summaryrefslogtreecommitdiff
path: root/security/stunnel
AgeCommit message (Collapse)AuthorFilesLines
2004-03-26PKGREVISION bump after openssl-security-fix-update to 0.9.6m.wiz1-1/+2
Buildlink files: RECOMMENDED version changed to current version.
2004-02-16Updated stunnel to 4.05martti5-23/+25
* New feature sponsored by SURFnet http://www.surfnet.nl/ - Support for CIFS aka SMB protocol SSL negotiation. * New features - CRL support with new CApath and CAfile global options. - New 'taskbar' option on WIN32 (thx to Ken Mattsen <ken.Mattsen@roxio.com>). - New -fd command line parameter to read configuration from a specified file descriptor instead of a file. - accept is reported as error with [section] defined (in stunnel 4.04 it was silently ignored causing problems for lusers that did not read the fine manual). - Use fcntl() instead of ioctlsocket() to set socket nonblocking when it is supported. - Basic support for hardware engines with OpenSSL >= 0.9.7. - French manual by Bernard Choppy <choppy@imaginet.fr>. - Thread stack size reduced to 64KB for maximum scalability. - Added optional code to debug thread stack usage. - Support for nsr-tandem-nsk (thx to Tom Bates <tom.bates@hp.com>). * Bugfixes - TCP wrappers code moved to CRIT_NTOA critical section since it uses static inet_ntoa() result buffer. - SSL_ERROR_SYSCALL handling problems fixed. - added code to retry nonblocking SSL_shutdown() calls. - Use FD_SETSIZE instead of 16 file descriptors in inetd mode. - fdscanf groks lowercase protocol negotiation commands. - WIN32 taskbar GDI objects leak fixed. - Libwrap detection bug in ./configure script fixed. - grp.h header detection fixed for NetBSD and possibly other systems. - Some other minor updates.
2004-01-20put the stunnel.pid file in /var/run, not ${PREFIX}/var/run.grant1-3/+4
bump PKGREVISION.
2003-11-12PKGREVISION++ after openssl update.jschauma1-2/+2
2003-09-05Remove "/pub" from pathnames on "ftp.fu-berlin.de" because such a directorytron1-2/+2
doesn't exist. It's apparently only mapped in the FTP server configuration.
2003-07-29Install example file under the examples hierarchy and honour PKG_SYSCONFDIR.jmmv5-21/+37
Bump PKGREVISION to 1.
2003-07-17s/netbsd.org/NetBSD.org/grant1-2/+2
2003-01-18Updated stunnel to 4.04 (upgrade to 4.03 provided by Juan RP in pkg/19310)martti5-52/+61
* New features sponsored by MAXIMUS http://www.maximus.com/ - New 'options' configuration option to setup OpenSSL library hacks with SSL_CTX_set_options(). - 'service' option also changes the name for TCP Wrappers access control in inetd mode. - SSL is negotiated before connecting remote host or spawning local process whenever possible. - REMOTE_HOST variable is always placed in the enrivonment of a process spawned with 'exec'. - Whole SSL error stack is dumped on errors. - Manual page updated (special thanks to Brian Hatch). - New user interface (config file). - Single daemon can listen on multiple ports, now. - Delayed DNS lookup added. * Other new features - All the timeouts are now configurable including TIMEOUTclose that can be set to 0 for MSIE and other buggy clients that do not send close_notify. - Stunnel process can be chrooted in a specified directory. - Numerical values for setuid() and setgid() are allowed, now. - Confusing code for setting certificate defaults introduced in version 3.8p3 was removed to simplify stunnel setup. There are no built-in defaults for CApath and CAfile options. - Private key file for a certificate can be kept in a separate file. Default remains to keep it in the cert file. - Manual page updated.
2002-08-25Merge packages from the buildlink2 branch back into the main trunk thatjlam1-3/+4
have been converted to USE_BUILDLINK2.
2002-06-17Remove USE_SSL, openssl buildlink.mk is already included.wiz1-2/+1
2001-12-28Update "stunnel" package to version 3.22. Changes sinc version 3.21c:tron4-122/+30
- Format string bug fixed in protocol.c smtp, pop3 and nntp in client mode were affected. (stunnel clients could be attacked by malicious servers) - Certificate chain can be supplied with -p option or in stunnel.pem. - Problem with -r and -l options used together fixed. - memmove() instead of memcpy() is used to move data in buffers. - More detailed information about negotiated ciphers is printed. - New ./configure options: "--enable-no-rsa" and "--enable-dh".
2001-11-20Updated to version 3.21.3 (a.k.a 3.21c).martti4-36/+116
Changelog for version 3.21c, 2001.11.11, urgency: LOW: * autoconf scripts upgraded to version 2.52. * Problem with pthread_sigmask on Darwin fixed (I hope). * Some documentation typos corrected. * Attempt to ignore EINTR in transfer(). * Shared library version reported on startup. * DLLs for OpenSSL 0.9.6b.
2001-11-03Updated stunnel to 3.21.2. There was a file descriptor leak onmartti2-6/+6
failed connect() calls.
2001-11-02I'll be the new maintainer for stunnel (agreed with martin)martti1-2/+2
2001-11-01Update "stunnel" package to version 3.21.1 (3.21a). Changes since versiontron2-5/+6
3.21: - Small bug in Makefile fixed.
2001-11-01Move pkg/ files into package's toplevel directoryzuntum3-4/+4
2001-10-31Changelog for version 3.21, 2001.10.31, urgency: MEDIUM:martti3-15/+15
* Problem with errno and posix threads fixed. * It is assumed that system has getopt() if it has getopt.h header file. * SSL_CLIENT_DN and SSL_CLIENT_I_DN environment variables set in local mode (-l) process. This feature doesn't work if client mode (-c) or protocol negotiation (-n) is used. * Winsock error descriptions hardcoded (English version only). * SetConsoleCtrlHandler() used to handle CTRL+C, logoff and shutdown on Win32. * Stunnel always requests peer certificate with -v 0. * sysconf()/getrlimit() used to calculate number of clients allowed. * SSL mode changed for OpenSSL >= 0.9.6. * close-on-exec option used to avoid socket inheriting. * Buffer size increased from 8KB to 16KB. * fdscanf()/fdprintf() changes: - non-blocking socket support, - timeout after 1 minute of inactivity. * auth_user() redesigned to force 1 minute timeout. * Some source arrangement towards 4.x architecture. * No need for "goto" any more. * New Makefile "test" rule. It performs basic test of standalone/inetd, remote/local and server/client mode. * pop3 server mode support added.
2001-08-27Use wildcard dependence on "autoconf" package.tron1-3/+2
2001-08-19Update of stunnel to version 3.20, from Martti Kuparinen in PR pkg/13728.martin5-40/+15
Changelog for version 3.20, 2001.08.15, urgency: LOW: * setsockopt() optlen set according to the optval for Solaris. * Minor NetBSD compatibility fixes by Martti Kuparinen. * Minor MSVC6 compatibility fixes by Patrick Mayweg. * SSL close_notify timeout reduced to 10 seconds of inactivity. * Socket close instead of reset on close_notify timeout. * Some source arrangement and minor bugfixes.
2001-08-10Update stunnel to version 3.19.martin5-54/+32
Based on PR pkg/13679 by Martti Kuparinen. Changelog for version 3.19, 2001.08.10, urgency: MEDIUM: * Critical section added around non MT-safe TCP Wrappers code. * Problem with "select: Interrupted system call" error fixed. * errno replaced with get_last_socket_error() for Win32. * Some FreeBSD/NetBSD patches to ./configure from Martti Kuparinen. * Local mode process pid logged. * Default FQDN (localhost) removed from stunnel.cnf * ./configure changed to recognize POSIX threads library on OSF. * New -O option to set socket options.
2001-07-23Update to version 3.16.martin3-31/+26
Changes: * Some transfer() bugfixes/improvements. * STDIN/STDOUT are no logner assumed to be non-socket decriptors. * Problem with --with-tcp-wrappers patch fixed. * pop3 and nntp support bug fixed by Martin Germann. * -o option to append log messages to a file added. * Changed error message for SSL error 0. Provided by Martti Kuparinen in PR 13537.
2001-07-20Use "ftp.fu-berlin.de" as first master site because it is about a thousandtron1-2/+3
time faster from Germany and the USA.
2001-07-19We do not need pthreads (as it doesn't work for stunnel), so don't dependmartin1-2/+1
on pth.
2001-07-19Update stunnel to 3.15.martin3-27/+54
Based on a pkg provided by Martti Kuparinen in PR 13484. Changes include: * Serious bug resulting in random transfer() hangs fixed. * Separate file descriptors are used for inetd mode. * -f (foreground) logs are now stamped with time. * New ./configure option: --with-tcp-wrappers by Brian Hatch. * pop3 protocol client support (-n pop3) by Martin Germann. * nntp protocol client support (-n nntp) by Martin Germann. * RFC 2487 (smtp STARTTLS) client mode support. * Transparency support for Tru64 added. * Some #includes for AIX added.
2001-06-20Update to 3.14, from Martti Kuparinen via pkg/13256.wiz2-5/+5
Change: * Pidfile creation algorithm has been changed.
2001-04-19Move to sha1 digests, add distfile sizes.agc1-2/+3
2001-04-17+ move the distfile digest/checksum value from files/md5 to distinfoagc3-8/+6
+ move the patch digest/checksum values from files/patch-sum to distinfo
2001-03-27Change BUILD_DEPENDS semantics:hubertf1-2/+2
first component is now a package name+version/pattern, no more executable/patchname/whatnot. While there, introduce BUILD_USES_MSGFMT as shorthand to pull in devel/gettext unless /usr/bin/msgfmt exists (i.e. on post-1.5 -current). Patch by Alistair Crooks <agc@netbsd.org>
2001-02-17Update to new COMMENT style: COMMENT var in Makefile instead of pkg/COMMENT.wiz2-2/+2
2001-02-06Make that "autoreconf" -- there is no "autoremake".fredb1-3/+3
2001-02-05Use full pathname "${LOCALBASE}/bin/auto..." in dependences and maketron1-3/+3
targets. This includes a fix for PR pkg/12125 by Tomasz Luchowski.
2001-01-29Update to stunnel-3.13.martin2-4/+4
Hint from Martti Kuparinen in PR pkg/12046. Changes: * pthread_sigmask() argument in sthreads.c corrected. * OOB data is now handled correctly. * Attempted to fix problem with zombies in local mode. * Patch for 64-bit machines by Nalin Dahyabhai <nalin@redhat.com> applied. * Tiny bugfix for OSF cc by Dobrica Pavlinusic <dpavlin@rot13.org> added. * PORTS file updated.
2001-01-22Use "--with-pem-dir" to specify directory where "stunnel.pem" is located.tron1-3/+4
2001-01-22Update pkg to stunnel-3.11.martin6-38/+39
Fixes key-length and zombies problems.
2001-01-13Use SSLCERTS for location of OpenSSL certificates directory.jlam1-16/+2
2000-12-19Update stunnel to 3.9. For NetBSD, if in-tree OpenSSL exists, then thejlam8-65/+89
default certificate directory is now /etc/openssl/certs (matches OpenSSL's default), but if stunnel uses the pkgsrc OpenSSL, then the default is ${PREFIX}/certs. Changes from version 3.8 include: * Updated temporary key generation: - stunnel is now honoring requested key-lengths correctly, - temporary key is changed every hour. * transfer() no longer hangs on some platforms. Special thanks to Peter Wagemans for the patch. * Potential security problem with syslog() call fixed. * use daemon() function instead of daemonize, if available * added -S flag, allowing you to choose which default verify sources to use * relocated service name output logging until after log_open. (no longer outputs log info to inetd socket, causing bad SSL) * -V flag now outputs the default values used by stunnel * Added rigerous PRNG seeding * PID changes (and related security-fix) * Man page fixes * Client SSL Session-IDs now used * -N flag to specify tcpwrapper service name * UPGRADE NOTE: this version seriously changes several previous stunnel default behaviours. There are no longer any default cert file/dirs compilied into stunnel, you must use the --with-cert-dir and --with-cert-file configure arguments to set these manually, if desired. Stunnel does not use the underlying ssl library defaults by default unless configured with --enable-ssllib-cs. Note that these can always be enabled at run time with the -A,-a, and -S flags. Additionally, unless --with-pem-dir is specified at compile time, stunnel will default to looking for stunnel.pem in the current directory.
2000-06-17Don't install automatically created certificate. It is useless and willtron3-6/+15
only overwrite a useful one.
2000-06-17Fix cut and paste error in last commit.tron1-2/+2
2000-06-17Add missing dependence on "pth" package.tron1-1/+2
2000-04-26Use "SSLBASE" instead of "SSLDIR".tron1-4/+2
2000-04-26Switch to "USE_SSL".tron1-9/+3
2000-04-26Don't clobber permission of "/var/run" during installation.tron2-4/+12
2000-04-03Add OpenSSL directory to build defines.tron1-1/+3
2000-04-03Put pid file to "/var/run" and certificates to "${PREFIX}/certs".tron3-5/+21
2000-04-03Sync.tron1-3/+2
2000-04-03Add changes to SSL detection in "configure" to patch for "configure.in".tron1-5/+30
2000-04-03Patching "configure" doesn't make any sense if it is overwritten bytron1-32/+0
"autoreconf" later.
2000-04-03A new pkg for the stunnel program, a tool to wrap existing serversmartin8-0/+104
into SSL connections.
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-13 02:16:26 +0000