Development May 2015

development@lists.ipfire.org

12 participants
25 discussions

Introducing DDNS
by Michael Tremer 21 Jun '16

21 Jun '16

Hello, this is a post to update you all about the recent developments regarding the support for the various upcoming dynamic DNS providers. Rationale Some of the major dynamic DNS providers stopped their free services or made them unusable so that people started searching for alternatives. In IPFire 2, a script called setddns.pl [1] is responsible for updating the dynamic DNS records. This script has grown over the last couple of months and if you have looked into it you will have noticed that it has become from ugly to almost un-maintainable. The decision that we don't want to take this mess with us into the next generation of IPFire was already made many years ago. DDNS A project called ddns was started which is a pure Python client that is much more flexible, cleanly rewritten and easily extensible. It is cross-platform, cross-distribution and does not need any third-party python modules. The basics already written years ago, Stefan Schantl and I worked on making this ready for IPFire 2 and added all the providers that are currently supported by setddns.pl and ez-ipupdate. The source for the new DDNS tool can be found over here: http://git.ipfire.org/?p=ddns.git;a=summary or on GitHub https://github.com/ipfire/ddns were you can send us pull requests for supporting new providers and so on. Bug reports go to the usual place: https://bugzilla.ipfire.org/describecomponents.cgi?product=DDNS%20Updater There is no fixed release schedule for this, but we are pretty sure that this won't take long until DDNS arrives in IPFire 2. That means that we won't take any patches for the setddns.pl script that add support for new providers any more. We appreciate any contribution and as always hope to get some feedback back from the community! Best, -Michael [1] http://git.ipfire.org/?p=ipfire-2.x.git;a=blob;f=src/scripts/setddns.pl;h=5…

6 18

[PATCH] apache: generating unique prime numbers and forbit use of weak DH cipher suites
by IT Superhack 09 Jun '15

09 Jun '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Changes: [1] Forbid the use of weak DH cipher suites in Apache. [2] Tell Apache to use a custom bunch of prime numbers. [3] Updated "httpscert" in order to generate those prime numbers. Those changes are supposed to fix a vulnerability called "logjam" in Apache. "Logjam" is a recently discovered vulnerability in the Diffie-Hellman-Key-Exchange. Affected are TLS/SSL connectiones, VPNs and other services which are relying on DH as well. References: [Bug #10856]: https://bugzilla.ipfire.org/show_bug.cgi?id=10856 [Further Information]: https://weakdh.org/ [Further Information (german)]: http://www.heise.de/security/meldung/Logjam-Attacke-Verschluesselung-von - -zehntausenden-Servern-gefaehrdet-2657502.html Please find the patch here: http://nopaste.ipfire.org/view/r8QWUyQF However, the patch can't applied to IPFire systems without creating unique prime numbers, since the configuration file of Apache expects the presence of a file called "/etc/httpd/dhparams.pem", if this one does not exist, Apache will likely crash. Please make sure to generate prime numbers by Pakfire during a upgrade: /usr/bin/openssl dhparam -out /etc/httpd/dhparams.pem 2048; I'm estimating that other software components of IPFire are still vulnerable to Lojgam (IPSec?). As soon as I have more information about this, I will roll out new patches. Best regards, Timmothy Wilson -----BEGIN PGP SIGNATURE----- iQEcBAEBCgAGBQJVay1mAAoJEOyLa1C5EazrDpgIALW/rNZKUbyBrDEtQCOa7xWx CL96hzWnZP+FwKHKIb7/Q0pBA4t3qnc/GijgytiPEXuHOmF9pKt/eZ9T9lFZ+3CX 39ZTyZL/STQMiTUDyAC2oHpA+UtqkiIXLVU0pBoHHRLOqYS7BC9oLQoAxlIE2HSi v9pJ8Fq4IKlBnhdpZv/uMuJ+aJntp0PIx/whfos/I57oSq0cGL8fzWND8JE0OkG6 c5rscYQt76sMnrmf8rx0LNdvRU3XqkKWs3fkketStcIwHxUTYAKpJK/8+LEj71k3 fLxyW6viTCu71VfBm+m1fcRmG/vFi6tts6B6ekyMhBiq3G+FYUVNpDlHQMl99/s= =bm/U -----END PGP SIGNATURE-----

4 15

Fix hardcoded strings in pppsetup.cgi
by Larsen 05 Jun '15

05 Jun '15

I noticed that some strings were hardcoded instead of using "$Lang::tr". Patch against next-branch attached. Lars

3 14

Added information about probable causes when pakfire cannot connect
by Larsen 01 Jun '15

01 Jun '15

I came across a problem where pakfire couldn´t connect and showed the following message again and again: CRYPTO WARN: The GnuPG isn't configured corectly. Trying now to fix this. CRYPTO WARN: It's normal to see this on first execution. server-list.db 100.00% |=============================>| 985.00 B DOWNLOAD ERROR: The downloaded file (2.17/lists/server-list.db) wasn't verified by IPFire.org. Sorry - Exiting... I solved this by opening port 11371 after spending some time to find that solution. Therefore, I created a patch that gives the user some advice what could be wrong if that message returns repeatedly. Lars

2 2

Patch for Typos in src/squid-accounting/acct.en.pl
by Larsen 01 Jun '15

01 Jun '15

I noticed some minor typos. Patch is attached. Lars

2 2

[PATCH] Mass rebuild of perl and perl modules.
by Stefan Schantl 31 May '15

31 May '15

Perl and all binary modules needs a rebuild with the latest version of pakfire (0.9.26-3.1) to provide and requires the correct perl API information for a correct dependency resolving. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- perl-BDB/perl-BDB.nm | 3 ++- perl-Coro/perl-Coro.nm | 3 ++- perl-DBI/perl-DBI.nm | 3 ++- perl-Digest-SHA1/perl-Digest-SHA1.nm | 3 ++- perl-FCGI/perl-FCGI.nm | 3 ++- perl-HTML-Parser/perl-HTML-Parser.nm | 3 ++- perl-IO-AIO/perl-IO-AIO.nm | 3 ++- perl-TermReadKey/perl-TermReadKey.nm | 3 ++- perl-Tk/perl-Tk.nm | 3 ++- perl-WWW-Curl/perl-WWW-Curl.nm | 3 ++- perl-XML-Parser/perl-XML-Parser.nm | 3 ++- perl-common-sense/perl-common-sense.nm | 3 ++- perl-libintl-perl/perl-libintl-perl.nm | 5 ++--- perl/perl.nm | 3 ++- 14 files changed, 28 insertions(+), 16 deletions(-) diff --git a/perl-BDB/perl-BDB.nm b/perl-BDB/perl-BDB.nm index 507bffd..326ee37 100644 --- a/perl-BDB/perl-BDB.nm +++ b/perl-BDB/perl-BDB.nm @@ -5,7 +5,7 @@ name = perl-BDB version = 1.91 -release = 1 +release = 1.1 thisapp = BDB-%{version} groups = Development/Libraries @@ -25,6 +25,7 @@ build perl(ExtUtils::MakeMaker) perl(ExtUtils::ParseXS) libdb-devel + pakfire >= 0.9.26-3.1 end build diff --git a/perl-Coro/perl-Coro.nm b/perl-Coro/perl-Coro.nm index cad57d0..5f25160 100644 --- a/perl-Coro/perl-Coro.nm +++ b/perl-Coro/perl-Coro.nm @@ -5,7 +5,7 @@ name = perl-Coro version = 6.42 -release = 1 +release = 1.1 thisapp = Coro-%{version} groups = Development/Libraries @@ -26,6 +26,7 @@ build requires perl(ExtUtils::MakeMaker) perl(ExtUtils::ParseXS) + pakfire >= 0.9.26-3.1 end prepare_cmds diff --git a/perl-DBI/perl-DBI.nm b/perl-DBI/perl-DBI.nm index 9e76605..8bc06bc 100644 --- a/perl-DBI/perl-DBI.nm +++ b/perl-DBI/perl-DBI.nm @@ -5,7 +5,7 @@ name = perl-DBI version = 1.633 -release = 1 +release = 1.1 thisapp = DBI-%{version} groups = Development/Libraries @@ -26,6 +26,7 @@ build perl(ExtUtils::ParseXS) perl(Carp) perl(Test::Simple) + pakfire >= 0.9.26-3.1 end build diff --git a/perl-Digest-SHA1/perl-Digest-SHA1.nm b/perl-Digest-SHA1/perl-Digest-SHA1.nm index 736fd9c..ac3aaa4 100644 --- a/perl-Digest-SHA1/perl-Digest-SHA1.nm +++ b/perl-Digest-SHA1/perl-Digest-SHA1.nm @@ -5,7 +5,7 @@ name = perl-Digest-SHA1 version = 2.13 -release = 4 +release = 4.1 thisapp = Digest-SHA1-%{version} groups = Development/Libraries @@ -33,6 +33,7 @@ build requires perl(ExtUtils::MakeMaker) perl(ExtUtils::ParseXS) + pakfire >= 0.9.26-3.1 end build diff --git a/perl-FCGI/perl-FCGI.nm b/perl-FCGI/perl-FCGI.nm index a810587..c2f3a3b 100644 --- a/perl-FCGI/perl-FCGI.nm +++ b/perl-FCGI/perl-FCGI.nm @@ -5,7 +5,7 @@ name = perl-FCGI version = 0.77 -release = 1 +release = 1.1 thisapp = FCGI-%{version} groups = Development/Libraries @@ -23,6 +23,7 @@ build requires perl(ExtUtils::MakeMaker) perl(ExtUtils::ParseXS) + pakfire >= 0.9.26-3.1 end build diff --git a/perl-HTML-Parser/perl-HTML-Parser.nm b/perl-HTML-Parser/perl-HTML-Parser.nm index 1d55894..02d8b3c 100644 --- a/perl-HTML-Parser/perl-HTML-Parser.nm +++ b/perl-HTML-Parser/perl-HTML-Parser.nm @@ -5,7 +5,7 @@ name = perl-HTML-Parser version = 3.71 -release = 1 +release = 1.1 groups = Development/Libratries url = http://search.cpan.org/dist/HTML-Parser/ @@ -28,6 +28,7 @@ build perl-devel perl(HTML::Tagset) perl(Test::More) + pakfire >= 0.9.26-3.1 end build diff --git a/perl-IO-AIO/perl-IO-AIO.nm b/perl-IO-AIO/perl-IO-AIO.nm index b2adec7..f15a05f 100644 --- a/perl-IO-AIO/perl-IO-AIO.nm +++ b/perl-IO-AIO/perl-IO-AIO.nm @@ -5,7 +5,7 @@ name = perl-IO-AIO version = 4.32 -release = 1 +release = 1.1 thisapp = IO-AIO-%{version} groups = Development/Libraries @@ -26,6 +26,7 @@ build perl(ExtUtils::ParseXS) perl(Carp) perl(common::sense) + pakfire >= 0.9.26-3.1 end build diff --git a/perl-TermReadKey/perl-TermReadKey.nm b/perl-TermReadKey/perl-TermReadKey.nm index 20896ca..58acccc 100644 --- a/perl-TermReadKey/perl-TermReadKey.nm +++ b/perl-TermReadKey/perl-TermReadKey.nm @@ -5,7 +5,7 @@ name = perl-TermReadKey version = 2.32 -release = 1 +release = 1.1 thisapp = TermReadKey-%{version} groups = Development/Libraries @@ -31,6 +31,7 @@ build perl(Carp) perl(Exporter) perl(ExtUtils::MakeMaker) + pakfire >= 0.9.26-3.1 end build diff --git a/perl-Tk/perl-Tk.nm b/perl-Tk/perl-Tk.nm index 9c7e449..665335d 100644 --- a/perl-Tk/perl-Tk.nm +++ b/perl-Tk/perl-Tk.nm @@ -5,7 +5,7 @@ name = perl-Tk version = 804.033 -release = 1 +release = 1.1 thisapp = Tk-%{version} groups = Development/Libraries @@ -34,6 +34,7 @@ build libpng-devel libX11-devel libXft-devel + pakfire >= 0.9.26-3.1 end build diff --git a/perl-WWW-Curl/perl-WWW-Curl.nm b/perl-WWW-Curl/perl-WWW-Curl.nm index 84895f8..736a80e 100644 --- a/perl-WWW-Curl/perl-WWW-Curl.nm +++ b/perl-WWW-Curl/perl-WWW-Curl.nm @@ -5,7 +5,7 @@ name = perl-WWW-Curl version = 4.17 -release = 1 +release = 1.1 thisapp = WWW-Curl-%{version} groups = Development/Libraries @@ -24,6 +24,7 @@ build perl(ExtUtils::MakeMaker) perl(ExtUtils::ParseXS) libcurl-devel + pakfire >= 0.9.26-3.1 end build diff --git a/perl-XML-Parser/perl-XML-Parser.nm b/perl-XML-Parser/perl-XML-Parser.nm index 7c3b249..90fccd4 100644 --- a/perl-XML-Parser/perl-XML-Parser.nm +++ b/perl-XML-Parser/perl-XML-Parser.nm @@ -5,7 +5,7 @@ name = perl-XML-Parser version = 2.44 -release = 1 +release = 1.1 thisapp = XML-Parser-%{version} groups = Development/Libraries @@ -24,6 +24,7 @@ source_dl = http://search.cpan.org/CPAN/authors/id/T/TO/TODDR/ build requires expat-devel + pakfire >= 0.9.26-3.1 perl-core perl-devel end diff --git a/perl-common-sense/perl-common-sense.nm b/perl-common-sense/perl-common-sense.nm index f71a743..54ed9bc 100644 --- a/perl-common-sense/perl-common-sense.nm +++ b/perl-common-sense/perl-common-sense.nm @@ -5,7 +5,7 @@ name = perl-common-sense version = 3.73 -release = 1 +release = 1.1 arch = noarch thisapp = common-sense-%{version} @@ -30,6 +30,7 @@ build requires perl(ExtUtils::MakeMaker) perl(ExtUtils::ParseXS) + pakfire >= 0.9.26-3.1 end build diff --git a/perl-libintl-perl/perl-libintl-perl.nm b/perl-libintl-perl/perl-libintl-perl.nm index bb3b8c5..e1f5b67 100644 --- a/perl-libintl-perl/perl-libintl-perl.nm +++ b/perl-libintl-perl/perl-libintl-perl.nm @@ -5,7 +5,7 @@ name = perl-libintl-perl version = 1.23 -release = 2 +release = 2.1 thisapp = libintl-perl-%{version} groups = Development/Libraries @@ -24,9 +24,8 @@ source_dl = http://search.cpan.org/CPAN/authors/id/G/GU/GUIDO/ build requires /usr/bin/xsubpp - # required for perl macros - pakfire-builder >= 0.9.23-6 perl(ExtUtils::MakeMaker) + pakfire >= 0.9.26-3.1 end build diff --git a/perl/perl.nm b/perl/perl.nm index ce7fbf3..c31463e 100644 --- a/perl/perl.nm +++ b/perl/perl.nm @@ -6,7 +6,7 @@ name = perl version = 5.20.2 # Never reset release in this package, just increase. -release = 13.1 +release = 13.2 perl_epoch = 2 thisver = %{perl_epoch}:%{version}-%{_release} @@ -40,6 +40,7 @@ build perl procps zlib-devel + pakfire >= 0.9.26-3.1 end # Perl passes -fstack-protector, if no argument is passed that enables the SSP. -- 2.1.0

1 0

[PATCH] pakfire: Add upstream patch for perl version.
by Stefan Schantl 31 May '15

31 May '15

This patch is required in order to automatically detect the perl version and to track the perl API which a module is built against. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- pakfire/pakfire.nm | 2 +- pakfire/patches/0002-pakfire-perl_version.patch | 21 +++++++++++++++++++++ 2 files changed, 22 insertions(+), 1 deletion(-) create mode 100644 pakfire/patches/0002-pakfire-perl_version.patch diff --git a/pakfire/pakfire.nm b/pakfire/pakfire.nm index 45a1c25..21e2bfa 100644 --- a/pakfire/pakfire.nm +++ b/pakfire/pakfire.nm @@ -5,7 +5,7 @@ name = pakfire version = 0.9.26 -release = 3 +release = 3.1 maintainer = Michael Tremer <michael.tremer(a)ipfire.org> groups = System/Packaging diff --git a/pakfire/patches/0002-pakfire-perl_version.patch b/pakfire/patches/0002-pakfire-perl_version.patch new file mode 100644 index 0000000..6b5faea --- /dev/null +++ b/pakfire/patches/0002-pakfire-perl_version.patch @@ -0,0 +1,21 @@ +commit 582d5734cfcd11de7563366f9788ea72803277e6 +Author: Stefan Schantl <stefan.schantl(a)ipfire.org> +Date: Sat Apr 4 15:33:58 2015 +0200 + + perl.macro: Add "perl_version". + + This variable is used to store the current used perl version, which + will be used in various external perl modules to track API dependencies. + +diff --git a/macros/perl.macro b/macros/perl.macro +index b29e028..aa8fa81 100644 +--- a/macros/perl.macro ++++ b/macros/perl.macro +@@ -7,6 +7,7 @@ perl_vendorarch = %(eval "$(%{perl} -V:installvendorarch)"; echo ${installvendor + perl_vendorlib = %(eval "$(%{perl} -V:installvendorlib)"; echo ${installvendorlib}) + perl_archlib = %(eval "$(%{perl} -V:installarchlib)"; echo ${installarchlib}) + perl_privlib = %(eval "$(%{perl} -V:installprivlib)"; echo ${installprivlib}) ++perl_version = %(eval "$(%{perl} -V:version)"; echo ${version}) + + perl_all_paths = {%{perl_vendorarch},%{perl_vendorlib},%{perl_archlib},%{perl_privlib}} + -- 2.1.0

1 0

[PATCH] pango: Generate modules cache on install and update if not present.
by Stefan Schantl 30 May '15

30 May '15

Now the modules cache automatically will be created on install or after pango has been updated. The module cache is required for any usage of pango. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- pango/pango.nm | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/pango/pango.nm b/pango/pango.nm index cdb457d..5d83c94 100644 --- a/pango/pango.nm +++ b/pango/pango.nm @@ -7,7 +7,9 @@ name = pango version = %{ver_major}.%{ver_minor} ver_major = 1.36 ver_minor = 8 -release = 1 +release = 2 + +bin_version = 1.8.0 groups = System/Libraries url = http://www.pango.org/ @@ -39,10 +41,24 @@ build configure_options += \ --enable-introspection=yes + + install_cmds + touch %{BUILDROOT}%{libdir}/pango/%{bin_version}/modules.cache + end end packages package %{name} + script postin + /usr/bin/pango-querymodules --update-cache || : + end + + script postup + if [ ! -e "%{libdir}/pango/%{bin_version}/modules.cache" ]; then + /usr/bin/pango-querymodules --update-cache || : + fi + end + end package %{name}-devel template DEVEL -- 2.1.0

1 0

[PATCH] tmux: Update to version 2.0.
by Stefan Schantl 30 May '15

30 May '15

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- tmux/patches/tmux-fix-malloc-check-error.patch0 | 12 ------------ tmux/tmux.nm | 4 ++-- 2 files changed, 2 insertions(+), 14 deletions(-) delete mode 100644 tmux/patches/tmux-fix-malloc-check-error.patch0 diff --git a/tmux/patches/tmux-fix-malloc-check-error.patch0 b/tmux/patches/tmux-fix-malloc-check-error.patch0 deleted file mode 100644 index 2ae549d..0000000 --- a/tmux/patches/tmux-fix-malloc-check-error.patch0 +++ /dev/null @@ -1,12 +0,0 @@ ---- cmd.c-orig 2014-02-26 09:57:06.441154327 -0300 -+++ cmd.c 2014-02-26 09:58:00.631888951 -0300 -@@ -138,6 +138,9 @@ - size_t arglen; - int i; - -+ if (argc == 0) -+ return (0); -+ - *buf = '\0'; - for (i = 0; i < argc; i++) { - if (strlcpy(buf, argv[i], len) >= len) diff --git a/tmux/tmux.nm b/tmux/tmux.nm index 6f574f9..ac3a556 100644 --- a/tmux/tmux.nm +++ b/tmux/tmux.nm @@ -4,8 +4,8 @@ ############################################################################### name = tmux -version = 1.9a -release = 2 +version = 2.0 +release = 1 groups = Application/System url = http://sourceforge.net/projects/tmux -- 2.1.0

2 1

Guardian 2.0 Testversion 011
by Stefan Schantl 28 May '15

28 May '15

Hello followers, at first I have to thanks to all of you which have joined the guardian 2.0 testing team. I've got a lot of positive feedback but also has been noticed about several tiny issues. I've uploaded an updated test version to http://people.ipfire.org/~stevee/guardian-2.0/. The installation / update works in the same way as described in the planet post: http://planet.ipfire.org/post/introducing-guardian-2-0-for-ipfire IMPORTANT: Please create a backup of your files stored in "/var/ipfire/guardian/", otherwise the will be overwritten by the update! Changelog: * Matthias Fischer detected some small problems in the "guardian.cgi" and provided some patches for them. http://git.ipfire.org/?p=people/stevee/ipfire-2.x.git;a=commit;h=19d6abcce5… http://git.ipfire.org/?p=people/stevee/ipfire-2.x.git;a=commit;h=0a6c3cb896… http://git.ipfire.org/?p=people/stevee/ipfire-2.x.git;a=commit;h=82208c83c7… * Blago Culjak informed me about problems on starting guardian and displaying it's status in the web interface. This behaviour only happens when the legacy version of guardian has been un-installed and not just replaced by the guardian. In the updated version contains the required file which is used by various IPFire scripts to detect if an addon is installed or not. * The CLI switch "-d" called "debug mode" has been replaced by "-f" to launch guardian and run it in the foreground. http://git.ipfire.org/?p=people/stevee/ipfire-2.x.git;a=commit;h=a58bd67486… * Some new code has been added to prevent from starting multiple instances of guardian. http://git.ipfire.org/?p=people/stevee/ipfire-2.x.git;a=commit;h=9d44c0d995… Best regards, -Stefan

5 12

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development May 2015