97 Commits
Author SHA1 Message Date
Franco Fichtner 6d3cc0b4f4 security/tinc: bump revision after fix 2026-05-22 10:31:22 +02:00
Konstantinos Spartalis 3e46afbae7 tinc: evaluate if hosts enabled (#5447) 2026-05-15 16:51:06 +02:00
Franco Fichtner e3bae8e72f security/tinc: update version 2026-01-21 07:51:20 +01:00
Thojo0 735eaa545e add disablesubnetroutes option (#5136)
closes https://github.com/opnsense/plugins/issues/5135
2026-01-20 14:45:40 +01:00
Franco Fichtner fafde8629f security/tinc: revision and style 2025-12-05 12:19:54 +01:00
Angel Marin 61e0663137 securiry/tinc: don't create symlink as it conflicts with ifconfig symlink creation (#5064) 2025-12-04 16:56:05 +01:00
Franco Fichtner f624cb3fa0 security/tinc: bump revision 2025-07-21 10:01:45 +02:00
Ad Schellevis a2fbbbf665 security/tinc - use configd caching to ease priv separation. 2025-07-20 17:12:04 +02:00
Franco Fichtner b3de88095f security/tinc: bump revision 2025-07-15 09:43:47 +02:00
Monviech 9af5e18bce security/tinc: lower support to Tier 3 (#4810) 2025-07-14 15:35:29 +02:00
Franco Fichtner f240ec0fce plugins: run style-model 2025-07-02 10:46:07 +02:00
Monviech 089aaa256d mvc: Replace camelCase API notation with snake_case, some more spots that were missed (#4768) 2025-06-23 17:32:56 +02:00
Monviech 4b4ec29eca mvc: Replace camelCase API notation with snake_case (#4767)
* mvc: Replace camelCase API notation with snake_case

* mvc: Replace camelCase API notation with snake_case, fixed some special cases in www/caddy
2025-06-23 14:45:51 +02:00
Franco Fichtner 361c4806a3 security/tinc: remove sessionClose() 2024-12-17 07:27:26 +01:00
Franco Fichtner bb69d46537 security/tinc: bump revision 2024-11-05 16:05:12 +01:00
Andrew 343912e454 Remove "pipes" Python module dependency (#4336)
This commit fixes the folowing warning at boot:

<118>/usr/local/opnsense/scripts/OPNsense/Tinc/tincd.py:34: DeprecationWarning: 'pipes' is deprecated and slated for removal in Python 3.13
2024-11-03 10:38:07 +01:00
Andrew dd073fd6a6 security/tinc - subnet-down script was added to tinc plugin (#3591) 2023-09-18 14:35:13 +02:00
Franco Fichtner 322862ef71 security/tinc: update version 2023-09-14 09:45:07 +02:00
Ad Schellevis c6ad8a442b security/tinc: add routes to remote subnets with "subnet-up" script. for https://github.com/opnsense/plugins/pull/3539 2023-09-06 15:16:39 +02:00
Franco Fichtner 57ebc7510f plugins: strip $FreeBSD$ since gone in src.git 2023-09-06 08:28:11 +02:00
Franco Fichtner 37ea19d913 security/tinc: update model again 2023-09-01 09:01:23 +02:00
Franco Fichtner 8e07bd6471 security/tinc: update model 2023-09-01 08:42:48 +02:00
Franco Fichtner 24fd4c0e0c security/tinc: bump revision for now, might change version upon release 2023-08-22 08:20:39 +02:00
Ad Schellevis 1490e00a69 security/tinc: minor style fixes for https://github.com/opnsense/plugins/pull/3528 2023-08-08 18:20:39 +02:00
Andrew 94fcdedf5f security/tinc: add support for "StrictSubnets" variable (#3528) 2023-08-08 18:16:01 +02:00
Franco Fichtner 38a172b488 plugins: remove PLUGIN_FLAVOUR handling and related LibreSSL bits 2023-02-07 09:34:11 +01:00
Franco Fichtner f045045354 plugins: annotate support tier levels in plugins
PR: https://github.com/opnsense/core/issues/5983
2023-01-18 14:57:32 +01:00
Franco Fichtner 68bb85ddd9 security/tinc: register device from plugin 2022-08-29 09:56:29 +02:00
Franco Fichtner 122c90e324 plugins: remove obsolete 'remote' keyword 2021-10-29 08:01:53 +02:00
Franco Fichtner 648b18301f plugins: bump a few revisions where metadata changed 2021-03-29 09:48:43 +02:00
Ad Schellevis f557e2b09a XMLRPC / HA-Sync: add services keyword (introduced https://github.com/opnsense/core/issues/4834) in xmlrpc templates for existing plugins. 2021-03-24 16:35:09 +01:00
Franco Fichtner cdd4d15db7 security: bump revision numbers 2021-02-22 15:14:23 +01:00
Franco Fichtner d07948cbb1 security/tinc: update revision after fixes 2021-01-14 14:32:14 +01:00
vnxme 0160ec1e4d security/tinc: Fix extaddress field validation (#2187)
It should be 'Y', since any different value is recognized as 'N'
2021-01-14 13:44:59 +01:00
vnxme 22d222a5dd security/tinc: Fix switch mode (after #2110) (#2186)
In switch mode the subnet field is empty, thus the 'subnet' key does not exist in the '_payload' dictionary.
2021-01-14 13:43:16 +01:00
Franco Fichtner c462b0e40f security/tinc: ok to bump version 2020-11-17 14:13:06 +01:00
Ad Schellevis 5dc2478cd7 Tinc: upgrade model version for https://github.com/opnsense/plugins/pull/2110 2020-11-15 19:48:52 +01:00
ElNounch 151bc98f3e Using list view for both external addresses and hosted subnets
Every generated config files last line ends with a newline
2020-11-15 17:56:28 +01:00
ElNounch a3d383b282 Enable usage of no, one or several addresses per hosts 2020-11-14 18:04:00 +01:00
Franco Fichtner d96c8142c0 security/tinc: fix cipher parsing revision bump 2020-09-01 14:00:22 +02:00
Ad Schellevis 6ec1883fa6 security/tinc. list_ciphers compatibility with both libre and open ssl. closes https://github.com/opnsense/plugins/issues/1976 2020-08-15 14:48:10 +02:00
Ad Schellevis 2071e23a61 security/tinc: list_ciphers.py parse issue on 20.7. closes https://github.com/opnsense/plugins/issues/1976 2020-08-13 19:35:50 +02:00
Franco Fichtner 5c004cae08 security/tinc: bump revision after changes 2020-05-19 08:55:21 +02:00
Franco Fichtner c6de3851f5 plugins: style sweep 2020-05-13 08:42:51 +02:00
Ad Schellevis faa23ffae9 Syslog-NG: add templates for https://github.com/opnsense/core/issues/4068 2020-05-12 13:55:27 +02:00
vnxme f2db771984 security/tinc: Fix switch mode (#1733)
* security/tinc: Allow empty subnet for switch mode

A Host class with empty self._payload['subnet'] is considered invalid (lines 38-39). Thus, we can remove self._payload['subnet'] = None from __init__() and add a check for existance to config_text().

* security/tinc: Allow empty subnet for switch mode

Set network.subnet.required and host.subnet.required to N, add a required constraint for network.subnet if network.mode is router.

* security/tinc: Trigger configctl on tinc-up

In order to support various dual-stack configs (primary IPv4/v6 assigned by VPN/Tinc and any combination of alias IPv4/v6 assigned by Firewall/VIP) we need to trigger configctl:
- Primary IPv4: /usr/local/opnsense/service/configd_ctl.py interface newip $interface
- Primary IPv6: /usr/local/opnsense/service/configd_ctl.py interface newipv6 $interface

* security/tinc: Destroy tun/tap interface on stop

Destroying tun/tap interface each time Tinc daemon stops/restarts resolves the issue of losing IPv6 network routes (see #3972).

* security/Tinc: Add a missing reference constraint

The network.mode field is now linked to the network.subnet field.

* security/Tinc: Refactor tincd.py
2020-05-12 12:49:01 +02:00
Franco Fichtner c58730761d security/tinc: latest change warrants a version bump 2020-03-04 09:34:37 +01:00
vnxme 5d448639ed security/tinc: fix a bug in IPv6 support (#1707)
closes https://github.com/opnsense/plugins/issues/1686.
2020-02-20 18:26:09 +01:00
Franco Fichtner 18bc32f3b3 plugins: serious style sweep 2020-02-13 10:42:37 +01:00
Franco Fichtner f1a69249f9 plugins: style sweep 2020-02-10 21:12:05 +01:00