This reverts commit 70b1c0b1

RSA key are for legacy client support and generation takes longer on devices
which does not have hardware random number generators.

This is a work around to speedup the boot-up for such devices.

Ivan Pavlov authored 1 year ago and Mohd Mehdi committed 1 week ago

Adjust patches for current version changes
Internal type "unknown" changed to "u_int32_t"
Add patch with removing macro syntax checking for successful build

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>

Mohd Mehdi authored 3 weeks ago and Vivek Dutta committed 1 week ago

this is done so that we can use PAM modules for locking out users
after x number of failed attempts for y seconds (by configuring
UsePAM, MaxAuthTries and UnlockTime in sshd UCI respectively)

This reverts commit 596051a5.

Add back missing chroot directory creation which got lost in
13d207b2

Fixes incorrect handling of positional arguments where $10 was
interpreted incorrectly due to missing braces. Now using ${10}
ensures the log option is correctly assigned and passed.

If sftp-server is installed, use it.

Michael Heimpold authored 1 month ago and Erik Karlsson committed 1 month ago

The -r option is not required here but should also not hurt,
since it was already tested, that $key is a file.
However, to express the intent of the command more clearly,
let's drop it.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

'ssh-keygen -l' is a bit forgiving for
corrupted files, hardening this by
using 'ssh-keygen -y' instead.

Imitate dropbear init.d-script and make sure we
don't end up with corrupt keys.

Starting with OpenSSH 9.8 sessions are handled by a separate binary
called sshd-session

Otherwise we might end up in a state where we cannot
generate the desired configurations and 'ssh' will
stop working.

the proc_ops is introduced in 5.6 and compatibility with earlier
versions is managed by xt_compat.h, update the patch accordingly

following config section and option introduced for including snmpd file
from uci

config include 'extra-file'
    option path '/etc/snmpd/extra-config.conf'

resolve compilation errors

Lwithwma Brahma authored 2 years ago and Rahul Thakur committed 4 months ago

Adds iptables-mod-mpeg2ts package.

Change-Id: I7256fa201534cfe5176cb8c6130895ac438236a2

Add logic for https-dns-proxy to not modify
dhcp-configuration unless DNS-over-HTTPS has
been configured.

Change-Id: I3578a917b4f748f31d8b6035f39f8c077c6e3986

Mohd Mehdi authored 6 months ago and Rahul Thakur committed 6 months ago

* add uci-defaults script to generate unbound config that makes
  it work with odhcpd and lets it forward (not resolve) queries
  to dns servers provided via upstream dhcp
* update dhcp UCI to use unbound

OpenSSH 9.8p1 removed support for DSA (DSS) signature algorithms.

From:
https://www.openssh.com/txt/release-9.8

"OpenSSH plans to remove support for the DSA signature algorithm in
early 2025. This release disables DSA by default at compile time."

Merge OpenWrt 23.05.4 commit '89955ee7'
into devel.

Conflicts:
	net/openssh/Makefile
	net/openvpn/files/openvpn.init

* update logrotate version to 3.22.0
* add patch to implement minutes
* add patch to calculate age in minutes instead of days

[23.05] php8: update to 8.2.21

Add option to support ip6tables configuration(default false).

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 55e689176ec52afde0cda0ee2b48dbff349d6c6c)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1016f8f1ba41b743bff905cf27b6c6f2b8de6c8e)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 309687f01abeca6f369e7e1d62aa2a5a47df02e7)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ef9be4a53c8f05f2d01cc4809055d5cb6999cb94)