Re: [PATCH] ath79: add support for Ubiquiti UniFi AP Pro

2020-09-15 Thread Rafał Miłecki
On Mon, 14 Sep 2020 at 14:22, David Bauer wrote: > + firmware-partition@5 { > + label = "firmware"; > + reg = <0x5 0xf6>; > + }; Please specify "compatible" so the kernel doesn't ha

[PATCH v2] imagebuilder: add package signature verification

2020-09-15 Thread Paul Spooren
The ImageBuilder downloads pre-built packages and adds them to images. This process uses `opkg` which has the capability to verify package list signatures via `usign`, as enabled per default on running OpenWrt devices. Until now this was disabled for ImageBuilders because neither the `opkg` keys n

[PATCH] conf: add src/{,gz}/trusted option

2020-09-15 Thread Paul Spooren
This options allows to individually disable signature checks for individual feeds. This option should only be used for local feeds or remote feeds downloaded via HTTPS. Within OpenWrt this option allows ImageBuilders to verify remote feeds while also taking local feeds into account which are unsig

Re: [PATCH 1/3] build: add libustream and certs to default pkgs

2020-09-15 Thread Henrique de Moraes Holschuh
On 27/08/2020 18:47, Paul Spooren wrote: To allow HTTPS usage on a router it requires both certificates (ca-bundle) and a fitting libustream library (libustream-wolfssl) By adding both, uclient-fetch and wget can connect to encrypted HTTP. This allows opkg to update package lists in a more secu

[PATCH] Fix tx-queue-size on NBG6817 (allows MTU changes).

2020-09-15 Thread jacekowski
From: Jacek Milewicz Fixes FS#3285 for NBG6817 only. Signed-off-by: Jacek Milewicz --- .../files-4.14/arch/arm/boot/dts/qcom-ipq8065-nbg6817.dts | 2 ++ 1 file changed, 2 insertions(+) diff --git a/target/linux/ipq806x/files-4.14/arch/arm/boot/dts/qcom-ipq8065-nbg6817.dts b/target/lin

[PATCH] ubus: add ACL support for "subscribe" request

2020-09-15 Thread Rafał Miłecki
From: Rafał Miłecki With this change ubus will allow users with access to the object pseudo method ":subscribe" to subscribe for notifications. 1. Move uh_ubus_allowed() up in the code 2. Export "Authorization" parsing code to the uh_ubus_get_auth() 3. Check for ":subscribe" method access Right

Re: [PATCH v2 1/2] ipq40xx: add support for Luma Home WRTQ-329ACN

2020-09-15 Thread Tomasz Maciej Nowak
Hi Christian, thanks for looking at this. W dniu 13.09.2020 o 00:04, Christian Lamparter pisze: > On 2020-08-30 13:28, Tomasz Maciej Nowak wrote: >> Luma Home WRTQ-329ACN, also known as Luma WiFi System, is a dual-band >> wireless access point. >> >> Specification >> SoC: Qualcomm Atheros IPQ4018

Re:

2020-09-15 Thread Jeffery To
Hi Daniel, (Resending due to HTML email being rejected...) On Tue, Sep 15, 2020 at 2:26 PM Daniel Santos via openwrt-devel wrote: > Thank you for the wonderful work on maintaining the Go packages! You're welcome :-) > I got a little irritated at CGo's restriction of arch flags (in the > immuta

Re: [PATCH v3 6/8] kernel: package bcm53xx i2c module

2020-09-15 Thread Daniel Golle
On Tue, Sep 15, 2020 at 01:28:23PM +0200, Adrian Schmutzler wrote: > Hi, > > > -Original Message- > > From: openwrt-devel [mailto:openwrt-devel-boun...@lists.openwrt.org] > > On Behalf Of Christian Lamparter > > Sent: Samstag, 12. September 2020 23:16 > > To: openwrt-devel@lists.openwrt.or

RE: [PATCH v3 7/8] bcm53xx: add Cisco Meraki MR32

2020-09-15 Thread Adrian Schmutzler
Hi, > --- a/target/linux/bcm53xx/image/Makefile > +++ b/target/linux/bcm53xx/image/Makefile > @@ -320,6 +320,33 @@ define Device/luxul_xwr-3150 endef > TARGET_DEVICES += luxul_xwr-3150 > > +define Device/meraki_mr32 > + DEVICE_VENODR := Meraki > + DEVICE_MODEL := MR32 > + DEVICE_PACKAGES := $

RE: [PATCH v3 6/8] kernel: package bcm53xx i2c module

2020-09-15 Thread Adrian Schmutzler
Hi, > -Original Message- > From: openwrt-devel [mailto:openwrt-devel-boun...@lists.openwrt.org] > On Behalf Of Christian Lamparter > Sent: Samstag, 12. September 2020 23:16 > To: openwrt-devel@lists.openwrt.org > Cc: ra...@milecki.pl; ha...@hauke-m.de; f.faine...@gmail.com; > chrisrblak...

Re: HTTPS performance issue with opkg (Was: [PATCH 3/3] build: switch VERSION_REPO to HTTPS)

2020-09-15 Thread Paul Spooren
On Mon Sep 14, 2020 at 10:23 PM HST, Daniel Golle wrote: > On Tue, Sep 15, 2020 at 08:49:51AM +0200, Baptiste Jonglez wrote: > > On 27-08-20, Paul Spooren wrote: > > > The variable VERSION_REPO is used by opkg to download package(list)s. > > > Now that the default installation support encrypted HTT

Re: [PATCH luci] luci-base: use actual JSON-RPC for verifying ubus RPC URL

2020-09-15 Thread Rafał Miłecki
On 14.09.2020 18:31, Rafał Miłecki wrote: @@ -2553,10 +2553,19 @@ rpcBaseURL = Session.getLocalData('rpcBaseURL'); if (rpcBaseURL == null) { + var msg = { + jsonrpc: '2.0', +

Re: HTTPS performance issue with opkg (Was: [PATCH 3/3] build: switch VERSION_REPO to HTTPS)

2020-09-15 Thread Daniel Golle
On Tue, Sep 15, 2020 at 08:49:51AM +0200, Baptiste Jonglez wrote: > On 27-08-20, Paul Spooren wrote: > > The variable VERSION_REPO is used by opkg to download package(list)s. > > Now that the default installation support encrypted HTTP opkg should > > make use of it. > > I wonder what is the perfo

[PATCH PROOF luci] luci-base: switch to the new ubus API

2020-09-15 Thread Rafał Miłecki
From: Rafał Miłecki This is proof of concept for the new uhttpd ubus API. It switches LuCI (in a bit hacky way) to the new API. Signed-off-by: Rafał Miłecki --- .../htdocs/luci-static/resources/luci.js | 5 +++ .../htdocs/luci-static/resources/rpc.js | 31 +-- 2 fil