diff options
| author | tnn <tnn@pkgsrc.org> | 2008-05-27 11:51:32 +0000 |
|---|---|---|
| committer | tnn <tnn@pkgsrc.org> | 2008-05-27 11:51:32 +0000 |
| commit | 572d393cbc32c8255d505ced671d5fb6d7fd247f (patch) | |
| tree | 8e4eb2940f56cf6f7ca41b62fb14d089176da08a /security/stunnel/patches | |
| parent | 717975c499af6678723caefef0e0af653ea098a9 (diff) | |
| download | pkgsrc-572d393cbc32c8255d505ced671d5fb6d7fd247f.tar.gz | |
Update to stunnel-4.24.
4.24: fix security problem (properly reject revoked certs)
4.23: WinNT bugfix
4.22:
- A new global option to control logging to syslog.
Simultaneous logging to a file and the syslog is now possible.
- A new service level option to control stack size.
- Restored chroot() to be executed after decoding numerical
userid and groupid values in drop_privileges().
- A few bugs fixed the in the new libwrap support code.
- TLSv1 method used by default in FIPS mode instead of
SSLv3 client and SSLv23 server methods.
4.21:
- Initial FIPS 140-2 support (see INSTALL.FIPS for details).
- Experimental fast support for non-MT-safe libwrap is provided
with pre-spawned processes.
- Stunnel binary moved from /usr/local/sbin to /usr/local/bin
in order to meet FHS and LSB requirements.
- Added code to disallow compiling stunnel with pthreads when
OpenSSL is compiled without threads support.
- Minor manual update.
- TODO file updated.
- Dynamic locking callbacks added (needed by some engines to work).
- AC_ARG_ENABLE fixed in configure.am to accept yes/no arguments.
- On some systems libwrap requires yp_get_default_domain from libnsl,
additional checking for libnsl was added to the ./configure script.
- Sending a list of trusted CAs for the client to choose the right
certificate restored.
- Some compatibility issues with NTLM authentication fixed.
Diffstat (limited to 'security/stunnel/patches')
| -rw-r--r-- | security/stunnel/patches/patch-aa | 10 | ||||
| -rw-r--r-- | security/stunnel/patches/patch-ac | 13 |
2 files changed, 5 insertions, 18 deletions
diff --git a/security/stunnel/patches/patch-aa b/security/stunnel/patches/patch-aa index f74855abad3..18c0db5d52f 100644 --- a/security/stunnel/patches/patch-aa +++ b/security/stunnel/patches/patch-aa @@ -1,17 +1,17 @@ -$NetBSD: patch-aa,v 1.19 2007/01/14 00:07:15 schmonz Exp $ +$NetBSD: patch-aa,v 1.20 2008/05/27 11:51:32 tnn Exp $ ---- tools/Makefile.in.orig 2006-11-11 09:58:22.000000000 -0500 +--- tools/Makefile.in.orig 2008-05-18 13:46:07.000000000 +0200 +++ tools/Makefile.in -@@ -161,7 +161,7 @@ target_alias = @target_alias@ +@@ -167,7 +167,7 @@ target_alias = @target_alias@ EXTRA_DIST = ca.html ca.pl importCA.html importCA.sh script.sh \ stunnel.spec stunnel.mak stunnel.cnf stunnel.nsi stunnel.conf -confdir = $(sysconfdir)/stunnel +confdir = $(datadir)/examples/stunnel conf_DATA = stunnel.conf-sample - docdir = $(datadir)/doc/stunnel examplesdir = $(docdir)/examples -@@ -332,7 +332,7 @@ info: info-am + examples_DATA = ca.html ca.pl importCA.html importCA.sh script.sh \ +@@ -337,7 +337,7 @@ info: info-am info-am: diff --git a/security/stunnel/patches/patch-ac b/security/stunnel/patches/patch-ac deleted file mode 100644 index 20000f985e8..00000000000 --- a/security/stunnel/patches/patch-ac +++ /dev/null @@ -1,13 +0,0 @@ -$NetBSD: patch-ac,v 1.9 2007/01/23 21:53:58 smb Exp $ - ---- src/Makefile.in.orig 2006-11-11 09:58:22.000000000 -0500 -+++ src/Makefile.in -@@ -221,7 +221,7 @@ libstunnel_la_LDFLAGS = -avoid-version - INCLUDES = -I/usr/kerberos/include - - # Additional compiler flags --AM_CPPFLAGS = -DLIBDIR='"$(libdir)"' -DCONFDIR='"$(sysconfdir)/stunnel"' -DPIDFILE='"$(prefix)/var/run/stunnel/stunnel.pid"' -+AM_CPPFLAGS = -DLIBDIR='"$(libdir)"' -DCONFDIR='"$(sysconfdir)"' -DPIDFILE='"/var/run/stunnel.pid"' - - # Win32 executable - EXTRA_DIST = stunnel.exe make.bat mingw.mak makece.bat evc.mak vc.mak nogui.c os2.mak |