Merge pull request #4059 from EricLuehrsen/trust_anchor

unbound: DNSSEC trust anchor roll for 2017

unbound: Update to 1.6.1 with 2017 trust anchor

Unbound 1.6.1 has a few bug fixes for resource leaks,
configuration robustness, compile environment interaction,
and maintaining the trust anchor. The 2017 trust anchor
(DS) is built into unbound and unbound-anchor.

File /etc/unbound/root.key holds 2010/2017 DS record until 2018
https://www.icann.org/resources/pages/ksk-rollover
https://www.iana.org/domains/root

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

unbound: bugfix add_local_fqdn with empty ULA

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

php7: update to 7.1.2

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #4056 from dibdot/adblock

adblock: update 2.3.2

Merge pull request #4066 from nxhack/support-icu-config

icu: Added icu-config installation to InstallDev

icu: Added icu-config installation to InstallDev

Maintainer: me
Compile tested: ar71xx, mips_24kc_gcc-6.3.0_musl, LEDE trunk r3576-ea24d87
Run tested: NONE

Description:
"php7-mod-intl" build fail, because of lacking icu-config.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #4064 from danrl/wg

wireguard: version bump

wireguard: version bump

Signed-off-by: Dan Luedtke <mail@danrl.com>

pptpd: run service in foreground for procd compatibility

To have service working nicely with procd it should be running in the
foreground. Otherwise it's not possible to e.g. stop it with the init.d
script. Luckily for us pptpd has a simple switch that allows it.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
Fixes: 15e7f611afb ("pptpd: convert init script to procd")

lighttpd: fix regression in local-redir used with url.rewrite-once

This fixes upstream regression introduced in 1.4.40. It was reported &
debugged in https://redmine.lighttpd.net/issues/2793
This fix is queued for 1.4.46 in the personal/gstrauss/master upstream
branch.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>

Merge pull request #4037 from Ansuel/bump-cryptodev

Cryptodev-linux: bump to last commit

[dejavu-fonts] add license info and myself as maintainer

This was suggested in comments on the initial commit
( https://github.com/openwrt/packages/commit/c7dca5a9 )

adblock: update 2.3.2

* optimize memory consumption &
  enable overall sort only on devices with > 64MB RAM,
  this prevents sort related kernel dumps

Signed-off-by: Dirk Brenken <dev@brenken.org>

Merge pull request #3967 from commodo/python-pyscopg2

python-psycopg2: replace python-setuptools dep with python/host

Merge pull request #3945 from InBetweenNames/update-vim

vim: Update Vim to 8.0.069

Merge pull request #4051 from ClaymorePT/boost_1.63_r2

boost: 1.63 Revision 2 - Fixed Regression

boost: 1.63 Revision 2 - Fixed Regression

This commit fixes an existent regression in boost 1.63 [1].
The regression appears when libc is used for the toolchain.

[1] -  https://svn.boost.org/trac/boost/ticket/11756

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>

Merge pull request #4050 from zx2c4/master

net/wireguard: add stub install section

net/wireguard: add stub install section

This is in response to the metapackage discussion in openwrt/luci#1030.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>

Merge pull request #4025 from danrl/lxc

utils/luci-app-lxc: removed application

Merge pull request #4046 from ianchi/master

youtube-dl: update version

Merge pull request #4047 from MikePetullo/lighttpd

lighttpd: update to 1.4.45

youtube-dl: update version

Update to version 2017.02.17

Signed-off-by: Adrian Panella <ianchi74@outlook.com>

lighttpd: update to 1.4.45

Update to 1.4.42 introduced a problem with starting lighttpd as
OpenWrt/LEDE service. It was stopping whole init process at sth like:
  783 root      1124 S    {S50lighttpd} /bin/sh /etc/rc.common /etc/rc.d/S50lighttpd boot
  799 root      1164 S    /usr/sbin/lighttpd -f /etc/lighttpd/lighttpd.conf

It was hanging until getting random pool:
[  176.340007] random: nonblocking pool is initialized
and then immediately the rest of init process followed:
[  176.423475] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[  176.430754] jffs2_build_filesystem(): unlocking the mtd device... done.
[  176.437615] jffs2_build_filesystem(): erasing all blocks after the end marker... done.

This was fixed in 1.4.44, but bump directly to 1.4.45 while at it.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>

Cryptodev-linux: bump to last commit

Fixing of varius error

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>

Merge pull request #4038 from kuoruan/aria2

Aria2: Edit config and update

aria2: Update to v1.31.0

Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>

Merge pull request #4039 from the-alien/master

python-ldap: update to 2.4.32

ser2net: update to 3.4

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

python-ldap: update to 2.4.32

Signed-off-by: Dmitry Trefilov <the-alien@live.ru>

aria2: Add more feature choices and switch default XML parser library to Libxml2

Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>

Merge pull request #4030 from dibdot/travelmate

travelmate: update 0.3.5

Merge pull request #4032 from kuoruan/webui-aria2

webui-aria2: bump version

Merge pull request #4031 from SvenRoederer/improve/wireguard-menu

wireguard: move into VPN-submenu

travelmate: update 0.3.5

* add 'enabled' check in init script
* support multiple radios (see online doc)
* fix race condition in ap check

Signed-off-by: Dirk Brenken <dev@brenken.org>

webui-aria2: bump version

* Reduced package size.
* Update to latest commit.

Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>

Merge pull request #4002 from InBetweenNames/pcre2

pcre2: Introduce PCRE2 library into repo for fish

wireguard: move into VPN-submenu

Wireguard is a VPN-implementation and should
be located in VPN-submenu

Signed-off-by: Sven Roederer <freifunk@it-solutions.geroedel.de>

pcre2: Introduce PCRE2 library into repo for fish

Need PCRE2 library for the fish shell.  Took existing pcre makefile
as a base to build pcre2, supporting 8, 16, and 32 bit characters with
different install targets for each.

Signed-off-by: Shane Peelar <lookatyouhacker@gmail.com>

ffmpeg: update to 3.2.4, add libshine support, add fdk-aac support to custom, cleanup

Also makes the following changes:

Updates project URL and moves libpthread to a common dependency;
Makes libopus support in libffmpeg-full contingent on selecting the
libopus package, like other external libraries;
Adds note regarding disabling altivec in ppc hard-float;
Reorganizes SIMD sections to be together;
Drops the need to specify decoder=libopus from -full, done by default;
Adds encoder=libopus to custom.

Expand options for libffmpeg-custom:
Build licensing: GPL, GPLv3, LGPLv3
Building for performance or size

Drops version 3 of GPL for -audio-dec, -mini, and -full. Version 3 is
at the discretion of the packager, per:
http://ffmpeg.org/doxygen/trunk/md_LICENSE.html

Add enable-nonfree toggle support to libffmpeg-custom build licensing
to allow inclusion of libfdk-aac.

Use ffmpeg's names for its external libraries in libffmpeg-custom config
Alphabetize same

Correct @BUILD_PATENTED flags for libffmpeg variants

Split libffmpeg-full into hard/soft float:
Hard float configures itself for lame / libx264 using GPL license
Soft float for libshine and LGPL license

Signed-off-by: Ian Leonard <antonlacon@gmail.com>
Signed-off-by: Ted Hess <thess@kitschensync.net>

utils/luci-app-lxc: removed application

Moved over to the LuCI repository.

Signed-off-by: Dan Luedtke <mail@danrl.com>

Merge pull request #3860 from commodo/micropython-lib-workaround

micropython-lib: workaround the `install` build rule

Merge pull request #4022 from stangri/vpnbypass

vpnbypass: fix for flushing mangle table

vpnbypass: fix for flushing mangle table

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #4019 from dibdot/adblock

adblock: update 2.3.1

adblock: update 2.3.1

* various optimizations & corner case fixes
* removed no longer needed debug information
* polished up for forthcoming LEDE release ;-)

Signed-off-by: Dirk Brenken <dev@brenken.org>

luv: new package

Luv is libuv binding for lua.

Signed-off-by: Morteza Milani <milani@pichak.co>

Merge pull request #4013 from danrl/move-to-luci

net/luci-app-*: move luci apps to luci repo

Merge pull request #4017 from nxhack/support_openwrt_trunk

icu: support OpenWrt trunk host-build.mk issue

icu: support OpenWrt trunk host-build.mk issue

Maintainer: me
Compile tested: ar71xx, mips_34kc_gcc-5.3.0_musl, OpenWrt trunk 50104
                ar71xx, mips_24kc_gcc-5.4.0_musl, LEDE trunk r3503-a112435
Run tested: NONE

Description:
openwrt buildbot report build fail

```
./runConfigureICU CC="gcc" CFLAGS="-O2 -I/home/builder/trunk/openwrt/staging_dir/host/include -I/home/builder/trunk/openwrt/staging_dir/host/usr/include -I/home/builder/trunk/openwrt/staging_dir/target-i386_pentium4_glibc-2.22/host/include" CPPFLAGS="-I/home/builder/trunk/openwrt/staging_dir/host/include -I/home/builder/trunk/openwrt/staging_dir/host/usr/include -I/home/builder/trunk/openwrt/staging_dir/target-i386_pentium4_glibc-2.22/host/include" LDFLAGS="-L/home/builder/trunk/openwrt/staging_dir/host/lib -L/home/builder/trunk/openwrt/staging_dir/host/usr/lib -L/home/builder/trunk/openwrt/staging_dir/target-i386_pentium4_glibc-2.22/host/lib" SHELL="/usr/bin/env bash" Linux/gcc CC="gcc" CXX="g++" --disable-debug --enable-release --enable-shared --enable-static --enable-draft --enable-renaming --disable-tracing --disable-extras --enable-dyload --prefix=/home/builder/trunk/openwrt/staging_dir/target-i386_pentium4_glibc-2.22/host ; fi )
runConfigureICU: unrecognized platform "CC=gcc" (use --help for help)
```

"host-build.mk" is differs between OpenWrt and LEDE.

https://github.com/openwrt/packages/pull/3993

https://github.com/lede-project/source/commit/83b6bfc2357458f219872f97ed9c4894106131a1

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #3784 from diizzyy/patch-16

lang/python3-bottle: Update to 0.12.12

net/luci-app-*: move luci apps to luci repo

This is a long-needed clean-up.
These applications are not gone! They live in the
luci repo now, where all their friends already are.

Signed-off-by: Dan Luedtke <mail@danrl.com>

Merge pull request #4011 from stangri/vpnbypass

vpnbypass: fixed makefile and removed screenshot from .files/

vpnbypass: fixed makefile and removed screenshot from .files/

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #4008 from stangri/vpnbypass

vpnbypass: makefile hotfix

vpnbypass: makefile hotfix

Signed-off-by: Stan Grishin <stangri@melmac.net>

vpnbypass: remove problematic sed command from Makefile

Makefile had sed commands in "prepare" step that modified the
source files directly. That lead to feed update failure at the
buildbot.

Remove those commands as the first aid.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

net-snmp: add engineID config options

According to the snmpd.conf man page, the engineID of an snmp agent
should be consistent through time. However, it seems that the engineID
changes every reboot. Add options to configure how the engineID is
generated. The default setting generates it based on the MAC address of
the eth0 interface.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Merge pull request #4007 from tsl0922/ttyd-1.3.0

ttyd: update to 1.3.0

ttyd: update to 1.3.0

Signed-off-by: Shuanglei Tao <tsl0922@gmail.com>

wireguard: simple package bump to 0.0.20170214

While I'm at it, add myself as maintainer, since I'm doing many of the
bumps anyway.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>

xl2tpd: backporting fix for race condition causing xl2tpd hang

The patch was taken from https://github.com/xelerance/xl2tpd/pull/125

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Merge pull request #4001 from kissg1988/seafile

seafile: update to version 6.0.7

Merge pull request #4004 from stangri/vpnbypass

vpnbypass: updated README (linked from luci app)

vpnbypass: updated README (linked from luci app)

Signed-off-by: Stan Grishin <stangri@melmac.net>

seafile: update to version 6.0.7

Update several dependencies, as well:

* django-compressor -> 2.1.1
* django-constance -> 1.3.4
* django-restframework -> 3.5.4
* django-statici18n -> 1.3.0
* django -> 1.8.17
* openpyxl -> 2.4.2
* python-dateutil -> 2.6.0
* python-urllib3 -> 1.20

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

package dejavu fonts

Signed-off-by: Mirko Vogt <mirko-dev@nanl.de>

Merge pull request #3896 from usr-sse2/patch-1

hfsprogs: Fix building on macOS

Merge pull request #3998 from commodo/fix-ncurses-build

python,python3: fix ncurses module build

python3: fix ncursesw definition collisions

setup.py seems to add the host's /usr/include/ncursesw
header.

Reported-by: Arturo Rinaldi <arturo@arduino.org>
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python: remove setupterm() redefinition

It's not 100% aligned with the ncurses' definition.

Reported-by: Arturo Rinaldi <arturo@arduino.org>
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #3997 from eduardoabinader/check_use_sha256

check: use sha256 checksum

check: use sha256 checksum

Signed-off-by: Eduardo Abinader <eduardoabinader@gmail.com>

Merge pull request #3995 from nxhack/use_NOCACHE

icu: fix  fail situation of CONFIG_CCACHE=y

icu: fix  fail situation of CONFIG_CCACHE=y

Maintainer: me
Compile tested: brcm2708 ,aarch64_cortex-a53+neon-vfpv4_musl, LEDE head r3426-4c09f99
Run tested: NONE

Description:
buildbots fail situation of CONFIG_CCACHE=y

`Running ./configure  CC=ccache gcc CXX=ccache g++ ....`

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #3238 from eduardoabinader/bump_libcheck

check: bump to 0.11.0

check: changing Maintainer

As agreed on https://github.com/openwrt/packages/pull/3238

Signed-off-by: Eduardo Abinader <eduardoabinader@gmail.com>

check: bump to 0.11.0

updated new package url and solved some issues:
https://github.com/libcheck/check/releases/tag/0.11.0

Signed-off-by: Eduardo Abinader <eduardoabinader@gmail.com>

Merge pull request #3987 from stangri/vpnbypass

vpnbypass: new service triggers, typo fix

vpnbypass: new service triggers, typo fix, more reliable start

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #3992 from the-alien/master

python-ldap: update to 2.4.30

Merge pull request #3993 from nxhack/specify_crosscompile_vars

icu: specify cross compile variables

icu: specify cross compile variables

Maintainer: me
Compile tested: brcm2708
                aarch64_cortex-a53+neon-vfpv4_musl
                LEDE head r3426-4c09f99
Run tested: NONE

Description:
buildbots fail on link ARM object.

   error: xxxxxx.o uses VFP register arguments,

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

python-ldap: update to 2.4.30

Signed-off-by: Dmitry Trefilov <the-alien@live.ru>

gnutls: updated to 3.5.9

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

ocserv: updated to 0.11.7

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge pull request #3983 from leitec/ngircd-update-24

ngircd: update to v24

Merge pull request #3985 from EricLuehrsen/unbound_odhcpd

unbound: improve robustness with dhcp scripts

Merge pull request #3988 from dibdot/adblock

adblock: 2.3.0 (package release 3)

adblock: 2.3.0 (package release 3)

* refine too optimistic wget/uclient-fetch timeout defaults
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>

unbound: improve robustness with dhcp scripts

When for example 'package/net/adblock' and DNSSEC vs NTP robustness
is enabled, significant restart thrashing can occur at boot up. DHCP
lease triggers may be occuring at the same time. Unbounds DNS-DHCP
may be incomplete until new DHCP solicit events. Solve this by
leaving a passive but complete host conf file during lease trigger.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

ngircd: update to v24

Signed-off-by: Claudio Leite <leitec@gmail.com>

Merge pull request #3975 from persandstrom/master

Protobuf: Upgrade to version 3.1

Protobuf: Upgrade to version 3.1

Signed-off-by: Per Sandström <per.j.sandstrom@gmail.com>

Merge pull request #3978 from stsydow/patch-2

chrony: set rtcsync option to avoid UNSYNC state

chrony: set rtcsync config option

Else the system will always stay in UNSYNC state.
Even if there is no real RTC.
See chrony minimal config:
http://chrony.tuxfamily.org/faq.html#_what_is_the_minimum_recommended_configuration_for_an_ntp_client

Signed-off-by: Stefan Sydow <st@metafly.info>

Merge pull request #3872 from jow-/loudmouth-fix-autoreconf

loudmouth: fix autoconf errors

Merge pull request #3882 from val-kulkov/subversion-package

subversion: add unixodbc dependency

Merge pull request #3891 from tmn505/pcmciautils

pcmciautils: import from oldpackages