jim-p
d2d45b5fd4
Encode cert/ca descr in system_advanced_admin.php
2015-07-01 11:10:48 -04:00
jim-p
0d6b017b28
Encode cert/ca descr in services_captiveportal.php
2015-07-01 11:08:39 -04:00
jim-p
ae142a1049
Encode ca/cert info in openvpn_wizard.inc
2015-07-01 11:06:25 -04:00
jim-p
342f509028
Use interface-automatic for Unbound when the interfaces list is empty (same as All) otherwise it breaks with a default CARP config.
2015-06-26 09:45:19 -04:00
N0YB
763afdaf7b
Add semicolon
...
Fix delete Java Script to match valid HTML ID
2015-06-25 08:32:40 -03:00
N0YB
0f383d78a0
XHTML Compliance
...
html id's not permitted to begin with a number.
html id's not permitted to contain '/'
add prefix (entry_) and replace slash with hyphen.
table entry id format becomes: entry_<ip address>-<cidr>
replacing the format: <ip address>/<cidr>
does not change the displayed format.
2015-06-25 08:31:38 -03:00
Renato Botelho
0828f970a8
Bump version to 2.2.4-DEVELOPMENT
2015-06-25 08:10:21 -03:00
Renato Botelho
9cbb7fe4f3
It's time for 2.2.3-RELEASE
2015-06-23 18:29:56 -03:00
Matt Smith
821c6ff761
Add D1540-XG.
2015-06-23 14:28:11 -05:00
Renato Botelho
91bbf1209a
Introduce Netgate RCC-DFF to the list of known platforms
2015-06-23 15:35:09 -03:00
Renato Botelho
2f898d6a1c
rereadall is not enough here, restore reload call to make sure everything works. Ticket #4785
2015-06-23 14:31:32 -03:00
Renato Botelho
8961801d83
Replace ipsec rereadsecrets + reload by single rereadall, that will re-read also cert changes. Ticket #4785
2015-06-23 14:15:49 -03:00
Renato Botelho
a241d6b53a
Instead of sending USR1, just call ipsec reload. And before it, call ipsec rereadsecrets to make sure new secretes are updated. It should fix #4785
2015-06-23 14:12:39 -03:00
Renato Botelho
bc7748f76c
Partially revert 019ee2bc8c, this workaround is not necessary. Real fix will be committed after this
2015-06-23 14:12:36 -03:00
Renato Botelho
29c9e14002
Add a workaround for ticket #4785 :
...
There was a regression on strongswan between 5.3.0 and 5.3.2 as reported
at [1]. To workaround this issue, add an extra line on ipsec.secrets
with right fqdn.
2015-06-23 09:59:46 -03:00
Chris Buechler
c598160a4a
Fix var name typo in shaper.inc
2015-06-23 01:48:03 -05:00
Chris Buechler
5e1ff56413
Don't delete /var/tmp/, that was originally done to clear session data at boot, but no longer applicable as session data is no longer in /var/tmp/. Credit to 'aa' on opnsense forum.
2015-06-22 21:27:28 -05:00
Chris Buechler
fe96d7252c
Use $myid in ipsec.secrets. Ticket #4785
2015-06-22 19:42:16 -05:00
Chris Buechler
b731689365
This is incomplete. Leaving for 2.3. Revert "Ticket #4683 merge in brainpool for DH parameters"
...
This reverts commit 7dc35024af
2015-06-22 13:34:16 -05:00
Chris Buechler
887093c309
Specify $myid rather than %any here, otherwise user manager and mobile PSKs won't match. Ticket #4781
2015-06-21 16:00:23 -05:00
Renato Botelho
10a1c51d87
Obsolete pt_BR.ISO-88591 in favor of UTF-8
2015-06-19 15:33:32 -03:00
Renato Botelho
a3918e5999
Move pt_BR translation from ISO to UTF-8
2015-06-19 15:31:50 -03:00
Renato Botelho
6b42b02cc0
Move pt_BR directory, it's moving from ISO to UTF-8
2015-06-19 15:29:28 -03:00
Ermal LUÇI
fabb4b0321
Ticket #4746 Correctly set global variables to be used by hostnames cod epaths
2015-06-19 17:33:19 +02:00
Ermal LUÇI
7dc35024af
Ticket #4683 merge in brainpool for DH parameters
2015-06-19 12:47:18 +02:00
jim-p
9e8ce1e25b
Add a GUI field to increase the pf frag entries limit. Fixes ticket #4775
2015-06-18 09:30:10 -04:00
Chris Buechler
f6a4fe06f9
chmod +x hostid
2015-06-18 00:26:14 -05:00
jim-p
2e0397e05b
Blacklist invalid "from" sources since they can be picked up accidentally and cause rule errors. Fixes #4772
2015-06-17 15:32:11 -04:00
Phil Davis
bc8adf7e03
Say what is happening when reinstalling package GUI XML
...
At the confirmation dialog after pressing the "Reinstall XML" button, the text does not distinguish between having pressed "Reinstall the whole package" and "Reinstall the GUI/XML". It would be nice if the text of this confirmation allowed the user to be confident about which button they had just pushed, before confirming the action.
Note: This stuff has no gettext() wrappers - but that can be fixed later, not get mixed up in this.
2015-06-16 12:44:40 -05:00
jim-p
f128ee2224
Remove load_balancer_relay_* -- They are not used, not linked, not functional, not maintained, and have potential security issues.
2015-06-16 13:41:12 -04:00
Phil Davis
4fabdca76a
Why is break missing for reinstallxml
...
I thought that "reinstallxml" should do less than "reinstallpkg" but actually it was getting stuff here, then falling through "reinstalpkg" which did delete_package_xml and then install_pkg, which got the files a 2nd time and...
Maybe that was supposed to happen?
Anyway, I thought I would point this out and someone can either commit this pull request if the "break" should be there, or explain to me why "reinstallxml" is supposed to fall through executing all this code.
2015-06-16 12:40:44 -05:00
jim-p
e988576343
Encoding in services_unbound_advanced.php
2015-06-16 12:11:13 -04:00
jim-p
de5f0b6122
Encoding in system_advanced_sysctl.php
2015-06-16 12:00:51 -04:00
jim-p
0ec282d488
Encoding in interfaces.php
2015-06-16 11:54:27 -04:00
jim-p
d674c38db2
Encoding in services_unbound.php
2015-06-16 11:45:34 -04:00
jim-p
3642b3489d
Encoding in pkg_mgr_settings.php
2015-06-16 11:41:13 -04:00
jim-p
1d92e91f9b
Encoding in system_advanced_admin.php
2015-06-16 11:37:53 -04:00
jim-p
faa9164224
Encoding in interfaces_ppps_edit.php
2015-06-16 11:34:55 -04:00
jim-p
f4bbd64dec
Encoding in diag_packet_capture.php
2015-06-16 11:30:16 -04:00
jim-p
9162143f12
Encoding in interfaces_qinq_edit.php
2015-06-16 11:27:06 -04:00
jim-p
e959a567e5
Encoding in services_dnsmasq.php
2015-06-16 11:18:42 -04:00
jim-p
7a29e65427
Encoding in vpn_ipsec_settings.php
2015-06-16 11:10:58 -04:00
jim-p
5ef9708e4d
More encoding
2015-06-16 11:05:47 -04:00
jim-p
d213c48520
Fix some low-hanging potential security issues.
2015-06-16 10:53:04 -04:00
jim-p
621baeb604
Be more careful with encoding on pages that use single quotes around HTML attributes
2015-06-16 10:13:09 -04:00
jim-p
6dbe58e101
Additional encoding for system_advanced_misc.php
2015-06-16 09:24:11 -04:00
jim-p
1a44770de9
Protect single quotes as well to prevent JS injection, due to the way this page uses single quotes for attributes.
2015-06-16 09:11:47 -04:00
jim-p
2a1b44c96e
Encode parameters in system_advanced_firewall.php before displaying back to the user.
2015-06-16 08:56:05 -04:00
Renato Botelho
0e40454d52
Keep a copy of old mtree binary during upgrade and use it to avoid crashing. Fixes #4563
2015-06-16 07:34:13 -05:00
Renato Botelho
0ab90dd074
Check also for old FreeBSD release versions
2015-06-16 07:34:13 -05:00
