CVS commit: pkgsrc/security/stunnel

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Tue Jan 24 03:34:28 UTC 2017

Modified Files:
        pkgsrc/security/stunnel: Makefile distinfo
        pkgsrc/security/stunnel/patches: patch-ac

Log Message:
Update to 5.39

Changelog:
Version 5.39, 2017.01.01, urgency: LOW
* New features
  - PKCS#11 engine (pkcs11.dll) added to the Win32 build.
  - Per-destination TLS session cache added for the client mode.
  - The new "logId" parameter "process" added to log PID values.
  - Added support for the new SSL_set_options() values.
  - Updated the manual page.
  - Obsolete references to "SSL" replaced with "TLS".
* Bugfixes
  - Fixed "logId" parameter to also work in inetd mode.
  - "delay = yes" properly enforces "failover = prio".
  - Fixed fd_set allocation size on Win64.
  - Fixed reloading invalid configuration file on Win32.
  - Fixed resolving addresses with unconfigured network interfaces.

Version 5.38, 2016.11.26, urgency: MEDIUM
* New features
  - "sni=" can be used to prevent sending the SNI extension.
  - The AI_ADDRCONFIG resolver flag is used when available.
  - Merged Debian 06-lfs.patch (thx Peter Pentchev).
* Bugfixes
  - Fixed a memory allocation bug causing crashes with OpenSSL 1.1.0.
  - Fixed error handling for mixed IPv4/IPv6 destinations.
  - Merged Debian 08-typos.patch (thx Peter Pentchev).

Version 5.37, 2016.11.06, urgency: MEDIUM
* Bugfixes
  - OpenSSL DLLs updated to version 1.0.2j (stops crashes).
  - The default SNI target (not handled by any slave service)
    is handled by the master service rather than rejected.
  - Removed thread synchronization in the FORK threading model.

Version 5.36, 2016.09.22, urgency: HIGH
* Security bugfixes
  - OpenSSL DLLs updated to version 1.0.2i.
    https://www.openssl.org/news/secadv_20160922.txt
* New features
  - Added support for OpenSSL 1.1.0 built with "no-deprecated".
  - Removed direct zlib dependency.


To generate a diff of this commit:
cvs rdiff -u -r1.104 -r1.105 pkgsrc/security/stunnel/Makefile
cvs rdiff -u -r1.51 -r1.52 pkgsrc/security/stunnel/distinfo
cvs rdiff -u -r1.19 -r1.20 pkgsrc/security/stunnel/patches/patch-ac

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/stunnel/Makefile
diff -u pkgsrc/security/stunnel/Makefile:1.104 pkgsrc/security/stunnel/Makefile:1.105
--- pkgsrc/security/stunnel/Makefile:1.104      Mon Aug 29 19:21:24 2016
+++ pkgsrc/security/stunnel/Makefile    Tue Jan 24 03:34:28 2017
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.104 2016/08/29 19:21:24 jym Exp $
+# $NetBSD: Makefile,v 1.105 2017/01/24 03:34:28 ryoon Exp $
 
-DISTNAME=              stunnel-5.35
+DISTNAME=              stunnel-5.39
 CATEGORIES=            security
 MASTER_SITES=          http://www.stunnel.org/downloads/
 

Index: pkgsrc/security/stunnel/distinfo
diff -u pkgsrc/security/stunnel/distinfo:1.51 pkgsrc/security/stunnel/distinfo:1.52
--- pkgsrc/security/stunnel/distinfo:1.51       Mon Aug 29 19:21:24 2016
+++ pkgsrc/security/stunnel/distinfo    Tue Jan 24 03:34:28 2017
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.51 2016/08/29 19:21:24 jym Exp $
+$NetBSD: distinfo,v 1.52 2017/01/24 03:34:28 ryoon Exp $
 
-SHA1 (stunnel-5.35.tar.gz) = 90cafc2208aa3acefb503856482e163e9af463c4
-RMD160 (stunnel-5.35.tar.gz) = 92f7c680e9de49740094a531c5b466aa5ac9d453
-SHA512 (stunnel-5.35.tar.gz) = cdec7ddafbfac4a1d420704baec72fedbd655871137ec8283c066203c0859019c6e11ce00647e5b471a019409e4eb5e9525166eddd7ddffa25055b95c0cacd9e
-Size (stunnel-5.35.tar.gz) = 645148 bytes
+SHA1 (stunnel-5.39.tar.gz) = ca7d09262f1a612ac098943d64848f431e7fc43f
+RMD160 (stunnel-5.39.tar.gz) = 78031e43f8ea50ae592718b31b212db1150beb17
+SHA512 (stunnel-5.39.tar.gz) = 1a59ca3bedd00730598e5bdee61d1968e76d3b1c0bb666fcab5103f5ba6fac0585612198baab180ac0745f658041510fe0115ec8b111da6fd7c161a4ec301458
+Size (stunnel-5.39.tar.gz) = 647101 bytes
 SHA1 (patch-aa) = b247aca629197887fb720f7a02d9b73d60bb0d37
-SHA1 (patch-ac) = 91b09d39fb968ad76952acdff250150d3e372c36
+SHA1 (patch-ac) = 4e5e0a3cfe95b3952741814a1f26bcb99d002fdc
 SHA1 (patch-stunnel.conf-sample.in) = 86d195963e5ad2db381ac89ae0fca13a7f641fa5

Index: pkgsrc/security/stunnel/patches/patch-ac
diff -u pkgsrc/security/stunnel/patches/patch-ac:1.19 pkgsrc/security/stunnel/patches/patch-ac:1.20
--- pkgsrc/security/stunnel/patches/patch-ac:1.19       Sat Jul 25 03:11:18 2015
+++ pkgsrc/security/stunnel/patches/patch-ac    Tue Jan 24 03:34:28 2017
@@ -1,15 +1,15 @@
-$NetBSD: patch-ac,v 1.19 2015/07/25 03:11:18 ryoon Exp $
+$NetBSD: patch-ac,v 1.20 2017/01/24 03:34:28 ryoon Exp $
 
 We'll take care of PKG_SYSCONFSUBDIR ourselves, thanks.
 
---- src/Makefile.in.orig       2015-07-09 13:41:47.000000000 +0000
+--- src/Makefile.in.orig       2017-01-01 22:17:59.000000000 +0000
 +++ src/Makefile.in
-@@ -396,7 +396,7 @@ libstunnel_la_LDFLAGS = -avoid-version
+@@ -375,7 +375,7 @@ CLEANFILES = stunnel3
  
  # Additional preprocesor definitions
  stunnel_CPPFLAGS = -I/usr/kerberos/include -I$(SSLDIR)/include \
 -      -DLIBDIR='"$(pkglibdir)"' -DCONFDIR='"$(sysconfdir)/stunnel"'
 +      -DLIBDIR='"$(pkglibdir)"' -DCONFDIR='"$(sysconfdir)"'
  
- # SSL library
+ # TLS library
  stunnel_LDFLAGS = -L$(SSLDIR)/lib64 -L$(SSLDIR)/lib -lssl -lcrypto