summaryrefslogtreecommitdiff
path: root/package
Commit message (Collapse)AuthorAgeFilesLines
* gre: add different per-protocol prefixes to GRE-TAP IPv4/6 tunnel interfaces.Roger Pueyo Centelles2017-01-032-7/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit modifies the /lib/netifd/proto/gre.sh script so that, when GRE-TAP tunnels are created, either IPv4 or IPv6, the prefix before the chosen interface name contains the "tap" substring, to differentiate them from non-TAP GRE tunnels. Right now, both GRE and GRE-TAP tunnel (either IPv4 or IPv6) interfaces defined in /etc/config/network are named equally ("gre-"+$ifname or "grev6"+$ifname) upon creation. For instance, the following tunnels: config interface 'tuna' option peeraddr '172.30.22.1' option proto 'gre' config interface 'tunb' option peeraddr '192.168.233.4' option proto 'gretap' config interface 'tunc' option peer6addr 'fdc5:7c9e:e93d:45af::1' option proto 'grev6' config interface 'tund' option peer6addr 'fdc0:6071:1348:31ff::2' option proto 'grev6tap' are named, respectively, "gre-tuna", "gre-tunb", "grev6-tunc" and "grev6-tund". The current change makes that each GRE tunnel interface of the four different types available (gre, gretap, grev6 and grev6tap) gets a different prefix. Therefore, the abovementioned tunnels will be named, respectively: "gre4-tuna", "gre4t-tunb", "gre6-tunc" and "gre6t-tund". This is coherent with other types of virtual interfaces (i.e. PPP, PPPoE, PPPoA) where the whole protocol name is used. For instance, a PPPoA interface named "p1" and a PPPoE interface named "p2" will respectively appear as "pppoa-p1" and "pppoe-p2", not as "ppp-p1" and "ppp-p2"). Since Linux interfaces names are limited to 15 characters, these prefixes leave, for the worst case (TAP tunnels), 9 characters for the actual name. Signed-off-by: Roger Pueyo Centelles <roger.pueyo@guifi.net>
* elfutils: bump to 0.168Luiz Angelo Daros de Luca2017-01-036-218/+183
| | | | | | | | | | | Other changes: - Project moved to sourceware.org - musl patch where cleaned up and submitted upstream - TEMP_FAILURE_RETRY macro fixed and submitted upstream Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com> [Jo-Philipp Wich: add missing .patch extension to 007-fix_TEMP_FAILURE_RETRY] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* curl: Remove PolarSSL and adjust default to mbedTLSRosen Penev2017-01-034-30/+14
| | | | | | | luci-ssl has already made the switch since mainline support for PolarSSL is almost over (2016). Signed-off-by: Rosen Penev <rosenp@gmail.com>
* gmp: Update to 6.1.2Daniel Engberg2017-01-031-2/+2
| | | | | | Update GMP to 6.1.2 Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* zlib: Update to 1.2.9Daniel Engberg2017-01-031-3/+3
| | | | | | Update zlib to 1.2.9 and switch to XZ tarballs for download. Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* libusb: Update to 1.0.21Daniel Engberg2017-01-031-2/+2
| | | | | | Update libusb to 1.0.21 Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* rpcd: Update to 2016-12-03Florian Fainelli2017-01-021-3/+3
| | | | | | | | | | Brings in the following changes: 0577cfc1acdb cmake: Find libubox/blobmsg_json.h 26c98ec94d7a sys: Check return values of chdir and write f4089654a399 cmake: Find libubus.h Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
* fstools: Update to 2016-12-04Florian Fainelli2017-01-021-3/+3
| | | | | | | Brings in the following changes: 84b530a732b1 libfstools: Check return values for fread and system Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
* uclient: Update to 2016-12-09Florian Fainelli2017-01-021-3/+3
| | | | | | | | | | Brings in the following changes: 52d955fd802a remove obsolete mac os x /opt/local include/library search path a4e49b4163b2 Fix unused results warnings 48cfff3fbec9 uclient-http: send correct "Host:" header if port is set Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
* uboot-lantiq: fix boot of images larger than 8MBMathias Kresin2017-01-0212-12/+36
| | | | | | | | Increasing CONFIG_SYS_BOOTM_LEN from 8 MB to 16 MB is necessary to support uncompressing images larger than 8 MB when using the bootm command. Signed-off-by: Mathias Kresin <dev@kresin.me>
* uboot-lantiq: fix build with gcc6Mathias Kresin2017-01-022-87/+852
| | | | | | | Backport u-boot commit 9b2c282b348dfe966bbba967dc7a45ce817cce50 to fix compile with gcc5 and gcc6. Signed-off-by: Mathias Kresin <dev@kresin.me>
* mac80211: Allow HT/VHT rates when running unencrypted mesh.Alexis Green2017-01-021-1/+36
| | | | Signed-off-by: Alexis Green <agreen@cococorp.com>
* base-files: fix message of initscript wrapperAlberto Bursi2017-01-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | currently (after blogic's edit to my commit) it prints like this: root@lede:/# service aa aa does not exist. the following services are available :adblock dnsmasq gpio_switch rpcd system boot done led sqm uhttpd crelay dropbear log sysctl umount cron firewall network sysfixtime urandom_seed ddns fstab odhcpd sysntpd which looks pretty bad, and is even worse if someone writes only "service" without arguments, as it will print " does not exist. " which is confusing. with this commit it looks like this: root@lede:/# service service "" not found, the following services are available: adblock dnsmasq gpio_switch rpcd system boot done led sqm uhttpd crelay dropbear log sysctl umount cron firewall network sysfixtime urandom_seed ddns fstab odhcpd sysntpd Yes there is some play with " and ', it is to display "name" or just "" if no service name is entered (like in the example). Signed-off-by: Alberto Bursi <alberto.bursi@outlook.it>
* generic: package Broadcom BNX2 driverGeorge Amanakis2017-01-022-0/+25
| | | | | | | bnx2 driver support for the x86 architecture. Includes module and firmware for Broadcom BCM5706/5708/5709/5716 ethernet adapters. Signed-off-by: George Amanakis <g_amanakis@yahoo.com>
* curl: update to version 7.52.1Hauke Mehrtens2017-01-022-4/+4
| | | | | | | | | | | This fixes the folowing security problems: CVE-2016-9586: printf floating point buffer overflow CVE-2016-9952: Win CE schannel cert wildcard matches too much CVE-2016-9953: Win CE schannel cert name out of buffer read CVE-2016-9594: unititialized random Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* ustream-ssl: remove extra DEFAULT_VARIANT from libustream-polarsslHannu Nyman2016-12-301-2/+1
| | | | | | | | | Currently both libustream-polarssl and libustream-mbedtls variants define themselves as the DEFAULT_VARIANT Remove extra DEFAULT_VARIANT from libustream-polarssl. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* openvpn: update to 2.4.0Magnus Kroken2016-12-301-2/+2
| | | | Signed-off-by: Magnus Kroken <mkroken@gmail.com>
* mbedtls: enable DHE-RSA key exchangeMagnus Kroken2016-12-301-9/+0
| | | | | | | | | | | | Later OpenVPN 2.3-openssl versions only enable TLS cipher suites with perfect forward secrecy, i.e. DHE and ECDHE cipher suites. ECDHE key exchange is not supported by OpenVPN 2.3-openssl, enable DHE key exchange to allow LEDE OpenVPN 2.4-mbedtls clients to connect to such servers. Signed-off-by: Magnus Kroken <mkroken@gmail.com> Reported-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com> Reported-by: Lucian Cristian <luci@createc.ro>
* mbedtls: enable secp384r1 elliptic curve supportMagnus Kroken2016-12-301-2/+1
| | | | | | | | | Secp384r1 is the default curve for OpenVPN 2.4+. Enable this to make OpenVPN-mbedtls clients able to perform ECDHE key exchange with remote OpenVPN 2.4-openssl servers that use the default OpenVPN curve. Signed-off-by: Magnus Kroken <mkroken@gmail.com>
* mbedtls: enable support for external private RSA keys to fix openvpn build issueFelix Fietkau2016-12-281-9/+0
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ath9k: fix issues with external reset on AR913xFelix Fietkau2016-12-274-9/+10
| | | | | | | | An external reset patch for AR955x accidentally led to external reset being issued twice on AR913x, once before the RTC reset and once after. This may be causing some stability issues. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* relayd: fix expiry time handlingFelix Fietkau2016-12-271-1/+1
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* relayd: fix reload / interface restart issuesFelix Fietkau2016-12-273-4/+2
| | | | | | | - replace the hotplug script with an interface trigger - add netdev params to procd to trigger restart Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ath5k: drop bogus warning on drv_set_key with unsupported cipher (FS#334)Felix Fietkau2016-12-271-0/+23
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ath9k: remove old rx dma stop check optimizationFelix Fietkau2016-12-271-28/+0
| | | | | | | | | | This commit was added to improve reset time on old SoC devices that run into chip hangs more frequently. However with the more recent addition of full WMAC reset on these chips, it could be problematic. Drop this patch to ensure that DMA activity is really stopped before the chip reset is issued Signed-off-by: Felix Fietkau <nbd@nbd.name>
* odhcpd: bump to git HEADStijn Tintel2016-12-271-3/+3
| | | | | | | 8dc2a59 Revert "Respect interface "ignore" settings as documented." 93ab25b router: skip parse_routes when ra_default > 1 Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* opkg: vfork external gzip command to uncompress dataJo-Philipp Wich2016-12-274-23/+746
| | | | | | | | | | | | | | | | | | Opkg's builtin decompression code is unsuitable to process nested archives as it uses a single shared state and relies on undefined seek behaviour for pipes. Rework the extraction logic to use the external gzip command as I/O filter for decompressing data and remove the builtin inflate code entirely. This shrinks the final opkg binary by about 4KB and results in less runtime memory consumption due to efficient use of vfork() and less copy-on-write operations in the forked child. Rework by Felix: create a thread that relays data to the gzip process instead of using a fragile poll loop Signed-off-by: Jo-Philipp Wich <jo@mein.io> Signed-off-by: Felix Fietkau <nbd@nbd.name>
* Revert "opkg: vfork external gzip command to uncompress data"Stijn Tintel2016-12-274-746/+23
| | | | | | This reverts commit 0090adcd5c94adad2168cd9b338f45827533c81d. It breaks reading package list in /tmp/opkg-lists, making it impossible to install packages from feeds in snapshots.
* odhcpd: Use procd_send_signal in reload_serviceHans Dedecker2016-12-261-1/+1
| | | | | | | Replace killall HUP by procd_send_signal in reload_service to trigger an odhcpd config reload Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* opkg: add missing dependency on libpthreadFelix Fietkau2016-12-261-1/+1
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mwlwifi: Update to latest sourceGabe Rodriguez2016-12-261-3/+3
| | | | | | | | -MAC register revisions for 8864 firmware Tested on WRT1900ACv1 (mvebu). No regressions Signed-off-by: Gabe Rodriguez <lifehacksback@gmail.com>
* package/Makefile & ipkg-make-index.sh: add full package data listAlberto Bursi2016-12-261-1/+2
| | | | | | | | | | | | | | | | | | | The external script used to generate the package lists for the LEDE wiki's table of packages [1] and package indexes [2] requires a "Source:" field in the package lists to find package makefiles. The package makefiles are used to read the package's Category and Submenu. The "Source:" field was removed in commit b4aa3c899cbf1f81cd8a1ea197481ac84a9d646e to reduce package list sizes and lessen opkg issues in low ram devices. Add a separate package list file with full data to be used by the wiki's script. It's called Packages.manifest and isn't compressed as it's not necessary. 1. https://lede-project.org/packages/start 2. https://lede-project.org/packages/index/start Signed-off-by: Alberto Bursi <alberto.bursi@outlook.it>
* opkg: vfork external gzip command to uncompress dataJo-Philipp Wich2016-12-264-23/+746
| | | | | | | | | | | | | | | | | | Opkg's builtin decompression code is unsuitable to process nested archives as it uses a single shared state and relies on undefined seek behaviour for pipes. Rework the extraction logic to use the external gzip command as I/O filter for decompressing data and remove the builtin inflate code entirely. This shrinks the final opkg binary by about 4KB and results in less runtime memory consumption due to efficient use of vfork() and less copy-on-write operations in the forked child. Rework by Felix: create a thread that relays data to the gzip process instead of using a fragile poll loop Signed-off-by: Jo-Philipp Wich <jo@mein.io> Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: split kmod-lib-zlib into two packages to keep it in sync with kernel ↵Felix Fietkau2016-12-263-13/+21
| | | | | | | | dependencies Fixes build error on default config + selecting kmod-fs-isofs Signed-off-by: Felix Fietkau <nbd@nbd.name>
* netifd: Upstep to git HEAD versionHans Dedecker2016-12-251-3/+3
| | | | | | | | | 64a655d proto: allow configuring deprecated static IPv6 addresses c99182e remove obsolete /opt/local prefix on Mac OS X 0249d5f system-linux: Don't set gre tunnel ttl by default to 64 (#FS312) edc15ca ubus: Display the IPv6 prefix assigned address Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* gre: Remove ttl default value assignment (FS#312)Hans Dedecker2016-12-252-2/+2
| | | | | | | Don't assign a default ttl of 64 for gre tunnels as netifd takes care of the default ttl assignment Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* ltq-vmmc: mark VOICE_CPE_VMMC_PMC as brokenHauke Mehrtens2016-12-251-0/+1
| | | | | | | We do not have the needed platform support for VOICE_CPE_VMMC_PMC. The vmmc driver will not compile with this option activated. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kmod-sched-cake: do not build on kernel 3.18Hauke Mehrtens2016-12-251-1/+1
| | | | | | | kmod-sched-cake does not build on kernel 3.18, so add the dependency to not even try. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* brcmfmac: select 802.11ac supportFelix Fietkau2016-12-241-1/+1
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* libpcap: Fix build when PACKAGECONFIG ipv6 is not enabledZefir Kurtisi2016-12-242-0/+108
| | | | | | | | | | | | | | | | | | Add patches provided upstream [1] by Fabio Berton to fix error: > ./gencode.c: In function 'pcap_compile': > ./gencode.c:693:8: error: 'compiler_state_t {aka struct _compiler_state}' has no member named 'ai' > cstate.ai = NULL; > ^ > ./gencode.c: In function 'gen_gateway': > ./gencode.c:4914:13: error: 'cstate' undeclared (first use in this function) > bpf_error(cstate, "direction applied to 'gateway'"); > ^ [1] https://github.com/the-tcpdump-group/libpcap/pull/541 Signed-off-by: Fabio Berton <fabio.berton@ossystems.com.br> Tested-by: Zefir Kurtisi <zefir.kurtisi@neratec.com>
* orion: enable SoC drivers in the kernel configFelix Fietkau2016-12-243-78/+0
| | | | | | Clean up packaged modules Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kirkwood: enable SoC drivers in the kernel configFelix Fietkau2016-12-243-22/+5
| | | | | | Clean up packaged modules Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kirkwood: convert iconnect, ib62x0 and pogoplug_e02 to the new image build codeFelix Fietkau2016-12-244-34/+39
| | | | | | | Update the correspoding u-boot configs to stop relying on kernel-in-rootfs, which was removed a while back Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: Add kmod-ethocFlorian Fainelli2016-12-241-0/+16
| | | | | | | Add the kernel module package for the Opencores.org Ethernet MAC, depends on PHYLIB. Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
* dnsmasq: add log facility optiondibdot2016-12-231-0/+1
| | | | | | add possibility to set the facility to which dnsmasq will send syslog entries, i.e. set it to '/dev/null' to mute dnsmasq output at all. Signed-off-by: Dirk Brenken dev@brenken.org
* ncurses: rename libncursesw to libncurses (more common name)Felix Fietkau2016-12-221-4/+4
| | | | | | provide libncursesw via PROVIDES instead Signed-off-by: Felix Fietkau <nbd@nbd.name>
* uhttpd: drop uhttpd-mod-tls, it has been useless for yearsFelix Fietkau2016-12-221-39/+0
| | | | | | | | | Before the rewrite, uhttpd-mod-tls used to contain a tls plugin. Afterwards it was left in for compatibility reasons, but given how much has changed, and that we're about to change the default SSL implementation again, it's better to just drop this now Signed-off-by: Felix Fietkau <nbd@nbd.name>
* treewide: clean up and unify PKG_VERSION for git based downloadsFelix Fietkau2016-12-2252-249/+130
| | | | | | Also use default defintions for PKG_SOURCE_SUBDIR, PKG_SOURCE Signed-off-by: Felix Fietkau <nbd@nbd.name>
* Revert "linux-firmware: Add mirrors"Felix Fietkau2016-12-221-3/+1
| | | | | | | | This reverts commit 0d4f02dfd650612aac6c11860139be03a0f54bee, which was obviously untested. git downloads cannot handle multiple URLs at the moment. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mwlwifi: Update to latest sourceGabe Rodriguez2016-12-221-3/+3
| | | | | | | | | | - Source updated to fix noise level, DTS - Added support for BB and RF Tested working on WRT1900ACv1 (mamba) kernel 4.4.38. No regressions found. Signed-off-by: Gabe Rodriguez <lifehacksback@gmail.com> Signed-off-by: Felix Fietkau <nbd@nbd.name> [fix mirror hash]