OpenVPN recommends disabling compression, as it may weaken the security
of the connection. For users who need compression, we build with LZ4
support by default. LZO in OpenVPN pulls in liblzo at approx. 32 kB.
OpenWrt users will no longer be able to connect to OpenVPN peers that
require LZO compression, unless they build the OpenVPN package themselves.
Signed-off-by: Magnus Kroken <mkroken@gmail.com>
New features:
* Per client tls-crypt keys
* ChaCha20-Poly1305 can be used to encrypt the data channel
* Routes are added/removed via Netlink instead of ifconfig/route
(unless iproute2 support is enabled).
* VLAN support when using a TAP device
Significant changes:
* Server support can no longer be disabled.
* Crypto support can no longer be disabled, remove nossl variant.
* Blowfish (BF-CBC) is no longer implicitly the default cipher.
OpenVPN peers prior to 2.4, or peers with data cipher negotiation
disabled, will not be able to connect to a 2.5 peer unless
option data_fallback_ciphers is set on the 2.5 peer and it contains a
cipher supported by the client.
Signed-off-by: Magnus Kroken <mkroken@gmail.com>
reload_server() gracefully with SIGUSR1 to lighttpd
relog() to reopen log files with SIGHUP to lighttpd
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* update upstream version to lighttpd-1.4.56
* depend on Nettle for MD5, SHA1, SHA256
* multiple TLS options: gnutls, mbedtls, nss, openssl, wolfssl
* new module mod_authn_dbi
* mod_authn_* depend on mod_auth
* mod_authn_file is included if mod_auth is selected in build
* mod_vhostdb_* depend on mod_vhostdb
* mod_deflate subsumes mod_compress
* remove from Makefile the include of nls.mk (no longer needed)
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
It's useless and it's only used by this package. Just link it
statically.
Remove CMAKE_INSTALL as InstallDev section is gone.
Add PKG_BUILD_PARALLEL for faster compilation.
Put license information up as there are no longer 2 packages.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Fix installed paths. After e52d0487e8
upstream, this bug was exposed.
Instead of working around it, fix the patch.
After this, everything consistently gets installed to ipkg-install/usr.
Minor Makefile reorganization.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Fixes two CVEs relating to UPnP.
Removed libuuid dependency. It is not used.
Remove clock_gettime hack. It seems to have been fixed.
Removed upstream patches.
Refreshed the other ones.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Some change in base broke compilation with libusb and this package.
From looking at it more carefully, it turns out that the libusb patch
needs to be updated so that host paths are not used.
libusb-compat also depends on libusb, which increases the overall
installed size.
Refreshed patches with make package/hplip/refresh .
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Some change to base broke compilation. From looking at the CFLAGS,
hplip tries to use the host libusb.
libusb-compat seems to work properly. So use that.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
As implemented, these get duplicated. In particular, the ldflags get
recursive and with some recent OpenWrt change, it errors.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Magnus Kroken
Rosen Penev
Stijn Tintel
Glenn Strauss
Moritz Warning
Nils Koenig
Peter Stadler
Nicholas Smith
Michael Heimpold
Dirk Brenken
Van Waholtz