OPNSense/core 9a1adab. plist, src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/Api ExportController.php

src: style sweep
DeltaFile
+1-2src/opnsense/mvc/app/library/OPNsense/Trust/Store.php
+1-1src/opnsense/mvc/app/library/OPNsense/OpenVPN/ViscosityVisz.php
+0-1src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/Api/ExportController.php
+1-0plist
+3-44 files

OPNSense/core 3a6c79dsrc/opnsense/mvc/app/controllers/OPNsense/OpenVPN/Api ExportController.php, src/opnsense/mvc/app/library/OPNsense/OpenVPN BaseExporter.php TheGreenBow.php

MVC/Trust - Implement new Trust class usage for the following components:

o OpenVPN Client Export
o Captive portal
o Syslog-NG
DeltaFile
+16-36src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/Api/ExportController.php
+12-33src/opnsense/scripts/OPNsense/CaptivePortal/generate_certs.php
+13-2src/opnsense/mvc/app/library/OPNsense/OpenVPN/BaseExporter.php
+6-9src/opnsense/scripts/syslog/generate_certs
+4-6src/opnsense/mvc/app/library/OPNsense/OpenVPN/TheGreenBow.php
+3-3src/opnsense/mvc/app/library/OPNsense/OpenVPN/ViscosityVisz.php
+54-892 files not shown
+58-958 files

OPNSense/core ca6cc70src/etc/inc/plugins.inc.d openvpn.inc, src/etc/inc/plugins.inc.d/openvpn auth-user.php

VPN:OpenVPN: Servers - deferred authentication, work in progress for https://github.com/opnsense/core/issues/6293

This initial commit focusses on structuring the event flow around user and client registration, moving events to our new ovpn_event.py handler.
By supporting both deferred and direct authentication in user_pass_verify.php, we should be able to start with a cleanup patch for OpenVPN 2.5.x and work our way up to
a smaller fix for 2.6.x.

In preperation for 2.6, this commit also moves --cipher to --data-ciphers-fallback as suggested by the warning "DEPRECATED OPTION: --cipher set to '' but missing in --data-ciphers". Rename the option in the gui while there and add a note in the help text.

(cherry picked from commit 1e28d5b352e3aeb9a4e94720595e5e82bf83503b)
(cherry picked from commit e7007a42a2153dbee03dc12c384e09e092a61c34)
(cherry picked from commit 675c1b8fda9aaa5adda608ab7d7973aaccb58a0b)
(cherry picked from commit 02a05a4d4cc1e3e7467180bfe0e0f945fc1ac221)
(cherry picked from commit f8a9e5b990add401b482b7c1642482a4ab02bef2)
(cherry picked from commit 89da198d62e00e2319d657211cb1b8c0309ddae1)
(cherry picked from commit 53fefd47a31afe4ecaea8bc24b65d967cfbcb527)
(cherry picked from commit 08fb2ea495c3c54eb39d50550639a4cbec41e8e1)
(cherry picked from commit a9ecea3dcd4aa7abfc964d9c3ebb957a9a086762)
DeltaFile
+182-0src/opnsense/scripts/openvpn/user_pass_verify.php
+0-162src/etc/inc/plugins.inc.d/openvpn/auth-user.php
+99-0src/opnsense/scripts/openvpn/ovpn_event.py
+30-45src/etc/inc/plugins.inc.d/openvpn.inc
+69-0src/opnsense/scripts/openvpn/tls_verify.php
+64-0src/opnsense/scripts/openvpn/client_connect.php
+444-20713 files not shown
+478-36719 files

OPNSense/core d989226src/etc/inc/plugins.inc.d openvpn.inc, src/opnsense/scripts/auth list_group_members.php

Merge branch 'master' into unbound_blocklists
DeltaFile
+453-189src/opnsense/service/templates/OPNsense/Unbound/core/dnsbl_module.py
+20-208src/etc/inc/plugins.inc.d/openvpn.inc
+138-0src/opnsense/scripts/openvpn/ovpn_status.py
+53-79src/www/status_openvpn.php
+36-52src/www/widgets/widgets/openvpn.widget.php
+58-0src/opnsense/scripts/auth/list_group_members.php
+758-52819 files not shown
+849-56825 files

OPNSense/core b1708bcsrc/etc rc.newwanip, src/etc/inc system.inc interfaces.inc

Merge branch 'master' into unbound_wildcards
DeltaFile
+54-0src/www/services_dnsmasq.php
+21-9src/etc/inc/system.inc
+17-10src/etc/rc.newwanip
+16-8src/opnsense/scripts/unbound/logger.py
+18-3src/etc/inc/plugins.inc.d/dnsmasq.inc
+5-3src/etc/inc/interfaces.inc
+131-3315 files not shown
+157-5821 files

OPNSense/core e7007a4src/opnsense/mvc/app/library/OPNsense/OpenVPN ArchiveOpenVPN.php ViscosityVisz.php

VPN/OpenVPN/Client Export - fix openssl_pkcs12_export(): Passing null to parameter #4 ($passphrase) of type string is deprecated
DeltaFile
+2-2src/opnsense/mvc/app/library/OPNsense/OpenVPN/ArchiveOpenVPN.php
+2-2src/opnsense/mvc/app/library/OPNsense/OpenVPN/ViscosityVisz.php
+4-42 files

OPNSense/core 3e6aa39src/etc/inc/plugins.inc.d openvpn.inc, src/opnsense/mvc/app/library/OPNsense/OpenVPN PlainOpenVPN.php TheGreenBow.php

openvpn: tls-crypt support

Squashed commit of the following:

commit 83171f8b1791aae87fc4dacedb6cc921101d8399
Author: Ad Schellevis <ad at opnsense.org>
Date:   Fri Aug 13 21:44:49 2021 +0200

    whitespace

commit 11990f462eaed9bc9cf2051a377d508a916a3945
Author: Ad Schellevis <ad at opnsense.org>
Date:   Fri Aug 13 21:40:24 2021 +0200

    OpenVPN - cleanups for https://github.com/opnsense/core/pull/4592

    simplify flush tls keys.

commit 74db015f0c9963b53b1d3ea8923e1d89899d04a3

    [32 lines not shown]
DeltaFile
+41-41src/www/vpn_openvpn_server.php
+33-26src/www/vpn_openvpn_client.php
+10-4src/opnsense/mvc/app/library/OPNsense/OpenVPN/PlainOpenVPN.php
+9-2src/opnsense/mvc/app/library/OPNsense/OpenVPN/TheGreenBow.php
+3-4src/etc/inc/plugins.inc.d/openvpn.inc
+5-1src/opnsense/mvc/app/library/OPNsense/OpenVPN/ArchiveOpenVPN.php
+101-784 files not shown
+111-8010 files

OPNSense/core 58186f8src/etc/inc/plugins.inc.d openvpn.inc, src/opnsense/mvc/app/library/OPNsense/OpenVPN PlainOpenVPN.php TheGreenBow.php

Squashed commit of the following:

commit 83171f8b1791aae87fc4dacedb6cc921101d8399
Author: Ad Schellevis <ad at opnsense.org>
Date:   Fri Aug 13 21:44:49 2021 +0200

    whitespace

commit 11990f462eaed9bc9cf2051a377d508a916a3945
Author: Ad Schellevis <ad at opnsense.org>
Date:   Fri Aug 13 21:40:24 2021 +0200

    OpenVPN - cleanups for https://github.com/opnsense/core/pull/4592

    simplify flush tls keys.

commit 74db015f0c9963b53b1d3ea8923e1d89899d04a3
Author: Ad Schellevis <ad at opnsense.org>
Date:   Fri Aug 13 21:39:28 2021 +0200

    [28 lines not shown]
DeltaFile
+41-41src/www/vpn_openvpn_server.php
+33-26src/www/vpn_openvpn_client.php
+10-4src/opnsense/mvc/app/library/OPNsense/OpenVPN/PlainOpenVPN.php
+9-2src/opnsense/mvc/app/library/OPNsense/OpenVPN/TheGreenBow.php
+3-4src/etc/inc/plugins.inc.d/openvpn.inc
+5-1src/opnsense/mvc/app/library/OPNsense/OpenVPN/ArchiveOpenVPN.php
+101-784 files not shown
+111-8010 files

OPNSense/core 4e494c5src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/Api ExportController.php, src/opnsense/mvc/app/library/OPNsense/OpenVPN TheGreenBow.php ArchiveOpenVPN.php

OpenVPN  export: offer the ability to export a user without a certificate and increase consistency between export types.
DeltaFile
+11-9src/opnsense/mvc/app/library/OPNsense/OpenVPN/TheGreenBow.php
+11-9src/opnsense/mvc/app/library/OPNsense/OpenVPN/ArchiveOpenVPN.php
+11-9src/opnsense/mvc/app/library/OPNsense/OpenVPN/ViscosityVisz.php
+6-1src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/Api/ExportController.php
+2-1src/opnsense/mvc/app/library/OPNsense/OpenVPN/PlainOpenVPN.php
+41-295 files

OPNSense/core 2ba6da4src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/Api ExportController.php, src/opnsense/mvc/app/library/OPNsense/OpenVPN TheGreenBow.php ArchiveOpenVPN.php

OpenVPN  export: offer the ability to export a user without a certificate and increase consistency between export types.
DeltaFile
+11-9src/opnsense/mvc/app/library/OPNsense/OpenVPN/TheGreenBow.php
+11-9src/opnsense/mvc/app/library/OPNsense/OpenVPN/ArchiveOpenVPN.php
+11-9src/opnsense/mvc/app/library/OPNsense/OpenVPN/ViscosityVisz.php
+6-1src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/Api/ExportController.php
+2-1src/opnsense/mvc/app/library/OPNsense/OpenVPN/PlainOpenVPN.php
+41-295 files

OPNSense/core 649f5e3src/etc/inc/plugins.inc.d openvpn.inc, src/opnsense/mvc/app/library/OPNsense/OpenVPN PlainOpenVPN.php TheGreenBow.php

OpenVPN: Enhance configuration - TLS-Crypt

Ensure backwards compatibility
DeltaFile
+23-23src/www/vpn_openvpn_server.php
+22-22src/www/vpn_openvpn_client.php
+6-6src/etc/inc/plugins.inc.d/openvpn.inc
+4-4src/opnsense/mvc/app/library/OPNsense/OpenVPN/PlainOpenVPN.php
+3-3src/opnsense/mvc/app/library/OPNsense/OpenVPN/TheGreenBow.php
+3-3src/opnsense/mvc/app/library/OPNsense/OpenVPN/ViscosityVisz.php
+61-613 files not shown
+67-679 files

OPNSense/core 25a1c6esrc/etc/inc/plugins.inc.d openvpn.inc, src/opnsense/mvc/app/library/OPNsense/OpenVPN PlainOpenVPN.php TheGreenBow.php

OpenVPN: Enhance configuration - TLS-Crypt

Make available both --tls-auth and --tls-crypt configuration options
DeltaFile
+58-41src/www/vpn_openvpn_server.php
+46-30src/www/vpn_openvpn_client.php
+12-6src/etc/inc/plugins.inc.d/openvpn.inc
+11-5src/opnsense/mvc/app/library/OPNsense/OpenVPN/PlainOpenVPN.php
+11-4src/opnsense/mvc/app/library/OPNsense/OpenVPN/TheGreenBow.php
+7-3src/opnsense/mvc/app/library/OPNsense/OpenVPN/ArchiveOpenVPN.php
+145-894 files not shown
+158-9410 files

OPNSense/core 4302777src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api SystemhealthController.php, src/opnsense/mvc/app/controllers/OPNsense/IDS/Api SettingsController.php

mvc: PSR12 style updates
DeltaFile
+38-33src/opnsense/mvc/app/library/OPNsense/Auth/Radius.php
+35-21src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api/SystemhealthController.php
+34-18src/opnsense/mvc/app/models/OPNsense/Monit/Monit.php
+26-24src/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php
+19-19src/opnsense/mvc/app/models/OPNsense/Base/Menu/MenuSystem.php
+19-18src/opnsense/mvc/app/controllers/OPNsense/IDS/Api/SettingsController.php
+171-133144 files not shown
+742-458150 files

OPNSense/core dc3ef63src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api SystemhealthController.php, src/opnsense/mvc/app/controllers/OPNsense/IDS/Api SettingsController.php

mvc: PSR12 for better or worse ;)
DeltaFile
+38-33src/opnsense/mvc/app/library/OPNsense/Auth/Radius.php
+35-21src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api/SystemhealthController.php
+34-18src/opnsense/mvc/app/models/OPNsense/Monit/Monit.php
+26-24src/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php
+19-19src/opnsense/mvc/app/models/OPNsense/Base/Menu/MenuSystem.php
+19-18src/opnsense/mvc/app/controllers/OPNsense/IDS/Api/SettingsController.php
+171-133147 files not shown
+746-464153 files

OPNSense/core 5dc345bsrc/opnsense/mvc/app/controllers/OPNsense/Syslog/Api ServiceController.php, src/opnsense/mvc/app/library/OPNsense/Auth/Services Squid.php

src: style and whitespace sweep
DeltaFile
+25-24src/opnsense/mvc/app/controllers/OPNsense/Syslog/Api/ServiceController.php
+24-24src/opnsense/mvc/app/models/OPNsense/Syslog/Syslog.php
+1-1src/opnsense/mvc/app/library/OPNsense/OpenVPN/ViscosityVisz.php
+1-1src/opnsense/mvc/app/library/OPNsense/Auth/Services/Squid.php
+51-504 files

OPNSense/core 23d996csrc/opnsense/mvc/app/controllers/OPNsense/OpenVPN/forms export_options.xml, src/opnsense/mvc/app/library/OPNsense/OpenVPN ArchiveOpenVPN.php ViscosityVisz.php

OpenVPN export, support cryptoapicert to load certificates from the windows certificate system store, for https://github.com/opnsense/core/issues/3500

(cherry picked from commit 8bb3f1f38c420141d84733a23c3595ec4d0da3bc)
(cherry picked from commit 7a143c85576af840a74386c4b79d723aedb7b00a)
DeltaFile
+19-9src/opnsense/mvc/app/library/OPNsense/OpenVPN/ArchiveOpenVPN.php
+18-9src/opnsense/mvc/app/library/OPNsense/OpenVPN/ViscosityVisz.php
+14-0src/opnsense/mvc/app/views/OPNsense/OpenVPN/export.volt
+9-0src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/forms/export_options.xml
+5-3src/opnsense/mvc/app/library/OPNsense/OpenVPN/PlainOpenVPN.php
+4-0src/opnsense/mvc/app/models/OPNsense/OpenVPN/Export.xml
+69-216 files

OPNSense/core 8bb3f1fsrc/opnsense/mvc/app/controllers/OPNsense/OpenVPN/forms export_options.xml, src/opnsense/mvc/app/library/OPNsense/OpenVPN ArchiveOpenVPN.php ViscosityVisz.php

OpenVPN export, support cryptoapicert to load certificates from the windows certificate system store, for https://github.com/opnsense/core/issues/3500
DeltaFile
+19-9src/opnsense/mvc/app/library/OPNsense/OpenVPN/ArchiveOpenVPN.php
+18-9src/opnsense/mvc/app/library/OPNsense/OpenVPN/ViscosityVisz.php
+9-0src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/forms/export_options.xml
+5-3src/opnsense/mvc/app/library/OPNsense/OpenVPN/PlainOpenVPN.php
+4-0src/opnsense/mvc/app/models/OPNsense/OpenVPN/Export.xml
+55-215 files

OPNSense/core 74c7750src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/forms export_options.xml, src/opnsense/mvc/app/library/OPNsense/OpenVPN PlainOpenVPN.php ViscosityVisz.php

OpenVPN export, add auth-nocache option, closes https://github.com/opnsense/core/issues/3193

(cherry picked from commit cc2b41bf153c8f3a1fa5687834dfdb713078096b)
DeltaFile
+10-0src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/forms/export_options.xml
+4-1src/opnsense/mvc/app/library/OPNsense/OpenVPN/PlainOpenVPN.php
+4-0src/opnsense/mvc/app/models/OPNsense/OpenVPN/Export.xml
+1-1src/opnsense/mvc/app/library/OPNsense/OpenVPN/ViscosityVisz.php
+1-1src/opnsense/mvc/app/library/OPNsense/OpenVPN/ArchiveOpenVPN.php
+20-35 files

OPNSense/core cc2b41bsrc/opnsense/mvc/app/controllers/OPNsense/OpenVPN/forms export_options.xml, src/opnsense/mvc/app/library/OPNsense/OpenVPN PlainOpenVPN.php ArchiveOpenVPN.php

OpenVPN export, add auth-nocache option, closes https://github.com/opnsense/core/issues/3193
DeltaFile
+10-0src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/forms/export_options.xml
+4-1src/opnsense/mvc/app/library/OPNsense/OpenVPN/PlainOpenVPN.php
+4-0src/opnsense/mvc/app/models/OPNsense/OpenVPN/Export.xml
+1-1src/opnsense/mvc/app/library/OPNsense/OpenVPN/ArchiveOpenVPN.php
+1-1src/opnsense/mvc/app/library/OPNsense/OpenVPN/ViscosityVisz.php
+20-35 files

OPNSense/core 2c61e06src/etc/inc IPv6.inc filter.lib.inc, src/etc/inc/plugins.inc.d/openvpn wizard.inc

Small fixes (#3096)

DeltaFile
+14-8src/opnsense/mvc/app/library/OPNsense/Auth/Radius.php
+4-4src/opnsense/scripts/firmware/check.sh
+4-2src/etc/inc/plugins.inc.d/openvpn/wizard.inc
+3-3src/opnsense/mvc/app/library/OPNsense/Core/Shell.php
+3-3src/etc/inc/IPv6.inc
+3-2src/etc/inc/filter.lib.inc
+31-2221 files not shown
+59-4627 files

OPNSense/core 7fa9207src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/Api ExportController.php, src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/forms export_options.xml

OpenVPN export (https://github.com/opnsense/core/issues/2787)

- change server cn validation to server subject
- move "use random port" to custom option
- tgb format issue with SHA1
DeltaFile
+10-2src/opnsense/mvc/app/library/OPNsense/OpenVPN/TheGreenBow.php
+3-3src/opnsense/mvc/app/library/OPNsense/OpenVPN/PlainOpenVPN.php
+3-2src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/forms/export_options.xml
+1-1src/opnsense/mvc/app/library/OPNsense/OpenVPN/ArchiveOpenVPN.php
+2-0src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/Api/ExportController.php
+1-1src/opnsense/mvc/app/library/OPNsense/OpenVPN/ViscosityVisz.php
+20-91 files not shown
+21-97 files

OPNSense/core c137352src/opnsense/mvc/app/library/OPNsense/OpenVPN ViscosityVisz.php

OpenVPN export, add Viscosity format for https://github.com/opnsense/core/issues/2787

The old visc format will be removed, as visz is supported on all platforms
DeltaFile
+139-0src/opnsense/mvc/app/library/OPNsense/OpenVPN/ViscosityVisz.php
+139-01 files