Renato Botelho
70eef83536
Remove redundancy as pointed out by phil-davis
2014-10-28 17:06:22 -02:00
Renato Botelho
44c7d73c4a
Decode recently created cert and key. It fixes #3964 . While here, fix logical condition to create a new cert if crt or key is not present
2014-10-28 17:06:12 -02:00
Chris Buechler
4721677dd7
fix ping_hosts.sh to not ping IPsec if CARP is in backup
2014-10-27 15:36:13 -05:00
Renato Botelho
e112f9ee60
Merge pull request #1312 from phil-davis/patch-8
2014-10-23 12:25:22 -02:00
jim-p
a376c57de5
Teach the certificate generation code how to make a self-signed certificate, and
...
change the GUI cert generation code to use it. Also, move the GUI cert
generation code to its own function so we can add a GUI option to regenerate it
later. Also use some more sane defaults for the contents of the default self-
signed certificate's fields so it will be more unique and
less likely to trigger problems in browser certificate storage handling.
Also add a CLI script to regenerate a new GUI certificate.
Several master commits rolled into one patch for 2.1.x.
2014-10-21 14:43:22 -04:00
jim-p
5b473705fa
Encode values before displaying them back to the user in notification settings.
2014-10-21 14:25:35 -04:00
Phil Davis
29b3bb05e0
Prevent Internal Server Error if range is backwards
...
Fixes redmine #3950 - ip_range_to_subnet_array can easily swap the input parameters if the caller has passed/entered them the wrong way around. That is both friendly to the caller and ensures that a hostile caller can't blow up the routine.
This patches 2.1 branch - will submit pull request for master also.
2014-10-21 15:03:18 +05:45
Chris Buechler
2c296872a7
h-node should be 8
2014-10-19 19:31:42 -05:00
jim-p
2f17d32ef2
Fix the log widget to lookup hosts by DNS using a link rather than AJAX. Quick fix for now. Ticket #3829
2014-10-16 15:22:27 -04:00
jim-p
29be59ad8e
Tame the poodle. Disable SSLv3.
2014-10-15 08:41:11 -04:00
Renato Botelho
07c24bf190
Merge pull request #1308 from phil-davis/patch-4
2014-10-13 06:54:13 -05:00
Phil Davis
cce09d9431
Ticket #3860 Correctly display SMTP SSL TLS boxes
...
After using the "Test" button, $_POST['smtpssl'] and $_POST['smtptls'] was 'on' or null - this got blindly copied back into $pconfig[] and resulted in the state of the SSL/TLS/STARTTLS checkboxes not being redisplayed.
Fixed by setting $pconfig['smtpssl'] and $pconfig['smtptls'] using the code that was previously done only to set these in $config
2014-10-09 22:27:50 +05:45
Renato Botelho
adab585de2
Merge pull request #1294 from phil-davis/patch-19
2014-09-26 13:56:59 -03:00
Phil Davis
c5cfa06b27
Minor fixes to firewall_aliases_edit
...
for 2.1 branch
2014-09-26 21:46:30 +05:45
Renato Botelho
9ec8e1f280
Allow hostname to start with '@.' for namecheap. It fixes #3568
2014-09-19 14:16:05 -03:00
dariomas
beae652c15
Correct evaluation for "Acct-Interim-Interval" from RADIUS
...
Setting "Acct-Interim-Interval :=600" in FreeRadius2 evaluates to 'random' values with PfSense 2.1.
Possibly a bug related to:
https://forum.pfsense.org/index.php?topic=60079.0
https://forum.pfsense.org/index.php?topic=60262.0
2014-09-19 09:57:12 +00:00
Renato Botelho
e5b3335ad9
Do not call write_config() when click on Apply Changes because it was already done and it causes dhcpd to restart one more time on secondary nodes. It fixes #3797
2014-09-18 15:57:52 -03:00
Renato Botelho
cc265e2e59
Deduplicate <form>, fixes #3864
2014-09-17 10:34:14 -03:00
Renato Botelho
e5d2c6605b
Merge pull request #1283 from phil-davis/patch-16
2014-09-16 14:12:41 -03:00
Phil Davis
9036e7661e
Fix #3866 Firewall Log Filtering
...
on 2.1 branch
2014-09-16 21:56:51 +05:45
jim-p
929dfb4cb9
Add pages missing from the Status > Traffic Graph privilege that are required for the full page to load
2014-09-11 13:23:59 -04:00
Renato Botelho
ee4da773eb
Merge pull request #1274 from phil-davis/patch-13
2014-09-11 08:26:04 -03:00
Phil Davis
ffda0775f6
Standardise size of Duplicate Slice button
...
The Duplicate Slice button currently is displayed in smaller text and in a row of its own, separate from the row above that has the rest of the "Duplicate bootup slice" text and slice selection.
This change puts the button in the same row as the slice selection and text, and makes the button text be the same size as the text in other buttons on this page.
Did this first on a 2.1.5 system, so have submitted this against 2.1 branch. I will make another pull request against master also, because a later xhtml compliance change in master will conflict.
2014-09-11 07:55:06 +05:45
Renato Botelho
be32a003af
Delete IP Alias on CARP VIP interface on secondary node when it's deleted on primary. It fixes #3855
2014-09-10 15:39:56 -03:00
Renato Botelho
7397f64315
Fix operator
2014-09-10 15:39:56 -03:00
Renato Botelho
ccefd6031d
Import fix for http://bugs.jquery.com/ticket/9521
2014-09-09 11:53:56 -03:00
Renato Botelho
354a1d3ffc
igmpproxy param -d doesn't like the space before optarg. Fixes #3852
2014-09-08 18:35:02 -03:00
Renato Botelho
1b5675a77e
Mark host as up or down before execute script, then script can use this information.
...
Submitted by: Jean Debogue <jean@wedebugyou.com>
2014-09-04 07:47:24 -03:00
Renato Botelho
990162e36c
Remove some redundancy and simplify changes made on last commit
2014-08-30 13:38:23 -03:00
Renato Botelho
ce3ef2e7c9
Replace GET by POST, it fixes #3833
2014-08-29 18:01:09 -03:00
Renato Botelho
2b56c7da66
Hide FreeBSD version from sshd banner. It fixes #3840
2014-08-29 17:26:04 -03:00
Renato Botelho
7486c1f6c1
Do not reconfigure dhcpd twice on secondary after config sync. Fixes #3797
2014-08-29 14:41:09 -03:00
Renato Botelho
ab6558b6a2
Alias name cannot have more than 31 chars, add maxlength here just as an extra check. Ticket #3827
2014-08-25 14:33:54 -03:00
Renato Botelho
a94b9befbd
pgrep parameters are out of order and it also needs -a to find sshd. While I'm here, simplify sh syntax and prevent noise to be printed if pid file doesn't exist
2014-08-22 10:53:51 -03:00
Chris Buechler
a762649bb0
delete the dhcpd.pid file before starting dhcpd. Fixes bug where on rare occasions a stale PID file could prevent dhcpd from starting until it's manually deleted.
2014-08-22 07:26:43 -05:00
Chris Buechler
b6a7a5a98c
use pgrep here instead, previous way could wrongly show SSH as enabled where it isn't.
2014-08-22 06:27:47 -05:00
Renato Botelho
7f00d47e3d
Fix text description for interface mismatch, fixes #3820
2014-08-21 07:32:10 -03:00
Jared Dillard
2a07df8528
Merge branch 'RELENG_2_1' of git.pfmechanics.com:pfsense/pfsense into RELENG_2_1
2014-08-20 18:41:10 -05:00
Jared Dillard
41312f7fec
fix top nav to fit gold in non-default themes
2014-08-20 18:39:24 -05:00
Matt Smith
fa8be5de0d
non-css parts of gold menu
2014-08-19 13:33:24 -05:00
Jared Dillard
bdde98fcbd
fix spacing in pfsense_ng topnav
2014-08-19 12:59:24 -05:00
jim-p
086e76dc9f
Ensure this is always an array to avoid a PHP error from foreach.
2014-08-15 08:40:21 -04:00
Renato Botelho
6d170e2ea7
Bump version to 2.1.5
2014-08-14 17:05:11 -03:00
Matt Smith
b107e187b5
Added filter.so to list of extensions loaded for filter_var() support.
2014-08-13 12:50:10 -05:00
Renato Botelho
e35ec76333
Do not reset source and destination port range values when it's an associated rule created by nat port forward. It fixes #3778
2014-08-11 16:04:29 -03:00
Renato Botelho
4a3495b3bd
Move dhcp6c log to dhcpd.log, it fixes #3799
2014-08-11 16:01:43 -03:00
Matt Smith
a3331d720c
Fix #3798 - 'IPsec phase 2 pinghost is not used if the source IP should be a virtual IP address'
2014-08-08 17:20:49 -05:00
jim-p
ffb8e02fc2
Avoid generating an invalid racoon config if the user specified a mobile pool that is too small.
2014-08-08 12:36:19 -04:00
jim-p
b21ad5d5fd
Avoid a "Cannot use string offset as an array" error if the packages section of the config is missing.
2014-08-08 12:22:53 -04:00
jim-p
889c83d7f1
Require click-through POST confirmation when restoring or deleting a configuation from the backup history page.
2014-08-08 11:22:40 -04:00
