CVS commit: pkgsrc/net

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Mar 29 10:43:54 UTC 2023

Modified Files:
        pkgsrc/net/openvpn: Makefile.common distinfo
        pkgsrc/net/openvpn-acct-wtmpx: distinfo
        pkgsrc/net/openvpn-nagios: distinfo

Log Message:
openvpn: updated to 2.6.2

Overview of changes in 2.6.2

New features

implement byte counter statistics for DCO Linux (p2mp server and client)
implement byte counter statistics for DCO Windows (client only)
'--dns server <n> address ...' now permits up to 8 v4 or v6 addresses
fix a few cases of possibly undefined behaviour detected by ASAN
add more unit tests for Windows cryptoapi interface

Bug fixes

sending of AUTH_PENDING and INFO_PRE messages fixed
Windows: do not treat "setting IPv6 interface metric failed" as fatal error on "block-dns" install - this can happen if IPv6 is disabled on the interface and is not harmful in itself
fix '--inactive' if DCO is in use NOTE: on FreeBSD, this is not working yet (missing per-peer stats)
DCO-Linux: do not print errno on netlink errors (errno is not set by NL)
SOCKS client: improve error reporting on server disconnects
DCO-Linux: fix lockups due to netlink buffer overflows on high client connect/disconnect activity. See "User visible changes" for more details of this.
fix some uses of the OpenSSL3 API for non-default providers (enable use of quantum-crypto OpenSSL provider)
fix memory leak of approx. 1600 bytes per incoming initial TLS packet
fix bug when using ECDSA signatures with OpenSSL 3.0.x and pkcs11-helper (data format conversion was not done properly)
fix 'make distcheck' - unexpected side effect of 'subdir-objects'
fix ASSERT() with dynamic tls-crypt and --tls-crypt-v2

User visible changes

print (kernel) DCO version on startup - helpful for getting a more complete picture of the environment in use.
New control packets flow for data channel offloading on Linux. 2.6.2+ changes the way OpenVPN control packets are handled on Linux when DCO is active, fixing the lockups observed with 2.6.0/2.6.1 
under high client connect/disconnect activity. This is an INCOMPATIBLE change and therefore an ovpn-dco kernel module older than v0.2.20230323 (commit ID 726fdfe0fa21) will not work anymore and must 
be upgraded. The kernel module was renamed to "ovpn-dco-v2.ko" in order to highlight this change and ensure that users and userspace software could easily understand which version is loaded. 
Attempting to use the old ovpn-dco with 2.6.2+ will lead to disabling DCO at runtime.
The client-pending-auth management command now requires also the key id. The management version has been changed to 5 to indicate this change.
A client will now refuse a connection if pushed compression settings will contradict the setting of allow-compression as this almost always results in a non-working connection.


To generate a diff of this commit:
cvs rdiff -u -r1.28 -r1.29 pkgsrc/net/openvpn/Makefile.common
cvs rdiff -u -r1.59 -r1.60 pkgsrc/net/openvpn/distinfo
cvs rdiff -u -r1.34 -r1.35 pkgsrc/net/openvpn-acct-wtmpx/distinfo
cvs rdiff -u -r1.31 -r1.32 pkgsrc/net/openvpn-nagios/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/openvpn/Makefile.common
diff -u pkgsrc/net/openvpn/Makefile.common:1.28 pkgsrc/net/openvpn/Makefile.common:1.29
--- pkgsrc/net/openvpn/Makefile.common:1.28     Tue Mar 14 06:31:38 2023
+++ pkgsrc/net/openvpn/Makefile.common  Wed Mar 29 10:43:54 2023
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.28 2023/03/14 06:31:38 adam Exp $
+# $NetBSD: Makefile.common,v 1.29 2023/03/29 10:43:54 adam Exp $
 # used by net/openvpn/Makefile
 # used by net/openvpn-acct-wtmpx/Makefile
 # used by net/openvpn-nagios/Makefile
 
-OPENVPN_DISTNAME=              openvpn-2.6.1
+OPENVPN_DISTNAME=              openvpn-2.6.2
 OPENVPN_DISTFILE=              ${OPENVPN_DISTNAME}.tar.gz
 OPENVPN_MASTER_SITES=          https://swupdate.openvpn.org/community/releases/
 SITES.${OPENVPN_DISTFILE}=     ${OPENVPN_MASTER_SITES}

Index: pkgsrc/net/openvpn/distinfo
diff -u pkgsrc/net/openvpn/distinfo:1.59 pkgsrc/net/openvpn/distinfo:1.60
--- pkgsrc/net/openvpn/distinfo:1.59    Tue Mar 14 06:31:38 2023
+++ pkgsrc/net/openvpn/distinfo Wed Mar 29 10:43:54 2023
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.59 2023/03/14 06:31:38 adam Exp $
+$NetBSD: distinfo,v 1.60 2023/03/29 10:43:54 adam Exp $
 
-BLAKE2s (openvpn-2.6.1.tar.gz) = 8645f53378fadbfdb0106e95c5375995e7f7557acd28c0de248fbdf555cae40c
-SHA512 (openvpn-2.6.1.tar.gz) = f848abc1d3ab99111b852fa52d12cb93734137acf3319b704c65cf8d1ef8abbf3cd3dbbe32b59687945e7dbd7ac7e8fc97bee57667f97700ba03d1ced4b40c31
-Size (openvpn-2.6.1.tar.gz) = 1852147 bytes
+BLAKE2s (openvpn-2.6.2.tar.gz) = d52f99bf9a47a58b0fd3832d0cf613e878d5bbd73062c02342a888e1a87a7607
+SHA512 (openvpn-2.6.2.tar.gz) = 7f4729f64071d947bc568e2e4fe5051dd9363eecde1493fcc9fc8a8d510277833abc819d382ec64e4e9400b1ae802ddcec28a9c4934f962350d2d0e4b6c5920b
+Size (openvpn-2.6.2.tar.gz) = 1860124 bytes
 SHA1 (patch-src_compat_compat-basename.c) = 45a58ef2e05f6e0265f229da8540760e60e65143

Index: pkgsrc/net/openvpn-acct-wtmpx/distinfo
diff -u pkgsrc/net/openvpn-acct-wtmpx/distinfo:1.34 pkgsrc/net/openvpn-acct-wtmpx/distinfo:1.35
--- pkgsrc/net/openvpn-acct-wtmpx/distinfo:1.34 Tue Mar 14 06:31:38 2023
+++ pkgsrc/net/openvpn-acct-wtmpx/distinfo      Wed Mar 29 10:43:54 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.34 2023/03/14 06:31:38 adam Exp $
+$NetBSD: distinfo,v 1.35 2023/03/29 10:43:54 adam Exp $
 
-BLAKE2s (openvpn-2.6.1.tar.gz) = 8645f53378fadbfdb0106e95c5375995e7f7557acd28c0de248fbdf555cae40c
-SHA512 (openvpn-2.6.1.tar.gz) = f848abc1d3ab99111b852fa52d12cb93734137acf3319b704c65cf8d1ef8abbf3cd3dbbe32b59687945e7dbd7ac7e8fc97bee57667f97700ba03d1ced4b40c31
-Size (openvpn-2.6.1.tar.gz) = 1852147 bytes
+BLAKE2s (openvpn-2.6.2.tar.gz) = d52f99bf9a47a58b0fd3832d0cf613e878d5bbd73062c02342a888e1a87a7607
+SHA512 (openvpn-2.6.2.tar.gz) = 7f4729f64071d947bc568e2e4fe5051dd9363eecde1493fcc9fc8a8d510277833abc819d382ec64e4e9400b1ae802ddcec28a9c4934f962350d2d0e4b6c5920b
+Size (openvpn-2.6.2.tar.gz) = 1860124 bytes
 BLAKE2s (openvpn-acct-wtmpx-20130210.tgz) = 2bb02a4e6adb7ce1d189271a6fbb6cbffd6a37d7b5e75cccebfc8dfac6dbaddd
 SHA512 (openvpn-acct-wtmpx-20130210.tgz) = 7b8fd4929e65d8d84158f62e5a17ff3adb3b4a6cff63b29038acfb368750719f2f593786ed9b02402824c19d872b188d2a46740a5c5f853e8873a71481b13aaf
 Size (openvpn-acct-wtmpx-20130210.tgz) = 2778 bytes

Index: pkgsrc/net/openvpn-nagios/distinfo
diff -u pkgsrc/net/openvpn-nagios/distinfo:1.31 pkgsrc/net/openvpn-nagios/distinfo:1.32
--- pkgsrc/net/openvpn-nagios/distinfo:1.31     Tue Mar 14 06:31:38 2023
+++ pkgsrc/net/openvpn-nagios/distinfo  Wed Mar 29 10:43:54 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.31 2023/03/14 06:31:38 adam Exp $
+$NetBSD: distinfo,v 1.32 2023/03/29 10:43:54 adam Exp $
 
-BLAKE2s (openvpn-2.6.1.tar.gz) = 8645f53378fadbfdb0106e95c5375995e7f7557acd28c0de248fbdf555cae40c
-SHA512 (openvpn-2.6.1.tar.gz) = f848abc1d3ab99111b852fa52d12cb93734137acf3319b704c65cf8d1ef8abbf3cd3dbbe32b59687945e7dbd7ac7e8fc97bee57667f97700ba03d1ced4b40c31
-Size (openvpn-2.6.1.tar.gz) = 1852147 bytes
+BLAKE2s (openvpn-2.6.2.tar.gz) = d52f99bf9a47a58b0fd3832d0cf613e878d5bbd73062c02342a888e1a87a7607
+SHA512 (openvpn-2.6.2.tar.gz) = 7f4729f64071d947bc568e2e4fe5051dd9363eecde1493fcc9fc8a8d510277833abc819d382ec64e4e9400b1ae802ddcec28a9c4934f962350d2d0e4b6c5920b
+Size (openvpn-2.6.2.tar.gz) = 1860124 bytes
 BLAKE2s (openvpn-nagios-20130210.tgz) = 713b55e865350c44a314aa3b48694695f4d82b50883d1fae919f01e9545c7c34
 SHA512 (openvpn-nagios-20130210.tgz) = 80e565f32379c39eb6c7f3b4744af221ae882ff07dce9dae5bd7feb73b0edcfc7c7ac7f70d23fdcd4f492b66f095f09833deb122449840b36ea606ce91900358
 Size (openvpn-nagios-20130210.tgz) = 3034 bytes