Re: [OpenWrt-Devel] DD: CONFIG_BUSYBOX_DEFAULT_WGET is not set
Am 25.01.2016 um 14:50 schrieb Felix Fietkau: > On 2016-01-24 17:35, Felix Fietkau wrote: >> On 2016-01-24 13:06, Christian Schoenebeck wrote: >>> I'm currently looking on ddns-scripts and still got certificate problems >>> I'm on r48470 including ca-certificates package installed >>> >>> root@OpenWrt:~# uclient-fetch -O- >>> 'https://myuser:myp...@update.spdns.de/nic/update?hostname=myhost.example.com=8.8.8.8' >>> Downloading >>> 'https://myuser:myp...@update.spdns.de/nic/update?hostname=myhost.example.com=8.8.8.8' >>> Connecting to 62.201.160.30:443 >>> Connection error: Server hostname does not match SSL certificate > What platform and ustream-ssl variant are you using? > I can't reproduce this. > > - Felix > I'm running on x86 inside VirtualBox DD r48470 I send you a full functional url for testing via direct mail. Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] DD: CONFIG_BUSYBOX_DEFAULT_WGET is not set
Am 25.01.2016 um 19:10 schrieb Felix Fietkau: > On 2016-01-25 18:58, Christian Schoenebeck wrote: >> Am 25.01.2016 um 14:50 schrieb Felix Fietkau: >>> On 2016-01-24 17:35, Felix Fietkau wrote: >>>> On 2016-01-24 13:06, Christian Schoenebeck wrote: >>>>> I'm currently looking on ddns-scripts and still got certificate problems >>>>> I'm on r48470 including ca-certificates package installed >>>>> >>>>> root@OpenWrt:~# uclient-fetch -O- >>>>> 'https://myuser:myp...@update.spdns.de/nic/update?hostname=myhost.example.com=8.8.8.8' >>>>> Downloading >>>>> 'https://myuser:myp...@update.spdns.de/nic/update?hostname=myhost.example.com=8.8.8.8' >>>>> Connecting to 62.201.160.30:443 >>>>> Connection error: Server hostname does not match SSL certificate >>> What platform and ustream-ssl variant are you using? >>> I can't reproduce this. >>> >>> - Felix >>> >> I'm running on x86 inside VirtualBox DD r48470 >> I send you a full functional url for testing via direct mail. > Which ustream-ssl variant are you using? > > - Felix > . > Sorry I forgot: libustream-openssl 2015-07-09-c2d73c2261..2d3 Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] DD: CONFIG_BUSYBOX_DEFAULT_WGET is not set
Additional question: If I understand right uclient-fetch only support to give an explicit certificate via command line switch --ca-certificate=:Load CA certificates from file so no path allowed !? Thanks Christian Am 24.01.2016 um 13:38 schrieb Arjen de Korte: > Citeren Christian Schoenebeck <christian.schoeneb...@gmail.com>: > >> I'm currently looking on ddns-scripts and still got certificate problems >> I'm on r48470 including ca-certificates package installed >> >> root@OpenWrt:~# uclient-fetch -O- >> 'https://myuser:myp...@update.spdns.de/nic/update?hostname=myhost.example.com=8.8.8.8' >> Downloading >> 'https://myuser:myp...@update.spdns.de/nic/update?hostname=myhost.example.com=8.8.8.8' >> Connecting to 62.201.160.30:443 >> Connection error: Server hostname does not match SSL certificate > > The certificate is valid, but update.spdns.de uses a wildcard certificate > (which technically is OK). > > subject=/serialNumber=YnFcKoUlVu1DhcIaoJxVwNDp/tTAKrDm/OU=GT17804807/OU=See > www.rapidssl.com/resources/cps (c)14/OU=Domain Control Validated - > RapidSSL(R)/CN=*.spdns.de > issuer=/C=US/O=GeoTrust, Inc./CN=RapidSSL CA > > But you won't get an exact match on the hostname, so this is something that > probably requires fixing. > >> GNU wget works as expected >> root@OpenWrt:~# wget -O- >> 'https://myuser:myp...@update.spdns.de/nic/update?hostname=myhost.example.com=8.8.8.8' >> --2016-01-24 13:01:39-- >> https://myuser:myp...@update.spdns.de/nic/update?hostname=myhost.example.com=8.8.8.8 >> Resolving update.spdns.de... 62.201.160.30, 2001:868:100:901:53::2 >> Connecting to update.spdns.de|62.201.160.30|:443... connected. >> HTTP request sent, awaiting response... 401 Unauthorized >> Authentication selected: Basic realm="spdns nic update" >> Reusing existing connection to update.spdns.de:443. >> HTTP request sent, awaiting response... 200 OK >> Length: unspecified [text/html] >> Saving to: 'STDOUT' >> - [<=>] 0 >> --.-KB/s invalidip >> - [ <=>] 10 >> --.-KB/sin 0s >> 2016-01-24 13:01:39 (1.20 MB/s) - written to stdout [10] >> >> What did I wrong ? >> Thanks >> Christian >> ___ >> openwrt-devel mailing list >> openwrt-devel@lists.openwrt.org >> https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel > ___ > openwrt-devel mailing list > openwrt-devel@lists.openwrt.org > https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel > ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] DD: CONFIG_BUSYBOX_DEFAULT_WGET is not set
I'm currently looking on ddns-scripts and still got certificate problems I'm on r48470 including ca-certificates package installed root@OpenWrt:~# uclient-fetch -O- 'https://myuser:myp...@update.spdns.de/nic/update?hostname=myhost.example.com=8.8.8.8' Downloading 'https://myuser:myp...@update.spdns.de/nic/update?hostname=myhost.example.com=8.8.8.8' Connecting to 62.201.160.30:443 Connection error: Server hostname does not match SSL certificate GNU wget works as expected root@OpenWrt:~# wget -O- 'https://myuser:myp...@update.spdns.de/nic/update?hostname=myhost.example.com=8.8.8.8' --2016-01-24 13:01:39-- https://myuser:myp...@update.spdns.de/nic/update?hostname=myhost.example.com=8.8.8.8 Resolving update.spdns.de... 62.201.160.30, 2001:868:100:901:53::2 Connecting to update.spdns.de|62.201.160.30|:443... connected. HTTP request sent, awaiting response... 401 Unauthorized Authentication selected: Basic realm="spdns nic update" Reusing existing connection to update.spdns.de:443. HTTP request sent, awaiting response... 200 OK Length: unspecified [text/html] Saving to: 'STDOUT' - [<=>] 0 --.-KB/s invalidip - [ <=>] 10 --.-KB/s in 0s 2016-01-24 13:01:39 (1.20 MB/s) - written to stdout [10] What did I wrong ? Thanks Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] Discussion: Replace BUSYBOX NSLOOKUP by hostip package
For some (good) reason you decided to remove wget from BusyBox and replace it by uclient-fetch. Why not also remove nslookup from BusyBox. - If compiled with musl it malfunction with given dns-server - use hostip package instead. Tiny and functional What do you think? ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] DD: CONFIG_BUSYBOX_DEFAULT_WGET is not set
For whatever reason uclient-fetch is installed into /bin directory. Your plan is to use it as a replacement for Busybox Wget. Fine. Why do you place the wget link to uclient-fetch also into /bin ? wget default location is /usr/bin/wget If you later install GNU wget the package will remove /usr/bin/wget and build a new link to wget-ssl. With your /bin/wget link to uclient-fetch you will have two wget installation afterwards. So it depends on your PATH environment which one is used. I suggest wherever you install uclient-fetch the link must be from /usr/bin/wget. Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [for-15.05] ca-certificates: update to version 20151214
update to version 20151214 Signed-off-by: Christian Schoenebeck <christian.schoeneb...@gmail.com> --- package/system/ca-certificates/Makefile | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/package/system/ca-certificates/Makefile b/package/system/ca-certificates/Makefile index 9c50fef..18af018 100644 --- a/package/system/ca-certificates/Makefile +++ b/package/system/ca-certificates/Makefile @@ -7,11 +7,12 @@ include $(TOPDIR)/rules.mk PKG_NAME:=ca-certificates -PKG_VERSION:=20150426 +PKG_VERSION:=20151214 PKG_SOURCE:=$(PKG_NAME)_$(PKG_VERSION).tar.xz PKG_SOURCE_URL:=http://ftp.debian.org/debian/pool/main/c/ca-certificates -PKG_MD5SUM:=717455f13fb31fd014a11a468ea3895d +PKG_MD5SUM:=2233bfa64af6f58f5eca9735b6742818 +PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME) PKG_INSTALL:=1 -- ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] ca-certificates: update to version 20151214
update to version 20151214 Signed-off-by: Christian Schoenebeck <christian.schoeneb...@gmail.com> --- package/system/ca-certificates/Makefile | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/package/system/ca-certificates/Makefile b/package/system/ca-certificates/Makefile index 9c50fef..18af018 100644 --- a/package/system/ca-certificates/Makefile +++ b/package/system/ca-certificates/Makefile @@ -7,11 +7,12 @@ include $(TOPDIR)/rules.mk PKG_NAME:=ca-certificates -PKG_VERSION:=20150426 +PKG_VERSION:=20151214 PKG_SOURCE:=$(PKG_NAME)_$(PKG_VERSION).tar.xz PKG_SOURCE_URL:=http://ftp.debian.org/debian/pool/main/c/ca-certificates -PKG_MD5SUM:=717455f13fb31fd014a11a468ea3895d +PKG_MD5SUM:=2233bfa64af6f58f5eca9735b6742818 +PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME) PKG_INSTALL:=1 -- ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH] ca-certificates: update to version 20150426
update to version 20150426 Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com --- package/system/ca-certificates/Makefile | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/package/system/ca-certificates/Makefile b/package/system/ca-certificates/Makefile index 0bf3f25..9c50fef 100644 --- a/package/system/ca-certificates/Makefile +++ b/package/system/ca-certificates/Makefile @@ -1,5 +1,5 @@ -# -# Copyright (C) 2006 OpenWrt.org +# +# Copyright (C) 2006-2015 OpenWrt.org # # This is free software, licensed under the GNU General Public License v2. # See /LICENSE for more information. @@ -7,11 +7,11 @@ include $(TOPDIR)/rules.mk PKG_NAME:=ca-certificates -PKG_VERSION:=20141019 +PKG_VERSION:=20150426 PKG_SOURCE:=$(PKG_NAME)_$(PKG_VERSION).tar.xz PKG_SOURCE_URL:=http://ftp.debian.org/debian/pool/main/c/ca-certificates -PKG_MD5SUM:=f619282081c8bfc65ea64c37fa5285ed +PKG_MD5SUM:=717455f13fb31fd014a11a468ea3895d PKG_INSTALL:=1 -- ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [BB 14.07] No automatic buildbot anymore ???
Hi, I fixed some LuCI language files about 3 weeks ago, but downloads.openwrt.org is still on 29.09.2014. Are there no updates build for BB 14.07 ? Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] ddns default config values broken?
One Shot in verbose mode is for diagnostic on console only. To configure One Shot if starting via init.d script i.e. using cron you should set force_interval to 0. This will retry (retry_count) until one successful update. If looking into sources do it on Github or the source tree because during building all comments are removed. Thanks for feedback. Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] ddns default config values broken?
Hi Henning, the pull request is posted on github https://github.com/openwrt/packages/pull/1241 Please have a look on the comments. What do you think about a minimum or increasing sleep time before next retry ? Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] ddns default config values broken?
Hi Henning, thanks for you suggestions. I had to prepare a patch the next days anyway, so I will implement it. Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] Dirty Diamond
+1 ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] Translating LuCI? (https://luci.subsignal.org/pootle/ down)
Hi Janne, from my knowledge pottle is down since LuCI moved to GitHub. inside luci/modules/[package] and luci/applications/[application] on source tree you should find a po directory where translations are stored. Inside there is a templates/[file].pot This is the catalog (master) the translation based on. There are also directorys for every translated language. In there are stored the final .po files. This .po files are translated/compiled into the needed .lmo files during compilation of LuCI. There are a lot of tools on the web handling .pot and .po files. I personally use poedit on my Xubuntu. To publish the final .po file use the standard contribution methods and guidelines of LuCI project on GitHub at https://github.com/openwrt/luci Does this help ? Christian Am 02.04.2015 um 10:28 schrieb Janne Cederberg: Greetings! TL;DR: Anyone able to write a short description on LuCI translation process and tools needed? LONGER EXPLANATION: I'm hoping to create a Finnish translation for the LuCI interface. However I can't find the instructions for the translation process as https://luci.subsignal.org/pootle/ has been down (502 Bad Gateway on Nginx) for several days. 1) Anyone involved with the https://luci.subsignal.org/pootle/ site to be able to aid in getting back up-n-running? 2) As an alternative to #1, is someone on the list able to describe the translation process? I'm suspected the translations to be use GNU Gettext based on the translation file extension .lmo (which I guessed to means LuCI mo) but when I renamed one of them to .mo and tried msgunfmt filename.mo it got the response that the file is not in GNU .mo format. I then took a look at the file in a hex editor and noticed it seems to contain HTML with nullbyte delimiters or something in that fashion. Anyone able help? Thank you in advance, Janne Cederberg Helsinki, Finland ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH] samba36: add smb.conf.template to conffiles
User might have modified/extended template direct or by LuCI application. So do not overwrite on update/upgrade. Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com --- package/network/services/samba36/Makefile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/network/services/samba36/Makefile b/package/network/services/samba36/Makefile index d440495..b39f484 100644 --- a/package/network/services/samba36/Makefile +++ b/package/network/services/samba36/Makefile @@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk PKG_NAME:=samba PKG_VERSION:=3.6.25 -PKG_RELEASE:=2 +PKG_RELEASE:=3 PKG_SOURCE_URL:=http://ftp.samba.org/pub/samba \ http://ftp.samba.org/pub/samba/stable @@ -125,6 +125,7 @@ MAKE_FLAGS += DYNEXP= PICFLAG= MODULES= define Package/samba36-server/conffiles /etc/config/samba +/etc/samba/smb.conf.template endef define Package/samba36-server/install -- 2.1.0 ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] Dynamically generate custom files before building?
For me a shell script is doing the job. Calling parameter is the target. I use a separate configuration directory beside building directory. I copy the correct files for the target into the files directory and the correct .config into building directory and then call make. All inside the script. Christian Am 23.03.2015 um 17:10 schrieb Nguyễn Hồng Quân: Hello all If I want to build customized OpenWrt, I need to place all custom file in files/ folder. The problem is that a set of custom files can only be applied to 1 device, i.e /etc/config/wireless file for TP Link router can not be used for D-Link. Is there any way that I can use a script to modify the default config file for each target device, create the one in files/ folder before building? Where can I find the default /etc/config/wireless target device? Thanks -- Quân *** * Nguyễn Hồng Quân* * Y!M: ng_hquan_vn* * Facebook: ng.hong.quan * * Web: quan.hoabinh.vn http://quan.hoabinh.vn* *** ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] BB14.07 - no auto build/update from source to download server
Today I checked my BB 14.07 installation to update ca-certificates. On the download server is still version 20140325 Inside build-tree it's version 20141019 Is there no auto build/update of the download server ? ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH] package-defaults.mk: set DISABLE_NLS only if not CONFIG_BUILD_NLS
set DISABLE_NLS only if CONFIG_BUILD_NLS NOT set. like DISABLE_IPV6 which depends on CONFIG_IPV6 Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com --- include/package-defaults.mk | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/include/package-defaults.mk b/include/package-defaults.mk index 6a345b6..35be6cf 100644 --- a/include/package-defaults.mk +++ b/include/package-defaults.mk @@ -67,7 +67,11 @@ ifneq ($(strip $(PKG_UNPACK)),) endif EXTRA_CXXFLAGS = $(EXTRA_CFLAGS) -DISABLE_NLS:=--disable-nls +ifeq ($(CONFIG_BUILD_NLS),y) +DISABLE_NLS:= +else +DISABLE_NLS:=--disable-nls +endif CONFIGURE_PREFIX:=/usr CONFIGURE_ARGS = \ -- 2.1.0 ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] cURL: implement new functionality with cleanup and fixes
remove obsolete configuration settings --disable-thread --enable-nonblocking --without-krb4 remove SSPI support only supported on windows correct --with/without-ca-path handling only supported with OpenSSL and PolarSSL correct LDAP/LDAPS protocol add dependency libopenldap added SCP/SFTP protocol default No depends on libssh2 added IDN support default No depends on libidn added SMB protocol (new in 7.40) default No require 'cryptographic authentication' and either 'GnuTLS' or 'OpenSSL' selected added Unix sockets support (new in 7.40) default No added error verbose messages default No changes to Makefile Increase PKG_RELEASE PKG_CONFIG_DEPENDS and CONFIGURE_ARGS extended for new functionality use autoconf_bool for all --enable/--disable options restructure for easier reading changes to Config.in extended for new functionality implement dependencies restructure and grouping for easier reading build tested on XUbuntu 14.10 x86 for x86 (generic) and ar71xx (WNDR3800) Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com --- package/network/utils/curl/Config.in | 137 +++ package/network/utils/curl/Makefile | 114 - 2 files changed, 155 insertions(+), 96 deletions(-) diff --git a/package/network/utils/curl/Config.in b/package/network/utils/curl/Config.in index 87e5f99..11cfa39 100644 --- a/package/network/utils/curl/Config.in +++ b/package/network/utils/curl/Config.in @@ -1,111 +1,154 @@ if PACKAGE_libcurl +comment SSL support + choice - prompt SSL library + prompt Selected SSL library default LIBCURL_POLARSSL -config LIBCURL_POLARSSL - bool PolarSSL + config LIBCURL_POLARSSL + bool PolarSSL -config LIBCURL_CYASSL - bool CyaSSL + config LIBCURL_CYASSL + bool CyaSSL -config LIBCURL_AXTLS - bool axTLS + config LIBCURL_AXTLS + bool axTLS -config LIBCURL_OPENSSL - bool OpenSSL + config LIBCURL_OPENSSL + bool OpenSSL -config LIBCURL_GNUTLS - bool GNUTLS + config LIBCURL_GNUTLS + bool GNUTLS -config LIBCURL_NOSSL - bool No SSL support + config LIBCURL_NOSSL + bool No SSL support endchoice -config LIBCURL_COOKIES - bool Enable cookies support - default y - -config LIBCURL_CRYPTO_AUTH - bool Enable cryptographic authentication - default n +comment Supported protocols config LIBCURL_DICT - bool Enable DICT support + bool DICT protocol default n config LIBCURL_FILE - bool Enable FILE support + bool FILE protocol default y config LIBCURL_FTP - bool Enable FTP support + bool FTP / FTPS protocol default y config LIBCURL_GOPHER - bool Enable Gopher support + bool Gopher protocol default n config LIBCURL_HTTP - bool Enable HTTP support + bool HTTP / HTTPS protocol + default y + +config LIBCURL_COOKIES + bool Enable Cookies support + depends on LIBCURL_HTTP default y config LIBCURL_IMAP - bool Enable IMAP support + bool IMAP / IMAPS protocol default n config LIBCURL_LDAP - bool Enable LDAP support + bool LDAP protocol default n config LIBCURL_LDAPS bool Enable LDAPS support + depends on LIBCURL_LDAP !LIBCURL_NOSSL + default y + +config LIBCURL_POP3 + bool POP3 / POP3S protocol default n -config LIBCURL_LIBCURL_OPTION - bool Enable --libcurl C code generation support +config LIBCURL_RTSP + bool RTSP protocol + depends on LIBCURL_HTTP default n +config LIBCURL_NO_RTSP + string RTSP require HTTP protocol + depends on !LIBCURL_HTTP + default ! -config LIBCURL_POP3 - bool Enable POP3 support +config LIBCURL_SSH2 + bool SCP / SFTP protocol + default n + +config LIBCURL_SMB + bool SMB protocol (CIFS) + depends on LIBCURL_CRYPTO_AUTH (LIBCURL_GNUTLS || LIBCURL_OPENSSL) + default n +config LIBCURL_NO_SMB + string SMB require 'cryptographic authentication' and either 'GnuTLS' or 'OpenSSL' + depends on !LIBCURL_CRYPTO_AUTH || (!LIBCURL_GNUTLS !LIBCURL_OPENSSL) + default ! + +config LIBCURL_SMTP + bool SMTP / SMTPS protocol default n +config LIBCURL_TELNET + bool TELNET protocol + default n + +config LIBCURL_TFTP + bool TFTP protocol + default n + +comment Miscellaneous + config LIBCURL_PROXY bool Enable proxy support default y -config LIBCURL_RTSP - bool Enable RTSP support +config LIBCURL_CRYPTO_AUTH + bool Enable cryptographic authentication default n -config LIBCURL_SMTP - bool Enable SMTP support +config LIBCURL_TLS_SRP + bool Enable TLS-SRP authentication default n
[OpenWrt-Devel] [for 14.07] ca-certificates: update to 20141019
update to version 20141019 and create symbolic link for certificate hashes during installation Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com --- package/system/ca-certificates/Makefile | 15 --- 1 file changed, 12 insertions(+), 3 deletions(-) diff --git a/package/system/ca-certificates/Makefile b/package/system/ca-certificates/Makefile index 7f38c86..0caf027 100644 --- a/package/system/ca-certificates/Makefile +++ b/package/system/ca-certificates/Makefile @@ -7,12 +7,12 @@ include $(TOPDIR)/rules.mk PKG_NAME:=ca-certificates -PKG_VERSION:=20140325 +PKG_VERSION:=20141019 PKG_SOURCE:=$(PKG_NAME)_$(PKG_VERSION).tar.xz -PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME) +PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION) PKG_SOURCE_URL:=http://ftp.debian.org/debian/pool/main/c/ca-certificates -PKG_MD5SUM:=0436aba482091da310bd762e1deca8b4 +PKG_MD5SUM:=f619282081c8bfc65ea64c37fa5285ed PKG_INSTALL:=1 @@ -34,6 +34,15 @@ endef define Package/ca-certificates/install $(INSTALL_DIR) $(1)/etc/ssl/certs $(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/share/ca-certificates/*/*.crt $(1)/etc/ssl/certs/ + + for CERTFILE in `ls -1 $(1)/etc/ssl/certs`; do \ + HASH=`openssl x509 -hash -noout -in $(1)/etc/ssl/certs/CERTFILE` ; \ + SUFFIX=0 ; \ + while [ -h $(1)/etc/ssl/certs/HASH.SUFFIX ]; do \ + let SUFFIX += 1 ; \ + done ; \ + ln -s CERTFILE $(1)/etc/ssl/certs/HASH.SUFFIX ; \ + done endef $(eval $(call BuildPackage,ca-certificates)) -- ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] cURL: Update to version 7.40.0
* Update to version 7.40.0 * remove non existing config options around enable/disable HTTPS protocoll * remove --with-ca-path if ssl support disabled * set proxy support as default like all versions before CC did Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com --- package/network/utils/curl/Config.in | 11 +++ package/network/utils/curl/Makefile | 8 +++- package/network/utils/curl/patches/100-check_long_long.patch | 2 +- package/network/utils/curl/patches/200-no_docs_tests.patch | 6 +++--- 4 files changed, 10 insertions(+), 17 deletions(-) diff --git a/package/network/utils/curl/Config.in b/package/network/utils/curl/Config.in index 026dcd6..87e5f99 100644 --- a/package/network/utils/curl/Config.in +++ b/package/network/utils/curl/Config.in @@ -1,5 +1,4 @@ -menu Configuration - depends on PACKAGE_libcurl +if PACKAGE_libcurl choice prompt SSL library @@ -53,10 +52,6 @@ config LIBCURL_HTTP bool Enable HTTP support default y -config LIBCURL_HTTPS - bool Enable HTTPS support - default n - config LIBCURL_IMAP bool Enable IMAP support default n @@ -79,7 +74,7 @@ config LIBCURL_POP3 config LIBCURL_PROXY bool Enable proxy support - default n + default y config LIBCURL_RTSP bool Enable RTSP support @@ -113,4 +108,4 @@ config LIBCURL_ZLIB bool Use zlib default n -endmenu +endif diff --git a/package/network/utils/curl/Makefile b/package/network/utils/curl/Makefile index 1a37495..08e2f1d 100644 --- a/package/network/utils/curl/Makefile +++ b/package/network/utils/curl/Makefile @@ -8,7 +8,7 @@ include $(TOPDIR)/rules.mk PKG_NAME:=curl -PKG_VERSION:=7.38.0 +PKG_VERSION:=7.40.0 PKG_RELEASE:=1 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2 @@ -18,7 +18,7 @@ PKG_SOURCE_URL:=http://curl.haxx.se/download/ \ ftp://ftp.planetmirror.com/pub/curl/ \ http://www.mirrormonster.com/curl/download/ \ http://curl.mirrors.cyberservers.net/download/ -PKG_MD5SUM:=af6b3c299bd891f43cb5f76c4091b7b4 +PKG_MD5SUM:=8d30594212e65657a5c32030f0998fa9 PKG_LICENSE:=MIT PKG_LICENSE_FILES:=COPYING @@ -37,7 +37,6 @@ PKG_CONFIG_DEPENDS := \ LIBCURL_GNUTLS \ LIBCURL_GOPHER \ LIBCURL_HTTP \ - LIBCURL_HTTPS \ LIBCURL_IMAP \ LIBCURL_LDAP \ LIBCURL_LDAPS \ @@ -98,7 +97,7 @@ CONFIGURE_ARGS += \ --disable-manual \ --disable-verbose \ --without-ca-bundle \ - $(if $(CONFIG_LIBCURL_OPENSSL),--with-ca-path=/etc/ssl/certs/) \ + $(if $(CONFIG_LIBCURL_NOSSL),,--with-ca-path=/etc/ssl/certs/) \ --without-krb4 \ --without-libidn \ --without-nss \ @@ -114,7 +113,6 @@ CONFIGURE_ARGS += \ $(if $(CONFIG_LIBCURL_GOPHER),--enable,--disable)-gopher \ $(if $(CONFIG_LIBCURL_GNUTLS),--with-gnutls=$(STAGING_DIR)/usr,--without-gnutls) \ $(if $(CONFIG_LIBCURL_HTTP),--enable,--disable)-http \ - $(if $(CONFIG_LIBCURL_HTTPS),--enable,--disable)-https \ $(if $(CONFIG_LIBCURL_IMAP),--enable,--disable)-imap \ $(if $(CONFIG_LIBCURL_LDAP),--enable,--disable)-ldap \ $(if $(CONFIG_LIBCURL_LDAPS),--enable,--disable)-ldaps \ diff --git a/package/network/utils/curl/patches/100-check_long_long.patch b/package/network/utils/curl/patches/100-check_long_long.patch index 05fb1bf..2dd8cc7 100644 --- a/package/network/utils/curl/patches/100-check_long_long.patch +++ b/package/network/utils/curl/patches/100-check_long_long.patch @@ -1,6 +1,6 @@ --- a/configure.ac +++ b/configure.ac -@@ -2877,6 +2877,7 @@ CURL_VERIFY_RUNTIMELIBS +@@ -2885,6 +2885,7 @@ CURL_VERIFY_RUNTIMELIBS AC_CHECK_SIZEOF(size_t) AC_CHECK_SIZEOF(long) diff --git a/package/network/utils/curl/patches/200-no_docs_tests.patch b/package/network/utils/curl/patches/200-no_docs_tests.patch index 42619a3..6a1fdf5 100644 --- a/package/network/utils/curl/patches/200-no_docs_tests.patch +++ b/package/network/utils/curl/patches/200-no_docs_tests.patch @@ -1,6 +1,6 @@ --- a/Makefile.am +++ b/Makefile.am -@@ -128,7 +128,7 @@ CLEANFILES = $(VC6_LIBDSP) $(VC6_SRCDSP) +@@ -129,7 +129,7 @@ CLEANFILES = $(VC6_LIBDSP) $(VC6_SRCDSP) $(VC7_LIBVCPROJ) $(VC7_SRCVCPROJ) \ bin_SCRIPTS = curl-config SUBDIRS = lib src include @@ -11,7 +11,7 @@ pkgconfig_DATA = libcurl.pc --- a/Makefile.in +++ b/Makefile.in -@@ -574,7 +574,7 @@ CLEANFILES = $(VC6_LIBDSP) $(VC6_SRCDSP) +@@ -577,7 +577,7 @@ CLEANFILES = $(VC6_LIBDSP) $(VC6_SRCDSP) $(VC7_LIBVCPROJ) $(VC7_SRCVCPROJ) \ bin_SCRIPTS = curl-config SUBDIRS = lib src include @@ -19,4 +19,4 @@ +DIST_SUBDIRS = $(SUBDIRS) packages pkgconfigdir = $(libdir)/pkgconfig pkgconfig_DATA = libcurl.pc - LIB_VTLS_CFILES = vtls/openssl.c vtls/gtls.c vtls/vtls.c vtls/nss.c \ + LIB_VTLS_CFILES = vtls/openssl.c vtls/gtls.c vtls/vtls.c vtls/nss.c \ ___ openwrt-devel mailing list
[OpenWrt-Devel] libcurl: questing about configure/build options
Two questions about curl/libcurl package and its build configuration: 1.) There is a new config option available since 17.01.2015 to configure https setting --enable-https / --disable-https(secure http) Inside the original curl configure script I cannot find this option (all others are there) I compiled libcurl inside OpenWrt build system for x86 with and without https enabled. Testing both versions I cannot find differences when using verbose mode (if ssl support enabled) Anyway HTTPS should be default=y 2.) Since 25.09.2014 the configure option --with-ca-path is only set on openssl ssl support. Are the other ssl supporting libs not using certificates ? ca-certificate package installs into /etc/ssl/certs, why not set for all ssl librarys ? Sorry if the questions sounds a little heretical. Thats not my intention. I only want to understand. There are no descriptions inside commits to explain whats going on. Thanks for support Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH] package-ipkg.mk: allow to install CC packages on older versions
Packages compiled on CC / trunk could not be installed on BB and before.
Why to block users from using updated packages like ca-certificates,
privoxy or updated luci-apps. Checks if default_postinst/prerm function
exists in /lib/functions.sh then run, otherwise run [xxx]-pkg script
if exists.
Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com
---
include/package-ipkg.mk | 20
1 file changed, 16 insertions(+), 4 deletions(-)
diff --git a/include/package-ipkg.mk b/include/package-ipkg.mk
index 77eaeb8..584ab95 100644
--- a/include/package-ipkg.mk
+++ b/include/package-ipkg.mk
@@ -195,13 +195,25 @@ $(_endef)
( \
echo #!/bin/sh; \
echo [ \\{IPKG_NO_SCRIPT}\ = \1\ ] exit 0;
\
- echo . \{IPKG_INSTROOT}/lib/functions.sh; \
- echo default_postinst \0 \@; \
+ echo grep 'default_postinst'
\{IPKG_INSTROOT}/lib/functions.sh /dev/null 21 {; \
+ echo . \{IPKG_INSTROOT}/lib/functions.sh; \
+ echo default_postinst \0 \@; \
+ echo } || {; \
+ echo name=\(echo \(basename \0) | cut
-d. -f1); \
+ echo [ -f
\{IPKG_INSTROOT}/usr/lib/opkg/info/\{name}.postinst-pkg ] \\; \
+ echo .
\{IPKG_INSTROOT}/usr/lib/opkg/info/\{name}.postinst-pkg \@; \
+ echo }; \
) postinst; \
( \
echo #!/bin/sh; \
- echo . \{IPKG_INSTROOT}/lib/functions.sh; \
- echo default_prerm \0 \@; \
+ echo grep 'default_prerm'
\{IPKG_INSTROOT}/lib/functions.sh /dev/null 21 {; \
+ echo . \{IPKG_INSTROOT}/lib/functions.sh; \
+ echo default_prerm \0 \@; \
+ echo } || {; \
+ echo name=\(echo \(basename \0) | cut
-d. -f1); \
+ echo [ -f
\{IPKG_INSTROOT}/usr/lib/opkg/info/\{name}.prerm-pkg ] \\; \
+ echo .
\{IPKG_INSTROOT}/usr/lib/opkg/info/\{name}.prerm-pkg \@; \
+ echo }; \
) prerm; \
chmod 0755 prerm; \
$($(1)_COMMANDS) \
--
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] ddns-scripts sleep 10 before updating?
Am 16.01.2015 um 03:07 schrieb Catalin Patulea: On Thu, Jan 15, 2015 at 3:28 PM, Christian Schoenebeck christian.schoeneb...@gmail.com wrote: I did a lot of testing with a user using satellite Internet connection. He quickly gets his IP from the modem but he needs to use a global dns server to verify his registered ip via tcp because the modem buffers all udp dns requests not looking for any timeouts. For him it takes same seconds until the connection was established to the web after getting his ip from the modem. Let me see if I understand.. so after his interface comes up, dynamic_dns_updater was getting stuck on get_registered_ip because the connection to the web is not yet up? Perhaps this could be handled by a timeout on the host/nslookup command? I also think this is an edge case - in most cases, you can call get_registered_ip immediately and it will work. The 5 minutes I tested the easy way. On my ubuntu box I ran nslookup for my own ddns-address against Google's public dns in an endless loop. Then I send out a new ip to my ddns provider via ddns-scripts and wait. The longest time it takes to have a stable answer from nslookup was 4 minutes 10 seconds. Plus reserve = 5 minutes. Also the reason why check_interval minimum is set to 5 minutes = 300 seconds in line 176 of dynamic_dns_updater.sh. I understand that the latency through Google public dns is 5 minutes, but not everyone uses Google public dns, and your test is not representative of queries for cache-cold records. I tried adding a new record to my domain to see what happens on a query that is not already in the cache. This is the same case as updating an existing DDNS entry that hasn't been accessed in a long time. The record was immediately (15 seconds, while I typed the commands) available in my DNS provider's server, my ISP's server, and 8.8.8.8. The intermediate servers didn't even know if the record exists, so they had to contact the authoritative server. Probably if I update the IP now, it will take a long time to propagate, but this is not a common case for me. What I want is that if I get a new IP/router crashes/power outage, for my IP to be updated in the authoritative DNS server as soon as possible. It is rare that I access my DDNS just before this (crash/power outage/etc.) happens, so the record will not be cached, so if I access it now, I will see the fresh IP in any DNS server. In this case the sleep 10 is the limiting factor. I think probably this is the case for most DDNS users - they probably access their records very rarely, so they are not cached, so sleep 10 is the biggest factor to how quickly their new address is visible. But I can't speak definitively about any but my case. Perhaps the sleep could be a configuration option which defaults to 0. Specific users can set it if they need it. Did you really ever run into problems because of 10 seconds delay after an outage of thousands of seconds ? What do your ddns provider think about multiple updates per minute, if the connection toggle due to errors on your wan connection. Most providers start blocking for hours after to many updates. For the moment please comment out the 4 lines starting at line 219 of dynamic_dns_updater.sh ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] ddns-scripts sleep 10 before updating?
Am 16.01.2015 um 17:50 schrieb Catalin Patulea: On Fri, Jan 16, 2015 at 4:36 AM, Christian Schoenebeck christian.schoeneb...@gmail.com wrote: Did you really ever run into problems because of 10 seconds delay after an outage of thousands of seconds ? No, but I don't want to wait until I have a problem. ddns-scripts should do the best it can to update the record quickly. What do your ddns provider think about multiple updates per minute, if the connection toggle due to errors on your wan connection. Most providers start blocking for hours after to many updates. First you said the sleep was because netifd runs the script too early. That turned out to be false. Now you're saying it's to be nice to the ddns provider - I don't think it's a problem and sleep is the wrong way to solve it anyway. As John Crispin recently said in a different patch review, using magic delays is a no go: https://lists.openwrt.org/pipermail/openwrt-devel/2015-January/030561.html That is exactly what this sleep 10 is - some arbitrary value that doesn't seem to have a specific purpose, added to fix one minority edge case - or maybe no one remembers why it was added. For the moment please comment out the 4 lines starting at line 219 of dynamic_dns_updater.sh No. I do not maintain one router, I maintain several of them. I will not go around editing dynamic_dns_updater.sh on them all, and have to do this again every time I flash a new version. I do not want to maintain a diff compared to openwrt master either, because that will just give merge headaches in the future. Please, what is the reason sleep 10 is still there? Was it because of the early netifd call - then let's just remove it. If it is only to fix the satellite user case, then maybe that use should be the one to modify dynamic_dns_updater.sh on their router. But right now, for the majority of cases, it adds a 10 second delay for no reason. I don't think this is right. Removed in 2.1.0-5 Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] ddns-scripts 2.0.1-1 breaks freedns.afraid.org?
Implemented in 2.1.0-5 including your other suggested changes. Christian Am 15.01.2015 um 06:07 schrieb Catalin Patulea: I've opened a pull request for this (and other misc fixes): https://github.com/openwrt/packages/pull/779 On Tue, Jan 13, 2015 at 9:14 AM, Christian Schoenebeck christian.schoeneb...@gmail.com wrote: I put it on the TODO list. Thanks for feedback Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] ddns-scripts sleep 10 before updating?
Am 15.01.2015 um 06:17 schrieb Catalin Patulea: On Tue, Jan 13, 2015 at 8:56 AM, Christian Schoenebeck christian.schoeneb...@gmail.com wrote: from my point of view 10 seconds to wait before sending an update to the ddns provider is not a big deal because it takes up to 5 minutes until nslookup [yourhost] 8.8.8.8 gives you back a static answer after a change. So Google's mameserver need up to 5 Minutes to sync themselves. How did you conclude about the 5 minutes? Technically caching DNS servers should respect the TTL of the original record. RFC 1035 even allows zero TTL to prevent caching. I agree that some servers may actually impose a minimum TTL, but ddns-scripts should not make any assumptions about this. In my case, I have DDNS records which are rarely accessed (are not likely to be cached by intermediate DNS servers). When a client makes a DNS request for my DDNS name, it will be forwarded the entire way to the authoritative DNS server. So the openwrt update latency dominates the delay, not TTL expiration, so it's useful for me to update ASAP after the interfaces gets an address. Are you still planning on running some tests on your side? I did some quick test. You are right that netifd calls hotplug now if ip-setup finished. I also looked into my email history and found the point where this sleep comes into the script. I did a lot of testing with a user using satellite Internet connection. He quickly gets his IP from the modem but he needs to use a global dns server to verify his registered ip via tcp because the modem buffers all udp dns requests not looking for any timeouts. For him it takes same seconds until the connection was established to the web after getting his ip from the modem. The 5 minutes I tested the easy way. On my ubuntu box I ran nslookup for my own ddns-address against Google's public dns in an endless loop. Then I send out a new ip to my ddns provider via ddns-scripts and wait. The longest time it takes to have a stable answer from nslookup was 4 minutes 10 seconds. Plus reserve = 5 minutes. Also the reason why check_interval minimum is set to 5 minutes = 300 seconds in line 176 of dynamic_dns_updater.sh. ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] ddns-scripts sleep 10 before updating?
Hi Catalin, there might be a change somewhere in the past inside netifd. When I started creating the scripts I tested with the old scripts and had seen that when the scripts try to detect local IP from the wan that it fails because no data available. from my point of view 10 seconds to wait before sending an update to the ddns provider is not a big deal because it takes up to 5 minutes until nslookup [yourhost] 8.8.8.8 gives you back a static answer after a change. So Google's mameserver need up to 5 Minutes to sync themselves. I'm currently in office, but I will do some additional tests later at home. Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] ddns-scripts 2.0.1-1 breaks freedns.afraid.org?
I put it on the TODO list. Thanks for feedback Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [Luci2] Problems since 2015-01-05-e28f8f6
Hi, I recompiled and installed Luci2 on OpenWrt x86 inside VirtualBox. I already used the previous version of LuCI2. Here my findings for the new Version using FireFox 34 installed on Xubuntu 14.10: - Login screen starts with: Wrong username or password given! - After login I got the following alert boxes: Unable to instantiate proto /luci2/proto/static.js: TypeError: L.NetworkModel is undefined Unable to instantiate proto /luci2/proto/dslite.js: TypeError: L.NetworkModel is undefined Unable to instantiate proto /luci2/proto/dhcpv6.js: TypeError: L.NetworkModel is undefined Unable to instantiate proto /luci2/proto/dhcp.js: TypeError: L.NetworkModel is undefined Unable to instantiate proto /luci2/proto/6to4.js: TypeError: L.NetworkModel is undefined Unable to instantiate proto /luci2/proto/none.js: TypeError: L.NetworkModel is undefined after this alerts the Loading data... stays permanent. The directory listing: root@OpenWrt:/www/luci2/proto# ll drwxrwxr-x2 root root 140 Jan 7 20:29 ./ drwxrwxr-x7 root root 379 Jan 7 20:29 ../ -rw-rw-r--1 root root 2878 Dec 29 19:15 6in4.js -rw-rw-r--1 root root 1943 Dec 29 19:15 6rd.js -rw-rw-r--1 root root 1022 Dec 29 19:15 6to4.js -rw-rw-r--1 root root 1827 Dec 29 19:15 dhcp.js -rw-rw-r--1 root root 1998 Dec 29 19:15 dhcpv6.js -rw-rw-r--1 root root 1342 Dec 29 19:15 dslite.js -rw-rw-r--1 root root 133 Dec 29 19:15 none.js -rw-rw-r--1 root root 3164 Dec 29 19:15 static.js root@OpenWrt:/www/luci2# ll drwxrwxr-x7 root root 379 Jan 7 20:29 ./ drwxr-xr-x5 root root 110 Jan 7 20:29 ../ -rw-rw-r--1 root root 43283 Dec 29 19:15 bootstrap.js -rw-rw-r--1 root root 66829 Jan 5 21:07 cbi.js drwxrwxr-x2 root root53 Jan 7 20:29 css/ -rw-rw-r--1 root root 927 Jan 5 21:07 firewall.js -rw-rw-r--1 root root 2429 Dec 29 19:15 html5.js drwxrwxr-x3 root root 612 Jan 7 20:29 icons/ -rw-rw-r--1 root root268381 Dec 29 19:15 jquery-1.9.1.js -rw-rw-r--1 root root 6574 Dec 29 19:15 jquery.peity.js -rw-rw-r--1 root root 13924 Jan 5 21:07 luci2.js -rw-rw-r--1 root root 30953 Jan 5 21:07 network.js drwxrwxr-x2 root root 140 Jan 7 20:29 proto/ -rw-rw-r--1 root root 4047 Dec 29 19:15 respond.min.js -rw-rw-r--1 root root 3943 Jan 5 21:07 rpc.js -rw-rw-r--1 root root 1464 Jan 5 21:07 session.js -rw-rw-r--1 root root 1801 Jan 5 21:07 system.js drwxrwxr-x2 root root 508 Jan 7 20:29 template/ -rw-rw-r--1 root root 9852 Jan 5 21:07 uci.js -rw-rw-r--1 root root 30821 Jan 5 21:07 ui.js drwxrwxr-x2 root root 489 Jan 7 20:29 view/ -rw-rw-r--1 root root 3425 Jan 5 21:07 wireless.js -rw-rw-r--1 root root 12968 Dec 29 19:15 zoneinfo.json What did I wrong ? Cheers, Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [Luci2] Problems since 2015-01-05-e28f8f6
Hi, login window now without wrong user ... and no alert boxes but still hanging at Loading data... I removed old package first and reinstalled the newly compiled 2015-01-07-09dc12a. Christian Am 07.01.2015 um 21:19 schrieb Jo-Philipp Wich: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, the proto thing should be fixed now. ~ Jow -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlStlLwACgkQdputYINPTPO0NQCfWAob5N3XcP/DTQ3GJRolhzl2 pL0AnAsgCEmtKIw8lmNTLMbTAdhfJqGd =7HDn -END PGP SIGNATURE- ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [Luci2] Problems since 2015-01-05-e28f8f6
Hi, that's it. Thanks Christian Am 07.01.2015 um 22:29 schrieb Jo-Philipp Wich: Hi, my bad - I forgot to push the updated views as well. Please try again. ~ Jow ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] dnsmasq packages
Hi, I would prefer to make it configurable like libcurl, busybox and others so select the option you need during compile. Base inside OpenWrt should be without any options, because dnsmasq is only used as IPv4 DHCP. Have you ever check the funny thing happen, if you select more than 1 (*) inside menuconfig ? You get a funny build because they are build inside the same build directory and installed in any order. So who win the install. In the past I also got broken packages, if I select more than 1 (*) or (M). NEVER select more then one inside menuconfig!!! I think the Makefile needs a redesign anyway. Christian Am 16.12.2014 um 18:25 schrieb Frank Schäfer: Hi, to be able to build dnsmasq with DNS auth and/or IPSET and/or DNSSEC support people are currently forced to enable the whole IPv6 stuff. Current package layout: dnsmasq: --- dnsmasq-dhcpv6: +DHCPv6 (depends on IPv6) dnsmasq-full: +DNS auth, +IPSET, +DHCPv6, +DNSSEC (depends on IPv6) Build sizes (checked with dnsmasq 2.72, ar71xx) are about base size: 130.8 kB IPSET: +1 kB DNS auth:+6-7 kB dhcpv6: +27.7 kB dnssec: +19 kB (incl. trust-anchors.conf) (IPv6 enabled: +4.5 kB) My suggestion would be to extend/change the package layout to dnsmasq-mini: --- dnsmasq: +DNS Auth, +IPSET dnsmasq-dhcpv6: +DNS auth, +IPSET, +DHCPv6 (depends on IPv6) dnsmasq-dnssec: +DNS auth, +IPSET, +DNSSEC dnsmasq-full: +DNS auth, +IPSET, +DHCPv6, +DNSSEC (depends on IPv6) Does that sound reasonable ? Regards, Frank Schäfer ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [procd] How to redirect STDOUT/STDERR of a started service ?
Am 14.12.2014 um 19:42 schrieb John Crispin: On 14/12/2014 19:27, Christian Schoenebeck wrote: Hi, I provided privoxy 3.0.22 package with scripts using procd to run the service. When privoxy runs in foreground it never writes to logfile. So it's required to redirect stdout and/or stderr of this started service to a file. I asked the developers of privoxy how to fix this. I got a tip to create a patch for privoxy to fix this problem but it's not supported. I think there must be a chance to give parameters to procd to redirect STDOUT/STDERR. I tried procd_append_param command '/var/log/out.log' and procd_append_param command '2/var/log/error.log' without and with single and double quotes without success. The service did not start without any errors reported neither from the service nor from procd. If I redirect from the command line everything works fine. What did I wrong ? How to debug whats going on ? Thanks for support Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel Hi, that wont work i am afraid. logging to a file is a bit quirky as the log wont rotate and eventually fill up /tmp. i will look into this during the week and add an option to redirect stdout to the syslog. John ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel Hi John, the logging problem of services like privoxy or dnsmasq and others exists also without procd. For this there is logrotate or self written scripts that do the truncate. My problems during testing was that there was no output from procd, why the process was not started. Something like syntax error or similar, either on console or inside syslog would help. I think it should be possible to redirect stdout and stderr of a by procd started process to file. This file could be /dev/null by default (like today), to /dev/stderr or /dev/stdout for console output, /var/log/file or other files or simply accept 2. as command line parameter. Then it's possible to 1:1 transfer a working command line to procd_set_param/procd_append_param command ... or if there are problems with handover via json procd_set_param stdout /dev/null(what is the default if nothing given) procd_set_param stderr /dev/null What do you think ? I don't know what is possible to code. From my point of view it's currently not mission critical I will publish a modified package for privoxy using the old scripts for the moment. Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [procd] How to redirect STDOUT/STDERR of a started service ?
Hi, I provided privoxy 3.0.22 package with scripts using procd to run the service. When privoxy runs in foreground it never writes to logfile. So it's required to redirect stdout and/or stderr of this started service to a file. I asked the developers of privoxy how to fix this. I got a tip to create a patch for privoxy to fix this problem but it's not supported. I think there must be a chance to give parameters to procd to redirect STDOUT/STDERR. I tried procd_append_param command '/var/log/out.log' and procd_append_param command '2/var/log/error.log' without and with single and double quotes without success. The service did not start without any errors reported neither from the service nor from procd. If I redirect from the command line everything works fine. What did I wrong ? How to debug whats going on ? Thanks for support Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [oldpackages] privoxy: move to github
privoxy: moved to github
Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com
---
net/privoxy/Makefile | 64
net/privoxy/files/privoxy.config | 27 -
net/privoxy/files/privoxy.init | 16 --
3 files changed, 107 deletions(-)
diff --git a/net/privoxy/Makefile b/net/privoxy/Makefile
deleted file mode 100644
index 7257d1f..000
--- a/net/privoxy/Makefile
+++ /dev/null
@@ -1,64 +0,0 @@
-#
-# Copyright (C) 2006-2013 OpenWrt.org
-#
-# This is free software, licensed under the GNU General Public License v2.
-# See /LICENSE for more information.
-#
-
-include $(TOPDIR)/rules.mk
-
-PKG_NAME:=privoxy
-PKG_VERSION:=3.0.21
-PKG_RELEASE:=1
-
-PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-stable-src.tar.gz
-PKG_SOURCE_URL:=@SF/ijbswa
-PKG_MD5SUM:=79558f2545cfcf9731f7de611646d837
-
-PKG_LICENSE:=GPLv2
-PKG_LICENSE_FILES:=LICENSE
-
-PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)-stable
-PKG_FIXUP:=autoreconf
-PKG_INSTALL:=1
-
-include $(INCLUDE_DIR)/package.mk
-
-define Package/privoxy
- SECTION:=net
- CATEGORY:=Network
- SUBMENU:=Web Servers/Proxies
- DEPENDS:=+libpcre +libpthread +zlib
- TITLE:=web proxy with advanced filtering capabilities
- URL:=http://www.privoxy.org/
-endef
-
-define Package/privoxy/description
- Privoxy is a web proxy with advanced filtering capabilities for
- protecting privacy, modifying web page content, managing cookies,
- controlling access, and removing ads, banners, pop-ups and other
- obnoxious Internet junk. Privoxy has a very flexible configuration
- and can be customized to suit individual needs and tastes. Privoxy
- has application for both stand-alone systems and multi-user networks.
-endef
-
-CONFIGURE_ARGS += \
- --sysconfdir=/etc/privoxy \
-
-MAKE_FLAGS :=
-
-define Package/privoxy/conffiles
-/etc/privoxy/config
-endef
-
-define Package/privoxy/install
- $(INSTALL_DIR) $(1)/usr/sbin
- $(CP) $(PKG_INSTALL_DIR)/usr/sbin/privoxy $(1)/usr/sbin/
- $(INSTALL_DIR) $(1)/etc/privoxy
- $(CP) $(PKG_INSTALL_DIR)/etc/privoxy/* $(1)/etc/privoxy/
- $(INSTALL_CONF) ./files/privoxy.config $(1)/etc/privoxy/config
- $(INSTALL_DIR) $(1)/etc/init.d
- $(INSTALL_BIN) ./files/privoxy.init $(1)/etc/init.d/privoxy
-endef
-
-$(eval $(call BuildPackage,privoxy))
diff --git a/net/privoxy/files/privoxy.config b/net/privoxy/files/privoxy.config
deleted file mode 100644
index 7f0b8af..000
--- a/net/privoxy/files/privoxy.config
+++ /dev/null
@@ -1,27 +0,0 @@
-confdir /etc/privoxy
-logdir /var/log
-filterfile default.filter
-logfile privoxy
-actionsfile match-all.action # Actions that are applied to all sites and maybe
overruled later on.
-actionsfile default.action # Main actions file
-#actionsfile user.action # User customizations
-listen-address 127.0.0.1:8118
-toggle 1
-enable-remote-toggle 1
-enable-remote-http-toggle 0
-enable-edit-actions 1
-enforce-blocks 0
-buffer-limit 4096
-forwarded-connect-retries 0
-accept-intercepted-requests 0
-allow-cgi-request-crunching 0
-split-large-forms 0
-keep-alive-timeout 300
-socket-timeout 300
-permit-access 192.168.1.0/24
-debug 1# show each GET/POST/CONNECT request
-debug 4096 # Startup banner and warnings
-debug 8192 # Errors - *we highly recommended enabling this*
-#admin-address privoxy-ad...@example.com
-#proxy-info-url http://www.example.com/proxy-service.html
-
diff --git a/net/privoxy/files/privoxy.init b/net/privoxy/files/privoxy.init
deleted file mode 100644
index 78c29b4..000
--- a/net/privoxy/files/privoxy.init
+++ /dev/null
@@ -1,16 +0,0 @@
-#!/bin/sh /etc/rc.common
-# Copyright (C) 2006-2011 OpenWrt.org
-
-START=80
-STOP=80
-
-SERVICE_USE_PID=1
-
-start() {
- service_start /usr/sbin/privoxy --pidfile /var/run/privoxy.pid \
- /etc/privoxy/config
-}
-
-stop() {
- service_stop /usr/sbin/privoxy
-}
--
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH][base-files] functions.sh: default_postinst() - create user:group first (resend)
create user:group before running postinst-pkg
Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com
---
package/base-files/Makefile | 2 +-
package/base-files/files/lib/functions.sh | 6 --
2 files changed, 5 insertions(+), 3 deletions(-)
diff --git a/package/base-files/Makefile b/package/base-files/Makefile
index aeba973..3c453b5 100644
--- a/package/base-files/Makefile
+++ b/package/base-files/Makefile
@@ -11,7 +11,7 @@ include $(INCLUDE_DIR)/version.mk
include $(INCLUDE_DIR)/kernel.mk
PKG_NAME:=base-files
-PKG_RELEASE:=156
+PKG_RELEASE:=157
PKG_FILE_DEPENDS:=$(PLATFORM_DIR)/ $(GENERIC_PLATFORM_DIR)/base-files/
PKG_BUILD_DEPENDS:=opkg/host
diff --git a/package/base-files/files/lib/functions.sh
b/package/base-files/files/lib/functions.sh
index d53be3e..9d98fb0 100755
--- a/package/base-files/files/lib/functions.sh
+++ b/package/base-files/files/lib/functions.sh
@@ -173,7 +173,6 @@ default_prerm() {
default_postinst() {
local name rusers
name=$(echo $(basename $1) | cut -d. -f1)
- [ -f ${IPKG_INSTROOT}/usr/lib/opkg/info/${name}.postinst-pkg ] ( .
${IPKG_INSTROOT}/usr/lib/opkg/info/${name}.postinst-pkg )
rusers=$(grep Require-User:
${IPKG_INSTROOT}/usr/lib/opkg/info/${name}.control)
[ -n $rusers ] {
local user group uid gid
@@ -212,6 +211,10 @@ default_postinst() {
done
done
}
+
+ [ -f ${IPKG_INSTROOT}/usr/lib/opkg/info/${name}.postinst-pkg ] ( .
${IPKG_INSTROOT}/usr/lib/opkg/info/${name}.postinst-pkg )
+ [ -n ${IPKG_INSTROOT} ] || rm -f /tmp/luci-indexcache 2/dev/null
+
[ $PKG_UPGRADE = 1 ] || for i in `cat
${IPKG_INSTROOT}/usr/lib/opkg/info/${name}.list | grep ^/etc/init.d/`; do
[ -n ${IPKG_INSTROOT} ] $(which bash)
${IPKG_INSTROOT}/etc/rc.common ${IPKG_INSTROOT}$i enable; \
[ -n ${IPKG_INSTROOT} ] || {
@@ -219,7 +222,6 @@ default_postinst() {
$i start
}
done
- [ -n ${IPKG_INSTROOT} ] || rm -f /tmp/luci-indexcache 2/dev/null
return 0
}
--
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [base-files] functions.sh: default_postinst() - create user:group first
1.) create user:group
2.) run postinst-pkg
now you can change owner and permission of installed files and directories
in postinst-pkg (Makefile/postinst)
otherwise you can't
3.) clear luci cache
4.) enable/start service
Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com
---
package/base-files/files/lib/functions.sh | 7 +--
1 file changed, 5 insertions(+), 2 deletions(-)
diff --git a/package/base-files/files/lib/functions.sh
b/package/base-files/files/lib/functions.sh
index d53be3e..3d987cf 100755
--- a/package/base-files/files/lib/functions.sh
+++ b/package/base-files/files/lib/functions.sh
@@ -173,7 +173,7 @@ default_prerm() {
default_postinst() {
local name rusers
name=$(echo $(basename $1) | cut -d. -f1)
- [ -f ${IPKG_INSTROOT}/usr/lib/opkg/info/${name}.postinst-pkg ] ( .
${IPKG_INSTROOT}/usr/lib/opkg/info/${name}.postinst-pkg )
+
rusers=$(grep Require-User:
${IPKG_INSTROOT}/usr/lib/opkg/info/${name}.control)
[ -n $rusers ] {
local user group uid gid
@@ -212,6 +212,10 @@ default_postinst() {
done
done
}
+
+ [ -f ${IPKG_INSTROOT}/usr/lib/opkg/info/${name}.postinst-pkg ] ( .
${IPKG_INSTROOT}/usr/lib/opkg/info/${name}.postinst-pkg )
+ [ -n ${IPKG_INSTROOT} ] || rm -f /tmp/luci-indexcache 2/dev/null
+
[ $PKG_UPGRADE = 1 ] || for i in `cat
${IPKG_INSTROOT}/usr/lib/opkg/info/${name}.list | grep ^/etc/init.d/`; do
[ -n ${IPKG_INSTROOT} ] $(which bash)
${IPKG_INSTROOT}/etc/rc.common ${IPKG_INSTROOT}$i enable; \
[ -n ${IPKG_INSTROOT} ] || {
@@ -219,7 +223,6 @@ default_postinst() {
$i start
}
done
- [ -n ${IPKG_INSTROOT} ] || rm -f /tmp/luci-indexcache 2/dev/null
return 0
}
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [BROKEN][package-ipkg.mk] postinst, prerm, conffiles from original makefile killed
Original content of Makefile postinst and prerm and conffiles is not moved to
final package.
Content of postinst-pkg : ostinst
Content of prerm-pkg: rerm
Content of conffiles: onffiles
in the log you find:
echo onffiles conffiles; echo ostinst-pkg postinst-pkg; echo rerm-pkg
prerm-pkg;
.../staging_dir/host/bin/find: `onffiles': No such file or directory
mv: cannot stat 'CONTROL/conffiles.resolved': No such file or directory
chmod: cannot access 'CONTROL/conffiles': No such file or directory
Full log-output:
...
export CROSS=i486-openwrt-linux-uclibc- NO_RENAME=1 ;
NM=i486-openwrt-linux-uclibc-nm
STRIP=/home/christiana/owbuild/trunk/staging_dir/host/bin/sstrip
STRIP_KMOD=/home/christiana/owbuild/trunk/scripts/strip-kmod.sh
/home/christiana/owbuild/trunk/scripts/rstrip.sh
/home/christiana/owbuild/trunk/build_dir/target-i386_i486_uClibc-0.9.33.2/ddns-scripts/ipkg-all/ddns-scripts
(cd
/home/christiana/owbuild/trunk/build_dir/target-i386_i486_uClibc-0.9.33.2/ddns-scripts/ipkg-all/ddns-scripts/CONTROL;
( echo $CONTROL; printf Description: ; echo $DESCRIPTION | sed -e
's,^[[:space:]]*, ,g'; ) control; chmod 644 control; ( echo #!/bin/sh; echo
[ \\${IPKG_NO_SCRIPT}\ = \1\ ] exit 0; echo .
\${IPKG_INSTROOT}/lib/functions.sh; echo default_postinst \$0 \$@; )
postinst; ( echo #!/bin/sh; echo . \${IPKG_INSTROOT}/lib/functions.sh; echo
default_prerm \$0 \$@; ) prerm; chmod 0755 prerm; echo onffiles
conffiles; echo ostinst-pkg postinst-pkg; echo rerm-pkg prerm-pkg; )
install -d -m0755 /home/christiana/owbuild/trunk/bin/x86/packages/packages
/home/christiana/owbuild/trunk/staging_dir/host/bin/ipkg-build -c -o 0 -g 0
/home/christiana/owbuild/trunk/build_dir/target-i386_i486_uClibc-0.9.33.2/ddns-scripts/ipkg-all/ddns-scripts
/home/christiana/owbuild/trunk/bin/x86/packages/packages
/home/christiana/owbuild/trunk/staging_dir/host/bin/find: `onffiles': No such
file or directory
mv: cannot stat 'CONTROL/conffiles.resolved': No such file or directory
chmod: cannot access 'CONTROL/conffiles': No such file or directory
Packaged contents of
/home/christiana/owbuild/trunk/build_dir/target-i386_i486_uClibc-0.9.33.2/ddns-scripts/ipkg-all/ddns-scripts
into
/home/christiana/owbuild/trunk/bin/x86/packages/packages/ddns-scripts_2.0.1-9_all.ipk
...
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [BROKEN][package-ipkg.mk] postinst, prerm, conffiles from original makefile killed
Hi Jow,
postinst and prerm are copied shell scripts
and executed on the box and not by make
thats the reason for #!/bin/sh required on the first line
so $$ not needed. right ?
Thanks
Christian
Am 24.10.2014 um 11:32 schrieb Jo-Philipp Wich:
Hi Christian,
should be fixed with 43017 - thanks for reporting.
Btw, there's two little problems with the prerm postinst defines in
the ddns-scripts Makefile:
First you should not indent the script code, otherwise the final script
file will have leading spaces on each line.
Second you must quote any $ as $$ otherwise it is interpolated by
make and not output to the file, e.g. `[ -n ${IPKG_INSTROOT} ]`
becomes `[ -n ]` therfore you need to write it as
`[ -n $${IPKG_INSTROOT} ]`.
~ Jow
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [BROKEN][package-ipkg.mk] postinst, prerm, conffiles from original makefile killed
Mea culpa! I mixed something up Christian Am 24.10.2014 um 13:42 schrieb Jo-Philipp Wich: Hi. postinst and prerm are copied shell scripts and executed on the box and not by make thats the reason for #!/bin/sh required on the first line so $$ not needed. right ? Nope, not right - it is needed. Make is interpreting the stuff between define .. endef - you need to escape $ in any case. ~ Jow ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH] [ca-certificates] Update to Version 20141019
Update to Version 20141019 Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com --- package/system/ca-certificates/Makefile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package/system/ca-certificates/Makefile b/package/system/ca-certificates/Makefile index 08a853f..0caf027 100644 --- a/package/system/ca-certificates/Makefile +++ b/package/system/ca-certificates/Makefile @@ -7,12 +7,12 @@ include $(TOPDIR)/rules.mk PKG_NAME:=ca-certificates -PKG_VERSION:=20140325 +PKG_VERSION:=20141019 PKG_SOURCE:=$(PKG_NAME)_$(PKG_VERSION).tar.xz -PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME) +PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION) PKG_SOURCE_URL:=http://ftp.debian.org/debian/pool/main/c/ca-certificates -PKG_MD5SUM:=0436aba482091da310bd762e1deca8b4 +PKG_MD5SUM:=f619282081c8bfc65ea64c37fa5285ed PKG_INSTALL:=1 -- ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] Default dhcp (client) hostname is unset - Luci implies $(hostname)
Am 08.10.2014 um 21:07 schrieb Justin Vallon: On 10/8/14 4:47 AM, Christian Schoenebeck wrote: Inside [buildroot]/feeds/luci/modules/base/luasrc/model/cbi/admin_network/proto_dhcp.lua you find the definition hostname.placeholder = luci.sys.hostname(). It's not default so its never written/used to configuration. From the LuCI point of view placeholder is a sample. (light grey) If it's a default (also used be the system behind LuCI) then its written into the field as if the user write something into the field. Now I see what you mean. It is confusing, though, from a UI because sometimes the ghost values are defaults and sometimes samples. I don't think your last statement is accurate, because there are default values that are not saved in uci. 1) DHCP DNS / General Settings: DNS forwardings /example.org/10.1.2.3 is clearly a sample. 2) ... / Advanced Settings: DNS server port 53, but dhcp.@dnsmasq[0].port is unset. 53 is the default DNS port. Setting it causes dhcp.*.port to be set. 3) ... / Advanced Settings : Max concurrent queries 150, but no dhcp.@dnsmasq[0].* value. 150 is the default value (app default) The only way to tell the difference between a sample and a default would be to know whether the value is reasonable. In the case of DHCP hostname, the default seems reasonable, so it is confusing when udhcpc does not send $HOSTNAME. In 5434f9ac.3050...@openwrt.org, Jow said that some dhcp servers choke on dhcp hostnames. Then, if 99% of OpenWRT configurations are probably where the upstream dhcp server is external, sending a hostname will do more harm than good. Then, back to the UI. Since it is hard to distinguish between default value and example value in DHCP client hostname, can it be changed to empty-string? I tried the following: [[[ git://git.openwrt.org/project/luci.git diff --git a/modules/base/luasrc/model/cbi/admin_network/proto_dhcp.lua b/modules/base/luasrc/model/cbi/admin_network/proto_dhcp.lua index fe3fec6..62047b5 100644 --- a/modules/base/luasrc/model/cbi/admin_network/proto_dhcp.lua +++ b/modules/base/luasrc/model/cbi/admin_network/proto_dhcp.lua @@ -20,7 +20,6 @@ local bcast, defaultroute, peerdns, dns, metric, clientid, vendorclass hostname = section:taboption(general, Value, hostname, translate(Hostname to send when requesting DHCP)) -hostname.placeholder = luci.sys.hostname() hostname.datatype= hostname ]]] About the need or not of a hostname for dhcp I can't say anything. Missing knowledge. About LuCI and the applications/scripts behind I can say that the default is normally not set in the config because it's done in the scripts/apps as default. As stated by Jow something like none doesn't work. The placeholder is a good thing to show the user what kind of entry is needed to put in. It's completely removed (no longer displayed) if you start to edit the field. The default is written to the field and you can edit it as you like because it's a text field. ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [luci] [DISCUSSION] How to support LuCI applications not in OpenWrt packages repository
Am 07.10.2014 um 11:49 schrieb Jo-Philipp Wich: Hi. In principle I have no objections but we need to figure out a way on how to deal with translation files. If stuff is split out of the LuCI repo you have to take of that yourself. ~ Jow ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel Hi, language support could be a problem, but what I tested for my ddns-scripts-luci (not yet published) you need three files from LuCI system files located inside ./build directory. - i18n-scan.pl to scan .lua and .js files for strings that need to be translated (creating the .pot file). - i18n-po2lmo.pl together with - po2lmo (binary) to scan the po/[lang] directories for creation of the final [app].[lang].lmo files. Both .pl files need some modifications to reflect the OpenWrt build structure. This should not be a real show-stopper. If the .pot template exists, everybody can edit the .po file easily and publish it via git. If a new .pot template is create due to code changes you can verify the .po against .pot and only need to update some translations. The other option is to find a way to make the LuCI distribution system more public like OpenWrt base and packages system. What I mean, if I push an update to OpenWrt, it takes max 24 hours until merged to trunk. My offer of a patch that rebuild current luci-app-ddns is pending at luci@lists... since 21. Sep. I also opened up a ticket at TRAC not knowing where it is hanging around I wrote a fix to OpenWrt TRAC Ticket #18018 reported on 03.Oct. which fixes problems in current 14.07 RELEASE and trunk. I resend on 04.Oct. - today is the 07.Oct. nothing happen. But with direct access, 2 fixes were merged into LuCI trunk. Sorry I'm German and there might be some wrong words inside my English. I want to work together with all of you to find a way to support our users and continue to build a more than brilliant system. Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [RESEND] Re: Please could somebody implement this short term [OpenWrt] #18018: luci-app-ddns is missing the event interface option
Am 03.10.2014 um 14:53 schrieb Jo-Philipp Wich: Hi, thanks for the patch. however the description still looks grammatically wrong: On which interface up should start the ddns script process. Maybe it can be better written as Trigger DDNS update when this interface is started Ideas? ~ Jow ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel Hi, you are right, but it's not my English, the three lines are simply copied from luci-0.11 branch, so hopefully all existing LuCI translations will work without changes. It's a quick patch to make the system running for bb14.07 users. Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [DISCUSSION] How to support LuCI applications not in OpenWrt packages repository
Hi, we got a new ticket inside OpenWrt Ticket #18018 with problems inside LuCI app. This is normally not an OpenWrt ticket it's a LuCI ticket, but the user don't know. If the user try to post the ticket at LuCI trac it takes weeks before the ticket is reported by LuciTrac to the mailing lists. So for a me as an external developer there is no chance to help quick. LuCi trac is also no good choice to send patches or possibly new functionality. LuCI trac has problems to accept file attachments when creating a new ticket. LuCI trac gives no chance to correct/edit a ticket or append a comment if you just create it. From my point of view LuCi trac is more then awful including used CHAPTCHA. Sending patches or new functionality to luci mailing list is also not a choice because there is no guarantee that the code is implemented short term. My idea is to move code of LuCI applications like tinyproxy, samba, hd-idle, ddns-scripts, . to OpenWrt/packages as samba/samba-luci, tinyproxy/tinyproxy-luci or ddns-scripts/ddns-scripts-luci. The mwan3 package already doing this. I think this is the best way, because openwrt/packages are moving fast forward and needed changes to the corresponding LuCI apps needs to be in sync. My port/move for luci-app-ddns is ready for take off. What do you think ? Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] Please could somebody implement this short term [OpenWrt] #18018: luci-app-ddns is missing the event interface option
Am 03.10.2014 um 09:31 schrieb OpenWrt: #18018: luci-app-ddns is missing the event interface option -+--- Reporter: techstep@… | Owner: developers Type: defect | Status: new Priority: normal | Milestone: Component: packages|Version: Barrier Breaker 14.07 Resolution: | Keywords: luci-app-ddns -+--- Comment (by chris5560): Attached patch can be used for luci-0.12 AND luci-trunk I current luci-trunk is the same error. It's an svn patch for luci svn Christian -- Ticket URL: https://dev.openwrt.org/ticket/18018#comment:1 OpenWrt http://openwrt.org Opensource Wireless Router Technology Hi, please could somebody implement this patch short term as backport to LuCI 0.12 and replace it inside BB14.07 packages. Many thanks Christian Index: applications/luci-ddns/luasrc/model/cbi/ddns/ddns.lua === --- applications/luci-ddns/luasrc/model/cbi/ddns/ddns.lua (Revision 10533) +++ applications/luci-ddns/luasrc/model/cbi/ddns/ddns.lua (Arbeitskopie) @@ -26,6 +26,10 @@ s:option(Flag, enabled, translate(Enable)) +interface = s:option(ListValue, interface, translate(Event interface), translate(On which interface up should start the ddns script process.)) +luci.tools.webadmin.cbi_add_networks(interface) +interface.default = wan + svc = s:option(ListValue, service_name, translate(Service)) svc.rmempty = false svc.default = dyndns.org ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] Please could somebody implement this short term [OpenWrt] #18018: luci-app-ddns is missing the event interface option
Am 03.10.2014 um 12:24 schrieb Jo-Philipp Wich: Whats the meaning of this option? The description text is awful and since I do not know what it is supposed to do I cannot write a proper one. Also a signed-off-by would be good. ~ Jow ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel Hi Jow, The original code in luci-0.11 used for AA12.09 is your code. The code inside luci-0.12 and luci-trunk was changed in 2013 by Manuel Munz freifunk at somakoma dot de What happened in the meanwhile with the code, I don't know. I only copy 3 lines of code from 0.11 to 0.12. The (re)attached patch, brings back the event interface to luci-app-ddns. Without option interface set, ddns-scripts will never work. Without setting the event interface, a user using LuCi WebUI has no chance to use Dynamic DNS without hack the config from console, because the ddns-scripts behind it will not work. Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com --- Index: applications/luci-ddns/luasrc/model/cbi/ddns/ddns.lua === --- applications/luci-ddns/luasrc/model/cbi/ddns/ddns.lua (Revision 10533) +++ applications/luci-ddns/luasrc/model/cbi/ddns/ddns.lua (Arbeitskopie) @@ -26,6 +26,10 @@ s:option(Flag, enabled, translate(Enable)) +interface = s:option(ListValue, interface, translate(Event interface), translate(On which interface up should start the ddns script process.)) +luci.tools.webadmin.cbi_add_networks(interface) +interface.default = wan + svc = s:option(ListValue, service_name, translate(Service)) svc.rmempty = false svc.default = dyndns.org Index: applications/luci-ddns/luasrc/model/cbi/ddns/ddns.lua === --- applications/luci-ddns/luasrc/model/cbi/ddns/ddns.lua (Revision 10533) +++ applications/luci-ddns/luasrc/model/cbi/ddns/ddns.lua (Arbeitskopie) @@ -26,6 +26,10 @@ s:option(Flag, enabled, translate(Enable)) +interface = s:option(ListValue, interface, translate(Event interface), translate(On which interface up should start the ddns script process.)) +luci.tools.webadmin.cbi_add_networks(interface) +interface.default = wan + svc = s:option(ListValue, service_name, translate(Service)) svc.rmempty = false svc.default = dyndns.org ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] Please could somebody implement this short term [OpenWrt] #18018: luci-app-ddns is missing the event interface option
Am 03.10.2014 um 14:53 schrieb Jo-Philipp Wich: Hi, thanks for the patch. however the description still looks grammatically wrong: On which interface up should start the ddns script process. Maybe it can be better written as Trigger DDNS update when this interface is started Ideas? ~ Jow ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel Hi, you are right, but it's not my English, the three lines are simply copied from luci-0.11 branch, so hopefully all existing LuCI translations will work without changes. It's a quick patch to make the system running for bb14.07 users. Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] ddns-scripts: add service two-dns.de
Am 29.09.2014 um 13:04 schrieb Martin Röcker: Hi, Im using the free dynamic DNS service from twodns.de. Maybe it might be interesting for other OpenWrt users as well so I send you this tiny patch. Martin Pull request #374 created Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [PATCH 3/4] Run c_hash on the certificates
Am 25.09.2014 um 12:24 schrieb Cristian Morales Vega: On 24 September 2014 21:40, Christian Schoenebeck christian.schoeneb...@gmail.com wrote: curl and wget works fine with this as long as they have hashes to look at. I tried and if I don't build curl with --with-ca-path this command (curl https://www.google.com;) fails. It works for you??? As far as I understand curl would need to call gnutls_certificate_set_x509_system_trust (GnuTLS) or SSL_CTX_set_default_verify_paths (OpenSSL) for it to use the system certificates. And it doesn't. (apparently PolarSSL doesn't have an equivalent?) You are right either you hard code during build or you use --capath parameter. I prefere --capath parameter in ddns-scripts. But if it's hard coded during build is no problem because it's build inside OpenWrt and CA-Certificates installs to /etc/ssl/certs. Is there a chance to do the same on Wget package ?? ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH] [package]base-files: default_postinst() force clear luci-indexcache
Inside every LuCI package you need to clear luci-indexcache and
sometimes when installing non LuCI pacakges it's also needed to clear
it. Easier put it into default_postinst().
Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com
---
package/base-files/files/lib/functions.sh | 1 +
1 file changed, 1 insertion(+)
diff --git a/package/base-files/files/lib/functions.sh
b/package/base-files/files/lib/functions.sh
index fafb7a3..19c7596 100755
--- a/package/base-files/files/lib/functions.sh
+++ b/package/base-files/files/lib/functions.sh
@@ -204,6 +204,7 @@ default_postinst() {
$i start
}
done
+ [ -n ${IPKG_INSTROOT} ] || rm -f /tmp/luci-indexcache 2/dev/null
return 0
}
--
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [PATCH 3/4] Run c_hash on the certificates
Am 24.09.2014 um 16:15 schrieb Cristian Morales Vega: It's needed for OpenSSL to find them. Signed-off-by: Cristian Morales Vega crist...@samknows.com --- package/system/ca-certificates/Makefile | 3 +++ 1 file changed, 3 insertions(+) diff --git a/package/system/ca-certificates/Makefile b/package/system/ca-certificates/Makefile index cd29c0a..492cbb5 100644 --- a/package/system/ca-certificates/Makefile +++ b/package/system/ca-certificates/Makefile @@ -14,6 +14,8 @@ PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME) PKG_SOURCE_URL:=http://ftp.debian.org/debian/pool/main/c/ca-certificates PKG_MD5SUM:=0436aba482091da310bd762e1deca8b4 +PKG_BUILD_DEPENDS:=openssl-util/host + PKG_INSTALL:=1 include $(INCLUDE_DIR)/package.mk @@ -34,6 +36,7 @@ endef define Package/ca-certificates/install $(INSTALL_DIR) $(1)/etc/ssl/certs $(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/share/ca-certificates/*/*.pem $(1)/etc/ssl/certs/ + c_rehash $(1)/etc/ssl/certs/ endef $(eval $(call BuildPackage,ca-certificates)) Hi Cristian, I already offered attached patch to build hashes during build of ca-certificate package. I'm using this patch for my own because it's not part of trunk. curl and wget works fine with this as long as they have hashes to look at. I'm not sure, but it makes no diff if file extension is pem or cer. Christian Date: Sun, 20 Jul 2014 10:48:50 +0200 Subject: [PATCH] [package] ca-certificates: create symbolic link for certificate hashes Implementing add-cert.sh functionality described at http://wiki.openwrt.org/doc/howto/wget-ssl-certs into Makefile otherwise you need to create symbolic links for certificate hashes yourself. Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com --- package/system/ca-certificates/Makefile | 9 + 1 file changed, 9 insertions(+) diff --git a/package/system/ca-certificates/Makefile b/package/system/ca-certificates/Makefile index 7f38c86..08a853f 100644 --- a/package/system/ca-certificates/Makefile +++ b/package/system/ca-certificates/Makefile @@ -34,6 +34,15 @@ endef define Package/ca-certificates/install $(INSTALL_DIR) $(1)/etc/ssl/certs $(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/share/ca-certificates/*/*.crt $(1)/etc/ssl/certs/ + + for CERTFILE in `ls -1 $(1)/etc/ssl/certs`; do \ + HASH=`openssl x509 -hash -noout -in $(1)/etc/ssl/certs/CERTFILE` ; \ + SUFFIX=0 ; \ + while [ -h $(1)/etc/ssl/certs/HASH.SUFFIX ]; do \ + let SUFFIX += 1 ; \ + done ; \ + ln -s CERTFILE $(1)/etc/ssl/certs/HASH.SUFFIX ; \ + done endef $(eval $(call BuildPackage,ca-certificates)) ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [patch] [package] ca-certificates: create symbolic link for certificate hashes
Am 20.07.2014 09:06, schrieb Felix Fietkau: On 2014-07-19 12:16, Christian Schoenebeck wrote: From: Christian Schoenebeck christian.schoeneb...@gmail.com Date: Sat, 19 Jul 2014 11:14:01 +0200 Subject: ca-certificates: create symbolic link for certificate hashes Implementing add-cert.sh functionality discribed at http://wiki.openwrt.org/doc/howto/wget-ssl-certs into Makefile otherwise you need to create symbolic links for certificate hashes yourself. Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com --- package/system/ca-certificates/Makefile | 13 + 1 file changed, 13 insertions(+) diff --git a/package/system/ca-certificates/Makefile b/package/system/ca-certificates/Makefile index 7f38c86..534c38b 100644 --- a/package/system/ca-certificates/Makefile +++ b/package/system/ca-certificates/Makefile @@ -34,6 +34,19 @@ endef define Package/ca-certificates/install $(INSTALL_DIR) $(1)/etc/ssl/certs $(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/share/ca-certificates/*/*.crt $(1)/etc/ssl/certs/ + +OPENSSL=/usr/bin/openssl ; \ +CERTDIR=$(1)/etc/ssl/certs ; \ The use of shell variables here is unnecessary. make variables are more convenient because you don't need . Also, please don't hardcode the openssl path. OpenWrt build prereq checks already test if OpenSSL is installed, so you can safely assume that it is available. Just call 'openssl' without specifying a path. - Felix Patch rebuilded and tested on WNDR3800 and VirtualBox x86 - Christian From: Christian Schoenebeck christian.schoeneb...@gmail.com Date: Sun, 20 Jul 2014 10:48:50 +0200 Subject: [PATCH] [package] ca-certificates: create symbolic link for certificate hashes Implementing add-cert.sh functionality described at http://wiki.openwrt.org/doc/howto/wget-ssl-certs into Makefile otherwise you need to create symbolic links for certificate hashes yourself. Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com --- package/system/ca-certificates/Makefile | 9 + 1 file changed, 9 insertions(+) diff --git a/package/system/ca-certificates/Makefile b/package/system/ca-certificates/Makefile index 7f38c86..08a853f 100644 --- a/package/system/ca-certificates/Makefile +++ b/package/system/ca-certificates/Makefile @@ -34,6 +34,15 @@ endef define Package/ca-certificates/install $(INSTALL_DIR) $(1)/etc/ssl/certs $(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/share/ca-certificates/*/*.crt $(1)/etc/ssl/certs/ + + for CERTFILE in `ls -1 $(1)/etc/ssl/certs`; do \ + HASH=`openssl x509 -hash -noout -in $(1)/etc/ssl/certs/CERTFILE` ; \ + SUFFIX=0 ; \ + while [ -h $(1)/etc/ssl/certs/HASH.SUFFIX ]; do \ + let SUFFIX += 1 ; \ + done ; \ + ln -s CERTFILE $(1)/etc/ssl/certs/HASH.SUFFIX ; \ + done endef $(eval $(call BuildPackage,ca-certificates)) ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] for-14.07 [packages] xinetd: ident-bind.patch copy from trunk ??
Hi Jonathan, could you please copy xinetd: 004-ident-bind.patch also to 14.07 ? Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [packages] ddns-scripts: New Version ready for contribution incl. new LuCI Application
Hi, I prepared a new Version of ddns-scripts incl. the LuCI Application. NEW in scripts: - IPv6 support - force communication to IPv4 or IPv6 only - DNS server support - using BIND host if installed - DNS requests via TCP - Proxy server support - log file support - support to run once NEW in LuCI Application: - Status Entry in System-Status - Configuration Overview - Tabbed Details with log-file viewer tab - support for above additional parameters Both working with existing /etc/config/ddns configuration. New functionality uses new options. Inside Luci App and inside scripts all settings are verified before saved to config / before starting main loop. But because the 2 main scripts dynamic_dns_functions.sh and dynamic_dns_updater.sh are rewritten and the LuCI App uses parts of dynamic_dns_functions.sh to verify settings and has many new translations it does not work with the old scripts. I would prefer to contribute as new package ddns-scripts-v2 and luci-ddns-v2 inside LuCI application tree. Before I do, I would like to ask if this fulfill your new packages policies. Or should I prepare a (full) replacement of existing ddns-scripts and luci-ddns inside TRUNK of OpenWrt AND LuCI Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [Issue] busybox: template nc: NO OPT l!
I compiled busybox 1.22.1 from current trunk with various (custom) settings for netcat template and find out following results: without any options/extension - works fine only server options (-l) - works fine only extensions (-eiw and -f FILE)- works fine only 1.10 compatibility (+2.5k) - produce error NO OPT l! and nc did not function if selecting 1.10 compatibility (+2.5k) AND server options (-l) with or without extensions (-eiw and -f FILE) works fine. Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [oldpackages] hd-idle: enable_debug block boot process
From: Christian Schoenebeck christian.schoeneb...@gmail.com
Date: Mon, 28 Jul 2014 12:10:31 +0200
Subject: [PATCH] [oldpackages] hd-idle: enable_debug block boot process
enable_debug will set parameter -dDebug mode.
This will prevent hd-idle from becoming a daemon and print debugging
info to stdout/stderr. (see http://hd-idle.sourceforge.net/ )
During boot or (re-)started via LuCI the system will hang.
Starting with /etc/init.d/hd-idle start will give no output.
This parameter should be completely removed.
Increased PKG_RELEASE version.
Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com
---
utils/hd-idle/Makefile | 2 +-
utils/hd-idle/files/hd-idle.config | 1 -
utils/hd-idle/files/hd-idle.init | 1 -
3 files changed, 1 insertion(+), 3 deletions(-)
diff --git a/utils/hd-idle/Makefile b/utils/hd-idle/Makefile
index 981b884..e854c1e 100644
--- a/utils/hd-idle/Makefile
+++ b/utils/hd-idle/Makefile
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=hd-idle
PKG_VERSION:=1.04
-PKG_RELEASE:=1
+PKG_RELEASE:=2
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tgz
PKG_SOURCE_URL:=@SF/$(PKG_NAME)
diff --git a/utils/hd-idle/files/hd-idle.config
b/utils/hd-idle/files/hd-idle.config
index 4e22c3b..dbbd358 100644
--- a/utils/hd-idle/files/hd-idle.config
+++ b/utils/hd-idle/files/hd-idle.config
@@ -1,6 +1,5 @@
config 'hd-idle'
option 'disk' 'sda'
- option 'enable_debug' '0'
option 'enabled' '0'
option 'idle_time_unit' 'minutes'
option 'idle_time_interval' '10'
diff --git a/utils/hd-idle/files/hd-idle.init b/utils/hd-idle/files/hd-idle.init
index 1abf232..b8ce5cf 100644
--- a/utils/hd-idle/files/hd-idle.init
+++ b/utils/hd-idle/files/hd-idle.init
@@ -64,7 +64,6 @@ start_service() {
config_get interval $section idle_time_interval
config_get unit $section idle_time_unit
append_string $section disk -a
- append_bool $section enable_debug -d
config_get_bool enabled $section enabled '1'
[ $enabled -gt 0 ] || return 1
service_start /usr/bin/hd-idle $args -i $(compute_seconds $interval
$unit)
---
Diese E-Mail ist frei von Viren und Malware, denn der avast! Antivirus Schutz
ist aktiv.
http://www.avast.com
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] ddns-scripts: currently no MAINTAINER defined
Hi, I would offer to do the job, but I down know what I need to do. What are the requirements? - technically (hardware/software equipment) - knowledge (I don't call myself a programmer) - permissions to which development environments I modified ddns-scripts and luci-app-ddns for many new functionality as described in openwrt forum https://forum.openwrt.org/viewtopic.php?pid=235338#p235338 - IPv6 support - Proxy Support - DNS-Server support - LuCI App redesign including status in Status-Overview I uploaded a set of files via https://dev.openwrt.org/ticket/17139 knowing that only patches needs to be implemented. Sorry I misused Ticket-System but I have no free private web-space to offer files for download. Currently I started to modify the LuCI language files for German translation. If done, I will upload ddns-scripts patches to Github packages. For me it's current unclear how to offer updates to luci-app-ddns - via svn as described at luci.subsignal.org and luci ticket system - via openwrt ticket system - via this mailing list as [PATCH]luci-app-ddns: xxx - ?? Thanks for your help. Christian ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH][packages] lighttpd: errorlog failed if running as non root user
From: Christian Schoenebeck christian.schoeneb...@gmail.com
Date: Tue, 22 Jul 2014 19:55:43 +0200
Subject: [PATCH][packages] lighttpd: errorlog failed if running as non root user
(log.c.118) opening errorlog '/var/log/lighttpd/server.log' failed: Permission
denied
if running as non root user (what's should be the default on web-servers).
Fix: create log directory only if not exist and chmod 777 to allow anyone
to write and create files inside default log directory
Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com
---
net/lighttpd/files/lighttpd.init | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/net/lighttpd/files/lighttpd.init b/net/lighttpd/files/lighttpd.init
index d73a5da..b318a02 100644
--- a/net/lighttpd/files/lighttpd.init
+++ b/net/lighttpd/files/lighttpd.init
@@ -6,7 +6,8 @@ SERVICE_USE_PID=1
START=50
start() {
- mkdir -m 0755 -p /var/log/lighttpd
+ [ -d /var/log/lighttpd ] || mkdir -p /var/log/lighttpd
+ chmod 0777 /var/log/lighttpd
service_start /usr/sbin/lighttpd -f /etc/lighttpd/lighttpd.conf
}
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] luci-app-minidlna disables minidlna?
Am 21.07.2014 11:18, schrieb Bruno Randolf:
Hi Garbor,
In luci-app-mindlna we find the following in
/etc/uci-defaults/luci-minidlna:
3 /etc/init.d/minidlna enabled {
4 /etc/init.d/minidlna stop
5 /etc/init.d/minidlna disable
6 }
Which disables MiniDLNA startup and is a quite unexpected side-effect of
installing a web-interface plugin, don't you think? Any reason for
this? Can this be removed?
bruno
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Hi,
found some other luci-apps enabling the service during package installation.
I think luci-apps should leave the current status of installed services
untouched.
If a service is configured and luci installation disable the service thats not
good.
In the other case (i.e. luci-app-samba) enabling a service during installation
or
during build via make or imagebuilder is also not good because the service is
not yet configured.
In general it's easy to enable/disable services via LuCi interface.
Christian
---
Diese E-Mail ist frei von Viren und Malware, denn der avast! Antivirus Schutz
ist aktiv.
http://www.avast.com
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [patch] [package] ca-certificates: create symbolic link for certificate hashes
Am 20.07.2014 09:06, schrieb Felix Fietkau: On 2014-07-19 12:16, Christian Schoenebeck wrote: From: Christian Schoenebeck christian.schoeneb...@gmail.com Date: Sat, 19 Jul 2014 11:14:01 +0200 Subject: ca-certificates: create symbolic link for certificate hashes Implementing add-cert.sh functionality discribed at http://wiki.openwrt.org/doc/howto/wget-ssl-certs into Makefile otherwise you need to create symbolic links for certificate hashes yourself. Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com --- package/system/ca-certificates/Makefile | 13 + 1 file changed, 13 insertions(+) diff --git a/package/system/ca-certificates/Makefile b/package/system/ca-certificates/Makefile index 7f38c86..534c38b 100644 --- a/package/system/ca-certificates/Makefile +++ b/package/system/ca-certificates/Makefile @@ -34,6 +34,19 @@ endef define Package/ca-certificates/install $(INSTALL_DIR) $(1)/etc/ssl/certs $(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/share/ca-certificates/*/*.crt $(1)/etc/ssl/certs/ + +OPENSSL=/usr/bin/openssl ; \ +CERTDIR=$(1)/etc/ssl/certs ; \ The use of shell variables here is unnecessary. make variables are more convenient because you don't need . Also, please don't hardcode the openssl path. OpenWrt build prereq checks already test if OpenSSL is installed, so you can safely assume that it is available. Just call 'openssl' without specifying a path. - Felix Patch rebuilded and tested on WNDR3800 and VirtualBox x86 - Christian From: Christian Schoenebeck christian.schoeneb...@gmail.com Date: Sun, 20 Jul 2014 10:48:50 +0200 Subject: [PATCH] [package] ca-certificates: create symbolic link for certificate hashes Implementing add-cert.sh functionality described at http://wiki.openwrt.org/doc/howto/wget-ssl-certs into Makefile otherwise you need to create symbolic links for certificate hashes yourself. Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com --- package/system/ca-certificates/Makefile | 9 + 1 file changed, 9 insertions(+) diff --git a/package/system/ca-certificates/Makefile b/package/system/ca-certificates/Makefile index 7f38c86..08a853f 100644 --- a/package/system/ca-certificates/Makefile +++ b/package/system/ca-certificates/Makefile @@ -34,6 +34,15 @@ endef define Package/ca-certificates/install $(INSTALL_DIR) $(1)/etc/ssl/certs $(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/share/ca-certificates/*/*.crt $(1)/etc/ssl/certs/ + + for CERTFILE in `ls -1 $(1)/etc/ssl/certs`; do \ + HASH=`openssl x509 -hash -noout -in $(1)/etc/ssl/certs/CERTFILE` ; \ + SUFFIX=0 ; \ + while [ -h $(1)/etc/ssl/certs/HASH.SUFFIX ]; do \ + let SUFFIX += 1 ; \ + done ; \ + ln -s CERTFILE $(1)/etc/ssl/certs/HASH.SUFFIX ; \ + done endef $(eval $(call BuildPackage,ca-certificates)) ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [patch] [package] ca-certificates: create symbolic link for certificate hashes
From: Christian Schoenebeck christian.schoeneb...@gmail.com Date: Sat, 19 Jul 2014 11:14:01 +0200 Subject: ca-certificates: create symbolic link for certificate hashes Implementing add-cert.sh functionality discribed at http://wiki.openwrt.org/doc/howto/wget-ssl-certs into Makefile otherwise you need to create symbolic links for certificate hashes yourself. Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com --- package/system/ca-certificates/Makefile | 13 + 1 file changed, 13 insertions(+) diff --git a/package/system/ca-certificates/Makefile b/package/system/ca-certificates/Makefile index 7f38c86..534c38b 100644 --- a/package/system/ca-certificates/Makefile +++ b/package/system/ca-certificates/Makefile @@ -34,6 +34,19 @@ endef define Package/ca-certificates/install $(INSTALL_DIR) $(1)/etc/ssl/certs $(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/share/ca-certificates/*/*.crt $(1)/etc/ssl/certs/ + + OPENSSL=/usr/bin/openssl ; \ + CERTDIR=$(1)/etc/ssl/certs ; \ + if [ -f OPENSSL ]; then \ + for CERTFILE in (ls -1 CERTDIR); do \ + HASH=`OPENSSL x509 -hash -noout -in CERTDIR/CERTFILE` ; \ + SUFFIX=0 ; \ + while [ -h CERTDIR/HASH.SUFFIX ]; do \ + let SUFFIX += 1 ; \ + done ; \ + ln -s CERTFILE CERTDIR/HASH.SUFFIX ; \ + done ; \ + fi endef $(eval $(call BuildPackage,ca-certificates)) ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH][packages] tinyproxy: no SysLog and no logging as non root user
From: Christian Schoenebeck christian.schoeneb...@gmail.com
Date: Sat, 19 Jul 2014 21:31:04 +0200
Subject: [PATCH][packages] tinyproxy: no SysLog and no logging as non root user
1.) No SysLog possible because keyword misspelled
In tinyproxy.conf and tinyproxy.config the parameter is correct spelled
with small l
2.) No logging as non root user
The default is that tinyproxy deamon run as nobody:nogroup, but they
have no permission to /var/log/or any other location.
So touch and change permission for logfile during startup
Signed-off-by: Christian Schoenebeck christian.schoeneb...@gmail.com
---
net/tinyproxy/files/tinyproxy.init | 6 +-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/net/tinyproxy/files/tinyproxy.init
b/net/tinyproxy/files/tinyproxy.init
index be7234a..73f38c6 100644
--- a/net/tinyproxy/files/tinyproxy.init
+++ b/net/tinyproxy/files/tinyproxy.init
@@ -46,7 +46,7 @@ start_proxy() {
proxy_string $1 StatFile $CFGFILE
proxy_string $1 LogFile $CFGFILE
- proxy_flag $1 SysLog $CFGFILE
+ proxy_flag $1 Syslog $CFGFILE
proxy_atom $1 LogLevel $CFGFILE
@@ -111,6 +111,10 @@ proxy_string() {
config_get _value $SECTION $OPTION
[ -z $_value ] _value=$DEFAULT
[ -n $_value ] echo ${ALIAS:-${OPTION}} ''$_value''
+ [ -n $_value -a $OPTION = LogFile ] {
+ touch $_value
+ chmod 666 $_value
+ }
}
proxy_flag() {
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
