pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/net openvpn: updated to 2.4.7



details:   https://anonhg.NetBSD.org/pkgsrc/rev/0d80c59f9b38
branches:  trunk
changeset: 330049:0d80c59f9b38
user:      adam <adam%pkgsrc.org@localhost>
date:      Thu Feb 21 16:22:54 2019 +0000

description:
openvpn: updated to 2.4.7

OpenVPN 2.4.7
- Fix subnet topology on NetBSD (2.4).
- add support for %lu in argv_printf and prevent ASSERT
- buffer_list: add functions documentation
- ifconfig-ipv6(-push): allow using hostnames
- Properly free tuntap struct on android when emulating persist-tun
- Add OpenSSL compat definition for RSA_meth_set_sign
- Add support for tls-ciphersuites for TLS 1.3
- Add better support for showing TLS 1.3 ciphersuites in --show-tls
- Use right function to set TLS1.3 restrictions in show-tls
- Add message explaining early TLS client hello failure
- Fallback to password authentication when auth-token fails
- systemd: extend CapabilityBoundingSet for auth_pam
- plugin: Export base64 encode and decode functions
- Add %d, %u and %lu tests to test_argv unit tests.
- Fix combination of --dev tap and --topology subnet across multiple platforms.
- Add 'printing of port number' to mroute_addr_print_ex() for v4-mapped v6.
- preparing release v2.4.7 (ChangeLog, version.m4, Changes.rst)
- Minor reliability layer documentation fixes
- Resolves small IV_GUI_VER typo in the documentation.
- Clarify and expand management interface documentation
- Refactor NCP-negotiable options handling
- init.c: refine functions names and description
- interactive.c: fix usage of potentially uninitialized variable
- options.c: fix broken unary minus usage
- Remove extra token after #endif
- Fix error message when using RHEL init script
- man: correct a --redirection-gateway option flag
- Replace M_DEBUG with D_LOW as the former is too verbose
- Correct the declaration of handle in 'struct openvpn_plugin_args_open_return'
- Bump version of openvpn plugin argument structs to 5
- Move get system directory to a separate function
- Enable dhcp on tap adapter using interactive service
- Pass the hash without the DigestInfo header to NCryptSignHash()
- White-list pull-filter and script-security in interactive service
- Add Interactive Service developer documentation
- Detect TAP interfaces with root-enumerated hardware ID
- man: add security considerations to --compress section
- mbedtls: print warning if random personalisation fails
- Fix memory leak after sighup
- travis: add OpenSSL 1.1 Windows build
- Fix --disable-crypto build
- Don't print OCC warnings about 'key-method', 'keydir' and 'tls-auth'
- buffer_list_aggregate_separator(): simplify code

diffstat:

 net/openvpn-acct-wtmpx/distinfo             |  10 ++--
 net/openvpn-nagios/distinfo                 |  10 ++--
 net/openvpn/Makefile                        |   3 +-
 net/openvpn/Makefile.common                 |   4 +-
 net/openvpn/distinfo                        |  11 ++---
 net/openvpn/patches/patch-src_openvpn_tun.c |  58 -----------------------------
 6 files changed, 18 insertions(+), 78 deletions(-)

diffs (143 lines):

diff -r ce4dd3680ea4 -r 0d80c59f9b38 net/openvpn-acct-wtmpx/distinfo
--- a/net/openvpn-acct-wtmpx/distinfo   Thu Feb 21 14:32:32 2019 +0000
+++ b/net/openvpn-acct-wtmpx/distinfo   Thu Feb 21 16:22:54 2019 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.19 2018/04/27 06:40:28 adam Exp $
+$NetBSD: distinfo,v 1.20 2019/02/21 16:22:54 adam Exp $
 
-SHA1 (openvpn-2.4.6.tar.xz) = 4742492867df31aadc0aeea5c8b4422d1a624e69
-RMD160 (openvpn-2.4.6.tar.xz) = 9fb17a39b70d96ecc3075a78011496b239e741d6
-SHA512 (openvpn-2.4.6.tar.xz) = da4301a4655a5bc224de59ba74fe15005ea856cc43b404aa32caa7065f49adc69f4747ba646f228554d5b6629323f434ee0e04ee71d2103964b9bab23d185ebe
-Size (openvpn-2.4.6.tar.xz) = 943376 bytes
+SHA1 (openvpn-2.4.7.tar.xz) = 322d6460f74781dcd32f4a13236dd65e91d41240
+RMD160 (openvpn-2.4.7.tar.xz) = 3bbea3d5cb4c8d06c3960f83427bc1161d093a49
+SHA512 (openvpn-2.4.7.tar.xz) = 5398084ad0002b3ed34871375888a1ec5d4d0f0dbc7c979ab12fc16b00559613c0654f1760e84bea77d4fe7284bce25e2e9d3d309fe85ffd1060ced10978ff95
+Size (openvpn-2.4.7.tar.xz) = 953116 bytes
 SHA1 (openvpn-acct-wtmpx-20130210.tgz) = cf7bc26b12a65493cdf5db93b03bbb938a2f0f33
 RMD160 (openvpn-acct-wtmpx-20130210.tgz) = d9000789f04606bfa17db1597a45a4235b1119ea
 SHA512 (openvpn-acct-wtmpx-20130210.tgz) = 7b8fd4929e65d8d84158f62e5a17ff3adb3b4a6cff63b29038acfb368750719f2f593786ed9b02402824c19d872b188d2a46740a5c5f853e8873a71481b13aaf
diff -r ce4dd3680ea4 -r 0d80c59f9b38 net/openvpn-nagios/distinfo
--- a/net/openvpn-nagios/distinfo       Thu Feb 21 14:32:32 2019 +0000
+++ b/net/openvpn-nagios/distinfo       Thu Feb 21 16:22:54 2019 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.16 2018/04/27 06:40:28 adam Exp $
+$NetBSD: distinfo,v 1.17 2019/02/21 16:22:54 adam Exp $
 
-SHA1 (openvpn-2.4.6.tar.xz) = 4742492867df31aadc0aeea5c8b4422d1a624e69
-RMD160 (openvpn-2.4.6.tar.xz) = 9fb17a39b70d96ecc3075a78011496b239e741d6
-SHA512 (openvpn-2.4.6.tar.xz) = da4301a4655a5bc224de59ba74fe15005ea856cc43b404aa32caa7065f49adc69f4747ba646f228554d5b6629323f434ee0e04ee71d2103964b9bab23d185ebe
-Size (openvpn-2.4.6.tar.xz) = 943376 bytes
+SHA1 (openvpn-2.4.7.tar.xz) = 322d6460f74781dcd32f4a13236dd65e91d41240
+RMD160 (openvpn-2.4.7.tar.xz) = 3bbea3d5cb4c8d06c3960f83427bc1161d093a49
+SHA512 (openvpn-2.4.7.tar.xz) = 5398084ad0002b3ed34871375888a1ec5d4d0f0dbc7c979ab12fc16b00559613c0654f1760e84bea77d4fe7284bce25e2e9d3d309fe85ffd1060ced10978ff95
+Size (openvpn-2.4.7.tar.xz) = 953116 bytes
 SHA1 (openvpn-nagios-20130210.tgz) = 8a0fd4e3eba27584aa53c5589c13d4b38af43ba2
 RMD160 (openvpn-nagios-20130210.tgz) = 2a47893ec2db2c280adc7b9fbbea97794ec1a6f4
 SHA512 (openvpn-nagios-20130210.tgz) = 80e565f32379c39eb6c7f3b4744af221ae882ff07dce9dae5bd7feb73b0edcfc7c7ac7f70d23fdcd4f492b66f095f09833deb122449840b36ea606ce91900358
diff -r ce4dd3680ea4 -r 0d80c59f9b38 net/openvpn/Makefile
--- a/net/openvpn/Makefile      Thu Feb 21 14:32:32 2019 +0000
+++ b/net/openvpn/Makefile      Thu Feb 21 16:22:54 2019 +0000
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.66 2018/06/24 09:26:12 adam Exp $
+# $NetBSD: Makefile,v 1.67 2019/02/21 16:22:54 adam Exp $
 
 DISTNAME=      ${OPENVPN_DISTNAME}
-PKGREVISION=   1
 CATEGORIES=    net
 MASTER_SITES=  ${OPENVPN_MASTER_SITES}
 EXTRACT_SUFX=  .tar.xz
diff -r ce4dd3680ea4 -r 0d80c59f9b38 net/openvpn/Makefile.common
--- a/net/openvpn/Makefile.common       Thu Feb 21 14:32:32 2019 +0000
+++ b/net/openvpn/Makefile.common       Thu Feb 21 16:22:54 2019 +0000
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.14 2018/04/27 06:40:28 adam Exp $
+# $NetBSD: Makefile.common,v 1.15 2019/02/21 16:22:54 adam Exp $
 # used by net/openvpn/Makefile
 # used by net/openvpn-acct-wtmpx/Makefile
 # used by net/openvpn-nagios/Makefile
 
-OPENVPN_DISTNAME=      openvpn-2.4.6
+OPENVPN_DISTNAME=      openvpn-2.4.7
 OPENVPN_DISTFILE=      ${OPENVPN_DISTNAME}.tar.xz
 OPENVPN_MASTER_SITES=  http://swupdate.openvpn.org/community/releases/
 SITES.${OPENVPN_DISTFILE}=     ${OPENVPN_MASTER_SITES}
diff -r ce4dd3680ea4 -r 0d80c59f9b38 net/openvpn/distinfo
--- a/net/openvpn/distinfo      Thu Feb 21 14:32:32 2019 +0000
+++ b/net/openvpn/distinfo      Thu Feb 21 16:22:54 2019 +0000
@@ -1,9 +1,8 @@
-$NetBSD: distinfo,v 1.42 2018/06/24 09:26:12 adam Exp $
+$NetBSD: distinfo,v 1.43 2019/02/21 16:22:54 adam Exp $
 
-SHA1 (openvpn-2.4.6.tar.xz) = 4742492867df31aadc0aeea5c8b4422d1a624e69
-RMD160 (openvpn-2.4.6.tar.xz) = 9fb17a39b70d96ecc3075a78011496b239e741d6
-SHA512 (openvpn-2.4.6.tar.xz) = da4301a4655a5bc224de59ba74fe15005ea856cc43b404aa32caa7065f49adc69f4747ba646f228554d5b6629323f434ee0e04ee71d2103964b9bab23d185ebe
-Size (openvpn-2.4.6.tar.xz) = 943376 bytes
+SHA1 (openvpn-2.4.7.tar.xz) = 322d6460f74781dcd32f4a13236dd65e91d41240
+RMD160 (openvpn-2.4.7.tar.xz) = 3bbea3d5cb4c8d06c3960f83427bc1161d093a49
+SHA512 (openvpn-2.4.7.tar.xz) = 5398084ad0002b3ed34871375888a1ec5d4d0f0dbc7c979ab12fc16b00559613c0654f1760e84bea77d4fe7284bce25e2e9d3d309fe85ffd1060ced10978ff95
+Size (openvpn-2.4.7.tar.xz) = 953116 bytes
 SHA1 (patch-configure) = 240342a88baed7642dfd63ed0a2ab4c0a75adbd4
 SHA1 (patch-src_compat_compat-basename.c) = 45a58ef2e05f6e0265f229da8540760e60e65143
-SHA1 (patch-src_openvpn_tun.c) = 32b52e0ecd4f8a190bc3c87b49da30e40fb7f241
diff -r ce4dd3680ea4 -r 0d80c59f9b38 net/openvpn/patches/patch-src_openvpn_tun.c
--- a/net/openvpn/patches/patch-src_openvpn_tun.c       Thu Feb 21 14:32:32 2019 +0000
+++ /dev/null   Thu Jan 01 00:00:00 1970 +0000
@@ -1,58 +0,0 @@
-$NetBSD: patch-src_openvpn_tun.c,v 1.1 2018/06/24 09:26:12 adam Exp $
-
-Fix for NetBSD with subnet topology.
-
---- src/openvpn/tun.c.orig     2018-06-24 07:38:24.000000000 +0000
-+++ src/openvpn/tun.c
-@@ -845,7 +845,7 @@ delete_route_connected_v6_net(struct tun
- #endif /* if defined(_WIN32) || defined(TARGET_DARWIN) || defined(TARGET_NETBSD) || defined(TARGET_OPENBSD) */
- 
- #if defined(TARGET_FREEBSD) || defined(TARGET_DRAGONFLY)  \
--    || defined(TARGET_OPENBSD)
-+    || defined(TARGET_NETBSD) || defined(TARGET_OPENBSD)
- /* we can't use true subnet mode on tun on all platforms, as that
-  * conflicts with IPv6 (wants to use ND then, which we don't do),
-  * but the OSes want "a remote address that is different from ours"
-@@ -1269,6 +1269,8 @@ do_ifconfig(struct tuntap *tt,
- 
- #elif defined(TARGET_NETBSD)
- 
-+        in_addr_t remote_end;           /* for "virtual" subnet topology */
-+
-         if (tun)
-         {
-             argv_printf(&argv,
-@@ -1282,12 +1284,13 @@ do_ifconfig(struct tuntap *tt,
-         }
-         else if (tt->topology == TOP_SUBNET)
-         {
-+            remote_end = create_arbitrary_remote( tt );
-             argv_printf(&argv,
-                         "%s %s %s %s mtu %d netmask %s up",
-                         IFCONFIG_PATH,
-                         actual,
-                         ifconfig_local,
--                        ifconfig_local,
-+                        print_in_addr_t(remote_end, 0, &gc),
-                         tun_mtu,
-                         ifconfig_remote_netmask
-                         );
-@@ -1312,6 +1315,18 @@ do_ifconfig(struct tuntap *tt,
-         argv_msg(M_INFO, &argv);
-         openvpn_execve_check(&argv, es, S_FATAL, "NetBSD ifconfig failed");
- 
-+        /* Add a network route for the local tun interface */
-+        if (!tun && tt->topology == TOP_SUBNET)
-+        {
-+            struct route_ipv4 r;
-+            CLEAR(r);
-+            r.flags = RT_DEFINED;
-+            r.network = tt->local & tt->remote_netmask;
-+            r.netmask = tt->remote_netmask;
-+            r.gateway = remote_end;
-+            add_route(&r, tt, 0, NULL, es);
-+        }
-+
-         if (do_ipv6)
-         {
-             argv_printf(&argv,



Home | Main Index | Thread Index | Old Index