OSCAM file

[fery21]

OSCAM 11814

Remove unused emu code

[fery21]

OSCAM 11815

* Reduce upx output as it floods the buildlog


OSCAM 11816


Introduce binary signing

* build process changes
* new build option WITH_SIGNING supported by make and cmake
* create CA certificate (`config.sh --create-cert`) or use own pre-built certificate (`config.sh --add-cert`)
* embed certificate as `config_cert` variable to config.c (`config.sh --make-config.mak`)
* sign SHA1 hash of binary with private key after build
* append signature to binary (upx binaries are supported as well)
* build process uses the new options in config.sh (--create-cert, --add-cert, --cert-file, --cert-info, --sign-marker)

* runtime signature verification
* extract public key from built-in certificate
* read signature from running binary
* verify SHA1 hash of running binary with extracted public key against signature
* stop running oscam if the verification process fails

* runtime certificate/signature information
* oscam startlog informs about signature verification status and certificate validity
* oscam.version shows signature and certificate details



OSCAM 11817


signing: exclude oscam-signing.* from cmake build

if WITH_SIGNING is disabled



OSCAM 11818


Several bugs fix

* Give back msglog when ECM is "found"

* Fix bug where some log messages were overwritten when compile with CacheEX enabled

* Fix HD04H entitlements expire date display and formatting some codes.

* Fix tag api query to order the results by version and sort descending

[fery21]

OSCAM 11819


Fix some edge cases

- SSL: support OpenSSL installations in non standard locations (cmake)
- SSL: show OpenSSL include directory in buildlog (cmake)
- SSL: remove -Wunused-value warning for SSL_CTX_set_ecdh_auto dispayed on some systems
- SIGNING: ensure a missing signing certificate is created on first build (cmake)
- SIGNING: fix filtering oscam-signing.[c|h] when WITH_SIGNING is disabled (cmake)
- LIBDVBCSA: fix link filename (cmake)
- LIBDL: link libdl by default for Linux as it is required by some systems (cmake)
- CONFIG: Fix display of configured values


OSCAM 11820


streamrelay: Force disconnect stream when no data from source

- this eliminates the 30 sec tuner release timeout when switching to streamrelay channels that are not currently broadcasting a program



OSCAM 11821


streamrelay: option to adjust reconnection attempts



OSCAM 11822


Display info when ECM processing returns error for T0 irdeto card

* Display info when ECM processing returns error for T0 irdeto card



OSCAM 11823


Fix Fransat V7 ECM error on UHD channels and code formatting (Thanks to @copy1530)

* Fix Fransat V7 ECM error on UHD channel and code formatting (Thanks to @copy1530)



OSCAM 11824


signing: increase binary hash to sha256

- replace weaker sha1 hash with sha256
- include openssl version information for signing
- show openssl version for signing as signer in oscam.version
- fix config.sh keep selection error introduced in d16d1e07



OSCAM 11825


Support nano 9F on Viaccess ECM

* Support nano 9F on Viaccess ECM

[fery21]

OSCAM 11826

signing: fix clang errors

- remove logical comparison warning
- transform gcc's nested to static function
- change most of signing functions to static

Co-authored-by: @Bust3D


OSCAM 11827

clang: remove build warnings

* -Wunused-but-set-variable warning in module-lcd.c (variable 'cnt' set but not used)
* -Wnon-literal-null-conversion warning in module-led.c (expression which evaluates to zero treated as a null pointer constant of type 'time_t * _Nullable' (aka 'long *'))
* -Wunused-but-set-variable warning in oscam-conf-chk.c (variable 'nfilts' set but not used)
* -Wunused-but-set-variable warning in oscam-config.c (variable 'line' set but not used)
* -Wpointer-sign warning in oscam-net.c (passing 'uint32_t *' (aka 'unsigned int *') to parameter of type 'socklen_t * _Nonnull' (aka 'int *') converts between pointers to integer types with different sign)


OSCAM 11828


Fix Viaccess pay-per-view entitlement display (Thanks to @copy1530 for season log)

* Fix Viaccess pay-per-view entitlement display (Thanks to @copy1530 for season log)


OSCAM 11829

signing: ensure type safety


OSCAM 11830

signing: fix build warnings

when compiling with openssl versions less than 3 introduced in e3e82f0a


OSCAM 11831


Fix 'get_emm_type() returns error' on Irdeto global EMMs

* Fix 'get_emm_type() returns error' on Irdeto global EMMs

[fery21]

OSCAM 11832


Replace readdir with scandir

* Replace readdir with scandir

- drop readdir: it is easier to use scandir, which also webif code uses
- scandir should not need lock, as it is threadsafe

Co-authored-by: @lpm11


pipeline: add rebase-merge-requests job - [ci skip]

- separate job for invoke-sync-gitlab
- delete remaining unreferenced tag on forced push


OSCAM 11833


Proper fix for zeros CW displaying on ecm.info file when streamrelay is used....

Proper fix for zeros CW displaying on ecm.info file when streamrelay is used. Patch provided by @cokeaddict

* Fix zeros CW display on ecm.info file when streamrelay is in used. (Thanks to @cokeaddict)


OSCAM 11834


Fix build errors and memory leaks

* Fix build errors and memory leaks

introduced in 88d9daaa + 1d8753ec


OSCAM 11835

Remove https_force_secure_mode ssl warning


OSCAM 11836

Fix typo on module-dvbapi-stapi5.c introduced on 88d9daaa

* Fix typo on module-dvbapi-stapi5.c introduced on 88d9daaa

[fery21]

OSCAM 11837


signing: fix upx decompression

* embed signature so that upx still recognizes its own format (make, cmake)
* update signature validation process
* also sign the binary before compression


OSCAM 11838

signing: update make clean

to remove signing artifact remnants


OSCAM 11839


Add support Tongfang3 (NTIC2) CAS (Thanks to @nx111)

* Add support Tongfang3 (NTIC2) CAS (Thanks to @nx111) (part 3 of 9)

* Add support Tongfang3 (NTIC2) CAS (Thanks to @nx111) (part 2 of 9)

* Add support Tongfang3 (NTIC2) CAS (Thanks to @nx111) (part 9 of 9)

* Add support Tongfang3 (NTIC2) CAS (Thanks to @nx111) (part 8 of 9)

* Add support Tongfang3 (NTIC2) CAS (Thanks to @nx111) (part 7 of 9)

* Add support Tongfang3 (NTIC2) CAS (Thanks to @nx111) (part 6 of 9)

* Add support Tongfang3 (NTIC2) CAS (Thanks to @nx111) (part 5 of 9)

* Add support Tongfang3 (NTIC2) CAS (Thanks to @nx111) (part 4 of 9)

* Add support Tongfang3 (NTIC2) CAS (Thanks to @nx111) (part 1 of 9)

[fery21]

OSCAM 11840

streamrelay: fix reconnect streams on motor dishes
* thanks to @ian1095 for reporting
Co-authored-by: @ohmza

OSCAM 11841

Fix SECA/Nagra card unable to start in CAK7 mode on PCSC and Tongfang code clean up.
* Fix bug where SECA/Nagra card unable to start in CAK7 mode on PCSC reader (Thanks to @Kind regards)
* Tongfang code clean up
* Tongfang webif code clean up

OSCAM 11842

Increase maximum webif entries allowed and removed unused tongfang code
* Remove unused tongfang code
* Increase maximum webif entries allowed (Patch provided by @Bust3D)

OSCAM 11843

Blure sensible data provided by Bust3D
* Blure sensible data provided by Bust3D
Co-authored-by: default avataropti <opti@opti-secret.de>

OSCAM 11844

webif: extend "Scan USB" output on Readers page
* scanusb: improve output
- list udev usb devices
- list pcsc devices


OSCAM 11845

Fix build error with non C99 capable toolchains
* Fix build error with non C99 builds
module-webif.c: In function ‘send_oscam_scanusb’:
module-webif.c:7167:2: error: ‘for’ loop initial declarations are only allowed in C99 mode
for (uint8_t i = 0; i < (sizeof(elems) / sizeof(elems[0])); i+=5)
module-webif.c:7167:2: note: use option -std=c99 or -std=gnu99 to compile your code
* pipeline: add build test for ancient and latest toolchains
ancient: oldest version of gcc, glibc, library
latest: latest version of gcc, glibc, library