jim-p
4e4cac0dd5
Improve the way the auth server list is generated and account for a key being removed from the array when deleting. Fixes #7682
2017-07-10 12:12:55 -04:00
jim-p
f49ef55906
Fix OpenVPN Auth Digest Algorithm selection so it does not use duplicate/alias names in the list, and fix existing entries on upgrade so they use the actual digest name and not an alias.
2017-07-10 10:36:23 -04:00
Nazar Mokrynskyi
19be2fc28b
Reduce complexity of checking whether system should be rebooted after RAM Disk option change.
...
Also fix the issue when RAM Disk option is changed, but there is an input error and thus on subsequent form submitting there is no question about rebooting.
Small JavaScript cleanup and refactoring.
2017-07-09 17:39:35 +03:00
jim-p
2504e3f1bc
Fix CA reference so serial increases properly. Remove variable for feature that didn't work out. Ticket #7527
2017-07-07 17:07:42 -04:00
Renato Botelho
5764c3639d
Stop using pecl-ssh2
2017-07-06 15:27:50 -03:00
Renato Botelho
6761daa42a
Deprecate pfSense freeradius2 package in favor of freeradius3
2017-07-06 15:23:55 -03:00
jim-p
7db120115a
Add another possible CSR Armor string when validating. Ticket #7383
2017-07-06 13:47:52 -04:00
jim-p
0c82b8c2a7
Restructure how certificate types and SANs are handled in the cert manager when making a Cert/CSR/Signing, so each section can properly use the controls without duplicating. It is now possible to add SANs and EKUs to certificates when signing using the certificate manager. Fixes #7527 and also Fixes #7677
...
NOTE: Attributes such as SANs and KU/EKU cannot be copied from a CSR when signing due to a deficiency in OpenSSL's x509 functions (they do not support "copy_extensions" at this time). They must be specified manually.
2017-07-06 13:30:36 -04:00
Robbert Rijkse
eb3435be70
Removed MSS clamping exclusions
2017-07-06 08:27:22 -04:00
jim-p
6e094e04f7
Several complaints of unbound problems after commiting, so back this out. Revert "Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326 "
...
This reverts commit 38d110824c
2017-07-06 08:20:43 -04:00
jim-p
282b6c666a
Add the ability to set certificate type and SAN attributes in a CSR. Ticket #7527
...
TODO: They are not carried over after signing in the GUI
2017-07-05 16:41:38 -04:00
jim-p
5c985ed29b
Fix missing line from openssl.cnf
2017-07-05 15:03:12 -04:00
Renato Botelho
276f8ce044
Do not ship .po files on images
2017-07-05 14:53:19 -03:00
Renato Botelho
ba47d6fd73
Update translation files
2017-07-05 14:49:16 -03:00
Renato Botelho
1d8a0e6678
Regenerate pot
2017-07-05 14:49:12 -03:00
jim-p
b767fe6cdf
Add the username as the first SAN when making a user certificate from the user manager creation screen. Fixes #7666
2017-07-05 13:30:23 -04:00
jim-p
2e1809ddc3
Fix some additional cases for CN->SAN handling, and move some code to a function to avoid duplication for other pending uses. Ticket #7666
2017-07-05 13:30:23 -04:00
Renato Botelho
7fbb45be08
Include User Agent information when update bogons list
2017-07-05 13:56:44 -03:00
Renato Botelho
6cc74faa44
Remove extra spaces from User Agent
2017-07-05 13:27:51 -03:00
Renato Botelho
2bf67a6fe9
Send uniqueid instead of UUID on user-agent
2017-07-05 13:21:56 -03:00
Renato Botelho
d49ad309f9
Declare user_agent variable in the function it's used
2017-07-05 13:05:23 -03:00
Renato Botelho
2f8793b728
Move uniqueid read to a function system_get_uniqueid()
2017-07-05 12:59:23 -03:00
PiBa-NL
7c6f38e49a
ipsec, prevent simultaneous/repeated calling of vpn_ipsec_configure() by /etc/rc.newipsecdns
2017-07-04 00:24:24 +02:00
PiBa-NL
c253048797
bootup, change message to "Checking config backups consistency..." to tell whats taking time, as there is usually little to cleanup involved
2017-07-03 22:15:01 +02:00
PiBa-NL
ce3371fe96
cron, fix job removal by index splice and write valid schedules for ramdrive backups
2017-07-01 23:01:08 +02:00
hamnur
ab95d1fa87
Merge remote-tracking branch 'upstream/master'
2017-06-30 10:41:18 +02:00
hamnur
1e0442e061
Activate RADIUS accounting for mobile ipsec if it was selected on the auth server view
2017-06-30 10:41:16 +02:00
jim-p
38d110824c
Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326
2017-06-29 12:32:45 -04:00
jim-p
8a0aa42c19
unbound-control needs to know the config path or else it can't work properly. Fixes #7667
2017-06-29 12:21:10 -04:00
hamnur
9542011684
Add strongswan rekeymargin attribute to vpn ipsec phase1 view
2017-06-29 16:18:09 +02:00
jim-p
faab657a25
Set a value for this variable in each case, so a previous value isn't re-used in a loop.
2017-06-29 10:01:26 -04:00
Steve Beaver
626aefbe85
Revise Dark gray color code for login page
2017-06-28 17:01:29 -04:00
Steve Beaver
a33ece86a4
Fix missing '>' on /span tag
2017-06-27 11:01:12 -04:00
Steve Beaver
79cd920c1e
Add "Dark Gray" login page color
2017-06-27 08:28:59 -04:00
Renato Botelho
50153f2185
Update translation files
2017-06-27 07:40:49 -03:00
Renato Botelho
651ad331c2
Regenerate pot
2017-06-27 07:37:25 -03:00
PiBa-NL
418fdfb35e
php-fpm, add status page for local usage from console/shell, this provides a way to check what scripts are currently running in the php-fpm processes.
...
For example the following can be executed from the local shell:
` fetch --no-verify-hostname --no-verify-peer "https://localhost/status?full " -o - `
2017-06-26 23:53:51 +02:00
Renato Botelho
b720d27a09
Merge pull request #3767 from BBcan177/patch-1
2017-06-26 10:16:20 -03:00
Renato Botelho
4fa10fc8be
Merge pull request #3764 from phil-davis/gwlb-issue-7659
2017-06-26 10:15:15 -03:00
BBcan177
55588e0ce3
Update diag_gmirror.php
...
Fix typo
2017-06-25 13:58:32 -04:00
Phil Davis
d540ed34d3
Issue #7659 foreach warning on adding gateway
...
Signed-off-by: Phil Davis <phil@jankaritech.com>
2017-06-25 08:05:49 +05:45
PiBa-NL
29fa6f0f46
gateway monitoring, give apinger some time to properly 'initialize' before using its results
2017-06-24 20:09:21 +02:00
PiBa-NL
48196bf0b2
rc.gateway_alarm, add syslog message that shows that a alarm was raised/cleared and what the parameters were
...
This helps clarify why sometimes services are restarted when reading through the syslogs.
2017-06-24 19:25:19 +02:00
Steve Beaver
4eb926921c
Respect GUI Login autocomplete preference setting
2017-06-23 13:28:59 -04:00
jim-p
b3875714f8
Fix some other outdated links
2017-06-23 09:16:56 -04:00
Steve Beaver
58d471e983
Restyle autocomplete on webkit browsers to remove the yellow background used by Chrome
2017-06-23 08:58:39 -04:00
Steve Beaver
81b22639e7
Correct intenting
2017-06-23 08:46:04 -04:00
Steve Beaver
10ba62c2ab
Code style cleanup
2017-06-23 08:42:48 -04:00
jim-p
85180bd6d4
Fix interface groups link.
2017-06-23 08:38:39 -04:00
Steve Beaver
44a94b0305
Minor positioning tweak to login page
2017-06-23 08:25:04 -04:00
