[WLANware] [ANN] freifunk-secureadmin beta

[h2o-post]

Hi Lorenz,

Your https is just a great thing form e and my admin job with the 42 nodes
in our mesh ;o).. a BIG thx !
Little feature request .. it is possible to bind this 3 ipk pakets in just
one ipk with a dependency to the other ones ?
If so, I would just need to put one line to install the whole https stuff on
my routers.

Kind regards,

Bluse

-----Ursprüngliche Nachricht-----
Von: wlanware-bounces at freifunk.net [mailto:wlanware-bounces at freifunk.net] Im
Auftrag von lorenz schori
Gesendet: Sonntag, 30. September 2007 13:49
An: Lorenz Schori
Cc: wlanware at freifunk.net
Betreff: Re: [WLANware] [ANN] freifunk-secureadmin beta

Hi All

Here comes beta2 with the following enhancements:
  * Defaults inverted: xrelayd will be started by default. One has to turn
it off or start in safe-mode to prevent it from running. This allows
freifunk-secureadmin to be packed fully functional with a custom firmware
using the freifunk firmware kit.
  * Checkbox to allow HTTPS on WAN interface.
  * Compiled xyssl with ARC4 beside AES to allow connections from older
Browsers.

Install instructions:
ipkg install http://znerol.ch/files/xyssl_0.7-1_mipsel.ipk
ipkg install http://znerol.ch/files/xrelayd_0.1-1_mipsel.ipk
ipkg install http://znerol.ch/files/freifunk-secureadmin-
en_1.6.4_mipsel.ipk
or
ipkg install http://znerol.ch/files/freifunk-secureadmin-
de_1.6.4_mipsel.ipk

Whiterussion package directory for xyssl and xrelayd:
http://znerol.ch/svn/xrelayd/packages/openwrt-whiterussian/

Cheers
Lorenz

On 19.09.2007, at 01:46, Lorenz Schori wrote:

> Hi all
>
> Freifunk-secureadmin is a package which makes the web interface of 
> freifunk based devices accessible via HTTPS. A first test-version is 
> now available providing
>  * A configuration page in the web interface
>  * Automated generation of self-signed x509 certificates
>
> Install instructions:
> ipkg install http://znerol.ch/files/xyssl_0.7-1_mipsel.ipk
> ipkg install http://znerol.ch/files/xrelayd_0.1-1_mipsel.ipk
> ipkg install http://znerol.ch/files/freifunk-secureadmin-
> en_1.6.3_mipsel.ipk
>
> Requirements:
> The whole package including the xyssl library and xrelayd - an stunnel 
> replacement - takes under 200Kb of flash.
> root at znerol-wl550ge:~# ls -l /etc/secureadmin/* /www/cgi-bin/ 
> secureadmin.html /usr/lib/libxyssl.so /usr/bin/xrelayd
> -rw-r--r--    1 root     root          631 Sep 19 01:22 /etc/ 
> secureadmin/cert.pem
> -rw-r--r--    1 root     root          883 Sep 19 01:22 /etc/ 
> secureadmin/privkey.pem
> -rwxr-xr-x    1 root     root        21319 Sep 18 20:58 /usr/bin/ 
> xrelayd
> -rwxr-xr-x    1 root     root       154443 Sep 18 22:53 /usr/lib/ 
> libxyssl.so
> -rwxr-xr-x    1 root     root         3637 Sep 19 01:19 /www/cgi- 
> bin/secureadmin.html
>
> Feedback welcome.
>
> Cheers
> Lorenz
>