luci/protocols, branch master

luci-proto-openvpn: add server_ipv6 parameter

2026-04-20T12:57:38Z

Closes #8558 Signed-off-by: Paul Donald

luci-proto-modemmanager: fix ACL command injection

2026-03-17T07:34:07Z

The ACL permissions were originally authored to support just a single set of modem interfaces, at the numbers 0-9. Eventually this was adjusted to support from 0 to 999 avoiding command injection. However, as new commands were added, this was reverted again unfortunately. Language like "regex" has been used in the commit history for this ACL, and likely the core of the issue is confusion on how these are parsed. These are all parsed [1] with fnmatch(...), and not regex(..). A future useful change could be for rpcd to set the FNM_EXTMATCH option for fnmatch(...) to simplify this particular match statement, but that's not considered here since that's a much broader change that needs a longer discussion. [1] https://github.com/openwrt/rpcd/blob/a4a5a298588960638a2e1713eb8fb858e1dbedeb/session.c#L143-L147 Fixes: 54aa70112c ("luci-proto-modemmanager: add status page") Signed-off-by: Tim Nordell

luci-proto-openvpn: fix permissions and write promise

2026-03-12T16:46:33Z

structure the promise so uci.set functions properly. Signed-off-by: Paul Donald

luci-proto-openvpn: sync with proto script updates

2026-03-12T04:06:06Z

make push(_reset) independent of server The manual notes that push is a legal option in a client context, i.e. the client can set these also. Add also push_remove. fix also the datatype for 'remote' to allow various combos. Signed-off-by: Paul Donald

luci-proto-wireguard: add download link for peer config

2026-03-05T15:09:43Z

Ease download of the generated config. Closes #8389 Signed-off-by: Paul Donald

luci-proto-openvpn: create parent directory for config files

2026-03-04T17:37:58Z

To store the configs, the parent directory shall exist first. Signed-off-by: Paul Donald

luci-proto-openvpn: fix formating of openvpn template option

2026-03-03T12:59:39Z

Add missing ',' in new option formating. Signed-off-by: Florian Eckert

luci-proto-openvpn: format openvpn options

2026-03-03T12:53:51Z

OpenVPN does have many options. To make it manageable, these options are created by using a generic template. The necessary information for the template is defined for each OpenVpn option in a single line. This is very confusing and has the following disadvantages. * Difficult to read, as the lines are very long with line breaks. * A change in the option causes the entire line to be marked as changed. This complicates the review process, as it is not immediately apparent what has been changed. The current format offers no advantage during development, as the code will be minimised later anyway. Therefore, this commit reformats the OpenVPN template option to make the individual elements of the template easier to recognise. Signed-off-by: Florian Eckert

luci-proto-openvpn: fix literal values for properties

2026-03-02T15:14:19Z

So they do not get coerced to integers. Signed-off-by: Paul Donald

luci-proto-openvpn: fix 'remote' error check

2026-03-02T15:01:47Z

remote can also take [ip|host]/port/proto Signed-off-by: Paul Donald