Commit Graph

54 Commits

Author SHA256 Message Date
Richard Brown
27b455edbf Accepting request 883785 from network:ha-clustering:Factory
- Update to 2.0+git.1600444747.83b3644:
  * VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
    (bsc#1147137)
  * VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
    (bsc#1147139
  * use standard %lld instead of non-standard %Ld format specifier
  * try to avoid (temporary) -rw------- root:root files on receiving side
  * fix diff mode truncation to first 512 byte
  * disable xinetd template by default as preparation for systemd socket unit
  * add systemd csync2.socket and csync2@.service templates
  * escape peername in SQL statements
- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.
- Remove patches contained by update:
  * 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * 0002-Patch-sonames.patch
  * 0001-Add-COPYING-as-docfile.patch

OBS-URL: https://build.opensuse.org/request/show/883785
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/csync2?expand=0&rev=24
2021-04-08 19:32:12 +00:00
Peter Varkoly
fdedd2e53d Fix systemd calls
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=59
2021-04-08 08:51:18 +00:00
Peter Varkoly
1daf591e5d * VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
(bsc#1147139
- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.
- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch

OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=58
2021-04-07 19:24:19 +00:00
Peter Varkoly
0672ff4540 OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=57 2021-04-07 14:05:35 +00:00
Peter Varkoly
0a278ac1df - VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.

OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=56
2021-04-07 13:55:17 +00:00
Peter Varkoly
d473ce2a59 - Update to 2.0+git.1600444747.83b3644:
* VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
    (bsc#1147137)
  * use standard %lld instead of non-standard %Ld format specifier
  * try to avoid (temporary) -rw------- root:root files on receiving side
  * fix diff mode truncation to first 512 byte
  * disable xinetd template by default as preparation for systemd socket unit
  * add systemd csync2.socket and csync2@.service templates
  * escape peername in SQL statements
- Remove patches contained by update:
  * 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * 0002-Patch-sonames.patch
  * 0001-Add-COPYING-as-docfile.patch

OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=55
2021-04-07 12:16:45 +00:00
Dominique Leuenberger
5f5074d2c8 Accepting request 705608 from network:ha-clustering:Factory
- Update to 2.0+git.1542296533.b974921:
  * Convert documentation to asciidoc
  * Add error handling for out-of-memory while parsing config file
  * create_key: use all random bits; add some error handling
- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch

OBS-URL: https://build.opensuse.org/request/show/705608
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/csync2?expand=0&rev=23
2019-05-28 07:42:38 +00:00
Kristoffer Gronlund
0c9cf12eda OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=53 2019-05-27 08:50:32 +00:00
Kristoffer Gronlund
9f55eb0d6d Accepting request 705600 from home:KGronlund:branches:network:ha-clustering:Factory
- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch
- comparison of peer names provided via command line should not be case sensitive (bsc#1082576)
- fix for inetd stderr >& stdout
- fix log message when generating backup files, demote log level
- document -l and -N switches
 
- Avoid systemd service removal errors when uninstalling (bsc#1093165)
- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch
- Requires(post) hostname|openssl
- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.
- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch
- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.
- Ensure COPYING file is included in package
  + Added add-COPYING.patch
- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous
  to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)
- Try to bind to "local" IP explicitly to avoid "identification failed"
  errors with multiple IPs on same subnet (bnc#757327)
  + Added bind-to-local-hostname.patch
- update license to new format
- Drop requirement on libgnutls-extra-devel (unnecessary on openSUSE)
- Force debug output off completely when running under xinetd (fixes
  protocol breakage when target directories don't exist; bnc#752563)
- factory has librsync split into devel package
- Remove explicit lib dependencies from spec file
- Add csync2-rm-ssl-cert helper script (bnc#709811)
- Remove redundant tags/sections from specfile
- Fix build against gnutls 2.8 in factory (integrated patch from
  http://bugs.gentoo.org/show_bug.cgi?id=274213)
- fix build against current openssl 
- Init import of csync2 for DRBD configuration file sync (fate#307419)

OBS-URL: https://build.opensuse.org/request/show/705600
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=52
2019-05-27 08:44:38 +00:00
Dominique Leuenberger
87796e93c5 Accepting request 629416 from network:ha-clustering:Factory
- comparison of peer names provided via command line should not be case sensitive (bsc#1082576)
- fix for inetd stderr >& stdout
- fix log message when generating backup files, demote log level
- document -l and -N switches
 

- Avoid systemd service removal errors when uninstalling (bsc#1093165)

OBS-URL: https://build.opensuse.org/request/show/629416
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/csync2?expand=0&rev=22
2018-08-20 14:19:05 +00:00
Kristoffer Gronlund
05f91abe90 update fix-sonames.patch
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=50
2018-08-15 14:28:33 +00:00
Kristoffer Gronlund
08cc63c233 update to latest upstream
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=49
2018-08-15 14:20:37 +00:00
Kristoffer Gronlund
ca14e7e3cd Avoid systemd service removal errors when uninstalling (bsc#1093165)
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=48
2018-08-15 14:16:30 +00:00
Kristoffer Gronlund
ef5120f467 - Avoid systemd service removal errors when uninstalling (bsc#1093165)
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=47
2018-08-14 14:10:54 +00:00
Yuchen Lin
f5865010f0 Accepting request 516067 from network:ha-clustering:Factory
1

OBS-URL: https://build.opensuse.org/request/show/516067
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/csync2?expand=0&rev=21
2017-08-13 12:59:30 +00:00
Kristoffer Gronlund
bb91f7270b Accepting request 511374 from home:scarabeus_iv:branches:network:ha-clustering:Factory
- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch

OBS-URL: https://build.opensuse.org/request/show/511374
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=45
2017-08-11 08:13:07 +00:00
Dominique Leuenberger
010845fb56 Accepting request 510186 from network:ha-clustering:Factory
1

OBS-URL: https://build.opensuse.org/request/show/510186
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/csync2?expand=0&rev=20
2017-07-17 07:11:28 +00:00
Kristoffer Gronlund
3eeaeb9e43 Accepting request 510050 from home:olh:branches:network:ha-clustering:Factory
- Requires(post) hostname|openssl

OBS-URL: https://build.opensuse.org/request/show/510050
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=43
2017-07-14 07:27:18 +00:00
Dominique Leuenberger
e1a872fe7b Accepting request 395990 from network:ha-clustering:Factory
1

OBS-URL: https://build.opensuse.org/request/show/395990
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/csync2?expand=0&rev=19
2016-05-17 15:16:16 +00:00
Kristoffer Gronlund
a3d0de449e Accepting request 395514 from home:jengelh:branches:network:ha-clustering:Factory
after looking at fedora SRPMS, I decided to do this differently
and only list templates on preun (and not have systemd-rpm-macros
do the filtering).

OBS-URL: https://build.opensuse.org/request/show/395514
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=41
2016-05-16 12:08:29 +00:00
Kristoffer Gronlund
99961227a8 Accepting request 394099 from home:jengelh:branches:network:ha-clustering:Factory
- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Call %systemd_pre/post/etc. on csync@.service template as well.

OBS-URL: https://build.opensuse.org/request/show/394099
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=40
2016-05-13 15:26:06 +00:00
Kristoffer Gronlund
3e8e83b755 - Update to csync2-2.0-6-g10636a4:
- Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch

OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=39
2016-04-27 10:18:37 +00:00
Dominique Leuenberger
326b1ee002 Accepting request 293253 from network:ha-clustering:Factory
1

OBS-URL: https://build.opensuse.org/request/show/293253
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/csync2?expand=0&rev=18
2015-03-28 17:38:40 +00:00
Tim Serong
27bc9576df Accepting request 293252 from home:dimstar:Factory
- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.

OBS-URL: https://build.opensuse.org/request/show/293252
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=37
2015-03-26 11:40:59 +00:00
Tim Serong
f27cd09b8d Fix stupid macro typo
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=36
2013-11-15 12:21:08 +00:00
Tim Serong
8f89520ea7 Don't try to BuildRequire texlive-nopageno on openSUSE <= 12.2
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=35
2013-11-15 12:09:19 +00:00
Tomáš Chvátal
41869d8eab Accepting request 200704 from network:ha-clustering:Factory
csync2 update for 13.1 (includes COPYING in %doc)

- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Added add-COPYING.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)

OBS-URL: https://build.opensuse.org/request/show/200704
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/csync2?expand=0&rev=16
2013-10-11 06:53:50 +00:00
Tim Serong
ab1223afaf - Ensure COPYING file is included in package
+ Added add-COPYING.patch

OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=33
2013-09-26 09:11:18 +00:00
Tim Serong
651e344f83 Fix service description
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=32
2013-09-11 06:32:22 +00:00
Tim Serong
3526f8206c - Update to upstream version 2.0-rc2. Changes since 1.34 too numerous
to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)

OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=31
2013-09-11 06:23:26 +00:00
Tim Serong
b6902ce2f7 Update csync2-rm-ssl-cert for sqlite3
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=30
2013-09-10 09:43:51 +00:00
Tim Serong
efee49c243 Add openssl as BuildRequire
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=29
2013-09-04 14:35:40 +00:00
Tim Serong
a04b88accb Dump errors from cert gen
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=28
2013-09-04 14:07:18 +00:00
Tim Serong
9c47c1e639 Add log to post script (temporary, to try to find build failure)
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=27
2013-09-04 13:55:22 +00:00
Tim Serong
ec8ecffa4f Run spec-cleaner
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=26
2013-09-03 12:43:49 +00:00
Tim Serong
bd7d9e9f31 Add systemd foo, get rid of some obsolete patches
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=25
2013-09-03 12:41:16 +00:00
Tim Serong
db6645b046 Experimental fix-sonames.patch
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=24
2013-09-02 08:49:30 +00:00
Tim Serong
078a426952 Fix quickstart
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=23
2013-09-02 07:24:58 +00:00
Tim Serong
e6d553c7b2 - Add fix-csync2_ssl_cert-filename.patch
- Remove csync2-1.34-pure-gnutls-r2.patch
- Remove fix-missing-sentinels.diff

OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=22
2013-09-02 06:59:37 +00:00
Tim Serong
05580bbff0 *** WORK IN PROGRESS - DO NOT SHIP ***
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=21
2013-08-22 09:22:31 +00:00
Stephan Kulow
66b574a361 Accepting request 176004 from network:ha-clustering:Factory
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/176004
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/csync2?expand=0&rev=14
2013-05-27 07:43:45 +00:00
Tim Serong
4290cb6691 - Try to bind to "local" IP explicitly to avoid "identification failed"
errors with multiple IPs on same subnet (bnc#757327)
  + Added bind-to-local-hostname.patch

OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=19
2013-05-10 13:01:15 +00:00
Stephan Kulow
0a9e56e8de Accepting request 156788 from network:ha-clustering:Factory
update license to new format (forwarded request 156773 from coolo)

OBS-URL: https://build.opensuse.org/request/show/156788
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/csync2?expand=0&rev=13
2013-03-01 06:17:03 +00:00
Tim Serong
ab264e86bd Accepting request 156773 from openSUSE:Factory:Staging:spdx
update license to new format

OBS-URL: https://build.opensuse.org/request/show/156773
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=17
2013-02-28 06:49:03 +00:00
Stephan Kulow
a81e529ec3 Accepting request 123456 from network:ha-clustering:Factory
Drop requirement on libgnutls-extra-devel (unnecessary on openSUSE, and indeed breaks the build on 12.2) (forwarded request 123455 from tserong)

OBS-URL: https://build.opensuse.org/request/show/123456
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/csync2?expand=0&rev=10
2012-06-05 13:29:55 +00:00
Tim Serong
d8029d8215 Accepting request 123455 from network:ha-clustering
Drop requirement on libgnutls-extra-devel (unnecessary on openSUSE, and indeed breaks the build on 12.2)

OBS-URL: https://build.opensuse.org/request/show/123455
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=15
2012-06-04 11:00:38 +00:00
Stephan Kulow
c2cfe41323 Accepting request 115599 from network:ha-clustering:Factory
Fix protocol breakage when target directories don't exist

OBS-URL: https://build.opensuse.org/request/show/115599
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/csync2?expand=0&rev=9
2012-05-03 08:54:54 +00:00
Tim Serong
48e8e1b94f - Force debug output off completely when running under xinetd (fixes
protocol breakage when target directories don't exist; bnc#752563)

OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=13
2012-04-23 11:14:02 +00:00
Stephan Kulow
1181f5b07e Accepting request 106187 from network:ha-clustering:Factory
- factory has librsync split into devel package (forwarded request 106108 from coolo)

OBS-URL: https://build.opensuse.org/request/show/106187
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/csync2?expand=0&rev=8
2012-02-21 11:17:02 +00:00
Tim Serong
2eceffcbcd Accepting request 106108 from home:coolo:branches:openSUSE:Factory
- factory has librsync split into devel package

OBS-URL: https://build.opensuse.org/request/show/106108
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=11
2012-02-21 02:43:46 +00:00