek af521478f8 knot-resolver: do not overwrite -Ddnstap=enabled configuration
It was possible to enable dnstap in menuconfig, but the configuration
only added dependencies while leaving dnstap module build disabled.

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2024-03-24 11:35:18 +01:00
Hauke Mehrtens 50dffb7424 snort3: Fix compilation with GCC 13
This fixes a compile problem with GCC 13.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2024-03-24 10:15:42 +01:00
Ivan Pavlov 35ef370178 openvpn: update to 2.6.10
This is a bugfix release containing several security fixes specific to the Windows platform.

Bug fixes
---------
- Windows: if the win-dco driver is used (default) and the GUI requests
  use of a proxy server, the connection would fail.  Disable DCO in
  this case.

- Compression: minor bugfix in checking option consistency vs. compiled-in
  algorithm support

- systemd unit files: remove obsolete syslog.target

Security fixes
--------------
- CVE-2024-27459: Windows: fix a possible stack overflow in the
  interactive service component which might lead to a local privilege
  escalation.

- CVE-2024-24974: Windows: disallow access to the interactive service
  pipe from remote computers.

- CVE-2024-27903: Windows: disallow loading of plugins from untrusted
  installation paths, which could be used to attack openvpn.exe via
  a malicious plugin.

For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.10/Changes.rst

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2024-03-23 14:00:08 +01:00
jiangslee b503f9f0df netbird: update to 0.26.3
Signed-off-by: jiangslee <jiangsili@qq.com>
2024-03-23 13:06:45 +08:00
Zephyr Lykos 8834608bc1 tailscale: Update to 1.62.0
https://github.com/tailscale/tailscale/releases/tag/v1.62.0

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
2024-03-23 13:05:17 +08:00
Stan Grishin 44f1f1184a pbr: prepare migration to APK
* remove dependencies/references to opkg
* simplify wan/wan6 discovery

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-23 01:03:59 +00:00
Stan Grishin 19bba88ab2
Merge pull request #23684 from stangri/master-pbr
pbr: update to 1.1.4-5
2024-03-22 19:03:04 -06:00
Stan Grishin 9cb2dbd23c nebula: prepare migration to APK
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-23 01:02:48 +00:00
Stan Grishin 706592edcc adblock-fast: prepare migration to APK
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-23 01:02:05 +00:00
Maxim Storchak 1b7cedfdc2 tgt: update to 1.0.91
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2024-03-22 16:08:56 +08:00
krant 0da2cb5266 squid: update to 6.8
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-03-22 16:08:00 +08:00
krant 7a7a87dfbd git-lfs: update to 3.5.1
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-03-22 16:06:25 +08:00
krant 6a0beb0ba0 git: update to 2.44.0
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-03-22 16:06:14 +08:00
Tianling Shen 4448d9f4a1
dnsproxy: Update to 0.66.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-21 15:05:52 +08:00
Tianling Shen bcb7553385
cloudflared: Update to 2024.3.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-21 15:05:52 +08:00
Tianling Shen 7cb8ac0966
v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-21 15:05:52 +08:00
Tianling Shen b627928682
v2ray-core: Update to 5.15.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-21 15:05:51 +08:00
Tianling Shen 09c4a4b1ba
xray-core: Update to 1.8.9
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-21 15:05:51 +08:00
Ozan Göktan 544e4a9061 microsocks: update to 1.0.4
Signed-off-by: Ozan Göktan <ozan@goktan.site>
2024-03-21 14:51:58 +08:00
Peter van Dijk bd337ef2e6 dnsdist: update to 1.9.1 and add maintainer
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-03-21 14:40:39 +08:00
Peter van Dijk 987be5cf23 pdns: update to 4.9.0 and add maintainer
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-03-21 14:37:20 +08:00
Stan Grishin 790753f6a6 pbr: update to 1.1.4-5
This update includes the following changes:
1. Makefile
  * update copyright
  * attempt to implement the proper variants to avoid luci-app dependency on both variants
  * quietly stop service on uninstall

2. Config-file
  * add the list of dnsmasq instances to target in supported dnsmasq modes
  * for default pbr variant, set the `resolver_set` to `dnsmasq.nftset`
  * for iptables pbr variant, set the `resolver_set` to `dnsmasq.ipset`
  * add the `nft_file_support` (disabled by default)
  * introduce `procd_boot_delay` to delay service start on boot
  * introduce the following nft set creation options:
    * nft_set_auto_merge
    * nft_set_counter
    * nft_set_flags_interval
    * nft_set_flags_timeout
    * nft_set_gc_interval
    * nft_set_policy
    * nft_set_timeout
  * add the pbr.user.wg_server_and_client custom user script to allow running wg server and
    client at the same time
  * add the "Ignore Local Requests" sample policy

3. Hotplug firewall/interface scripts
  * better logged messages

4. The pbr and pbr-iptables uci defaults script
  * use functions from the init script
  * improve vpn-policy-routing migration

5. The pbr-netifd uci defaults script
  * use functions from the init script
  * improve uci operations

6. Introduce the firewall.include file

7. Improve pbr.user.aws custom user script

8. Improve pbr.user.netflix custom user script

9. Introduce pbr.user.wg_server_and_client custom user script

10. Update the init file:
  * refactor some code to allow the init script file to be sourced by the uci defaults scripts
    and the luci rpcd script for shared functions
  * add support for `nft_file_mode` in which service prepares the fw4-compatible atomic nft/include
    file for faster operations on service reload
  * improve Tor support (nft mode only)
  * implement support for nft set options
  * update validation functions for new options/parameters

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-20 19:10:45 +00:00
Andreas Gnau 3b13b08ad9 nginx: Fix compilation with LTO
When CONFIG_USE_LTO=y, the int-size detection script will fail because a
variable gets optimised out. Mark it as volatile to fix the issue.

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
2024-03-20 11:36:08 -07:00
Toke Høiland-Jørgensen d701cae191 net/acme-common: Fix example config
Make sure we quote all strings, and add missing "option" in second example.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2024-03-20 17:18:45 +01:00
John Audia 6be0617c00 openssh: bump to 9.7p1
Release notes: https://www.openssh.com/txt/release-9.7

Removed upstreamed patch: 010-better_fzero-call-detection.patch

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
2024-03-19 23:07:15 +01:00
Patrick Hemmen 0d63145d58 ddns-scripts: Add servercow.de as DDNS provider
Add servercow.de as dynamic DNS provider provider.

Signed-off-by: Patrick Hemmen <jummo4@yahoo.de>
2024-03-19 18:24:11 +01:00
John Audia fdebb16619 snort3: update to 3.1.82.0
Changelog: https://github.com/snort3/snort3/releases/tag/3.1.82.0

Removed patches/010-gcc13.patch

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.1.82.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2024 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.14
           Using LuaJIT version 2.1.0-beta3
           Using OpenSSL 3.0.13 30 Jan 2024
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.3.1
           Using Hyperscan version 5.4.2 2024-03-06
           Using LZMA version 5.4.6

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
2024-03-19 13:42:01 +01:00
Dirk Brenken d3dbdf0302
Merge pull request #23690 from drujd/unbound_1.19.3
unbound: update to 1.19.3
2024-03-19 06:08:16 +01:00
Tianling Shen 7ce54fa912
rclone: Update to 1.66.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-19 12:37:49 +08:00
Dirk Brenken b8c47eae98
travelmate: update 2.1.2-6
* fix vpn semaphore handling (#23643), thanks to @brianjmurrell
* disable vpn processing by default

Signed-off-by: Dirk Brenken <dev@brenken.org>
2024-03-18 22:09:51 +01:00
Jan Klos 558cbcac46
unbound: update to 1.19.3
Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-18 21:26:51 +01:00
Stan Grishin 0577aa43d6
Merge pull request #22211 from alaviss/adguard-network-wait
adguardhome: wait for interfaces to be up at boot
2024-03-18 10:21:16 -06:00
Paul Donald b8e6c2d4fc unbound: spell fix
Closes openwrt/luci#6993

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-03-17 09:22:05 +08:00
Jan Klos 64da1fe3c6 unbound: bump release
Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-17 09:11:51 +08:00
Jan Klos f5195eb213 unbound: add file parameter to service instance
that way, procd does not needlessly restart unbound on triggers when
everything remains the same - changes in non-default included
configuration files will not be registered, however

Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-17 09:11:51 +08:00
Jan Klos d06c08b0ec unbound: remove date/time from config headers
so that procd can decide whether to restart unbound based on config
file changes

Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-17 09:11:51 +08:00
Jonas Jelonek e8cf9d422d gping: new package
gping is ping but with a graph. It graphically plots ping results
over time in terminal, allows multiple hosts to ping in parallel,
uses coloured output and can also plot the execution time of
arbitrary commands.

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
2024-03-16 06:50:14 +08:00
Florian Eckert 704e10157e
Merge pull request #23641 from TDT-AG/pr/20240313-httping
httping: add license informations
2024-03-15 15:43:52 +01:00
Glenn Strauss a60a0d0730 lighttpd: update to lighttpd 1.4.75 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2024-03-14 14:28:10 +01:00
Jo-Philipp Wich 09feb1885c
Merge pull request #23574 from dalfos/yggdrasil-0.5.5
yggdrasil: bump to 0.5.5
2024-03-13 22:47:49 +01:00
Florian Eckert a1dfaab951 httping: add license informations
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-03-13 14:33:30 +01:00
Paul Donald 685ef7d97b p910nd: restart daemon even if no driver file is needed
Not all USB printers need a blob loading; restart the daemon
independently of driver loading.

Closes openwrt/packages#23588

Signed-off-by: Paul Donald <newtwen@gmail.com>
Tested-by: minicx <minicx@disroot.org>
2024-03-12 22:09:58 +01:00
Yousong Zhou 85b634f0b4 shadowsocks-libev: add remote server ips to dst bypass ipset
To align with old iptables-based ss-rules implementation.

Supersedes openwrt/packages#20239

Link: https://github.com/openwrt/packages/pull/20239
Signed-off-by: Luis Liou <liouluis@gmail.com>
[minor fixup on commit title, version bump, etc.]
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2024-03-12 16:03:27 +00:00
Florian Eckert 26117ac9b1
Merge pull request #23590 from TDT-AG/pr/20240305-modemmanager
modemmanager: reconnect interface if the modemmanager detects a disconnect
2024-03-12 11:59:11 +01:00
Daniel Golle 31e9aea1b6 gnunet: update to version v0.21.0
This release marks a noteworthy milestone in that it includes a
completely new transport layer. It lays the groundwork for fixing some
major design issues and may also already alleviate a variety of issues
seen in previous releases related to connectivity. This change also
deprecates our testbed and ATS subsystem.

This is a new major release. It breaks protocol compatibility with the
0.20.x versions. Please be aware that Git master is thus henceforth
(and has been for a while) INCOMPATIBLE with the 0.20.x GNUnet
network, and interactions between old and new peers will result in
issues. In terms of usability, users should be aware that there are
still a number of known open issues in particular with respect to ease
of use, but also some critical privacy issues especially for mobile
users. Also, the nascent network is tiny and thus unlikely to provide
good anonymity or extensive amounts of interesting information. As a
result, the 0.21.0 release is still only suitable for early adopters
with some reasonable pain tolerance.

v0.21.0:

- Reworked PEERSTORE API

- Added record flag for maintenance records

- ensure traits can be generated with subsystem-specific prefixes for
  the symbols

- libgnunettesting first major testing NG refactor towards getting
  dependency structure streamlined

- Remove single-use API macro GNUNET_VA_ARG_ENUM

- major revision of blind signature API

- Introduced closure to hold store context when caling function to add
  hello in peerstore.

- Added DDLs for handling GNUNET_PEERSTORE_StoreHelloContext

- Removed old hello functionality.

- Refactoring components under src/ into lib/, plugin/, cli/ and
  service/

- add support for encoding/decoding double values as part of JSON to
  libgnunetjson

- Changed method GNUNET_HELLO_builder_get_expiration_time to not need
  parameter GNUNET_HELLO_Builder.

- Code moved to the core package to get rid of circular dependencies.

- Moved code to testing to have more generic test setup, which can be
  used not only from within transport.

- The old hello design replaced by the new hello design.

- Added api to get notified when hellos are stored with peerstore
  service.

- Added api to store hellos with peerstore service.

- Changed new hello uri api to allow to change the expiration time

- Moved start peer command to testing subsystem.

- Removed all usage of old transport api, beside peerinfo tool,
  gnunet-transport cli and usage in transport layer itself.

- Added __attribute__((deprecated)) to the old transport API

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2024-03-11 19:38:37 +00:00
Peter Putzer e12095b0b9 uacme: Add support custom CAs and TLS-ALPN-01 challenge
Signed-off-by: Peter Putzer <openwrt@mundschenk.at>
2024-03-09 19:40:39 +08:00
Andrey Petrov 7b52b0646a yggdrasil: bump to 0.5.5
Signed-off-by: Andrey Petrov <dalfos@mail.ru>
2024-03-08 09:52:02 +03:00
Peter van Dijk dac6a6de21 pdns-recursor: update to 5.0.3, plus add maintainer
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-03-08 11:05:31 +08:00
Florian Eckert b51ed340f9
Merge pull request #23551 from dnlplm/dp/mm-qmap-fix
modemmanager: report events for virtual netdevices
2024-03-07 09:57:19 +01:00
Reguna c7eaa3cfca chrony: update package description
Explicitly mention the support of NTS (or the lack of it) in the description of chrony and chrony-nts

Signed-off-by: Reguna <60984878+regunakyle@users.noreply.github.com>
2024-03-06 20:47:23 +01:00
Jan Hák d660dc6e7c knot: update to version 3.3.5
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2024-03-06 20:30:07 +01:00
Vladimir Ermakov 1fb06d8081 wgsd: add package
Adds WGSD, a service that enables use cases such as:
- Building a mesh of WireGuard peers from a central registry
- Dynamic discovery of WireGuard Endpoint addressing (both IP address and port number)
- NAT-to-NAT WireGuard connectivity where UDP hole punching is supported.

Provides two packages:
- wgsd-coredns - a DNS-SD server, which allows clients to discover other
  wireguard peers
- wgsd-client - a client, which query DNS server and update wireguard
  peers endpoints

Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
2024-03-06 16:38:57 +00:00
Daniele Palmas c51a804a63 modemmanager: report events for virtual netdevices
Virtual netdevices created for multiplexing should not be skipped
when reporting events, otherwise it is not possible to setup the
data connection.

Add these exceptions in mm_report_event function.

Signed-off-by: Daniele Palmas <dnlplm@gmail.com>
2024-03-06 10:16:21 +01:00
Florian Eckert 77c16abb1a modemmanager: reconnect interface if the modemmanager detects a disconnect
There are situation for mobile routers, that the modemmanager can not
stay connected to the mobile network. There can have various reasons.
In order for the system to reconnect automatically, the netifd must be
informed that it must re-establish the connection.

The modem manager already does have a script callback handling which is
already used by the modemmanager in openwrt. Currently the modem is marked
as not unavailable when a disconnected event is detected.

The behavior was changed with this commit, so that a reconnect of the
interface is now triggerd via the netifd if the modem disconnects.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-03-06 09:11:57 +01:00
Florian Eckert 9d509b7433 modemmanager: start a 3gpp network regsistration
If a 'plmn' is set in the configuration, a registration attempt should be
established before the simple-connect command. If the plmn is set during
the simple-connect, a network change may occur during the connection setup.

To prevent this, the registration is started before the simple-connect with
a separate mmcli command. So that we can be sure that the modem is already
registered in the correct network before the simple-connect command.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-03-05 15:20:38 +01:00
Florian Eckert d839e194c5 modemmanager: move cleanup and enable to the top
Before a new connection attempt is made, the previous connection must be
cleaned up before further connection attempts are made. This is now done
by moving the cleanup and enable sequence to the beginning of the
conection setup.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-03-05 15:20:38 +01:00