summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Update OpenVPN Wizard to include missing key sizesstilez2016-06-221-2/+22
| | | | | ...and add some useful info to guide the user. (cherry picked from commit 49810252681df9bd553e2221c885ceffaa2c4c7f)
* Add missing recommended key lengths to OpenVPN optionsstilez2016-06-221-1/+2
| | | | | | | | | Add key lengths to the OpenVPN options, for asymmetric keys of size 3072 (for current use), 7680, 15360 (for long term resistance), 8192 and 16384 (common binary exponents). These are both supported by OpenVPN anyhow, and for certain uses are currently recommended (eg long term resistance to replay/decryption). See keylength.com for citations. This PR would only affect OpenVPN, and OpenVPN supports these key sizes, so should not cause any issue. (cherry picked from commit 0693c96797f7d5dfa097d24070e2bd4c9528d0e7)
* Added option to System > General Setup > webConfigurator to change the title ↵Christopher Fazendin2016-06-222-10/+34
| | | | | | of the Help menu in the navbar to either the system hostname or fqdn. (cherry picked from commit 1d12996755ee6fb9b9e163d292bdba160a926e64)
* Make QinQ interfaces work againChris Rowe2016-06-222-12/+12
| | | | (cherry picked from commit 1322ee22354f1a6e184819fb7009a2996b63de97)
* Allow IGMP Proxy logging verbosity to be selected via system log settings ↵Stephen Beaver2016-06-222-1/+17
| | | | | | (PR 2901) (cherry picked from commit 2bd0585e30e5ec8fc3b79ca3f579bf9a7c1bcbc8)
* adding privileges and separating DNS Resolver overrides from general settingsJoe2016-06-225-3/+323
| | | | (cherry picked from commit fc76a1e390c8ce9579df31457c74d1d0e572b78d)
* Force 4096 RSA keysJose Luis Duran2016-06-221-1/+1
| | | | | | | | Add option `-b 4096` to force the keys to 4096-bit. This parameter is ignored for Ed25519 keys. (cherry picked from commit 971257cbdf687c79943237b6c2f5e37c596318af)
* Harden sshd_configJose Luis Duran2016-06-221-16/+19
| | | | | | | The changes are better explained in the following article: https://stribika.github.io/2015/01/04/secure-secure-shell.html (cherry picked from commit dca77360ffe868327d82c20834eceb1079d5823b)
* Fixed #6504 by making table sortableStephen Beaver2016-06-221-1/+1
| | | | (cherry picked from commit 55f67b5abd9b809807e328477779d97120908273)
* jQuery datepicker added to interfaces.php and interfaces_ppps_edit.php for ↵Stephen Beaver2016-06-222-1/+4
| | | | | | setting custom expirey date (cherry picked from commit d85d82b7686d5899948e6ec4b1587e74937820cf)
* Fixed #6516 by replacing HTML5 datepicker with jQuery widgetStephen Beaver2016-06-221-0/+1
| | | | (cherry picked from commit 53c38ff16c1eb8743e69d506f69167c88cf34910)
* fix rowhelper select_source empty comboMarcello Coutinho2016-06-211-1/+1
| | | while using $config['installedpackage']{['...'] as source
* Only call interfaces_vips_configure once if it's needed, rather than doing ↵Chris Buechler2016-06-211-1/+5
| | | | the same thing over and over for every VIP on an interface. Ticket #6515
* update d3.jsJared Dillard2016-06-211-5/+5
|
* update nvd3 filesJared Dillard2016-06-212-556/+1141
|
* Fix styleChris Buechler2016-06-211-3/+5
|
* require_once auth.inc in vpn.inc since it uses functions from there, though ↵Chris Buechler2016-06-211-0/+1
| | | | normal use of the system won't require that, those who run certain things manually/custom may require it
* Fixed #6514 by requiring string starts with letter ot underscoreStephen Beaver2016-06-211-1/+1
| | | | (cherry picked from commit f0a053846d6cde2724c47b5553e1395cfd21445c)
* Only omit aggressive line from ipsec.conf where IKEv2. Ticket #6513Chris Buechler2016-06-211-1/+1
|
* Fixed #6498 by providing new address type argument to Form_IpAddress(). In ↵Stephen Beaver2016-06-212-5/+19
| | | | | | this case it is specified as "V6". (cherry picked from commit 3e4adb7139b4cddbb06a2aba7e0727d1762b35ee)
* Incorporated ssl changesStephen Beaver2016-06-212-1/+9
|
* Set kern.corefile, fixes #6510jim-p2016-06-211-1/+2
|
* Fix typojim-p2016-06-201-1/+1
|
* Fix redundant phrasing.jim-p2016-06-201-1/+1
|
* Teach rc script to copy custom_logos over default oneRenato Botelho2016-06-201-0/+6
|
* Remove tab_array from interfaces_groups_edit.php to be consistent with other ↵Renato Botelho2016-06-171-13/+0
| | | | *_edit files
* Correct value for 9600. Ticket #6416Chris Buechler2016-06-151-1/+1
|
* Fix #6468 Do not allow edit of day and timesPhil Davis2016-06-091-6/+6
| | | | | | in rows of time ranges for a schedule. The code was always intended that the user uses the calendar pad and start hour/minute stop hour/minute drop-down fields to enter days and time range. If an existing day-time-range is wrong, then the workflow is to delete the row and then enter the correct day-time-range using the calendar pad and start hour/minute stop hour/minute drop-down fields. I left the Description field as editable - there is not harm here in letting the user fixup text in any of the dsecriptions for each row.
* Use escapeshellarg on shell calls in auth.inc. Ticket #6475jim-p2016-06-091-10/+18
|
* Validate submitted groups when editing a user. Ticket #6475jim-p2016-06-091-0/+7
|
* Add input validation to system_groupmanager.php to prevent invalid members ↵jim-p2016-06-091-1/+7
| | | | from being submitted. Ticket #6475
* Fix #6463 Dest net alias matching on page loadPhil Davis2016-06-081-1/+1
| | | | Do not set destination field to use customarray Note: dstbeginport_cust does not exist on this page, so I got removed it here also to avoid future confusion.
* Add resetwebgui to developer shellPhil Davis2016-06-081-0/+26
| | | | | | | | | | This might be helpful to people if they have set the theme to something that they are having trouble displaying, reading... or enabled some widget that is not good or... It allows them to get back to a known-working dashboard state, from where they can try again with customizations. Having something like this was suggested by stilez in amongst discussion of features for https://github.com/pfsense/pfsense/pull/2989
* Fix #6460 Interface mismatch apply changes buttonPhil Davis2016-06-081-2/+4
|
* Rework pkg_mgr_install.php:Renato Botelho2016-06-082-60/+62
| | | | | | | | | | | | | | | - Stop using id parameter for additional packages, keep using it only for firmware upgrades - Created to control variables $completed and $confirmed to check all the stages and make it easy to understand what is happening - Stop using $pkgid and use $pkgname instead - Set $pkgname early and validate the port name - Use $firmwareupdate everywhere to check if it's a firmware upgrade - Add hidden input called confirmed to control when user has confirmed installation / upgrade / removal - Add specific messages for reinstall all - Remove an extra form submit and just changes progress bar and informative panel when json process finished successfully
* Implement pkg_valid_name()Renato Botelho2016-06-081-0/+8
|
* Fix variable name s/POST/_POST/ and also parameter name s/complete/completed/Renato Botelho2016-06-081-1/+1
|
* Fix indentRenato Botelho2016-06-081-35/+35
|
* Improve readabilityRenato Botelho2016-06-081-31/+39
|
* Improve readabilityRenato Botelho2016-06-081-3/+4
|
* Simplify mode parameter validationRenato Botelho2016-06-081-16/+13
|
* Remove redundant check since pkgcancel is never setRenato Botelho2016-06-081-5/+0
|
* Validate mode parameter and use sanitized variable on other placesRenato Botelho2016-06-081-19/+35
|
* This needs a newlinejim-p2016-06-061-1/+1
|
* Set keepalive_timeout 0 where captive portal in use, and update otherwise to ↵Chris Buechler2016-06-031-1/+3
| | | | nginx's current default of 75. Ticket #6421
* Fix save and reset buttons on status_lb_pool.php. Ticket #6254Chris Buechler2016-06-021-11/+14
|
* Fix #6440 RADIUS issued IPsPhil Davis2016-06-021-1/+1
| | | | This is a checkbox - the state in the config is stored as set or not set. This should fix the reported issue. I don;t have a system right now to test, but the bug seems obvious.
* Allow - and _ in sysctl values. Ticket #6438Chris Buechler2016-06-011-2/+2
|
* Don't override type so changing it is possible. Ticket #6439Chris Buechler2016-06-011-1/+3
|
* Allow - in TFTP Server field. Ticket #6433Chris Buechler2016-06-011-1/+1
|
OpenPOWER on IntegriCloud