From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Tremer To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 61681636815f07d657e099636620a5d65cdb3ecc Date: Mon, 17 Aug 2020 15:10:13 +0000 Message-ID: <4BVcsx5QsYz2xcm@people01.haj.ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3505230373089033472==" List-Id: --===============3505230373089033472== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 61681636815f07d657e099636620a5d65cdb3ecc (commit) via 9b3465584083c724df748beb8bf538cd121d2d9c (commit) via 8d25e59811706818350b2084b8e610f9e1447a68 (commit) via 6992457365975db987b56a792d017099b71a995a (commit) via db376b589597d87afa7ab3322468e302316a2559 (commit) via 2fa9dfa8d9a0f15c3a3b9508dadc356a5f9c5024 (commit) via 62e68ad323c51c08d93dc3d1f8ca4cb7e1decb92 (commit) via 942446b553235db212d1dfda63bd9ab52eef4c29 (commit) via 0d1054abc955eb6a0b772fd089d23f8b4af31f9a (commit) via 80dd69380d19e8153a7a56d7b7ca01476f99f69f (commit) via ba50f66da3dd6ef7c28157d662e97df7acba5685 (commit) via b970ae902a2514c14c1569fa5ea81cc7bf5a64a7 (commit) via fa8edb9bd7c2bf275b19f8e8b6be8cf43ae189f0 (commit) via c0fe5ea57925e453a7e733b08f3688554da69367 (commit) via 6408a43c0d809f6ac238110548c703806c20d3b0 (commit) via 6a73c7b94c35026970cce6a603be7e19c51a3811 (commit) via 48aae162c65f508dee4ec2b7ad3c00f5dc5ca2cd (commit) via 159cab272a8e470b6764c680db22e2bc12488a70 (commit) from 44bfc406407fcba783b532ce5e5bcd91092e08d0 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 61681636815f07d657e099636620a5d65cdb3ecc Author: Michael Tremer Date: Mon Aug 17 15:09:51 2020 +0000 u-boot: Fix build with GCC 10 =20 Signed-off-by: Michael Tremer commit 9b3465584083c724df748beb8bf538cd121d2d9c Author: Michael Tremer Date: Mon Aug 17 15:09:24 2020 +0000 grub: Run autoreconf after applying patches =20 Signed-off-by: Michael Tremer commit 8d25e59811706818350b2084b8e610f9e1447a68 Author: Michael Tremer Date: Mon Aug 17 10:19:47 2020 +0000 core149: Ship everything that was recently updated =20 Signed-off-by: Michael Tremer commit 6992457365975db987b56a792d017099b71a995a Author: Marcel Follert Date: Fri Jul 31 00:22:11 2020 +0200 socat: New package =20 Signed-off-by: Marcel Follert (Smooky) Reviewed-by: Michael Tremer Signed-off-by: Michael Tremer commit db376b589597d87afa7ab3322468e302316a2559 Author: Matthias Fischer Date: Sat Aug 15 20:29:27 2020 +0200 iproute2: Update to 5.8.0 =20 For details see: https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/log/?h=3Dv5.= 8.0 =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 2fa9dfa8d9a0f15c3a3b9508dadc356a5f9c5024 Author: Matthias Fischer Date: Sat Aug 15 20:11:39 2020 +0200 apache: Update to 2.4.46 =20 For details see: https://mirrors.ae-online.de/apache//httpd/CHANGES_2.4.46 =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 62e68ad323c51c08d93dc3d1f8ca4cb7e1decb92 Author: Matthias Fischer Date: Sat Aug 15 17:43:13 2020 +0200 logrotate: Update to 3.17.0 =20 For details see: https://github.com/logrotate/logrotate/releases/tag/3.17.0 =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 942446b553235db212d1dfda63bd9ab52eef4c29 Author: Erik Kapfer Date: Sat Aug 15 17:08:45 2020 +0200 OpenVPN: Add tls-version-min for TLSv1.2 =20 ovpnmain.cgi delivers now 'tls-version-min 1.2' for Roadwarrior and N2N. Since the server needs it only on server side, this patch do not includes= it for Roadwarrior clients. N2N do not uses push options therefor this directive will be included on = both sides. =20 To integrate the new directive into actual working OpenVPN server environ= ment, the following commands should be executed via update.sh. =20 Code block start: =20 if test -f "/var/ipfire/ovpn/server.conf"; then # Add tls-version-minimum to OpenVPN server if not already there if ! grep -q '^tls-version-min' /var/ipfire/ovpn/server.conf > /dev/null= 2>&1; then # Stop server before append the line /usr/local/bin/openvpnctrl -k # Append new directive echo >> "tls-version-min 1.2" /var/ipfire/ovpn/server.conf # Make sure server.conf have the correct permissions to prevent such # --> https://community.ipfire.org/t/unable-to-start-the-openvpn-server= /2465/54?u=3Dummeegge # case chown nobody:nobody /var/ipfire/ovpn/server.conf # Start server again /usr/local/bin/openvpnctrl -s fi fi =20 Code block end =20 Signed-off-by: Erik Kapfer Signed-off-by: Michael Tremer commit 0d1054abc955eb6a0b772fd089d23f8b4af31f9a Author: Erik Kapfer Date: Tue Aug 11 08:15:58 2020 +0000 curl: Update to version 7.71.1 =20 Several bugfixes and vulnerabilities has been fixed since the current ava= ilable version 7.64.0 . =20 For a full overview, the changelog is located in here --> https://curl.ha= xx.se/changes.html, a security problem overview in here --> https://curl.haxx.se/docs/securit= y.html . =20 Signed-off-by: Erik Kapfer Reviewed-by: Michael Tremer Signed-off-by: Michael Tremer commit 80dd69380d19e8153a7a56d7b7ca01476f99f69f Author: Stefan Schantl Date: Sat Aug 8 21:20:42 2020 +0200 hyperscan: Update to 5.3.0 =20 Signed-off-by: Stefan Schantl Reviewed-by: Michael Tremer Signed-off-by: Michael Tremer commit ba50f66da3dd6ef7c28157d662e97df7acba5685 Author: Erik Kapfer Date: Mon Aug 10 19:12:19 2020 +0200 OpenVPN: max-clients value has been enhanced =20 The --max-client value has been enhanced from 255 clients to 1024 clients. Error message gives now explanation if the maximum has been reached. =20 Patch has been triggered by https://community.ipfire.org/t/openvpn-max-vp= n-clients-quantity-and-connections/2925 . =20 Signed-off-by: Erik Kapfer Reviewed-by: Michael Tremer Signed-off-by: Michael Tremer commit b970ae902a2514c14c1569fa5ea81cc7bf5a64a7 Author: Michael Tremer Date: Wed Aug 5 12:35:20 2020 +0000 haproxy: Update to 2.2.2 =20 Signed-off-by: Michael Tremer commit fa8edb9bd7c2bf275b19f8e8b6be8cf43ae189f0 Author: Michael Tremer Date: Wed Aug 5 12:23:07 2020 +0000 index.cgi: Show a note to people who are running IPFire on i?86 =20 Signed-off-by: Michael Tremer commit c0fe5ea57925e453a7e733b08f3688554da69367 Author: Michael Tremer Date: Wed Aug 5 12:23:06 2020 +0000 index.cgi: Drop Reiser4 warning =20 We have dropped Reiser4 in 2013. There won't be any systems out there any more running it. We can safely drop this warning. =20 Signed-off-by: Michael Tremer commit 6408a43c0d809f6ac238110548c703806c20d3b0 Author: Stephan Feddersen Date: Tue Aug 4 21:31:15 2020 +0200 WIO. new version =20 Signed-off-by: Michael Tremer commit 6a73c7b94c35026970cce6a603be7e19c51a3811 Author: Stephan Feddersen Date: Tue Aug 4 21:31:14 2020 +0200 WIO: new french translation =20 Signed-off-by: Michael Tremer commit 48aae162c65f508dee4ec2b7ad3c00f5dc5ca2cd Author: Stephan Feddersen Date: Tue Aug 4 21:31:13 2020 +0200 WIO: code cleanup =20 Signed-off-by: Michael Tremer commit 159cab272a8e470b6764c680db22e2bc12488a70 Author: Peter M=C3=BCller Date: Sat Aug 1 12:13:47 2020 +0000 OpenSSL: remove ciphers without Forward Secrecy from default ciphersuite =20 Ciphers not supplying (Perfect) Forward Secrecy are considered dangerous since they allow content decryption in retrospect, if an attacker is able to gain access to the servers' private key used for the corresponding TLS session. =20 Since IPFire machines establish very few TLS connections by themselves, a= nd destinations (IPFire.org infrastructure, mirrors, IPS rule sources, etc.) provide support for Forward Secrecy ciphers - some are even enforcing them -, it is safe to drop support for anything else. =20 This patch reduces the OpenSSL default cipher list to: TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=3Dany Au=3Dany Enc=3DAESGCM(256)= Mac=3DAEAD TLS_CHACHA20_POLY1305_SHA256 TLSv1.3 Kx=3Dany Au=3Dany Enc=3DCHACHA= 20/POLY1305(256) Mac=3DAEAD TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=3Dany Au=3Dany Enc=3DAESGCM(128)= Mac=3DAEAD ECDHE-ECDSA-AES256-GCM-SHA384 TLSv1.2 Kx=3DECDH Au=3DECDSA Enc=3DAESG= CM(256) Mac=3DAEAD ECDHE-ECDSA-CHACHA20-POLY1305 TLSv1.2 Kx=3DECDH Au=3DECDSA Enc=3DCHAC= HA20/POLY1305(256) Mac=3DAEAD ECDHE-ECDSA-AES128-GCM-SHA256 TLSv1.2 Kx=3DECDH Au=3DECDSA Enc=3DAESG= CM(128) Mac=3DAEAD ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=3DECDH Au=3DRSA Enc=3DAESGCM(= 256) Mac=3DAEAD ECDHE-RSA-CHACHA20-POLY1305 TLSv1.2 Kx=3DECDH Au=3DRSA Enc=3DCHACHA2= 0/POLY1305(256) Mac=3DAEAD ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=3DECDH Au=3DRSA Enc=3DAESGCM(= 128) Mac=3DAEAD ECDHE-ECDSA-AES256-SHA384 TLSv1.2 Kx=3DECDH Au=3DECDSA Enc=3DAES(256)= Mac=3DSHA384 ECDHE-ECDSA-CAMELLIA256-SHA384 TLSv1.2 Kx=3DECDH Au=3DECDSA Enc=3DCam= ellia(256) Mac=3DSHA384 ECDHE-RSA-AES256-SHA384 TLSv1.2 Kx=3DECDH Au=3DRSA Enc=3DAES(256) M= ac=3DSHA384 ECDHE-RSA-CAMELLIA256-SHA384 TLSv1.2 Kx=3DECDH Au=3DRSA Enc=3DCamell= ia(256) Mac=3DSHA384 ECDHE-ECDSA-AES128-SHA256 TLSv1.2 Kx=3DECDH Au=3DECDSA Enc=3DAES(128)= Mac=3DSHA256 ECDHE-ECDSA-CAMELLIA128-SHA256 TLSv1.2 Kx=3DECDH Au=3DECDSA Enc=3DCam= ellia(128) Mac=3DSHA256 ECDHE-RSA-AES128-SHA256 TLSv1.2 Kx=3DECDH Au=3DRSA Enc=3DAES(128) M= ac=3DSHA256 ECDHE-RSA-CAMELLIA128-SHA256 TLSv1.2 Kx=3DECDH Au=3DRSA Enc=3DCamell= ia(128) Mac=3DSHA256 DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=3DDH Au=3DRSA Enc=3DAESGCM(25= 6) Mac=3DAEAD DHE-RSA-CHACHA20-POLY1305 TLSv1.2 Kx=3DDH Au=3DRSA Enc=3DCHACHA20/= POLY1305(256) Mac=3DAEAD DHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=3DDH Au=3DRSA Enc=3DAESGCM(12= 8) Mac=3DAEAD DHE-RSA-AES256-SHA256 TLSv1.2 Kx=3DDH Au=3DRSA Enc=3DAES(256) M= ac=3DSHA256 DHE-RSA-CAMELLIA256-SHA256 TLSv1.2 Kx=3DDH Au=3DRSA Enc=3DCamellia= (256) Mac=3DSHA256 DHE-RSA-AES128-SHA256 TLSv1.2 Kx=3DDH Au=3DRSA Enc=3DAES(128) M= ac=3DSHA256 DHE-RSA-CAMELLIA128-SHA256 TLSv1.2 Kx=3DDH Au=3DRSA Enc=3DCamellia= (128) Mac=3DSHA256 ECDHE-ECDSA-AES256-SHA TLSv1 Kx=3DECDH Au=3DECDSA Enc=3DAES(256) Ma= c=3DSHA1 ECDHE-ECDSA-AES128-SHA TLSv1 Kx=3DECDH Au=3DECDSA Enc=3DAES(128) Ma= c=3DSHA1 ECDHE-RSA-AES256-SHA TLSv1 Kx=3DECDH Au=3DRSA Enc=3DAES(256) Mac= =3DSHA1 ECDHE-RSA-AES128-SHA TLSv1 Kx=3DECDH Au=3DRSA Enc=3DAES(128) Mac= =3DSHA1 DHE-RSA-AES256-SHA SSLv3 Kx=3DDH Au=3DRSA Enc=3DAES(256) Mac= =3DSHA1 DHE-RSA-CAMELLIA256-SHA SSLv3 Kx=3DDH Au=3DRSA Enc=3DCamellia(256)= Mac=3DSHA1 DHE-RSA-AES128-SHA SSLv3 Kx=3DDH Au=3DRSA Enc=3DAES(128) Mac= =3DSHA1 DHE-RSA-CAMELLIA128-SHA SSLv3 Kx=3DDH Au=3DRSA Enc=3DCamellia(128)= Mac=3DSHA1 =20 Signed-off-by: Peter M=C3=BCller Acked-by: Michael Tremer Signed-off-by: Michael Tremer ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/curl | 18 +++++++++++- config/rootfiles/common/i586/hyperscan | 4 +-- config/rootfiles/common/iproute2 | 3 +- config/rootfiles/common/x86_64/hyperscan | 4 +-- .../133 =3D> core/149}/filelists/aarch64/gcc | 0 .../125 =3D> core/149}/filelists/aarch64/glibc | 0 .../147 =3D> core/149}/filelists/aarch64/gmp | 0 .../{oldcore/114 =3D> core/149}/filelists/apache2 | 0 .../100 =3D> core/149}/filelists/armv5tel/gcc | 0 .../100 =3D> core/149}/filelists/armv5tel/glibc | 0 .../101 =3D> core/149}/filelists/armv5tel/gmp | 0 .../{oldcore/104 =3D> core/149}/filelists/curl | 0 config/rootfiles/core/149/filelists/files | 2 ++ .../{oldcore/110 =3D> core/149}/filelists/gnutls | 0 .../{oldcore/111 =3D> core/149}/filelists/gzip | 0 .../{oldcore/100 =3D> core/149}/filelists/i586/gcc | 0 .../{oldcore/100 =3D> core/149}/filelists/i586/glibc | 0 .../{oldcore/101 =3D> core/149}/filelists/i586/gmp | 0 .../133 =3D> core/149}/filelists/i586/hyperscan | 0 .../100 =3D> core/149}/filelists/i586/openssl-sse2 | 0 .../{oldcore/106 =3D> core/149}/filelists/iproute2 | 0 .../{oldcore/112 =3D> core/149}/filelists/kbd | 0 .../{oldcore/148 =3D> core/149}/filelists/libloc | 0 .../{oldcore/111 =3D> core/149}/filelists/logrotate | 0 .../{oldcore/101 =3D> core/149}/filelists/mpfr | 0 .../{oldcore/100 =3D> core/149}/filelists/openssl | 0 .../{oldcore/136 =3D> core/149}/filelists/perl | 0 .../{oldcore/100 =3D> core/149}/filelists/squid | 0 .../{oldcore/106 =3D> core/149}/filelists/strongswan | 0 .../{oldcore/131 =3D> core/149}/filelists/suricata | 0 .../{oldcore/100 =3D> core/149}/filelists/x86_64/gcc | 0 .../100 =3D> core/149}/filelists/x86_64/glibc | 0 .../{oldcore/101 =3D> core/149}/filelists/x86_64/gmp | 0 .../133 =3D> core/149}/filelists/x86_64/hyperscan | 0 .../{oldcore/100 =3D> core/149}/filelists/xz | 0 config/rootfiles/core/149/update.sh | 3 +- config/rootfiles/packages/socat | 4 +++ doc/language_issues.de | 1 + doc/language_issues.en | 2 +- doc/language_issues.es | 2 +- doc/language_issues.fr | 2 ++ doc/language_issues.it | 2 ++ doc/language_issues.nl | 2 ++ doc/language_issues.pl | 2 +- doc/language_issues.ru | 2 +- doc/language_issues.tr | 2 ++ doc/language_missings | 7 +++++ html/cgi-bin/index.cgi | 13 ++++----- html/cgi-bin/ovpnmain.cgi | 10 ++++++- langs/de/cgi-bin/de.pl | 3 +- langs/en/cgi-bin/en.pl | 3 +- langs/es/cgi-bin/es.pl | 2 +- langs/fr/cgi-bin/fr.pl | 2 +- langs/it/cgi-bin/it.pl | 2 +- langs/nl/cgi-bin/nl.pl | 2 +- langs/pl/cgi-bin/pl.pl | 2 +- langs/ru/cgi-bin/ru.pl | 2 +- langs/tr/cgi-bin/tr.pl | 2 +- lfs/apache2 | 4 +-- lfs/curl | 8 +++--- lfs/grub | 1 + lfs/haproxy | 6 ++-- lfs/hyperscan | 4 +-- lfs/iproute2 | 4 +-- lfs/logrotate | 6 ++-- lfs/{libshout =3D> socat} | 16 +++++------ lfs/u-boot-friendlyarm | 2 ++ lfs/wio | 6 ++-- .../openssl-1.1.1d-default-cipherlist.patch | 2 +- src/wio/lang/wio.fr.pl | 32 +++++++++++---------= -- src/wio/wio.cgi | 9 +++--- 71 files changed, 128 insertions(+), 77 deletions(-) copy config/rootfiles/{oldcore/133 =3D> core/149}/filelists/aarch64/gcc (100= %) copy config/rootfiles/{oldcore/125 =3D> core/149}/filelists/aarch64/glibc (1= 00%) copy config/rootfiles/{oldcore/147 =3D> core/149}/filelists/aarch64/gmp (100= %) copy config/rootfiles/{oldcore/114 =3D> core/149}/filelists/apache2 (100%) copy config/rootfiles/{oldcore/100 =3D> core/149}/filelists/armv5tel/gcc (10= 0%) copy config/rootfiles/{oldcore/100 =3D> core/149}/filelists/armv5tel/glibc (= 100%) copy config/rootfiles/{oldcore/101 =3D> core/149}/filelists/armv5tel/gmp (10= 0%) copy config/rootfiles/{oldcore/104 =3D> core/149}/filelists/curl (100%) copy config/rootfiles/{oldcore/110 =3D> core/149}/filelists/gnutls (100%) copy config/rootfiles/{oldcore/111 =3D> core/149}/filelists/gzip (100%) copy config/rootfiles/{oldcore/100 =3D> core/149}/filelists/i586/gcc (100%) copy config/rootfiles/{oldcore/100 =3D> core/149}/filelists/i586/glibc (100%) copy config/rootfiles/{oldcore/101 =3D> core/149}/filelists/i586/gmp (100%) copy config/rootfiles/{oldcore/133 =3D> core/149}/filelists/i586/hyperscan (= 100%) copy config/rootfiles/{oldcore/100 =3D> core/149}/filelists/i586/openssl-sse= 2 (100%) copy config/rootfiles/{oldcore/106 =3D> core/149}/filelists/iproute2 (100%) copy config/rootfiles/{oldcore/112 =3D> core/149}/filelists/kbd (100%) copy config/rootfiles/{oldcore/148 =3D> core/149}/filelists/libloc (100%) copy config/rootfiles/{oldcore/111 =3D> core/149}/filelists/logrotate (100%) copy config/rootfiles/{oldcore/101 =3D> core/149}/filelists/mpfr (100%) copy config/rootfiles/{oldcore/100 =3D> core/149}/filelists/openssl (100%) copy config/rootfiles/{oldcore/136 =3D> core/149}/filelists/perl (100%) copy config/rootfiles/{oldcore/100 =3D> core/149}/filelists/squid (100%) copy config/rootfiles/{oldcore/106 =3D> core/149}/filelists/strongswan (100%) copy config/rootfiles/{oldcore/131 =3D> core/149}/filelists/suricata (100%) copy config/rootfiles/{oldcore/100 =3D> core/149}/filelists/x86_64/gcc (100%) copy config/rootfiles/{oldcore/100 =3D> core/149}/filelists/x86_64/glibc (10= 0%) copy config/rootfiles/{oldcore/101 =3D> core/149}/filelists/x86_64/gmp (100%) copy config/rootfiles/{oldcore/133 =3D> core/149}/filelists/x86_64/hyperscan= (100%) copy config/rootfiles/{oldcore/100 =3D> core/149}/filelists/xz (100%) create mode 100644 config/rootfiles/packages/socat copy lfs/{libshout =3D> socat} (92%) Difference in files: diff --git a/config/rootfiles/common/curl b/config/rootfiles/common/curl index 1eb9f6f37..68926a0bb 100644 --- a/config/rootfiles/common/curl +++ b/config/rootfiles/common/curl @@ -13,7 +13,7 @@ usr/bin/curl #usr/lib/libcurl.la #usr/lib/libcurl.so usr/lib/libcurl.so.4 -usr/lib/libcurl.so.4.5.0 +usr/lib/libcurl.so.4.6.0 #usr/lib/pkgconfig/libcurl.pc #usr/share/aclocal/libcurl.m4 #usr/share/man/man1/curl-config.1 @@ -60,6 +60,7 @@ usr/lib/libcurl.so.4.5.0 #usr/share/man/man3/CURLINFO_REDIRECT_URL.3 #usr/share/man/man3/CURLINFO_REQUEST_SIZE.3 #usr/share/man/man3/CURLINFO_RESPONSE_CODE.3 +#usr/share/man/man3/CURLINFO_RETRY_AFTER.3 #usr/share/man/man3/CURLINFO_RTSP_CLIENT_CSEQ.3 #usr/share/man/man3/CURLINFO_RTSP_CSEQ_RECV.3 #usr/share/man/man3/CURLINFO_RTSP_SERVER_CSEQ.3 @@ -84,6 +85,7 @@ usr/lib/libcurl.so.4.5.0 #usr/share/man/man3/CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE.3 #usr/share/man/man3/CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE.3 #usr/share/man/man3/CURLMOPT_MAXCONNECTS.3 +#usr/share/man/man3/CURLMOPT_MAX_CONCURRENT_STREAMS.3 #usr/share/man/man3/CURLMOPT_MAX_HOST_CONNECTIONS.3 #usr/share/man/man3/CURLMOPT_MAX_PIPELINE_LENGTH.3 #usr/share/man/man3/CURLMOPT_MAX_TOTAL_CONNECTIONS.3 @@ -100,6 +102,8 @@ usr/lib/libcurl.so.4.5.0 #usr/share/man/man3/CURLOPT_ACCEPTTIMEOUT_MS.3 #usr/share/man/man3/CURLOPT_ACCEPT_ENCODING.3 #usr/share/man/man3/CURLOPT_ADDRESS_SCOPE.3 +#usr/share/man/man3/CURLOPT_ALTSVC.3 +#usr/share/man/man3/CURLOPT_ALTSVC_CTRL.3 #usr/share/man/man3/CURLOPT_APPEND.3 #usr/share/man/man3/CURLOPT_AUTOREFERER.3 #usr/share/man/man3/CURLOPT_BUFFERSIZE.3 @@ -190,6 +194,7 @@ usr/lib/libcurl.so.4.5.0 #usr/share/man/man3/CURLOPT_IOCTLFUNCTION.3 #usr/share/man/man3/CURLOPT_IPRESOLVE.3 #usr/share/man/man3/CURLOPT_ISSUERCERT.3 +#usr/share/man/man3/CURLOPT_ISSUERCERT_BLOB.3 #usr/share/man/man3/CURLOPT_KEEP_SENDING_ON_ERROR.3 #usr/share/man/man3/CURLOPT_KEYPASSWD.3 #usr/share/man/man3/CURLOPT_KRBLEVEL.3 @@ -201,6 +206,8 @@ usr/lib/libcurl.so.4.5.0 #usr/share/man/man3/CURLOPT_MAIL_AUTH.3 #usr/share/man/man3/CURLOPT_MAIL_FROM.3 #usr/share/man/man3/CURLOPT_MAIL_RCPT.3 +#usr/share/man/man3/CURLOPT_MAIL_RCPT_ALLLOWFAILS.3 +#usr/share/man/man3/CURLOPT_MAXAGE_CONN.3 #usr/share/man/man3/CURLOPT_MAXCONNECTS.3 #usr/share/man/man3/CURLOPT_MAXFILESIZE.3 #usr/share/man/man3/CURLOPT_MAXFILESIZE_LARGE.3 @@ -246,13 +253,17 @@ usr/lib/libcurl.so.4.5.0 #usr/share/man/man3/CURLOPT_PROXY_CAINFO.3 #usr/share/man/man3/CURLOPT_PROXY_CAPATH.3 #usr/share/man/man3/CURLOPT_PROXY_CRLFILE.3 +#usr/share/man/man3/CURLOPT_PROXY_ISSUERCERT.3 +#usr/share/man/man3/CURLOPT_PROXY_ISSUERCERT_BLOB.3 #usr/share/man/man3/CURLOPT_PROXY_KEYPASSWD.3 #usr/share/man/man3/CURLOPT_PROXY_PINNEDPUBLICKEY.3 #usr/share/man/man3/CURLOPT_PROXY_SERVICE_NAME.3 #usr/share/man/man3/CURLOPT_PROXY_SSLCERT.3 #usr/share/man/man3/CURLOPT_PROXY_SSLCERTTYPE.3 +#usr/share/man/man3/CURLOPT_PROXY_SSLCERT_BLOB.3 #usr/share/man/man3/CURLOPT_PROXY_SSLKEY.3 #usr/share/man/man3/CURLOPT_PROXY_SSLKEYTYPE.3 +#usr/share/man/man3/CURLOPT_PROXY_SSLKEY_BLOB.3 #usr/share/man/man3/CURLOPT_PROXY_SSLVERSION.3 #usr/share/man/man3/CURLOPT_PROXY_SSL_CIPHER_LIST.3 #usr/share/man/man3/CURLOPT_PROXY_SSL_OPTIONS.3 @@ -283,6 +294,7 @@ usr/lib/libcurl.so.4.5.0 #usr/share/man/man3/CURLOPT_RTSP_SESSION_ID.3 #usr/share/man/man3/CURLOPT_RTSP_STREAM_URI.3 #usr/share/man/man3/CURLOPT_RTSP_TRANSPORT.3 +#usr/share/man/man3/CURLOPT_SASL_AUTHZID.3 #usr/share/man/man3/CURLOPT_SASL_IR.3 #usr/share/man/man3/CURLOPT_SEEKDATA.3 #usr/share/man/man3/CURLOPT_SEEKFUNCTION.3 @@ -303,10 +315,12 @@ usr/lib/libcurl.so.4.5.0 #usr/share/man/man3/CURLOPT_SSH_PUBLIC_KEYFILE.3 #usr/share/man/man3/CURLOPT_SSLCERT.3 #usr/share/man/man3/CURLOPT_SSLCERTTYPE.3 +#usr/share/man/man3/CURLOPT_SSLCERT_BLOB.3 #usr/share/man/man3/CURLOPT_SSLENGINE.3 #usr/share/man/man3/CURLOPT_SSLENGINE_DEFAULT.3 #usr/share/man/man3/CURLOPT_SSLKEY.3 #usr/share/man/man3/CURLOPT_SSLKEYTYPE.3 +#usr/share/man/man3/CURLOPT_SSLKEY_BLOB.3 #usr/share/man/man3/CURLOPT_SSLVERSION.3 #usr/share/man/man3/CURLOPT_SSL_CIPHER_LIST.3 #usr/share/man/man3/CURLOPT_SSL_CTX_DATA.3 @@ -407,6 +421,7 @@ usr/lib/libcurl.so.4.5.0 #usr/share/man/man3/curl_multi_info_read.3 #usr/share/man/man3/curl_multi_init.3 #usr/share/man/man3/curl_multi_perform.3 +#usr/share/man/man3/curl_multi_poll.3 #usr/share/man/man3/curl_multi_remove_handle.3 #usr/share/man/man3/curl_multi_setopt.3 #usr/share/man/man3/curl_multi_socket.3 @@ -415,6 +430,7 @@ usr/lib/libcurl.so.4.5.0 #usr/share/man/man3/curl_multi_strerror.3 #usr/share/man/man3/curl_multi_timeout.3 #usr/share/man/man3/curl_multi_wait.3 +#usr/share/man/man3/curl_multi_wakeup.3 #usr/share/man/man3/curl_share_cleanup.3 #usr/share/man/man3/curl_share_init.3 #usr/share/man/man3/curl_share_setopt.3 diff --git a/config/rootfiles/common/i586/hyperscan b/config/rootfiles/common= /i586/hyperscan index 945c2b68c..a091e22b5 100644 --- a/config/rootfiles/common/i586/hyperscan +++ b/config/rootfiles/common/i586/hyperscan @@ -5,10 +5,10 @@ #usr/include/hs/hs_runtime.h #usr/lib/libhs.so usr/lib/libhs.so.5 -usr/lib/libhs.so.5.2.1 +usr/lib/libhs.so.5.3.0 usr/lib/libhs_runtime.so usr/lib/libhs_runtime.so.5 -usr/lib/libhs_runtime.so.5.2.1 +usr/lib/libhs_runtime.so.5.3.0 #usr/lib/pkgconfig/libhs.pc #usr/share/doc/hyperscan #usr/share/doc/hyperscan/examples diff --git a/config/rootfiles/common/iproute2 b/config/rootfiles/common/iprou= te2 index e22f1649c..9be1212f6 100644 --- a/config/rootfiles/common/iproute2 +++ b/config/rootfiles/common/iproute2 @@ -63,6 +63,7 @@ usr/share/bash-completion/completions/tc #usr/share/man/man8/ip-macsec.8 #usr/share/man/man8/ip-maddress.8 #usr/share/man/man8/ip-monitor.8 +#usr/share/man/man8/ip-mptcp.8 #usr/share/man/man8/ip-mroute.8 #usr/share/man/man8/ip-neighbour.8 #usr/share/man/man8/ip-netconf.8 @@ -118,6 +119,7 @@ usr/share/bash-completion/completions/tc #usr/share/man/man8/tc-fq_codel.8 #usr/share/man/man8/tc-fq_pie.8 #usr/share/man/man8/tc-fw.8 +#usr/share/man/man8/tc-gate.8 #usr/share/man/man8/tc-hfsc.8 #usr/share/man/man8/tc-htb.8 #usr/share/man/man8/tc-ife.8 @@ -160,4 +162,3 @@ usr/share/bash-completion/completions/tc #usr/share/man/man8/tipc-socket.8 #usr/share/man/man8/tipc.8 #var/lib/arpd - diff --git a/config/rootfiles/common/x86_64/hyperscan b/config/rootfiles/comm= on/x86_64/hyperscan index 945c2b68c..a091e22b5 100644 --- a/config/rootfiles/common/x86_64/hyperscan +++ b/config/rootfiles/common/x86_64/hyperscan @@ -5,10 +5,10 @@ #usr/include/hs/hs_runtime.h #usr/lib/libhs.so usr/lib/libhs.so.5 -usr/lib/libhs.so.5.2.1 +usr/lib/libhs.so.5.3.0 usr/lib/libhs_runtime.so usr/lib/libhs_runtime.so.5 -usr/lib/libhs_runtime.so.5.2.1 +usr/lib/libhs_runtime.so.5.3.0 #usr/lib/pkgconfig/libhs.pc #usr/share/doc/hyperscan #usr/share/doc/hyperscan/examples diff --git a/config/rootfiles/core/149/filelists/aarch64/gcc b/config/rootfil= es/core/149/filelists/aarch64/gcc new file mode 120000 index 000000000..97678cc16 --- /dev/null +++ b/config/rootfiles/core/149/filelists/aarch64/gcc @@ -0,0 +1 @@ +../../../../common/aarch64/gcc \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/aarch64/glibc b/config/rootf= iles/core/149/filelists/aarch64/glibc new file mode 120000 index 000000000..d13849ff9 --- /dev/null +++ b/config/rootfiles/core/149/filelists/aarch64/glibc @@ -0,0 +1 @@ +../../../../common/aarch64/glibc \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/aarch64/gmp b/config/rootfil= es/core/149/filelists/aarch64/gmp new file mode 120000 index 000000000..418f2f98b --- /dev/null +++ b/config/rootfiles/core/149/filelists/aarch64/gmp @@ -0,0 +1 @@ +../../../../common/aarch64/gmp \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/apache2 b/config/rootfiles/c= ore/149/filelists/apache2 new file mode 120000 index 000000000..eef95efa7 --- /dev/null +++ b/config/rootfiles/core/149/filelists/apache2 @@ -0,0 +1 @@ +../../../common/apache2 \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/armv5tel/gcc b/config/rootfi= les/core/149/filelists/armv5tel/gcc new file mode 120000 index 000000000..84f7b9344 --- /dev/null +++ b/config/rootfiles/core/149/filelists/armv5tel/gcc @@ -0,0 +1 @@ +../../../../common/armv5tel/gcc \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/armv5tel/glibc b/config/root= files/core/149/filelists/armv5tel/glibc new file mode 120000 index 000000000..4c70d724b --- /dev/null +++ b/config/rootfiles/core/149/filelists/armv5tel/glibc @@ -0,0 +1 @@ +../../../../common/armv5tel/glibc \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/armv5tel/gmp b/config/rootfi= les/core/149/filelists/armv5tel/gmp new file mode 120000 index 000000000..2bdf30dac --- /dev/null +++ b/config/rootfiles/core/149/filelists/armv5tel/gmp @@ -0,0 +1 @@ +../../../../common/armv5tel/gmp \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/curl b/config/rootfiles/core= /149/filelists/curl new file mode 120000 index 000000000..4b84bef53 --- /dev/null +++ b/config/rootfiles/core/149/filelists/curl @@ -0,0 +1 @@ +../../../common/curl \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/files b/config/rootfiles/cor= e/149/filelists/files index 95a56178b..7348df2b6 100644 --- a/config/rootfiles/core/149/filelists/files +++ b/config/rootfiles/core/149/filelists/files @@ -1,6 +1,8 @@ etc/system-release etc/issue srv/web/ipfire/cgi-bin/credits.cgi +srv/web/ipfire/cgi-bin/index.cgi +srv/web/ipfire/cgi-bin/ovpnmain.cgi var/ipfire/langs etc/rc.d/helper/oci-setup etc/rc.d/init.d/cloud-init diff --git a/config/rootfiles/core/149/filelists/gnutls b/config/rootfiles/co= re/149/filelists/gnutls new file mode 120000 index 000000000..8dbe60bc3 --- /dev/null +++ b/config/rootfiles/core/149/filelists/gnutls @@ -0,0 +1 @@ +../../../common/gnutls \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/gzip b/config/rootfiles/core= /149/filelists/gzip new file mode 120000 index 000000000..aebcccd87 --- /dev/null +++ b/config/rootfiles/core/149/filelists/gzip @@ -0,0 +1 @@ +../../../common/gzip \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/i586/gcc b/config/rootfiles/= core/149/filelists/i586/gcc new file mode 120000 index 000000000..ba328e3b6 --- /dev/null +++ b/config/rootfiles/core/149/filelists/i586/gcc @@ -0,0 +1 @@ +../../../../common/i586/gcc \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/i586/glibc b/config/rootfile= s/core/149/filelists/i586/glibc new file mode 120000 index 000000000..943021f19 --- /dev/null +++ b/config/rootfiles/core/149/filelists/i586/glibc @@ -0,0 +1 @@ +../../../../common/i586/glibc \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/i586/gmp b/config/rootfiles/= core/149/filelists/i586/gmp new file mode 120000 index 000000000..52a09cd0b --- /dev/null +++ b/config/rootfiles/core/149/filelists/i586/gmp @@ -0,0 +1 @@ +../../../../common/i586/gmp \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/i586/hyperscan b/config/root= files/core/149/filelists/i586/hyperscan new file mode 120000 index 000000000..85730b04f --- /dev/null +++ b/config/rootfiles/core/149/filelists/i586/hyperscan @@ -0,0 +1 @@ +../../../../common/i586/hyperscan \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/i586/openssl-sse2 b/config/r= ootfiles/core/149/filelists/i586/openssl-sse2 new file mode 120000 index 000000000..f424713d6 --- /dev/null +++ b/config/rootfiles/core/149/filelists/i586/openssl-sse2 @@ -0,0 +1 @@ +../../../../common/i586/openssl-sse2 \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/iproute2 b/config/rootfiles/= core/149/filelists/iproute2 new file mode 120000 index 000000000..05f0f71fb --- /dev/null +++ b/config/rootfiles/core/149/filelists/iproute2 @@ -0,0 +1 @@ +../../../common/iproute2 \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/kbd b/config/rootfiles/core/= 149/filelists/kbd new file mode 120000 index 000000000..9b85839b1 --- /dev/null +++ b/config/rootfiles/core/149/filelists/kbd @@ -0,0 +1 @@ +../../../common/kbd \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/libloc b/config/rootfiles/co= re/149/filelists/libloc new file mode 120000 index 000000000..ff4a92429 --- /dev/null +++ b/config/rootfiles/core/149/filelists/libloc @@ -0,0 +1 @@ +../../../common/libloc \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/logrotate b/config/rootfiles= /core/149/filelists/logrotate new file mode 120000 index 000000000..bc192c05d --- /dev/null +++ b/config/rootfiles/core/149/filelists/logrotate @@ -0,0 +1 @@ +../../../common/logrotate \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/mpfr b/config/rootfiles/core= /149/filelists/mpfr new file mode 120000 index 000000000..c8468bf42 --- /dev/null +++ b/config/rootfiles/core/149/filelists/mpfr @@ -0,0 +1 @@ +../../../common/mpfr \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/openssl b/config/rootfiles/c= ore/149/filelists/openssl new file mode 120000 index 000000000..e011a9266 --- /dev/null +++ b/config/rootfiles/core/149/filelists/openssl @@ -0,0 +1 @@ +../../../common/openssl \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/perl b/config/rootfiles/core= /149/filelists/perl new file mode 120000 index 000000000..478292aa5 --- /dev/null +++ b/config/rootfiles/core/149/filelists/perl @@ -0,0 +1 @@ +../../../common/perl \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/squid b/config/rootfiles/cor= e/149/filelists/squid new file mode 120000 index 000000000..2dc8372a0 --- /dev/null +++ b/config/rootfiles/core/149/filelists/squid @@ -0,0 +1 @@ +../../../common/squid \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/strongswan b/config/rootfile= s/core/149/filelists/strongswan new file mode 120000 index 000000000..90c727e26 --- /dev/null +++ b/config/rootfiles/core/149/filelists/strongswan @@ -0,0 +1 @@ +../../../common/strongswan \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/suricata b/config/rootfiles/= core/149/filelists/suricata new file mode 120000 index 000000000..f671f6993 --- /dev/null +++ b/config/rootfiles/core/149/filelists/suricata @@ -0,0 +1 @@ +../../../common/suricata \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/x86_64/gcc b/config/rootfile= s/core/149/filelists/x86_64/gcc new file mode 120000 index 000000000..d1616d377 --- /dev/null +++ b/config/rootfiles/core/149/filelists/x86_64/gcc @@ -0,0 +1 @@ +../../../../common/x86_64/gcc \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/x86_64/glibc b/config/rootfi= les/core/149/filelists/x86_64/glibc new file mode 120000 index 000000000..111909966 --- /dev/null +++ b/config/rootfiles/core/149/filelists/x86_64/glibc @@ -0,0 +1 @@ +../../../../common/x86_64/glibc \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/x86_64/gmp b/config/rootfile= s/core/149/filelists/x86_64/gmp new file mode 120000 index 000000000..7c59c60c6 --- /dev/null +++ b/config/rootfiles/core/149/filelists/x86_64/gmp @@ -0,0 +1 @@ +../../../../common/x86_64/gmp \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/x86_64/hyperscan b/config/ro= otfiles/core/149/filelists/x86_64/hyperscan new file mode 120000 index 000000000..ee1858dca --- /dev/null +++ b/config/rootfiles/core/149/filelists/x86_64/hyperscan @@ -0,0 +1 @@ +../../../../common/x86_64/hyperscan \ No newline at end of file diff --git a/config/rootfiles/core/149/filelists/xz b/config/rootfiles/core/1= 49/filelists/xz new file mode 120000 index 000000000..734e926c7 --- /dev/null +++ b/config/rootfiles/core/149/filelists/xz @@ -0,0 +1 @@ +../../../common/xz \ No newline at end of file diff --git a/config/rootfiles/core/149/update.sh b/config/rootfiles/core/149/= update.sh index d7067a4cc..6db2e9a02 100644 --- a/config/rootfiles/core/149/update.sh +++ b/config/rootfiles/core/149/update.sh @@ -49,6 +49,7 @@ ldconfig /usr/local/bin/filesystem-cleanup =20 # Start services +/etc/init.d/apache2 restart =20 # Update crontab sed -i /var/spool/cron/root.orig \ @@ -63,7 +64,7 @@ if [ -e /boot/grub/grub.cfg ]; then fi =20 # This update needs a reboot... -#touch /var/run/need_reboot +touch /var/run/need_reboot =20 # Finish /etc/init.d/fireinfo start diff --git a/config/rootfiles/packages/socat b/config/rootfiles/packages/socat new file mode 100644 index 000000000..6a984e892 --- /dev/null +++ b/config/rootfiles/packages/socat @@ -0,0 +1,4 @@ +usr/bin/filan +usr/bin/procan +usr/bin/socat +#usr/share/man/man1/socat.1 diff --git a/doc/language_issues.de b/doc/language_issues.de index df5df895e..f2a7ba8ae 100644 --- a/doc/language_issues.de +++ b/doc/language_issues.de @@ -180,6 +180,7 @@ WARNING: translation string unused: default networks WARNING: translation string unused: default services WARNING: translation string unused: defaultwarning WARNING: translation string unused: delete cron +WARNING: translation string unused: deprecated fs warn WARNING: translation string unused: description WARNING: translation string unused: destination ip bad WARNING: translation string unused: destination ip or net diff --git a/doc/language_issues.en b/doc/language_issues.en index 6417d5382..40cba2292 100644 --- a/doc/language_issues.en +++ b/doc/language_issues.en @@ -551,7 +551,6 @@ WARNING: untranslated string: delete pc =3D Delete workst= ation WARNING: untranslated string: delete share =3D Delete share WARNING: untranslated string: delete user =3D Delete user WARNING: untranslated string: demon login script =3D Demon login script -WARNING: untranslated string: deprecated fs warn =3D Deprecated filesystem! = Newer kernel drop the support. Backup and reformat! WARNING: untranslated string: dest ip and port =3D Dest. IP: Port WARNING: untranslated string: destination =3D Destination WARNING: untranslated string: destination ip =3D Destination IP @@ -1183,6 +1182,7 @@ WARNING: untranslated string: last =3D Last WARNING: untranslated string: last activity =3D Last Activity WARNING: untranslated string: lease expires =3D Lease expires WARNING: untranslated string: least preferred =3D least preferred +WARNING: untranslated string: legacy architecture warning =3D You are runnin= g IPFire on a legacy architecture and it is recommended to upgrade WARNING: untranslated string: legend =3D Legend WARNING: untranslated string: lifetime =3D Lifetime: WARNING: untranslated string: linkq =3D Link Quality diff --git a/doc/language_issues.es b/doc/language_issues.es index 475db4953..f7431f692 100644 --- a/doc/language_issues.es +++ b/doc/language_issues.es @@ -804,7 +804,6 @@ WARNING: untranslated string: dangerous =3D Dangerous WARNING: untranslated string: dead peer detection =3D Dead Peer Detection WARNING: untranslated string: default =3D Default WARNING: untranslated string: default IP address =3D Default IP Address -WARNING: untranslated string: deprecated fs warn =3D Deprecated filesystem! = Newer kernel drop the support. Backup and reformat! WARNING: untranslated string: details =3D Details WARNING: untranslated string: dh =3D Diffie-Hellman parameters WARNING: untranslated string: dh key move failed =3D Diffie-Hellman paramete= rs move failed. @@ -1155,6 +1154,7 @@ WARNING: untranslated string: ipsec settings =3D IPsec = Settings WARNING: untranslated string: itlb multihit =3D iTLB MultiHit WARNING: untranslated string: last =3D Last WARNING: untranslated string: least preferred =3D least preferred +WARNING: untranslated string: legacy architecture warning =3D You are runnin= g IPFire on a legacy architecture and it is recommended to upgrade WARNING: untranslated string: lifetime =3D Lifetime: WARNING: untranslated string: local ip address =3D Local IP Address WARNING: untranslated string: log server protocol =3D protocol: diff --git a/doc/language_issues.fr b/doc/language_issues.fr index 9470597af..597883693 100644 --- a/doc/language_issues.fr +++ b/doc/language_issues.fr @@ -203,6 +203,7 @@ WARNING: translation string unused: default networks WARNING: translation string unused: default services WARNING: translation string unused: defaultwarning WARNING: translation string unused: delete cron +WARNING: translation string unused: deprecated fs warn WARNING: translation string unused: description WARNING: translation string unused: destination ip bad WARNING: translation string unused: destination ip or net @@ -837,6 +838,7 @@ WARNING: untranslated string: guardian logtarget_file =3D= unknown string WARNING: untranslated string: guardian logtarget_syslog =3D unknown string WARNING: untranslated string: guardian no entries =3D unknown string WARNING: untranslated string: guardian service =3D unknown string +WARNING: untranslated string: legacy architecture warning =3D You are runnin= g IPFire on a legacy architecture and it is recommended to upgrade WARNING: untranslated string: pakfire ago =3D ago. WARNING: untranslated string: route config changed =3D unknown string WARNING: untranslated string: routing config added =3D unknown string diff --git a/doc/language_issues.it b/doc/language_issues.it index 93e4b097f..c943da739 100644 --- a/doc/language_issues.it +++ b/doc/language_issues.it @@ -178,6 +178,7 @@ WARNING: translation string unused: default networks WARNING: translation string unused: default services WARNING: translation string unused: defaultwarning WARNING: translation string unused: delete cron +WARNING: translation string unused: deprecated fs warn WARNING: translation string unused: description WARNING: translation string unused: destination ip bad WARNING: translation string unused: destination ip or net @@ -982,6 +983,7 @@ WARNING: untranslated string: ipsec mode tunnel =3D Tunnel WARNING: untranslated string: ipsec routing table entries =3D IPsec Routing = Table Entries WARNING: untranslated string: ipsec settings =3D IPsec Settings WARNING: untranslated string: itlb multihit =3D iTLB MultiHit +WARNING: untranslated string: legacy architecture warning =3D You are runnin= g IPFire on a legacy architecture and it is recommended to upgrade WARNING: untranslated string: local ip address =3D Local IP Address WARNING: untranslated string: location =3D Location WARNING: untranslated string: locationblock =3D Location Block diff --git a/doc/language_issues.nl b/doc/language_issues.nl index ad76bf228..7496d647c 100644 --- a/doc/language_issues.nl +++ b/doc/language_issues.nl @@ -177,6 +177,7 @@ WARNING: translation string unused: default networks WARNING: translation string unused: default services WARNING: translation string unused: defaultwarning WARNING: translation string unused: delete cron +WARNING: translation string unused: deprecated fs warn WARNING: translation string unused: description WARNING: translation string unused: destination ip bad WARNING: translation string unused: destination ip or net @@ -991,6 +992,7 @@ WARNING: untranslated string: ipsec mode tunnel =3D Tunnel WARNING: untranslated string: ipsec routing table entries =3D IPsec Routing = Table Entries WARNING: untranslated string: ipsec settings =3D IPsec Settings WARNING: untranslated string: itlb multihit =3D iTLB MultiHit +WARNING: untranslated string: legacy architecture warning =3D You are runnin= g IPFire on a legacy architecture and it is recommended to upgrade WARNING: untranslated string: local ip address =3D Local IP Address WARNING: untranslated string: location =3D Location WARNING: untranslated string: locationblock =3D Location Block diff --git a/doc/language_issues.pl b/doc/language_issues.pl index 475db4953..f7431f692 100644 --- a/doc/language_issues.pl +++ b/doc/language_issues.pl @@ -804,7 +804,6 @@ WARNING: untranslated string: dangerous =3D Dangerous WARNING: untranslated string: dead peer detection =3D Dead Peer Detection WARNING: untranslated string: default =3D Default WARNING: untranslated string: default IP address =3D Default IP Address -WARNING: untranslated string: deprecated fs warn =3D Deprecated filesystem! = Newer kernel drop the support. Backup and reformat! WARNING: untranslated string: details =3D Details WARNING: untranslated string: dh =3D Diffie-Hellman parameters WARNING: untranslated string: dh key move failed =3D Diffie-Hellman paramete= rs move failed. @@ -1155,6 +1154,7 @@ WARNING: untranslated string: ipsec settings =3D IPsec = Settings WARNING: untranslated string: itlb multihit =3D iTLB MultiHit WARNING: untranslated string: last =3D Last WARNING: untranslated string: least preferred =3D least preferred +WARNING: untranslated string: legacy architecture warning =3D You are runnin= g IPFire on a legacy architecture and it is recommended to upgrade WARNING: untranslated string: lifetime =3D Lifetime: WARNING: untranslated string: local ip address =3D Local IP Address WARNING: untranslated string: log server protocol =3D protocol: diff --git a/doc/language_issues.ru b/doc/language_issues.ru index f99fd4d9a..a3eb33669 100644 --- a/doc/language_issues.ru +++ b/doc/language_issues.ru @@ -807,7 +807,6 @@ WARNING: untranslated string: dangerous =3D Dangerous WARNING: untranslated string: dead peer detection =3D Dead Peer Detection WARNING: untranslated string: default =3D Default WARNING: untranslated string: default IP address =3D Default IP Address -WARNING: untranslated string: deprecated fs warn =3D Deprecated filesystem! = Newer kernel drop the support. Backup and reformat! WARNING: untranslated string: details =3D Details WARNING: untranslated string: dh =3D Diffie-Hellman parameters WARNING: untranslated string: dh key move failed =3D Diffie-Hellman paramete= rs move failed. @@ -1150,6 +1149,7 @@ WARNING: untranslated string: ipsec settings =3D IPsec = Settings WARNING: untranslated string: itlb multihit =3D iTLB MultiHit WARNING: untranslated string: last =3D Last WARNING: untranslated string: least preferred =3D least preferred +WARNING: untranslated string: legacy architecture warning =3D You are runnin= g IPFire on a legacy architecture and it is recommended to upgrade WARNING: untranslated string: lifetime =3D Lifetime: WARNING: untranslated string: local ip address =3D Local IP Address WARNING: untranslated string: location =3D Location diff --git a/doc/language_issues.tr b/doc/language_issues.tr index b6e3426f3..60a646e5f 100644 --- a/doc/language_issues.tr +++ b/doc/language_issues.tr @@ -200,6 +200,7 @@ WARNING: translation string unused: default networks WARNING: translation string unused: default services WARNING: translation string unused: defaultwarning WARNING: translation string unused: delete cron +WARNING: translation string unused: deprecated fs warn WARNING: translation string unused: description WARNING: translation string unused: destination ip bad WARNING: translation string unused: destination ip or net @@ -915,6 +916,7 @@ WARNING: untranslated string: ipsec mode tunnel =3D Tunnel WARNING: untranslated string: ipsec routing table entries =3D IPsec Routing = Table Entries WARNING: untranslated string: ipsec settings =3D IPsec Settings WARNING: untranslated string: itlb multihit =3D iTLB MultiHit +WARNING: untranslated string: legacy architecture warning =3D You are runnin= g IPFire on a legacy architecture and it is recommended to upgrade WARNING: untranslated string: local ip address =3D Local IP Address WARNING: untranslated string: meltdown =3D Meltdown WARNING: untranslated string: mitigated =3D Mitigated diff --git a/doc/language_missings b/doc/language_missings index 913970113..3fbaad77b 100644 --- a/doc/language_missings +++ b/doc/language_missings @@ -575,6 +575,7 @@ < itlb multihit < last < least preferred +< legacy architecture warning < lifetime < local ip address < log server protocol @@ -921,6 +922,7 @@ < bewan adsl usb < g.dtm < g.lite +< legacy architecture warning < upload fcdsl.o ############################################################################ # Checking cgi-bin translations for language: it # @@ -1127,6 +1129,7 @@ < ipsec routing table entries < ipsec settings < itlb multihit +< legacy architecture warning < local ip address < location < locationblock @@ -1501,6 +1504,7 @@ < ipsec routing table entries < ipsec settings < itlb multihit +< legacy architecture warning < local ip address < location < locationblock @@ -2200,6 +2204,7 @@ < itlb multihit < last < least preferred +< legacy architecture warning < lifetime < local ip address < location @@ -3056,6 +3061,7 @@ < itlb multihit < last < least preferred +< legacy architecture warning < lifetime < local ip address < location @@ -3474,6 +3480,7 @@ < ipsec routing table entries < ipsec settings < itlb multihit +< legacy architecture warning < local ip address < meltdown < mitigated diff --git a/html/cgi-bin/index.cgi b/html/cgi-bin/index.cgi index bd6a02ef5..8e7207d0c 100644 --- a/html/cgi-bin/index.cgi +++ b/html/cgi-bin/index.cgi @@ -545,6 +545,12 @@ if ( ! -e "/var/ipfire/main/send_profile") { $warnmessage .=3D "
  • $La= ng::tr{'fireinfo please enable'}
    • "; } =20 +# Legacy architecture +my ($sysname, $nodename, $release, $version, $machine) =3D &POSIX::uname(); +if ($machine =3D~ m/^i?86$/) { + $warnmessage .=3D "
  • $Lang::tr{'legacy architecture warning'}
    • "; +} + # Memory usage warning my @free =3D `/usr/bin/free`; $free[1] =3D~ m/(\d+)/; @@ -593,13 +599,6 @@ foreach my $file (@files) { } } =20 -# Reiser4 warning -my @files =3D `mount | grep " reiser4 (" 2>/dev/null`; -foreach my $disk (@files) { - chomp ($disk); - $warnmessage .=3D "
  • $disk - $Lang::tr{'deprecated fs warn'}
    • "; -} - if ($warnmessage) { &Header::openbox('100%','center', ); print ""; diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi index 457ebcf1f..e7bc505e7 100644 --- a/html/cgi-bin/ovpnmain.cgi +++ b/html/cgi-bin/ovpnmain.cgi @@ -333,6 +333,8 @@ sub writeserverconf { print CONF "ncp-disable\n"; print CONF "cipher $sovpnsettings{DCIPHER}\n"; print CONF "auth $sovpnsettings{'DAUTH'}\n"; + # Set TLSv2 as minimum + print CONF "tls-version-min 1.2\n"; =20 if ($sovpnsettings{'TLSAUTH'} eq 'on') { print CONF "tls-auth ${General::swroot}/ovpn/certs/ta.key\n"; @@ -890,7 +892,7 @@ if ($cgiparams{'ACTION'} eq $Lang::tr{'save-adv-options'}= ) { undef $vpnsettings{'ROUTES_PUSH'}; &write_routepushfile; } - if ((length($cgiparams{'MAX_CLIENTS'}) =3D=3D 0) || (($cgiparams{'MAX_CL= IENTS'}) < 1 ) || (($cgiparams{'MAX_CLIENTS'}) > 255 )) { + if ((length($cgiparams{'MAX_CLIENTS'}) =3D=3D 0) || (($cgiparams{'MAX_CL= IENTS'}) < 1 ) || (($cgiparams{'MAX_CLIENTS'}) > 1024 )) { $errormessage =3D $Lang::tr{'invalid input for max clients'}; goto ADV_ERROR; } @@ -996,6 +998,9 @@ unless(-d "${General::swroot}/ovpn/n2nconf/$cgiparams{'NA= ME'}"){mkdir "${General print SERVERCONF "auth $cgiparams{'DAUTH'}\n"; } =20 + # Set TLSv1.2 as minimum + print SERVERCONF "tls-version-min 1.2\n"; + if ($cgiparams{'COMPLZO'} eq 'on') { print SERVERCONF "# Enable Compression\n"; print SERVERCONF "comp-lzo\n"; @@ -1098,6 +1103,9 @@ unless(-d "${General::swroot}/ovpn/n2nconf/$cgiparams{'= NAME'}"){mkdir "${General print CLIENTCONF "auth $cgiparams{'DAUTH'}\n"; } =20 + # Set TLSv1.2 as minimum + print CLIENTCONF "tls-version-min 1.2\n"; + if ($cgiparams{'COMPLZO'} eq 'on') { print CLIENTCONF "# Enable Compression\n"; print CLIENTCONF "comp-lzo\n"; diff --git a/langs/de/cgi-bin/de.pl b/langs/de/cgi-bin/de.pl index f73b373b8..ef4e4e6c8 100644 --- a/langs/de/cgi-bin/de.pl +++ b/langs/de/cgi-bin/de.pl @@ -1457,7 +1457,7 @@ 'invalid input for keepalive 1:2' =3D> 'Ung=C3=BCltige Eingabe f=C3=BCr Keep= alive (mindestens ein Verh=C3=A4ltnis von 1:2)', 'invalid input for keepalive 2' =3D> 'Ung=C3=BCltige Eingabe f=C3=BCr Keepal= ive ping-restart', 'invalid input for local ip address' =3D> 'Ung=C3=BCltige Eingabe f=C3=BCr d= ie lokale IP-Adresse', -'invalid input for max clients' =3D> 'Ung=C3=BCltige Eingabe f=C3=BCr Max Cl= ients', +'invalid input for max clients' =3D> 'Ung=C3=BCltige Eingabe f=C3=BCr Max Cl= ients. Das Maximum von 1024 Clients wurde =C3=BCberschritten', 'invalid input for mode' =3D> 'Ung=C3=BCltige Eingabe des Modus', 'invalid input for name' =3D> 'Ung=C3=BCltige Eingabe f=C3=BCr vollen Namen = des Benutzers oder des System Hostnamens', 'invalid input for oink code' =3D> 'Ung=C3=BCltige Eingabe f=C3=BCr Oink Cod= e', @@ -1549,6 +1549,7 @@ 'lateprompting' =3D> 'Late prompting', 'lease expires' =3D> 'Zuordnung verf=C3=A4llt', 'least preferred' =3D> 'weniger pr=C3=A4feriert', +'legacy architecture warning' =3D> 'Sie betreiben IPFire auf einer =C3=BCber= holten Architektur und ein Update ist empfohlen', 'legend' =3D> 'Legende', 'length' =3D> 'L=C3=A4nge', 'lifetime' =3D> 'Lebensdauer:', diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index 7e3bbec89..0b1b304a9 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -1481,7 +1481,7 @@ 'invalid input for keepalive 1:2' =3D> 'Invalid input for Keepalive use at l= east a ratio of 1:2', 'invalid input for keepalive 2' =3D> 'Invalid input for Keepalive ping-resta= rt', 'invalid input for local ip address' =3D> 'Invalid input for local IP addres= s', -'invalid input for max clients' =3D> 'Invalid input for Max Clients', +'invalid input for max clients' =3D> 'Invalid input for Max Clients. The max= imum of 1024 clients has been exceeded', 'invalid input for mode' =3D> 'Invalid input for mode', 'invalid input for name' =3D> 'Invalid input for user\'s full name or system= hostname', 'invalid input for oink code' =3D> 'Invalid input for Oink code', @@ -1573,6 +1573,7 @@ 'lateprompting' =3D> 'Lateprompting', 'lease expires' =3D> 'Lease expires', 'least preferred' =3D> 'least preferred', +'legacy architecture warning' =3D> 'You are running IPFire on a legacy archi= tecture and it is recommended to upgrade', 'legend' =3D> 'Legend', 'length' =3D> 'Length', 'lifetime' =3D> 'Lifetime:', diff --git a/langs/es/cgi-bin/es.pl b/langs/es/cgi-bin/es.pl index c75a47324..8a611e181 100644 --- a/langs/es/cgi-bin/es.pl +++ b/langs/es/cgi-bin/es.pl @@ -980,7 +980,7 @@ 'invalid input for keepalive 1' =3D> 'Entrada no v=C3=A1lida para ping Keepa= live', 'invalid input for keepalive 1:2' =3D> 'Entrada no v=C3=A1lida para Keepaliv= e, use por lo menos una relaci=C3=B3n 1:2', 'invalid input for keepalive 2' =3D> 'Entrada no v=C3=A1lida para reinicio d= e ping Keepalive', -'invalid input for max clients' =3D> 'Entrada no v=C3=A1lida para M=C3=A1xim= o n=C3=BAmero de Clientes', +'invalid input for max clients' =3D> 'Entrada no v=C3=A1lida para M=C3=A1xim= o n=C3=BAmero de Clientes. Se super=C3=B3 el m=C3=A1ximo de 1024 clientes.', 'invalid input for name' =3D> 'Entrada no v=C3=A1lida para nombre completo d= e usuario o nombre de host del sistema', 'invalid input for oink code' =3D> 'Entrada no v=C3=A1lida para c=C3=B3digo = Oink', 'invalid input for organization' =3D> 'Entrada no v=C3=A1lida para organizac= i=C3=B3n', diff --git a/langs/fr/cgi-bin/fr.pl b/langs/fr/cgi-bin/fr.pl index d9930230f..fc19257bf 100644 --- a/langs/fr/cgi-bin/fr.pl +++ b/langs/fr/cgi-bin/fr.pl @@ -1487,7 +1487,7 @@ 'invalid input for keepalive 1:2' =3D> 'Keepalive non valide, utilisez au mi= nimum un ratio de 1:2', 'invalid input for keepalive 2' =3D> 'Red=C3=A9marrage ping keepalive non va= lide', 'invalid input for local ip address' =3D> 'Entr=C3=A9e non valide pour l\'ad= resse IP locale', -'invalid input for max clients' =3D> 'Nombre de clients maximum non valide', +'invalid input for max clients' =3D> 'Nombre de clients maximum non valide. = Le maximum de 1024 clients a =C3=A9t=C3=A9 d=C3=A9pass=C3=A9.', 'invalid input for mode' =3D> 'Entr=C3=A9e non valide pour le mode', 'invalid input for name' =3D> 'Mauvaise saisie pour le nom d\'utilisateur ou= le nom d\'h=C3=B4te du syst=C3=A8me', 'invalid input for oink code' =3D> 'Oink code non valide', diff --git a/langs/it/cgi-bin/it.pl b/langs/it/cgi-bin/it.pl index 6c9137c28..fa4591b67 100644 --- a/langs/it/cgi-bin/it.pl +++ b/langs/it/cgi-bin/it.pl @@ -1298,7 +1298,7 @@ 'invalid input for keepalive 1' =3D> 'Invalid input for Keepalive ping', 'invalid input for keepalive 1:2' =3D> 'Invalid input for Keepalive use at l= east a ratio of 1:2', 'invalid input for keepalive 2' =3D> 'Invalid input for Keepalive ping-resta= rt', -'invalid input for max clients' =3D> 'Invalid input for Max Clients', +'invalid input for max clients' =3D> 'Invalid input for Max Clients. =C3=88 = stato superato il massimo di 1024 client.', 'invalid input for name' =3D> 'Invalid input for user\'s full name or system= hostname', 'invalid input for oink code' =3D> 'Invalid input for Oink code', 'invalid input for organization' =3D> 'Invalid input for organization', diff --git a/langs/nl/cgi-bin/nl.pl b/langs/nl/cgi-bin/nl.pl index 5fa89b1ac..4be11d5c1 100644 --- a/langs/nl/cgi-bin/nl.pl +++ b/langs/nl/cgi-bin/nl.pl @@ -1277,7 +1277,7 @@ 'invalid input for keepalive 1' =3D> ' Ongeldige invoer voor keepalive ping', 'invalid input for keepalive 1:2' =3D> ' Ongeldige invoer voor keepalive geb= ruik tenminste een ratio van 1:2', 'invalid input for keepalive 2' =3D> ' Ongeldige invoer voor keepalive ping-= herstart', -'invalid input for max clients' =3D> ' Ongeldige invoer voor max. clients', +'invalid input for max clients' =3D> ' Ongeldige invoer voor max. clients. H= et maximum van 1024 clients is overschreden.', 'invalid input for name' =3D> ' Ongeldige invoer voor gebruikersnaam of syst= eemhostnaam', 'invalid input for oink code' =3D> ' Ongeldige invoer voor Oink code', 'invalid input for organization' =3D> ' Ongeldige invoer voor organisatie', diff --git a/langs/pl/cgi-bin/pl.pl b/langs/pl/cgi-bin/pl.pl index 521381af2..e77120273 100644 --- a/langs/pl/cgi-bin/pl.pl +++ b/langs/pl/cgi-bin/pl.pl @@ -989,7 +989,7 @@ 'invalid input for keepalive 1' =3D> 'Niepoprawna warto=C5=9B=C4=87 w polu K= eepalive ping', 'invalid input for keepalive 1:2' =3D> 'Niepoprawna warto=C5=9B=C4=87 w polu= Keepalive. U=C5=BCywaj min. wsp=C3=B3=C5=82czynnika 1:2', 'invalid input for keepalive 2' =3D> 'Niepoprawna warto=C5=9B=C4=87 w polu K= eepalive ping-restart', -'invalid input for max clients' =3D> 'Niepoprawna warto=C5=9B=C4=87 w polu M= ax Klient=C3=B3w', +'invalid input for max clients' =3D> 'Niepoprawna warto=C5=9B=C4=87 w polu M= ax Klient=C3=B3w. Przekroczono maksymaln=C4=85 liczb=C4=99 1024 klient=C3=B3w= .', 'invalid input for name' =3D> 'Niepoprawna warto=C5=9B=C4=87 w polu pe=C5=82= na nazwa u=C5=BCytkownika lub nazwa hosta systemu', 'invalid input for oink code' =3D> 'Niepoprawny OINKCODE', 'invalid input for organization' =3D> 'Niepoprawna warto=C5=9B=C4=87 w polu = organizacja', diff --git a/langs/ru/cgi-bin/ru.pl b/langs/ru/cgi-bin/ru.pl index 9ac46d459..29e6b5f93 100644 --- a/langs/ru/cgi-bin/ru.pl +++ b/langs/ru/cgi-bin/ru.pl @@ -982,7 +982,7 @@ 'invalid input for keepalive 1' =3D> '=D0=9D=D0=B5=D0=B2=D0=B5=D1=80=D0=BD= =D0=BE =D1=83=D0=BA=D0=B0=D0=B7=D0=B0=D0=BD Keepalive ping.', 'invalid input for keepalive 1:2' =3D> 'Invalid input for Keepalive use at l= east a ratio of 1:2.', 'invalid input for keepalive 2' =3D> '=D0=9D=D0=B5=D0=B2=D0=B5=D1=80=D0=BD= =D0=BE =D1=83=D0=BA=D0=B0=D0=B7=D0=B0=D0=BD Keepalive ping-restart.', -'invalid input for max clients' =3D> '=D0=9D=D0=B5=D0=B2=D0=B5=D1=80=D0=BD= =D0=BE =D1=83=D0=BA=D0=B0=D0=B7=D0=B0=D0=BD=D0=BE =D0=BC=D0=B0=D0=BA=D1=81=D0= =B8=D0=BC=D0=B0=D0=BB=D1=8C=D0=BD=D0=BE=D0=B5 =D1=87=D0=B8=D1=81=D0=BB=D0=BE = =D0=BA=D0=BB=D0=B8=D0=B5=D0=BD=D1=82=D0=BE=D0=B2.', +'invalid input for max clients' =3D> '=D0=9D=D0=B5=D0=B2=D0=B5=D1=80=D0=BD= =D0=BE =D1=83=D0=BA=D0=B0=D0=B7=D0=B0=D0=BD=D0=BE =D0=BC=D0=B0=D0=BA=D1=81=D0= =B8=D0=BC=D0=B0=D0=BB=D1=8C=D0=BD=D0=BE=D0=B5 =D1=87=D0=B8=D1=81=D0=BB=D0=BE = =D0=BA=D0=BB=D0=B8=D0=B5=D0=BD=D1=82=D0=BE=D0=B2. =D0=9F=D1=80=D0=B5=D0=B2=D1= =8B=D1=88=D0=B5=D0=BD=D0=BE =D0=BC=D0=B0=D0=BA=D1=81=D0=B8=D0=BC=D0=B0=D0=BB= =D1=8C=D0=BD=D0=BE 1024 =D0=BA=D0=BB=D0=B8=D0=B5=D0=BD=D1=82=D0=BE=D0=B2.', 'invalid input for name' =3D> '=D0=9D=D0=B5=D0=B2=D0=B5=D1=80=D0=BD=D0=BE = =D1=83=D0=BA=D0=B0=D0=B7=D0=B0=D0=BD=D0=BE =D0=BF=D0=BE=D0=BB=D0=BD=D0=BE=D0= =B5 =D0=B8=D0=BC=D1=8F =D0=BF=D0=BE=D0=BB=D1=8C=D0=B7=D0=BE=D0=B2=D0=B0=D1=82= =D0=B5=D0=BB=D1=8F =D0=B8=D0=BB=D0=B8 =D1=81=D0=B8=D1=81=D1=82=D0=B5=D0=BC=D0= =BD=D0=BE=D0=B5 =D0=B8=D0=BC=D1=8F =D1=85=D0=BE=D1=81=D1=82=D0=B0.', 'invalid input for oink code' =3D> '=D0=9D=D0=B5=D0=B2=D0=B5=D1=80=D0=BD=D0= =BE =D1=83=D0=BA=D0=B0=D0=B7=D0=B0=D0=BD Oink code', 'invalid input for organization' =3D> '=D0=9D=D0=B5=D0=B2=D0=B5=D1=80=D0=BD= =D0=BE =D1=83=D0=BA=D0=B0=D0=B7=D0=B0=D0=BD=D0=B0 =D0=BE=D1=80=D0=B3=D0=B0=D0= =BD=D0=B8=D0=B7=D0=B0=D1=86=D0=B8=D1=8F', diff --git a/langs/tr/cgi-bin/tr.pl b/langs/tr/cgi-bin/tr.pl index c23ff5df6..ea2047609 100644 --- a/langs/tr/cgi-bin/tr.pl +++ b/langs/tr/cgi-bin/tr.pl @@ -1415,7 +1415,7 @@ 'invalid input for keepalive 1' =3D> 'Ping komutunu canl=C4=B1 tutma i=C3=A7= in ge=C3=A7ersiz giri=C5=9F.', 'invalid input for keepalive 1:2' =3D> '1:2 oran=C4=B1nda, en az bir oran=C4= =B1 canl=C4=B1 tutma kullan=C4=B1m i=C3=A7in ge=C3=A7ersiz giri=C5=9F', 'invalid input for keepalive 2' =3D> 'Ping komutunu yeniden ba=C5=9Flatmada = canl=C4=B1 tutmak i=C3=A7in ge=C3=A7ersiz giri=C5=9F.', -'invalid input for max clients' =3D> 'En fazla istemci i=C3=A7in ge=C3=A7ers= iz giri=C5=9F.', +'invalid input for max clients' =3D> 'En fazla istemci i=C3=A7in ge=C3=A7ers= iz giri=C5=9F. Maksimum 1024 m=C3=BC=C5=9Fteri a=C5=9F=C4=B1ld=C4=B1.', 'invalid input for name' =3D> 'Kullan=C4=B1c=C4=B1n=C4=B1n tam ad=C4=B1 veya= sistem ana bilgisayar ad=C4=B1 i=C3=A7in ge=C3=A7ersiz giri=C5=9F', 'invalid input for oink code' =3D> 'Oink kodu i=C3=A7in ge=C3=A7ersiz giri= =C5=9F.', 'invalid input for organization' =3D> 'Kurulu=C5=9F i=C3=A7in ge=C3=A7ersiz = giri=C5=9F.', diff --git a/lfs/apache2 b/lfs/apache2 index d82932f4b..772ac6018 100644 --- a/lfs/apache2 +++ b/lfs/apache2 @@ -25,7 +25,7 @@ =20 include Config =20 -VER =3D 2.4.43 +VER =3D 2.4.46 =20 THISAPP =3D httpd-$(VER) DL_FILE =3D $(THISAPP).tar.bz2 @@ -45,7 +45,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_MD5 =3D 791c986b1e70fe61eb44060aacc89a64 +$(DL_FILE)_MD5 =3D 7d661ea5e736dac5e2761d9f49fe8361 =20 install : $(TARGET) =20 diff --git a/lfs/curl b/lfs/curl index e57bbbf45..34dfe90e8 100644 --- a/lfs/curl +++ b/lfs/curl @@ -1,7 +1,7 @@ ############################################################################= ### # = # # IPFire.org - A linux based firewall = # -# Copyright (C) 2007-2018 IPFire Team = # +# Copyright (C) 2007-2020 IPFire Team = # # = # # This program is free software: you can redistribute it and/or modify = # # it under the terms of the GNU General Public License as published by = # @@ -24,10 +24,10 @@ =20 include Config =20 -VER =3D 7.64.0 +VER =3D 7.71.1 =20 THISAPP =3D curl-$(VER) -DL_FILE =3D $(THISAPP).tar.gz +DL_FILE =3D $(THISAPP).tar.xz DL_FROM =3D $(URL_IPFIRE) DIR_APP =3D $(DIR_SRC)/$(THISAPP) TARGET =3D $(DIR_INFO)/$(THISAPP) @@ -40,7 +40,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_MD5 =3D a026740d599a32bcbbe6e70679397899 +$(DL_FILE)_MD5 =3D b54b386057846ce3edd3584b19741569 =20 install : $(TARGET) =20 diff --git a/lfs/grub b/lfs/grub index ac6de68a4..811c2f745 100644 --- a/lfs/grub +++ b/lfs/grub @@ -100,6 +100,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) =20 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.04-BootHol= e.patch cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub-2.02_disable_vga_= fallback.patch + cd $(DIR_APP) && autoreconf -vfi =20 # Install unifont cp -v $(DIR_DL)/unifont-7.0.03.pcf.gz $(DIR_APP)/unifont.pcf.gz diff --git a/lfs/haproxy b/lfs/haproxy index bc5ef8021..ce44f8154 100644 --- a/lfs/haproxy +++ b/lfs/haproxy @@ -24,7 +24,7 @@ =20 include Config =20 -VER =3D 2.1.7 +VER =3D 2.2.2 =20 THISAPP =3D haproxy-$(VER) DL_FILE =3D $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM =3D $(URL_IPFIRE) DIR_APP =3D $(DIR_SRC)/$(THISAPP) TARGET =3D $(DIR_INFO)/$(THISAPP) PROG =3D haproxy -PAK_VER =3D 15 +PAK_VER =3D 16 =20 DEPS =3D =20 @@ -48,7 +48,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_MD5 =3D f0ddf67e2be18cfe1b996f9914cfa67e +$(DL_FILE)_MD5 =3D dfef423ff9f191c401d6b29e7eb9d6e2 =20 install : $(TARGET) =20 diff --git a/lfs/hyperscan b/lfs/hyperscan index b63c6ecbe..96979c718 100644 --- a/lfs/hyperscan +++ b/lfs/hyperscan @@ -24,7 +24,7 @@ =20 include Config =20 -VER =3D 5.2.1 +VER =3D 5.3.0 =20 THISAPP =3D hyperscan-$(VER) DL_FILE =3D $(THISAPP).tar.gz @@ -46,7 +46,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_MD5 =3D e722ec217282d38b1457cc751f0a4bb6 +$(DL_FILE)_MD5 =3D 6acab4b242dd81b3cede211d4a9e7101 =20 install : $(TARGET) =20 diff --git a/lfs/iproute2 b/lfs/iproute2 index f07a125cf..53fd4a59e 100644 --- a/lfs/iproute2 +++ b/lfs/iproute2 @@ -24,7 +24,7 @@ =20 include Config =20 -VER =3D 5.7.0 +VER =3D 5.8.0 =20 THISAPP =3D iproute2-$(VER) DL_FILE =3D $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_MD5 =3D da22ab8562eda56ae232872fa72e4870 +$(DL_FILE)_MD5 =3D e2016acc07d91b2508916c459a8435af =20 install : $(TARGET) =20 diff --git a/lfs/logrotate b/lfs/logrotate index d23a6f80d..45a0d47e2 100644 --- a/lfs/logrotate +++ b/lfs/logrotate @@ -1,7 +1,7 @@ ############################################################################= ### # = # # IPFire.org - A linux based firewall = # -# Copyright (C) 2007-2019 IPFire Team = # +# Copyright (C) 2007-2020 IPFire Team = # # = # # This program is free software: you can redistribute it and/or modify = # # it under the terms of the GNU General Public License as published by = # @@ -24,7 +24,7 @@ =20 include Config =20 -VER =3D 3.15.1 +VER =3D 3.17.0 =20 THISAPP =3D logrotate-$(VER) DL_FILE =3D logrotate-$(VER).tar.gz @@ -42,7 +42,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_MD5 =3D 629cb3b933a281f25741e385bc030203 +$(DL_FILE)_MD5 =3D 6bd4d3102ae9c86d37e46ca93bcffa66 =20 install : $(TARGET) =20 diff --git a/lfs/socat b/lfs/socat new file mode 100644 index 000000000..7b001e9d1 --- /dev/null +++ b/lfs/socat @@ -0,0 +1,85 @@ +############################################################################= ### +# = # +# IPFire.org - A linux based firewall = # +# Copyright (C) 2007-2020 IPFire Team = # +# = # +# This program is free software: you can redistribute it and/or modify = # +# it under the terms of the GNU General Public License as published by = # +# the Free Software Foundation, either version 3 of the License, or = # +# (at your option) any later version. = # +# = # +# This program is distributed in the hope that it will be useful, = # +# but WITHOUT ANY WARRANTY; without even the implied warranty of = # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the = # +# GNU General Public License for more details. = # +# = # +# You should have received a copy of the GNU General Public License = # +# along with this program. If not, see . = # +# = # +############################################################################= ### + + +############################################################################= ### +# Definitions +############################################################################= ### + +include Config + +VER =3D 1.7.3.4 + +THISAPP =3D socat-$(VER) +DL_FILE =3D $(THISAPP).tar.gz +DL_FROM =3D $(URL_IPFIRE) +DIR_APP =3D $(DIR_SRC)/$(THISAPP) +TARGET =3D $(DIR_INFO)/$(THISAPP) +PROG =3D socat +PAK_VER =3D 1 + +DEPS =3D=20 + +############################################################################= ### +# Top-level Rules +############################################################################= ### + +objects =3D $(DL_FILE) + +$(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) + +$(DL_FILE)_MD5 =3D c9e71d0136c88a01d6fd30a13a3936ed + +install : $(TARGET) + +check : $(patsubst %,$(DIR_CHK)/%,$(objects)) + +download :$(patsubst %,$(DIR_DL)/%,$(objects)) + +md5 : $(subst %,%_MD5,$(objects)) + +dist:=20 + @$(PAK) + +############################################################################= ### +# Downloading, checking, md5sum +############################################################################= ### + +$(patsubst %,$(DIR_CHK)/%,$(objects)) : + @$(CHECK) + +$(patsubst %,$(DIR_DL)/%,$(objects)) : + @$(LOAD) + +$(subst %,%_MD5,$(objects)) : + @$(MD5) + +############################################################################= ### +# Installation Details +############################################################################= ### + +$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) + @$(PREBUILD) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar xzf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && ./configure --prefix=3D/usr + cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE) + cd $(DIR_APP) && make install + @rm -rf $(DIR_APP) + @$(POSTBUILD) diff --git a/lfs/u-boot-friendlyarm b/lfs/u-boot-friendlyarm index 5945ef6c5..b4a925961 100644 --- a/lfs/u-boot-friendlyarm +++ b/lfs/u-boot-friendlyarm @@ -33,6 +33,8 @@ DIR_APP =3D $(DIR_SRC)/u-boot-$(VER)* TARGET =3D $(DIR_INFO)/$(THISAPP) SUP_ARCH =3D armv5tel =20 +CFLAGS +=3D -fcommon + ############################################################################= ### # Top-level Rules ############################################################################= ### diff --git a/lfs/wio b/lfs/wio index 29581dca6..e0dd53689 100644 --- a/lfs/wio +++ b/lfs/wio @@ -1,6 +1,6 @@ ############################################################################= ### -# IPFire.org - An Open Source Firewall Solution = # -# Copyright (C) 2007-2020 IPFire Team = # +# IPFire.org - An Open Source Firewall Solution = # +# Copyright (C) 2007-2020 IPFire Team = # ############################################################################= ### =20 ############################################################################= ### @@ -15,7 +15,7 @@ THISAPP =3D wio-$(VER) DIR_APP =3D $(DIR_SRC)/$(THISAPP) TARGET =3D $(DIR_INFO)/$(THISAPP) PROG =3D wio -PAK_VER =3D 9 +PAK_VER =3D 10 =20 ############################################################################= ### # Top-level Rules diff --git a/src/patches/openssl-1.1.1d-default-cipherlist.patch b/src/patche= s/openssl-1.1.1d-default-cipherlist.patch index 5ad7829e7..a3a48933e 100644 --- a/src/patches/openssl-1.1.1d-default-cipherlist.patch +++ b/src/patches/openssl-1.1.1d-default-cipherlist.patch @@ -5,7 +5,7 @@ * This applies to ciphersuites for TLSv1.2 and below. */ -# define SSL_DEFAULT_CIPHER_LIST "ALL:!COMPLEMENTOFDEFAULT:!eNULL" -+# define SSL_DEFAULT_CIPHER_LIST "HIGH:+aRSA:+SHA384:+SHA256:+DH:+SHA:+kRSA= :!eNULL:!aNULL:!PSK:!SRP:!AESCCM:!DSS" ++# define SSL_DEFAULT_CIPHER_LIST "HIGH:+aRSA:+SHA384:+SHA256:+DH:+SHA:!kRSA= :!eNULL:!aNULL:!PSK:!SRP:!AESCCM:!DSS" /* This is the default set of TLSv1.3 ciphersuites */ # if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305) # define TLS_DEFAULT_CIPHERSUITES "TLS_AES_256_GCM_SHA384:" \ diff --git a/src/wio/lang/wio.fr.pl b/src/wio/lang/wio.fr.pl index 9e8bdbc22..4085fa092 100644 --- a/src/wio/lang/wio.fr.pl +++ b/src/wio/lang/wio.fr.pl @@ -24,8 +24,8 @@ 'wio cron' =3D> 'Interval de temps pour la mise =C3=A0 jour :', 'wio_ovpn_cron' =3D> 'Interval de temps pour v=C3=A9rifier l\'=C3=A9tat d\'O= penVPN RW et IPsec :', 'wio_save' =3D> 'Sauvegarder', -'wio_error' =3D> 'message d\'erreur :', -'wio_info' =3D> 'message :', +'wio_error' =3D> 'Message d\'erreur :', +'wio_info' =3D> 'Message d\'info :', 'wio_back' =3D> 'Retour', 'wio_use' =3D> 'Importer cette config ?', 'wio_ip_error' =3D> 'Adresse IP invalide.', @@ -38,30 +38,30 @@ 'wio_import_leases' =3D> 'Import settings :', 'wio network' =3D> 'R=C3=A9seau', 'wio_refresh' =3D> 'maj de tous les clients maintenant', -'wio_fqdn_error' =3D> 'Nom de domaine (FQDN) invalide ! Veuillez ne pas util= iser de caract=C3=A8res sp=C3=A9ciaux ni de blancs dans le nom de domaine.', +'wio_fqdn_error' =3D> 'Nom de domaine (FQDN) invalide ! Veuillez ne pas util= iser de caract=C3=A8res sp=C3=A9ciaux ou d\'espace dans le nom de domaine.', 'wio_edit' =3D> 'Modifier les param=C3=A8tres :', 'wio_dyndns' =3D> 'DynDNS ', 'wio_dyndns_hosts' =3D> 'Nom(s) DynDNS', 'wio_dyndns_refresh' =3D> 'Mise =C3=A0 jour IP de l\'h=C3=B4te DynDNS', -'wio_dyndns_on' =3D> 'DynDNS Host activ=C3=A9 (cliquer pour d=C3=A9sactiver)= ', +'wio_dyndns_on' =3D> 'H=C3=B4te DynDNS activ=C3=A9 (cliquer pour d=C3=A9sact= iver)', 'wio_dyndns_off' =3D> 'H=C3=B4te DynDNS d=C3=A9sactiv=C3=A9 (cliquer pour ac= tiver)', 'wio_dyndns_info' =3D> 'Aucune adresse IP enregistr=C3=A9e, car apparemment = aucune connexion n=E2=80=99existe sur Internet. Avec la prochaine connexion I= nternet est r=C3=A9alis=C3=A9e une actualisation de l\'IP des h=C3=B4tes DynD= NS.', 'wio_no_csv' =3D> 'Le fichier n\'a pas l\'extension .csv', -'wio_no_csv_error' =3D> 'Veuillez ne pas utiliser de caract=C3=A8res sp=C3= =A9ciaux ou vides dans le nom de fichier.', +'wio_no_csv_error' =3D> 'Veuillez ne pas utiliser de caract=C3=A8res sp=C3= =A9ciaux ou d\'espace dans le nom de fichier.', 'wio_no_file_selected' =3D> 'Aucun fichier choisi !', 'wio_import_infos' =3D> 'Importer les configurations :', -'wio_import_infos_csv' =3D> 'NOTE : Seuls les enregistrements de donn=C3=A9e= s marqu=C3=A9s "Importer ces param=C3=A8tres ?" sont consid=C3=A9r=C3=A9s com= me importants ! Si des enregistrements de donn=C3=A9es avec une double adress= e IP ou des noms d\'h=C3=B4te doivent se faire, seul le premier enregistremen= t de donn=C3=A9es sera import=C3=A9 et les autres enregistrements de donn=C3= =A9es (avec les adresses IP ou noms d\'h=C3=B4te doubles) ne seront pas pris = en compte !', +'wio_import_infos_csv' =3D> 'NOTE : Seuls les enregistrements de donn=C3=A9e= s marqu=C3=A9s "Importer cette config ?" seront trait=C3=A9s ! Si des enregis= trements de donn=C3=A9es avec une double adresse IP ou plusieurs noms d\'h=C3= =B4te sont pr=C3=A9sents, seul le premier sera import=C3=A9 et les autres (av= ec les adresses IP ou noms d\'h=C3=B4te doubles) ne seront pas pris en compte= !', 'enable disable dyndns' =3D> 'Activer ou d=C3=A9sactiver l\'h=C3=B4te DynDNS= ', 'wio_msg' =3D> 'L\'=C3=A9tat du ou des clients examin=C3=A9s est mis =C3=A0 = jour...', -'wio_lanname' =3D> 'Nom LAN', -'wio_wanname' =3D> 'Nom WAN', +'wio_lanname' =3D> 'Nom d\'h=C3=B4te LAN', +'wio_wanname' =3D> 'Nom d\'h=C3=B4te WAN', 'wio_sc_refresh' =3D> 'Mettre =C3=A0 jour le client maintenant', 'wio_edit_settings' =3D> 'Ajout manuel d\'un client :', -'wio_edit_client' =3D> 'Edition client :', +'wio_edit_client' =3D> 'Modification du client :', 'wio_graphs' =3D> 'Afficher le graphique', 'wio_no_graphs' =3D> 'Pas de graphique disponible', 'wio_graphs_stat' =3D> 'Graphique pour', -'wio_vpn_con' =3D> 'Connexion(s) IPsec :', +'wio_vpn_con' =3D> 'Connexion(s) VPN :', 'wio_wan_con' =3D> 'Connexion WAN :', 'wio_clients' =3D> 'Clients :', 'wio click to disable' =3D> 'Activ=C3=A9', @@ -84,7 +84,7 @@ 'wio_wan_down' =3D> 'NON CONNECTE', 'wio_n2n' =3D> 'Connexion site-=C3=A0-site', 'wio_rw' =3D> 'Connexion client nomade', -'wio_mailremark_enabled' =3D> 'Ajouter une remarque du client au corps de l\= 'email ?', +'wio_mailremark_enabled' =3D> 'Ajouter la remarque du client au corps de l\'= email ?', 'wio_mail_online_on' =3D> 'Email en ligne activ=C3=A9 (cliquer pour d=C3=A9s= activer)', 'wio_mail_online_off' =3D> 'Email en ligne d=C3=A9sactiv=C3=A9 (cliquer pour= activer)', 'wio_mail_offline_on' =3D> 'Email hors ligne activ=C3=A9 (cliquer pour d=C3= =A9sactiver)', @@ -138,18 +138,18 @@ 'wio_msg_blue' =3D> 'bleu', 'wio_msg_red' =3D> 'rouge', 'wio_msg_orange' =3D> 'orange', -'wio_msg_center' =3D> 'l\'interface', +'wio_msg_center' =3D> 'sur son interface', 'wio_msg_right' =3D> 'est en cours.', 'wio_msg_hint' =3D> 'Un moment SVP...', 'wio_last_update' =3D> 'Derni=C3=A8re mise =C3=A0 jour', -'wio_disable_hint' =3D> 'Attention ! Tous les param=C3=A8tres vont =C3=AAtre= r=C3=A9initialis=C3=A9s , y compris le client =C3=A0 v=C3=A9rifier !', -'wio_clientremark' =3D> 'Afficher la remarque ?', +'wio_disable_hint' =3D> 'Attention ! Tous les param=C3=A8tres vont =C3=AAtre= r=C3=A9initialis=C3=A9s, y compris le client =C3=A0 v=C3=A9rifier !', +'wio_clientremark' =3D> 'Afficher les remarques ?', 'wio_already_running' =3D> 'Cette v=C3=A9rification est d=C3=A9j=C3=A0 en co= urs d\'ex=C3=A9cution !', -'wio_error_function' =3D> 'Cette fonction est temporairement indisponible, c= ar en arri=C3=A8re-plan les =C3=A9tats du client sont mis =C3=A0 jour (actif = / inactif).', +'wio_error_function' =3D> 'Cette action est temporairement indisponible, car= les statuts des clients sont actuellement mis =C3=A0 jour en arri=C3=A8re-pl= an (actif / inactif).', 'wio_unknown_lan' =3D> 'INCONNU', 'wio_red_lan' =3D> 'ROUGE', 'wio_search' =3D> 'Recherche d\'h=C3=B4tes actifs sur le r=C3=A9seau local..= .', -'wio_answer' =3D> 'Answer', +'wio_answer' =3D> 'R=C3=A9ponse', 'wio_answer_time' =3D> 'Temps de r=C3=A9ponse', 'wio_scriptruntime' =3D> 'Temps d\'ex=C3=A9cution du script', 'wio_show_table_off' =3D> 'Cacher la table', diff --git a/src/wio/wio.cgi b/src/wio/wio.cgi index a92a44473..a5d3d149e 100644 --- a/src/wio/wio.cgi +++ b/src/wio/wio.cgi @@ -21,7 +21,7 @@ # = # ############################################################################= ### # -# Version: 2020/06/01 13:29:23 +# Version: 2020/08/04 21:12:23 # # This wio.cgi is based on the code from the IPCop WIO Addon # and is extremly adapted to work with IPFire. @@ -1152,7 +1152,7 @@ close (FILE); =20 foreach (@ddns) { chomp; - =09 + @temp =3D split (/\,/, $_); =20 if ( $temp[7] eq "on" ) { @@ -1161,7 +1161,7 @@ close (FILE); else { $bgcolor =3D "blue"; } - =09 + print"$temp[1].$temp[2]"; if ( $iddyndns++ ne (@ddns-1) ) { print"
    \n"; } } @@ -1334,7 +1334,7 @@ foreach $key (keys %ovpnconfighash) { if (-e "/var/run/$ovpnconfighash{$key}[1]n2n.pid") { my ( @output, @tustate ) =3D ''; my $tport =3D $ovpnconfighash{$key}[22]; - my $tnet =3D new Net::Telnet ( Timeout=3D>5, Errmode=3D>'return', Port= =3D>$tport);=20 + my $tnet =3D new Net::Telnet ( Timeout=3D>5, Errmode=3D>'return', Port= =3D>$tport); if ($tport ne '') { $tnet->open('127.0.0.1'); @output =3D $tnet->cmd(String =3D> 'state', Prompt =3D> '/(END.*\n|ERRO= R:.*\n)/'); @@ -1535,7 +1535,6 @@ my $dotip =3D length($ipaddresses[$a]) - rindex($ipaddr= esses[$a],'.'); } else { print"    "; - =09 } last SWITCH; } hooks/post-receive -- IPFire 2.x development tree --===============3505230373089033472==--
    3D'$Lang::tr{$devs_alt[$in]}'