Support for EAP-MSCHAPv2 authentication scheme is added.
Different from the previously supported schemes, this one is
usually asymmetric in the way that server auth method (pubkey) is
different from the client auth method (eap-mschapv2).
The code handles this asymmetry automatically.
A new UCI config section mschapv2_secrets is added where the user
can specify the EAP identities and their passwords that are
accepted by the server. AFAIK, there is no way to select which
EAP IDs should be accepted by which remote, except setting
`eap_id` to something different than `%any`. But `eap_id`
does not support template matching, so either only a single
identity or all can be configured for one remote. This is why
the EAP identities are not subsections of remotes, but are
a standalone section.
Signed-off-by: Martin Pecka <peci1@seznam.cz>
Signed-off-by: Martin Pecka <peckama2@fel.cvut.cz>
Before this commit, if a user configures multiple remotes in UCI,
each remote generates one output section of pools.
This doesn't hurt because swanctl just merges all of them,
but it is apparently not needed to have N copies of the same.
This commit changes the behavior to only create one pools
section at the end of the generated swanctl config.
Signed-off-by: Martin Pecka <peci1@seznam.cz>
Signed-off-by: Martin Pecka <peckama2@fel.cvut.cz>
Changes since v0.12:
7fb6416 tests: fix segfault with no /etc/protocols (#286)
0dddc42 README: Update branch references in badge URLs
5eea3f4 github: Update branch names for actions
b102523 scripts: get debug info for bug reports
334bb9c Make listening socket creation optional. (#297)
a4e7b65 {etc,man}: improve check_route address notification flag documentation (#301)
ffa276f Support ELL 0.68 l_netlink_message API. (#303)
269f10a gh: daily validation of the ELL compatibility (#308)
824ff8c Support listener events (#304)
5d9f33a Some clean-ups (#305)
05a08bf lib: switch to v4.0.1: only added items (#306)
3702487 scripts: debug: also print system info (#307)
5d8db15 ell: only include 'ell/ell.h' header (#309)
772afe9 AUTHORS: Update e-mail addresses.
0c36dba mptcpd 0.13
Drop backported patches which are part of the release.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Make PKG_VERSION compatible with apk by dropping the C char,
simplifying Makefile also otherwise. Also remove unnecessary
variables.
Refresh patches (just cosmetics for CI).
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Make version compatible with the apk package manager.
Add short explanation about rtklib purpose to the menu item.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* minimal fix to support all download utilities in currently broken apk snapshots
(see https://github.com/openwrt/openwrt/issues/16907 for details)
Signed-off-by: Dirk Brenken <dev@brenken.org>
The following error occurs when CONFIG_USE_APK is set.
```
ln /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/usr/lib/git-core/git /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/usr/bin/git
ln /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/usr/lib/git-core/git-shell /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/usr/bin/git-shell
touch /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git.installed
mkdir -p /mnt/gl-mt6000-main/openwrt/staging_dir/target-aarch64_cortex-a53_musl/root-mediatek/stamp
SHELL= flock /mnt/gl-mt6000-main/openwrt/tmp/.root-copy.flock -c 'cp -fpR /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/. /mnt/gl-mt6000-main/openwrt/staging_dir/target-aarch64_cortex-a53_musl/root-mediatek/'
cp: '/mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/./usr/bin/git' and '/mnt/gl-mt6000-main/openwrt/staging_dir/target-aarch64_cortex-a53_musl/root-mediatek/./usr/bin/git' are the same file
cp: '/mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/./usr/bin/git-shell' and '/mnt/gl-mt6000-main/openwrt/staging_dir/target-aarch64_cortex-a53_musl/root-mediatek/./usr/bin/git-shell' are the same file
make[2]: *** [Makefile:167: /mnt/gl-mt6000-main/openwrt/staging_dir/target-aarch64_cortex-a53_musl/root-mediatek/stamp/.git_installed] Error 1
```
Use $(LN) instead of ln and use relative paths.
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
go1.23.3 (released 2024-11-06) includes fixes to the linker,
the runtime, and the net/http, os, and syscall packages.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
vala now sort of depends on gobject-introspection. In order to avoid
adding, override GI_GIRDIR to avoid depending on goject-introspection.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
xdg-dbus-proxy is a filtering proxy for D-Bus connections. It is used to
allow partial access to D-Bus form sandboxed processes, eg. when using
bubblewrap.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
libmanette offers painless access to game controllers, from any
programming language and with little dependencies.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
The unifdef utility selectively processes conditional C preprocessor #if
and #ifdef directives. It is required to build WebKit ports.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Rosen Penev
Finn Landweber
Gagan Deep
Eric Fahlgren
Tianling Shen
Ryan Keane
Jon Henrik Bjørnstad
Ray Wang
Martin Pecka
Hannu Nyman
Glenn Strauss
Ted Hess
Daniel Golle
Peter van Dijk
Dirk Brenken
Christian Marangi
Hirokazu MORIKAWA
Robert Marko