freeradius: updated to 3.0.25

FreeRADIUS 3.0.25

Feature improvements
* Better debug output when proxying is disabled
* Updates to support PostgreSQL 14

Bug fixes
* Add `correct_escapes` back into default configuration
* Fix undeclared variable with some compile options
* Quiet erroneous debug output
* Fix segfault when proxying to zombie home server
* Fix resolving values to enum strings in rlm_rest
* Fix printing raw values rather than enum strings in rlm_couchbase


FreeRADIUS 3.0.24

Feature improvements
* Add sanitizer options to configure script.
* Log information needed by Wireshark to decode TLS sessions.
* Allow more liberal SQL commands in rlm_sql_map.
* Update dictionary.apc, dictionary.h3c
* Add new Acct-Status-Type Subsystem-On and Subsystem-Off.
  See dictionary.iana and
  https://freeradius.org/rfc/acct_status_type_subsystem.html
* Add reject_unknown_intermediate_ca.  See mods-available/eap
* Add dynamic loading of certificates via TLS-Session-Cert-File.
  See raddb/certs/realms/README.md
* Add Server Name Indication (SNI) for outbound RadSec connections.
  See raddb/sites-available/tls, and the home server tls configuration.
* Support SNI for inbound RadSec connections.  Certificates will
  be loaded from "realm_dir" in the "tls" section.  SNI will be
  cached in the TLS-Server-Name-Indication attribute.
* Preliminary support for haproxy "PROXY" protocol.
  See sites-available/tls, "proxy_protocol" and doc/antora/modules/howto/pages/protocols/proxy/
* Generate parse errors in more circumstances when we know that the
  configuration is wrong.
* Add "weeklycounter" to sample sqlcounter configuration
* Add certificate attributes to the request list, even if the certificates
  have expired.
* The Simultaneous-Use code is now IPv6 aware, and can deal with
  NAS-IPv6-Address.
* Add dictionary.cambium

Bug fixes
* Fix crash in trustrouter module. Patch from Alejandro Perez
* Fix crash in state handling.
* Don't alter global options in redhat logrotate scripts.
* EAP-FAST will print errors and continue, rather than exiting
  when OpenSSL fails various internal sanity checks.
* Allow admin to manually change core limits, even when core limits
  are disabled. Patch from Antonio Torres.
* Fix chunked rlm_rest HTTP body.
  Patch from Nathan Ward.
* Many fixes around the SQL ippool queries.conf and schema.
  Patches from Jorge Periera.
* Fix MySQL stored procedures.
* Rework connection pool management for corner cases.
* Final fix for double free.
* Fix sqlcounter wrong memory free.
* Accept slow writes from proxies over TCP, which allows the
  server to make more progress when it receives partial packets.
* Add 'weeklycounter' for rlm_sqlcounter.
* Outbound proxying over TCP / TLS is better able to deal with
  partial TCP reads, and has fewer issues with slow networks.
* Fix wrong data-type of Acct-Delay-Time in rlm_unix.
* Fix EAP-FAST PAC lifetime calculation.
* Print correct encoded packet length when debugging

4 files changed, 21 insertions, 8 deletions

diff --git a/net/freeradius/Makefile.common b/net/freeradius/Makefile.common
index babd1ea1c99..46a881414bd 100644
--- a/net/freeradius/Makefile.common
+++ b/net/freeradius/Makefile.common
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile.common,v 1.10 2021/06/29 08:27:17 nia Exp $
+# $NetBSD: Makefile.common,v 1.11 2021/11/12 12:27:38 adam Exp $
 # used by net/freeradius/Makefile.module
 
-DISTNAME=	freeradius-server-3.0.23
+DISTNAME=	freeradius-server-3.0.25
 CATEGORIES=	net
 MASTER_SITES=	ftp://ftp.freeradius.org/pub/freeradius/
 EXTRACT_SUFX=	.tar.bz2
diff --git a/net/freeradius/PLIST b/net/freeradius/PLIST
index c84a496f6d7..049889ed7b5 100644
--- a/net/freeradius/PLIST
+++ b/net/freeradius/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.35 2021/06/25 11:42:48 adam Exp $
+@comment $NetBSD: PLIST,v 1.36 2021/11/12 12:27:38 adam Exp $
 bin/dhcpclient
 bin/map_unit
 bin/rad_counter
@@ -210,6 +210,12 @@ share/doc/freeradius/antora/modules/howto/pages/protocols/dhcp/policy_network_op
 share/doc/freeradius/antora/modules/howto/pages/protocols/dhcp/policy_subnet_options.adoc
 share/doc/freeradius/antora/modules/howto/pages/protocols/dhcp/prepare.adoc
 share/doc/freeradius/antora/modules/howto/pages/protocols/dhcp/test.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/proxy/enable_proxy_protocol.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/proxy/enable_radsec.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/proxy/index.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/proxy/radsec_client.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/proxy/radsec_with_haproxy.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/proxy/radsec_with_traefik.adoc
 share/doc/freeradius/antora/modules/installation/nav.adoc
 share/doc/freeradius/antora/modules/installation/pages/dependencies.adoc
 share/doc/freeradius/antora/modules/installation/pages/index.adoc
@@ -508,14 +514,17 @@ share/examples/freeradius/mods-config/sql/counter/mysql/dailycounter.conf
 share/examples/freeradius/mods-config/sql/counter/mysql/expire_on_login.conf
 share/examples/freeradius/mods-config/sql/counter/mysql/monthlycounter.conf
 share/examples/freeradius/mods-config/sql/counter/mysql/noresetcounter.conf
+share/examples/freeradius/mods-config/sql/counter/mysql/weeklycounter.conf
 share/examples/freeradius/mods-config/sql/counter/postgresql/dailycounter.conf
 share/examples/freeradius/mods-config/sql/counter/postgresql/expire_on_login.conf
 share/examples/freeradius/mods-config/sql/counter/postgresql/monthlycounter.conf
 share/examples/freeradius/mods-config/sql/counter/postgresql/noresetcounter.conf
+share/examples/freeradius/mods-config/sql/counter/postgresql/weeklycounter.conf
 share/examples/freeradius/mods-config/sql/counter/sqlite/dailycounter.conf
 share/examples/freeradius/mods-config/sql/counter/sqlite/expire_on_login.conf
 share/examples/freeradius/mods-config/sql/counter/sqlite/monthlycounter.conf
 share/examples/freeradius/mods-config/sql/counter/sqlite/noresetcounter.conf
+share/examples/freeradius/mods-config/sql/counter/sqlite/weeklycounter.conf
 share/examples/freeradius/mods-config/sql/cui/mysql/queries.conf
 share/examples/freeradius/mods-config/sql/cui/mysql/schema.sql
 share/examples/freeradius/mods-config/sql/cui/postgresql/queries.conf
@@ -719,6 +728,7 @@ share/freeradius/dictionary.bskyb
 share/freeradius/dictionary.bt
 share/freeradius/dictionary.cablelabs
 share/freeradius/dictionary.cabletron
+share/freeradius/dictionary.cambium
 share/freeradius/dictionary.camiant
 share/freeradius/dictionary.centec
 share/freeradius/dictionary.checkpoint
diff --git a/net/freeradius/config.mk b/net/freeradius/config.mk
index 7813268f1e0..7e5abbb6008 100644
--- a/net/freeradius/config.mk
+++ b/net/freeradius/config.mk
@@ -1,4 +1,4 @@
-# $NetBSD: config.mk,v 1.1 2021/06/25 20:46:23 adam Exp $
+# $NetBSD: config.mk,v 1.2 2021/11/12 12:27:38 adam Exp $
 
 # cd ${WRKSRC}/raddb; find . -type f | sort | sed 's,^./,EGFILES+=\t,'
 EGFILES+=	certs/Makefile
@@ -101,14 +101,17 @@ EGFILES+=	mods-config/sql/counter/mysql/dailycounter.conf
 EGFILES+=	mods-config/sql/counter/mysql/expire_on_login.conf
 EGFILES+=	mods-config/sql/counter/mysql/monthlycounter.conf
 EGFILES+=	mods-config/sql/counter/mysql/noresetcounter.conf
+EGFILES+=	mods-config/sql/counter/mysql/weeklycounter.conf
 EGFILES+=	mods-config/sql/counter/postgresql/dailycounter.conf
 EGFILES+=	mods-config/sql/counter/postgresql/expire_on_login.conf
 EGFILES+=	mods-config/sql/counter/postgresql/monthlycounter.conf
 EGFILES+=	mods-config/sql/counter/postgresql/noresetcounter.conf
+EGFILES+=	mods-config/sql/counter/postgresql/weeklycounter.conf
 EGFILES+=	mods-config/sql/counter/sqlite/dailycounter.conf
 EGFILES+=	mods-config/sql/counter/sqlite/expire_on_login.conf
 EGFILES+=	mods-config/sql/counter/sqlite/monthlycounter.conf
 EGFILES+=	mods-config/sql/counter/sqlite/noresetcounter.conf
+EGFILES+=	mods-config/sql/counter/sqlite/weeklycounter.conf
 EGFILES+=	mods-config/sql/cui/mysql/queries.conf
 EGFILES+=	mods-config/sql/cui/mysql/schema.sql
 EGFILES+=	mods-config/sql/cui/postgresql/queries.conf
diff --git a/net/freeradius/distinfo b/net/freeradius/distinfo
index c260c831083..ad7d10dae36 100644
--- a/net/freeradius/distinfo
+++ b/net/freeradius/distinfo
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.44 2021/10/26 11:05:37 nia Exp $
+$NetBSD: distinfo,v 1.45 2021/11/12 12:27:38 adam Exp $
 
-BLAKE2s (freeradius-server-3.0.23.tar.bz2) = cb24049469e5cab74dd04d0a36d550975ce8f2c269e1077112f1e6967ed7e9ce
-SHA512 (freeradius-server-3.0.23.tar.bz2) = 2369378a448035706fac77b4eddd28b950fbb587edefb5be6cf579043435cdec911b4a5326cfeabd05c28bb964e53027bcd1cd8a6a56013836f041a10326ef1a
-Size (freeradius-server-3.0.23.tar.bz2) = 3381917 bytes
+BLAKE2s (freeradius-server-3.0.25.tar.bz2) = d595c12daeef4e1f1a03a0092efde9b932d2e4526e1de59082462148e03ec7bc
+SHA512 (freeradius-server-3.0.25.tar.bz2) = 984bb65c86c541c91708370340ac6157b4d4d89a4ae7cbc690a9f17ead0e63fb20180333cdc33093877f84b6d40445495d881ae677858cbf60fcfd990fb02ba4
+Size (freeradius-server-3.0.25.tar.bz2) = 3402380 bytes
 SHA1 (patch-ai) = e32ffd24b93e2cef2e72ef9a8ea59d49e1571dc0
 SHA1 (patch-configure.ac) = ffec1f851d23f560797c12eba5092f2940e4d662
 SHA1 (patch-raddb_radiusd.conf.in) = 353cbed35013777bf055a77cc610b50a637ae7b7