BSD Commit Log Search

www/caddy: Add strict_sni_host to general settings (#5839)

security/q-feeds-connector: small lint pass

www/caddy: Add strict_sni_host to general settings

net-mgmt/net-snmp: fix and bump

(cherry picked from commit d95f9cc785602e1ff6f38040ef89cc1618f38490)

net-mgmt/net-snmp: fix and bump

net/frr: bump due to OSPF changes

net-mgmt/net-snmp: sync with master

net-mgmt/net-snmp: bump revision

net/frr: Normalize interfaces in M1_1_5, Do not read already converted areas in M1_1_4, Fixes: https://github.com/opnsense/plugins/issues/5830

(cherry picked from commit aa043211787a82f9e71557c13199286c51417b9f)

net/frr: Normalize interfaces in M1_1_5, Do not read already converted areas in M1_1_4, Fixes: https://github.com/opnsense/plugins/issues/5830

net/frr: OSPF do not validate group interface for now to ease migrations

(cherry picked from commit 150ff2ab0fb256d0d242e4fc96a60af7f04e9398)

net/frr: sync with master

sysutils/dechw: prevent accumulating duplicate style elements on inline restore

Bit of an edge case but spotted while sweeping

net/frr: refactor Ospf6dEventHandler to use json output from vtysh, closes https://github.com/opnsense/plugins/issues/5767

www/squid: Change reload to restart for now, https://github.com/opnsense/ports/commit/0d2014a65a35d8e0f201882d0cfe366cda58970c, Closes: https://github.com/opnsense/plugins/issues/5811

net-mgmt/net-snmp: Allow Spaces in Syslocation (#5807)

sysutils/sftp-backup - set identity ownership to wwwonly:wheel (always) https://github.com/opnsense/plugins/issues/5809

net/frr: refactor Ospf6dEventHandler to use json output from vtysh, closes https://github.com/opnsense/plugins/issues/5767

net/frr: OSPF do not validate group interface for now to ease migrations

sysutils/sftp-backup - set identity ownership to wwwonly:wheel to allow the frontend to send these backups. closes https://github.com/opnsense/plugins/issues/5809

Eventually we need to replace diag_backup.php, but for now we should make sure ownership matches reality. From a security perspective this doesn't make much of a difference as the config file is readable from the UI anyway.

Existing setups should remove the identity file (rm /conf/backup/sftp/identity) in order to get it recreated with proper ownership

net/netflector: mDNS service types and fixes (#5785)

- mDNS services: an optional per-entry allow-list of DNS-SD service
  types; needs netflector 0.17.0 (opnsense/ports#299)
- A port list's validation message names the bad port
- The CARP hook re-renders rc.conf.d before starting netflector, so a
  VIP edit no longer leaves it stopped after the next failover
- Stopping a stopped netflector no longer reports a failure

security/strongswan-legacy: sync with master

net/frr: sync with master

net/frr: bump after fix

net/frr: skip group interfaces during M1_1_5 passive interfaces migration

security/strongswan-legacy: do not use a temp file in ping_hosts.sh

The temp file is not ensured to be owned by us so use the proper
one.

Also remove /var/db/hosts which was never used in the code or
documented as such.

Reported by: Adam Korczynski of Ada Logics using Anrophic

security/strongswan-legacy: add ping_hosts.sh from core

dns/ddclient: sync with master

dns/ddclient: document previous

dns/ddclient: cache supported provider lookup (#5780)