Merge pull request #5244 from yousong/p11-err.h

openconnect: fix compilation against libp11 >= 0.4.7

lsof: reproducible build

- clear build host and user info
- clear compiler flags
- set date to SOURCE_DATE_EPOCH

Signed-off-by: Maxim Storchak <redacted>

ap51-flash: Fix source repository URL

The URL git://dev.cloudtrax.com/ap51-flash.git is not the actual public
source repository URL for ap51-flash. It is not even accessible in the
moment. The official repository can now be found at github.

Signed-off-by: Sven Eckelmann <redacted>

net/stunnel: add enabled config option

Add an enabled option for the service section, so you could keep your
configuration in place without apply this section on startup or service reload.

Signed-off-by: Florian Eckert <redacted>

openconnect: fix compilation against libp11 0.4.7

Signed-off-by: Yousong Zhou <redacted>

Merge pull request #5179 from neheb/cifs

cifs-utils: Update to 6.7

php7: remove build timestamp

Build timestamp prevents reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <redacted>

perl: remove build timestamp

Build timestamp prevents reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <redacted>

Merge pull request #5276 from thess/fdk-aac

fdk-aac: Update to latest source revision. Add myself as maintainer

Merge pull request #5261 from nxhack/bump_to_60_2

icu: update to 60.2

icu: update to 60.2

Maintainer: me
Compile tested: ar71xx, LEDE trunk r5488-893a1ed
Run tested: NONE

Description:
upstream update to 60.2
note: fix g++-4 issue

Signed-off-by: Hirokazu MORIKAWA <redacted>

fdk-aac: Update to latest source revision. Add myself as maintainer

Signed-off-by: Ted Hess <redacted>

Merge pull request #5275 from thess/unrar-update

unrar: Update to latest version (5.5.8)

unrar: Update to latest version (5.5.8)

11-Aug-2017 version fixes outstanding CVE's.
CVE-2012-6706, CVE-2017-12942, CVE-2017-12941, CVE-2017-12940 and CVE-2017-12938

Signed-off-by: Ted Hess <redacted>

python,python3: add zlib/host to HOST_BUILD_DEPENDS

This should fix the zlibmodule build on the host side.

Usually, if zlib is not found, Python/Python3 builds fine
without it, but there are some cases where the Python/Python3
interpreter on the host-side requires zlib to run.

At the moment, zlib does not have a host-build.
This should be available when this PR gets merged:
https://github.com/lede-project/source/pull/1329
[ or a similar one that contains host-build support for zlib ].

In the meantime, this change can go into Python/Python3.

Signed-off-by: Alexandru Ardelean <redacted>

mjpg-streamer: Remove build date-time from image

Remove un-needed uvcvideo.h (use system include)

Signed-off-by: Ted Hess <redacted>

strongswan: add interface uci list

The interface config option allows users to configure logical OpenWRT
interface names in the ipsec section; it allows StrongSwan to listen
and send traffic on specified interface(s). It translates to interfaces_use
StrongSwan option which is a comma sepearted list of network devices
that should be used by charon.
Since StrongSwan can only be started when one of the specified logical
OpenWRT interface is up procd interface triggers are installed to
trigger the reload script.

Signed-off-by: Hans Dedecker <redacted>

Merge pull request #5190 from jow-/iodine-fix-musl-endianess

iodine: properly detect endianess when building against musl libc

strongswan: fix reload service

Based on the ipsec running state reload_service is either reloading ipsec
or starting ipsec. However in the latter case it calls ipsec start which
bypasses the procd start_service function which means the running ipsec
instance is not managed by procd.
Fix this by calling start in case ipsec is not running; at the same time
add service_running function which is used by procd provided running
function.

Signed-off-by: Hans Dedecker <redacted>

iodine: workaround incomplete musl nameser.h header

The arpa/nameser.h header of musl libc indirectly depends on the endian.h
header but fails to explicitely include it to properly define
`__BYTE_ORDER` and `__BIG_ENDIAN` prior to declaring the DNS `HEADER`
structure.

When both the appropriate `__BYTE_ORDER` and `__BIG_ENDIAN` defines are
unset, the `#if __BYTE_ORDER == __BIG_ENDIAN` condition in `nameser.h`
evaluates to true, causing it to declare a bad (big endian) DNS packet
header structure on little endian systems.

Work around this musl bug by forcibly passing `-include endian.h` through
the `osflags` file.

An upstream fix for musl libc has been submitted with
http://www.openwall.com/lists/musl/2017/12/04/3

This should solve iodine packet corruption on little endian musl systems
reported at
http://lists.infradead.org/pipermail/lede-dev/2017-November/010085.html

Signed-off-by: Jo-Philipp Wich <redacted>

setserial: introduce package

This packages setserial, the standard Linux program for setting serial
device attributes such as baud rate, flow control etc.

Signed-off-by: Jo-Philipp Wich <redacted>

nlbwmon: update to current HEAD

Update to latest Git HEAD in order to solve a number of issues.

 - Improves MAC address lookup reliability
 - Properly counts DNAT-ed connections (e.g. for port forwards)
 - Fixes stack corruption when parsing netlink records
 - Fixes deletion of gzipped databases

Signed-off-by: Jo-Philipp Wich <redacted>

Merge pull request #5267 from diizzyy/patch-112

utils/gawk: Fix package

Merge pull request #5218 from lynxis/rb_lua-rs232

lua-rs232: remove build timestamp

Merge pull request #5207 from lynxis/rb_libdbd

libdbi-drivers: remove build timestamp

lxc: add lxc-unprivileged helper package for unprivileged containers

LXC requires newuidmap and newguidmap with SUID to run unprivileged
containers. This package should help users make sure they are available.

Signed-off-by: Rafał Miłecki <redacted>

utils/gawk: Fix package

Remove igawk references as it's obsolete and not provided anymore.
Reported here: https://github.com/openwrt/packages/issues/5110
Fix package URL

Signed-off-by: Daniel Engberg <redacted>

Merge pull request #5213 from lynxis/rb_openplc

open-plc-utils: remove build timestamp

Merge pull request #5263 from yangfl/master

i2pd: Update to 2.17.0

Merge pull request #5262 from neheb/patch-1

gnutls: Use HTTP instead of FTP

net/mosquitto: reproducible build patches

Remove build timestamp.  Using currently proposed upstream patch.

Signed-off-by: Alexander Couzens <redacted>
Signed-off-by: Karl Palsson <redacted>

net/mosquitto: depend on virtual package instead of select

Can't use DEPENDS:= +libname when libname is now a virtual package.
Switch to plain DEPENDS:= libname.

Fixes Github issue 4751

Signed-off-by: Karl Palsson <redacted>

libwebsockets: remove build hostname

Using the build hostname breaks reproducible builds.
The patch is already merged upstream

Signed-off-by: Alexander Couzens <redacted>

libwebsockets: bump to version 2.4.1

No changelog entry upstream unfortunately.

Signed-off-by: Karl Palsson <redacted>

i2pd: Update to 2.17.0

Signed-off-by: David Yang <redacted>

gnutls: Use HTTPS instead of FTP

While recently building asterisk, the make system stalled on gnutls. On my install of Ubuntu 16.04 on WSL, it seems curl can't download from ftp and doesn't even time out properly. Easiest solution is to switch the gnutls Makefile to use HTTPS instead.

Signed-off-by: Rosen Penev <redacted>

Merge pull request #5259 from valdi74/update_python-curl

python-curl: update to 7.43.0.1

Merge pull request #5197 from commodo/python-bluez-deps

 python,python3: define config option for bluetooth support

python-curl: update to 7.43.0.1

Signed-off-by: Waldemar Konik <redacted>

python,python3: define config option for bluetooth support

It was reported via
https://github.com/openwrt/packages/pull/5122#issuecomment-347395472
that if bluez-libs is selected as an installable package,
then the error below will show up:
```
 * satisfy_dependencies_for: Cannot satisfy the following dependencies for python-light:
 * bluez-libs *
 * opkg_install_cmd: Cannot install package python-light.
```

This looks like a limitation in the design of package deps,
and maybe a misuse of conditional deps (i.e. PACKAGE_bluez-libs:bluez-libs).

So, to fix this, an idea we're adding an extra symbol
that enfoces installation of bluez-libs if selected.

We also need to add a way to disable bluetooth build
if PYTHON(3)_BLUETOOTH_SUPPORT is de-selected.
Otherwise, bluetooth is installed and the socket
module is broken due to linker errors.

Signed-off-by: Alexandru Ardelean <redacted>

python-pip-conf: split package away from python package

This should improve build time if you only want to
build Python3 (and not Python).

Because python-pip-conf was part of the python package,
the whole python package (host + target) would get built if Python3
would need to get built.

Signed-off-by: Alexandru Ardelean <redacted>

Merge pull request #5116 from TDT-AG/pr/20171113-stunnel-add-uci-support

net/stunnel: add uci config support

net/stunnel: add uci config support

Add uci config support.

Signed-off-by: Florian Eckert <redacted>

Merge pull request #5256 from lynxis/rb_openldap

openldap: remove build host/user/timestamp

libgcrypt: remove build timestamp

Build timestamp prevents reproducible builds [0].
The patch is a backport from upstream.

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <redacted>

openldap: remove build host/user/timestamp

Such information from the build system break reproducible builds.

Signed-off-by: Alexander Couzens <redacted>

open-plc-utils: remove build timestamp

Build timestamps prevent reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <redacted>

Merge pull request #5155 from neheb/patch-6

ethtool: Update to 4.13

Merge pull request #5253 from mstorchak/acl

acl: update to 20170420

Merge pull request #5248 from diizzyy/patch-111

net/stunnel: Update to 5.44

Merge pull request #5252 from mstorchak/attr

attr: update to 20170915

Merge pull request #5245 from mstorchak/rsync

rsync: fix CVE-2017-15994 and CVE-2017-16548

acl: update to 20170420

Signed-off-by: Maxim Storchak <redacted>

attr: update to 20170915

Signed-off-by: Maxim Storchak <redacted>

Merge pull request #5250 from mstorchak/tgt

tgt: update to 1.0.72

Merge pull request #5251 from mstorchak/smartmontools

smartmontools: update to 6.6

smartmontools: update to 6.6

Signed-off-by: Maxim Storchak <redacted>

tgt: update to 1.0.72

Signed-off-by: Maxim Storchak <redacted>

net/stunnel: Update to 5.44

Update stunnel to 5.44
* Disable FIPS

Signed-off-by: Daniel Engberg <redacted>

Merge pull request #5247 from dibdot/travelmate

travelmate: update 0.9.6

travelmate: update 0.9.6

* fix incomplete bssid logic
* add missing package dependencies
* Turris omnia compability fixes (LuCI, separate PR)
* OpenWrt theme fixes (LuCI, separate PR)

Signed-off-by: Dirk Brenken <redacted>

prometheus-node-exporter-lua: bump version

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: rework cpu collector

replace 2 string.match and 1 string.gmatch (space_split)
by 1 string.match

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: use io.lines(), remove line_split

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: split out nat_traffic and netstat

nat_traffic is too verbose to be really useful by default
netstat is broken by default on OpenWrt/LEDE

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: put wifi collector in 2 separate packages

this allow to remove libubus-lua/libiwinfo-lua dependency from main package
this also allow to have different scrape_interval

Signed-off-by: Etienne Champetier <redacted>
split stations

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: make it modular

As prometheus-node-exporter-lua is a reimplementation of node_exporter,
I'm using "collector" instead of "scraper" and renaming some collectors

put each collector in a separate file

report collector success/failure and duration per scrape
(follow https://github.com/prometheus/node_exporter/pull/516)

allow to filter collectors using "collect[]" params
(see https://github.com/prometheus/node_exporter#filtering-enabled-collectors)

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: rewrite wifi scraper

On my bullet m2, scrape duration goes from between 0.2 and 0.5 to a stable 0.025
We also don't depend on luci anymore

This remove wifi_network_up metric, but this metric was buggy
wifi_network_up{ifname="wlan0-1",ssid="test1",channel="11",mode="Master",bssid="12:34:56:78:9A:BC",country="FR",frequency="2.462"} 1
wifi_network_up{ifname="radio0.network2",ssid="test1",channel="11",mode="Master",country="US",frequency="2.462"} 0

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: fix nat scraper

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: improve node_uname_info

Testing on a bullet m2, uname collector was taking on average 0.12
it now takes 0.0007

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: respond with HTTP/1.0

also reduce calls to output()

Signed-off-by: Etienne Champetier <redacted>

prometheus-node-exporter-lua: send stdout/stderr to logread

Signed-off-by: Etienne Champetier <redacted>

build,travis: SDK name now start with openwrt

Signed-off-by: Etienne Champetier <redacted>

Merge pull request #5242 from smutt/danish

danish: Add package net/danish

wavemon: use SOURCE_DATE_EPOCH as BUILD_DATE

Build timestamps prevent reproducible builds [0].
SOURCE_DATE_EPOCH [1] can replace BUILD_DATE in a
determinisc way.

[0] https://reproducible-builds.org/docs/timestamps/
[1] https://reproducible-builds.org/specs/source-date-epoch/

Signed-off-by: Alexander Couzens <redacted>

Merge pull request #5246 from wvdakker/master

Shorewall: bump to version 5.1.9

Shorewall6: bump to version 5.1.9

Removed 010-update_install_sh.patch. Merged upstream.

Signed-off-by: W. van den Akker <redacted>

Shorewall: bump to version 5.1.9

Removed 010-update_install_sh.patch. Merged upstream.

Signed-off-by: W. van den Akker <redacted>

Shorewall6-lite: bump to version 5.1.9

Signed-off-by: W. van den Akker <redacted>

Shorewall-lite: bump to version 5.1.9

Signed-off-by: W. van den Akker <redacted>

Shorewall-core: bump to version 5.1.9

Signed-off-by: W. van den Akker <redacted>

rsync: Fix CVE-2017-15994 and CVE-2017-16548

Signed-off-by: Maxim Storchak <redacted>

Merge pull request #5243 from brianjmurrell/shorewall-multi-sources

Shorewall multi sources

Merge pull request #5238 from lynxis/rb_lcdproc

lcdproc: remove build timestamp

Merge pull request #5214 from lynxis/rb_ddns_cloud

ddns-scripts: remove gzip timestamp

libp11: include also p11_err.h when InstallDev

Fix the following compilation error

    In file included from openconnect-internal.h:95:0,
     from ssl.c:41:
    /home/yousong/git-repo/lede-project/lede/staging_dir/target-mips_24kc_musl/usr/include/libp11.h: At top level:
    /home/yousong/git-repo/lede-project/lede/staging_dir/target-mips_24kc_musl/usr/include/libp11.h:27:21: fatal error: p11_err.h: No such file or directory
    compilation terminated.
    make[5]: *** [libopenconnect_la-ssl.lo] Error 1

Signed-off-by: Yousong Zhou <redacted>

shorewall6: Multiple source sources

Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <redacted>

shorewall: Multiple source sources

Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <redacted>

shorewall6-lite: Multiple source sources

Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <redacted>

shorewall-lite: Multiple source sources

Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <redacted>

shorewall-core: Multiple source sources

Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <redacted>

danish: Add package net/danish

Add package Danish. A middle box implementation of RFC 6698 for HTTPS.
<https://github.com/smutt/danish>

This package installs /usr/sbin/danish(the Danish executable), /etc/init.d/danish and /etc/config/danish.

Tested with LEDE x86_64

Signed-off-by: Andrew McConachie <redacted>

Merge pull request #5232 from dibdot/travelmate

travelmate: update 0.9.5

Merge pull request #4486 from wvdakker/master

Shorewall(6): add full packages.

Merge pull request #5185 from kubco2/mwan3-improve-logs

mwan3: Improve logs when member metric is too big

mwan3: Improve logs when member metric is too big

If metric of member interface is bigger then 256, it is not
appended to policy, now at least warn message is printed into
syslog

Signed-off-by: Jakub Janco <redacted>

tor: update to 0.3.1.9

Signed-off-by: Peter Wagner <redacted>

ap51-flash: Provide PKG_LICENSE* information

Signed-off-by: Sven Eckelmann <redacted>

ap51-flash: Update to version 2017-12-07

* Added support for new OpenMesh devices:
  - A42
  - A62
  - G200
  - D200
  - P60
* Fix size calculation for combined ext images
* Fixed build with musl

Signed-off-by: Sven Eckelmann <redacted>

ap51-flash: Remove FLASH_FROM_FILE preprocessor variable

ap51-flash doesn't know the FLASH_FROM_FILE preprocessor variable and thus
OpenWrt should not set it in its package Makefile.

Signed-off-by: Sven Eckelmann <redacted>