Commit Graph

35118 Commits

Author SHA1 Message Date
kangtastic
3f3641a4dd "Save" user selection for DUID type
It proved confusing for users who entered a DUID as a certain type to
see the resulting DUID file displayed as a "Raw DUID" upon page reload.
Still work with dhcp6c_duid file data, but parse it and show the Form
corresponding to the DUID type with the inputs filled in, so the user
sees what she previously entered.

Raw edits to the DUID file are still possible.
2017-12-12 22:28:43 -08:00
kangtastic
7955bccee1 Remove endianness checking
all pfSense builds are little-endian
2017-12-12 20:00:48 -08:00
kangtastic
fffb9eed3c Code cleanup
Add a check to Copy DUID button on system_advanced_network.php
2017-12-11 19:45:27 -08:00
kangtastic
64b9d1333f Support for configuring additional DUID types
dhcp6c stores the entirety of the OPTION_CLIENTID option in DHCPv6 datagrams in
its DUID file (named dhcp6c_duid), except for the option code itself. The first
two octets in the DUID file are the option-len field, and are saved according to
machine order. The remainder is the option-data field in network order.

Support configuring current and future DUID types in webConfigurator.
Save and read option-len correctly in the DUID file for the machine type (was
probably broken before on ARM).

DHCPv6 option fmt: https://tools.ietf.org/html/rfc3315#section-22.1
OPTION_CLIENTID:   https://tools.ietf.org/html/rfc3315#section-22.2
DUID types:        https://tools.ietf.org/html/rfc3315#section-9.1,
                   https://tools.ietf.org/html/rfc6355
2017-12-08 18:16:07 -08:00
jim-p
9af697ce60 After recent fixes to auth_check.inc, move the IPsec widget back to auth_check.inc since its timeout problems are likely now fixed. 2017-12-08 15:58:49 -05:00
jim-p
45d078c596 Skip IPsec ping host CARP check when there are no IPSec ping hosts. Also, add a safety belt so cat can't get stuck waiting on input. Fixes #8172 2017-12-08 10:20:33 -05:00
jim-p
d0d6d27f7e Pretty up the new smtp notification header. 2017-12-07 16:32:21 -05:00
jim-p
fe7c4634fd Fix auth_check.inc so it conforms to the rest of the session management code. While here, make sure it performs a commit to avoid PHP session gc from reaping the session. Fixes occasional timeouts when sitting on pages that only fetch AJAX for prolonged periods. Fixes #8116 2017-12-07 15:13:17 -05:00
jim-p
d0bb073b20 Remove ix from the ALTQ interface list. See ticket #7378 2017-12-07 11:30:51 -05:00
Steve Beaver
3b4dad1b31 Merge pull request #6319 from JoeriCapens/master 2017-12-07 09:38:06 -05:00
jim-p
902a31e3fd Fix logging for L2TP and PPPoE server login/logout events. Fixes #8164
See https://redmine.pfsense.org/issues/8164 for the reasoning about why it was done this way.
2017-12-05 10:41:37 -05:00
Joeri Capens
3b46a9cf69 Fix #6319 by setting ptr-domain and key variables correctly for dhcpdzones() 2017-12-04 23:30:20 +01:00
Steve Beaver
7662ec2af8 Merge pull request #3884 from stilez/patch-71 2017-12-04 13:57:33 -05:00
Steve Beaver
c21b1dd3c2 Merge pull request #3882 from PiBa-NL/20171130-remove-console-output 2017-12-04 13:56:48 -05:00
Steve Beaver
a283cfe001 Merge pull request #3883 from stilez/patch-70 2017-12-04 13:55:26 -05:00
Stephen Jones
581c2d5f4d Fixed #8159 added a sort by index after a delete call has been made to make sure it lines up correctly. 2017-12-04 09:59:29 -06:00
jim-p
cedfb2bc04 Fix typo 2017-12-01 16:07:06 -05:00
jim-p
b6dcbd646f When retrieving a public key for a certificate, private key, or signing request, write the certificate data out to a temp file instead of echoing it through a pipe. Fixes #8153 2017-12-01 12:41:56 -05:00
Steve Beaver
9038f44c7e Revert "Mitigate possible vuln in cert manager"
This reverts commit 1a68f4badd.
2017-12-01 09:48:33 -05:00
Steve Beaver
1a68f4badd Mitigate possible vuln in cert manager 2017-12-01 09:30:38 -05:00
stilez
deb575abbf
Add isset, other vars seem to use it
Doesn't seem to have a point though :)
2017-12-01 11:50:38 +00:00
stilez
d30fa3637d
typo 2017-12-01 11:48:52 +00:00
stilez
d2ec584453
Unbound: Disable IPv6 outgoing queries if IPv6 blocked in firewall, as they can never go anywhere
If IPv6 is disallowed in system->advanced->network, then any IPv6 lookups by Unbound will always be blocked, so there's no point sending them.

The practical purpose is that they also clog up the log and may fractionally slow down the resolver because the resolver then has to deal with IPv6 not replying, fallback lookups, etc.

I'm aware that we state that the system setting doesn't affect any service, but in this case the service simply doesn't send packets that we know will be blocked anyway on egress, so it's probably not going to be an issue. If it is, we can add an explicit "Disable IPv6" setting to this and other functions, but then if IPv6 is later used, the user has to remember to unset "IPv6 not allowed" in all the pages they were set, which is a pain and pretty much duplicates the main setting for all practical purposes.
2017-12-01 11:46:39 +00:00
stilez
7596c4c828
correct %d -> %s
As previous code used a string. Probably makes no difference and a number is simpler but doesn't matter
2017-12-01 11:11:17 +00:00
stilez
300010be51
Clarify the unexplained numbers in "log verbosity"
At the moment verbosity is a bare list of digits, 0 to 5. No explanation, nothing else. This PR replaces the visible text by user-friendly info as to what will be logged. Source is https://www.unbound.net/documentation/unbound.conf.html
2017-12-01 11:08:47 +00:00
Steve Beaver
79330f5d0a Merge pull request #3880 from bibz0r/master 2017-11-30 17:48:24 -05:00
Steve Beaver
761b39f916 Merge pull request #3863 from PiBa-NL/20171103-routes-recursive-alias 2017-11-30 17:47:25 -05:00
Steve Beaver
7cde5013d2 Merge pull request #3873 from PiBa-NL/20171121-localauth-translated-problem 2017-11-30 17:46:42 -05:00
PiBa-NL
71f0623ecb routing, support use of recursive network aliases in static routes 2017-11-30 21:57:33 +01:00
Steve Beaver
9fa718d707 Merge pull request #3823 from PiBa-NL/20170919-bootupcomplete 2017-11-30 14:30:44 -05:00
Steve Beaver
ae6a22181e Merge pull request #3810 from svenauhagen/bugfix/mpd 2017-11-30 14:17:51 -05:00
Steve Beaver
745bf2279c Merge pull request #3801 from cgull/radvd-zero-router-lifetime 2017-11-30 14:15:08 -05:00
PiBa-NL
42824fc326 notify_monitor, don't write EXITQUEUELOCK debug output to system-console 2017-11-30 19:56:48 +01:00
Steve Beaver
dcf0318a9a Merge pull request #3759 from PiBa-NL/20170618-option-disable-dragging 2017-11-29 19:00:57 -05:00
PiBa-NL
52e91f7082 webgui, option to disable dragging of rules 2017-11-30 00:15:03 +01:00
Steve Beaver
04168bdd4e Merge pull request #3776 from nazar-pc/ram-disk-reboot-fix 2017-11-29 14:41:03 -05:00
Steve Beaver
74c55258b2 Merge pull request #3868 from loonylion/master 2017-11-29 13:10:41 -05:00
Steve Beaver
2acb4025ee Merge pull request #3818 from chewrocca/master 2017-11-29 13:05:27 -05:00
loonylion
d7dc67f9c3 interfaces_fast.inc: removed accidental rolling 'r' from comment
removed unused parameters from definition of convert_real_interface_to_friendly_interface_name_fast()

interfaces_assign.php: removed profiling code
                       removed unncessary comments
                       shortened some comment blocks
                       removed parameters from a function call that didn't use them
2017-11-29 18:04:37 +00:00
Matthew Fine
7dee52b706
Merge branch 'master' into master 2017-11-29 13:03:45 -05:00
Matthew Fine
12e3bbce58
Merge branch 'master' into master 2017-11-29 13:02:06 -05:00
Steve Beaver
f2d91ecf39 Merge pull request #3870 from jtl999/v2.4.2rc-dhcp6fix 2017-11-29 12:13:49 -05:00
Steve Beaver
f9e1a5dc9d Merge pull request #3844 from luckman212/ovpn-gw-patch-2 2017-11-29 12:12:22 -05:00
Steve Beaver
65a8a5adb9 Merge pull request #3769 from PiBa-NL/20170626-phpfpm-status 2017-11-29 12:06:58 -05:00
Steve Beaver
2dbc276d27 Merge pull request #3183 from znerol/feature/master/register-openvpn-cn 2017-11-29 12:05:21 -05:00
loonylion
c1a2c6c86d Changed license as requested and added a missing apostrophe in a comment. 2017-11-29 14:57:40 +00:00
Steve Beaver
6cce4ec9c8 Merge pull request #3875 from LedPighp/dyndns_godaddy 2017-11-29 09:50:46 -05:00
Andrei Miu
a84fb54532 Changed maximum length of usernames from 16 to 32 characters. This seems to be some old FreeBSD requirement which is not needed anymore. 2017-11-29 14:48:07 +00:00
Steve Beaver
3a4027550a Merge pull request #3872 from jackfagner/patch-1 2017-11-29 09:47:26 -05:00
Steve Beaver
47741e4cef Merge pull request #3825 from adam820/helptext-cleanup 2017-11-29 09:15:25 -05:00