The NetBSD Project

CVS log for pkgsrc/net/ucspi-ssl/Makefile

[BACK] Up to [cvs.NetBSD.org] / pkgsrc / net / ucspi-ssl

Request diff between arbitrary revisions


Default branch: MAIN
Current tag: MAIN


Revision 1.63 / (download) - annotate - [select for diffs], Sat Dec 9 19:10:12 2023 UTC (3 months, 2 weeks ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2023Q4-base, pkgsrc-2023Q4, HEAD
Changes since 1.62: +6 -7 lines
Diff to previous 1.62 (colored) to selected 1.18 (colored)

ucspi-ssl: update to 0.12.10. Changes:

0.12.8:
- Added new x509 certs and key material; all ECC now.
- Fixed wrong evaluation of peer cert in ssl_verify (none-critical).

0.12.9:
- Included IP info in sslserver's TLS error messages for a quick lookup.
- Fixed sslhandle's wrong if nesting.
- sslserver return FATAL (and not ERROR) in case TLS is requested but missing.
- Enhanced compatibility with OpenSSL 3.x.y.

0.12.10:
- Added argument '-y cdb' to sslserver in order to allow a rule checking
  for IP addresses prior of the DNS/IDENT lookup (to cope with DDos attacks).

Revision 1.62 / (download) - annotate - [select for diffs], Tue Oct 24 22:10:36 2023 UTC (5 months ago) by wiz
Branch: MAIN
Changes since 1.61: +2 -2 lines
Diff to previous 1.61 (colored) to selected 1.18 (colored)

*: bump for openssl 3

Revision 1.61 / (download) - annotate - [select for diffs], Thu Jul 6 09:41:16 2023 UTC (8 months, 3 weeks ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2023Q3-base, pkgsrc-2023Q3
Changes since 1.60: +2 -2 lines
Diff to previous 1.60 (colored) to selected 1.18 (colored)

*: recursive bump for perl 5.38

Revision 1.60 / (download) - annotate - [select for diffs], Wed Jun 7 15:11:53 2023 UTC (9 months, 3 weeks ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2023Q2-base, pkgsrc-2023Q2
Changes since 1.59: +2 -1 lines
Diff to previous 1.59 (colored) to selected 1.18 (colored)

ucspi-ssl: remove non-meaningful 'inet6' option. Bump PKGREVISION.

The dependency was to ensure the runtime presence of tcprules(1),
described at HOMEPAGE thus:

    Optional but indispensible: ucspi-tcp6 to build the cdb to control
    incoming connections for sslserver using tcprules coming with the
    ucspi-tcp6 package. Older versions of ucspi-tcp can be used as well,
    but don't provide neither IPv4 CIDR nor IPv6 capabilities. The
    generated cdb however, is binary compatible among all versions.

Depending on either of net/ucspi-tcp{,6} here was complicating the
dependency graph in exchange for... still getting in the way of other
packages installing what they need (e.g. mail/bincimap). Trust the
sysadmin to notice if they don't already have tcprules and decide what
to install in that case.

Revision 1.59 / (download) - annotate - [select for diffs], Mon May 29 11:52:59 2023 UTC (9 months, 4 weeks ago) by schmonz
Branch: MAIN
Changes since 1.58: +2 -2 lines
Diff to previous 1.58 (colored) to selected 1.18 (colored)

Update to 0.12.7. From the changelog:

- sslserver MAXCONIP feature is working now from the cdb read by
  the children.
- MAXCONIP works even the general limit is 0.
- Fixed wrong '-m' option for sslserver.
- Added ip and port information in case sslserver/sslclient can't bind
  to local addresses.
- Tweaked rts to include external load libraries.

Revision 1.58 / (download) - annotate - [select for diffs], Tue Apr 4 18:47:29 2023 UTC (11 months, 3 weeks ago) by schmonz
Branch: MAIN
Changes since 1.57: +3 -2 lines
Diff to previous 1.57 (colored) to selected 1.18 (colored)

Update to 0.12.6. From the changelog:

- ssl_io uses now two specific return codes under condition 'BOMB'
  avoiding unnecessary error messages in case of TLS client termination.
- ssl_io.c closes TLS connection gracefully upon SSL_ERROR_SSL recognition and not continue looping.
- Included tests on tai_now in ssl_timeout.c and removed obsolete pollmax variables.

Revision 1.57 / (download) - annotate - [select for diffs], Wed Feb 8 16:15:01 2023 UTC (13 months, 2 weeks ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2023Q1-base, pkgsrc-2023Q1
Changes since 1.56: +2 -3 lines
Diff to previous 1.56 (colored) to selected 1.18 (colored)

Update to 0.12.4 (as 0.999.12.4). From the changelog:

- Checked compatibility with LibreSSL 3.6/3.7.
- The selected ciphers are now shown during start of sslserver/sslhandle.
- Fixed duplicate symbol in sslhandle (Who).

Revision 1.56 / (download) - annotate - [select for diffs], Tue Jun 28 11:35:21 2022 UTC (21 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2022Q4-base, pkgsrc-2022Q4, pkgsrc-2022Q3-base, pkgsrc-2022Q3
Changes since 1.55: +2 -1 lines
Diff to previous 1.55 (colored) to selected 1.18 (colored)

*: recursive bump for perl 5.36

Revision 1.55 / (download) - annotate - [select for diffs], Thu Oct 21 22:29:57 2021 UTC (2 years, 5 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2022Q2-base, pkgsrc-2022Q2, pkgsrc-2022Q1-base, pkgsrc-2022Q1, pkgsrc-2021Q4-base, pkgsrc-2021Q4
Changes since 1.54: +2 -3 lines
Diff to previous 1.54 (colored) to selected 1.18 (colored)

Update to 0.12.3. From the changelog:

- sslhandle to bind to IPv4 sockets, if told so.
- Compatibility tests with OpenSSL 3.0. Still preliminary.

Revision 1.54 / (download) - annotate - [select for diffs], Wed Aug 4 13:32:55 2021 UTC (2 years, 7 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2021Q3-base, pkgsrc-2021Q3
Changes since 1.53: +2 -2 lines
Diff to previous 1.53 (colored) to selected 1.18 (colored)

Bump PKGREVISION for fehqlibs update.

Revision 1.53 / (download) - annotate - [select for diffs], Mon May 24 19:53:38 2021 UTC (2 years, 10 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2021Q2-base, pkgsrc-2021Q2
Changes since 1.52: +2 -1 lines
Diff to previous 1.52 (colored) to selected 1.18 (colored)

*: recursive bump for perl 5.34

Revision 1.52 / (download) - annotate - [select for diffs], Sat Apr 3 19:34:43 2021 UTC (2 years, 11 months ago) by schmonz
Branch: MAIN
Changes since 1.51: +2 -2 lines
Diff to previous 1.51 (colored) to selected 1.18 (colored)

Update to 0.12.2. From the changelog:

- fehQlibs-17 changes included regarding socket interface.
- Synced with ucspi-tcp6-1.12.3 providing MAXCONIP capabilities.
- Successful integration tests for OpenSSL 3.0.0-alpha13 and
  LibreSSL 3.3.1.
- Fixed sslserver's binding to IPv4/IPv6 addresses; code aligned with
  tcpserver.

Revision 1.51 / (download) - annotate - [select for diffs], Thu Nov 19 09:35:40 2020 UTC (3 years, 4 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2021Q1-base, pkgsrc-2021Q1, pkgsrc-2020Q4-base, pkgsrc-2020Q4
Changes since 1.50: +1 -2 lines
Diff to previous 1.50 (colored) to selected 1.18 (colored)

Remove DJB_RESTRICTED, no longer used.

Revision 1.50 / (download) - annotate - [select for diffs], Tue Sep 22 09:59:05 2020 UTC (3 years, 6 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2020Q3-base, pkgsrc-2020Q3
Changes since 1.49: +5 -5 lines
Diff to previous 1.49 (colored) to selected 1.18 (colored)

Update to 0.11.6a (as 0.999.11.6a). From the changelog:

- GCC 10 compliance enforced.

pkgsrc changes:

- Catch up DEFAULT_MEDIUM_CIPHERS to NetBSD-current's.

Revision 1.49 / (download) - annotate - [select for diffs], Mon Aug 31 18:10:54 2020 UTC (3 years, 6 months ago) by wiz
Branch: MAIN
Changes since 1.48: +2 -1 lines
Diff to previous 1.48 (colored) to selected 1.18 (colored)

*: bump PKGREVISION for perl-5.32.

Revision 1.48 / (download) - annotate - [select for diffs], Fri Aug 28 20:01:38 2020 UTC (3 years, 6 months ago) by schmonz
Branch: MAIN
Changes since 1.47: +2 -2 lines
Diff to previous 1.47 (colored) to selected 1.18 (colored)

Update to 0.11.6 (as 0.999.11.6). No changelog, but changes are supposed
to match those of ucspi-tcp6 1.11.6, so:

- Fixed problem for sslserver binding to local IPv4 addresses. Improved
  selection of IP addresses given the user flags -4/-6 and none.
- Improved sslclient's binding given several hostnames available in DNS.

Revision 1.47 / (download) - annotate - [select for diffs], Fri Jul 31 19:06:29 2020 UTC (3 years, 7 months ago) by schmonz
Branch: MAIN
Changes since 1.46: +2 -2 lines
Diff to previous 1.46 (colored) to selected 1.18 (colored)

Update to 0.11.5 (as 0.999.11.5). From the changelog:

- Added pollmax limit to sslserver and sslhandle.
- sslclient streamlined with tcpclient. fehQlibs-15 are required.

Revision 1.46 / (download) - annotate - [select for diffs], Thu Jun 25 05:42:37 2020 UTC (3 years, 9 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2020Q2-base, pkgsrc-2020Q2
Changes since 1.45: +3 -2 lines
Diff to previous 1.45 (colored) to selected 1.18 (colored)

Retire 'djbware-errno-hack' and associated options.mk cleverness.
Instead:

1. Package makefiles including their own options.mk
2. Packages say "SUBST_CLASSES+=djberrno" to get the hack, if needed
3. Packages adjust SUBST_FILES.djberrno, if needed

Should fix bulk build failures due to multiple inclusions of options.mk
and/or incorrect definitions of DJB_ERRNO_HACK.

Approved during the freeze by wiz@.

Revision 1.45 / (download) - annotate - [select for diffs], Mon Mar 30 08:04:18 2020 UTC (3 years, 11 months ago) by schmonz
Branch: MAIN
Changes since 1.44: +2 -2 lines
Diff to previous 1.44 (colored) to selected 1.18 (colored)

Update to 0.11.4. From the changelog:

- Fixed iopause return value evaluation in remoteinfo.c.
- Removed return call evaluation of iopause in ssl_io.c and ssl_timeout.c
  Not clear, whether this a resulting the polling.

Revision 1.44 / (download) - annotate - [select for diffs], Fri Mar 20 19:57:12 2020 UTC (4 years ago) by rillig
Branch: MAIN
CVS Tags: pkgsrc-2020Q1-base, pkgsrc-2020Q1
Changes since 1.43: +2 -1 lines
Diff to previous 1.43 (colored) to selected 1.18 (colored)

net/ucspi-ssl: doesn't need the errno.h hack

Revision 1.43 / (download) - annotate - [select for diffs], Wed Mar 4 15:57:16 2020 UTC (4 years ago) by schmonz
Branch: MAIN
Changes since 1.42: +2 -3 lines
Diff to previous 1.42 (colored) to selected 1.18 (colored)

Update to 0.11.3 (as 0.999.11.3). From the changelog:

- Adopted some fixes contributed by Alan S. (mtx):
  DNS IP Name qualification; X.509 DNS name matching; certs are only
  read on demand.
- Support of STARTTLS in sslclient is postponed to next minor version.
- Straightened error codes and exiting for sslserver/sslhandle instead of
  dropping the session in case of errors.

Revision 1.42 / (download) - annotate - [select for diffs], Mon Feb 3 19:56:19 2020 UTC (4 years, 1 month ago) by schmonz
Branch: MAIN
Changes since 1.41: +2 -3 lines
Diff to previous 1.41 (colored) to selected 1.18 (colored)

Distfile changed; since DIST_SUBDIR had been mistakenly preserved in
previous update, unset it. Bump PKGREVISION.

The complete diffs:

diff -Naur OLD/host/superscript.com/net/ucspi-ssl-0.11.1/package/build NEW/host/superscript.com/net/ucspi-ssl-0.11.1/package/build
--- OLD/host/superscript.com/net/ucspi-ssl-0.11.1/package/build	2019-11-07 11:21:18.000000000 -0500
+++ NEW/host/superscript.com/net/ucspi-ssl-0.11.1/package/build	2019-12-28 11:31:11.000000000 -0500
@@ -1 +1 @@
-20191107172118
+20191228173111
diff -Naur OLD/host/superscript.com/net/ucspi-ssl-0.11.1/src/sslclient.c NEW/host/superscript.com/net/ucspi-ssl-0.11.1/src/sslclient.c
--- OLD/host/superscript.com/net/ucspi-ssl-0.11.1/src/sslclient.c	2019-09-08 15:02:23.000000000 -0400
+++ NEW/host/superscript.com/net/ucspi-ssl-0.11.1/src/sslclient.c	2019-12-28 06:34:03.000000000 -0500
@@ -227,6 +227,7 @@
     if (!stralloc_copys(&addresses,"")) nomem();
     byte_copy(addresses.s,12,V4mappedprefix);
     byte_copy(addresses.s + 12,4,ipremote + 12);
+    ipv4socket = 1;
   } else if (ip6_scan(hostname,ipremote))
       if (!stralloc_copyb(&addresses,ipremote,16)) nomem();

diff -Naur OLD/host/superscript.com/net/ucspi-ssl-0.11.1/src/sslserver.c NEW/host/superscript.com/net/ucspi-ssl-0.11.1/src/sslserver.c
--- OLD/host/superscript.com/net/ucspi-ssl-0.11.1/src/sslserver.c	2019-09-15 06:20:23.000000000 -0400
+++ NEW/host/superscript.com/net/ucspi-ssl-0.11.1/src/sslserver.c	2019-12-28 06:36:10.000000000 -0500
@@ -755,7 +755,7 @@
   if (!addresses.len) {
     if (!stralloc_copys(&tmp,hostname)) drop_nomem();
     if (dns_ip6_qualify(&addresses,&fqdn,&tmp) <= 0)
-      logmsg(WHO,111,FATAL,B("temporarily unable to figure out IP address for: ",(char *)hostname));
+      logmsg(WHO,111,FATAL,B("unable to figure out IP address for: ",(char *)hostname));
   }
   if (addresses.len < 16)
     logmsg(WHO,111,FATAL,B("no IP address for: ",(char *)hostname));

Revision 1.41 / (download) - annotate - [select for diffs], Sat Jan 18 21:50:27 2020 UTC (4 years, 2 months ago) by jperkin
Branch: MAIN
Changes since 1.40: +2 -1 lines
Diff to previous 1.40 (colored) to selected 1.18 (colored)

*: Recursive revision bump for openssl 1.1.1.

Revision 1.40 / (download) - annotate - [select for diffs], Mon Dec 16 21:26:43 2019 UTC (4 years, 3 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2019Q4-base, pkgsrc-2019Q4
Changes since 1.39: +2 -3 lines
Diff to previous 1.39 (colored) to selected 1.18 (colored)

Update to 0.11.1 (as 0.999.11.1). From the changelog:

- Added compatibility with fehQlibs-13.
- Fixed wrong behavior of sslserver/sslclient given a local or remote
  IPv4 address. sslhandle is now an own program (man sslhandle.3).
- Code streamlined with ucspi-tcp6-1.11.0.
- Removed parenthesis from host in https@: [$host]:$port -> $host:port.
  Tx, A.E.
- Fixed TLSv1* macro's names in ucspissl.h to match ssl_context.c.
- Clarified usage of 'SSL_CTX_set_ciphersuites()' in ssl_ciphers.c.

Revision 1.39 / (download) - annotate - [select for diffs], Sun Nov 3 11:45:56 2019 UTC (4 years, 4 months ago) by rillig
Branch: MAIN
Changes since 1.38: +13 -13 lines
Diff to previous 1.38 (colored) to selected 1.18 (colored)

net: align variable assignments

pkglint -Wall -F --only aligned --only indent -r

No manual corrections.

Revision 1.38 / (download) - annotate - [select for diffs], Tue Aug 20 00:14:25 2019 UTC (4 years, 7 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2019Q3-base, pkgsrc-2019Q3
Changes since 1.37: +2 -1 lines
Diff to previous 1.37 (colored) to selected 1.18 (colored)

Distfile changed in place, reported by Nathan Arthur in private mail. No
important diffs from 20190803110528 to 20190803131811. Set DIST_SUBDIR
and update checksum.

Revision 1.37 / (download) - annotate - [select for diffs], Mon Aug 19 22:09:06 2019 UTC (4 years, 7 months ago) by schmonz
Branch: MAIN
Changes since 1.36: +2 -2 lines
Diff to previous 1.36 (colored) to selected 1.18 (colored)

Require latest ucspi-tcp6 for IPv4 fixes. Bump PKGREVISION.

Revision 1.36 / (download) - annotate - [select for diffs], Sun Aug 11 13:22:31 2019 UTC (4 years, 7 months ago) by wiz
Branch: MAIN
Changes since 1.35: +2 -1 lines
Diff to previous 1.35 (colored) to selected 1.18 (colored)

Bump PKGREVISIONs for perl 5.30.0

Revision 1.35 / (download) - annotate - [select for diffs], Sat Aug 3 10:44:07 2019 UTC (4 years, 7 months ago) by schmonz
Branch: MAIN
Changes since 1.34: +7 -4 lines
Diff to previous 1.34 (colored) to selected 1.18 (colored)

Update to 0.10.11. From the changelog:

- Fixed potential stack corruption in sslclient/sslhandle/sslserver
  while assigning hostname => 0.
- Improved OpenSSL + LibreSSL compatibility:
    - LibreSSL 2.5 to 2.9 is working
    - OpenSSL 1.0.2 to 1.1.1 is working
- Added SNI for sslclient.
- Fixes for sslhandle.
- Included new CIPHERLIST API for ssl_ciphers.
- Removed dependency on conf-tcpbin; modules are expected to be
  in the path.
- Modules rts.base and rts.sslperl are working now.

Revision 1.34 / (download) - annotate - [select for diffs], Wed Jul 10 12:59:54 2019 UTC (4 years, 8 months ago) by schmonz
Branch: MAIN
Changes since 1.33: +1 -6 lines
Diff to previous 1.33 (colored) to selected 1.18 (colored)

Specify include/qlibs and lib/qlibs paths once, in fehqlibs/buildlink3.mk.

Revision 1.33 / (download) - annotate - [select for diffs], Wed Jul 10 11:23:35 2019 UTC (4 years, 8 months ago) by schmonz
Branch: MAIN
Changes since 1.32: +2 -2 lines
Diff to previous 1.32 (colored) to selected 1.18 (colored)

Bump PKGREVISION for new runtime dependency on fehqlibs.

Revision 1.32 / (download) - annotate - [select for diffs], Wed Jul 10 10:49:36 2019 UTC (4 years, 8 months ago) by schmonz
Branch: MAIN
Changes since 1.31: +2 -1 lines
Diff to previous 1.31 (colored) to selected 1.18 (colored)

Bump PKGREVISION for fehqlibs-using packages.

Revision 1.31 / (download) - annotate - [select for diffs], Thu Jun 20 01:12:07 2019 UTC (4 years, 9 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2019Q2-base
Branch point for: pkgsrc-2019Q2
Changes since 1.30: +2 -2 lines
Diff to previous 1.30 (colored) to selected 1.18 (colored)

Update to 0.10.10. From the changelog:

- Added DSA/DSS (+ECC) signature verification additionally to RSA.
- Added compatibility with fehQlibs-12.

Revision 1.30 / (download) - annotate - [select for diffs], Sun May 5 15:18:00 2019 UTC (4 years, 10 months ago) by schmonz
Branch: MAIN
Changes since 1.29: +2 -2 lines
Diff to previous 1.29 (colored) to selected 1.18 (colored)

Update to 0.10.9 (pkgsrc 0.999.10.9). From the changelog:

- Fixed broken evaluation of CIDR and IPv6 addresses;
  adjusted with ucspi-tcp6-1.10.5.
- Improved compatibility with LibreSSL and included description.

Revision 1.29 / (download) - annotate - [select for diffs], Thu Mar 21 15:16:45 2019 UTC (5 years ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2019Q1-base, pkgsrc-2019Q1
Changes since 1.28: +2 -15 lines
Diff to previous 1.28 (colored) to selected 1.18 (colored)

Update to 0.10.8. From the changelog:

- Added dualstack handling for servers applying the
  pseudo IP address ':0' on call (common now for all servers).
- Tailored TLS error handling for EAGAIN end error codes.
- Rewrote IPv4 CIDR address evaluation for rules.

Revision 1.28 / (download) - annotate - [select for diffs], Fri Jan 18 18:18:38 2019 UTC (5 years, 2 months ago) by schmonz
Branch: MAIN
Changes since 1.27: +5 -4 lines
Diff to previous 1.27 (colored) to selected 1.18 (colored)

Previous attempt at sensible default ciphers was insufficiently
interoperable. Use Postfix's `tls_medium_cipherlist` instead. Bump
PKGREVISION.

Revision 1.27 / (download) - annotate - [select for diffs], Thu Jan 17 18:41:52 2019 UTC (5 years, 2 months ago) by schmonz
Branch: MAIN
Changes since 1.26: +6 -2 lines
Diff to previous 1.26 (colored) to selected 1.18 (colored)

Override conf-ciphers with Qualys-satisfactory defaults. Bump PKGREVISION.

Revision 1.26 / (download) - annotate - [select for diffs], Fri Dec 14 22:52:45 2018 UTC (5 years, 3 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2018Q4-base, pkgsrc-2018Q4
Changes since 1.25: +2 -3 lines
Diff to previous 1.25 (colored) to selected 1.18 (colored)

Update to 0.10.7. From the changelog:

- Better handling of read EAGAIN (sslserver may hang).
- Include socket_dualstack option (required for OS with IPv6_V6ONLY).
- fehQlibs-10 required.

Revision 1.25 / (download) - annotate - [select for diffs], Sun Oct 28 17:10:27 2018 UTC (5 years, 5 months ago) by schmonz
Branch: MAIN
Changes since 1.24: +2 -1 lines
Diff to previous 1.24 (colored) to selected 1.18 (colored)

Disable TLS 1.0. Bump PKGREVISION.

Revision 1.24 / (download) - annotate - [select for diffs], Sun Oct 14 12:21:11 2018 UTC (5 years, 5 months ago) by schmonz
Branch: MAIN
Changes since 1.23: +9 -5 lines
Diff to previous 1.23 (colored) to selected 1.18 (colored)

Update to 0.10.6, which we'll call "0.999.10.6". From the changelog:

- Complete refurbish based on fehQlibs.
- Native handling of IPv4/IPv6 address for sslclient.
- Added experimental 'ecdhparam' file.
- Removed experimental 'ecdhparam' handling -- OpenSSL does not support it.
- Finished TLS 1.3 integration (based on OpenSSL 1.1.1).
- Removed compiler flags for ECDH -- now required.
- fehQlibs-09 based.

Revision 1.23 / (download) - annotate - [select for diffs], Wed Aug 22 09:46:08 2018 UTC (5 years, 7 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2018Q3-base, pkgsrc-2018Q3
Changes since 1.22: +2 -2 lines
Diff to previous 1.22 (colored) to selected 1.18 (colored)

Recursive bump for perl5-5.28.0

Revision 1.22 / (download) - annotate - [select for diffs], Sun Jul 29 23:23:09 2018 UTC (5 years, 8 months ago) by schmonz
Branch: MAIN
Changes since 1.21: +2 -4 lines
Diff to previous 1.21 (colored) to selected 1.18 (colored)

Add 'inet6' option to control dependency on ucspi-tcp{6,}. Bump PKGREVISION.

Revision 1.21 / (download) - annotate - [select for diffs], Wed Jul 25 16:32:34 2018 UTC (5 years, 8 months ago) by schmonz
Branch: MAIN
Changes since 1.20: +3 -2 lines
Diff to previous 1.20 (colored) to selected 1.18 (colored)

s/ucspi-tcp/ucspi-tcp6/g in dependencies. Bump PKGREVISIONs.

Revision 1.20 / (download) - annotate - [select for diffs], Wed Jul 11 22:42:51 2018 UTC (5 years, 8 months ago) by schmonz
Branch: MAIN
Changes since 1.19: +2 -2 lines
Diff to previous 1.19 (colored) to selected 1.18 (colored)

Update to 0.99e. From the changelog:

- Fixed missing 'return 0' in ssl_params.c for ECDH handshake (tx. J.W.).

Revision 1.19 / (download) - annotate - [select for diffs], Mon Jun 18 11:00:21 2018 UTC (5 years, 9 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2018Q2-base, pkgsrc-2018Q2
Changes since 1.18: +47 -16 lines
Diff to previous 1.18 (colored)

Update to 0.99d. From the changelog:

- Added `correct` pid display in error log.
- Fixed cosmetic bug in sslserver displaying parent and not child pid in log.
  Tx Bruce Guenter.

pkgsrc changes:

- Adjust path to OpenSSL certs
- Install the provided example DH params
- Look for /etc/dnsrewrite under PKG_SYSCONFBASE
- Create a user and group for privilege separation
- Install manpages and more documentation

Revision 1.18 / (download) - annotate - [selected], Sat Jul 22 02:58:09 2017 UTC (6 years, 8 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2018Q1-base, pkgsrc-2018Q1, pkgsrc-2017Q4-base, pkgsrc-2017Q4, pkgsrc-2017Q3-base, pkgsrc-2017Q3
Changes since 1.17: +2 -3 lines
Diff to previous 1.17 (colored)

Update to 0.99b. From the changelog:

- Included PID in sslserver + sslhandle abend logs in case of SSL failure.
- Removed references to 'gcc' and used 'cc' instead.
- New build with better error log for ssl abends.

Revision 1.17 / (download) - annotate - [select for diffs], Sat Jun 17 03:49:04 2017 UTC (6 years, 9 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2017Q2-base, pkgsrc-2017Q2
Changes since 1.16: +2 -1 lines
Diff to previous 1.16 (colored) to selected 1.18 (colored)

Rather than try to detect -ldl, use known values. Fixes NetBSD build.

Revision 1.16 / (download) - annotate - [select for diffs], Mon Jun 5 14:24:26 2017 UTC (6 years, 9 months ago) by ryoon
Branch: MAIN
Changes since 1.15: +2 -1 lines
Diff to previous 1.15 (colored) to selected 1.18 (colored)

Recursive revbump from lang/perl5 5.26.0

Revision 1.15 / (download) - annotate - [select for diffs], Sat May 20 01:39:12 2017 UTC (6 years, 10 months ago) by schmonz
Branch: MAIN
Changes since 1.14: +9 -14 lines
Diff to previous 1.14 (colored) to selected 1.18 (colored)

Update to 0.99 (new upstream). From the changelog:

Included ucspi-ssl-0.70_ucspitls-0.6.patch (STARTTLS support)
originally designed and provided by Scott Gifford (FEH).

Added Certchain support for sslserver and sslclient (FEH).

Integration and added man-pages (FEH).

Synced with ucspi-tcp6-0.95.

Fixed integration bug in ssl_very.c.
Included patches from Peter Conrad.

Bug fix in sslserver. Several small
corrections.

Fix for large X509 serial numbers on x86 (tx. Peter Conrad).
SAN DNSname has precedence over CN in subject.
Re-edited man pages and rts tests.

Added IPv6 support (tx. to Felix von Leitner and Brandon Turner).
UI: Changed sslserver client cert call from '-i/-I' to '-z/-Z'
for compatibility reasons.
Added '-4/-6' support for client scripts.

Added output environment variables TCP6* for sslserver.
sslperl, sslhandle, and sslprint are not IPv6 ready yet.

Added IPv6 capabilities to sslhandle, sslprint, sslperl.
Changed verification of X.509 certs.
Removed obsolete socket_4 calls in sslserver.

Streamlined code with ucspi-tcp6-1.00.
Supplied new certs with customized SAN.
Make rts working (at least some how).

Added support for personalized client certs.
New option '-m' in sslserver, complementing '-z'.
CCAFILE='-' disables client cert request.

Added verbose log output for SSL connection informations.

Fixed wrongly nested CONNECT error code for sslclient.c
producing wrong warning messages while connecting to
an IPv4 address.
Added call of '-ldl' in ssl.lib.

Mitigation of SSL connection hanging during
coincident change of daylight-saving settings.

Fixed bug in sslserver's dnsip lookup in case of paranoid settings
and additonal existance of IPv6 AAAA records for incoming IPv4 connection.

Serveral fixes from 'troy@' included to cope with compiler errors and
to solve a bug in function getbitasaddress in ip4_bit.c (= ucspi-tcp6-1.02).
Reordered conf-* variables in main dir to allow easier generation of
packages (i.e. RPM). Fixed script to identify different HW architecture
and OS. This version works in 32 bit mode on Raspian Linux / RasPi 7.

Added ECDH capabilites (tx to Frank Bergmann for the patches).

Added compatibility with LibreSSL.
Fixed missing negative return call treatment from 'poll' (tx Frank Bergmann).
Tentative 'emake' fix for Gentoo build.

Added OpenSSL 1.1 tweaks -- works under Debian (9) 'Stretch'.

Revision 1.14 / (download) - annotate - [select for diffs], Wed Jun 8 19:24:16 2016 UTC (7 years, 9 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2017Q1-base, pkgsrc-2017Q1, pkgsrc-2016Q4-base, pkgsrc-2016Q4, pkgsrc-2016Q3-base, pkgsrc-2016Q3, pkgsrc-2016Q2-base, pkgsrc-2016Q2
Changes since 1.13: +2 -2 lines
Diff to previous 1.13 (colored) to selected 1.18 (colored)

Bump PKGREVISION for perl-5.24.

Revision 1.13 / (download) - annotate - [select for diffs], Sat Mar 5 11:29:13 2016 UTC (8 years ago) by jperkin
Branch: MAIN
CVS Tags: pkgsrc-2016Q1-base, pkgsrc-2016Q1
Changes since 1.12: +2 -2 lines
Diff to previous 1.12 (colored) to selected 1.18 (colored)

Bump PKGREVISION for security/openssl ABI bump.

Revision 1.12 / (download) - annotate - [select for diffs], Fri Jun 12 10:50:54 2015 UTC (8 years, 9 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2015Q4-base, pkgsrc-2015Q4, pkgsrc-2015Q3-base, pkgsrc-2015Q3, pkgsrc-2015Q2-base, pkgsrc-2015Q2
Changes since 1.11: +2 -2 lines
Diff to previous 1.11 (colored) to selected 1.18 (colored)

Recursive PKGREVISION bump for all packages mentioning 'perl',
having a PKGNAME of p5-*, or depending such a package,
for perl-5.22.0.

Revision 1.11 / (download) - annotate - [select for diffs], Thu May 29 23:37:13 2014 UTC (9 years, 10 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2015Q1-base, pkgsrc-2015Q1, pkgsrc-2014Q4-base, pkgsrc-2014Q4, pkgsrc-2014Q3-base, pkgsrc-2014Q3, pkgsrc-2014Q2-base, pkgsrc-2014Q2
Changes since 1.10: +2 -2 lines
Diff to previous 1.10 (colored) to selected 1.18 (colored)

Bump for perl-5.20.0.
Do it for all packages that
* mention perl, or
* have a directory name starting with p5-*, or
* depend on a package starting with p5-
like last time, for 5.18, where this didn't lead to complaints.
Let me know if you have any this time.

Revision 1.10 / (download) - annotate - [select for diffs], Wed Feb 12 23:18:26 2014 UTC (10 years, 1 month ago) by tron
Branch: MAIN
CVS Tags: pkgsrc-2014Q1-base, pkgsrc-2014Q1
Changes since 1.9: +2 -2 lines
Diff to previous 1.9 (colored) to selected 1.18 (colored)

Recursive PKGREVISION bump for OpenSSL API version bump.

Revision 1.9 / (download) - annotate - [select for diffs], Fri May 31 12:41:44 2013 UTC (10 years, 9 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2013Q4-base, pkgsrc-2013Q4, pkgsrc-2013Q3-base, pkgsrc-2013Q3, pkgsrc-2013Q2-base, pkgsrc-2013Q2
Changes since 1.8: +2 -2 lines
Diff to previous 1.8 (colored) to selected 1.18 (colored)

Bump all packages for perl-5.18, that
a) refer 'perl' in their Makefile, or
b) have a directory name of p5-*, or
c) have any dependency on any p5-* package

Like last time, where this caused no complaints.

Revision 1.8 / (download) - annotate - [select for diffs], Wed Feb 6 23:23:25 2013 UTC (11 years, 1 month ago) by jperkin
Branch: MAIN
CVS Tags: pkgsrc-2013Q1-base, pkgsrc-2013Q1
Changes since 1.7: +2 -2 lines
Diff to previous 1.7 (colored) to selected 1.18 (colored)

PKGREVISION bumps for the security/openssl 1.0.1d update.

Revision 1.7 / (download) - annotate - [select for diffs], Tue Oct 23 17:19:15 2012 UTC (11 years, 5 months ago) by asau
Branch: MAIN
CVS Tags: pkgsrc-2012Q4-base, pkgsrc-2012Q4
Changes since 1.6: +1 -3 lines
Diff to previous 1.6 (colored) to selected 1.18 (colored)

Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.

Revision 1.6 / (download) - annotate - [select for diffs], Wed Oct 3 21:57:12 2012 UTC (11 years, 5 months ago) by wiz
Branch: MAIN
Changes since 1.5: +2 -2 lines
Diff to previous 1.5 (colored) to selected 1.18 (colored)

Bump all packages that use perl, or depend on a p5-* package, or
are called p5-*.

I hope that's all of them.

Revision 1.5 / (download) - annotate - [select for diffs], Mon Mar 15 03:02:25 2010 UTC (14 years ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2012Q3-base, pkgsrc-2012Q3, pkgsrc-2012Q2-base, pkgsrc-2012Q2, pkgsrc-2012Q1-base, pkgsrc-2012Q1, pkgsrc-2011Q4-base, pkgsrc-2011Q4, pkgsrc-2011Q3-base, pkgsrc-2011Q3, pkgsrc-2011Q2-base, pkgsrc-2011Q2, pkgsrc-2011Q1-base, pkgsrc-2011Q1, pkgsrc-2010Q4-base, pkgsrc-2010Q4, pkgsrc-2010Q3-base, pkgsrc-2010Q3, pkgsrc-2010Q2-base, pkgsrc-2010Q2, pkgsrc-2010Q1-base, pkgsrc-2010Q1
Changes since 1.4: +10 -6 lines
Diff to previous 1.4 (colored) to selected 1.18 (colored)

DESTDIR support, DJB_RESTRICTED=no (ucspi-tcp is public domain now), update
HOMEPAGE.

Revision 1.4 / (download) - annotate - [select for diffs], Sun Jan 17 12:02:35 2010 UTC (14 years, 2 months ago) by wiz
Branch: MAIN
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (colored) to selected 1.18 (colored)

Recursive PKGREVISION bump for jpeg update to 8.

Revision 1.3 / (download) - annotate - [select for diffs], Fri Jan 18 05:08:51 2008 UTC (16 years, 2 months ago) by tnn
Branch: MAIN
CVS Tags: pkgsrc-2009Q4-base, pkgsrc-2009Q4, pkgsrc-2009Q3-base, pkgsrc-2009Q3, pkgsrc-2009Q2-base, pkgsrc-2009Q2, pkgsrc-2009Q1-base, pkgsrc-2009Q1, pkgsrc-2008Q4-base, pkgsrc-2008Q4, pkgsrc-2008Q3-base, pkgsrc-2008Q3, pkgsrc-2008Q2-base, pkgsrc-2008Q2, pkgsrc-2008Q1-base, pkgsrc-2008Q1, cwrapper, cube-native-xorg-base, cube-native-xorg
Changes since 1.2: +2 -2 lines
Diff to previous 1.2 (colored) to selected 1.18 (colored)

Per the process outlined in revbump(1), perform a recursive revbump
on packages that are affected by the switch from the openssl 0.9.7
branch to the 0.9.8 branch. ok jlam@

Revision 1.2 / (download) - annotate - [select for diffs], Sun Apr 2 17:44:16 2006 UTC (17 years, 11 months ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2007Q4-base, pkgsrc-2007Q4, pkgsrc-2007Q3-base, pkgsrc-2007Q3, pkgsrc-2007Q2-base, pkgsrc-2007Q2, pkgsrc-2007Q1-base, pkgsrc-2007Q1, pkgsrc-2006Q4-base, pkgsrc-2006Q4, pkgsrc-2006Q3-base, pkgsrc-2006Q3, pkgsrc-2006Q2-base, pkgsrc-2006Q2
Changes since 1.1: +8 -8 lines
Diff to previous 1.1 (colored) to selected 1.18 (colored)

Only build sslperl if option "ucspi-ssl-perl" is enabled. Bump PKGREVISION.

Revision 1.1 / (download) - annotate - [select for diffs], Wed Jan 11 20:17:58 2006 UTC (18 years, 2 months ago) by schmonz
Branch: MAIN
Diff to selected 1.18 (colored)

Initial revision

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.




CVSweb <webmaster@jp.NetBSD.org>