Merge pull request #5116 from TDT-AG/pr/20171113-stunnel-add-uci-support

net/stunnel: add uci config support

net/stunnel: add uci config support

Add uci config support.

Signed-off-by: Florian Eckert <redacted>

Merge pull request #5256 from lynxis/rb_openldap

openldap: remove build host/user/timestamp

libgcrypt: remove build timestamp

Build timestamp prevents reproducible builds [0].
The patch is a backport from upstream.

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <redacted>

openldap: remove build host/user/timestamp

Such information from the build system break reproducible builds.

Signed-off-by: Alexander Couzens <redacted>

open-plc-utils: remove build timestamp

Build timestamps prevent reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <redacted>

Merge pull request #5155 from neheb/patch-6

ethtool: Update to 4.13

Merge pull request #5253 from mstorchak/acl

acl: update to 20170420

Merge pull request #5248 from diizzyy/patch-111

net/stunnel: Update to 5.44

Merge pull request #5252 from mstorchak/attr

attr: update to 20170915

Merge pull request #5245 from mstorchak/rsync

rsync: fix CVE-2017-15994 and CVE-2017-16548

acl: update to 20170420

Signed-off-by: Maxim Storchak <redacted>

attr: update to 20170915

Signed-off-by: Maxim Storchak <redacted>

Merge pull request #5250 from mstorchak/tgt

tgt: update to 1.0.72

Merge pull request #5251 from mstorchak/smartmontools

smartmontools: update to 6.6

smartmontools: update to 6.6

Signed-off-by: Maxim Storchak <redacted>

tgt: update to 1.0.72

Signed-off-by: Maxim Storchak <redacted>

net/stunnel: Update to 5.44

Update stunnel to 5.44
* Disable FIPS

Signed-off-by: Daniel Engberg <redacted>

Merge pull request #5247 from dibdot/travelmate

travelmate: update 0.9.6

travelmate: update 0.9.6

* fix incomplete bssid logic
* add missing package dependencies
* Turris omnia compability fixes (LuCI, separate PR)
* OpenWrt theme fixes (LuCI, separate PR)

Signed-off-by: Dirk Brenken <redacted>

prometheus-node-exporter-lua: bump version

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: rework cpu collector

replace 2 string.match and 1 string.gmatch (space_split)
by 1 string.match

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: use io.lines(), remove line_split

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: split out nat_traffic and netstat

nat_traffic is too verbose to be really useful by default
netstat is broken by default on OpenWrt/LEDE

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: put wifi collector in 2 separate packages

this allow to remove libubus-lua/libiwinfo-lua dependency from main package
this also allow to have different scrape_interval

Signed-off-by: Etienne Champetier <redacted>
split stations

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: make it modular

As prometheus-node-exporter-lua is a reimplementation of node_exporter,
I'm using "collector" instead of "scraper" and renaming some collectors

put each collector in a separate file

report collector success/failure and duration per scrape
(follow https://github.com/prometheus/node_exporter/pull/516)

allow to filter collectors using "collect[]" params
(see https://github.com/prometheus/node_exporter#filtering-enabled-collectors)

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: rewrite wifi scraper

On my bullet m2, scrape duration goes from between 0.2 and 0.5 to a stable 0.025
We also don't depend on luci anymore

This remove wifi_network_up metric, but this metric was buggy
wifi_network_up{ifname="wlan0-1",ssid="test1",channel="11",mode="Master",bssid="12:34:56:78:9A:BC",country="FR",frequency="2.462"} 1
wifi_network_up{ifname="radio0.network2",ssid="test1",channel="11",mode="Master",country="US",frequency="2.462"} 0

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: fix nat scraper

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: improve node_uname_info

Testing on a bullet m2, uname collector was taking on average 0.12
it now takes 0.0007

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: respond with HTTP/1.0

also reduce calls to output()

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: send stdout/stderr to logread

Signed-off-by: Etienne Champetier <redacted>

build,travis: SDK name now start with openwrt

Signed-off-by: Etienne Champetier <redacted>

Merge pull request #5242 from smutt/danish

danish: Add package net/danish

wavemon: use SOURCE_DATE_EPOCH as BUILD_DATE

Build timestamps prevent reproducible builds [0].
SOURCE_DATE_EPOCH [1] can replace BUILD_DATE in a
determinisc way.

[0] https://reproducible-builds.org/docs/timestamps/
[1] https://reproducible-builds.org/specs/source-date-epoch/

Signed-off-by: Alexander Couzens <redacted>

Merge pull request #5246 from wvdakker/master

Shorewall: bump to version 5.1.9

Shorewall6: bump to version 5.1.9

Removed 010-update_install_sh.patch. Merged upstream.

Signed-off-by: W. van den Akker <redacted>

Shorewall: bump to version 5.1.9

Removed 010-update_install_sh.patch. Merged upstream.

Signed-off-by: W. van den Akker <redacted>

Shorewall6-lite: bump to version 5.1.9

Signed-off-by: W. van den Akker <redacted>

Shorewall-lite: bump to version 5.1.9

Signed-off-by: W. van den Akker <redacted>

Shorewall-core: bump to version 5.1.9

Signed-off-by: W. van den Akker <redacted>

rsync: Fix CVE-2017-15994 and CVE-2017-16548

Signed-off-by: Maxim Storchak <redacted>

Merge pull request #5243 from brianjmurrell/shorewall-multi-sources

Shorewall multi sources

Merge pull request #5238 from lynxis/rb_lcdproc

lcdproc: remove build timestamp

Merge pull request #5214 from lynxis/rb_ddns_cloud

ddns-scripts: remove gzip timestamp

libp11: include also p11_err.h when InstallDev

Fix the following compilation error

    In file included from openconnect-internal.h:95:0,
     from ssl.c:41:
    /home/yousong/git-repo/lede-project/lede/staging_dir/target-mips_24kc_musl/usr/include/libp11.h: At top level:
    /home/yousong/git-repo/lede-project/lede/staging_dir/target-mips_24kc_musl/usr/include/libp11.h:27:21: fatal error: p11_err.h: No such file or directory
    compilation terminated.
    make[5]: *** [libopenconnect_la-ssl.lo] Error 1

Signed-off-by: Yousong Zhou <redacted>

shorewall6: Multiple source sources

Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <redacted>

shorewall: Multiple source sources

Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <redacted>

shorewall6-lite: Multiple source sources

Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <redacted>

shorewall-lite: Multiple source sources

Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <redacted>

shorewall-core: Multiple source sources

Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <redacted>

danish: Add package net/danish

Add package Danish. A middle box implementation of RFC 6698 for HTTPS.
<https://github.com/smutt/danish>

This package installs /usr/sbin/danish(the Danish executable), /etc/init.d/danish and /etc/config/danish.

Tested with LEDE x86_64

Signed-off-by: Andrew McConachie <redacted>

Merge pull request #5232 from dibdot/travelmate

travelmate: update 0.9.5

Merge pull request #4486 from wvdakker/master

Shorewall(6): add full packages.

Merge pull request #5185 from kubco2/mwan3-improve-logs

mwan3: Improve logs when member metric is too big

mwan3: Improve logs when member metric is too big

If metric of member interface is bigger then 256, it is not
appended to policy, now at least warn message is printed into
syslog

Signed-off-by: Jakub Janco <redacted>

tor: update to 0.3.1.9

Signed-off-by: Peter Wagner <redacted>

ap51-flash: Provide PKG_LICENSE* information

Signed-off-by: Sven Eckelmann <redacted>

ap51-flash: Update to version 2017-12-07

* Added support for new OpenMesh devices:
  - A42
  - A62
  - G200
  - D200
  - P60
* Fix size calculation for combined ext images
* Fixed build with musl

Signed-off-by: Sven Eckelmann <redacted>

ap51-flash: Remove FLASH_FROM_FILE preprocessor variable

ap51-flash doesn't know the FLASH_FROM_FILE preprocessor variable and thus
OpenWrt should not set it in its package Makefile.

Signed-off-by: Sven Eckelmann <redacted>

ap51-flash: Remove NO_LIBPCAP preprocessor variable

ap51-flash doesn't know the NO_LIBPCAP preprocessor variable and thus
OpenWrt should not set it in its package Makefile.

Signed-off-by: Sven Eckelmann <redacted>

ap51-flash: Remove OFLAGS from MAKE_FLAGS

Nothing in ap51-flash is using the variable OFLAGS. It should therefore not
be set.

Signed-off-by: Sven Eckelmann <redacted>

ap51-flash: Remove uIP workarounds

ap51-flash is no longer using uIP and thus these workarounds should no
longer be used.

Signed-off-by: Sven Eckelmann <redacted>

Merge pull request #5195 from yangfl/master

i2pd: Add package

i2pd: Add package

Signed-off-by: David Yang <redacted>

build,travis: don't use TRAVIS_PULL_REQUEST

TRAVIS_PULL_REQUEST can be:
- undefined (local usage)
- false (branch build)
- PR number (if in a PR)
it's never set to true

use TRAVIS_PULL_REQUEST_SHA instead, so we can use normal tests (-z/-n)

Signed-off-by: Etienne Champetier <redacted>

lcdproc: remove build timestamp

Build timestamp prevents reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <redacted>

Merge pull request #5235 from lynxis/rb_uanytun

uanytun: remove build time/host to fix reproducible builds

uanytun: remove build time/host to fix reproducible builds

Build timestamps prevents reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <redacted>

Merge pull request #5234 from lynxis/rb_zabbix

zabbix: remove build timestamp

zabbix: remove build timestamp

Build timestamp prevents reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <redacted>

travelmate: update 0.9.5

* change start priority to 25
* add support for hidden uplinks
* add support for wpa enterprise uplinks

Signed-off-by: Dirk Brenken <redacted>

rpcd-mod-lxc: bump PKG_RELEASE to indicate recent changes

It should be bumped due to the "info" ubus method support.

Signed-off-by: Rafał Miłecki <redacted>

Merge pull request #5225 from diizzyy/patch-110

libs/libpng: Update to 1.6.34

Merge pull request #5224 from diizzyy/patch-109

libs/libgd: Update to 2.2.5

rpcd-mod-lxc: info: return NOT_FOUND if container doesn't exist

It allow distinction between not existing and stopped container. So far
querying for not existing container was resulting in:
> ubus call lxc info '{ "name": "foo" }'
{
        "name": "foo",
        "state": "STOPPED",
        "ips": [

        ]
}

Now it's an error and it matches lxc-info command line:

> ubus call lxc info '{ "name": "foo" }'
Command failed: Not found

> lxc-info --name foo
foo doesn't exist

Signed-off-by: Rafał Miłecki <redacted>

collectd: upgrade package collectd to version 5.8.0

This patch upgrades the collectd package from 5.7.2 to 5.8.2.
All openwrt patches got either updated or deleted in case they
are already included into upstream collectd.
The new collectd 5.8.0 package compiles and got tested on current
lede trunk with latest luci on an PCengines APU. All default plugins
(enabled via Openwrt  Makefile) - so also iwinfo - are running fine
with the new version.

Signed-off-by: Thomas Huehn <redacted>
Amended with the following changes:

* preserve git file history by avoiding unnecessary patch renames
* mark new plugins introduced with 5.8 branch as disabled

Compile tested all plugins with ipq806x

Signed-off-by: Hannu Nyman <redacted>

Merge pull request #5226 from lynxis/rb_vim

vim: remove build timestamp/hostname/username

Merge pull request #5205 from lynxis/rb_sysstat

sysstat: remove build timestamp

pixiewps: initial version 1.4.1

Addresses #2872

Signed-off-by: Yousong Zhou <redacted>

reaver: switch to reaver-wps-fork-t6x

Addresses #2872

Signed-off-by: Yousong Zhou <redacted>

openconnect: unify indentation in README

Signed-off-by: Yousong Zhou <redacted>

vim: remove build timestamp/hostname/username

Build timestamp prevents reproducible builds [0].
Same for other irrelevant informations e.g. hostname, username.
Thanks to debian for the patch.

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <redacted>

Merge pull request #5208 from neheb/patch-2

hd-idle: Update to 1.05

Merge pull request #5223 from diizzyy/patch-108

lib/expat: Update to 2.2.5

libs/libpng: Update to 1.6.34

Update libpng to 1.6.34

Signed-off-by: Daniel Engberg <redacted>

libs/libgd: Update to 2.2.5

Update libgd to 2.2.5
CVEs: CVE-2017-6362 + CVE-2017-7890

Signed-off-by: Daniel Engberg <redacted>

lib/expat: Update to 2.2.5

Update (lib)expat to 2.2.5

Signed-off-by: Daniel Engberg <redacted>

openconnect: support reading password from script

"token_mode" add support for "script", which execute "token_script" to
get the password.  Some token is not supported by OpenConnect natively,
e.g. "MobilePass" or "Softoken II" used in Cisco VPN

Signed-off-by: Gavin Ni <redacted>
Signed-off-by: Yousong Zhou <redacted>

Merge pull request #5220 from pprindeville/perl-cgi-4.38

perl-cgi: Update to 4.38

perl-cgi: Update to 4.38

Signed-off-by: Philip Prindeville <redacted>

git: update to 2.15.1 and cleanup DEPENDS

Signed-off-by: Peter Wagner <redacted>

gst1-libav: Supply CPU type to libav configure after stipping FPU notation

Signed-off-by: Ted Hess <redacted>

mjpg-streamer: Add mdns support

Signed-off-by: Roger D <redacted>
Signed-off-by: Ted Hess <redacted>

Merge pull request #5216 from lynxis/rb_tcpproxy

tcpproxy: remove build timestamp and hostname

Merge pull request #5215 from lynxis/rb_lpc21isp

lpc21isp: remove build timestamp

Merge pull request #5164 from TDT-AG/pr/20171116-net-mwan3-fixes

net/mwan3: add improvments and add a fix

lua-rs232: remove build timestamp

Build timestamp prevents reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <redacted>

tcpproxy: remove build timestamp and hostname

Build timestamp prevents reproducible builds [0].
Build hostname also breaks reproducible builds.

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <redacted>

ddns-scripts: remove gzip timestamp

gzip create a header by default containing the filename
and the timestamp of the file.
This timestamp will break reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <redacted>

lpc21isp: remove build timestamp

Build timestamps prevent reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <redacted>