Commit graph

1103 commits

Author SHA1 Message Date
Frank Wall
d18e09c78d security/acme-client: release 4.13 2026-01-29 22:31:31 +01:00
Frank Wall
728b97c87e
Merge pull request #5168 from gigamonster256/push-rwxoyqsoyqlp
security/acme-client: allow always renew
2026-01-29 22:30:03 +01:00
Jeroen Kool
be5be59d60
security/acme-client: make it possible to obtain a global access token from TransIP (#5166)
* security/acme-client: Add option for global token to TransIP

The TransIP dns api and the acme.sh api for TransIP support the possibility to create a global access token.
With a global access token, the api call to TransIP can be amde from every ip adress.
There is a new button in the client configuration for TransIP, and this will be added to the account configuration file, which is used by acme.sh
2026-01-29 22:24:03 +01:00
Frank Wall
f3d86bb2d0
Merge pull request #5158 from Benno089/ISSUE-4959
security/acme-client: add support for DNS challenge Spaceship.com
2026-01-29 21:47:07 +01:00
Frank Wall
67977c43a8
Merge pull request #5157 from GutierrezJeremy/deploy-hook-ruckus
security/acme-client: add support for acme.sh deploy hook "Ruckus"
2026-01-29 21:46:32 +01:00
Frank Wall
268d504349
Merge pull request #5154 from apritcha1/master
security/acme-client: add support for ACME profiles
2026-01-29 21:46:03 +01:00
Caleb Norton
b23594e102 security/acme-client: allow always renew 2026-01-24 15:22:01 -06:00
Benno Kutschenreuter
93f434dc43 security/acme-client:add support for DNS challenge Spaceship.com 2026-01-23 14:54:05 +01:00
Jeremy Gutierrez
e9eb048a7c security/acme-client: add support for acme.sh deploy hook "Ruckus" 2026-01-23 14:17:16 +01:00
Franco Fichtner
e3bae8e72f security/tinc: update version 2026-01-21 07:51:20 +01:00
Alexander Pritchard
f2a122bdc8 security/acme-client: fallback display name for certs with no CN 2026-01-20 10:50:27 -06:00
Alexander Pritchard
20ff8e5af4 Add ACME profile support to acme-client 2026-01-20 10:22:47 -06:00
Thojo0
735eaa545e
add disablesubnetroutes option (#5136)
closes https://github.com/opnsense/plugins/issues/5135
2026-01-20 14:45:40 +01:00
Frank Wall
3e0c77f252
Merge pull request #5153 from fraenki/acme_412
security/acme-client: release 4.12
2026-01-20 13:52:58 +01:00
Franco Fichtner
b4ae3dc4da security/q-feeds-connector: style 2026-01-20 12:55:38 +01:00
Franco Fichtner
a30717fa42 security/acme-client: style sweep 2026-01-20 12:21:50 +01:00
Frank Wall
d4cd3e3524 security/acme-client: release 4.12 2026-01-20 12:21:26 +01:00
GutierrezJeremy
0ec3d04843
security/acme-client: Add support for Timeweb Cloud DNS API (#5149) 2026-01-20 12:08:44 +01:00
Frank Wall
e71e18d4a9
Merge pull request #5138 from dozing00/feature/acme-dns-he-ddns
security/acme-client: Add support for Hurricane Electric DDNS API
2026-01-20 12:06:21 +01:00
sourceforge807
e6ac625b0f
security/acme-client: add support for Technitium DNS API (#5111) 2026-01-20 12:05:38 +01:00
Frank Wall
d30a1bbd91
Merge pull request #5081 from coderjoe/feature/acmesh-zyxel-gs1900-deploy
security/acme-client: add support for zyxel_gs1900 deploy hook
2026-01-20 12:04:32 +01:00
Franco Fichtner
da46d00944 plugins: PLUGIN_TIER last so it's not confused with PLUGIN_REVISION 2026-01-19 05:33:35 +01:00
Franco Fichtner
87a27341ce security/wazuh-agent: model style and wrap up next version
As a note the default value for "syslog_programs" was scrapped
because it was not used.  Consider flipping Required=Y and putting
it back to whom it may concern.
2026-01-19 05:01:11 +01:00
Franco Fichtner
33540053e7 security/openconnect: model style 2026-01-19 04:56:20 +01:00
Franco Fichtner
5e83a9f93c security/crowdsec: model style
Changed a validation message to not end with question.  Although
I do not oppose to this the current rule is "dot" for end of sentence
only and the question appears to be better suited for the help text
where it can be accessed beforehand by the user.
2026-01-19 04:53:57 +01:00
Franco Fichtner
7f7406535e security/clamav: basic model style 2026-01-19 04:49:41 +01:00
Franco Fichtner
b9bb07a0c9 security/tor: basic model style 2026-01-19 04:45:18 +01:00
Franco Fichtner
923bd52a94 security/q-feeds-connector: plugin style 2026-01-19 04:32:54 +01:00
Frank Wall
b18c2660e7
Merge pull request #5146 from peterv99/peterv99-patch-mijnhost
fix mijnhost/scaleway DNS API settings
2026-01-18 23:49:50 +01:00
Thomas Moore
c3e099c5ae Added support for Hurricane Electic DDNS in acme client plugin. 2026-01-15 14:26:26 -05:00
Joe Bauser
ea053db65a security/acme-client: add support for acme.sh deploy hook "zyxel_gs1900"
Fixes #5080
2026-01-08 10:09:33 -05:00
mbedworth
565bd02235
[wazuh-agent] Add repeated_offenders config, fix template issues (#5116)
- Add repeated_offenders field to active response settings
- Remove 'without context' from ossec.conf include loop to allow
  variable access in config fragments
- Fix opnsense-fw.conf template bug: wazuh_command -> active_response
- Bump model version to 1.0.3
2026-01-06 08:48:13 +01:00
mbedworth
d3cbedaa8e
security/wazuh-agent: Fix active response duplicate key causing false aborts (#5104)
When multiple IPs trigger the same rule simultaneously, they were
sharing the same check_keys value (only rule ID), causing the manager
to abort all but the first execution.

Changed the key to include both rule_id and srcip to make it unique
per source IP, allowing multiple simultaneous blocks while still
preventing duplicate blocks of the same IP.

Fixes #4738
2025-12-28 10:23:52 +01:00
Q-Feeds
d987a7e53e
Feature/dnscrypt proxy blocklist support (#5083)
* Add ports to Events page

* fixes race condition updating the blocklist

* Native integration with DNSCrypt-proxy

Added Q-Feeds domains to the DNSBL list of DNSCrypt-Proxy. Changed since the initial way, this is more native. Q-Feeds domains txt files only created if DNSCrypt-proxy is installed and if the list (qf) is selected.
2025-12-19 09:58:20 +01:00
Peter
306d397794
Update dialogValidation.xml fix for #4446
See comment https://github.com/opnsense/plugins/pull/4446#issuecomment-3637663519. Missing close and open field tags between mijn.host and scaleway entries.
2025-12-10 17:39:19 +01:00
Franco Fichtner
8b468b8742 plugins: change support tiers for 26.1 2025-12-10 11:04:34 +01:00
Franco Fichtner
fafde8629f security/tinc: revision and style 2025-12-05 12:19:54 +01:00
Angel Marin
61e0663137
securiry/tinc: don't create symlink as it conflicts with ifconfig symlink creation (#5064) 2025-12-04 16:56:05 +01:00
Frank Wall
f6191e0f66 security/acme-client: update release notes, refs #4671 2025-12-03 15:56:11 +01:00
Anton Avramov
8a06728c8f
security/acme-client: Add support for ZoneEdit DNS API (#4671)
* Add ZoneEdit settings for acme.sh
2025-12-03 15:54:51 +01:00
Frank Wall
c503b7f418 security/acme-client release 4.11 2025-12-01 22:26:31 +01:00
Frank Wall
bfd90d27f7 security/acme-client: post-merge fixes for #4824 2025-12-01 14:57:55 +01:00
Franco Fichtner
77424cdf9f security/acme-client: fix style for "DEPREC(I)ATED" 2025-12-01 08:15:50 +01:00
Franco Fichtner
b9241d6888 security/acme-client: style changes 2025-12-01 07:59:07 +01:00
Lis
a12012ad37
security/acme-client: add support for selectel.ru V2 API (#4824)
* security/acme-client: add support for selectel.ru V2 API
* fix syntax depreciation warning in SecurityController.php
2025-11-30 22:53:46 +01:00
Frank Wall
e866e541da
Merge pull request #4830 from kevinvanblokland/master
security/acme-client: add support for AzureDNS System Assigned Managed Identity
2025-11-30 22:40:05 +01:00
Peter
ce2dfe7705
security/acme-client: Add support for mijn.host DNS challenge (#4446)
* Add support for mijn.host DNS challenge.
2025-11-30 22:34:50 +01:00
Franco Fichtner
248ef71920 security/tailscale: simplify previous a little 2025-11-27 17:48:28 +01:00
Sam Sheridan
351090da19
security/tailscale: fix to prevent use of pre-auth key in startup after auth (#5047) 2025-11-27 17:40:17 +01:00
Frank Wall
094a8fc068
Merge pull request #5020 from flortsch/feature/hetzner-cloud-dns
security/acme-client: add support for Hetzner Cloud DNS API
2025-11-24 15:33:21 +01:00