luci-base: add system cert bundle detection

Add detection mechanism for system cert CA bundle installed by the
ca-bundle package. Used by LuCI to detect whether the "Use system
certificates" certificate validation option should be enabled.

Signed-off-by: David Lam <david@thedavid.net>
(cherry picked from commit 27b21c2a6262a8c383c783e98320746f22fe8f6f)

luci-app-travelmate: bugfix add/editing WPA3 uplinks

* see forum post
https://forum.openwrt.org/t/travelmate-support-thread/5155/318

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 9ca877e08e6d23f76751fff8c458e1985bebb1f7)

luci-app-vpn-policy-routing: styling bugfix

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 87b9fabc89445564e23aa983b74f0a720ce0312a)

luci-proto-modemmanager: drop package

The corresponding modemmanager package is not available in 19.07.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

luci-theme-bootstrap: fix invalid dropdown state styling

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 3c5feae57c2dd5866aece2725f3ddea7024390cc)

luci-base: form.js: fix immediate validation of activated options

When form options are activated because their dependencies are satisified,
ensure that an immediate validation is triggered to highlight potential
errors without having the user to activate another form control first.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 77c2998f32caccac52a885e84bb6357a9799ebca)

treewide: i18n - sync translations

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Merge pull request #3493 from stangri/19.07-luci-app-advanced-reboot

[19.07] luci-app-advanced-reboot: pluggable device files, highlight current partition

luci-app-advanced-reboot: pluggable device files, highlight current partition

Signed-off-by: Stan Grishin <stangri@melmac.net>

build: sort location annotation table in i18n sync process

The scanning routine has caused unnecessary changes to the .po files
if a string has been found in multiple files and those files have been
found in different order than the previous time.

Sort the location annotations to avoid unnecessary changes to the .po files.
(sort is alphabetic, so the line numbers are also sorted alphabetically)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
[apply a Schwartzian transform to sort locations by path, then line number]
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 460bdfe814a34ca5300e7a1a57efecff590dd414)

Merge pull request #3468 from urbalazs/translation-backport-19.07-20200105

i18n: backport translations from master branch

i18n: backport translations from master branch

Signed-off-by: Balázs Úr <balazs@urbalazs.hu>

Merge pull request #3459 from Andy2244/luci-app-smbd-rename-(19.07)

[19.07] luci-app-smbd: rename change cifsd->smbd

luci-app-firewall: fix zone network default

When a `config zone` section lacks an `option network` or `list network`
setting, its contained interface list defaults to the name of the zone,
e.g. a zone named `foo` will implicitely contain the network `foo` unless
a deviating or empty `option network` is specified.

Adjust the zones.js model accordingly to reflect that implicit default.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit d60a1a13b091c622bc2d4d63321d2e3ea0437796)

luci-app-smbd: rename change cifsd->smbd

* update for name change cifsd->smbd
* add version code for: kmod, usmbd
* regen translations
* update acl's

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Merge pull request #3456 from stangri/19.07-luci-app-vpn-policy-routing

luci-app-vpn-policy-routing: add note about default routing

luci-app-vpn-policy-routing: add note about default routing

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #3447 from stangri/19.07-luci-app-vpn-policy-routing

[19.07] luci-app-vpn-policy-routing: initial release

luci-app-vpn-policy-routing: initial release

Signed-off-by: Stan Grishin <stangri@melmac.net>

luci-app-firewall: update rule ip hints based on address family

Fixes: #3119
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit d07cfba160ca7eb433e74f1ffad8d10e2b9cc9ca)

luci-base: form.js: implement AbstractValue.getUIElement()

Introduce a new method `getUIElement()` which simplifies obtaining the
underlying per-section UI widget class instance for a from option object.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 9e259174323a406b93664e307bb8a50fc3d80483)

luci-base: ui.js: implement UIDropdown.{add,clear}Choices()

The new `addChoices()` and `clearChoices()` functions allow clearing and
adding new options to existing dropdown instances respectively.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit b0836b037e55bfc9201e60a9446f2f7800d7f195)

luci-base: ui.js: expose UIElement class as AbstractElement

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 0d0a3f4d0df44387fe9bec0c5597f6c491f44eec)

Merge pull request #3439 from urbalazs/translation-backport-19.07-20191227

i18n: backport translations from master branch

luci-app-firewall: store week- and monthday restrictions as strings

Fixes: FS#2661
Ref: https://bugs.openwrt.org/index.php?do=details&task_id=2661
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 18c60968dc9ee280ea8a71bb98653b74a340668a)

i18n: backport translations from master branch

Signed-off-by: Balázs Úr <balazs@urbalazs.hu>

luci-theme-bootstrap: fix background of large modal overlays.

Signed-off-by: MartB <mart.b@outlook.de>
(cherry picked from commit 7f9eb4638b0fa5d7b08270b232bb6bbe13b2e570)

i18n: sync translations

Sync translations.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Merge pull request #3422 from stangri/19.07-luci-app-https-dns-proxy

[19.07] luci-app-https-dns-proxy: package name change, support for RFC8484 binary

luci-app-https-dns-proxy: package name change, support for RFC8484 binary

Signed-off-by: Stan Grishin <stangri@melmac.net>

ocserv: fix the public key ID calculation

New versions of certtool change its output format and thus break
the previous parsing. This update works with certtool 3.5.x or later.
It also restricts the output to valid values for openconnect 7.x or
later for simplification.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
(cherry picked from commit c81ca8dae3e914b41b754e1cdc7cad3aeead9e66)

luci-mod-network: dhcp.js: fix default state of nonwildcard

Fixes: #3415
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit ffe81aead3f806f28220034cb6276d89774fa47b)

luci-mod-network: fix rebind list validation

Fixes: 62e28f4b0 ("luci-mod-network: dhcp.js: fix address and rebind list validation")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 3cdd4969466de7efd2cfe0534119acdc6f35218e)

luci-mod-network: dhcp.js: fix address and rebind list validation

Fixes: #3130
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 62e28f4b0a61abc4d45c6dc7cc5794e7847909e5)

luci-mod-network: re-add DHCPv6 lease status to dnsmasq page

Ref: https://bugs.openwrt.org/index.php?do=details&task_id=2674
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit f6410361c8fa84d258c505bba5b6ad157d6a30ee)

luci-lib-httpclient: accept scoped IPv6 addresses

Ref: https://github.com/openwrt/luci/issues/3380
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit d87169c0f60f9e7c1f8a61b2809473802093ff31)

luci-lib-ip: support scoped IPv6 addresses

Ref: https://github.com/openwrt/luci/issues/3380
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit f7a7f89e0ce324115098f4496e3e72d8bb63613a)

luci-base: ui.js: ensure that select choice labels are properly escaped

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 71d370a964f3ec4970bcded9198ff559316902ff)

luci-base: ui.js: properly escape dynlist items for rendering

Ref: https://forum.openwrt.org/t/luci-theme-openwrt-reports-error/49736
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit ee360669474ddc7d94dd2853b2411da929fb5593)

luci-app-statistics: update misleading load view

Fixes: #3301

During my tests and developing with the collectd and so
luci-app-statistics I noticed that the values displayed in the Y-axis
are misleading, because probably the individual values are added
together in each case. So the view is not corrected.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit b50974a20c9dac0d6b8b479d2e6b54b3c5703ab6)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

i18n: sync translations

Sync translations.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Merge pull request #3367 from stangri/19.07-luci-app-advanced-reboot

luci-app-advanced-reboot: better information for snapshots

luci-app-advanced-reboot: better information for snapshots

Signed-off-by: Stan Grishin <stangri@melmac.net>

luci-base: luci.js: further nested Class.super() call fixes

Use stacks keyed by class id + symbol internally to not clobber the
prototype scope pointer when repeatedly calling super() in invoked
methods.

Ref: https://github.com/openwrt/luci/issues/3316#issuecomment-558531111
Fixes: 374c23cda ("luci-base: luci.js: properly handle nested Class.super() calls")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 4a08fdd2d374083366787c4124e6b4de48bf7b77)

luci-base: luci.js: properly handle nested Class.super() calls

Introduce a unique __id__ attribute per class and use that, together with
the symbol name being looked up to, to form a unique key which is used to
store the prototype scope pointer.

This fixes cases where a call to super() invokes a procedure which is
calling super() as well on a different class or symbol.

Fixes: #3316
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 374c23cdab53c5681acafb561977d927c361408a)

Merge pull request #3359 from Andy2244/luci-app-cifsd_fix-defaults_19.07

luci-app-cifsd: fix defaults (none writeable default shares) [19.07]

Merge pull request #3361 from Andy2244/luci-app-samba4_fix-defaults_19.07

luci-app-samba4: fix defaults (none writeable default shares) [19.07]

luci-app-samba4: fix defaults (none writeable default shares)

* align defaults with upstream
* mark our default UCI changes and enforce updates to config

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

luci-app-cifsd: fix defaults (none writeable default shares)

* align defaults with upstream
* mark our default UCI changes and enforce updates to config

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Merge pull request #3346 from Andy2244/luci-app-samba4_switch-js-api_19.07

uci-app-samba4: switch to luci static javascript api [19.07]

Merge pull request #3339 from Andy2244/cifsd-19.07

luci-app-cifsd: enable cifsd app [19.07]

uci-app-samba4: switch to luci static javascript api

* switch to luci static javascript api
* add version info
* remove 'home' option
* regenerate translations

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

luci-app-cifsd: enable cifsd app

* enable luci cifsd app
* add version info
* enable guest ok default
* refresh translations

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

luci-base: luci.js: add optional apply unchecked action

Turn the "Save & Apply" button into a combo button which allows to
toggle between apply with rollback and unchecked apply modes.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 3b3a1d9cc9cd68c22003621bef2553138853f866)

themes: add necessary styles for ComboButton

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 3a82faf21ab2bd69a5ce9e3bdb8083a22b458e99)

luci-base: ui.js: add ComboButton widget

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 97a3bef84b9b68d6f88f209f80c284e3b2e7ea1a)

luci-theme-bootstrap: allow textarea resizing

Fixes: #3317
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 8672ddcf0b8b59e6cee200e678972f8fea27998f)

luci-app-firewall: remove obsolete "conntrack" option

Fixes: #3342
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit f6e56e67e8d89a2f3f6d639d9000be0487879bf9)

luci-base: validation.js: fix "unique" validator

Previous refactoring renamed the "data-type" attribute of widget markup
containers to "data-widget", breaking the "unique" validator as it relies
on it to lookup options.

Fixes: #3341
Fixes: 13e9e3e9e ("treewide: fix "Unhandled token" errors with Lua CBI maps")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 4f0d67a2897d6592cb0f7562fa042dd4987fd7eb)

Merge pull request #3337 from stangri/19.07-luci-app-advanced-reboot

[19.07] luci-app-advanced-reboot: add logger messages, README update

luci-app-advanced-reboot: add logger messages, README update

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #3334 from stangri/19.07-luci-app-advanced-reboot

[19.07] luci-app-advanced-reboot: bugfix: luci error on reboot, logger errors

luci-app-advanced-reboot: bugfix: luci error on reboot, logger errors

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #3330 from stangri/19.07-luci-app-vpnbypass

luci-app-vpnbypass: use VPN node by default

luci-app-vpnbypass: use VPN node by default

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #3322 from rs/feature_nextdns-19.07

luci-app-nextdns: add luci integration for nextdns package

luci-app-nextdns: add luci integration for nextdns package

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

treewide: fix "Unhandled token" errors with Lua CBI maps

The `data-type` attribute is used to bind datatype validators to a widget
while some templates used the same attribute to denote the name of the
underlying widget.

Change the `data-type` attributes referring to the widget name to
`data-widget` in order to stop the JS token error spam.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 13e9e3e9e8633c7a54fe5fec1481e9df62594982)

Merge pull request #3296 from stangri/19.07-luci-app-https_dns_proxy

[19.07] luci-app-https_dns_proxy: remove dnsmasq integration, better service controls, providers as plugins, misc fixes

Merge pull request #3312 from stangri/19.07-luci-app-advanced-reboot

luci-app-advanced-reboot: show OpenWrt info on compatible NAND routers

luci-app-advanced-reboot: show OpenWrt info on compatible NAND routers

Signed-off-by: Stan Grishin <stangri@melmac.net>

luci-mod-status: ensure comment escaping in iptables status output

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit b3ef7a17eacc6ce2f2385bbb517c67906dd2a753)

luci-mod-status: display secondary lease IPv6 addresses if available

Ref: https://forum.openwrt.org/t/luci-not-showing-2nd-ipv6-address/48271
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit b03ee4a097e01e3a77943292a779f4b959ac17ac)

rpcd-mod-luci: bump version

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 956fd4a579084b486d7b7d78962a49a0c5aa1c7a)

rpcd-mod-luci: handle multiple IPv6 addresses per lease

Ref: https://forum.openwrt.org/t/luci-not-showing-2nd-ipv6-address/48271
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 824cb658409b0267ab3790178a8e85f0216cef3b)

luci-app-statistics: iwinfo: fix interface list preselection

Fixes: #3306
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 52a68a43b8f70236bf8276b065458b51983298f1)

luci-compat: network.lua: recognize wifi interfaces with nonstandard names

Ref: https://github.com/openwrt/luci/issues/3306
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 857cd8c7fad3ef38680b2f8a2a7ada43a7892349)

luci-mod-status: fix free swap calculation

Fixes: #3295
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 80c9b6fee0aff23b4c56563612f70ef2c412b7ac)

luci-base: network.js: fix getDevices()

 - Don't filter virtual interfaces
 - Skip duplicate wireless devices

Fixes: #3304
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 304dd37e3fb44843466c38b883fa91b463b5cd1c)

luci-app-nlbwon: fix parsing relative interval values from config

Fixes: #3302
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 2e8aa301aa2a1aa07438de8dd962c21f0c8559f2)

luci-mod-system: sshkeys.js: do not incorrectly filter ecdsa keys on load

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit a3ea891b7e6352f7f723276ef08c1fc40754bdc4)

luci-proto-modemmanager: mark as broken

Fixes: #3299
Signed-off-by: Jo-Philipp Wich <jo@mein.io>

luci-app-https_dns_proxy: remove dnsmasq integration, better service controls, providers as plugins, misc fixes

Signed-off-by: Stan Grishin <stangri@melmac.net>

luci-lib-jsonc: store large JSON integer values as Lua doubles

Fixes: #3293
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 8da8f38bf97c925f6f113d3b4793edb23e7e0dc2)

luci-app-cifsd: mark as broken

Fixes: #3294
Signed-off-by: Jo-Philipp Wich <jo@mein.io>

luci-mod-status: fix graph rendering with XHTML themes

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 95bfb3f363d130566550e61565fc8f7073020763)

luci-mod-system: leds.js: display default state as On/Off

Fixes: #3289
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 0731f7e5e43f490c39e364e43988a59ee2be9576)

luci-theme-bootstrap: fix mobile input cutoff in dropdowns

Fixes: #3285
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit e8abe15483e6e740ed8efae32c2382f999a94a8f)

luci-base: ui.js: show filename after selecting upload file

Fixes: #3286
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 4cc7772ed510e5a851f69521127471867ac9abd3)

luci-app-opkg: support nonstandard list locations

Fixes: #3287
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 948c1fe6023a37e72ab2db1d5b1ad7f4436add3e)

luci-theme-bootstrap: minor CSS fixes

 - Don't remove background for disabled buttons
 - Move inactive tooltip element further out of the view area

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 3d0861de2082fe9eb6cef0c480447d8661f783df)

luci-app-openvpn: do not make "remote" option dependent on client mode

Fixes: #3279
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 6496ed88a6dfa15c0f34f3865a559e1c405cdc4f)

luci-theme-bootstrap: fix ifacebox cutoff on OS X Safari

Fixes: #3278
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 1116575513d4874693f56453034e25edcbb4ce1f)

luci-mod-status: remove inline CSS hacks from wifi status

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 6ee61230616245baac02bba903266c881d216008)

luci-mod-network: dhcp.js: fix DNSSEC feature probing

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 0513edade863b517a2ab49d3d66543ffd7ebcade)

luci-base, luci-mod-network: migrate getDUIDHints method to C plugin

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 392ba53effa26d2592db14c607c7d3103cce34d3)

rpcd-mod-luci: various improvements

 - Properly handle infinite dnsmasq leases
 - Use a more efficient approach to free internal AVL trees
 - Remove redundant uci context creation
 - Add new getDUIDHints method

Fixes: #3277
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit b3681bd9dc13699759329c76ba77a0bef3ebb340)

luci-mod-network: wireless.js: restore client disconnect functionality

Ref: https://forum.openwrt.org/t/19-07-luci-disconnect-missing/47897
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit c00d860981007a74d497f79640c446883bffe0ca)

luci-mod-status: 60_wifi.js: use new network.js functions for wifi status

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 9fac447bc844dc9467bf8141a96e06fb3d21c801)

luci-base: network.js: introduce further API functions

 - Add Network.getWifiNetworks() to simplify fetching *all* networks
   instead of building a list by iterating each radio first

 - Add Network.WifiNetwork.isClientDisconnectSupported() to check whether
   a wireless network supports client disconnections

 - Add Network.WifiNetwork.disconnectClient() to trigger client
   disconnections via hostapd

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit a2dc6c8216e695d758a3667a9dbc299188b423cd)