The NetBSD Project

CVS log for pkgsrc/net/ucspi-ssl/Makefile

[BACK] Up to [] / pkgsrc / net / ucspi-ssl

Request diff between arbitrary revisions

Default branch: MAIN

Revision 1.29 / (download) - annotate - [select for diffs], Thu Mar 21 15:16:45 2019 UTC (4 weeks, 6 days ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2019Q1-base, pkgsrc-2019Q1, HEAD
Changes since 1.28: +2 -15 lines
Diff to previous 1.28 (unified)

Update to 0.10.8. From the changelog:

- Added dualstack handling for servers applying the
  pseudo IP address ':0' on call (common now for all servers).
- Tailored TLS error handling for EAGAIN end error codes.
- Rewrote IPv4 CIDR address evaluation for rules.

Revision 1.28 / (download) - annotate - [select for diffs], Fri Jan 18 18:18:38 2019 UTC (3 months ago) by schmonz
Branch: MAIN
Changes since 1.27: +5 -4 lines
Diff to previous 1.27 (unified)

Previous attempt at sensible default ciphers was insufficiently
interoperable. Use Postfix's `tls_medium_cipherlist` instead. Bump

Revision 1.27 / (download) - annotate - [select for diffs], Thu Jan 17 18:41:52 2019 UTC (3 months ago) by schmonz
Branch: MAIN
Changes since 1.26: +6 -2 lines
Diff to previous 1.26 (unified)

Override conf-ciphers with Qualys-satisfactory defaults. Bump PKGREVISION.

Revision 1.26 / (download) - annotate - [select for diffs], Fri Dec 14 22:52:45 2018 UTC (4 months, 1 week ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2018Q4-base, pkgsrc-2018Q4
Changes since 1.25: +2 -3 lines
Diff to previous 1.25 (unified)

Update to 0.10.7. From the changelog:

- Better handling of read EAGAIN (sslserver may hang).
- Include socket_dualstack option (required for OS with IPv6_V6ONLY).
- fehQlibs-10 required.

Revision 1.25 / (download) - annotate - [select for diffs], Sun Oct 28 17:10:27 2018 UTC (5 months, 3 weeks ago) by schmonz
Branch: MAIN
Changes since 1.24: +2 -1 lines
Diff to previous 1.24 (unified)

Disable TLS 1.0. Bump PKGREVISION.

Revision 1.24 / (download) - annotate - [select for diffs], Sun Oct 14 12:21:11 2018 UTC (6 months, 1 week ago) by schmonz
Branch: MAIN
Changes since 1.23: +9 -5 lines
Diff to previous 1.23 (unified)

Update to 0.10.6, which we'll call "0.999.10.6". From the changelog:

- Complete refurbish based on fehQlibs.
- Native handling of IPv4/IPv6 address for sslclient.
- Added experimental 'ecdhparam' file.
- Removed experimental 'ecdhparam' handling -- OpenSSL does not support it.
- Finished TLS 1.3 integration (based on OpenSSL 1.1.1).
- Removed compiler flags for ECDH -- now required.
- fehQlibs-09 based.

Revision 1.23 / (download) - annotate - [select for diffs], Wed Aug 22 09:46:08 2018 UTC (8 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2018Q3-base, pkgsrc-2018Q3
Changes since 1.22: +2 -2 lines
Diff to previous 1.22 (unified)

Recursive bump for perl5-5.28.0

Revision 1.22 / (download) - annotate - [select for diffs], Sun Jul 29 23:23:09 2018 UTC (8 months, 3 weeks ago) by schmonz
Branch: MAIN
Changes since 1.21: +2 -4 lines
Diff to previous 1.21 (unified)

Add 'inet6' option to control dependency on ucspi-tcp{6,}. Bump PKGREVISION.

Revision 1.21 / (download) - annotate - [select for diffs], Wed Jul 25 16:32:34 2018 UTC (8 months, 4 weeks ago) by schmonz
Branch: MAIN
Changes since 1.20: +3 -2 lines
Diff to previous 1.20 (unified)

s/ucspi-tcp/ucspi-tcp6/g in dependencies. Bump PKGREVISIONs.

Revision 1.20 / (download) - annotate - [select for diffs], Wed Jul 11 22:42:51 2018 UTC (9 months, 1 week ago) by schmonz
Branch: MAIN
Changes since 1.19: +2 -2 lines
Diff to previous 1.19 (unified)

Update to 0.99e. From the changelog:

- Fixed missing 'return 0' in ssl_params.c for ECDH handshake (tx. J.W.).

Revision 1.19 / (download) - annotate - [select for diffs], Mon Jun 18 11:00:21 2018 UTC (10 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2018Q2-base, pkgsrc-2018Q2
Changes since 1.18: +47 -16 lines
Diff to previous 1.18 (unified)

Update to 0.99d. From the changelog:

- Added `correct` pid display in error log.
- Fixed cosmetic bug in sslserver displaying parent and not child pid in log.
  Tx Bruce Guenter.

pkgsrc changes:

- Adjust path to OpenSSL certs
- Install the provided example DH params
- Look for /etc/dnsrewrite under PKG_SYSCONFBASE
- Create a user and group for privilege separation
- Install manpages and more documentation

Revision 1.18 / (download) - annotate - [select for diffs], Sat Jul 22 02:58:09 2017 UTC (21 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2018Q1-base, pkgsrc-2018Q1, pkgsrc-2017Q4-base, pkgsrc-2017Q4, pkgsrc-2017Q3-base, pkgsrc-2017Q3, pkgsrc-
Changes since 1.17: +2 -3 lines
Diff to previous 1.17 (unified)

Update to 0.99b. From the changelog:

- Included PID in sslserver + sslhandle abend logs in case of SSL failure.
- Removed references to 'gcc' and used 'cc' instead.
- New build with better error log for ssl abends.

Revision 1.17 / (download) - annotate - [select for diffs], Sat Jun 17 03:49:04 2017 UTC (22 months, 1 week ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2017Q2-base, pkgsrc-2017Q2
Changes since 1.16: +2 -1 lines
Diff to previous 1.16 (unified)

Rather than try to detect -ldl, use known values. Fixes NetBSD build.

Revision 1.16 / (download) - annotate - [select for diffs], Mon Jun 5 14:24:26 2017 UTC (22 months, 2 weeks ago) by ryoon
Branch: MAIN
Changes since 1.15: +2 -1 lines
Diff to previous 1.15 (unified)

Recursive revbump from lang/perl5 5.26.0

Revision 1.15 / (download) - annotate - [select for diffs], Sat May 20 01:39:12 2017 UTC (23 months ago) by schmonz
Branch: MAIN
Changes since 1.14: +9 -14 lines
Diff to previous 1.14 (unified)

Update to 0.99 (new upstream). From the changelog:

Included ucspi-ssl-0.70_ucspitls-0.6.patch (STARTTLS support)
originally designed and provided by Scott Gifford (FEH).

Added Certchain support for sslserver and sslclient (FEH).

Integration and added man-pages (FEH).

Synced with ucspi-tcp6-0.95.

Fixed integration bug in ssl_very.c.
Included patches from Peter Conrad.

Bug fix in sslserver. Several small

Fix for large X509 serial numbers on x86 (tx. Peter Conrad).
SAN DNSname has precedence over CN in subject.
Re-edited man pages and rts tests.

Added IPv6 support (tx. to Felix von Leitner and Brandon Turner).
UI: Changed sslserver client cert call from '-i/-I' to '-z/-Z'
for compatibility reasons.
Added '-4/-6' support for client scripts.

Added output environment variables TCP6* for sslserver.
sslperl, sslhandle, and sslprint are not IPv6 ready yet.

Added IPv6 capabilities to sslhandle, sslprint, sslperl.
Changed verification of X.509 certs.
Removed obsolete socket_4 calls in sslserver.

Streamlined code with ucspi-tcp6-1.00.
Supplied new certs with customized SAN.
Make rts working (at least some how).

Added support for personalized client certs.
New option '-m' in sslserver, complementing '-z'.
CCAFILE='-' disables client cert request.

Added verbose log output for SSL connection informations.

Fixed wrongly nested CONNECT error code for sslclient.c
producing wrong warning messages while connecting to
an IPv4 address.
Added call of '-ldl' in ssl.lib.

Mitigation of SSL connection hanging during
coincident change of daylight-saving settings.

Fixed bug in sslserver's dnsip lookup in case of paranoid settings
and additonal existance of IPv6 AAAA records for incoming IPv4 connection.

Serveral fixes from 'troy@' included to cope with compiler errors and
to solve a bug in function getbitasaddress in ip4_bit.c (= ucspi-tcp6-1.02).
Reordered conf-* variables in main dir to allow easier generation of
packages (i.e. RPM). Fixed script to identify different HW architecture
and OS. This version works in 32 bit mode on Raspian Linux / RasPi 7.

Added ECDH capabilites (tx to Frank Bergmann for the patches).

Added compatibility with LibreSSL.
Fixed missing negative return call treatment from 'poll' (tx Frank Bergmann).
Tentative 'emake' fix for Gentoo build.

Added OpenSSL 1.1 tweaks -- works under Debian (9) 'Stretch'.

Revision 1.14 / (download) - annotate - [select for diffs], Wed Jun 8 19:24:16 2016 UTC (2 years, 10 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2017Q1-base, pkgsrc-2017Q1, pkgsrc-2016Q4-base, pkgsrc-2016Q4, pkgsrc-2016Q3-base, pkgsrc-2016Q3, pkgsrc-2016Q2-base, pkgsrc-2016Q2
Changes since 1.13: +2 -2 lines
Diff to previous 1.13 (unified)

Bump PKGREVISION for perl-5.24.

Revision 1.13 / (download) - annotate - [select for diffs], Sat Mar 5 11:29:13 2016 UTC (3 years, 1 month ago) by jperkin
Branch: MAIN
CVS Tags: pkgsrc-2016Q1-base, pkgsrc-2016Q1
Changes since 1.12: +2 -2 lines
Diff to previous 1.12 (unified)

Bump PKGREVISION for security/openssl ABI bump.

Revision 1.12 / (download) - annotate - [select for diffs], Fri Jun 12 10:50:54 2015 UTC (3 years, 10 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2015Q4-base, pkgsrc-2015Q4, pkgsrc-2015Q3-base, pkgsrc-2015Q3, pkgsrc-2015Q2-base, pkgsrc-2015Q2
Changes since 1.11: +2 -2 lines
Diff to previous 1.11 (unified)

Recursive PKGREVISION bump for all packages mentioning 'perl',
having a PKGNAME of p5-*, or depending such a package,
for perl-5.22.0.

Revision 1.11 / (download) - annotate - [select for diffs], Thu May 29 23:37:13 2014 UTC (4 years, 10 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2015Q1-base, pkgsrc-2015Q1, pkgsrc-2014Q4-base, pkgsrc-2014Q4, pkgsrc-2014Q3-base, pkgsrc-2014Q3, pkgsrc-2014Q2-base, pkgsrc-2014Q2
Changes since 1.10: +2 -2 lines
Diff to previous 1.10 (unified)

Bump for perl-5.20.0.
Do it for all packages that
* mention perl, or
* have a directory name starting with p5-*, or
* depend on a package starting with p5-
like last time, for 5.18, where this didn't lead to complaints.
Let me know if you have any this time.

Revision 1.10 / (download) - annotate - [select for diffs], Wed Feb 12 23:18:26 2014 UTC (5 years, 2 months ago) by tron
Branch: MAIN
CVS Tags: pkgsrc-2014Q1-base, pkgsrc-2014Q1
Changes since 1.9: +2 -2 lines
Diff to previous 1.9 (unified)

Recursive PKGREVISION bump for OpenSSL API version bump.

Revision 1.9 / (download) - annotate - [select for diffs], Fri May 31 12:41:44 2013 UTC (5 years, 10 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2013Q4-base, pkgsrc-2013Q4, pkgsrc-2013Q3-base, pkgsrc-2013Q3, pkgsrc-2013Q2-base, pkgsrc-2013Q2
Changes since 1.8: +2 -2 lines
Diff to previous 1.8 (unified)

Bump all packages for perl-5.18, that
a) refer 'perl' in their Makefile, or
b) have a directory name of p5-*, or
c) have any dependency on any p5-* package

Like last time, where this caused no complaints.

Revision 1.8 / (download) - annotate - [select for diffs], Wed Feb 6 23:23:25 2013 UTC (6 years, 2 months ago) by jperkin
Branch: MAIN
CVS Tags: pkgsrc-2013Q1-base, pkgsrc-2013Q1
Changes since 1.7: +2 -2 lines
Diff to previous 1.7 (unified)

PKGREVISION bumps for the security/openssl 1.0.1d update.

Revision 1.7 / (download) - annotate - [select for diffs], Tue Oct 23 17:19:15 2012 UTC (6 years, 6 months ago) by asau
Branch: MAIN
CVS Tags: pkgsrc-2012Q4-base, pkgsrc-2012Q4
Changes since 1.6: +1 -3 lines
Diff to previous 1.6 (unified)

Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.

Revision 1.6 / (download) - annotate - [select for diffs], Wed Oct 3 21:57:12 2012 UTC (6 years, 6 months ago) by wiz
Branch: MAIN
Changes since 1.5: +2 -2 lines
Diff to previous 1.5 (unified)

Bump all packages that use perl, or depend on a p5-* package, or
are called p5-*.

I hope that's all of them.

Revision 1.5 / (download) - annotate - [select for diffs], Mon Mar 15 03:02:25 2010 UTC (9 years, 1 month ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2012Q3-base, pkgsrc-2012Q3, pkgsrc-2012Q2-base, pkgsrc-2012Q2, pkgsrc-2012Q1-base, pkgsrc-2012Q1, pkgsrc-2011Q4-base, pkgsrc-2011Q4, pkgsrc-2011Q3-base, pkgsrc-2011Q3, pkgsrc-2011Q2-base, pkgsrc-2011Q2, pkgsrc-2011Q1-base, pkgsrc-2011Q1, pkgsrc-2010Q4-base, pkgsrc-2010Q4, pkgsrc-2010Q3-base, pkgsrc-2010Q3, pkgsrc-2010Q2-base, pkgsrc-2010Q2, pkgsrc-2010Q1-base, pkgsrc-2010Q1
Changes since 1.4: +10 -6 lines
Diff to previous 1.4 (unified)

DESTDIR support, DJB_RESTRICTED=no (ucspi-tcp is public domain now), update

Revision 1.4 / (download) - annotate - [select for diffs], Sun Jan 17 12:02:35 2010 UTC (9 years, 3 months ago) by wiz
Branch: MAIN
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (unified)

Recursive PKGREVISION bump for jpeg update to 8.

Revision 1.3 / (download) - annotate - [select for diffs], Fri Jan 18 05:08:51 2008 UTC (11 years, 3 months ago) by tnn
Branch: MAIN
CVS Tags: pkgsrc-2009Q4-base, pkgsrc-2009Q4, pkgsrc-2009Q3-base, pkgsrc-2009Q3, pkgsrc-2009Q2-base, pkgsrc-2009Q2, pkgsrc-2009Q1-base, pkgsrc-2009Q1, pkgsrc-2008Q4-base, pkgsrc-2008Q4, pkgsrc-2008Q3-base, pkgsrc-2008Q3, pkgsrc-2008Q2-base, pkgsrc-2008Q2, pkgsrc-2008Q1-base, pkgsrc-2008Q1, cwrapper, cube-native-xorg-base, cube-native-xorg
Changes since 1.2: +2 -2 lines
Diff to previous 1.2 (unified)

Per the process outlined in revbump(1), perform a recursive revbump
on packages that are affected by the switch from the openssl 0.9.7
branch to the 0.9.8 branch. ok jlam@

Revision 1.2 / (download) - annotate - [select for diffs], Sun Apr 2 17:44:16 2006 UTC (13 years ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2007Q4-base, pkgsrc-2007Q4, pkgsrc-2007Q3-base, pkgsrc-2007Q3, pkgsrc-2007Q2-base, pkgsrc-2007Q2, pkgsrc-2007Q1-base, pkgsrc-2007Q1, pkgsrc-2006Q4-base, pkgsrc-2006Q4, pkgsrc-2006Q3-base, pkgsrc-2006Q3, pkgsrc-2006Q2-base, pkgsrc-2006Q2
Changes since 1.1: +8 -8 lines
Diff to previous 1.1 (unified)

Only build sslperl if option "ucspi-ssl-perl" is enabled. Bump PKGREVISION.

Revision / (download) - annotate - [select for diffs] (vendor branch), Wed Jan 11 20:17:58 2006 UTC (13 years, 3 months ago) by schmonz
Branch: TNF
CVS Tags: pkgsrc-base, pkgsrc-2006Q1-base, pkgsrc-2006Q1
Changes since 1.1: +0 -0 lines
Diff to previous 1.1 (unified)

Initial import of ucspi-ssl, a set of command-line tools for SSL
client-server applications. They conform to the UNIX Client-Server
Program Interface, UCSPI.

sslserver listens for connections, and runs a program for each
connection it accepts. The program environment includes variables
that hold the local and remote host names, IP addresses, and port
numbers. sslserver offers a concurrency limit on acceptance of new
connections, and selective handling of connections based on client

sslclient requests a connection to a TCP socket, and runs a program.
The program environment includes the same variables as for sslserver.

The "tls" option applies Scott Gifford's patch to implement UCSPI-TLS
in sslserver.

Revision 1.1 / (download) - annotate - [select for diffs], Wed Jan 11 20:17:58 2006 UTC (13 years, 3 months ago) by schmonz
Branch: MAIN

Initial revision

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.

CVSweb <>