interfaces: retire these problematic validations
ISC DHCP is no longer installed by default and mostly not installed
on newer installations. However, people tend to use older backups
and the server may be enabled still. The alternative would be to
add a plugin check, but I don't really see the point in dragging this
on.
PR: https://forum.opnsense.org/index.php?topic=48181.0
interfaces: fix PHP warnings and do not write unset ones
Pertains to interafces.php mostly but let's fix this so we
can see if the new interface settings work the same.
(cherry picked from commit 227bbd3d120e7a01562236239b3ad778ecb56d7a)
interfaces: fix PHP warnings and do not write unset ones
Pertains to interafces.php mostly but let's fix this so we
can see if the new interface settings work the same.
system: diag.disk rework (#10875)
changes diag.disk to return total bytes as well as formatted bytes so the API returns more info but keeps functionality the same.
interfaces: handle these as well
They are correct but it doesn't hurt to keep them in the list
to avoid noise in the config diff for now. It's easier to
spot actual issues such as "<dhcp6-ia-pd-len>0</dhcp6-ia-pd-len>"
being written to a LAN configuration.
interfaces: round-trip the DHCPv6/track6 hex ID fields (#10879)
NetworkInterfaceContainerField::toLegacy() guards the hex-to-decimal conversion
for dhcp6-prefix-id, dhcp6_ifid, track6-prefix-id and track6_ifid with
"if (!$this->$fld->isSet())". BaseField::isSet() is "getValue() !== ''", so the
conversion runs only for fields the operator left empty, and a field they
actually filled in is never emitted.
system: run file and configuration selfchecks
Execute these just before rc.bootup would start bringing
up the system. This would still have to audit-log, but
syslog-ng has not started yet.
Check for consistency rather than cryptographic correctness.
If the binaries match the cryptography should follow.
system: selftest POC with OpenSSL FIPS
Feeds the FIPS config to the OpenSSL config, but needs
an untainted config to run. Wires base OpenSSL to use
the same FIPS module since base does not have one.
Activation confirmed by seeing fips for both base and
ports using:
# /usr(/local)/bin/openssl list -providers
plugins: add error returns to plugins_configure()
These are not really errors. They indicate a possible issue
but should not error. An unknown hook may be normal given
that the plugin owning the hook is not installed.
We also don't consider hooks to return errors in a meaningful
way as they are meant as machinery to run a reconfiguration
which can register its own errors elsewhere in the system.
But this can give the user running manual queries a useful hint.
