Re: HTTPS performance issue with opkg (Was: [PATCH 3/3] build: switch VERSION_REPO to HTTPS)

2020-09-15 Thread Paul Spooren
On Mon Sep 14, 2020 at 10:23 PM HST, Daniel Golle wrote: > On Tue, Sep 15, 2020 at 08:49:51AM +0200, Baptiste Jonglez wrote: > > On 27-08-20, Paul Spooren wrote: > > > The variable VERSION_REPO is used by opkg to download package(list)s. > > > Now that the default installation support encrypted

[PATCH PROOF luci] luci-base: switch to the new ubus API

2020-09-15 Thread Rafał Miłecki
From: Rafał Miłecki This is proof of concept for the new uhttpd ubus API. It switches LuCI (in a bit hacky way) to the new API. Signed-off-by: Rafał Miłecki --- .../htdocs/luci-static/resources/luci.js | 5 +++ .../htdocs/luci-static/resources/rpc.js | 31 +-- 2

Re: [PATCH luci] luci-base: use actual JSON-RPC for verifying ubus RPC URL

2020-09-15 Thread Rafał Miłecki
On 14.09.2020 18:31, Rafał Miłecki wrote: @@ -2553,10 +2553,19 @@ rpcBaseURL = Session.getLocalData('rpcBaseURL'); if (rpcBaseURL == null) { + var msg = { + jsonrpc: '2.0', +

HTTPS performance issue with opkg (Was: [PATCH 3/3] build: switch VERSION_REPO to HTTPS)

2020-09-15 Thread Baptiste Jonglez
On 27-08-20, Paul Spooren wrote: > The variable VERSION_REPO is used by opkg to download package(list)s. > Now that the default installation support encrypted HTTP opkg should > make use of it. I wonder what is the performance impact of this? Opkg forks a new wget process to download each

Re: HTTPS performance issue with opkg (Was: [PATCH 3/3] build: switch VERSION_REPO to HTTPS)

2020-09-15 Thread Daniel Golle
On Tue, Sep 15, 2020 at 08:49:51AM +0200, Baptiste Jonglez wrote: > On 27-08-20, Paul Spooren wrote: > > The variable VERSION_REPO is used by opkg to download package(list)s. > > Now that the default installation support encrypted HTTP opkg should > > make use of it. > > I wonder what is the

Re: [PATCH V3 uhttpd] ubus: add new RESTful API

2020-09-15 Thread Rafał Miłecki
On 14.09.2020 17:15, Rafał Miłecki wrote: +static void uh_ubus_handle_post(struct client *cl) +{ + static const struct blobmsg_policy hdr_policy[__HDR_UBUS_MAX] = { + [HDR_AUTHORIZATION] = { "authorization", BLOBMSG_TYPE_STRING }, + }; + struct dispatch_ubus *du =

[no subject]

2020-09-15 Thread Daniel Santos via openwrt-devel
The sender domain has a DMARC Reject/Quarantine policy which disallows sending mailing list messages using the original "From" header. To mitigate this problem, the original message has been wrapped automatically by the mailing list software.--- Begin Message --- Hello Jeffery, Thank you for the

RE: [PATCH v3 6/8] kernel: package bcm53xx i2c module

2020-09-15 Thread Adrian Schmutzler
Hi, > -Original Message- > From: openwrt-devel [mailto:openwrt-devel-boun...@lists.openwrt.org] > On Behalf Of Christian Lamparter > Sent: Samstag, 12. September 2020 23:16 > To: openwrt-devel@lists.openwrt.org > Cc: ra...@milecki.pl; ha...@hauke-m.de; f.faine...@gmail.com; >

Re: [PATCH v3 6/8] kernel: package bcm53xx i2c module

2020-09-15 Thread Daniel Golle
On Tue, Sep 15, 2020 at 01:28:23PM +0200, Adrian Schmutzler wrote: > Hi, > > > -Original Message- > > From: openwrt-devel [mailto:openwrt-devel-boun...@lists.openwrt.org] > > On Behalf Of Christian Lamparter > > Sent: Samstag, 12. September 2020 23:16 > > To:

Re:

2020-09-15 Thread Jeffery To
Hi Daniel, (Resending due to HTML email being rejected...) On Tue, Sep 15, 2020 at 2:26 PM Daniel Santos via openwrt-devel wrote: > Thank you for the wonderful work on maintaining the Go packages! You're welcome :-) > I got a little irritated at CGo's restriction of arch flags (in the >

RE: [PATCH v3 7/8] bcm53xx: add Cisco Meraki MR32

2020-09-15 Thread Adrian Schmutzler
Hi, > --- a/target/linux/bcm53xx/image/Makefile > +++ b/target/linux/bcm53xx/image/Makefile > @@ -320,6 +320,33 @@ define Device/luxul_xwr-3150 endef > TARGET_DEVICES += luxul_xwr-3150 > > +define Device/meraki_mr32 > + DEVICE_VENODR := Meraki > + DEVICE_MODEL := MR32 > + DEVICE_PACKAGES :=

Re: [PATCH v2 1/2] ipq40xx: add support for Luma Home WRTQ-329ACN

2020-09-15 Thread Tomasz Maciej Nowak
Hi Christian, thanks for looking at this. W dniu 13.09.2020 o 00:04, Christian Lamparter pisze: > On 2020-08-30 13:28, Tomasz Maciej Nowak wrote: >> Luma Home WRTQ-329ACN, also known as Luma WiFi System, is a dual-band >> wireless access point. >> >> Specification >> SoC: Qualcomm Atheros IPQ4018

[PATCH] ubus: add ACL support for "subscribe" request

2020-09-15 Thread Rafał Miłecki
From: Rafał Miłecki With this change ubus will allow users with access to the object pseudo method ":subscribe" to subscribe for notifications. 1. Move uh_ubus_allowed() up in the code 2. Export "Authorization" parsing code to the uh_ubus_get_auth() 3. Check for ":subscribe" method access

[PATCH] Fix tx-queue-size on NBG6817 (allows MTU changes).

2020-09-15 Thread jacekowski
From: Jacek Milewicz Fixes FS#3285 for NBG6817 only. Signed-off-by: Jacek Milewicz --- .../files-4.14/arch/arm/boot/dts/qcom-ipq8065-nbg6817.dts | 2 ++ 1 file changed, 2 insertions(+) diff --git a/target/linux/ipq806x/files-4.14/arch/arm/boot/dts/qcom-ipq8065-nbg6817.dts

[PATCH] conf: add src/{,gz}/trusted option

2020-09-15 Thread Paul Spooren
This options allows to individually disable signature checks for individual feeds. This option should only be used for local feeds or remote feeds downloaded via HTTPS. Within OpenWrt this option allows ImageBuilders to verify remote feeds while also taking local feeds into account which are

[PATCH v2] imagebuilder: add package signature verification

2020-09-15 Thread Paul Spooren
The ImageBuilder downloads pre-built packages and adds them to images. This process uses `opkg` which has the capability to verify package list signatures via `usign`, as enabled per default on running OpenWrt devices. Until now this was disabled for ImageBuilders because neither the `opkg` keys

Re: [PATCH 1/3] build: add libustream and certs to default pkgs

2020-09-15 Thread Henrique de Moraes Holschuh
On 27/08/2020 18:47, Paul Spooren wrote: To allow HTTPS usage on a router it requires both certificates (ca-bundle) and a fitting libustream library (libustream-wolfssl) By adding both, uclient-fetch and wget can connect to encrypted HTTP. This allows opkg to update package lists in a more

Re: [PATCH] ath79: add support for Ubiquiti UniFi AP Pro

2020-09-15 Thread Rafał Miłecki
On Mon, 14 Sep 2020 at 14:22, David Bauer wrote: > + firmware-partition@5 { > + label = "firmware"; > + reg = <0x5 0xf6>; > + }; Please specify "compatible" so the kernel doesn't