Accepting request 1178350 from network:vpn

OBS-URL: https://build.opensuse.org/request/show/1178350
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ocserv?expand=0&rev=24

ocserv-1.2.2.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:6e3c7a2ee9e9b4d3621de66e155fd99eb02c0134b9f42cfbc86d3979e485c719
-size 751548

ocserv-1.3.0.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5c562c3ea1032065ef43d6075e5722f94ce6a7a780d6a2b4c6d54c1ce3921965
+size 770596

ocserv.changes

@@ -1,3 +1,34 @@
+-------------------------------------------------------------------
+Wed May 15 12:58:13 UTC 2024 - Андрей Кувшинов <m407@mail.ru>
+
+- Update to version 1.3.0
+  * Switch to https://github.com/nodejs/llhttp from http-parser.
+    http-parser was a liability as an unmaintained project (#598)
+  * Bump the number of groups per account from 128 to 512 (#219)
+  * Allow connecting users to select an authgroup by appending the
+    group name to the URL, as in https://vpn.example.com/groupname;
+    this introduces the select-group-by-url config option (#597).
+  * Informational messages due to configuration loading are not printed
+    during worker initialization.
+- Update to version 1.2.4
+  * Get connection speed limits (traffic shaping) from RADIUS (#554)
+  * Fix logging to stderr: add missing newline.
+  * Fixed compatibility with AnyConnect clients on Linux (#544)
+  * Detect the new AnyConnect-compatible identifier of OpenConnect clients
+  * occtl: Print bit rates as kb/s.
+- Update to version 1.2.3
+  * Treat unknown clients as capable of IPv6 routes and DNS servers
+  * Introduced new ocserv options --log-stderr and --syslog that redirect
+    logging to stderr or syslog explicitly. The stderr option allows for better
+    integration with logging on containers or under systemd. The default remains
+    syslog.
+  * Warn when more than 2 DNS server IPv6 addresses are sent by Radius.
+  * Improved server shutdown (#563)
+  * Modified Camouflage functionality to allow AnyConnect clients (#544)
+  * ocserv-fw: Move under libexec.
+  * ocserv-fw: Fixed clean_all_rules logic on multiple similar devices (!384)
+  * occtl: added machine-readable raw_connected_at field for user stats
+
 -------------------------------------------------------------------
 Mon Feb 26 12:40:44 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
 

ocserv.spec

@@ -17,7 +17,7 @@
 
 
 Name:           ocserv
-Version:        1.2.2
+Version:        1.3.0
 Release:        0
 Summary:        OpenConnect VPN Server
 License:        GPL-2.0-only
@@ -45,6 +45,7 @@ BuildRequires:  firewall-macros
 BuildRequires:  freeradius-client-devel
 BuildRequires:  gperf
 BuildRequires:  gpg2
+BuildRequires:  ipcalc
 BuildRequires:  libev-devel
 #!BuildIgnore:  libevent-devel
 BuildRequires:  libgnutls-devel >= 3.1.10
@@ -145,7 +146,7 @@ sed -i '/^\[Service\].*/a ExecStartPre=%{_sbindir}/ocserv-forwarding --enable' %
 %{_bindir}/occtl
 %{_bindir}/ocpasswd
 %{_bindir}/ocserv-script
-%{_bindir}/ocserv-fw
+%{_libexecdir}/ocserv-fw
 %{_sbindir}/ocserv
 %{_sbindir}/ocserv-forwarding
 %{_sbindir}/ocserv-worker