Commit Graph

33952 Commits

Author SHA1 Message Date
Phil Davis
f95d6bdc19
No need to check for HTML in NAT 1to1 or NAT Out descr 2017-03-17 11:26:48 +05:45
Phil Davis
58e8a4fd52
No need to check for HTML in NAT descr 2017-03-17 11:15:33 +05:45
jim-p
59fada5c1f Run custom deinstall commands during the deinstall phase instead of post-deinstall, otherwise they will never get run. Fixes #7401 2017-03-16 14:04:28 -04:00
jim-p
803ca43a02 Perform a filter reload after starting relayd so it does not leave the firewall without pf tables. Fixes #7396 2017-03-15 15:01:53 -04:00
Steve Beaver
4594038a11 Don't display the "export key" icon if there is no key to export. e.g. If hte cert was created from a pasted-in CSR 2017-03-15 14:00:55 -04:00
Steve Beaver
258e3b0294 Base64 encode private key 2017-03-15 12:51:01 -04:00
Steve Beaver
55047259ec Add the ability to save a private key with the newly signed cert 2017-03-15 12:30:21 -04:00
Steve Beaver
d520da3142 Revised certificate selectors to use refid rather than index 2017-03-15 11:49:18 -04:00
Steve Beaver
d6107e1a4b Deleted CSR key textarea - No longer required 2017-03-15 11:08:54 -04:00
jim-p
92005dd1a5 Merge pull request #3515 from marjohn56/master 2017-03-15 10:18:29 -04:00
jim-p
de79e1c58d Merge pull request #3583 from phil-davis/alias-hover-text 2017-03-15 10:18:09 -04:00
jim-p
08f92b9f0f Merge pull request #3457 from stilez/patch-38 2017-03-15 10:17:40 -04:00
Steve Beaver
b078cd59f8 Revised error handling for CSR signing 2017-03-15 10:14:55 -04:00
Steve Beaver
d0a8de187d Spelling fix in help text 2017-03-14 23:06:22 -04:00
Luiz Otavio O Souza
915c934bff Sort the interface names.
No functional change.
2017-03-14 18:02:59 -05:00
Steve Beaver
65d735f02f Improve error detection in Openssl lib 2017-03-14 16:56:50 -04:00
Steve Beaver
2052d3e2ae Added the ability to sign a CSR 2017-03-14 14:43:29 -04:00
marjohn56
72c34055ec Fix Vars for Interface naming 2017-03-12 22:25:48 +00:00
marjohn56
07c304a559 WAN flap loss of IPv6
Some hardware is taking too long to set ACCEPT_RTADV on the Interface,
this results in RTSOLD exiting and this not sending RS to start the
process. Apart from adding a delay to the start of RTSOLD which did
improve but not totally fix the issue the other change is to prevent the
call to -ACCEPT_RTADV if the interface is using DHCP6.

-ACCEPT_RTADV in the case of wancfg['dhcp6usev4iface'] || $wancfg['ipaddr']==='ppp'

Cleaning up dhcp6c kill calls.

ppp-ipv6
Changed to call kill_dhcp6client_process() to make
sure the lock files are also cleared.

Interfaces.php
Changed to call kill_dhcp6client_process() to make
sure the lock files are also cleared.
2017-03-12 11:03:53 +00:00
Renato Botelho
2b359eda6d Revert "C2758 is VGA only too"
This reverts commit 3244266fd8.
2017-03-09 10:17:21 -03:00
Renato Botelho
3244266fd8 C2758 is VGA only too 2017-03-09 09:47:16 -03:00
Renato Botelho
209e95d652 Merge pull request #3626 from phil-davis/trigger-initial-wizard-7364 2017-03-08 14:39:15 -03:00
Renato Botelho
b25977ab97 Merge pull request #3577 from phil-davis/patch-10 2017-03-08 13:54:39 -03:00
Renato Botelho
c730077835 Setup XG-154x console to VGA only 2017-03-08 13:40:55 -03:00
jim-p
8414184612 Remove whirlpool from the list of CA/Cert digest algorithms as it does not work properly. OpenSSL claims it's not valid ("unknown signature algorithm"). Fixes #7370
While I'm here, stop needlessly repeating the algo list, it's a global in certs.inc, so use that single copy of the list.
2017-03-08 10:03:19 -05:00
jim-p
5ce9bcf5ed Fix display of openssl errors when working with CA or certificate entries. Found this while looking into ticket #7370 2017-03-08 09:57:19 -05:00
marjohn56
718cbc2d39 New dhcp6c features REASONS and signals
This PR takes advantage of modifications and additions to dhcp6c.

Firstly, a fix has been made to dhcp6c where the pid was being deleted
before all processes had completed; this could leave dhcp6c sending
release signals but any check for the process using the pid would return
false; thus if the server was not responding or the WAN was down then
dhcp6c could sit there for tens of seconds even though it appeared to
have exited.

The env var REASON has been updated to provide information as to why the
script has been called. These can be one of the following:

REASON=INFO
REASON=REPLY
REASON=RENEW
REASON=RELEASE
REASON=REBIND
REASON=EXIT
REASON=OTHER

The OTHER is a final catch and should never happen.

The scripts take advantage of these vars, for example a renew no longer
calls rc.newwanipv6.

The use of SIGUSR1 and SIGUSR2 to terminate dhcp6c results in different
exits. SIGUSR1 will force an exit without sending a release to the
server, this is used in the case of a WAN down event to prevent dhcp6c
from hanging on a release signal. SIGUSR2 is used to send a relase
signal overiding the no-release flag ( if set ), no code or GUI
additions have been added to make use of this signal in this PR. The
existing SIGTERM will cause dhcp6c to exit normally obeying the
no-release flag if set.

NOTE - The code for SIGUSR2 is in place in this file but as yet it is not
included in dhcp6c. In the event of SIGUSR2 being called, it will fall
through to a standard SIGTERM exit.

Debugging messages have been added to the scripts
dhcp6c_{$interface}dhcp6withoutra_script.sh and
dhcp6c{$interface}_script.sh. These debug messages only appear if the
debug setting for dhcp6c has been set in the config, they also appear in
the dhcp log rather than the main system log.

This PR is dependant on PR#5 at hrs-allbsd:freebsd or
pfsense/FreeBSD-ports #299

These changes are in response to Redmine 5993, 6944, 7145 and 7185.

Updated to match new upstream dhcp6c

changed REASON=REPLY to REASON=REQUEST.

K&R Corrections
2017-03-08 08:42:00 +00:00
Phil Davis
75a1149e01
Fix #7364 Console assigned VLAN disappears after reboot 2017-03-08 13:57:01 +05:45
jim-p
8724b1add2 Some small improvements to help with ticket #7256
They don't fix the problem but avoid some pitfalls that could contribute to it.
2017-03-07 13:43:47 -05:00
Renato Botelho
a095b039a2 Merge pull request #3574 from phil-davis/wrap-host-domain-names 2017-03-07 15:01:57 -03:00
Renato Botelho
3aa941d0c2 Merge pull request #3606 from PiBa-NL/igmp_apply-20170303 2017-03-07 15:01:21 -03:00
Renato Botelho
96d243a543 Merge pull request #3603 from NOYB/RAM_Disk_Settings_GUI 2017-03-07 14:59:24 -03:00
Steve Beaver
294f14f789 Set new blog URL (https://www.netgate.com/blog/) as default for RSS widget 2017-03-07 11:49:21 -05:00
Renato Botelho
b268e2f4d9 Merge pull request #3623 from doktornotor/patch-24 2017-03-07 08:27:40 -03:00
doktornotor
8901d6e7b3 Add reason to write_config() call 2017-03-07 12:24:03 +01:00
Renato Botelho
9460a58879 Merge pull request #3615 from doktornotor/patch-17 2017-03-07 08:23:01 -03:00
doktornotor
830cafe845 Add reason to write_config() calls 2017-03-07 12:22:36 +01:00
Renato Botelho
18e2c82c21 Merge pull request #3611 from doktornotor/patch-10 2017-03-07 08:22:05 -03:00
Renato Botelho
0c12cd8fc0 Merge pull request #3612 from doktornotor/patch-14 2017-03-07 08:21:09 -03:00
Renato Botelho
ca9a16216b Merge pull request #3622 from doktornotor/patch-23 2017-03-07 08:17:51 -03:00
Renato Botelho
e0b5d15822 Merge pull request #3616 from doktornotor/patch-18 2017-03-07 08:16:43 -03:00
doktornotor
1eab813484 Add reason to write_config() call 2017-03-07 12:15:53 +01:00
doktornotor
9f1b6537ff Add reason to write_config() call 2017-03-07 12:14:29 +01:00
Renato Botelho
777a944617 Merge pull request #3619 from phil-davis/write_config_openvpn 2017-03-07 08:14:28 -03:00
Renato Botelho
2d4422d968 Merge pull request #3618 from doktornotor/patch-20 2017-03-07 08:13:42 -03:00
doktornotor
0308b45699 Add reason to write_config() call 2017-03-07 12:12:51 +01:00
Renato Botelho
f6e32e2b73 Merge pull request #3617 from doktornotor/patch-19 2017-03-07 08:12:46 -03:00
Renato Botelho
3b179f61dd Merge pull request #3620 from doktornotor/patch-21 2017-03-07 08:12:18 -03:00
Renato Botelho
a4ce26c384 Merge pull request #3621 from doktornotor/patch-22 2017-03-07 08:10:35 -03:00
doktornotor
4734cf7f1c Add reason to write_config() call 2017-03-07 12:05:09 +01:00