BSD Commit Log Search

LICENSE/README: sync

Use real names instead of user handles where possible.

net/freeradius: document and a tiny bit of linting

net/freeradius: restrict VLAN fallback to MAC authentication (#5759)

Co-authored-by: Claudio <claudio at guareschi.org>

net/freeradius: restore EAP-TTLS-GTC support and fix EAP-GTC against directories that do not expose passwords (#2421) (#5692)

* net/freeradius: make the EAP method inside the EAP-TTLS tunnel configurable (#2421)

The inner EAP method was hardcoded to md5, so EAP-TTLS-GTC could not be
used. Support was added in 1.9.9 as a "ttls-gtc" value of the outer
default_eap_type, which radiusd rejected with "No dictionary definition
for default EAP method 'ttls-gtc'"; 1.9.20 removed the option again and
left the template branch testing for it unreachable.

Add a separate default_eap_ttls_type field holding a real EAP method and
use it inside the ttls block, replacing the dead branch. Non-EAP inner
methods such as PAP are handled by the inner-tunnel virtual server and
are deliberately absent from the option list, as radiusd fails to start
on a non-EAP value. The field defaults to md5, keeping existing
configurations unchanged, and is hidden unless TTLS is the outer type.

* net/freeradius: fix EAP-GTC failing when the LDAP directory does not expose passwords


    [10 lines not shown]

security/wazuh-agent: sync with master

security/wazuh-agent: bump

security/wazuh-agent: fix typos in template, closes https://github.com/opnsense/plugins/issues/5846

security/wazuh-agent: fix typos in template, closes https://github.com/opnsense/plugins/issues/5846

www/squid: sync with master

security/q-feeds-connector: bump

www/squid: support Squid 7.7 and work around script_output-ified reconfigureAction()

security/q-feeds-connector: Add xmlrpc sync section. Fixes: https://github.com/opnsense/plugins/issues/5847

net/frr: sync with master

net/frr: changelog

net/netflector: sync with master

net/netflector: ready for release

sysutils/dec-hw: sync with master

sysutils/dec-hw: bump

www/caddy: sync with master

net/frr: Use json output for BFD summary, Fixes: https://github.com/opnsense/plugins/issues/5838

www/caddy: Add strict_sni_host to general settings (#5839)

security/q-feeds-connector: small lint pass

www/caddy: Add strict_sni_host to general settings

net-mgmt/net-snmp: fix and bump

(cherry picked from commit d95f9cc785602e1ff6f38040ef89cc1618f38490)

net-mgmt/net-snmp: fix and bump

net/frr: bump due to OSPF changes

net-mgmt/net-snmp: sync with master

net-mgmt/net-snmp: bump revision

net/frr: Normalize interfaces in M1_1_5, Do not read already converted areas in M1_1_4, Fixes: https://github.com/opnsense/plugins/issues/5830

(cherry picked from commit aa043211787a82f9e71557c13199286c51417b9f)

net/frr: Normalize interfaces in M1_1_5, Do not read already converted areas in M1_1_4, Fixes: https://github.com/opnsense/plugins/issues/5830