Accepting request 1146252 from home:msaquib:branches:network:vpn

- update to 2.6.9:
  * Remove unused function prototype crypto_adjust_frame_parameters
  * Log SSL alerts more prominently
  * Document tls-exit option mainly as test option
  * Remove TEST_GET_DEFAULT_GATEWAY as it duplicates --show-gateway
  * Fix check_session_buf_not_used using wrong index
  * Add missing check for nl_socket_alloc failure
  * Add check for nice in cmake config
  * Remove compat versionhelpers.h and remove cmake/configure check for it
  * Extend the error message when TLS 1.0 PRF fails
  * Fix unaligned access in macOS, FreeBSD, Solaris hwaddr
  * Check PRF availability on initialisation and add --force-tls-key-material-export
  * Make it more explicit and visible when pkg-config is not found
  * Clarify that the tls-crypt-v2-verify has a very limited env set
  * Implement the --tls-export-cert feature
  * Remove conditional text for Apache2 linking exception
  * Remove --tls-export-cert
  * Remove superfluous x509_write_pem()
  * sample-keys: renew for the next 10 years
  * GHA: clean up libressl builds with newer libressl
  * configure.ac: Remove unused AC_TYPE_SIGNAL macro
  * documentation: remove reference to removed option --show-proxy-settings
  * unit_tests: remove includes for mock_msg.h
  * documentation: improve documentation of --x509-track
  * NTLM: add length check to add_security_buffer
  * NTLM: increase size of phase 2 response we can handle
  * proxy-options.rst: Add proper documentation for --http-proxy-user-pass
  * buf_string_match_head_str: Fix Coverity issue 'Unsigned compared against 0'
  * --http-proxy-user-pass: allow to specify in either order with --http-proxy
  * README.cmake.md: Document minimum required CMake version for --preset

OBS-URL: https://build.opensuse.org/request/show/1146252
OBS-URL: https://build.opensuse.org/package/show/network:vpn/openvpn?expand=0&rev=201

openvpn-2.6.8.tar.gz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEEvlj1OdBZuAYxwSlKQdIJZcLoLccFAmVXQWEACgkQQdIJZcLo
-LccHgw/8CluyqqSi46O+YIRBjJ29N7w9LV9Jt/nwwgNsOUbN4FkRRJpoGSMGdbo3
-2eOkDVnXisphl9aMiYmO4NDFSVgvFswC/UjZ0EKpyjAezYtN8Q7gj5XXOi7ENvWw
-tKQtnjUS/wV6N/ujCVYWo8EpZnh15vIkxo7BTjDjHRWiNjXioa89/AxqzN0vO0h6
-yeNJ65RPVp5RFow2DiyzsRdtIh/dP+TfupAUqcpFc2cvRZ2bXMcj5OV+khjsdYh7
-y5/xqCHbb41EJwy8d2iK4SXlggVfRDtuyqfJ3hCuPdHOe6NBZRgCZ5FcTqUJckkN
-ngYRViC33BHtcRKQQcoxSmhg1tjA1n2Yrt+xsrwCkw/M8OY+AS0ys4uiKYxCDN5I
-DcGTc9lE2xHHFur4ZUmOVQofRq8yRAQgik5nxMfur+tNpLGEW44eBjTYR3fzUjhO
-oNDxZv8oy0jZEelqvUTK2tRMdzxDlyOV8g7A8nXYcbJpAoaEaZsQ2C2Dbn1SgtZ/
-cmWMIXghFTnsTl70pbUZ8saHWAGb3d+AzwhET7BYQ7TBqNQMNzVaJ0O8aFEGPQzK
-4CyMzSD2x4Tnsl56BsvdVsihDBFhnfICrpXzO/QzTsbPb5xkooEuUhVWacMgJ74I
-Z2jDNGM67aDTOpHtgxluKZh1njes0SSGbLPDJIG6RG7TPcX3nE4=
-=kOZ8
------END PGP SIGNATURE-----

openvpn-2.6.9.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:e08d147e15b4508dfcd1d6618a1f21f1495f9817a8dadc1eddf0532fa116d7e3
+size 1901193

openvpn-2.6.9.tar.gz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=QGcq
+-----END PGP SIGNATURE-----

openvpn.changes

@@ -1,3 +1,53 @@
+-------------------------------------------------------------------
+Mon Feb 12 18:00:47 UTC 2024 - Mohd Saquib <mohd.saquib@suse.com>
+
+- update to 2.6.9:
+  * Remove unused function prototype crypto_adjust_frame_parameters
+  * Log SSL alerts more prominently
+  * Document tls-exit option mainly as test option
+  * Remove TEST_GET_DEFAULT_GATEWAY as it duplicates --show-gateway
+  * Fix check_session_buf_not_used using wrong index
+  * Add missing check for nl_socket_alloc failure
+  * Add check for nice in cmake config
+  * Remove compat versionhelpers.h and remove cmake/configure check for it
+  * Extend the error message when TLS 1.0 PRF fails
+  * Fix unaligned access in macOS, FreeBSD, Solaris hwaddr
+  * Check PRF availability on initialisation and add --force-tls-key-material-export
+  * Make it more explicit and visible when pkg-config is not found
+  * Clarify that the tls-crypt-v2-verify has a very limited env set
+  * Implement the --tls-export-cert feature
+  * Remove conditional text for Apache2 linking exception
+  * Remove --tls-export-cert
+  * Remove superfluous x509_write_pem()
+  * sample-keys: renew for the next 10 years
+  * GHA: clean up libressl builds with newer libressl
+  * configure.ac: Remove unused AC_TYPE_SIGNAL macro
+  * documentation: remove reference to removed option --show-proxy-settings
+  * unit_tests: remove includes for mock_msg.h
+  * documentation: improve documentation of --x509-track
+  * NTLM: add length check to add_security_buffer
+  * NTLM: increase size of phase 2 response we can handle
+  * proxy-options.rst: Add proper documentation for --http-proxy-user-pass
+  * buf_string_match_head_str: Fix Coverity issue 'Unsigned compared against 0'
+  * --http-proxy-user-pass: allow to specify in either order with --http-proxy
+  * README.cmake.md: Document minimum required CMake version for --preset
+  * documentation: Update and fix documentation for --push-peer-info
+  * documentation: Fixes for previous fixes to --push-peer-info
+  * OpenBSD: repair --show-gateway
+  * get_default_gateway() HWADDR overhaul
+  * fix uncrustify complaints about previous patch
+  * preparing release 2.6.9
+  * dco-freebsd: dynamically re-allocate buffer if it's too small
+  * tun.c: don't attempt to delete DNS and WINS servers if they're not set
+  * vcpkg-ports/pkcs11-helper: bump to version 1.30
+  * Add support for mbedtls 3.X.Y
+  * Update README.mbedtls
+  * Disable TLS 1.3 support with mbed TLS
+  * Enable key export with mbed TLS 3.x.y
+  * protocol_dump: tls-crypt support
+  * Fix IPv6 route add/delete message log level
+  * fix(ssl): init peer_id when init tls_multi 
+
 -------------------------------------------------------------------
 Mon Nov 20 07:15:13 UTC 2023 - Mohd Saquib <mohd.saquib@suse.com>
 

openvpn.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package openvpn
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -20,7 +20,7 @@
 %define _rundir %{_localstatedir}/run
 %endif
 Name:           openvpn
-Version:        2.6.8
+Version:        2.6.9
 Release:        0
 Summary:        Full-featured SSL VPN solution using a TUN/TAP Interface
 License:        GPL-2.0-only WITH openvpn-openssl-exception