diff options
| author | manu <manu> | 2009-11-18 08:10:15 +0000 |
|---|---|---|
| committer | manu <manu> | 2009-11-18 08:10:15 +0000 |
| commit | 7fbb482af1b6f24926a8a49741c0f21371e36811 (patch) | |
| tree | f6c5aeee9a7be52469882303c064e106fe08a6a7 /net/openvpn | |
| parent | 13d7427167804c315ea22c9f31c56ab4798d6fb3 (diff) | |
| download | pkgsrc-7fbb482af1b6f24926a8a49741c0f21371e36811.tar.gz | |
Update to 2.1rc21. From Changelog:
* Rebuilt OpenVPN Windows installer with OpenSSL 0.9.8l to address
CVE-2009-3555. Note that OpenVPN has never relied on the session
renegotiation capabilities that are built into the SSL/TLS protocol,
therefore the fix in OpenSSL 0.9.8l (disable SSL/TLS renegotiation
completely) will not adversely affect OpenVPN mid-session SSL/TLS
renegotation or any other OpenVPN capabilities.
* Added additional session renegotiation hardening. OpenVPN has always
required that mid-session renegotiations build up a new SSL/TLS
session from scratch. While the client certificate common name is
already locked against changes in mid-session TLS renegotiations, we
now extend this locking to the auth-user-pass username as well as all
certificate content in the full client certificate chain.
Diffstat (limited to 'net/openvpn')
| -rw-r--r-- | net/openvpn/Makefile | 5 | ||||
| -rw-r--r-- | net/openvpn/distinfo | 8 |
2 files changed, 6 insertions, 7 deletions
diff --git a/net/openvpn/Makefile b/net/openvpn/Makefile index 3aef5b6cd7b..f3d32bb73f4 100644 --- a/net/openvpn/Makefile +++ b/net/openvpn/Makefile @@ -1,9 +1,8 @@ -# $NetBSD: Makefile,v 1.33 2009/11/12 08:41:10 manu Exp $ +# $NetBSD: Makefile,v 1.34 2009/11/18 08:10:15 manu Exp $ # -DISTNAME= openvpn-2.1_rc20 +DISTNAME= openvpn-2.1_rc21 PKGNAME= ${DISTNAME:S/_//} -PKGREVISION= 4 CATEGORIES= net MASTER_SITES= http://openvpn.net/release/ \ http://openvpn.net/release/old/ diff --git a/net/openvpn/distinfo b/net/openvpn/distinfo index 3e278bc9a6b..d9434329aa2 100644 --- a/net/openvpn/distinfo +++ b/net/openvpn/distinfo @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.18 2009/11/12 08:41:10 manu Exp $ +$NetBSD: distinfo,v 1.19 2009/11/18 08:10:15 manu Exp $ -SHA1 (openvpn-2.1_rc20.tar.gz) = ab0e928bd7d4896ddb0061bf3aba9f3cd6cefe6e -RMD160 (openvpn-2.1_rc20.tar.gz) = 4dd7924cb41a268e76a93af66fd05f948f22e5f3 -Size (openvpn-2.1_rc20.tar.gz) = 844253 bytes +SHA1 (openvpn-2.1_rc21.tar.gz) = b9a6a6a637fab4b419b8e038d12a42c021d9e34e +RMD160 (openvpn-2.1_rc21.tar.gz) = 2ba73bc6367fa849eb19126dd3bd8bdec9775f9e +Size (openvpn-2.1_rc21.tar.gz) = 845711 bytes SHA1 (patch-aa) = e27e5a6411c9fb6545a1ad630f165200546b7213 SHA1 (patch-ab) = d26cdc9166a8813860f31cb5b11bc5b3643b8aa5 SHA1 (patch-ac) = f59615702208cae2a094306bc5fa7fb96234e55a |