mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
36,316 Commits 27 Branches 53 Tags 494 MiB
478d5fc8bf
Commit Graph

36316 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Renato Botelho
478d5fc8bf Rename pfSense-pkg-bind9 to pfSense-pkg-bind 2019-05-29 09:53:24 -03:00
jim-p
5c3db9609d Use correct test type POST variable for SMART. Fixes #9560 2019-05-28 15:11:35 -04:00
jim-p
c92dbfc189 Ensure NTP values are treated as numbers before use. Fixes #9558 2019-05-28 14:00:25 -04:00
Renato Botelho
ad1d975acc Fix #9443: Use phpseclib to create RSA key 
OpenSSL doesn't allow to create a 64 RSA key anymore.  Use phpseclib to
do it using PHP.
 2019-05-27 16:54:59 -03:00
Renato Botelho
ffa8f605c1 Retire now unused is_jumbo_capable() 2019-05-27 13:45:33 -03:00
Renato Botelho
08fe7601ef Fix #9548: Do not rely on VLANMTU flag 
Do not consider VLAN capable only interfaces that have VLANMTU flag.
This flag is used to determine if that interface can do 1500 MTU even
with VLANG tag set.
 2019-05-27 13:43:58 -03:00
Renato Botelho
1842cd9292 Bump Copyright to 2019 2019-05-27 11:00:10 -03:00
Renato Botelho
1ead351615 Fix #8821: Deprecate Growl Notifications 
Growl appears to be abandoned upstream. No updates in ~5 years, and few if
any users on pfSense
 2019-05-27 10:50:27 -03:00
Renato Botelho
b4f499f001 Remove code commented out in 2013 2019-05-27 10:37:01 -03:00
jim-p
bdbd8534ee Privilege matching -- allow JS anchors. Fixes #9550 
Attempts to detect a special case where a file does not actually
exist, and yet should be allowed since it is used by JavaScript.

So long as the anchor name doesn't contain any characters that might let
it evade other checks, allow it through.
 2019-05-24 15:47:43 -04:00
jim-p
42c48efe1c Add GUI components for MDS mitigation. Implements #9532 
While here, add option to disable PTI display in sysinfo widget.
Implements #9323
 2019-05-22 16:19:54 -04:00
jim-p
912562c4d7 Use correct variable in IP address validation check for DNS. Fixes #9543 2019-05-22 14:05:37 -04:00
jim-p
cf529cbe33 Remove wildcards incorrectly used in isAllowedPage(). Fixes #9541 2019-05-21 14:53:02 -04:00
Renato Botelho
e82e602d67 Add sysutils/ccze to the repo 2019-05-21 14:49:06 -03:00
jim-p
057d15dca8 Fix a potential source of PHP errors when saving per-log settings. Fixes #9540 
While here, fix save descriptions.

(cherry picked from commit 303641f828)
 2019-05-20 11:36:12 -04:00
jim-p
3f45cc99ff Add in DH 32, a patch for strongSwan will be in soon to test with. Issue #9531 2019-05-17 11:44:55 -04:00
jim-p
4fc267484e Add RFC 8031 Group 31 to IPsec. Implements #9531 2019-05-17 11:06:11 -04:00
jim-p
22d6b2c46d Use correct certificate path for LDAP 2019-05-15 13:43:46 -04:00
jim-p
4a1841a1fa Implement new OpenVPN advanced options privilege. Fixes #9511 2019-05-13 11:01:51 -04:00
jim-p
b8ca6554d0 Remove Advanced box from OpenVPN Wizard. Issue #9511 2019-05-13 11:01:51 -04:00
jim-p
18c1de4133 Fix ACB privileges. Fixes #9519 2019-05-11 18:55:28 -04:00
jim-p
0604f68855 Strengthen path privilege check. Fixes #9513 
* Removes/resolves any relative paths in the submitted URL
* Validates that the file exists
* Trims the path component off after in a nicer way
 2019-05-10 15:28:27 -04:00
jim-p
bc319bc01a Make widget privilege matching more specific. Fixes #9512 2019-05-09 16:39:46 -04:00
jim-p
f75b0eb8e7 Add warning for OpenVPN client, server, and override privileges. 
Since these can use OpenVPN advanced directives to call external
scripts, they can be used to run commands that the user may not
otherwise have access to run.

Issue #9510
 2019-05-09 16:22:21 -04:00
jim-p
ce77c104ee Encode download parameter before use. Fixes #9508 2019-05-09 15:17:35 -04:00
jim-p
5789a02eab Encode descr in the WOL widget. Fixes #9507 2019-05-08 16:44:26 -04:00
jim-p
1af9400d59 Encode output in status_filter_reload.php. Fixes #9499 2019-05-03 15:24:43 -04:00
jim-p
42d32909a1 Init array before use 2019-05-03 09:29:29 -04:00
Renato Botelho
3033533635 Fix #9451: Enable build of zabbix 4.2 2019-04-26 15:17:54 -03:00
Renato Botelho
1b5941ebe0 Remove zabbix 3.2 and 3.4 options 2019-04-26 14:43:52 -03:00
Renato Botelho
92e209a43f Merge pull request #4065 from dbaio/zabbix42 2019-04-26 14:42:21 -03:00
Danilo G. Baio (dbaio)
169754517a Add Zabbix 4.2 config options 2019-04-26 10:31:41 -03:00
Renato Botelho
40a8898b78 Stop building zabbix 3.2 and 3.4 since they will be deprecated from FreeBSD ports tree in few days 2019-04-22 15:49:38 -03:00
jim-p
80e5091856 Update status.php to use ping-auth for pubkey 2019-04-18 16:17:44 -04:00
jim-p
a0930ca608 Fix another typo 2019-04-15 11:12:40 -04:00
jim-p
2309b26a2b status.php updates 
* Ensure firewall info is generated when run from the CLI
* For SG-1100, also include its public key
 2019-04-15 10:59:39 -04:00
jim-p
929cc874f6 Fix typo 2019-04-15 08:05:25 -04:00
Luiz Souza
b094594108 Fix a typo. 
Reported by:	jimt
 2019-04-15 10:53:14 -03:00
jim-p
4b70a2006e Rewrite unbound remotecontrol.conf when it is empty. Fixes #9470 2019-04-11 08:57:11 -04:00
Renato Botelho
503df8f68f Enable Telegraf build on ARMv7 2019-04-11 09:00:31 -03:00
jim-p
78645511ef Revert "Change ovpn_auth_verify_async to php-cgi. Fixes #9460" 
check_reload_status 0.0.10 fixes the original issue, this can go back
the way it was.

This reverts commit ce76f29985.
 2019-04-09 08:15:10 -04:00
jim-p
ce76f29985 Change ovpn_auth_verify_async to php-cgi. Fixes #9460 2019-04-06 00:01:45 -04:00
jim-p
8800ee6f90 Add parens around NAT reflection rule interface. Fixes #9446 2019-04-01 08:29:44 -04:00
Renato Botelho
1f606f11bd Point 2.4.x snaps repo to armv6 2019-03-26 15:35:21 -03:00
Renato Botelho
dc65689aa3 Do now show scheduler icon when scheduler tag is empty 
Spotted by: Oliveira MaisSecurity <oliveira@maissecurity.com.br>
 2019-03-25 10:55:18 -03:00
jim-p
6765f83ae7 Use new/stronger openssl options for crypt_data(). Fixes #9421 
Retry with legacy options if new options fail, so we can still
read old style data from previous encryption runs (e.g. old encrypted
backups, ACB entries, etc)

Better error handling and suppression to prevent issues like #9421.
 2019-03-22 11:21:28 -04:00
jim-p
0939f37f1b Update openssl syntax for crypt_data(). Fixes #9420 2019-03-22 09:25:14 -04:00
jim-p
996a1ad90e LDAP TLS option update. Implements #9417 2019-03-21 15:17:46 -04:00
Luiz Souza
7671193ba9 Use the same regex used in parse_firewall_log_line(). 
No functional changes.
 2019-03-21 11:44:21 -03:00
jim-p
af85efec3a Fix empty log files in the GUI. Fixes #9415 
Two ways they were empty that I found:
* filterlog log entries now have a pid after the process
* CARP/VRRP entries did not set a source and so were not logged

While here, add CARP details to proto field of GUI log view.
 2019-03-20 16:19:57 -04:00