Shorewall: Change path to prevent busybox/ip detection before ip-tiny/full.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Merge pull request #5291 from pprindeville/acpica-unix-update-20171215

acpica-unix: update to 20171215

Merge pull request #5290 from brianjmurrell/set-PATH

shorewall-lite: set the $PATH variable

acpica-unix: update to 20171215

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

shorewall6-lite: set the PATH variable

So that it matches LEDE's default PATH value.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>

shorewall-lite: set the PATH variable

So that it matches LEDE's default PATH value.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>

Merge pull request #5236 from lynxis/rb_perl

perl: remove build timestamp

Merge pull request #5271 from jow-/introduce-setserial

setserial: introduce package

Revert "python,python3: add zlib/host to HOST_BUILD_DEPENDS"

This reverts commit c764f77dc1a62ce667b38520496ddb9bfaececab.

The commit caused warnings to be displayed at make defconfig etc.
  WARNING: Makefile 'package/feeds/packages/python/python/Makefile'
  has a host build dependency on 'zlib/host' but
  'package/libs/zlib/Makefile' does not implement a 'host' build type

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Merge pull request #5274 from commodo/python-host-zlib

python,python3: add zlib/host to HOST_BUILD_DEPENDS

Merge pull request #5118 from jow-/cgi-io-sha256

cgi-io: support SHA256 checksums for file uploads

Merge pull request #5264 from TDT-AG/pr/20171211-net-stunnel-add-uci-enabled-param

net/stunnel: add enabled config option

Merge pull request #5283 from dibdot/travelmate

travelmate: release 1.0.0

Merge pull request #5237 from lynxis/rb_php7

php7: remove build timestamp

Merge pull request #5280 from bk138/ola-0.10.5-try2

ola: update to 0.10.5, drop obsolete patches

travelmate: release 1.0.0

* limit sta interface selection/handling
  to defined travelmate interface (trm_iface) only
* check eap capabilities and ignore enterprise uplinks
  as long as eap support is not available
* documentation update
* cosmetics
* LuCI: various cleanups

Signed-off-by: Dirk Brenken <dev@brenken.org>

ola: update to 0.10.5, drop obsolete patches

This also add a patch fixing builds with newer protobuf versions,
https://github.com/OpenLightingProject/ola/pull/1336.

Signed-off-by: Christian Beier <dontmind@freeshell.org>

Merge pull request #5279 from mstorchak/lsof

lsof: reproducible build

Merge pull request #5244 from yousong/p11-err.h

openconnect: fix compilation against libp11 >= 0.4.7

lsof: reproducible build

- clear build host and user info
- clear compiler flags
- set date to SOURCE_DATE_EPOCH

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

net/stunnel: add enabled config option

Add an enabled option for the service section, so you could keep your
configuration in place without apply this section on startup or service reload.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

openconnect: fix compilation against libp11 0.4.7

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Merge pull request #5179 from neheb/cifs

cifs-utils: Update to 6.7

php7: remove build timestamp

Build timestamp prevents reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

perl: remove build timestamp

Build timestamp prevents reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

Merge pull request #5276 from thess/fdk-aac

fdk-aac: Update to latest source revision. Add myself as maintainer

Merge pull request #5261 from nxhack/bump_to_60_2

icu: update to 60.2

icu: update to 60.2

Maintainer: me
Compile tested: ar71xx, LEDE trunk r5488-893a1ed
Run tested: NONE

Description:
upstream update to 60.2
note: fix g++-4 issue

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

fdk-aac: Update to latest source revision. Add myself as maintainer

Signed-off-by: Ted Hess <thess@kitschensync.net>

Merge pull request #5275 from thess/unrar-update

unrar: Update to latest version (5.5.8)

unrar: Update to latest version (5.5.8)

11-Aug-2017 version fixes outstanding CVE's.
CVE-2012-6706, CVE-2017-12942, CVE-2017-12941, CVE-2017-12940 and CVE-2017-12938

Signed-off-by: Ted Hess <thess@kitschensync.net>

python,python3: add zlib/host to HOST_BUILD_DEPENDS

This should fix the zlibmodule build on the host side.

Usually, if zlib is not found, Python/Python3 builds fine
without it, but there are some cases where the Python/Python3
interpreter on the host-side requires zlib to run.

At the moment, zlib does not have a host-build.
This should be available when this PR gets merged:
https://github.com/lede-project/source/pull/1329
[ or a similar one that contains host-build support for zlib ].

In the meantime, this change can go into Python/Python3.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

mjpg-streamer: Remove build date-time from image

Remove un-needed uvcvideo.h (use system include)

Signed-off-by: Ted Hess <thess@kitschensync.net>

Merge pull request #5190 from jow-/iodine-fix-musl-endianess

iodine: properly detect endianess when building against musl libc

iodine: workaround incomplete musl nameser.h header

The arpa/nameser.h header of musl libc indirectly depends on the endian.h
header but fails to explicitely include it to properly define
`__BYTE_ORDER` and `__BIG_ENDIAN` prior to declaring the DNS `HEADER`
structure.

When both the appropriate `__BYTE_ORDER` and `__BIG_ENDIAN` defines are
unset, the `#if __BYTE_ORDER == __BIG_ENDIAN` condition in `nameser.h`
evaluates to true, causing it to declare a bad (big endian) DNS packet
header structure on little endian systems.

Work around this musl bug by forcibly passing `-include endian.h` through
the `osflags` file.

An upstream fix for musl libc has been submitted with
http://www.openwall.com/lists/musl/2017/12/04/3

This should solve iodine packet corruption on little endian musl systems
reported at
http://lists.infradead.org/pipermail/lede-dev/2017-November/010085.html

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

setserial: introduce package

This packages setserial, the standard Linux program for setting serial
device attributes such as baud rate, flow control etc.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

nlbwmon: update to current HEAD

Update to latest Git HEAD in order to solve a number of issues.

 - Improves MAC address lookup reliability
 - Properly counts DNAT-ed connections (e.g. for port forwards)
 - Fixes stack corruption when parsing netlink records
 - Fixes deletion of gzipped databases

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

Merge pull request #5267 from diizzyy/patch-112

utils/gawk: Fix package

Merge pull request #5218 from lynxis/rb_lua-rs232

lua-rs232: remove build timestamp

Merge pull request #5207 from lynxis/rb_libdbd

libdbi-drivers: remove build timestamp

lxc: add lxc-unprivileged helper package for unprivileged containers

LXC requires newuidmap and newguidmap with SUID to run unprivileged
containers. This package should help users make sure they are available.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>

utils/gawk: Fix package

Remove igawk references as it's obsolete and not provided anymore.
Reported here: https://github.com/openwrt/packages/issues/5110
Fix package URL

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Merge pull request #5213 from lynxis/rb_openplc

open-plc-utils: remove build timestamp

Merge pull request #5263 from yangfl/master

i2pd: Update to 2.17.0

Merge pull request #5262 from neheb/patch-1

gnutls: Use HTTP instead of FTP

net/mosquitto: reproducible build patches

Remove build timestamp.  Using currently proposed upstream patch.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
Signed-off-by: Karl Palsson <karlp@etactica.com>

net/mosquitto: depend on virtual package instead of select

Can't use DEPENDS:= +libname when libname is now a virtual package.
Switch to plain DEPENDS:= libname.

Fixes Github issue 4751

Signed-off-by: Karl Palsson <karlp@etactica.com>

libwebsockets: remove build hostname

Using the build hostname breaks reproducible builds.
The patch is already merged upstream

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

libwebsockets: bump to version 2.4.1

No changelog entry upstream unfortunately.

Signed-off-by: Karl Palsson <karlp@etactica.com>

i2pd: Update to 2.17.0

Signed-off-by: David Yang <mmyangfl@gmail.com>

gnutls: Use HTTPS instead of FTP

While recently building asterisk, the make system stalled on gnutls. On my install of Ubuntu 16.04 on WSL, it seems curl can't download from ftp and doesn't even time out properly. Easiest solution is to switch the gnutls Makefile to use HTTPS instead.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #5259 from valdi74/update_python-curl

python-curl: update to 7.43.0.1

Merge pull request #5197 from commodo/python-bluez-deps

 python,python3: define config option for bluetooth support

python-curl: update to 7.43.0.1

Signed-off-by: Waldemar Konik <informatyk74@interia.pl>

python,python3: define config option for bluetooth support

It was reported via
https://github.com/openwrt/packages/pull/5122#issuecomment-347395472
that if bluez-libs is selected as an installable package,
then the error below will show up:
```
 * satisfy_dependencies_for: Cannot satisfy the following dependencies for python-light:
 * bluez-libs *
 * opkg_install_cmd: Cannot install package python-light.
```

This looks like a limitation in the design of package deps,
and maybe a misuse of conditional deps (i.e. PACKAGE_bluez-libs:bluez-libs).

So, to fix this, an idea we're adding an extra symbol
that enfoces installation of bluez-libs if selected.

We also need to add a way to disable bluetooth build
if PYTHON(3)_BLUETOOTH_SUPPORT is de-selected.
Otherwise, bluetooth is installed and the socket
module is broken due to linker errors.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-pip-conf: split package away from python package

This should improve build time if you only want to
build Python3 (and not Python).

Because python-pip-conf was part of the python package,
the whole python package (host + target) would get built if Python3
would need to get built.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #5116 from TDT-AG/pr/20171113-stunnel-add-uci-support

net/stunnel: add uci config support

net/stunnel: add uci config support

Add uci config support.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Merge pull request #5256 from lynxis/rb_openldap

openldap: remove build host/user/timestamp

openldap: remove build host/user/timestamp

Such information from the build system break reproducible builds.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

open-plc-utils: remove build timestamp

Build timestamps prevent reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

Merge pull request #5155 from neheb/patch-6

ethtool: Update to 4.13

Merge pull request #5253 from mstorchak/acl

acl: update to 20170420

Merge pull request #5248 from diizzyy/patch-111

net/stunnel: Update to 5.44

Merge pull request #5252 from mstorchak/attr

attr: update to 20170915

Merge pull request #5245 from mstorchak/rsync

rsync: fix CVE-2017-15994 and CVE-2017-16548

acl: update to 20170420

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

attr: update to 20170915

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

Merge pull request #5250 from mstorchak/tgt

tgt: update to 1.0.72

Merge pull request #5251 from mstorchak/smartmontools

smartmontools: update to 6.6

smartmontools: update to 6.6

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

tgt: update to 1.0.72

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

net/stunnel: Update to 5.44

Update stunnel to 5.44
* Disable FIPS

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Merge pull request #5247 from dibdot/travelmate

travelmate: update 0.9.6

travelmate: update 0.9.6

* fix incomplete bssid logic
* add missing package dependencies
* Turris omnia compability fixes (LuCI, separate PR)
* OpenWrt theme fixes (LuCI, separate PR)

Signed-off-by: Dirk Brenken <dev@brenken.org>

build,travis: SDK name now start with openwrt

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

Merge pull request #5242 from smutt/danish

danish: Add package net/danish

wavemon: use SOURCE_DATE_EPOCH as BUILD_DATE

Build timestamps prevent reproducible builds [0].
SOURCE_DATE_EPOCH [1] can replace BUILD_DATE in a
determinisc way.

[0] https://reproducible-builds.org/docs/timestamps/
[1] https://reproducible-builds.org/specs/source-date-epoch/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

Merge pull request #5246 from wvdakker/master

Shorewall: bump to version 5.1.9

Shorewall6: bump to version 5.1.9

Removed 010-update_install_sh.patch. Merged upstream.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall: bump to version 5.1.9

Removed 010-update_install_sh.patch. Merged upstream.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall6-lite: bump to version 5.1.9

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-lite: bump to version 5.1.9

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-core: bump to version 5.1.9

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

rsync: Fix CVE-2017-15994 and CVE-2017-16548

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

Merge pull request #5243 from brianjmurrell/shorewall-multi-sources

Shorewall multi sources

Merge pull request #5238 from lynxis/rb_lcdproc

lcdproc: remove build timestamp

Merge pull request #5214 from lynxis/rb_ddns_cloud

ddns-scripts: remove gzip timestamp

libp11: include also p11_err.h when InstallDev

Fix the following compilation error

    In file included from openconnect-internal.h:95:0,
     from ssl.c:41:
    /home/yousong/git-repo/lede-project/lede/staging_dir/target-mips_24kc_musl/usr/include/libp11.h: At top level:
    /home/yousong/git-repo/lede-project/lede/staging_dir/target-mips_24kc_musl/usr/include/libp11.h:27:21: fatal error: p11_err.h: No such file or directory
    compilation terminated.
    make[5]: *** [libopenconnect_la-ssl.lo] Error 1

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

shorewall6: Multiple source sources

Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>

shorewall: Multiple source sources

Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>

shorewall6-lite: Multiple source sources

Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>

shorewall-lite: Multiple source sources

Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>

shorewall-core: Multiple source sources

Maintainer: @wvdakker

Description:
Specify multiple sources for fetching the source tarball
for redundancy.

Pulled out of a historical version of these packages before
they were removed a while ago.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>

danish: Add package net/danish

Add package Danish. A middle box implementation of RFC 6698 for HTTPS.
<https://github.com/smutt/danish>

This package installs /usr/sbin/danish(the Danish executable), /etc/init.d/danish and /etc/config/danish.

Tested with LEDE x86_64

Signed-off-by: Andrew McConachie <andrew@depht.com>

Merge pull request #5232 from dibdot/travelmate

travelmate: update 0.9.5

Merge pull request #4486 from wvdakker/master

Shorewall(6): add full packages.

Merge pull request #5185 from kubco2/mwan3-improve-logs

mwan3: Improve logs when member metric is too big

mwan3: Improve logs when member metric is too big

If metric of member interface is bigger then 256, it is not
appended to policy, now at least warn message is printed into
syslog

Signed-off-by: Jakub Janco <kubco2@gmail.com>

tor: update to 0.3.1.9

Signed-off-by: Peter Wagner <tripolar@gmx.at>