ssl_set1_host() is not available without openssl-1.1.0. Unbound can not do
host cert verification. DNS over TLS connects, but hosts are unverified. A
patch for log err is added with a noitce in README.md.
(see: https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=658)
Also, squash some minor robustness and TLS usability fixes.
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
RFC2326 specifies the attribute client_port as the RTP/RTCP port pair on
which the client has chosen to receive media data and control info;
however some clients (mostly STBs) embed the client_port value in the
destination attribute in the form of destination=<address:port> without
specifying the client_port attribute in the SETUP message.
To support such clients check if the destination attribute contains a
port value and use it as port value for the expected RTP connection.
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
Simpler and easier to bump the version in the future.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Jonathan McCrohan <jmccrohan@gmail.com>
Since https://git.openwrt.org/d0e0b7049f88774e67c3d5ad6b573f7070e5f900,
OpenWrt SDKs ship the appropriate sources for building usbip userspace
packages, so special nonshared handling is not required anymore.
Sucessfully tested by compiling usbip utilities for various architectures
using self built SDKs after applying the change linked above.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Currently uscan fails on this as it tries to look for a download link in the
wrong location. Switching it to a GitHub tarball will probably fix it.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Unbound struggles with boot ifup, so procd triggers changed to push
outside of this noise. Unbound has run in /var/lib/unbound/, so chroot
(jail) protects /etc/, and it can save flash wear. Compiled defaults
reflect this now, so Unbound tools are easier run on the command line.
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
In the description point to installation guide on OpenWrt Wiki to
make it easier for new users to find and to understand how to use
gitolite on OpenWrt.
Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
The user defined in order to own and admin gitolite directories needs
to not be expired else logins such SSH access will not be allowed for
that user. So we unexpire user git by default.
Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
Practicalities of life have intervened and I am no longer able to
dedicate the time required to look after this package.
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
nut-monitor failed to create required dir /var/etc/nut, as
well as failing to set appropriate user on the directory and
conf files. Fixing this closes
https://github.com/openwrt/packages/issues/6644
Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
With growing interest, DNS over TLS can be setup in Unbounds foward-zone:
clause. A broader UCI solution is added to support forward-, stub-, and
auth- zone clauses in a new 'zone' section. This implentation required
reworking scripts, because they did not scale. 'forward_domain' and
'prefetch_root' options are removed, and superceded by 'zone' section.
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
* no longer rename faulty uplinks in /etc/config/wireless, but save
uplink state in json runtime information. To reset the saved state
simply restart travelmate processing.
Signed-off-by: Dirk Brenken <dev@brenken.org>
Delay startup of p910nd to give devices more time to enumerate
Fixes issue #4752
Tested on mir3g
Signed-off-by: Francesco Molitierno <francyesc0@hotmail.it>
Eric Luehrsen
Chen Minqiang
Andy Walsh
W. van den Akker
Eneas U de Queiroz
Hans Dedecker
Rosen Penev
Jo-Philipp Wich
Christian Lachner
Daniel F. Dickinson
Kevin Darbyshire-Bryant
Peter Wagner
Christian Schoenebeck
Thomas Weißschuh
Ansuel Smith
Dirk Brenken
Moritz Warning
Francesco Molitierno