pkgsrc/security/ipsec-tools/Makefile, branch pkgsrc-2011Q3[no description]https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc-2011Q32010-11-11T11:42:20Zreset maintainer, he does not use this package anymore.2010-11-11T11:42:20Zobacheobache@pkgsrc.org2010-11-11T11:42:20Zurn:sha1:76714eb15be30a80e03df8e8ba3cb56974911086update to latest release2010-03-06T09:07:15Zspzspz@pkgsrc.org2010-03-06T09:07:15Zurn:sha1:3398cfc505ef410f882dd19133e3b9c39c1e1e5c
DESTDIRify
ok'd by manu@Recursive PKGREVISION bump for jpeg update to 8.2010-01-17T12:02:03Zwizwiz@pkgsrc.org2010-01-17T12:02:03Zurn:sha1:672ef23395551ccee94b9dca8039c72523c67be4From Sergey Svishchev <svs@ropnet.ru>: ipsec-tools builds fine on FreeBSD2009-01-10T17:13:01Zmanumanu@pkgsrc.org2009-01-10T17:13:01Zurn:sha1:24c4fb7253cbe45e9628b9c50e5a7ae3d6d5ccd6Update to ipsec-tools 0.7.1, fixes CVE-2008-36522008-08-16T06:55:18Zmanumanu@pkgsrc.org2008-08-16T06:55:18Zurn:sha1:2181a05305c0232e5db67b6a2b53ad9fa9626c68
Changes since the 0.6 branch:
0.7.1 - 23 July 2008
o Fixes a memory leak when invalid proposal received
o Some fixes in DPD
o do not set default gss id if xauth is used
o fixed hybrid enabled builds
o fixed compilation on FreeBSD8
o cleanup in network port value manipulation
o gets ports from SADB_X_EXT_NAT_T_[SD]PORT if present in purge_ipsec_sp
i()
o Generates a log if cert validation has been disabled by configuration
o better handling for pfkey socket read errors
o Fixes in yacc / bison stuff
o new plog() macro (reduced CPU usage when logging is disabled)
o Try to works better with huge SPD/SAD
o Corrected modecfg option syntax
o Many other various fixes...
0.7 - 09 August 2007
o Xauth with pre-shared key PSK
o Xauth with certificates
o SHA2 support
o pkcs7 support
o system accounting (utmp)
o Darwin support
o configuration can be reloaded
o Support for UNIQUE generated policies
o Support for semi anonymous sainfos
o Support for ph1id to remoteid matching
o Plain RSA authentication
o Native LDAP support for Xauth and modecfg
o Group membership checks for Xauth and sainfo selection
o Camellia cipher support
o IKE Fragment force option
o Modecfg SplitNet attribute support
o Modecfg SplitDNS attribute support ( server side )
o Modecfg Default Domain attribute support
o Modecfg DNS/WINS server multiple attribute supportPer the process outlined in revbump(1), perform a recursive revbump2008-01-18T05:06:18Ztnntnn@pkgsrc.org2008-01-18T05:06:18Zurn:sha1:ad6ceadd25e1d535423ffbc205cb3e45472c83ca
on packages that are affected by the switch from the openssl 0.9.7
branch to the 0.9.8 branch. ok jlam@Update to ipsec-tools 0.6.7.2007-04-11T06:51:19Zghenghen@pkgsrc.org2007-04-11T06:51:19Zurn:sha1:3612dc60148551c319fe193bbb07ef875c237ded
o Fixed SHA256 detection on some systems
o Fixed a DoS in Informationnal messages processing (CVE-2007-1841).Whitespace cleanup, courtesy of pkglint.2007-02-22T19:26:05Zwizwiz@pkgsrc.org2007-02-22T19:26:05Zurn:sha1:601583c3207bd23bb05d0761888aefcb5699e1c2
Patch provided by Sergey Svishchev in private mail.Update ipsec-tools to 0.6.6.2006-10-25T17:12:18Zbadbad@pkgsrc.org2006-10-25T17:12:18Zurn:sha1:05972d3b7441d6761dcc5abb207076f55093bd38
Changes since 0.6.3:
0.6.6
* src/racoon/isakmp_xauth.c: Build fix
* src/racoon/pfkey.c: Sets NAT-T ports to 0 if no NAT
encapsulation in pk_sendgetspi().
* src/racoon/pfkey.c: Sets NAT-T ports to 0 if no NAT
encapsulation in pk_sendupdate().
* src/racoon/isakmp_xauth.c: fix memory leak
* src/racoon/{cfparse.y|handler.h}: typos
0.6.5
* src/racoon/isakmp.c: Fixed zombie PH1 handler when isakmp_send()
fails in isakmp_ph1resend()
* src/racoon/{cfparse.y|ipsec_doi.c}: Temporary fix for /32
subnets parsing.
* src/racoon/isakmp_cfg.c: make software behave as the documentation
advertise for INTERNAL_NETMASK4. Keep the old INTERNAL_MASK4 to
avoid breaking backward compatibility.
* src/racoon/session.c: Fixed / cleaned up signal handling.
0.6.4
* configure.ac src/racoon/plog.c: backported Fred's workaround for
%zu problems on (at least) FreeBSD4.
* src/racoon/session.c: backport: fix possible race conditions in
signal handlers (see session.c 1.17).
* src/libipsec/pfkey_dump.c: fixed compilation when NAT_T
disabled (Fred has still some CVS problems).
* src/libipsec/{libpfkey.h|pfkey_dump.c}: add a sadump_withports
function to display SAD entries with their associated ports.
* src/setkey/{parse.y|setkey.c|setkey.8}: allow to use setkey -p flag
in conjunction with -D to show SADs with the port, allow both get and
delete commands to use bracketed ports if needed.
* src/racoon/racoon.conf.5: Style changesRan "pkglint --autofix", which corrected some of the quoting issues in2005-12-05T23:55:01Zrilligrillig@pkgsrc.org2005-12-05T23:55:01Zurn:sha1:579e97796954edc2469fac176e855589e1dc2997
CONFIGURE_ARGS.