The Openswan and UCI configuration file formats are very similar.
Implement the conversion from UCI to IPsec configuration file format in
the ipsec init script and store the converted information in
/etc/ipsec.uci.{conf,secrets} then reference these files from
/etc/ipsec.{conf,secrets}. This scheme allows for
backwards-compatibility during upgrades (since the original
configuration is preserved) and allows for users to implement any exotic
configurations that they require without conflicting with the
configuration in UCI.
Also add a nearly empty ipsec config file which enables nat_traversal.
This option should be safe in all configurations and is required in
many, which makes it a good default.
Signed-off-by: Kevin Locke <kevin@kevinlocke.name>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29585 3c298f89-4303-0410-b956-a3cf2f4a3e73
The /etc/ipsec.d directory holds the certificates and CRLs used for
IPsec, many of which may have been uploaded by users. /etc/ipsec.conf
and /etc/ipsec.secrets hold user configuration for the IPsec daemons.
Add a keep.d file to preserve these files/directories across upgrades.
Signed-off-by: Kevin Locke <kevin@kevinlocke.name>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29584 3c298f89-4303-0410-b956-a3cf2f4a3e73
This patch was merged upstream in commit
dd5c1a87f7032a00422135d14e1f1247b38a40c8 in Sept 2010. It is already
included in v2.6.30 and later.
Signed-off-by: Kevin Locke <kevin@kevinlocke.name>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29582 3c298f89-4303-0410-b956-a3cf2f4a3e73
This creates programs/loggerfix which is never used. Dump it.
Signed-off-by: Kevin Locke <kevin@kevinlocke.name>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29581 3c298f89-4303-0410-b956-a3cf2f4a3e73
kmod-openswan provides the KLIPS stack, included in Openswan. However,
Openswan works quite well with the in-kernel stack (NETKEY). Make
installation of KLIPS optional.
Signed-off-by: Kevin Locke <kevin@kevinlocke.name>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29580 3c298f89-4303-0410-b956-a3cf2f4a3e73
8 December 2011: babeld-1.3.0
* Made the route table into a sorted array, and use binary sort for
searching for routes. This makes most route operations O(log n), at
a slight cost in memory usage.
* Changed the update sending strategy to use buffers large enough for
a full update. This makes the duplicate suppression mechanism
effective in large networks, at a small cost in memory usage.
* Rate-limit the reaction to wildcard requests. This avoids an update
storm at boot in large networks.
* Fixed a bug that prevented usage of the "default" keyword in
configuration files.
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29512 3c298f89-4303-0410-b956-a3cf2f4a3e73
- resolve ipv4 and ipv6 addresses of logical interface names and add them to the interfaces line
- make charset uci-configurable and default to UTF-8
- cleanup init script, annotate uci configuration
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29505 3c298f89-4303-0410-b956-a3cf2f4a3e73
Changes compared to 1.0 are:
* autotools refactoring
* fix blocked state in request if connect() or recv() failed. Add timeout feature which abort pending request (connect(), send(), recv()) after XX seconds.
* add new ./configure options:
* --enable-debug
* --enable-log-debug
* --enable-log-color
* fix segfault case if user remove account cfg and SIGHUP yaddns when doing update procedure for the removed account.
* fix buffer overread in base64_encode function
* implement unit tests
* add -L, --use-syslog option
Signed-off-by: Anthony Viallard <avd@patatrac.info
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29362 3c298f89-4303-0410-b956-a3cf2f4a3e73
important fixes in changelog of 1.0.10 nginx from the current 1.0.8 in
trunk:
http://nginx.org/en/CHANGES-1.0
Signed-off-by: Daniel Petre <dani@ip6.ro>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29361 3c298f89-4303-0410-b956-a3cf2f4a3e73
Samba3 patch is updated again so it applies after the new serive function
update (#29075).
I just tested it on my router and everything (still) seems to work.
So please commit it.
Through all versions these things are added to the original package in the
repositories:
* Updates samba3 package to version 3.0.37
* Splits nmbd and mountcifs into separate packages
* Added settings to remove printing support and to make smbd even smaller
* Removed LDAP, Kerebos and AD support
* Added iconv support
Signed-off-by: Maarten Bezemer <m.m.bezemer@utwente.nl>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29343 3c298f89-4303-0410-b956-a3cf2f4a3e73
