pool/stunnel
SHA256
11
0
Fork 1
Code Issues Pull Requests Activity

- - Update to version 5.0b1 (FATE#315694)

Browse Source 
- Default "pid" is now "", i.e. not to create a pid file at startup.
  - Default "ciphers" updated to "HIGH:MEDIUM:+3DES:+DH:!aNULL:!SSLv2" due to
    AlFBPPS attack and bad performance of DH ciphersuites. 
  - New service-level option "redirect" to redirect SSL client connections on
    authentication failures instead of rejecting them.
  - New global "engineDefault" configuration file option to control which
    OpenSSL tasks are delegated to the current engine.
  - New service-level configuration file option "engineId" to select the engine
    by identifier, e.g. "engineId = capi". 
  - Improved readability of error messages printed when stunnel refuses to start
    due to a critical error.
- Patches:
  - stunnel-CVE-2013-1762.patch obsoleted. Drpped.
  - stunnel-default-fips-off.patch obsoleted. Dropped.
  - stunnel-listenqueue-option.patch refreshed.
- update to version 4.56

OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=62
This commit is contained in:
Daniel Rahn
2014-01-29 16:56:32 +00:00
committed by Git OBS Bridge
parent 4c843518d3
commit 5fada29b31
8 changed files with 97 additions and 92 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
stunnel.changes
View File

@@ -1,7 +1,28 @@
-------------------------------------------------------------------
Wed Jan 29 16:23:28 UTC 2014 - drahn@suse.com
- - Update to version 5.0b1 (FATE#315694)
- Default "pid" is now "", i.e. not to create a pid file at startup.
- Default "ciphers" updated to "HIGH:MEDIUM:+3DES:+DH:!aNULL:!SSLv2" due to
AlFBPPS attack and bad performance of DH ciphersuites.
- New service-level option "redirect" to redirect SSL client connections on
authentication failures instead of rejecting them.
- New global "engineDefault" configuration file option to control which
OpenSSL tasks are delegated to the current engine.
- New service-level configuration file option "engineId" to select the engine
by identifier, e.g. "engineId = capi".
- Improved readability of error messages printed when stunnel refuses to start
due to a critical error.
- Patches:
- stunnel-CVE-2013-1762.patch obsoleted. Drpped.
- stunnel-default-fips-off.patch obsoleted. Dropped.
- stunnel-listenqueue-option.patch refreshed.
-------------------------------------------------------------------
Fri Nov 1 15:34:45 UTC 2013 - michael@stroeder.com
- update to version 4.56 with important security fix!
- update to version 4.56
-------------------------------------------------------------------
Mon Jul 23 09:17:13 UTC 2012 - drahn@suse.com