pedro
503922a5b2
rom: update CA bundle to 2025-02-25
7 months ago
pedro
8e06a9ecd0
rom: update CA bundle to 2024-12-31
9 months ago
pedro
ba658044e6
rom: update CA bundle to 2024-11-26
10 months ago
pedro
b4f599a122
rom: openssl.cnf: add default commonName
12 months ago
pedro
2e4180a102
rom: update CA bundle to 2024-09-24
1 year ago
pedro
67ae4504ed
rom: update CA bundle to 2024-07-02
1 year ago
lancethepants
554d774e21
rom: Also remove authorityKeyIdentifier for usr_cert
...
This was ignored in older versions of OpenSSL, and causes errors in newer versions.
This fixes generating client certificates.
1 year ago
lancethepants
dc064047ce
rom: remove authorityKeyIdentifier from the Server cert generation.
...
While ignored in earlier versions of OpenSSL having authorityKeyIdentifier present
in the server cert generation gives an error.
https://github.com/openssl/openssl/issues/22966#issuecomment-1858396738
1 year ago
pedro
2efa336a04
rom: update CA bundle to 2024-03-11
2 years ago
pedro
c2e996099d
rom: update CA bundle to 2023-12-12
2 years ago
pedro
ea6e86ab24
dnscrypt-proxy: update resolvers csv file
2 years ago
pedro
b754e3590c
rom: update CA bundle to 2023-08-22
2 years ago
lancethepants
d23a918707
rom: Makefile: Escape single quotes (') in dnscrypt-resolvers.csv.
2 years ago
pedro
6ad3ddb2fd
rom: update CA bundle to 2023-05-30
2 years ago
pedro
aa27db4c3d
getdns/stubby: fix the IP of one of the OpenDNS servers
3 years ago
pedro
13c9b48aff
stubby: add getdnsapi.net DNS to the resolver list
3 years ago
pedro
171c5ccb35
stubby: remove Surfnet/Sinodun DNS from the list - it doesn't work anymore ( resolves #279 )
3 years ago
pedro
d19e690691
dnscrypt-proxy: update resolvers csv file
3 years ago
pedro
9cd678d304
rom: update CA bundle to 2023-01-10
3 years ago
pedro
5d78876aa8
httpd: switch self-signed certificate from RSA to ECC
...
- will be less CPU-intensive, particularly for slower models
Ref: cbf95d8d2c
3 years ago
pedro
1a34765fb9
stubby: add Mullvad DNS to the list ( resolves #233 )
3 years ago
pedro
15ebdf587a
libcurl: update CA certificate bundle as of 2022-10-11
3 years ago
pedro
e781883066
dnscrypt-proxy: update resolvers csv file
3 years ago
pedro
823006beb6
libcurl: update CA certificate bundle as of 2022-07-19
3 years ago
pedro
9d9d3586b4
Add Cisco Umbrella/OpenDNS DoT Servers to Stubby Options ( resolves #232 )
3 years ago
pedro
0afcfe9a9d
libcurl: update CA certificate bundle as of 2022-04-26
4 years ago
pedro
27006e83c0
libcurl: update CA certificate bundle as of 2022-03-29
4 years ago
pedro
322902bc20
libcurl: update CA certificate bundle as of 2022-02-01
4 years ago
pedro
64af5390e5
libcurl: update CA certificate bundle as of 2021-10-26
4 years ago
pedro
ee4403f661
rom: Makefile: stay as close as possible to MIPS branch
4 years ago
pedro
60da4460df
dnscrypt-proxy: update resolvers csv file
4 years ago
pedro
225fb5c5c4
libcurl: update CA certificate bundle as of 2021-09-30
4 years ago
pedro
268d2891e3
GUI: OpenVPN Server: fix generation of the correct CA Key previously caused clients errors. In order to work properly, the key must be generated again both for the server and client(s).
4 years ago
pedro
e436161e71
libcurl: update CA certificate bundle as of 2021-07-05
4 years ago
pedro
ac39fbbdbd
libcurl: update CA certificate bundle as of 2021-05-25
4 years ago
pedro
a92f887c87
GUI: Advanced: DHCP/DNS: exclude ipv6 only servers if ipv6 not enabled
5 years ago
pedro
c31fc0d982
libcurl: update CA certificate bundle as of 2021-04-13
5 years ago
pedro
13ff2cf9d6
stubby: only include IPv6 resolvers if needed
5 years ago
pedro
5530fe4182
OpenVPN: Server: fix generating keys
5 years ago
pedro
90000a13f9
httpd: some changes to gencert.sh and httpd.c
...
- revert back to 10 years duration, as the Safari limitation only targets certificates signed by one of the built-in CAs
- remove CommonName entries as modern browsers no longer use that field - only hardcode router's IP address as the sole CN.
- add router_name and make sure that the hostname is not the same to avoid duplicate SANs
- use file_lock in httpd to avoid collisions if another httpd instance is initializing SSL cert; clean-up
Thanks to @RMerlin
5 years ago
pedro
3af2242d23
libcurl: update CA certificate bundle as of 2021-01-19
5 years ago
pedro
d3d405f3ba
stubby: update resolvers file
5 years ago
pedro
622231f009
stubby: add full GUI support (part 1/2)
...
- based on @RMerlin work (thanks!)
5 years ago
pedro
62721a54f6
stubby: tweak config: tls_query_padding_blocksize and idle_timeout
5 years ago
pedro
723c989c83
libcurl: update CA certificate bundle as of 2020-10-14
5 years ago
pedro
e44e77243a
openssl: conf: add extendedKeyUsage also to usr_cert section
5 years ago
pedro
dfd85c586b
libcurl: update CA certificate bundle as of 2020-07-22
5 years ago
pedro
99706a066a
build: rom: use a local copy of ca-certificates file when unable to download
5 years ago
pedro
136b217342
dnscrypt-proxy: update resolvers csv file
5 years ago
pedro
5c7696eb9a
router: rom: Makefile: fix downloading dnscrypt-proxy resolvers file
5 years ago