mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
36,234 Commits 27 Branches 53 Tags 494 MiB
da3ef5a3b3
Commit Graph

36234 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Renato Botelho
da3ef5a3b3 Remove definitions of conf_mount_r[ow] 2019-02-28 10:06:14 -03:00
Renato Botelho
9c078e31d1 Remove /etc/conf_mount_r[ow] 2019-02-28 10:05:31 -03:00
Renato Botelho
522388a7cd Remove all calls to conf_mount_r[ow] 2019-02-28 09:49:25 -03:00
Renato Botelho
90639e0a85 Rename exclude files to work with armv7 2019-02-27 19:02:13 -03:00
Renato Botelho
e200e241bc Fix armv7 ABI string 2019-02-27 18:03:31 -03:00
Renato Botelho
82b59ceebe On FreeBSD 12+ move from armv6 to armv7 2019-02-27 16:34:00 -03:00
Renato Botelho
fe0a068b99 Revert "pfSense_fsync() call just before rename() is breaking it. Comment out for now until it's fixed" 
pfSense_fsync() is fixed now

This reverts commit cea9d3b7dc.
 2019-02-27 13:22:05 -03:00
Renato Botelho
67f15b5e84 Update loader.conf when maximumtableentries changes 
On Firewall -> Advanced -> Firewall, when maximumtableentries item
changes, make sure /boot/loader.conf is changed accordingly.  If the
value is bigger than sysctl net.pf.request_maxcount, then warn user that
this change will need a reboot to be in place and offer to reboot the
system now
 2019-02-27 09:09:32 -03:00
Renato Botelho
117f032ccf Add net.pf.request_maxcount to loader.conf 
On FreeBSD 12 and newer pf uses this sysctl to define maximum number of
items supported by its allocations.  Make sure it's always present in
/boot/loader.conf and set it to the same value of config item for
system -> maximumtableentries
 2019-02-27 09:06:54 -03:00
Renato Botelho
c16a2fe16e Remove invalid MACs from sshd_config 2019-02-26 17:15:38 -03:00
Renato Botelho
cea9d3b7dc pfSense_fsync() call just before rename() is breaking it. Comment out for now until it's fixed 2019-02-26 16:09:36 -03:00
Renato Botelho
295b0d2b3e Fix path relative to MAKEOBJDIRPREFIX to FreeBSD 12+ reality 2019-02-26 14:04:00 -03:00
Renato Botelho
7fac410143 Update translation files 2019-02-25 11:55:54 -03:00
Renato Botelho
303e7fed78 Regenerate pot 2019-02-25 11:09:45 -03:00
jim-p
3b3e31c248 Update privileges 2019-02-21 11:18:46 -05:00
Renato Botelho
c93693aa52 Remove www/squid from bulk list, it's listed as dependency now 2019-02-19 09:15:44 -03:00
Renato Botelho
28e3831cf5 Revert "Use the OpenSSL from ports for now." 
This reverts commit d73d911c2a.
 2019-02-18 16:19:31 -03:00
Renato Botelho
eb6653ca2a Revert "Build p5-GSSAPI using MIT while using openssl from ports" 
This reverts commit b018b7afc7.
 2019-02-18 16:19:30 -03:00
Renato Botelho
2c5fafaeb9 Revert "Disable other GSSAPI options to prevent conflict" 
This reverts commit 6b2acc671a.
 2019-02-18 16:19:29 -03:00
Renato Botelho
c7f3501914 Revert "Make sure syslog-ng also uses openssl from ports" 
This reverts commit bc16670bdf.
 2019-02-18 16:19:27 -03:00
Renato Botelho
bc16670bdf Make sure syslog-ng also uses openssl from ports 2019-02-18 14:27:59 -03:00
kkr0kk
9ce9391a93 Update gwlb.inc 
(cherry picked from commit 58d009bc41)
 2019-02-14 18:16:20 -02:00
kkr0kk
e8a6717c9d Update gwlb.inc 
Correct BUG 9004 -> set the default gateway when system start and a gateway_group is default IPV4 gateway

(cherry picked from commit 67dd34a099)
 2019-02-14 18:16:20 -02:00
Luiz Souza
2944e2f700 Revert "Fix the build of net-mgmt/net-snmp on 12, disable the TLS support for now." 
This reverts commit 39d77ff198.
 2019-02-13 17:39:01 -02:00
Renato Botelho
6b2acc671a Disable other GSSAPI options to prevent conflict 2019-02-13 14:36:20 -02:00
Renato Botelho
b018b7afc7 Build p5-GSSAPI using MIT while using openssl from ports 2019-02-13 14:23:31 -02:00
Luiz Souza
98e711678b Fix the build of security/openssl. 
The PADLOCK cannot be fetched.
 2019-02-13 16:48:02 -02:00
Renato Botelho
382c5ba6cd Revert "Don't use DISTFILES_CACHE" 
This reverts commit 81041332b2.
 2019-02-13 12:46:46 -02:00
jim-p
354b1c750d Fix OU Name DN entry when creating a user cert. Fixes #9317 2019-02-13 08:37:38 -05:00
jim-p
e0b32eb9e6 Correct syntax error in diag_backup.php. Fixes #9316 2019-02-13 08:36:38 -05:00
Luiz Souza
d73d911c2a Use the OpenSSL from ports for now. 
This should allow the build of the broken ports (no OpenSSL 1.1.0 support).
 2019-02-13 14:19:04 -02:00
Renato Botelho
4a3c054767 Bump version to 2.5.0-DEVELOPMENT and use RELENG_2_5 branch, based on FreeBSD 12.x 2019-02-13 11:11:37 -02:00
Luiz Souza
a73f3147e2 Disable the build of www/pound for now, it is not compatible with OpenSSL 1.1.0. 2019-02-13 12:38:48 -02:00
Luiz Souza
39d77ff198 Fix the build of net-mgmt/net-snmp on 12, disable the TLS support for now. 2019-02-13 12:27:31 -02:00
Luiz Souza
b761d75c2e Fix the build of miniupnpd in 12, disable CHECK_PORTINUSE. 2019-02-13 11:59:36 -02:00
Luiz Souza
c91af4ac6a Force the <enableserial> on when restoring a backup on a device with serial only console. 
Affects multiple devices.

Ticket #1547
 2019-02-12 20:48:15 -02:00
jim-p
d0e9c31070 Fix limiter selection validation. 2019-02-12 10:32:21 -05:00
jim-p
069585172e Test $sform before use, fixes #9313 2019-02-12 10:23:57 -05:00
Renato Botelho
63cf3f3216 Ticket #9308: Sort country codes 2019-02-07 14:24:26 -02:00
Renato Botelho
a2b80f4510 Fix #9308: Obsolete now unused /etc/ca_countries 2019-02-07 13:35:40 -02:00
Renato Botelho
232b1a697a Ticket #9308: Replace use of /etc/ca_countries by get_cert_country_codes() 2019-02-07 13:34:51 -02:00
Renato Botelho
6a532672eb Ticket #9308: Implement get_cert_country_codes() to get the list of country codes to be used by CAs and Certs 2019-02-07 13:34:12 -02:00
Renato Botelho
d166b7e25d Make get_countr_code() parameter default to 'ALL' 2019-02-07 12:57:12 -02:00
jim-p
7e8bfed216 Add back DNS over TLS host verification code. Fixes #8602 
Requires Unbound 1.9.0_1 from pfsense/freebsd-ports, which fixes a bug
in Unbound 1.9.0 which did not fully implement OpenSSL 1.0.2 host
validation support. See https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=4206#c5
 2019-02-06 14:13:26 -05:00
Renato Botelho
c07f1c2667 Revert "Switch the 2.4.5 CE images to the new 2.4.5 development branch." 
This reverts commit 2735541ea6.
 2019-01-30 08:59:36 -02:00
jim-p
62baf07779 Add validation and encoding to various firewall advanced values. Issue #9294 2019-01-29 14:15:09 -05:00
jim-p
1072b9333c Encode shaper queue name before printing. Issue #9294 
Validation is already present and prevents bad values from being
entered.
 2019-01-29 12:40:38 -05:00
jim-p
261916e5d3 Input validation and encoding of IGMP proxy addresses. Issue #9294 2019-01-29 12:04:47 -05:00
jim-p
938988609c Validate NTP GPS type, encode output. Issue #9294 2019-01-29 11:48:50 -05:00
jim-p
57ccd08bf7 Encode traceroute error message. Issue #9294 2019-01-29 11:15:03 -05:00