Adam Majer
dc40c1af74
Feature Improvements * Added Force10 dictionary. * Update dictionary.hp with new attributes. #2690. * Update dictionary.aruba with new attributes. #2696. * Fix side-channel leak in EAP-PWD (bsc#1166858, CVE-2019-20510) * Relax OpenSSL version checks, now that their API is both public, and stable. * Note that tls_min_version/tls_max_version also support "1.3" Since there is no standard yet for EAP with TLS 1.3, it will not work. * Added tripplite dictionary from #2760. * Switch to the async interface for rlm_sql_postgresql so that we can enforce query_timeout. * Added new LDAP option 'allow_dangling_group_ref'. * Updated documentation and functionality for EAP session caching See "cache" section of mods-available/eap. * Tighten systemd unit file security. Fixes #2637. * Disable TLS 1.0 and TLS 1.1 support in the default configuration We STRONGLY recommend doing this for all installations. * Add expansions for *outgoing* Radsec connections "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. Fixes #2839. * Add %{listen:tls} which returns "yes" or "no" for TLS or non-TLS connections. * Update dictionary.lancom with new attributes. #2847. * Added rlm_sql_mongo. See raddb/mods-available/sql. Note that this module is experimental. * Added more documentation in sites-available/robust-proxy-accounting. * sqlippool now re-allocates unexpired leases, to prevent IP pool exhaustion when clients perform multiple reauthentication attempts * Add support to radmin keep the history in ~/.radmin_history. OBS-URL: https://build.opensuse.org/package/show/network/freeradius-server?expand=0&rev=133
19 lines
566 B
Diff
19 lines
566 B
Diff
Author: Adam Majer <adam.majer@suse.de>
|
|
Summary: SUSE OpenSSL version scheme does not follow upstream.
|
|
Relax, breathe, apply.
|
|
|
|
Index: freeradius-server-3.0.20/src/main/version.c
|
|
===================================================================
|
|
--- freeradius-server-3.0.20.orig/src/main/version.c
|
|
+++ freeradius-server-3.0.20/src/main/version.c
|
|
@@ -52,6 +52,9 @@ static long ssl_built = OPENSSL_VERSION_
|
|
*/
|
|
int ssl_check_consistency(void)
|
|
{
|
|
+ // noop, since ABI is compatible for SUSE OpenSSL
|
|
+ return 0;
|
|
+
|
|
long ssl_linked;
|
|
|
|
ssl_linked = SSLeay();
|