openwrt-routing/opennds/Makefile

90 lines
4.3 KiB
Makefile
Raw Permalink Normal View History

#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=opennds
PKG_VERSION:=10.2.0
opennds: Release v9.8.0 Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 22.03 * This version adds new functionality, and fixes some issues * Fix - suppress stderr in client_params in generic linux [bluewavenet] * Fix - client_params on generic linux, remote logo not supported yet [bluewavenet] * Fix - compiler warning [bluewavenet] * Fix - set voucher script as executable [bluewavenet] * Update OpenWrt Makefile [bluewavenet] * Add - format footer in Themespec scripts [bluewavenet] * Update footer on all scripts [bluewavenet] * Update - Community Voucher Themespec [bluewavenet] * Add - Check on startup for Y2.038K bug (32 bit time) [bluewavenet] * Fix - Remove deprecated Debian specific files [bluewavenet] * Add - More css updates [bluewavenet] * Add - user friendly RFC8910 page511 text and remove refresh button [bluewavenet] * Fix - MHD becomes unresponsive serving page 511 for rfc8910 clients [bluewavenet] * Add - extra startup settings - ignore_sigpipe and write nds info [bluewavenet] * Add - set MHD connection limit to 100, set MHD listen backlog size to 128, set MHD_HTTP_HEADER_CONNECTION "close" [bluewavenet] * Fix - Add missing LOG_CRIT in debug [bluewavenet] * Add - some useful diagnostic output in authmon [bluewavenet] * Fix - Move testing to community [bluewavenet] * Fix - Community - Use tmpfs by default for vouchers.txt file [bluewavenet] * Add - README with use instructions and notice about flash wearout [fservida] * Fix - Refactor folder structure for community themespec [fservida] * Add - Create vouchers.txt [fservida] * Add - Create theme_voucher.sh [fservida] * Update - README.md [bluewavenet] * Add - image download info message [bluewavenet] * Add - css updates [dianariyanto] * Add - allow downloaded remotes refresh for all modes [bluewavenet] * Add - download_resources.sh to installed files [bluewavenet] * Add - support for download of custom images and files in the status.client page [bluewavenet] * Remove - Debian man page support [bluewavenet] * Fix - Add missing mkdir command in Makefile [dzatoah] * Fix - typos in src/{conf, main}.c [dzatoah] Signed-off-by: Rob White <rob@blue-wave.net>
2022-08-07 22:01:50 +02:00
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/opennds/opennds/tar.gz/v$(PKG_VERSION)?
PKG_HASH:=c2da51e3051e390fc1ddae2a4fa751f7b62919eb8e5526710067ca4622331017
PKG_BUILD_DIR:=$(BUILD_DIR)/openNDS-$(PKG_VERSION)
PKG_MAINTAINER:=Rob White <rob@blue-wave.net>
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING
PKG_FIXUP:=autoreconf
PKG_BUILD_PARALLEL:=1
include $(INCLUDE_DIR)/package.mk
define Package/opennds
SUBMENU:=Captive Portals
SECTION:=net
CATEGORY:=Network
opennds: Release v10.1.0 Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 23.05, 22.03 opennds (10.1.0) This version is a major upgrade including full migration to nftables and native uci configuration support even for generic Linux distributions. It also includes a significant refactoring of inbuilt memory management, improving long term reliability, fixing several memory leaks, buffer overflows and several edge case crashes. * Add - support for included custom binauth script [bluewavenet] * Add - emit a useful stderr message if auth_restore fails [bluewavenet] * Add - procd respawn threshold, respawn timeout and respawn retry parameters [bluewavenet] * Add - user friendly commandline message if already running [bluewavenet] * Fix - Enabling of Data volume quotas [bluewavenet] * Fix - use get_list_from_config instead of get_option_from_config [bluewavenet] * Fix - compiler warning - unused variable [bluewavenet] * Fix - remove redundant function call ipsetconf [bluewavenet] * Fix - walledgarden for both nftset and ipset on OpenWrt [bluewavenet] * Add - more meaningful output if attempt is made to restart when already running [bluewavenet] * Fix - resolve gatewayfqdn after startup [bluewavenet] * Fix - Choose forground or background running according to commandline arguments [bluewavenet] * Fix - remove superfluous debug message [bluewavenet] * Fix - replace sleep with procd_set_param term_timeout [bluewavenet] * Fix - make option enabled default to enabled [bluewavenet] * Fix - report authmon pid instead of opennds pid from authmon [bluewavenet] * Fix - ensure correct pid obtained for opennds [bluewavenet] * Add - StartLimitIntervalSec and StartLimitBurst to systemd service script [bluewavenet] * Fix - refactor remote downloads [bluewavenet] * Fix - suppress error message on ipset test failure [bluewavenet] * Fix - send non-syslog debug information to stdout by default [bluewavenet] * Add - C function to check heartbeat watchdog [bluewavenet] * Fix - Update generic Linux makefile [bluewavenet] * Fix - remove redundant ruleset struct definition [bluewavenet] * Fix - potential buffer overflow issue during config stage [bluewavenet] * Fix - remove unnecessary calls to free() in page 404 processing [bluewavenet] * Fix - remove redundant code from fw_iptables [bluewavenet] * Add - updates to binauth_log script [bluewavenet] * Add - updates for service startup, systemd and procd [bluewavenet] * Add - refactoring of commandline processing [bluewavenet] * Fix - remove debugging message [bluewavenet] * Fix - typo in client ruleset [bluewavenet] * Add - Refactor to use uci config directly even for Generic Linux [bluewavenet] * Add - Parsing for multi item lists with spaces in items [bluewavenet] * Add - use common library call get_option_fom_config [bluewavenet] * Add - support for direct use of uci format config file - string and integer parameters [bluewavenet] * Fix - Remove deprecated syslog_facility config setting [bluewavenet] * Add - thread busy message to ndsctl [bluewavenet] * Add - refactor configure_log_location [bluewavenet] * Fix - suppress LOG_NOTICE message when getting mac of interface [bluewavenet] * Fix - ndsctl error message [bluewavenet] * Fix - get_client_interface for levels 2 and 3 [bluewavenet] * Add - use common library write_log function [bluewavenet] * Add - Refactor memory management [bluewavenet] * Fix - fix and refactor upload rate limiting rules [bluewavenet] * Fix - Change a debug message from err to info [bluewavenet] * Add - refine common buffer sizes [bluewavenet] * Add - use initialised heap memory for redirect_to_splashpage [bluewavenet] * Add - user message to themespec [bluewavenet] * Add - auth_restore support ie reauth clients after a restart by default. [bluewavenet] * Add - Library call to preemptively re-auth clients after a restart or crash [bluewavenet] * Add - BinAuth, write an authenticated clients list [bluewavenet] * Add - library call "check_heartbeat" [bluewavenet] * Fix - Tidy up redundant code [bluewavenet] * Fix - change warning message to debug message when iw not installed [bluewavenet] * Add - library call to log to syslog [bluewavenet] * Fix - use initialised heap memory for client list entries [bluewavenet] * Fix - ignore legacy ipset firewall rule [bluewavenet] * Fix - refactor memory management for MHD calls - use heap memory for buffers etc [bluewavenet] * Fix - missing free causing memory leak [bluewavenet] * Fix - predefine and initialise buffer for send_redirect_temp [bluewavenet] * Add - support protocol "all" in firewall ruleset [bluewavenet] * Add - pre-allocation of initialised buffers [bluewavenet] * Fix - prevent buffer overrun on removing client [bluewavenet] * Add - update MHD connection timeout and connection limit [bluewavenet] * Add - chain ndsDLR for dynamic client download rate limiting rules [bluewavenet] * Add - Use Internal Polling Thread / Thread Per Connection in MHD [bluewavenet] * Add - some new default values [bluewavenet] * Fix - remove some redundant code and fix some compiler warnings [bluewavenet] * Fix - remove redundant library command string [bluewavenet] * Fix - Tidy up redundant iptables code [bluewavenet] * Add - convert trusted client support to nftables [bluewavenet] * Add - refer to nftables [bluewavenet] * Add - move code for generating authentication mark string to initial setup [bluewavenet] * Add - full nftset support with ipset import where required [bluewavenet] * Add - nftset support library calls [bluewavenet] * Add - ipset_to_nftset library call [bluewavenet] * Add - support for nftables version of append_ruleset and nftables_compile [bluewavenet] * Fix - buffer overflow in page_511 generation [bluewavenet] * Add - more nftables migration including rate quotas [bluewavenet] * Fix - change GatewayInterface to lower case [bluewavenet] * Add - upload and download limiting client flags for future use [bluewavenet] * add - lib calls "pad_string" and "replace_client_rule" [bluewavenet] * Add - further nftables migration [bluewavenet] * Fix - correctly parse options from legacy conf file [bluewavenet] * Fix - some compiler warnings and set min iptables version [bluewavenet] * Add - Generic Linux configure walledgarden [bluewavenet] * Add - Implementation of nftsets for walledgarden [bluewavenet] * Add - migration to nftables, next phase. [bluewavenet] * Add - library function delete_client_rule [bluewavenet] * Fix - remove duplicate definition [bluewavenet] * Add - First stage migration to nftables [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2023-06-19 10:11:43 +02:00
DEPENDS:=+libmicrohttpd-no-ssl
TITLE:=open Network Demarcation Service
URL:=https://github.com/opennds/opennds
CONFLICTS:=nodogsplash
endef
define Package/opennds/description
opennds: Release v9.9.0 Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 22.03 opennds (9.9.0) * This version adds new functionality, and fixes some issues * Add - Community ThemeSpec to support legacy splash.html [bluewavenet] * Fix - ensure nat_traversal_poll_interval defaults to 10 seconds [bluewavenet] * Add - process send_to_fas_deauthed and send_to_fas_custom in fas-aes-https [bluewavenet] * Add - support for send_to_fas_deauthed library call in binauth_log.sh [bluewavenet] * Add - heartbeat file containing timestamp [bluewavenet] * Add - send_to_fas_deauthed and send_to_fas_custom library calls [bluewavenet] * Add - Save authmon daemon startup arguments for libopennds [bluewavenet] * Fix - potential divide by zero errors [bluewavenet] * Add - option nat_traversal_poll_interval [bluewavenet] * Add - Library calls for urlencode and urldecode[bluewavenet] * Fix - Don't download remotes if ThemeSpec not configured [bluewavenet] * Add - Error report in syslog if dhcp database is not found [bluewavenet] * Add - library calls, deauth and daemon_deauth [bluewavenet] * Fix - change WTERMSIG log from WARNING to NOTICE [bluewavenet] * Add - Set minimum bucket size to 5 regardless of configured bucket ratio [bluewavenet] * Fix - safe_vasprint return value [bluewavenet] * Add - test if safe_calloc failed and serve error 503 [bluewavenet] * Add - use calloc instead of malloc[bluewavenet] * fix - safe functions to return error rather than exit [bluewavenet] * Add - b64decode custom string received by binauth script [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2022-10-09 14:32:45 +02:00
openNDS (open Network Demarcation Service) is a high performance, small footprint, Captive Portal.
It provides a border control gateway between a public local area network and the Internet.
It supports all scenarios ranging from small stand alone venues through to large mesh networks with multiple portal entry points.
Both the client driven Captive Portal Detection method (CPD) and gateway driven Captive Portal Identification method (CPI - RFC 8910 and RFC 8908) are supported.
opennds: Release v10.1.0 Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 23.05, 22.03 opennds (10.1.0) This version is a major upgrade including full migration to nftables and native uci configuration support even for generic Linux distributions. It also includes a significant refactoring of inbuilt memory management, improving long term reliability, fixing several memory leaks, buffer overflows and several edge case crashes. * Add - support for included custom binauth script [bluewavenet] * Add - emit a useful stderr message if auth_restore fails [bluewavenet] * Add - procd respawn threshold, respawn timeout and respawn retry parameters [bluewavenet] * Add - user friendly commandline message if already running [bluewavenet] * Fix - Enabling of Data volume quotas [bluewavenet] * Fix - use get_list_from_config instead of get_option_from_config [bluewavenet] * Fix - compiler warning - unused variable [bluewavenet] * Fix - remove redundant function call ipsetconf [bluewavenet] * Fix - walledgarden for both nftset and ipset on OpenWrt [bluewavenet] * Add - more meaningful output if attempt is made to restart when already running [bluewavenet] * Fix - resolve gatewayfqdn after startup [bluewavenet] * Fix - Choose forground or background running according to commandline arguments [bluewavenet] * Fix - remove superfluous debug message [bluewavenet] * Fix - replace sleep with procd_set_param term_timeout [bluewavenet] * Fix - make option enabled default to enabled [bluewavenet] * Fix - report authmon pid instead of opennds pid from authmon [bluewavenet] * Fix - ensure correct pid obtained for opennds [bluewavenet] * Add - StartLimitIntervalSec and StartLimitBurst to systemd service script [bluewavenet] * Fix - refactor remote downloads [bluewavenet] * Fix - suppress error message on ipset test failure [bluewavenet] * Fix - send non-syslog debug information to stdout by default [bluewavenet] * Add - C function to check heartbeat watchdog [bluewavenet] * Fix - Update generic Linux makefile [bluewavenet] * Fix - remove redundant ruleset struct definition [bluewavenet] * Fix - potential buffer overflow issue during config stage [bluewavenet] * Fix - remove unnecessary calls to free() in page 404 processing [bluewavenet] * Fix - remove redundant code from fw_iptables [bluewavenet] * Add - updates to binauth_log script [bluewavenet] * Add - updates for service startup, systemd and procd [bluewavenet] * Add - refactoring of commandline processing [bluewavenet] * Fix - remove debugging message [bluewavenet] * Fix - typo in client ruleset [bluewavenet] * Add - Refactor to use uci config directly even for Generic Linux [bluewavenet] * Add - Parsing for multi item lists with spaces in items [bluewavenet] * Add - use common library call get_option_fom_config [bluewavenet] * Add - support for direct use of uci format config file - string and integer parameters [bluewavenet] * Fix - Remove deprecated syslog_facility config setting [bluewavenet] * Add - thread busy message to ndsctl [bluewavenet] * Add - refactor configure_log_location [bluewavenet] * Fix - suppress LOG_NOTICE message when getting mac of interface [bluewavenet] * Fix - ndsctl error message [bluewavenet] * Fix - get_client_interface for levels 2 and 3 [bluewavenet] * Add - use common library write_log function [bluewavenet] * Add - Refactor memory management [bluewavenet] * Fix - fix and refactor upload rate limiting rules [bluewavenet] * Fix - Change a debug message from err to info [bluewavenet] * Add - refine common buffer sizes [bluewavenet] * Add - use initialised heap memory for redirect_to_splashpage [bluewavenet] * Add - user message to themespec [bluewavenet] * Add - auth_restore support ie reauth clients after a restart by default. [bluewavenet] * Add - Library call to preemptively re-auth clients after a restart or crash [bluewavenet] * Add - BinAuth, write an authenticated clients list [bluewavenet] * Add - library call "check_heartbeat" [bluewavenet] * Fix - Tidy up redundant code [bluewavenet] * Fix - change warning message to debug message when iw not installed [bluewavenet] * Add - library call to log to syslog [bluewavenet] * Fix - use initialised heap memory for client list entries [bluewavenet] * Fix - ignore legacy ipset firewall rule [bluewavenet] * Fix - refactor memory management for MHD calls - use heap memory for buffers etc [bluewavenet] * Fix - missing free causing memory leak [bluewavenet] * Fix - predefine and initialise buffer for send_redirect_temp [bluewavenet] * Add - support protocol "all" in firewall ruleset [bluewavenet] * Add - pre-allocation of initialised buffers [bluewavenet] * Fix - prevent buffer overrun on removing client [bluewavenet] * Add - update MHD connection timeout and connection limit [bluewavenet] * Add - chain ndsDLR for dynamic client download rate limiting rules [bluewavenet] * Add - Use Internal Polling Thread / Thread Per Connection in MHD [bluewavenet] * Add - some new default values [bluewavenet] * Fix - remove some redundant code and fix some compiler warnings [bluewavenet] * Fix - remove redundant library command string [bluewavenet] * Fix - Tidy up redundant iptables code [bluewavenet] * Add - convert trusted client support to nftables [bluewavenet] * Add - refer to nftables [bluewavenet] * Add - move code for generating authentication mark string to initial setup [bluewavenet] * Add - full nftset support with ipset import where required [bluewavenet] * Add - nftset support library calls [bluewavenet] * Add - ipset_to_nftset library call [bluewavenet] * Add - support for nftables version of append_ruleset and nftables_compile [bluewavenet] * Fix - buffer overflow in page_511 generation [bluewavenet] * Add - more nftables migration including rate quotas [bluewavenet] * Fix - change GatewayInterface to lower case [bluewavenet] * Add - upload and download limiting client flags for future use [bluewavenet] * add - lib calls "pad_string" and "replace_client_rule" [bluewavenet] * Add - further nftables migration [bluewavenet] * Fix - correctly parse options from legacy conf file [bluewavenet] * Fix - some compiler warnings and set min iptables version [bluewavenet] * Add - Generic Linux configure walledgarden [bluewavenet] * Add - Implementation of nftsets for walledgarden [bluewavenet] * Add - migration to nftables, next phase. [bluewavenet] * Add - library function delete_client_rule [bluewavenet] * Fix - remove duplicate definition [bluewavenet] * Add - First stage migration to nftables [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2023-06-19 10:11:43 +02:00
This version uses nftables.
endef
define Package/opennds/install
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_BIN) $(PKG_BUILD_DIR)/opennds $(1)/usr/bin/
$(INSTALL_BIN) $(PKG_BUILD_DIR)/ndsctl $(1)/usr/bin/
$(INSTALL_DIR) $(1)/etc/opennds/htdocs/images
$(INSTALL_DIR) $(1)/etc/config
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_DIR) $(1)/etc/uci-defaults
$(INSTALL_DIR) $(1)/usr/lib/opennds
$(CP) $(PKG_BUILD_DIR)/resources/splash.css $(1)/etc/opennds/htdocs/
$(CP) $(PKG_BUILD_DIR)/resources/splash.jpg $(1)/etc/opennds/htdocs/images/
opennds: Release 8.0.0 This version introduces major new functionality and some major changes * Rationalisation of support for multiple Linux distributions [bluewavenet] * Refactor login.sh script introducing base64 encoding and hashed token (hid) support [bluewavenet] * Refactor fas-hid script introducing base64 encoding and simplifying customisation of the script [bluewavenet] * Refactor binauth_log.sh and log BinAuth custom data as url encoded [bluewavenet] * Refactor fas-aes, simplifying customisation of the script [bluewavenet] * Refactor fas-aes-https, simplifying customisation of the script [bluewavenet] * Change - Use hid instead of tok when fas_secure_enabled >= 1 [bluewavenet] * Add - base64 encoding to fas_secure_enabled level 1 [bluewavenet] * Add - gatewyname, clientif, session_start, session_end and last_active to ndsctl json [bluewavenet] * Add - support for RFC6585 Status Code 511 - Network Authentication Required [bluewavenet] * Add - Client Status Page UI with Logout [bluewavenet] * Add - GatewayFQDN option [bluewavenet] * Add - client interface to status page query string [bluewavenet] * Add - support using base 64 encoded custom string for BinAuth and replace tok with hid [bluewavenet] * Add - base 64 decode option to ndsctl [bluewavenet] * Add - b64 encoding of querystring for level 1 [bluewavenet] * Add - Improved performance/user-experience on congested/slow systems using php FAS scripts [bluewavenet] * Add - support for ndsctl auth by hid in client_list [bluewavenet] * Add - Ensure faskey is set to default value (always enabled) [bluewavenet] * Add - Display error page on login failure in login.sh [bluewavenet] * Add - splash.html, add deprecation notice [bluewavenet] * Add - authmon, improved lock checking and introduce smaller loopinterval [bluewavenet] * Add - client_params, wait for ndsctl if it is busy [bluewavenet] * Add - fas-aes-https, allow progressive output to improve user experience on slow links [bluewavenet] * Fix - Block access to /opennds_preauth/ if PreAuth not enabled [bluewavenet] * Fix - On startup, call iptables_fw_destroy before doing any other setup [bluewavenet] * Fix - missing final redirect to originurl in fas-hid [bluewavenet] * Fix - ensure gatewayname is always urlencoded [bluewavenet] * Fix - client session end not set by binauth [bluewavenet] * Fix - Session timeout, if client setting is 0, default to global value [bluewavenet] * Fix - missing trailing separator on query and fix some compiler errors [bluewavenet] * Fix - ensure authmon daemon is killed if left running from previous crash [bluewavenet] * Fix - add missing query separator for custom FAS parameters [bluewavenet] * Fix - ndsctl auth, do not set quotas if client is already authenticated [bluewavenet] * Fix - client_params, show "Unlimited" when "null" is received from ndsctl json [bluewavenet] * Update configuration files [bluewavenet] * update documentation [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2021-01-08 22:01:24 +01:00
$(CP) $(PKG_BUILD_DIR)/linux_openwrt/opennds/files/etc/config/opennds $(1)/etc/config/
$(CP) $(PKG_BUILD_DIR)/linux_openwrt/opennds/files/etc/config/opennds $(1)/etc/opennds/config.uci
opennds: Release 8.0.0 This version introduces major new functionality and some major changes * Rationalisation of support for multiple Linux distributions [bluewavenet] * Refactor login.sh script introducing base64 encoding and hashed token (hid) support [bluewavenet] * Refactor fas-hid script introducing base64 encoding and simplifying customisation of the script [bluewavenet] * Refactor binauth_log.sh and log BinAuth custom data as url encoded [bluewavenet] * Refactor fas-aes, simplifying customisation of the script [bluewavenet] * Refactor fas-aes-https, simplifying customisation of the script [bluewavenet] * Change - Use hid instead of tok when fas_secure_enabled >= 1 [bluewavenet] * Add - base64 encoding to fas_secure_enabled level 1 [bluewavenet] * Add - gatewyname, clientif, session_start, session_end and last_active to ndsctl json [bluewavenet] * Add - support for RFC6585 Status Code 511 - Network Authentication Required [bluewavenet] * Add - Client Status Page UI with Logout [bluewavenet] * Add - GatewayFQDN option [bluewavenet] * Add - client interface to status page query string [bluewavenet] * Add - support using base 64 encoded custom string for BinAuth and replace tok with hid [bluewavenet] * Add - base 64 decode option to ndsctl [bluewavenet] * Add - b64 encoding of querystring for level 1 [bluewavenet] * Add - Improved performance/user-experience on congested/slow systems using php FAS scripts [bluewavenet] * Add - support for ndsctl auth by hid in client_list [bluewavenet] * Add - Ensure faskey is set to default value (always enabled) [bluewavenet] * Add - Display error page on login failure in login.sh [bluewavenet] * Add - splash.html, add deprecation notice [bluewavenet] * Add - authmon, improved lock checking and introduce smaller loopinterval [bluewavenet] * Add - client_params, wait for ndsctl if it is busy [bluewavenet] * Add - fas-aes-https, allow progressive output to improve user experience on slow links [bluewavenet] * Fix - Block access to /opennds_preauth/ if PreAuth not enabled [bluewavenet] * Fix - On startup, call iptables_fw_destroy before doing any other setup [bluewavenet] * Fix - missing final redirect to originurl in fas-hid [bluewavenet] * Fix - ensure gatewayname is always urlencoded [bluewavenet] * Fix - client session end not set by binauth [bluewavenet] * Fix - Session timeout, if client setting is 0, default to global value [bluewavenet] * Fix - missing trailing separator on query and fix some compiler errors [bluewavenet] * Fix - ensure authmon daemon is killed if left running from previous crash [bluewavenet] * Fix - add missing query separator for custom FAS parameters [bluewavenet] * Fix - ndsctl auth, do not set quotas if client is already authenticated [bluewavenet] * Fix - client_params, show "Unlimited" when "null" is received from ndsctl json [bluewavenet] * Update configuration files [bluewavenet] * update documentation [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2021-01-08 22:01:24 +01:00
$(CP) $(PKG_BUILD_DIR)/linux_openwrt/opennds/files/etc/init.d/opennds $(1)/etc/init.d/
$(CP) $(PKG_BUILD_DIR)/linux_openwrt/opennds/files/etc/uci-defaults/40_opennds $(1)/etc/uci-defaults/
$(CP) $(PKG_BUILD_DIR)/linux_openwrt/opennds/files/usr/lib/opennds/restart.sh $(1)/usr/lib/opennds/
opennds: Release v5.1.0 Maintainer: Rob White <rob@blue-wave.net> Compiled and tested using snapshot SDK for mipsel_24kc, mips_24kc and arm_cortex-a7_neon-vfpv4 OpenNDS v5.1.0 release This release adds major functionality and provides numerous fixes: Data Rate and Data Volume Quotas are implemented. BinAuth / fas_secure_enabled level 3 compatibility is implemented. Page fault and crash when ndsctl auth is called and client not found has been fixed. From the ChangeLog: * Add - Generic Linux - install opennds.service [bluewavenet] * Add - Documentation updates [bluewavenet] * Add - config file updates [bluewavenet] * Add - Install sitewide username/password splash support files [bluewavenet] * Add - quotas to binauth_sitewide [bluewavenet] * Add - Splash page updates [bluewavenet] * Add - Implement Rate Quotas [bluewavenet] * Fix - check if idle preauthenticated [bluewavenet] * Add - support for rate quotas [bluewavenet] * Fix - Correctly compare client counters and clean up debuglevel messages [bluewavenet] * Add - Implement upload/download quotas Update fas-aes-https to support quotas [bluewavenet] * Add - Rename demo-preauth scripts and install all scripts [bluewavenet] * Add - fas-aes-https layout update [bluewavenet] * Add - Set some defaults in fas-aes-https [bluewavenet] * Add - custom data string to ndsctl auth [bluewavenet] * Add - custom data string to fas-hid.php [bluewavenet] * Add - Send custom data field to BinAuth via auth_client method [bluewavenet] * Fix - missing token value in auth_client [bluewavenet] * Add - upload/download quota and rate configuration values [bluewavenet] * Add - Send client token to binauth [bluewavenet] * Add - Rename upload_limit and download_limit to upload_rate and download_rate [bluewavenet] * Fix - Pass correct session end time to binauth [bluewavenet] * Add - some debuglevel 3 messages [bluewavenet] * Add - description of the favicon and page footer images [bluewavenet] * Add - Authmon collect authentication parameters from fas-aes-https [bluewavenet] * Add - sessionlength to ndsctl auth [bluewavenet] * Fix - Page fault when ndsctl auth is called and client not found [bluewavenet] * Add - Enable BinAuth / fas_secure_enabled level 3 compatibility [bluewavenet] * Fix - Correctly set BinAuth session_end [bluewavenet] * Add - Updates to Templated Splash pages [bluewavenet] * Add - Community Testing files [bluewavenet] * Fix - BinAuth error passing client session times [bluewavenet] * Fix - PHP notice - undefined constant [bluewavenet] * Fix - OpenWrt CONFLICTS variable in Makefile [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2020-06-25 21:31:06 +02:00
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/binauth/binauth_log.sh $(1)/usr/lib/opennds/
opennds: Release v10.1.0 Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 23.05, 22.03 opennds (10.1.0) This version is a major upgrade including full migration to nftables and native uci configuration support even for generic Linux distributions. It also includes a significant refactoring of inbuilt memory management, improving long term reliability, fixing several memory leaks, buffer overflows and several edge case crashes. * Add - support for included custom binauth script [bluewavenet] * Add - emit a useful stderr message if auth_restore fails [bluewavenet] * Add - procd respawn threshold, respawn timeout and respawn retry parameters [bluewavenet] * Add - user friendly commandline message if already running [bluewavenet] * Fix - Enabling of Data volume quotas [bluewavenet] * Fix - use get_list_from_config instead of get_option_from_config [bluewavenet] * Fix - compiler warning - unused variable [bluewavenet] * Fix - remove redundant function call ipsetconf [bluewavenet] * Fix - walledgarden for both nftset and ipset on OpenWrt [bluewavenet] * Add - more meaningful output if attempt is made to restart when already running [bluewavenet] * Fix - resolve gatewayfqdn after startup [bluewavenet] * Fix - Choose forground or background running according to commandline arguments [bluewavenet] * Fix - remove superfluous debug message [bluewavenet] * Fix - replace sleep with procd_set_param term_timeout [bluewavenet] * Fix - make option enabled default to enabled [bluewavenet] * Fix - report authmon pid instead of opennds pid from authmon [bluewavenet] * Fix - ensure correct pid obtained for opennds [bluewavenet] * Add - StartLimitIntervalSec and StartLimitBurst to systemd service script [bluewavenet] * Fix - refactor remote downloads [bluewavenet] * Fix - suppress error message on ipset test failure [bluewavenet] * Fix - send non-syslog debug information to stdout by default [bluewavenet] * Add - C function to check heartbeat watchdog [bluewavenet] * Fix - Update generic Linux makefile [bluewavenet] * Fix - remove redundant ruleset struct definition [bluewavenet] * Fix - potential buffer overflow issue during config stage [bluewavenet] * Fix - remove unnecessary calls to free() in page 404 processing [bluewavenet] * Fix - remove redundant code from fw_iptables [bluewavenet] * Add - updates to binauth_log script [bluewavenet] * Add - updates for service startup, systemd and procd [bluewavenet] * Add - refactoring of commandline processing [bluewavenet] * Fix - remove debugging message [bluewavenet] * Fix - typo in client ruleset [bluewavenet] * Add - Refactor to use uci config directly even for Generic Linux [bluewavenet] * Add - Parsing for multi item lists with spaces in items [bluewavenet] * Add - use common library call get_option_fom_config [bluewavenet] * Add - support for direct use of uci format config file - string and integer parameters [bluewavenet] * Fix - Remove deprecated syslog_facility config setting [bluewavenet] * Add - thread busy message to ndsctl [bluewavenet] * Add - refactor configure_log_location [bluewavenet] * Fix - suppress LOG_NOTICE message when getting mac of interface [bluewavenet] * Fix - ndsctl error message [bluewavenet] * Fix - get_client_interface for levels 2 and 3 [bluewavenet] * Add - use common library write_log function [bluewavenet] * Add - Refactor memory management [bluewavenet] * Fix - fix and refactor upload rate limiting rules [bluewavenet] * Fix - Change a debug message from err to info [bluewavenet] * Add - refine common buffer sizes [bluewavenet] * Add - use initialised heap memory for redirect_to_splashpage [bluewavenet] * Add - user message to themespec [bluewavenet] * Add - auth_restore support ie reauth clients after a restart by default. [bluewavenet] * Add - Library call to preemptively re-auth clients after a restart or crash [bluewavenet] * Add - BinAuth, write an authenticated clients list [bluewavenet] * Add - library call "check_heartbeat" [bluewavenet] * Fix - Tidy up redundant code [bluewavenet] * Fix - change warning message to debug message when iw not installed [bluewavenet] * Add - library call to log to syslog [bluewavenet] * Fix - use initialised heap memory for client list entries [bluewavenet] * Fix - ignore legacy ipset firewall rule [bluewavenet] * Fix - refactor memory management for MHD calls - use heap memory for buffers etc [bluewavenet] * Fix - missing free causing memory leak [bluewavenet] * Fix - predefine and initialise buffer for send_redirect_temp [bluewavenet] * Add - support protocol "all" in firewall ruleset [bluewavenet] * Add - pre-allocation of initialised buffers [bluewavenet] * Fix - prevent buffer overrun on removing client [bluewavenet] * Add - update MHD connection timeout and connection limit [bluewavenet] * Add - chain ndsDLR for dynamic client download rate limiting rules [bluewavenet] * Add - Use Internal Polling Thread / Thread Per Connection in MHD [bluewavenet] * Add - some new default values [bluewavenet] * Fix - remove some redundant code and fix some compiler warnings [bluewavenet] * Fix - remove redundant library command string [bluewavenet] * Fix - Tidy up redundant iptables code [bluewavenet] * Add - convert trusted client support to nftables [bluewavenet] * Add - refer to nftables [bluewavenet] * Add - move code for generating authentication mark string to initial setup [bluewavenet] * Add - full nftset support with ipset import where required [bluewavenet] * Add - nftset support library calls [bluewavenet] * Add - ipset_to_nftset library call [bluewavenet] * Add - support for nftables version of append_ruleset and nftables_compile [bluewavenet] * Fix - buffer overflow in page_511 generation [bluewavenet] * Add - more nftables migration including rate quotas [bluewavenet] * Fix - change GatewayInterface to lower case [bluewavenet] * Add - upload and download limiting client flags for future use [bluewavenet] * add - lib calls "pad_string" and "replace_client_rule" [bluewavenet] * Add - further nftables migration [bluewavenet] * Fix - correctly parse options from legacy conf file [bluewavenet] * Fix - some compiler warnings and set min iptables version [bluewavenet] * Add - Generic Linux configure walledgarden [bluewavenet] * Add - Implementation of nftsets for walledgarden [bluewavenet] * Add - migration to nftables, next phase. [bluewavenet] * Add - library function delete_client_rule [bluewavenet] * Fix - remove duplicate definition [bluewavenet] * Add - First stage migration to nftables [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2023-06-19 10:11:43 +02:00
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/binauth/custombinauth.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/libs/libopennds.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/PreAuth/theme_click-to-continue-basic.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/PreAuth/theme_click-to-continue-custom-placeholders.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/PreAuth/theme_user-email-login-basic.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/PreAuth/theme_user-email-login-custom-placeholders.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/libs/get_client_interface.sh $(1)/usr/lib/opennds/
opennds: Release 8.0.0 This version introduces major new functionality and some major changes * Rationalisation of support for multiple Linux distributions [bluewavenet] * Refactor login.sh script introducing base64 encoding and hashed token (hid) support [bluewavenet] * Refactor fas-hid script introducing base64 encoding and simplifying customisation of the script [bluewavenet] * Refactor binauth_log.sh and log BinAuth custom data as url encoded [bluewavenet] * Refactor fas-aes, simplifying customisation of the script [bluewavenet] * Refactor fas-aes-https, simplifying customisation of the script [bluewavenet] * Change - Use hid instead of tok when fas_secure_enabled >= 1 [bluewavenet] * Add - base64 encoding to fas_secure_enabled level 1 [bluewavenet] * Add - gatewyname, clientif, session_start, session_end and last_active to ndsctl json [bluewavenet] * Add - support for RFC6585 Status Code 511 - Network Authentication Required [bluewavenet] * Add - Client Status Page UI with Logout [bluewavenet] * Add - GatewayFQDN option [bluewavenet] * Add - client interface to status page query string [bluewavenet] * Add - support using base 64 encoded custom string for BinAuth and replace tok with hid [bluewavenet] * Add - base 64 decode option to ndsctl [bluewavenet] * Add - b64 encoding of querystring for level 1 [bluewavenet] * Add - Improved performance/user-experience on congested/slow systems using php FAS scripts [bluewavenet] * Add - support for ndsctl auth by hid in client_list [bluewavenet] * Add - Ensure faskey is set to default value (always enabled) [bluewavenet] * Add - Display error page on login failure in login.sh [bluewavenet] * Add - splash.html, add deprecation notice [bluewavenet] * Add - authmon, improved lock checking and introduce smaller loopinterval [bluewavenet] * Add - client_params, wait for ndsctl if it is busy [bluewavenet] * Add - fas-aes-https, allow progressive output to improve user experience on slow links [bluewavenet] * Fix - Block access to /opennds_preauth/ if PreAuth not enabled [bluewavenet] * Fix - On startup, call iptables_fw_destroy before doing any other setup [bluewavenet] * Fix - missing final redirect to originurl in fas-hid [bluewavenet] * Fix - ensure gatewayname is always urlencoded [bluewavenet] * Fix - client session end not set by binauth [bluewavenet] * Fix - Session timeout, if client setting is 0, default to global value [bluewavenet] * Fix - missing trailing separator on query and fix some compiler errors [bluewavenet] * Fix - ensure authmon daemon is killed if left running from previous crash [bluewavenet] * Fix - add missing query separator for custom FAS parameters [bluewavenet] * Fix - ndsctl auth, do not set quotas if client is already authenticated [bluewavenet] * Fix - client_params, show "Unlimited" when "null" is received from ndsctl json [bluewavenet] * Update configuration files [bluewavenet] * update documentation [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2021-01-08 22:01:24 +01:00
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/libs/client_params.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/libs/authmon.sh $(1)/usr/lib/opennds/
opennds: Release 8.0.0 This version introduces major new functionality and some major changes * Rationalisation of support for multiple Linux distributions [bluewavenet] * Refactor login.sh script introducing base64 encoding and hashed token (hid) support [bluewavenet] * Refactor fas-hid script introducing base64 encoding and simplifying customisation of the script [bluewavenet] * Refactor binauth_log.sh and log BinAuth custom data as url encoded [bluewavenet] * Refactor fas-aes, simplifying customisation of the script [bluewavenet] * Refactor fas-aes-https, simplifying customisation of the script [bluewavenet] * Change - Use hid instead of tok when fas_secure_enabled >= 1 [bluewavenet] * Add - base64 encoding to fas_secure_enabled level 1 [bluewavenet] * Add - gatewyname, clientif, session_start, session_end and last_active to ndsctl json [bluewavenet] * Add - support for RFC6585 Status Code 511 - Network Authentication Required [bluewavenet] * Add - Client Status Page UI with Logout [bluewavenet] * Add - GatewayFQDN option [bluewavenet] * Add - client interface to status page query string [bluewavenet] * Add - support using base 64 encoded custom string for BinAuth and replace tok with hid [bluewavenet] * Add - base 64 decode option to ndsctl [bluewavenet] * Add - b64 encoding of querystring for level 1 [bluewavenet] * Add - Improved performance/user-experience on congested/slow systems using php FAS scripts [bluewavenet] * Add - support for ndsctl auth by hid in client_list [bluewavenet] * Add - Ensure faskey is set to default value (always enabled) [bluewavenet] * Add - Display error page on login failure in login.sh [bluewavenet] * Add - splash.html, add deprecation notice [bluewavenet] * Add - authmon, improved lock checking and introduce smaller loopinterval [bluewavenet] * Add - client_params, wait for ndsctl if it is busy [bluewavenet] * Add - fas-aes-https, allow progressive output to improve user experience on slow links [bluewavenet] * Fix - Block access to /opennds_preauth/ if PreAuth not enabled [bluewavenet] * Fix - On startup, call iptables_fw_destroy before doing any other setup [bluewavenet] * Fix - missing final redirect to originurl in fas-hid [bluewavenet] * Fix - ensure gatewayname is always urlencoded [bluewavenet] * Fix - client session end not set by binauth [bluewavenet] * Fix - Session timeout, if client setting is 0, default to global value [bluewavenet] * Fix - missing trailing separator on query and fix some compiler errors [bluewavenet] * Fix - ensure authmon daemon is killed if left running from previous crash [bluewavenet] * Fix - add missing query separator for custom FAS parameters [bluewavenet] * Fix - ndsctl auth, do not set quotas if client is already authenticated [bluewavenet] * Fix - client_params, show "Unlimited" when "null" is received from ndsctl json [bluewavenet] * Update configuration files [bluewavenet] * update documentation [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2021-01-08 22:01:24 +01:00
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/libs/dnsconfig.sh $(1)/usr/lib/opennds/
opennds: Release v9.8.0 Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 22.03 * This version adds new functionality, and fixes some issues * Fix - suppress stderr in client_params in generic linux [bluewavenet] * Fix - client_params on generic linux, remote logo not supported yet [bluewavenet] * Fix - compiler warning [bluewavenet] * Fix - set voucher script as executable [bluewavenet] * Update OpenWrt Makefile [bluewavenet] * Add - format footer in Themespec scripts [bluewavenet] * Update footer on all scripts [bluewavenet] * Update - Community Voucher Themespec [bluewavenet] * Add - Check on startup for Y2.038K bug (32 bit time) [bluewavenet] * Fix - Remove deprecated Debian specific files [bluewavenet] * Add - More css updates [bluewavenet] * Add - user friendly RFC8910 page511 text and remove refresh button [bluewavenet] * Fix - MHD becomes unresponsive serving page 511 for rfc8910 clients [bluewavenet] * Add - extra startup settings - ignore_sigpipe and write nds info [bluewavenet] * Add - set MHD connection limit to 100, set MHD listen backlog size to 128, set MHD_HTTP_HEADER_CONNECTION "close" [bluewavenet] * Fix - Add missing LOG_CRIT in debug [bluewavenet] * Add - some useful diagnostic output in authmon [bluewavenet] * Fix - Move testing to community [bluewavenet] * Fix - Community - Use tmpfs by default for vouchers.txt file [bluewavenet] * Add - README with use instructions and notice about flash wearout [fservida] * Fix - Refactor folder structure for community themespec [fservida] * Add - Create vouchers.txt [fservida] * Add - Create theme_voucher.sh [fservida] * Update - README.md [bluewavenet] * Add - image download info message [bluewavenet] * Add - css updates [dianariyanto] * Add - allow downloaded remotes refresh for all modes [bluewavenet] * Add - download_resources.sh to installed files [bluewavenet] * Add - support for download of custom images and files in the status.client page [bluewavenet] * Remove - Debian man page support [bluewavenet] * Fix - Add missing mkdir command in Makefile [dzatoah] * Fix - typos in src/{conf, main}.c [dzatoah] Signed-off-by: Rob White <rob@blue-wave.net>
2022-08-07 22:01:50 +02:00
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/libs/download_resources.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/libs/post-request.php $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/fas-aes/fas-aes.php $(1)/etc/opennds/
opennds: Release v5.1.0 Maintainer: Rob White <rob@blue-wave.net> Compiled and tested using snapshot SDK for mipsel_24kc, mips_24kc and arm_cortex-a7_neon-vfpv4 OpenNDS v5.1.0 release This release adds major functionality and provides numerous fixes: Data Rate and Data Volume Quotas are implemented. BinAuth / fas_secure_enabled level 3 compatibility is implemented. Page fault and crash when ndsctl auth is called and client not found has been fixed. From the ChangeLog: * Add - Generic Linux - install opennds.service [bluewavenet] * Add - Documentation updates [bluewavenet] * Add - config file updates [bluewavenet] * Add - Install sitewide username/password splash support files [bluewavenet] * Add - quotas to binauth_sitewide [bluewavenet] * Add - Splash page updates [bluewavenet] * Add - Implement Rate Quotas [bluewavenet] * Fix - check if idle preauthenticated [bluewavenet] * Add - support for rate quotas [bluewavenet] * Fix - Correctly compare client counters and clean up debuglevel messages [bluewavenet] * Add - Implement upload/download quotas Update fas-aes-https to support quotas [bluewavenet] * Add - Rename demo-preauth scripts and install all scripts [bluewavenet] * Add - fas-aes-https layout update [bluewavenet] * Add - Set some defaults in fas-aes-https [bluewavenet] * Add - custom data string to ndsctl auth [bluewavenet] * Add - custom data string to fas-hid.php [bluewavenet] * Add - Send custom data field to BinAuth via auth_client method [bluewavenet] * Fix - missing token value in auth_client [bluewavenet] * Add - upload/download quota and rate configuration values [bluewavenet] * Add - Send client token to binauth [bluewavenet] * Add - Rename upload_limit and download_limit to upload_rate and download_rate [bluewavenet] * Fix - Pass correct session end time to binauth [bluewavenet] * Add - some debuglevel 3 messages [bluewavenet] * Add - description of the favicon and page footer images [bluewavenet] * Add - Authmon collect authentication parameters from fas-aes-https [bluewavenet] * Add - sessionlength to ndsctl auth [bluewavenet] * Fix - Page fault when ndsctl auth is called and client not found [bluewavenet] * Add - Enable BinAuth / fas_secure_enabled level 3 compatibility [bluewavenet] * Fix - Correctly set BinAuth session_end [bluewavenet] * Add - Updates to Templated Splash pages [bluewavenet] * Add - Community Testing files [bluewavenet] * Fix - BinAuth error passing client session times [bluewavenet] * Fix - PHP notice - undefined constant [bluewavenet] * Fix - OpenWrt CONFLICTS variable in Makefile [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2020-06-25 21:31:06 +02:00
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/fas-hid/fas-hid.php $(1)/etc/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/fas-hid/fas-hid-https.php $(1)/etc/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/fas-aes/fas-aes-https.php $(1)/etc/opennds/
endef
define Package/opennds/postrm
#!/bin/sh
uci delete firewall.opennds
uci commit firewall
endef
define Package/opennds/conffiles
/etc/config/opennds
endef
$(eval $(call BuildPackage,opennds))