summaryrefslogtreecommitdiffhomepage
path: root/protocols
AgeCommit message (Collapse)Author
2023-03-29luci-proto-openconnect: relax key checkingJo-Philipp Wich
Valid keys may begin/end with `-----BEGIN PRIVATE KEY-----` and `-----END PRIVATE KEY-----` so make the `RSA` keyword optional. Fixes: #6319 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2023-03-16luci-proto-modemmanager: fix acl regex to support more then 9 modem objectsFlorian Eckert
If a modem is restarted often, the modem manager object number is increased by one. Currently, the regex is set so that the modem can no longer be selected if the object number is greater than 9. This change fixes that. Signed-off-by: Florian Eckert <fe@dev.tdt.de> [replace wildcard with rule duplication to disallow option injection] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2023-03-15Merge pull request #6288 from oskarirauta/luci-cni-protocolJo-Philipp Wich
luci-proto-cni: add package
2023-03-15luci-proto-cni: add packageOskari Rauta
adds support for cni-protocol in luci Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-03-14luci-proto-wireguard: use ddns lookup_host for peer hintsJo-Philipp Wich
The `domain` option of a DDNS service entry may contain non-hostname values, use the `lookup_hostname` option instead. Fixes: #6289 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2023-02-08luci-proto-openconnect: fix server url validationJo-Philipp Wich
The OpenConnect configuration form incorrectly assumed that the server setting must be hostname while it actually may be a full URL. Fixes: #6184 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2023-02-08Revert "luci-proto-openconnect: fix server url validation"Jo-Philipp Wich
This reverts commit f1312cadc6675fb29d02425775dd8a2a533d7e7c. The commit contained unrelated changes. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2023-02-07luci-proto-openconnect: fix server url validationJo-Philipp Wich
The OpenConnect configuration form incorrectly assumed that the server setting must be hostname while it actually may be a full URL. Fixes: #6184 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-12-19luci-proto-autoip: fix protocol nameJo-Philipp Wich
Fixes: 2965e527f5 ("luci-proto-autoip: add protocol support for avahi-autoipd") Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-12-19luci-proto-autoip: add protocol support for avahi-autoipdJo-Philipp Wich
Fixes: #6162 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-12-05luci-proto-wireguard: fix configuration importJo-Philipp Wich
Avoid referencing not existing `peerdns` option during the configuration file import process. Fixes: #6136 Fixes: 2be01cbfcb ("luci-mod-network: restrict peerdns option to protocols that implemenent it") Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-11-23luci-proto-wireguard: fix loading peer descriptionsJo-Philipp Wich
Explicitly load `network` uci in wireguard rpcd backend as `ctx.foreach()` does not implicitly load it. Also remove leftover test setup information from the status page source. Fixes: #6095 Fixes: 008fa18878 ("luci-proto-wireguard: rewrite rpcd handler in ucode") Fixes: 6e6fce3eb4 ("luci-proto-wireguard: merge status page functionality") Ref: https://github.com/jow-/ucode/pull/126 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-11-22luci-proto-wireguard: merge status page functionalityJo-Philipp Wich
Merge status page functionality from the separate `luci-app-wireguard` package into the `luci-proto-wirguard` protocol backend. Also rewrite the status page markup to be more compact while we're at it. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-11-09luci-proto-wireguard: fix generated AllowedIPsJulien Cassette
This corrects the option `AllowedIPs` in generated peer configurations, and allows to customize it via a dropdown list. Fixes: #5956 Signed-off-by: Julien Cassette <julien.cassette@gmail.com> [correct fixes tag, slightly adjust option description] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-10-25treewide: add explicit Lua runtime dependencies where neededJo-Philipp Wich
Some packages require Lua libraries but do not ship with a luasrc directory, add explicit dependencies in these cases. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-10-25luci-proto-wireguard: rewrite rpcd handler in ucodeJo-Philipp Wich
Rewrite the wireguard rpcd plugin in ucode to prevent an implicit dependency on the LuCI Lua runtime. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-10-17Merge pull request #6023 from stangri/master-luci-proto-nebulaStan Grishin
luci-proto-nebula: add nebula protocol support
2022-10-14luci-proto-vti: add vti protocol supportJaymin Patel
Signed-off-by: Jaymin Patel <jem.patel@gmail.com>
2022-10-14luci-proto-nebula: add nebula protocol supportStan Grishin
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2022-09-14Merge pull request #5968 from db260179/masterFlorian Eckert
luci-proto-openconnect: Add options proxy server and reconnect timeout
2022-09-10luci-proto-openconnect: Add options proxy server and reconnect timeout supportDavid Bentham
Signed-off-by: David Bentham <db260179@gmail.com>
2022-09-06luci-proto-unet: initial supportHannu Nyman
Initial support for the new unetd VPN daemon. Currently this just enables seeing the VPN interface in the LuCI network overview, plus the keys used. No relevant config change possibilities, yet. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2022-08-11Merge pull request #5448 from clayface/masterFlorian Eckert
luci-proto-openfortivpn: cert/key PEM support, persistent option, SHA label fix
2022-08-10luci-proto-openfortivpn: Correct server certificate SHA labelMatthew Hagan
According to the documentation[1], the SHA256 hash is used for the trusted-cert option, not SHA1. [1] https://github.com/adrienverge/openfortivpn/blob/master/doc/openfortivpn.1.in Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2022-08-10luci-proto-openfortivpn: add persistent reconnect optionMatthew Hagan
Add ability to specify persistent reconnection interval. Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2022-08-10luci-proto-openfortivpn: add user, key, CA PEM supportMatthew Hagan
Add PEM inputs and file handling for user cert, key and CA cert. This handling is largely based upon that used in luci-proto-openconnect. Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2022-08-01luci-proto-wireguard: handle multiple peers in imported configurationJo-Philipp Wich
When importing a fully configuration, import all peer entries from it instead of non-deterministically merging all peer keys into one. When importing a remote configuration as peer, only use the setting from the peer section matching our local interface pubkey. Also relabel the `Import peer configuration` button to `Import configuration as peer` in order to be more explicit. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-07-28luci-proto-ncm: adds missing error messages, removes 'dialnumber' option, ↵Jalakas
changes 'delay' according to real behavior This commit: Adds missing error messages and harmonizes message texts with comgt-ncm script. [1] Removes option 'dialnumber' not used in comgt-ncm. [1][2] Fixes option 'delay' according to comgt-ncm script real behavior. (No default value, if parameter is set, then there's always sleep) [1] [1] https://github.com/openwrt/openwrt/blob/master/package/network/utils/comgt/files/ncm.sh [2] https://github.com/openwrt/openwrt/blob/master/package/network/utils/comgt/files/ncm.json Signed-off-by: Anari Jalakas <anari.jalakas@gmail.com>
2022-07-23luci-proto-wireguard: configuration import improvementsJo-Philipp Wich
- Reword texts in import dialogs for better clarity, use different descriptions for full import and peer import - Allow importing configurations without [Peer] section Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-07-23luci-proto-ncm: rename `service` option to `mode`Jo-Philipp Wich
Package luci-proto-ncm depends on comgt-ncm which uses an option called 'mode' to set the radiomode of the modem. There is no option 'service' in the comgt-ncm scripts. Suggested-by: breenstorm <49235337+breenstorm@users.noreply.github.com> [fix commit subject, add commit message, rebase onto master branch] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-06-21luci-proto-wireguard: gracefully deal with missing uci configsJo-Philipp Wich
The /etc/config/ddns in particular might not be present on the system, don't fail if it is absent. Fixes: #5838 Fixes: 9ba20645b0 ("luci-proto-wireguard: rewrite protocol handler") Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-06-20luci-proto-wireguard: grant uci read access to system and ddns configJo-Philipp Wich
The configuration export requires access to /e/c/system and /e/c/ddns for external hostname hints. Fixes: #5838 Fixes: 9ba20645b0 ("luci-proto-wireguard: rewrite protocol handler") Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-05-17luci-proto-wireguard: rewrite protocol handlerJo-Philipp Wich
This commit rewrites large chunks of the WireGuard protocol handler in order to simplify the process of importing and exporting configuration. The major changes are: 1) The wireguard interface configuration tab (General Settings) gained an import assistant which allows dragging or pasting a native WireGuard configuration file in order to import required settrings into uci 2) The peer configuration tab gained a similar import assistant which allows importing the settings for a WireGuard peer from an existing native WireGuard configuration file 3) The QR code export feature has been rewritten to make the resulting codes actually useful for importing into a WireGuard client application. Additionally the plaintext native WireGuard configuration is displayed to allow copy-pasting it for use on a Linux or OS X system Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-04-16Merge pull request #5698 from onemarcfifty/luci-ptoto-batadvFlorian Eckert
luci-proto-batman-adv: LuCI Support for the batman-adv protocol
2022-04-14luci-proto-batman-adv: add luci-proto-batman-advMarc Ahlgrim
This commit adds support for the batadv and the batadv_hardif protocols to LuCI Signed-off-by: Marc Ahlgrim <marc@onemarcfifty.com>
2022-04-14luci-proto-wireguard: adjust MTU range from 0-8940Florian Eckert
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-04-12luci-proto-wireguard: remove MTU limitFlorian Eckert
fixes #5737 Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-18luci-proto-wireguard: add generate psk buttonLukas Voegl
Signed-off-by: Lukas Voegl <lvoegl@tdt.de>
2022-01-22Merge pull request #5642 from hgl/xfrmFlorian Eckert
luci-proto-xfrm: add luci xfrm support
2022-01-19luci-proto-ipip: add nohostroute configurableMatthew Hagan
Add configurable to explicitly disable creation of route to the peer address. Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2022-01-19luci-proto-ipip: explicitly set df to optionalMatthew Hagan
Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2022-01-19luci-proto-xfrm: add xfrm proto supportGlen Huang
Signed-off-by: Glen Huang <heyhgl@gmail.com>
2021-12-02Merge pull request #5540 from jow-/wireguard-peer-gridsectionJo-Philipp Wich
Implement nested grid section support and use it for wireguard peer config
2021-11-30Merge pull request #5400 from systemcrash/wg_pubkeyFlorian Eckert
luci-proto-wireguard: display interface public key
2021-11-22luci-proto-wireguard: turn peer configuration into grid viewJo-Philipp Wich
Turn the list of configured peers into a grid section in order to improve the overview of the configuration form. Fixes: #5489 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-11-21luci-proto-wireguard: fix QR code generation markupJo-Philipp Wich
The custom code generation markup lacked a required CSS class. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-11-17luci-proto-wireguard: add option to disable peer-sectionRobert Walli
Submitted-by: Robert Walli <12079858+rwalli@users.noreply.github.com> Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-11-11luci-proto-wireguard: display interface public keyPaul Dee
Signed-off-by: Paul Dee <itsascambutmailmeanyway@gmail.com>
2021-10-08luci-proto-wireguard: fix potential shell injection vulnerabilitiesJo-Philipp Wich
The `luci.wireguard.generateQrCode` UBUS method allows injecting arbitrary shell code by not sanitizing the `privkey` and `allowed_ips` arguments before concatenating them into shell command expressions. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-10-07luci-proto-wireguard: fix markup not valid for XHTMLJo-Philipp Wich
Fixes: #5407 Fixes: 03d615f62c ("luci-proto-wireguard: add more options to qr code") Signed-off-by: Jo-Philipp Wich <jo@mein.io>
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-12 09:48:45 +0000