Commit Graph

94 Commits (arm-master)

Author SHA1 Message Date
pedro 503922a5b2 rom: update CA bundle to 2025-02-25 7 months ago
pedro 8e06a9ecd0 rom: update CA bundle to 2024-12-31 9 months ago
pedro ba658044e6 rom: update CA bundle to 2024-11-26 10 months ago
pedro b4f599a122 rom: openssl.cnf: add default commonName 12 months ago
pedro 2e4180a102 rom: update CA bundle to 2024-09-24 1 year ago
pedro 67ae4504ed rom: update CA bundle to 2024-07-02 1 year ago
lancethepants 554d774e21 rom: Also remove authorityKeyIdentifier for usr_cert
This was ignored in older versions of OpenSSL, and causes errors in newer versions.
This fixes generating client certificates.
1 year ago
lancethepants dc064047ce rom: remove authorityKeyIdentifier from the Server cert generation.
While ignored in earlier versions of OpenSSL having authorityKeyIdentifier present
in the server cert generation gives an error.
https://github.com/openssl/openssl/issues/22966#issuecomment-1858396738
1 year ago
pedro 2efa336a04 rom: update CA bundle to 2024-03-11 2 years ago
pedro c2e996099d rom: update CA bundle to 2023-12-12 2 years ago
pedro ea6e86ab24 dnscrypt-proxy: update resolvers csv file 2 years ago
pedro b754e3590c rom: update CA bundle to 2023-08-22 2 years ago
lancethepants d23a918707 rom: Makefile: Escape single quotes (') in dnscrypt-resolvers.csv. 2 years ago
pedro 6ad3ddb2fd rom: update CA bundle to 2023-05-30 2 years ago
pedro aa27db4c3d getdns/stubby: fix the IP of one of the OpenDNS servers 3 years ago
pedro 13c9b48aff stubby: add getdnsapi.net DNS to the resolver list 3 years ago
pedro 171c5ccb35 stubby: remove Surfnet/Sinodun DNS from the list - it doesn't work anymore (resolves #279) 3 years ago
pedro d19e690691 dnscrypt-proxy: update resolvers csv file 3 years ago
pedro 9cd678d304 rom: update CA bundle to 2023-01-10 3 years ago
pedro 5d78876aa8 httpd: switch self-signed certificate from RSA to ECC
- will be less CPU-intensive, particularly for slower models

Ref: cbf95d8d2c
3 years ago
pedro 1a34765fb9 stubby: add Mullvad DNS to the list (resolves #233) 3 years ago
pedro 15ebdf587a libcurl: update CA certificate bundle as of 2022-10-11 3 years ago
pedro e781883066 dnscrypt-proxy: update resolvers csv file 3 years ago
pedro 823006beb6 libcurl: update CA certificate bundle as of 2022-07-19 3 years ago
pedro 9d9d3586b4 Add Cisco Umbrella/OpenDNS DoT Servers to Stubby Options (resolves #232) 3 years ago
pedro 0afcfe9a9d libcurl: update CA certificate bundle as of 2022-04-26 4 years ago
pedro 27006e83c0 libcurl: update CA certificate bundle as of 2022-03-29 4 years ago
pedro 322902bc20 libcurl: update CA certificate bundle as of 2022-02-01 4 years ago
pedro 64af5390e5 libcurl: update CA certificate bundle as of 2021-10-26 4 years ago
pedro ee4403f661 rom: Makefile: stay as close as possible to MIPS branch 4 years ago
pedro 60da4460df dnscrypt-proxy: update resolvers csv file 4 years ago
pedro 225fb5c5c4 libcurl: update CA certificate bundle as of 2021-09-30 4 years ago
pedro 268d2891e3 GUI: OpenVPN Server: fix generation of the correct CA Key previously caused clients errors. In order to work properly, the key must be generated again both for the server and client(s). 4 years ago
pedro e436161e71 libcurl: update CA certificate bundle as of 2021-07-05 4 years ago
pedro ac39fbbdbd libcurl: update CA certificate bundle as of 2021-05-25 4 years ago
pedro a92f887c87 GUI: Advanced: DHCP/DNS: exclude ipv6 only servers if ipv6 not enabled 5 years ago
pedro c31fc0d982 libcurl: update CA certificate bundle as of 2021-04-13 5 years ago
pedro 13ff2cf9d6 stubby: only include IPv6 resolvers if needed 5 years ago
pedro 5530fe4182 OpenVPN: Server: fix generating keys 5 years ago
pedro 90000a13f9 httpd: some changes to gencert.sh and httpd.c
- revert back to 10 years duration, as the Safari limitation only targets certificates signed by one of the built-in CAs
- remove CommonName entries as modern browsers no longer use that field - only hardcode router's IP address as the sole CN.
- add router_name and make sure that the hostname is not the same to avoid duplicate SANs
- use file_lock in httpd to avoid collisions if another httpd instance is initializing SSL cert; clean-up

Thanks to @RMerlin
5 years ago
pedro 3af2242d23 libcurl: update CA certificate bundle as of 2021-01-19 5 years ago
pedro d3d405f3ba stubby: update resolvers file 5 years ago
pedro 622231f009 stubby: add full GUI support (part 1/2)
- based on @RMerlin work (thanks!)
5 years ago
pedro 62721a54f6 stubby: tweak config: tls_query_padding_blocksize and idle_timeout 5 years ago
pedro 723c989c83 libcurl: update CA certificate bundle as of 2020-10-14 5 years ago
pedro e44e77243a openssl: conf: add extendedKeyUsage also to usr_cert section 5 years ago
pedro dfd85c586b libcurl: update CA certificate bundle as of 2020-07-22 5 years ago
pedro 99706a066a build: rom: use a local copy of ca-certificates file when unable to download 5 years ago
pedro 136b217342 dnscrypt-proxy: update resolvers csv file 5 years ago
pedro 5c7696eb9a router: rom: Makefile: fix downloading dnscrypt-proxy resolvers file 5 years ago