From d1cd5309f7c6b54e995818f8a9c5c7e4d2e715f9972e768981007cfabdbaf539 Mon Sep 17 00:00:00 2001 From: Mohd Saquib Date: Mon, 12 Feb 2024 18:07:35 +0000 Subject: [PATCH] Accepting request 1146252 from home:msaquib:branches:network:vpn - update to 2.6.9: * Remove unused function prototype crypto_adjust_frame_parameters * Log SSL alerts more prominently * Document tls-exit option mainly as test option * Remove TEST_GET_DEFAULT_GATEWAY as it duplicates --show-gateway * Fix check_session_buf_not_used using wrong index * Add missing check for nl_socket_alloc failure * Add check for nice in cmake config * Remove compat versionhelpers.h and remove cmake/configure check for it * Extend the error message when TLS 1.0 PRF fails * Fix unaligned access in macOS, FreeBSD, Solaris hwaddr * Check PRF availability on initialisation and add --force-tls-key-material-export * Make it more explicit and visible when pkg-config is not found * Clarify that the tls-crypt-v2-verify has a very limited env set * Implement the --tls-export-cert feature * Remove conditional text for Apache2 linking exception * Remove --tls-export-cert * Remove superfluous x509_write_pem() * sample-keys: renew for the next 10 years * GHA: clean up libressl builds with newer libressl * configure.ac: Remove unused AC_TYPE_SIGNAL macro * documentation: remove reference to removed option --show-proxy-settings * unit_tests: remove includes for mock_msg.h * documentation: improve documentation of --x509-track * NTLM: add length check to add_security_buffer * NTLM: increase size of phase 2 response we can handle * proxy-options.rst: Add proper documentation for --http-proxy-user-pass * buf_string_match_head_str: Fix Coverity issue 'Unsigned compared against 0' * --http-proxy-user-pass: allow to specify in either order with --http-proxy * README.cmake.md: Document minimum required CMake version for --preset OBS-URL: https://build.opensuse.org/request/show/1146252 OBS-URL: https://build.opensuse.org/package/show/network:vpn/openvpn?expand=0&rev=201 --- openvpn-2.6.8.tar.gz | 3 --- openvpn-2.6.8.tar.gz.asc | 16 ------------- openvpn-2.6.9.tar.gz | 3 +++ openvpn-2.6.9.tar.gz.asc | 16 +++++++++++++ openvpn.changes | 50 ++++++++++++++++++++++++++++++++++++++++ openvpn.spec | 4 ++-- 6 files changed, 71 insertions(+), 21 deletions(-) delete mode 100644 openvpn-2.6.8.tar.gz delete mode 100644 openvpn-2.6.8.tar.gz.asc create mode 100644 openvpn-2.6.9.tar.gz create mode 100644 openvpn-2.6.9.tar.gz.asc diff --git a/openvpn-2.6.8.tar.gz b/openvpn-2.6.8.tar.gz deleted file mode 100644 index e584398..0000000 --- a/openvpn-2.6.8.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:5ede1565c8a6d880100f7f235317a7ee9eea83d5052db5547f13a9e76af7805d -size 1896563 diff --git a/openvpn-2.6.8.tar.gz.asc b/openvpn-2.6.8.tar.gz.asc deleted file mode 100644 index cc3d077..0000000 --- a/openvpn-2.6.8.tar.gz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCAAdFiEEvlj1OdBZuAYxwSlKQdIJZcLoLccFAmVXQWEACgkQQdIJZcLo -LccHgw/8CluyqqSi46O+YIRBjJ29N7w9LV9Jt/nwwgNsOUbN4FkRRJpoGSMGdbo3 -2eOkDVnXisphl9aMiYmO4NDFSVgvFswC/UjZ0EKpyjAezYtN8Q7gj5XXOi7ENvWw -tKQtnjUS/wV6N/ujCVYWo8EpZnh15vIkxo7BTjDjHRWiNjXioa89/AxqzN0vO0h6 -yeNJ65RPVp5RFow2DiyzsRdtIh/dP+TfupAUqcpFc2cvRZ2bXMcj5OV+khjsdYh7 -y5/xqCHbb41EJwy8d2iK4SXlggVfRDtuyqfJ3hCuPdHOe6NBZRgCZ5FcTqUJckkN -ngYRViC33BHtcRKQQcoxSmhg1tjA1n2Yrt+xsrwCkw/M8OY+AS0ys4uiKYxCDN5I -DcGTc9lE2xHHFur4ZUmOVQofRq8yRAQgik5nxMfur+tNpLGEW44eBjTYR3fzUjhO -oNDxZv8oy0jZEelqvUTK2tRMdzxDlyOV8g7A8nXYcbJpAoaEaZsQ2C2Dbn1SgtZ/ -cmWMIXghFTnsTl70pbUZ8saHWAGb3d+AzwhET7BYQ7TBqNQMNzVaJ0O8aFEGPQzK -4CyMzSD2x4Tnsl56BsvdVsihDBFhnfICrpXzO/QzTsbPb5xkooEuUhVWacMgJ74I -Z2jDNGM67aDTOpHtgxluKZh1njes0SSGbLPDJIG6RG7TPcX3nE4= -=kOZ8 ------END PGP SIGNATURE----- diff --git a/openvpn-2.6.9.tar.gz b/openvpn-2.6.9.tar.gz new file mode 100644 index 0000000..3d3e3f7 --- /dev/null +++ b/openvpn-2.6.9.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e08d147e15b4508dfcd1d6618a1f21f1495f9817a8dadc1eddf0532fa116d7e3 +size 1901193 diff --git a/openvpn-2.6.9.tar.gz.asc b/openvpn-2.6.9.tar.gz.asc new file mode 100644 index 0000000..7f8c833 --- /dev/null +++ b/openvpn-2.6.9.tar.gz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEvlj1OdBZuAYxwSlKQdIJZcLoLccFAmXKE2oACgkQQdIJZcLo +LcePKw//XjatTyhtQvRnI2bkKgK1E7ezEKWmvibYhMAwaMJu6wnfpJ9mt0N3H/jR +E3bbaUt0L03j2z/62ohbXdZbjxLt0kG9d7WnBgj0MCFLz92PhCXnd6j4BCOHdEwS +Oqv5LXtj35LaGVNploAJ3ftiKs0Ac1xuqLXkrwAiLxXqRcgpf68fe8DJQY5aJ8A/ +XGUjoRAuID1F7vn8J8QmCvzdih7OqQdt3eSgCLJmH0O7o/9mA8i1tJO/yVczRpyC +MaKshsx9dU8AKltg6zLoeiFLkMZ/zR2bO1noixm3+u6+XT0mESZZmmmeib+nkmyo +PUcCucbxcddkd2csNx0jHjvHe9lW+YKdEec2fkDvN+KvLr6kl20iYBr1V66HOA2/ +aWPpNZa61zWm6xO8tn0lUPVZn9v0Ts4oO6WRtMSOI9h5sj6lxtGX1LIgGOGZcfqa +pawd/DUVkgHgK82D+t61VW/PdBpPmkAHkhuxTpMn9iTeaEbyxlCz6zuax/dWaik9 +ZIfagME/1ebtXbUZ/MOqhJOdIXYpbpNo8CNb2Gpf/XJg10dc12B49cDIqVZcM9oa +95D5H2u4BJMYLhFUu/B/N5iel7DjvHPht4eN/ip329kc4wFWWp+JwW6ezOUCm3kQ +auHSDN2+8DNTdcKqCc99RFH4NhyROhHLY6kurDcM+C9cIvCrU5k= +=QGcq +-----END PGP SIGNATURE----- diff --git a/openvpn.changes b/openvpn.changes index 36bc8b4..0b5edfd 100644 --- a/openvpn.changes +++ b/openvpn.changes @@ -1,3 +1,53 @@ +------------------------------------------------------------------- +Mon Feb 12 18:00:47 UTC 2024 - Mohd Saquib + +- update to 2.6.9: + * Remove unused function prototype crypto_adjust_frame_parameters + * Log SSL alerts more prominently + * Document tls-exit option mainly as test option + * Remove TEST_GET_DEFAULT_GATEWAY as it duplicates --show-gateway + * Fix check_session_buf_not_used using wrong index + * Add missing check for nl_socket_alloc failure + * Add check for nice in cmake config + * Remove compat versionhelpers.h and remove cmake/configure check for it + * Extend the error message when TLS 1.0 PRF fails + * Fix unaligned access in macOS, FreeBSD, Solaris hwaddr + * Check PRF availability on initialisation and add --force-tls-key-material-export + * Make it more explicit and visible when pkg-config is not found + * Clarify that the tls-crypt-v2-verify has a very limited env set + * Implement the --tls-export-cert feature + * Remove conditional text for Apache2 linking exception + * Remove --tls-export-cert + * Remove superfluous x509_write_pem() + * sample-keys: renew for the next 10 years + * GHA: clean up libressl builds with newer libressl + * configure.ac: Remove unused AC_TYPE_SIGNAL macro + * documentation: remove reference to removed option --show-proxy-settings + * unit_tests: remove includes for mock_msg.h + * documentation: improve documentation of --x509-track + * NTLM: add length check to add_security_buffer + * NTLM: increase size of phase 2 response we can handle + * proxy-options.rst: Add proper documentation for --http-proxy-user-pass + * buf_string_match_head_str: Fix Coverity issue 'Unsigned compared against 0' + * --http-proxy-user-pass: allow to specify in either order with --http-proxy + * README.cmake.md: Document minimum required CMake version for --preset + * documentation: Update and fix documentation for --push-peer-info + * documentation: Fixes for previous fixes to --push-peer-info + * OpenBSD: repair --show-gateway + * get_default_gateway() HWADDR overhaul + * fix uncrustify complaints about previous patch + * preparing release 2.6.9 + * dco-freebsd: dynamically re-allocate buffer if it's too small + * tun.c: don't attempt to delete DNS and WINS servers if they're not set + * vcpkg-ports/pkcs11-helper: bump to version 1.30 + * Add support for mbedtls 3.X.Y + * Update README.mbedtls + * Disable TLS 1.3 support with mbed TLS + * Enable key export with mbed TLS 3.x.y + * protocol_dump: tls-crypt support + * Fix IPv6 route add/delete message log level + * fix(ssl): init peer_id when init tls_multi + ------------------------------------------------------------------- Mon Nov 20 07:15:13 UTC 2023 - Mohd Saquib diff --git a/openvpn.spec b/openvpn.spec index 651133c..743df65 100644 --- a/openvpn.spec +++ b/openvpn.spec @@ -1,7 +1,7 @@ # # spec file for package openvpn # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -20,7 +20,7 @@ %define _rundir %{_localstatedir}/run %endif Name: openvpn -Version: 2.6.8 +Version: 2.6.9 Release: 0 Summary: Full-featured SSL VPN solution using a TUN/TAP Interface License: GPL-2.0-only WITH openvpn-openssl-exception