acme: Bump release version

Signed-off-by: David Yang <mmyangfl@gmail.com>

acme: Handle ecc cert correctly

Error was:
  The domain 'example.com' seems to have a ECC cert already, please add '--ecc' parameter if you want to use that cert.

Signed-off-by: David Yang <mmyangfl@gmail.com>

acme: Handle log message correctly

Error was:
  logger: unrecognized option: renew

Signed-off-by: David Yang <mmyangfl@gmail.com>

Merge pull request #12614 from stangri/19.07-https-dns-proxy

[19.07] https-dns-proxy: re-add conffiles and add description to Makefile

https-dns-proxy: re-add conffiles and add description to Makefile

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #12597 from stangri/19.07-https-dns-proxy

[19.07] https-dns-proxy: bugfix: remove eDNS support

https-dns-proxy: bugfix: remove eDNS support

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #12588 from rs/nextdns-1.7.0-openwrt-19.07

[19.07] nextdns: Update to version 1.7.0

nextdns: Update to version 1.7.0

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

irqbalance: fix socket directory and create it

Irqbalance defines /run/irqbalance dir for its socket
communication between irqbalance and its UI. /run does not exist
in OpenWrt (although it is defined by the Linux FHS), so the
socket creation fails. Although we do not compile UI and thus
the issue is not critical to us, fix the directory location.

Additionally, the creation is originally handled by a systemd
init script that we do not use.

* patch source to define dir as /var/run/irqbalance
* create the dir in the procd init script.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry-picked from 4f0c847828b)

treewide: add conffiles

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry-picked irqbalance section from from 0ec746ccb6)

irqbalance: fix compilation for USE_GLIBC and BUILD_NLS cases

The package Makefile was not taking into consideration that the build
may be using BUILD_NLS with libintl-full and libiconv-full and was
trying to link the wrong versions of these libraries in this case.

The necessary flags are added by nls.mk to TARGET_LDFLAGS and can be
passed to irqbalance's configure script for setting the GLIB2_LIBS
variable instead of the explicit static link to the libiconv stub.

The PKG_BUILD_DEPENDS line should be modified so as to add to and not
override the definition set by nls.mk, which will ensure the right
version of libiconv and libintl is built beforehand.

A DEPENDS:= line should be added to the package definition using the
variables defined in nls.mk, which will add the appropriate version
of libintl and libiconv (vanilla or -full versions)

If USE_GLIBC is true, then libpthread needs to be explicitly passed
to the configure script in the GLIB2_LIBS variable for linking.

Signed-off-by: Ian Cooper <iancooper@hotmail.com>
(cherry-picked from 88c25e87a1)

haveged: update to 1.9.12

Update haveged to version 1.9.12

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6392d50c3180b5da7a4ba041decf7a229d0e1c53)

Merge pull request #12563 from Andy2244/ksmbd-3.2.0_ksmbd-tools-3.2.6-(19-07)

[19.07] Revert "ksmbd: update to 3.2.0, ksmbd-tools: update to 3.2.6"

Revert "ksmbd: update to 3.2.0, ksmbd-tools: update to 3.2.6"

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
This reverts commit d88405ba84d397a1ccecee5077bba25d33c4c21e.

haproxy: Update HAProxy to v2.0.15

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

transmission: add access to web interface files to procd jail

Signed-off-by: Josef Zila <josefzila@gmail.com>
(cherry picked from commit 9a82c952b447b9b3145c288957dbd1a671021f1b)

transmission: add a disabled notification

Helps to see that transmission must be enabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 89fc95c4fcbd65cf7958ba916a2073632ecadb50)

transmission: update to 3.0

remove upstreamed patches. Refresh remaining one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 93485dd317e7fa3ed9eb4d09a49df1ac2b9508ff)

upmpdcli: update to 0.4.6

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0d72b95b0b2a2c3f438344e23914833183fa72b1)

upmpdcli: Update to 1.4.2

Fixed license information.

Added PKG_BUILD_PARALLEL for faster compilation.

Removed upstreamed patch.

Ran init script through shellcheck.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b2d016d3527d3e5cc1ccf2e147c49deb9e0bccf8)

haveged: update to 1.9.11

Update haveged to version 1.9.11

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit ca30b0ff91846a407469f6a77d1cbaf6b150d06d)

Merge pull request #12509 from lipnitsk/openwrt-19.07

perl: fix build failure in GCC10

perl: fix build failure in GCC10

The perl Configure file was matching GCC 10 against "1*" and treating it
as GCC 1, causing ABI breakage and segfaults.

Cherry-pick the upstream patch which fixes it to check against (e.g)
"1.*" instead, which will make it work for hundreds more GCC versions
to come.

https://github.com/Perl/perl5/commit/6bd6308fcea3541
 "Adapt Configure to GCC version 10"

Also includes the previous commit just adding GCC 8 and 9 to one case:
https://github.com/Perl/perl5/commit/ae195500577d707
 "Add gcc-8 and gcc-9 for FORTIFY_SOURCE"

Signed-off-by: Ken Wong <xinxijishuwyq@gmail.com>
(cherry picked from commit 65578a43f0d12c02888df00b6fdc90c73a02875c)

Merge pull request #12505 from EricLuehrsen/unbound_ifauto_1907

[openwrt-19.07] unobund: make option interface_auto default on

Merge pull request #12507 from stangri/19.07-simple-adblock

[19.07] simple-adblock: racially-neutral names

Merge pull request #12503 from Andy2244/samba-4.11.9-(19-07)

[19.07] samba4: update to 4.11.9

Merge pull request #12502 from Andy2244/ksmbd-3.2.0_ksmbd-tools-3.2.6-(19-07)

[19.07] ksmbd: update to 3.2.0, ksmbd-tools: update to 3.2.6

Merge pull request #12501 from Andy2244/rpcsvc-proto-1907

[19.07] rpcsvc-proto: update to 1.4.1

Merge pull request #12500 from Andy2244/libtirpc-1.2.6-(19-07)

[19.07] libtirpc: update to 1.2.6

Merge pull request #12499 from Andy2244/softethervpn5-9674-(19-07)

[19.07] Softethervpn5: update to 5.01.9674

Merge pull request #12498 from Andy2244/wsdd2-4-(19-07)

[19.07] wsdd2: update to git 2020-05-06

libtirpc: update to 1.2.6

* update to 1.2.6
* Add HOST_BUILD_PARALLEL for faster compilation

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

wsdd2: update to git 2020-05-06

* update to git 2020-05-06
* run init script through shellcheck
* fix infinite loop when BI_PARM is never set
* Fix '-b' option parsing

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

simple-adblock: racially-neutral names

Signed-off-by: Stan Grishin <stangri@melmac.net>

unbound: make option interface_auto default on

Unbound has a quirk and may reply on a different device address.
When Unbound answers with from-address different than it
received queries on, it may cause trouble for select VPN and
firewall configurations. Ensure Unbound replies with the same
address by changing this default.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

unbound: bump PKG_RELEASE

Fixes commit da76aeb24c1b ("unbound: expose interface-auto to UCI")

Signed-off-by: David Bauer <mail@david-bauer.net>

unbound: suggest matched domain option for dnsmasq link

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

samba4: update to 4.11.9

* update to 4.11.9
* remove merged upstream patches
* disable netbios port 139 on 'DISABLE_NETBIOS' option or missing 'nmbd'
* fixes CVE-2020-10700, CVE-2020-10704

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

ksmbd: update to 3.2.0, ksmbd-tools: update to 3.2.6

* ksmbd: update to 3.2.0
* ksmbd-tools: update to 3.2.6
* refresh patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

softethervpn5: update to 5.01.9674

* update to 5.01.9674

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

rpcsvc-proto: update to 1.4.1

* update to 1.4.1

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

adblock: update 4.0.6

* add anti_ad blocklist source
* made SafeSearch provider configurable, you can limit
  SafeSearch to certain providers
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e5ab2de1ffa79ed6e110f8bc6e884b4910d8a909)

mpd: update to 0.21.24

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d7b593f6954e33312227b6f282e56fbc84afd5c5)

adblock: update 4.0.5-5

* add regional list source for czech/slovak
* add regional list source for korea
* adapt oisd_nl changes, switch to adb-syntax domains

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0a5e61ecb61a250716e778910bf8c5411811e299)

Merge pull request #12472 from zhanhb/less-alternatives-19

[19.07] less: update ALTERNATIVES

less: update ALTERNATIVES

Avoid conflict with busybox

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit d866393)

Merge pull request #12454 from stangri/19.07-simple-adblock

[19.07] simple-adblock: remove obsolete dshield.org links from config

simple-adblock: remove obsolete dshield.org links from config

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #12449 from jefferyto/golang-1.13.12-openwrt-19.07

[openwrt-19.07] golang: Update to 1.13.12

golang: Update to 1.13.12

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

collectd: sqm_collect: tidy interval string handling

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit c2c91ea99e5fb7d4798116888b31f8fd9117d8ee)

collectd: sqm_collectd: improve error handling

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 947c85bff0176c0bb7b6dce796ee32bd9fa868da)

collectd: Improve sqm_collectd error reporting

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit a809dc6f3b4d42e185d84f527cb5e800325ae1d7)

collectd: sqm_collectd improve interface name filter

Increase the range of characters that get substituted by '_' so the
shell doesn't complain about illegal variable names.

Primarily done to catch '.' and '-' but who knows what funnies will
appear in i/f names.

It's a shame that busybox ash doesn't understand :alnum:

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit c8640d1f68321c092542f91adc33f3d21fcecd18)

collectd: bump PKG_RELEASE

Bump PKG_RELEASE on behalf of 38235de9c

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 03162ee920f67551e1a1dd2e7da9a71b64560ab4)

collectd: SQM collect data from some qdiscs

Add a script that can collect data from mq (multi queue) and cake
qdiscs.

Script is reliant on collectd's 'exec' module.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 38235de9c3a6d0574f3293178617549822fbc738)

collectd: add syslog json plugin

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit bb666cc9ff78b02c93e642f2ac78df30f34d3cd2)

rrdtool1: modify logarithmic scale labelling

The y-axis graph labels in logarithmic mode display in 'scientific'
notation eg: '1e+00' for 0, '1e+01' for 10, '1e+02' for 100 and so on.
This IMO is a pain in the backside for non scientific humans to read.

Modified output to display numbers up to 99,999 in conventional decimal
format and to revert to scientific notation for larger, thus the same
display space is taken.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit edc41b26ab1e78d55e87c79562d8430b87d314a7)

knot: update to version 2.9.5

Removed patch
`03-configure-allow-to-manually-disable-POSIX-capabiliti.patch` that has been backported into release.

Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 9d81b6e4cac85a387a629fbb0a278b1ca320ea1c)

knot: disable libcap-ng

Recently, there was added libcap-ng to OpenWrt packages feed,
which is optional for Knot DNS. It enables POSIX 1003.1e capabilities.
This can restrict root (by default it runs as root) permissions and
might harm and as there isn't systemd on OpenWrt it can interfere.

There is an added patch, which introduced an option to disable libcap-ng.
This will be part of the next release.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 41957d6967046277036eb0ec2914f0aed3ea9f14)

knot: update to version 2.9.3

Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 87d6c26c737501544e2aa14758c7fdf68e568764)

linuxptp: fix build failure

Build is failing because HWTSTAMP_TX_ONESTEP_P2P is defined anymore on
linux net_tstamp.h.

Moreover, the usual way of linuxptp build is looking for system includes
unless user defines differently. That also was tried to fix.

PKG_RELEASE bumped to 3.

Signed-off-by: Paulo Machado <pffmachado@yahoo.com>
(cherry picked from commit 5f64b2d1e451e55babe3e6e9dcb7debaedb2b7db)

sslh: use tls option instead of deprecated ssl

Upstream will drop support for the ssl option in the next future version.

Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
(cherry picked from commit 46c253dfcaba4ee9cb8299d3c895e399bf282bb8)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[package bump]

Merge pull request #12361 from rs/nextdns-1.6.4-openwrt-19.07

[19.07] nextdns: Update to version 1.6.4

gnutls: updated to 3.6.14

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

mpd: enable id3tag for all builds

2cedae0aa9befe1135c83f007942d89ec906658e enabled mp3 support for mini,
while keeping id3tag for full. This makes no sense as id3tag is used
specifically for mp3 files.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4ed61c1f68a68c37be37698f7d89d84732bac318)

Merge pull request #12334 from stangri/19.07-simple-adblock

[19.07] simple-adblock: bugfix: proper error reporting on failed downloads; lists update script

unbound: expose interface-auto to UCI

This exposes the interface-auto option to UCI.

By default, interface-auto is disabled.
This leads to the DNS reply possibly originating from
a different address then the request was sent to.

Devices with a packet filter might not receive the reply in this case.

Enabling interface-auto ensures the reply is sent with the
source-address the request was sent to.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit da76aeb24c1bf757415ccebb93a62002b245f4d2)

Merge pull request #12382 from neheb/gst-p

[19.07] gstreamer update

gst1-plugins-bad: don't add webp support

Not present in 19.07.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #12383 from neheb/pige

[19.07] update pigeonhole

gst1-libav: update to 1.16.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0133aebed4a26d6fe11d4989232bcfa1464ac4ea)

gst1-plugins-ugly: update to 1.16.2

Switched to meson.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 714a18e1bb814cee8ca9f92dfb99ffb3201bacb0)

gst1-plugins-bad: update to 1.16.2

Switched to meson.

Fixed license information.

Several Makefile cleanups for consistency between packages.

Enabled and added packages for a bunch of plugins.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ae5ef832d12554f2f5cd7b7985e5688016674e0f)

gst1-plugins-good: update to 1.16.2

Switch to meson.

No more static libraries as meson makes you choose.

Enabled speex and shout2 as the libraries are available.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 077536f00fdc0e70ddcfb8caad83bdd03a672174)

gst1-plugins-base: update to 1.16.2

Switched to meson.

Fixed license information.

No more static libraries as meson makes you choose.

Added several CONFIG_DEPENDS entries.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9cbde8ad8b12a2b4adcb9399b7c5832729a4c806)

gstreamer1: update to 1.16.2

Switched to meson.

Fixed license information.

Rearranged some stuff for consistency between packages.

Removed static libraries. It seems meson only supports either one or the
other.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit cb058bf961e783608954b3244dbc17ea4e46b16b)

pigeonhole: Update to 0.5.9

Dovecot was updated but not pigeonhole. This is important as the API broke

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit de66ac26f6fb602992b670071187a96d1f1c5644)

pigeonhole: reflect license of LGPL-2.1-or-later

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit cfcdade87d41a6433ae8ec4eed572fa529895bbd)

pigeonhole: update to 0.5.8

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 10a1877e574e9f263eb1439e249c03c0e84f34d3)

gst1-libav: update to 1.16.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 39e223f01999138901aa134222e23031edba1c01)

gst1-plugins-ugly: update to 1.16.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 6dc84b2082f072f088c265e86d9af7526d550646)

gst1-plugins-bad: Make HLS crypto explicit

It's normally set to auto. When nettle is missing, it tries to use the
other libraries.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 49b5de830e004a4573619cc98fd58e30676fd070)

gst1-plugins-bad: update to 1.16.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit ac93280d53ccb0dcb2716e8b5f37bf663260c48f)

gst1-plugins-good: update to 1.16.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 158f2e6252c00ab4e3dda203d3c2ce7161b8eaaf)

gst1-plugins-base: update to 1.16.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit e4f3f8b02741223c869381b6e11d0a66a1a4a593)

gstreamer1: update to 1.16.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 0934faf567598aed280f8a993683ce5d45b6d88e)

net/mosquitto: bump to 1.6.10

Full changelog at: https://mosquitto.org/blog/2020/05/version-1-6-10-released/

Fixes openssl 3.0 support,
Minor fixes, nothing standout as applicable specifically to OpenWrt.

Signed-off-by: Karl Palsson <karlp@etactica.com>

ola: fix compilation with GCC4

The configure script confusingly sets CXXFLAGS to gnu++11 but does
not use that to check the important stuff. Fix that.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8f7687833ec138af0283d542279b6a287e32e0ba)

dovecot: update to version 2.3.10.1 (security fix)

Fixes:
CVE-2020-10957
CVE-2020-10958
CVE-2020-10967

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d863e2681736b5790eee46ac2b81c6458ce10ab5)

adblock: update 4.0.5-4

* remove dumb list cache
* start adblock processing after adding/removing
  list sources via CLI
* add regional list source for france

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ab44d8146af2abcfd96f08aba99358e960049bd3)

nextdns: Update to version 1.6.4

Refactor the package so init script is installed from the binary instead
of an init script embedded in the package.

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

adblock: update 4.0.5-3

* fix oisd_nl source parser (format has been changed)
* enable safesearch support for kresd (ip based)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7f6763359c688ed34891caf83d4080348f0572df)

Merge pull request #12348 from adrianschmutzler/fixmake

[19.07] treewide: use relative include paths for python Makefiles

Merge pull request #12294 from neheb/keab

[19.07] backport kea changes

treewide: use relative include paths for python Makefiles

This updates the include paths for python(3)-package.mk to be relative
to the package Makefile. If not, in certain cases this will print errors
like the following one:

ERROR: please fix feeds/openwrt/net/freeradius3/Makefile
   - see logs/feeds/openwrt/net/freeradius3/dump.txt for details

In the dump.txt there is the following:

Makefile:42: /mylocalpath/feeds/packages/lang/python/python3-package.mk: No such file or directory
make[1]: *** No rule to make target '/mylocalpath/feeds/packages/lang/python/python3-package.mk'.  Stop.

The relative path is used already in 19.07 for most of the packages, and
has been updated for the packages at hand in master as well:

302f4d17e336 ("libmraa,libupm: Disable default Python package build recipe")
1bc2f4f3c621 ("treewide: Remove Python variants for non-Python packages")

Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>

Merge pull request #12339 from ja-pa/transmission-fix-19.07

[openwrt-19.07] transmission: init script check syscall list for seccomp

transmission: init script check syscall list for seccomp

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

simple-adblock: bugfix: proper error reporting on failed downloads; lists update script

Signed-off-by: Stan Grishin <stangri@melmac.net>