mtk-20170518/package/network/services/uhttpd, branch v17.01.2 MTK 20170518 : Mediatek SDK based on OpenWRT Barrier Breaker uhttpd: use sha256 when generating certificates with openssl (FS#512) 2017-02-17T13:43:11+00:00 Felix Fietkau nbd@nbd.name 2017-02-17T13:21:47+00:00 c835c9ebe59d071485ae61df021380a980f20976 Patch from attachment to FS#512 Signed-off-by: Felix Fietkau <nbd@nbd.name> 
Patch from attachment to FS#512

Signed-off-by: Felix Fietkau <nbd@nbd.name>
uhttpd: drop uhttpd-mod-tls, it has been useless for years 2016-12-22T15:46:01+00:00 Felix Fietkau nbd@nbd.name 2016-12-22T15:43:07+00:00 47cf2387798d04dab7f3386c4665a00428c61bf1 Before the rewrite, uhttpd-mod-tls used to contain a tls plugin. Afterwards it was left in for compatibility reasons, but given how much has changed, and that we're about to change the default SSL implementation again, it's better to just drop this now Signed-off-by: Felix Fietkau <nbd@nbd.name> 
Before the rewrite, uhttpd-mod-tls used to contain a tls plugin.
Afterwards it was left in for compatibility reasons, but given how much
has changed, and that we're about to change the default SSL
implementation again, it's better to just drop this now

Signed-off-by: Felix Fietkau <nbd@nbd.name>
treewide: clean up and unify PKG_VERSION for git based downloads 2016-12-22T15:42:21+00:00 Felix Fietkau nbd@nbd.name 2016-12-21T21:25:41+00:00 c7c1cf5618b6ca983c20510814b762eeab4937e5 Also use default defintions for PKG_SOURCE_SUBDIR, PKG_SOURCE Signed-off-by: Felix Fietkau <nbd@nbd.name> 
Also use default defintions for PKG_SOURCE_SUBDIR, PKG_SOURCE

Signed-off-by: Felix Fietkau <nbd@nbd.name>
treewide: clean up download hashes 2016-12-16T21:39:22+00:00 Felix Fietkau nbd@nbd.name 2016-12-16T16:32:10+00:00 720b99215da295a2e7b4acdef30b58bec6acedc2 Replace *MD5SUM with *HASH, replace MD5 hashes with SHA256 Signed-off-by: Felix Fietkau <nbd@nbd.name> 
Replace *MD5SUM with *HASH, replace MD5 hashes with SHA256

Signed-off-by: Felix Fietkau <nbd@nbd.name>
uhttpd: Add Basic Auth config 2016-10-31T12:22:51+00:00 Daniel Dickinson lede@cshore.thecshore.com 2016-08-13T23:24:59+00:00 98c86e29705cb1e73e4f2e16044f1e73cff32e31 We add an 'httpauth' section type that contains the options: prefix: What virtual or real URL is being protected username: The username for the Basic Auth dialogue password: Hashed (crypt()) or plaintext password for the Basic Auth dialogue httpauth section names are given included as list items to the instances to which they are to be applied. Further any existing httpd.conf file (really whatever is configured in the instance, but default of /etc/httpd.conf) is appended to the per-instance httpd.conf Signed-off-by: Daniel Dickinson <lede@cshore.thecshore.com> 
We add an 'httpauth' section type that contains the options:

prefix: What virtual or real URL is being protected
username: The username for the Basic Auth dialogue
password: Hashed (crypt()) or plaintext password for the Basic Auth dialogue

httpauth section names are given included as list
items to the instances to which they are to be applied.

Further any existing httpd.conf file (really whatever
is configured in the instance, but default of
/etc/httpd.conf) is appended to the per-instance httpd.conf

Signed-off-by: Daniel Dickinson <lede@cshore.thecshore.com>
uhttpd: create self-signed certificates with unique subjects 2016-10-26T13:16:52+00:00 Hannu Nyman hannu.nyman@iki.fi 2016-10-06T17:37:59+00:00 9097dc5ad844c336020be11085e1c8c80390ac9c Add a partially random O= item to the certificate subject in order to make the automatically generated certificates' subjects unique. Firefox has problems when several self-signed certificates with CA:true attribute and identical subjects have been seen (and stored) by the browser. Reference to upstream bugs: https://bugzilla.mozilla.org/show_bug.cgi?id=1147544 https://bugzilla.mozilla.org/show_bug.cgi?id=1056341 https://bugzilla.redhat.com/show_bug.cgi?id=1204670#c34 Certificates created by the OpenSSL one-liner fall into that category. Avoid identical certificate subjects by including a new 'O=' item with CommonName + a random part (8 chars). Example: /CN=LEDE/O=LEDEb986be0b/L=Unknown/ST=Somewhere/C=ZZ That ensures that the browser properly sees the accumulating certificates as separate items and does not spend time trying to form a trust chain from them. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> 
Add a partially random O= item to the certificate subject in order
to make the automatically generated certificates' subjects unique.

Firefox has problems when several self-signed certificates
with CA:true attribute and identical subjects have been
seen (and stored) by the browser. Reference to upstream bugs:
https://bugzilla.mozilla.org/show_bug.cgi?id=1147544
https://bugzilla.mozilla.org/show_bug.cgi?id=1056341
https://bugzilla.redhat.com/show_bug.cgi?id=1204670#c34

Certificates created by the OpenSSL one-liner fall into that category.

Avoid identical certificate subjects by including a new 'O=' item
with CommonName + a random part (8 chars). Example:
/CN=LEDE/O=LEDEb986be0b/L=Unknown/ST=Somewhere/C=ZZ

That ensures that the browser properly sees the accumulating
certificates as separate items and does not spend time
trying to form a trust chain from them.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
uhttpd: prefer px5g for certificate creation 2016-10-26T13:16:51+00:00 Hannu Nyman hannu.nyman@iki.fi 2016-10-05T08:11:15+00:00 82132540a3efbc98f8f4379b26d4b4541013e69d Prefer the old default 'px5g' for certificate creation as Firefox seems to dislike OpenSSL-created certs. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> 
Prefer the old default 'px5g' for certificate creation
as Firefox seems to dislike OpenSSL-created certs.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
uhttpd: fix handling of special "/" prefix when matching handlers 2016-10-25T14:38:50+00:00 Jo-Philipp Wich jo@mein.io 2016-10-25T14:36:47+00:00 81b256ee002f86077b7fd61ad200955ef983b06a The special prefix of "/" should match any url by definition but the final assertion which ensures that the matched prefix ends in '\0' or '/' is causing matches against the "/" prefix to fail. Update to current HEAD in order to fix this particular case. Signed-off-by: Jo-Philipp Wich <jo@mein.io> 
The special prefix of "/" should match any url by definition but the final
assertion which ensures that the matched prefix ends in '\0' or '/' is causing
matches against the "/" prefix to fail.

Update to current HEAD in order to fix this particular case.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
uhttpd: update to the latest version, adds a small json handler fix 2016-10-08T11:50:54+00:00 Felix Fietkau nbd@nbd.name 2016-10-06T13:19:10+00:00 175b59c59b7cd8f40bdb3a8f3c6fec05e46c5299 Signed-off-by: Felix Fietkau <nbd@nbd.name> 
Signed-off-by: Felix Fietkau <nbd@nbd.name>
source: Switch to xz for packages and tools where possible 2016-10-06T10:16:56+00:00 Daniel Engberg daniel.engberg.lists@pyret.net 2016-10-04T12:28:54+00:00 9edfe7dd13d973b2d0c754d79dabdeebaeb13d49 * Change git packages to xz * Update mirror checksums in packages where they are used * Change a few source tarballs to xz if available upstream * Remove unused lines in packages we're touching, requested by jow- and blogic * We're relying more on xz-utils so add official mirror as primary source, master site as secondary. * Add SHA256 checksums to multiple git tarball packages Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net> 
* Change git packages to xz
* Update mirror checksums in packages where they are used
* Change a few source tarballs to xz if available upstream
* Remove unused lines in packages we're touching, requested by jow- and blogic
* We're relying more on xz-utils so add official mirror as primary source, master site as secondary.
* Add SHA256 checksums to multiple git tarball packages

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>