e2e8cb8347
network: add virtual tunnel interface (VTI) support
...
This adds support for configuring VTI interfaces within /etc/config/network.
VTI interfaces are used to create IPsec tunnel interfaces. These interfaces
may be used for routing and other purposes.
Example config:
config interface 'vti1'
option proto 'vti'
option mtu '1500'
option tunlink 'wan'
option peeraddr '192.168.5.16'
option zone 'VPN'
option ikey 2
option okey 2
config interface 'vti1_static'
option proto 'static'
option ifname '@vti1'
option ipaddr '192.168.7.2/24'
The options ikey and okey correspond to the fwmark value of a ipsec policy.
The may be null if you do not want fwmarks.
Also peeraddr may be 0.0.0 if you want all ESP packets go through the
interface.
Example strongswan config:
conn vti
left=%any
leftcert=peer2.test.der
leftid=@peer2.test
right=192.168.5.16
rightid=@peer3.test
leftsubnet=0.0.0.0/0
rightsubnet=0.0.0.0/0
mark=2
auto=route
Signed-off-by: André Valentin <avalentin@marcant.net>
SVN-Revision: 48274
9 years ago
eb1ac66ce7
netifd: update to the latest version, adds VTI support and a policy routing fix
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48273
9 years ago
0200735bda
kernel: add usb-net-sr9700 package
...
Add support for
CoreChip-sz SR9700 based USB 1.1 10/100 ethernet devices
Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
SVN-Revision: 48272
9 years ago
20a67881f4
ca-certificates: update to version 20160104
...
- update to latest version 20160104
- remove cpu dependency (PKGARCH:=all)
- set myself as package maintainer
Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
SVN-Revision: 48271
9 years ago
b075688953
ustream-ssl: fix copy&paste mistake in mbedtls variant title
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48258
9 years ago
b0b0c319f9
polarssl: update to 1.3.16, fixes intermediate certificate validation
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48257
9 years ago
d9494cdf6d
ustream-ssl: update to the latest version, adds mbedtls variant
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48256
9 years ago
5bd5c3282b
libubox: update to the latest version, adds lua/ustream fixes and extends usock
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48255
9 years ago
6665bbb1a0
mbedtls: update to version 2.2.1
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48254
9 years ago
39f385d0d6
packages: bump uboot-sunxi to 2016.01
...
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
SVN-Revision: 48252
9 years ago
b2e374346b
mwlwifi: fix build with latest mac80211
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48251
9 years ago
ba8a603a49
mt76: update to the latest version, fixes build with latest mac80211
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48250
9 years ago
82c5e2c497
mac80211: update to wireless-testing 2016-01-10
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48247
9 years ago
56f6d35716
dnsmasq: Add option --min-port
...
By default dnsmasq uses random ports for outbound dns queries;
when the minport UCI option is specified the ports used will
always be larger than the specified value.
This is usefull for systems behind firewalls.
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
SVN-Revision: 48244
9 years ago
64c23711ea
dropbear: update version to 2015.71
...
Update dropbear to version 2015.71, released on 3 Dec 2015.
Refresh patches.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
SVN-Revision: 48243
9 years ago
708bbe9382
kernel: add missing kmod-video-videobuf2's object file in 4.4
...
CONFIG_VIDEOBUF2_CORE produces two object files in Linux >= 4.4.
Conditionally add the new file to FILES of kmod-video-videobuf2.
Signed-off-by: Jan Čermák <jan.cermak@nic.cz>
SVN-Revision: 48242
9 years ago
1133101bc8
procd: align early init PATH with rest of OpenWrt
...
This fixes diverging executable search paths observed in programs
launched throughn etifd which in turn inherited the search path from
procd early on boot.
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 48235
9 years ago
711e28f012
mt76: update to the latest version, fixes signal strength reporting
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48234
9 years ago
cb85e21fd1
ath9k: add support for a newer tx gain table used in some TP-Link devices
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48233
9 years ago
155f7ba037
mt76: update to the latest version, adds mac address fixes and some performance tuning
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48232
9 years ago
abc99463b4
ubus: update to the latest version, fixes an acl related crash
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48226
9 years ago
bd99318c82
perf: fix strerror_r override detection, apparently part of tools/ relies on non-GNU behavior
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48221
9 years ago
2a170e4086
mac80211: resync regulatory db with master-2015-12-14
...
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
SVN-Revision: 48219
9 years ago
10e6d3ade9
perf: fix build errors on x86 and other platforms
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48218
9 years ago
722badfa82
dnsmasq: add local hostname record for own lan ula address as well
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 48214
9 years ago
b809725eb1
gettext-full: make autopoint and gettextize reloctable
...
The autopoint and gettextize host utilities contain hardcoded staging dir
paths which need to be overridden for the SDK environment.
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 48208
9 years ago
44df607a43
linux-firmware: fix mediatek/ralink package names
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48204
9 years ago
2611a5538e
hostapd: fix disassociation with FullMAC drivers and multi-BSS
...
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
SVN-Revision: 48202
9 years ago
37a57c1d71
openvpn: update to version 2.3.10
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48201
9 years ago
2f55804f13
uci: update to the latest version, adds a small optimization to uci commit
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48200
9 years ago
4c7983a00a
dropbear: enable curve25519 support by default, increases compressed binary size by ~5 kb
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48196
9 years ago
1455b5b89a
dropbear: split out curve25519 support into a separate config option
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48195
9 years ago
8c138d4ae8
fstools: fix off-by-one error in the version number
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48193
9 years ago
cb42ea1c70
fstools: update to the latest version, fixes filesystem state rewrite on every boot
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48191
9 years ago
6c40914c0c
hostapd: fix post v2.4 security issues
...
- WPS: Fix HTTP chunked transfer encoding parser (CVE-2015-4141)
- EAP-pwd peer: Fix payload length validation for Commit and Confirm
(CVE-2015-4143)
- EAP-pwd server: Fix payload length validation for Commit and Confirm
(CVE-2015-4143)
- EAP-pwd peer: Fix Total-Length parsing for fragment reassembly
(CVE-2015-4144, CVE-2015-4145)
- EAP-pwd server: Fix Total-Length parsing for fragment reassembly
(CVE-2015-4144, CVE-2015-4145)
- EAP-pwd peer: Fix asymmetric fragmentation behavior (CVE-2015-4146)
- NFC: Fix payload length validation in NDEF record parser (CVE-2015-8041)
- WNM: Ignore Key Data in WNM Sleep Mode Response frame if no PMF in use
(CVE-2015-5310)
- EAP-pwd peer: Fix last fragment length validation (CVE-2015-5315)
- EAP-pwd server: Fix last fragment length validation (CVE-2015-5314)
- EAP-pwd peer: Fix error path for unexpected Confirm message (CVE-2015-5316)
Signed-off-by: Stefan Lippers-Hollmann <s.l-h@gmx.de>
SVN-Revision: 48185
9 years ago
a960fcef29
mac80211: move b43legacy firmware to a separate package
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48184
9 years ago
805c40351e
mac80211: remove linux-firmware download
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48183
9 years ago
26eb793589
mac80211: move broadcom firmware to the linux-firmware package
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48182
9 years ago
4a791c8d4e
mac80211: move ti firmware to the linux-firmware package
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48181
9 years ago
78efb85fa1
mac80211: move mediatek/ralink firmware to the linux-firmware package
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48180
9 years ago
9e5df4a939
mac80211: move atheros/qca firmware to the linux-firmware package
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48179
9 years ago
6d0d89dc65
mac80211: move marvell firmware to the linux-firmware package
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48178
9 years ago
35baa05d80
mac80211: move intel firmware to the linux-firmware package
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48177
9 years ago
9dee1adc0f
mac80211: move realtek firmware to the linux-firmware package
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48176
9 years ago
ce6edb31ce
linux-firmware: add commented out BuildPackage section for metadata scanning
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48175
9 years ago
b6fcd06204
linux-firmware: remove duplication in package metadata
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48174
9 years ago
2d21f6c6d6
linux-firmware: move realtek firmware packages to realtek.mk
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48173
9 years ago
727f2d336d
linux-firmware: update to the latest version, sync with subdir used by the mac80211 package
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48172
9 years ago
da19a09b9e
Revert "package/libs/libtool: rename to libltdl"
...
This reverts commit r48149
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48169
9 years ago
c03f792aac
mac80211: brcmfmac: copy SDIO firmwares when CONFIG_BRCMFMAC_SDIO is selected
...
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
SVN-Revision: 48162
9 years ago
Felix Fietkau