summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-connectivity
Commit message (Collapse)AuthorAgeFilesLines
...
* networkmanager-openvpn: Make PACKAGECONFIG gnome workAndreas Müller2020-03-181-1/+12
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.8.10 -> 1.8.12Andreas Müller2020-03-181-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | >From [1]: ======================================================= NetworkManager-openvpn-1.8.12 Overview of changes since NetworkManager-openvpn-1.8.10 ======================================================= * The auth helper in external UI mode can now be run without a display server. Future nmcli version will utilize this for handling the secrets without a graphical desktop. * libnm-glib compatibility (NetworkManager < 1.0) is disabled by default. It can be enabled by passing --with-libnm-glib to configure script. Nobody should need it by now. Users that still use this are encouraged to let us know before the libnm-glib support is removed for good. * Add support for the following OpenVPN options: tls-version-min, tls-version-max, compress. * Support inline CRL blobs during import. * Allow option mssfix to be set to zero. * Update Catalan, Czech, Danish, Dutch, Friulian, Hungarian, Indonesian, Italian, Polish, Serbian, Spanish, Swedish and Ukrainian translations. [1] http://ftp.gnome.org/pub/gnome/sources/NetworkManager-openvpn/1.8/NetworkManager-openvpn-1.8.12.news Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Upgrade 1.22.8 -> 1.22.10Adrian Bunk2020-03-181-2/+1
| | | | | | | Upgrade on the 1.22 stable branch. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kea: upgrade 1.7.4 -> 1.7.5Wang Mingyu2020-03-101-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: do not enable srv by defaultGianfranco Costamagna2020-03-081-1/+1
| | | | | | | | | | | Rationale can be found in the Debian packaging (debian/changelog): Revert change enabling SRV functionality, it is disabled by default upstream and of little benefit to any end user, but adds reasonable complexity to the code. Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: refresh patches and sync with Debian packagingGianfranco Costamagna2020-03-083-3/+16
| | | | | | | | Also add patch from debian to mqtt_protocol.h header file Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Upgrade 1.18.4 -> 1.22.8Adrian2020-03-087-57/+159
| | | | | | | | | | | | | - rebased patches - added two more small patches - Option --enable-polkit-agent is not available with current NM, removed - Option --with-libnm-glib is not available with current NM, removed - New package NM-cloud-setup for new experimental cloud setup feature - NM tries to re-license from GPL to LGPL, added LGPL to LICENSES - Removed empty packages libnmutil libnmglib libnmglib-vpn Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdnet: make dnet-config a multilib_scriptJeremy Puhlman2020-03-061-1/+3
| | | | | | | Script encodes library paths. Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: upgrade 1.6.8 -> 1.6.9Pierre-Jean Texier2020-03-024-136/+2
| | | | | | | | | | Bugfix release. For details, see: https://mosquitto.org/blog/2020/02/version-1-6-9-released/ Also remove patches applied upstream. Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
* kea: upgrade 1.7.3 -> 1.7.4Zheng Ruoqin2020-02-241-3/+3
| | | | | | | -License-Update: Copyright year updated to 2020. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcpcd: upgrade 8.1.5 -> 8.1.6Zheng Ruoqin2020-02-241-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade 2.16.3 -> 2.16.5Pierre-Jean Texier2020-02-211-2/+2
| | | | | | | | | | Mbed TLS 2.16.5 is a maintenance release of the Mbed TLS 2.16 branch, and provides security fixes and bug fixes, see: https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.5-and-2.7.14-released Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: add native and nativesdk to BBCLASSEXTENDPierre-Jean Texier2020-02-201-0/+2
| | | | | | | | | Fixes: ERROR: Nothing PROVIDES 'mbedtls-native' Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: rdep on python3 version of pyflakesKhem Raj2020-02-171-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openconnect: use target path to scriptMax Krummenacher2020-02-161-2/+2
| | | | | | | | | | | openconnect puts the default absolute path to the vpnc-script into its binary from the --with-vpnc-script configure options. So do not prepend the value with the path to the OE sysroot. RDEPEND on vpnc-script to have the script from vpnc installed on target. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openconnect: build with python3Max Krummenacher2020-02-162-7/+76
| | | | | Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vpnc: splitout the vpnc-script into its own packageMax Krummenacher2020-02-161-1/+5
| | | | | | | | The vpnc-script can be used unchanged with the openconnect package. Provide it in its own package and make vpnc RDEPEND on it. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.10.11 -> 4.10.13Yi Zhao2020-02-131-2/+2
| | | | | | | | Changelog: https://www.samba.org/samba/history/samba-4.10.13.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: Use mosquitto.init for daemon initMike Krupicka2020-02-111-1/+1
| | | | | | Config file specification is missing in start) case. It is present already in restart) case. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: upgrade 3.0.19 -> 3.0.20Yi Zhao2020-02-063-120/+77
| | | | | | | | | | | * Drop backported patch: 0001-su-to-radiusd-user-group-when-rotating-logs.patch * Disable python2 module build and add PACKAGECONFIG for python3 module build Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lftp: upgrade 4.9.0 -> 4.9.1Trevor Gamblin2020-02-041-2/+2
| | | | | Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nng: Add recipeTom Rini2020-02-031-0/+21
| | | | | | | | | | | | nng is the nanomsg project's rewrite of their libnanomsg library. Just like nanomsg it is a socket library that provides several common communication patterns. Unlike nanomsg it does not normally provide a number of tools and we do not attempt to add them here. We allow for optional mbedtls support. Signed-off-by: Tom Rini <trini@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: apply upstream proposed patches to use cmake build system,Gianfranco Costamagna2020-01-255-27/+173
| | | | | | | | | simplifying a lot the build and install process. Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <gianfranco.costamagna@abinsula.com> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: upgrade 0.7.2 -> 0.7.3Pierre-Jean Texier2020-01-241-2/+2
| | | | | | | See full changelog https://github.com/firewalld/firewalld/releases/tag/v0.7.3 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* crda: Fix build with python3Khem Raj2020-01-222-1/+103
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-networking: Remove using python2Khem Raj2020-01-224-8/+8
| | | | | | | This change makes the parsing go though, we still might have build issues, which will be reported in world builds seprately Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcpcd: upgrade 8.1.1 -> 8.1.5Zang Ruochen2020-01-152-38/+3
| | | | | | | | -files/0001-dhcpcd-Fix-build-error-with-musl.patch Removed since this is included in 8.1.5. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* crda: fix UDEV_RULE_DIRYi Zhao2020-01-141-1/+1
| | | | | | | The default UDEV_RULE_DIR is ${nonarch_base_libdir}. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kea: upgrade 1.7.2 -> 1.7.3Wang Mingyu2020-01-061-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 4.2.0 -> 4.3.0Wang Mingyu2020-01-061-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lftp: upgrade 4.8.4 -> 4.9.0Wang Mingyu2020-01-062-49/+3
| | | | | | | | fix-gcc-6-conflicts-signbit.patch Removed since they are included in 4.9.0 Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.10.10 -> 4.10.11Yi Zhao2020-01-061-2/+2
| | | | | | | | | | | | | | Security fixes: CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server (dnsserver). CVE-2019-14870: DelegationNotAllowed not being enforced in protocol transition on Samba AD DC. See: https://www.samba.org/samba/history/samba-4.10.11.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: disable guest access and anonymous queriesTrevor Gamblin2019-12-251-1/+5
| | | | | | | | | | | | | | | | | | Guest accounts for Samba are a known potential vulnerability (see https://www.tenable.com/plugins/nessus/26919) where info about the host can be obtained without proper access. The option "map to guest = bad user" allows login attempts with usernames that don't exist to map to the guest account, while the "restrict anonymous" value (implicitly set to 0 before this patch) would allow any queries to obtain user and group list information. Raise the default security level by setting "restrict anonymous" to "1" and "map to guest" to "never" to avoid providing user/group info to unauthenticated users and reject login attempts with an invalid password, respectively. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cannelloni: Include stdexcept for runtime_errorKhem Raj2019-12-232-0/+33
| | | | | | | | | Fixes error: 'runtime_error' is not a member of 'std' throw std::runtime_error("Allocation error."); ^~~~~~~~~~~~~ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* civetweb: Upgrade to latest tipKhem Raj2019-12-201-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: Package firewalld filesKhem Raj2019-12-201-0/+1
| | | | | | | | | ERROR: firewalld-0.7.2-r0 do_package: QA Issue: firewalld: Files/directories were installed but not shipped in any package: /usr/lib /usr/lib/firewalld /usr/lib/firewalld/zones Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cannelloni: Update to latest and fix multilib buildsKhem Raj2019-12-202-2/+47
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kea: upgrade 1.7.0 -> 1.7.2Wang Mingyu2019-12-181-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: update to 1.6.8Leon Anavi2019-12-151-2/+2
| | | | | | | | | Bugfix release. For details, see: https://mosquitto.org/blog/2019/11/version-1-6-8-released/ Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: fix wrong shebang for python3Changqing Li2019-12-131-2/+2
| | | | | | | fix wrong shebang "#!/usr/bin/env python3/" Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: disable appindicator supportKai Kang2019-12-101-0/+1
| | | | | | | | | libappindicator is a library to allow applications to export a menu into the Unity Menu bar. Unity is not supported in openembedded, so disable appindicator support for blueman. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: add recipeJacopo Dall'Aglio2019-12-051-0/+58
| | | | | | | | Canonical's Netplan is a network configuration abstraction renderer written in Python. It's compatible with NetworkManager and systemd-networkd. Signed-off-by: Jacopo Dall'Aglio <jacopo.dallaglio@kynetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: rename distro_features_check to features_checkDenys Dmytriyenko2019-11-212-2/+2
| | | | | | | Avoid warning due to the class rename in OE-Core. Signed-off-by: Denys Dmytriyenko <denys@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: do not deploy unnecessary udev rule fileStefan Agner2019-11-201-1/+4
| | | | | | | | | | | | | | | | | The 84-nm-drivers.rules is not required for systemd-udevd versions v210 and later. The file has been split into a separate file so distributions with a new enough systemd version can drop it. See also: https://github.com/NetworkManager/NetworkManager/commit/1e0375826252abf9aab2aef273a2a24cd08c9f42 I noticed this while investigating into a warning show during bootup: /usr/lib/udev/rules.d/84-nm-drivers.rules:10 Invalid value "/bin/sh -c 'ethtool -i $1 | sed -n s/^driver:\ //p' -- $env{INTERFACE}" for PROGRAM (char 24: invalid substitution type), ignoring, but please fix it. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade 2.16.2 -> 2.16.3Denys Dmytriyenko2019-11-131-2/+2
| | | | | | | | | | | | | | | | | * Mbed TLS 2.16.3 is a maintenance release of the Mbed TLS 2.16 branch, and provides bug fixes and minor enhancements. https://github.com/ARMmbed/mbedtls/releases/tag/mbedtls-2.16.3 Most importantly, this fixes breakage on ARMv5TE platforms: * Fix the build on ARMv5TE in ARM mode to not use assembly instructions that are only available in Thumb mode. https://github.com/ARMmbed/mbedtls/pull/2169 Signed-off-by: Denys Dmytriyenko <denys@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.10.8 -> 4.10.10Yi Zhao2019-11-071-2/+2
| | | | | | | | | | | | | | | | Security fixes: CVE-2019-10218: Client code can return filenames containing path separators. CVE-2019-14833: Samba AD DC check password script does not receive the full password. CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync. See: https://www.samba.org/samba/history/samba-4.10.10.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: fix installation for minimal buildAndreas Oberritter2019-11-071-7/+9
| | | | | | | | | chmod: cannot access '.../image/etc/sudoers.d': No such file or directory | sed: can't read .../image/usr/bin/samba-tool: No such file or directory Signed-off-by: Andreas Oberritter <obi@opendreambox.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* miniupnpd: Build config.h before full buildKhem Raj2019-11-011-0/+1
| | | | | | | | | | | | This fixes a race condition e.g. testminissdp.c:15:10: fatal error: config.h: No such file or directory 15 | #include "config.h" | ^~~~~~~~~~ compilation terminated. <builtin>: recipe for target 'testminissdp.o' failed Signed-off-by: Khem Raj <raj.khem@gmail.com>
* miniupnpd: Update to 2.1.20191006Khem Raj2019-11-012-9/+7
| | | | | | Forward port the patches Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: set CLEANBROKENYi Zhao2019-11-011-0/+2
| | | | | | | | | | Fixed make clean error: NOTE: make clean Makefile:36: *** Missing 'Make.inc' Run './configure [options]' and retry. Stop. ERROR: oe_runmake failed Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>