xtables-addons: set ipp2p depends on kmod-lib-textsearch
For version 3.27 CONFIG_TEXTSEARCH_BM checks is enabled,
so ipp2p is set depends on kmod-lib-textsearch.
If ipp2p (and kmod-lib-textsearch) is disabled the error
"error CONFIG_TEXTSEARCH=y/m is required.." is displayed.
This is because all modules are always compiled.
So to make compilation possible with ipp2p disabled, the message
was disabled.
Attempting to use ExtUtils::MakeMaker from perlbase-extutils results in an
error of "Can't locate ExtUtils/MakeMaker/version/vpp.pm in @INC".
Installing perlbase-version fixes the error. Therefore we add
perlbase-version as a dependency of perlbase-extutils.
Josef Schlehofer [Sun, 25 May 2025 10:39:58 +0000 (12:39 +0200)]
CI: formal check: use shared workflow in actions-shared-workflows
Lets switch to shared workflow in actions-shared-workflows instead of having
this separate file here. It will track and use the latest changes to avoid
being outdated.
Nikolay Manev [Wed, 14 May 2025 19:10:27 +0000 (22:10 +0300)]
pv: update to 1.9.31
* update to 1.9.31 from upstream: https://codeberg.org/ivarch/pv
* license changed to GPL-3.0-or-later and directory doc/COPYING -> docs/COPYING
* added test.sh file for ci testing
Josef Schlehofer [Thu, 22 May 2025 12:23:10 +0000 (14:23 +0200)]
wifi-presence: bump PKG_RELEASE
It is necessary to bump PKG_RELEASE, because existing installation of
wifi-presence wouldnt know about this fix, so this ensures versioning
and as well that existing installation will require update with
this fix.
Fixes: 87175e4ca365e1bf5ac71e3dfb5186eb4c41f689 ("wifi-presence: fix reading mqttID from config") Signed-off-by: Josef Schlehofer <redacted>
Noah Meyerhans [Wed, 21 May 2025 19:06:57 +0000 (15:06 -0400)]
bind: bump to 9.20.9
CVE-2025-40775: Prevent assertion when processing TSIG algorithm. DNS messages
that included a Transaction Signature (TSIG) containing an invalid value in the
algorithm field caused named to crash with an assertion failure. This has been
fixed.
Sergey Ponomarev [Wed, 30 Aug 2023 18:56:27 +0000 (21:56 +0300)]
emailrelay: more options
--as-client mode.
dnsbl: to reject bad IPs.
spool_dir and delivery_dir: to set storage on USB disk.
filter: for SpamAssassin.
POP3 options.
Specify interface.
Use --forward-to-some by default.
Sergey Ponomarev [Wed, 30 Aug 2023 17:00:45 +0000 (20:00 +0300)]
emailrelay: conf: TLS split cert and private key
Since v2.3.1 --server-tls-certificate and --client-tls-certificate may be comma separated list of privkey and fullchain so users don't need to merge the both files.
The privkey must be firts, the cert second.
Reflect this in config samples.
Alternatively instead of comma separated the emailrelay allows just pass two --server-tls-certificate options: one for a privkey and second time for a cert.
So the server_tls_certificate option may be a list. But instead to make it easier to configure from UCI let's add a separate option server-tls-key which is dedicated for a privkey.
Similarly, the client-tls-key is a private key part for the --client-tls-certificate
Remove unused description.
Quote variables.
Use hostname_file variable.
Remove unnecessary quotes around "common".
Use echo -n to truncate a TORRC_FILE.
Replace boolean "true"/"false" with more frequently used 1/0.
This may avoid configuration mistakes which is critical for Tor.
The Luci app anyway will set it as 1/0.
Make sections named. This is not required but again safes from mistakes when executing uci command.
Uncomment sections but disable them by default.
Then in a Luci app a user can quickly figure out what to change.
Ideally a user may just enable the config and start using it.
In the nextcloud config use a single 80 instead of 80;80.
This simpler configuration is now supported.
Instead of "Hidden service" the Tor team now uses "Onion service".
Using substring instead of awk.
It changes behaviour when only one port is specified.
Previously:
value="80" => public="80" local=""
Now:
value="80" => public="80" local="80"
Fabrice Fontaine [Wed, 26 Feb 2025 20:31:06 +0000 (21:31 +0100)]
admin/syslog-ng: fix PKG_CPE_ID
oneidentity:syslog-ng is a better CPE ID than balabit:syslog-ng as
this CPE ID has the latest CVEs (whereas balabit:syslog-ng only
has a CVE from 2000):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:oneidentity:syslog-ng
Fixes: 5f07bb10948f6ebdf83470c3437c3072aab982e3 (syslog-ng: update to version 3.19.1) Signed-off-by: Fabrice Fontaine <redacted>
John Audia [Wed, 8 Jan 2025 14:44:33 +0000 (09:44 -0500)]
fscrypt: add new package
Fscrypt is a high-level tool for the management of Linux native
filesystem encryption. fscrypt manages metadata, key generation, key
wrapping, PAM integration, and provides a uniform interface for creating
and modifying encrypted directories.
Kevin Locke [Sat, 30 Nov 2024 21:36:49 +0000 (14:36 -0700)]
strongswan: swanctl: Add support for send_certreq
Support the [send_certreq] connection configuration option to disable
offering trusted root CA certificates and reduce the size of the initial
IKE packets.
This work is based on a patch by @aleks-mariusz in
https://forum.openwrt.org/t/confusion-regarding-setting-up-ikev2-vpn-service-with-strongswan-using-ipsec-and-swanctl/169587/9
Michael Heimpold [Tue, 13 May 2025 05:33:11 +0000 (07:33 +0200)]
php8: adapt test.sh for upcoming opkg -> apk transition
We used to rely on opkg to install the CLI tool for testing
PHP modules, but when opkg is not available anymore, we have to
use apk. The (simple) switch logic assumes, that only one
of both package manager tools is installed.
perl: do not set LD_LIBRARY_PATH for cross compile
We don't want to set LD_LIBRARY_PATH to a directory filled with target
libraries when running a host perl. When the host and target
architecture are the same, some libraries will be loaded from this
path, resulting in the build to break because of glibc/musl mismatch.
Reported-by: John Audia <redacted> Fixes: e7b5a35e5caa ("perl: drop 110-always_use_miniperl.patch") Signed-off-by: Matthias Schiffer <redacted>
xtables-addons: remove not needed iptables install dependency for RTSP helpers
The RTSP conntrack and nat does not dependent on iptables, but only on
nf_conntrack and nf_nat. The RTSP conntrack module is used as a helper in
firewall4 [1]. Previously, it was not possible to install RTSP kernel module
without also installing the not needed iptables modules. However, as firewall4
is based on nftables and not on iptables, this dependency is not necessary.
Til Kaiser [Fri, 9 May 2025 08:43:30 +0000 (10:43 +0200)]
mstflint: update to 4.32.0
This commit updates the mstflint package to
the latest 4.32.0 release.
It also includes a patch to fix a musl build error that
has been merged into the upstream development branch [1],
but is not yet part of any official release.
Obsolete patches have been removed,
as they are now included in this version.
Additionally, three new binaries introduced
in 4.32.0 have been added to the package.
Stan Grishin [Mon, 12 May 2025 01:55:03 +0000 (01:55 +0000)]
https-dns-proxy: update to 2025.05.11
* update to 2025.05.11 from upstream: https://github.com/aarond10/https_dns_proxy/commit/a34e20d6e24df603427d91bac8f58c2d3a8aa0a6
* update default config with default value for procd_fw_src_interfaces
git.99rst.org / openwrt-packages.git / log