Commit Graph

3005 Commits

Author SHA1 Message Date
Etienne Champetier 4006865ae8 treewide: run "make check FIXUP=1"
fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git

(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2017-08-29 21:41:14 -07:00
Yousong Zhou 5f95c0a2e3 shadowsocks-libev: ss-rules: fix multiple continous \x20 in $o_ifnames
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-08-30 10:13:30 +08:00
Yousong Zhou 8d7c2f2073 shadowsocks-libev: shorten init script by 2 lines
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-08-30 10:13:30 +08:00
Yousong Zhou ec6f7f7f53 shadowsocks-libev: ss-rules: resolve server names before adding to ipset
ipset command line utility supports ranges of address: IP-IP, but the
dash character is also valid character in host names.  If we have a
remote server ss-00.example.com, ipset may complain that

    ipset v6.32: Syntax error: cannot parse ss: resolving to IPv4 address failed

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-08-30 10:13:29 +08:00
Yousong Zhou cff4f65d81 shadowsocks-libev: fix validation of list option
ubox 'list' type is for validating multiple elements separated by
tabs/whitespaces in a single value.  E.g. The following should not be
accepted

    list src_ip_bypass '1.2.3.4 4.3.2.1'

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-08-30 10:13:29 +08:00
Stijn Tintel b5c75be32b strongswan: bump to 5.6.0
Fixes CVE-2017-11185.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-28 19:40:03 +03:00
Philip Prindeville 69a6fabc43 Merge pull request #4768 from pprindeville/isc-dhcp-update-4.3.6
isc-dhcp: update to 4.3.6
2017-08-28 00:49:36 +01:00
Philip Prindeville 8edf359926 isc-dhcp: update to 4.3.6
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2017-08-27 12:20:25 -06:00
Caesar Schinas 4ca39773c8 kplex: copy config file to /etc/
Signed-off-by: Caesar Schinas <caesar@caesarschinas.com>
2017-08-27 08:43:46 +01:00
Caesar Schinas d640f17bfc kplex: update to v1.3.4
Use stable release instead of git commit hash.

Signed-off-by: Caesar Schinas <caesar@caesarschinas.com>
2017-08-27 08:43:46 +01:00
Hsing-Wang Liao df615166ba aria2: Add missing 'or' in section validate function
Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>
2017-08-25 14:33:54 +08:00
Hsing-Wang Liao 6c1fe1ad7a aria2: Enable Bittorrent support by default
Most user need this Bittorrent download support, and this fature can only depends on libssl.

Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>
2017-08-25 13:51:45 +08:00
Hsing-Wang Liao f76693c9d5 aria2: Add some build config options
======================== ========================================
features                  dependency
======================== ========================================
HTTPS                    OSX or GnuTLS or OpenSSL or Windows
SFTP                     libssh2
BitTorrent               None. Optional: libnettle+libgmp or
                         libgcrypt or OpenSSL
Metalink                 libxml2 or Expat.
Checksum                 None. Optional: OSX or libnettle or
                         libgcrypt or OpenSSL or Windows
gzip, deflate in HTTP    zlib
Async DNS                C-Ares
Firefox3/Chromium cookie libsqlite3
XML-RPC                  libxml2 or Expat.
JSON-RPC over WebSocket  libnettle or libgcrypt or OpenSSL
======================== ========================================

Add 'CONFIG_' to 'PKG_CONFIG_DEPENDS'.

Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>
2017-08-25 13:51:45 +08:00
Hsing-Wang Liao 961a1b5190 aria2: Rewrite init script
* Add aria2 user and group.
* Use procd to start service.
* Add more supported options.

Compatible with previous version.

Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>
2017-08-25 13:51:45 +08:00
Stijn Tintel fd7094027c bind: disable lmdb
When building on hosts with lmdb installed, bind configure phase fails:

  configure: error: found lmdb include but not library.

Solve this by disabling lmdb. Fixes #4748.

Fixes: eab56b6bee ("bind: version update to 9.11.2")
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-08-24 18:17:29 +03:00
Hannu Nyman 43b8f63138 Merge pull request #4740 from EricLuehrsen/master
unbound: update to 1.6.5
2017-08-22 17:43:30 +03:00
Yousong Zhou d6d0a7612a shadowsocks-libev: ss-rules: new bool option --dst-forward-recentrst
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-08-22 19:52:14 +08:00
Yousong Zhou 4ca3a7fcec shadowsocks-libev: ss-rules: rename usage func
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-08-22 19:52:14 +08:00
Eric Luehrsen 92c4fa477b unbound: update to 1.6.5
This fixes the root.key file if created when unbound is installed between sep11 and oct11 2017

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2017-08-21 23:24:23 -04:00
Dirk Brenken 8fbe0820af travelmate: update to 0.9.3
* backend/frontend: supports a Connection Limit ('trm_maxretry')
  of '0', to disable this feature (unlimited retries)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-08-21 19:22:58 +02:00
Yousong Zhou df395767d3 shadowsocks-libev: rewrite ss-rules
- New UCI options ifnames, dst_default
 - UCI options src_ips_xxx now accept cidr as their values
 - Export ipset names as part of the interface so that it can be
   depended on and used by other programs
 - Bypass only remote servers used ss-redir instances, so that it's
   possible to let other servers to go through existing re-redir
   instances

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-08-20 02:21:54 +08:00
Leong Hui Wong b26ba6634d shadowsocks-libev: Update AEAD cipher names.
Signed-off-by: Leong Hui Wong <wong.leonghui@gmail.com>
2017-08-19 20:56:54 +08:00
Jo-Philipp Wich f6f750ad17 cgi-io: fix stray semicolon
Remove an improperly placed semicolon in order to solve the following
compiler error:

.../main.c:144:3: error: this 'if' clause does not guard... [-Werror=misleading-indentation]
    if (execl("/bin/busybox", "/bin/busybox", "md5sum", file, NULL));
    ^~
    .../main.c:145:4: note: ...this statement, but the latter is misleadingly indented as if it were guarded by the 'if'
    return NULL;
    ^~~~~~
    cc1: all warnings being treated as errors

Fixes #4723.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-08-18 14:28:33 +02:00
Noah Meyerhans 65b15431f2 Merge pull request #4683 from pprindeville/bind-build-deprecated
bind: patch unneeded if openssl is build w/ deprecated
2017-08-17 22:48:52 -07:00
Hannu Nyman fc7e4421ba Merge pull request #4713 from philjohn/patch-1
ddns-scripts: add support for dynu.com IPv6 update
2017-08-17 15:22:03 +03:00
Marcin Jurkowski 284284ef2e mwan3: fix bugs introduced in 815e83d4
Fixes the following bugs introduced in commit 815e83d4:
 - hotplug: invalid parameter order when initial interface state is "online",
   mwan3track expects initial state to be the third argument
 - hotplug: missing source ip address when initial interface state is "offline"
 - mwan3track: source ip address should be the fourth argument

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>
2017-08-17 13:20:10 +02:00
Thomas Heil af1e127bf4 memcached: bump to version 1.5.0
Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2017-08-17 01:21:21 +02:00
Thomas Heil 3d824568bd apache: update to 2.4.47
- fixes security issues
  CVE-2017-7679, CVE-2017-7668, CVE-2017-7659, CVE-2017-3169
  CVE-2017-3167, CVE-2017-9788, CVE-2017-9789

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2017-08-17 01:09:28 +02:00
Thomas Heil 73140ba8b2 haproxy: update to 1.7.8 and pending patches
- fixes reload issue with hanging process

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2017-08-17 01:07:49 +02:00
Thomas Heil b535ee20b6 nginx: update lua-nginx to cdd2ae921f67bf396c743406493127be496e57ce
- fixes lua compilation issue

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2017-08-17 01:05:46 +02:00
Phil John 9d7f3d5f63 ddns-scripts: update PKG_RELEASE in Makefile
As requested, bumping the PKG_RELEASE

Signed-off-by: Phil John <philjohn@gmail.com>
2017-08-16 20:55:22 +01:00
Thomas Heil 123d0384fd Merge pull request #4706 from donvipre/nginx_1.12.1
nginx: update to 1.12.1
2017-08-16 21:45:27 +02:00
Hannu Nyman fbc666c66a Merge pull request #4719 from TDT-GmbH/mwan3-add-mmx-config
net/mwan3: add mmx config option over uci
2017-08-16 18:42:17 +03:00
Karl Palsson 520a5bb50f mosquitto: properly use localhost instead of ipv4
On some environments, connecting to localhost was resolving to ::1,
which didn't match the bind to the explicit 127.0.0.1.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2017-08-16 15:01:30 +00:00
Karl Palsson 43acdcdd54 mosquitto: support more config options in UCI
Added many more UCI config options, particularly for bridge connections

The recently introduced username/password options for bridges are kept,
even though they have been deprecated upstream for a while.  In keeping
with this, while support is kept in UCI, the generated mosquitto.conf
file will always generate the "modern" remote_username/remote_password
options preferred by mosquitto instead.

Likewise for bridge clientid and remote_clientid options.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2017-08-16 15:00:53 +00:00
Florian Eckert 8319100914 net/mwan3: update version
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-16 14:37:06 +02:00
Florian Eckert 3607bac3af net/mwan3: make mwan3 mask configurable over uci
Add new global config option mmx_mask.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-16 14:35:06 +02:00
tripolar 2f8327ec4b Merge pull request #4714 from neheb/master
ssh: Add umdns entry to the init script.
2017-08-16 11:24:09 +02:00
Jo-Philipp Wich 90a1af9fc7 Merge pull request #4709 from kdarbyshirebryant/nlbwmontweak
nlbwmon: preserve protocols mapping across sysupgrade
2017-08-16 08:55:56 +02:00
Rosen Penev 6cb6666c97 ssh: Add umdns entry to the init script.
This is usefull for hosts to discover the ssh server, especially
on macOS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2017-08-15 21:44:15 -07:00
Peter Wagner f612cecf49 ntpd: move ntpq to ntp-utils
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-08-16 03:31:00 +02:00
Toke Høiland-Jørgensen 0424ac8049 acme: Make sure postrm script doesn't fail
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2017-08-16 01:14:18 +02:00
Daniel Golle da2cc49d29 gnurl: update to version 7.55.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-08-15 02:24:53 +02:00
Phil John b55730e7eb ddns-scripts: add support for dynu.com IPv6 update
Dynu.com already support IPV6 updates using the parameter myipv6, adding to services_ipv6 to enable support in OpenWRT/LEDE

Signed-off-by: Phil John <philjohn@gmail.com>
2017-08-14 21:29:18 +01:00
Kevin Darbyshire-Bryant 2305de5f2e nlbwmon: preserve protocols mapping across sysupgrade
Define package config files to preserve
/usr/share/nlbwmon/protocols across sysupgrade

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2017-08-14 11:51:10 +01:00
Uwe Arnold d382df8c59 nginx: update to 1.12.1
Fixes: CVE-2017-7529

remove PKG_MD5SUM as it is deprecated

Signed-off-by: Uwe Arnold <donvipre@gmail.com>
2017-08-13 20:21:09 +02:00
Yousong Zhou d4ed4c1f21 shadowsocks-libev: setting mode with default value tcp_only
This is the default value taken by ss-server and ss-redir.  After this
change ss_rules section can still use those ss-redir instances who do
not have mode explicitly specified.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-08-13 12:39:01 +08:00
champtar 639586390e Merge pull request #4695 from dibdot/patch-1
dnscrypt-proxy: change start priority
2017-08-12 12:01:15 -07:00
Dirk Brenken 25a3014ee2 dnscrypt-proxy: change start priority
* adapt start priority to the new trigger based setup

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-08-12 20:36:38 +02:00
Hannu Nyman 5f5a3dc5a0 Merge pull request #4696 from dibdot/travelmate
travelmate: update to 0.9.2
2017-08-12 09:23:06 +03:00