From 1461f5bfdff844e5d54717d1718bdd3f27839315c0ffc2214f730829c0ce1471 Mon Sep 17 00:00:00 2001 From: Martin Hauke Date: Mon, 3 Jun 2024 15:02:09 +0000 Subject: [PATCH] Accepting request 1174680 from home:m407:branches:network:vpn - Update to version 1.3.0 * Switch to https://github.com/nodejs/llhttp from http-parser. http-parser was a liability as an unmaintained project (#598) * Bump the number of groups per account from 128 to 512 (#219) * Allow connecting users to select an authgroup by appending the group name to the URL, as in https://vpn.example.com/groupname; this introduces the select-group-by-url config option (#597). * Informational messages due to configuration loading are not printed during worker initialization. - Update to version 1.2.4 * Get connection speed limits (traffic shaping) from RADIUS (#554) * Fix logging to stderr: add missing newline. * Fixed compatibility with AnyConnect clients on Linux (#544) * Detect the new AnyConnect-compatible identifier of OpenConnect clients * occtl: Print bit rates as kb/s. - Update to version 1.2.3 * Treat unknown clients as capable of IPv6 routes and DNS servers * Introduced new ocserv options --log-stderr and --syslog that redirect logging to stderr or syslog explicitly. The stderr option allows for better integration with logging on containers or under systemd. The default remains syslog. * Warn when more than 2 DNS server IPv6 addresses are sent by Radius. * Improved server shutdown (#563) * Modified Camouflage functionality to allow AnyConnect clients (#544) * ocserv-fw: Move under libexec. * ocserv-fw: Fixed clean_all_rules logic on multiple similar devices (!384) * occtl: added machine-readable raw_connected_at field for user stats OBS-URL: https://build.opensuse.org/request/show/1174680 OBS-URL: https://build.opensuse.org/package/show/network:vpn/ocserv?expand=0&rev=53 --- ocserv-1.2.2.tar.xz | 3 --- ocserv-1.2.2.tar.xz.sig | Bin 442 -> 0 bytes ocserv-1.3.0.tar.xz | 3 +++ ocserv-1.3.0.tar.xz.sig | Bin 0 -> 442 bytes ocserv.changes | 31 +++++++++++++++++++++++++++++++ ocserv.spec | 5 +++-- 6 files changed, 37 insertions(+), 5 deletions(-) delete mode 100644 ocserv-1.2.2.tar.xz delete mode 100644 ocserv-1.2.2.tar.xz.sig create mode 100644 ocserv-1.3.0.tar.xz create mode 100644 ocserv-1.3.0.tar.xz.sig diff --git a/ocserv-1.2.2.tar.xz b/ocserv-1.2.2.tar.xz deleted file mode 100644 index 3d01956..0000000 --- a/ocserv-1.2.2.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:6e3c7a2ee9e9b4d3621de66e155fd99eb02c0134b9f42cfbc86d3979e485c719 -size 751548 diff --git a/ocserv-1.2.2.tar.xz.sig b/ocserv-1.2.2.tar.xz.sig deleted file mode 100644 index ed27ef31e3f9e42e0309c353c30be0446a47efeff8b67c0f294e5411c32fddb2..0000000000000000000000000000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 442 zcmV;r0Y(0a0k;GI0SEvc79j*5LP3cI*dS`BRLtBd?pV2&hEZ_^0%Z)AB>)Nu5Gn3h zxt4}eait6lA5Y4H-XMyHHBQZ!2Fpsri0bkrMR&o4Rr2IRbVz#}%dA<8lsE}-vvr5l z^)3DD*zD0NlgH^uAqkqYvpvcgf)syDtz)}!cuhu9SgENxxtsbjt!A(3Or*$`wN5|K zzML1kUl!r;-eDm$413se2?5+f(jWTt~9dGy0 zOqiXz;FGGasj0p#)|FmoydeM9m0eFyWps(Dyd>!<)PE{`OGKRC4aDfNxu<7#Qp)%H z1vifA@2k-!o$OLCZ1&0Fbiwl>D_)P%V!;X~|xDF+xMWr0`biUj8!ij9MnpPPM zU8=UK@1p^=^0!q^=eVnJI+3Uhbiyz6`*PKe<<2ji0~N+c&xa8B#_Rx3{A$l9X;D!c;q}}cs9w$W~OSp!l>-!-fn zUItIV2Ojj^a=6z7uZMTOLRZWH~^sO@p>5+E%8S+hHZY8YoK2c#eQ z8I$!Joa}WDLh + +- Update to version 1.3.0 + * Switch to https://github.com/nodejs/llhttp from http-parser. + http-parser was a liability as an unmaintained project (#598) + * Bump the number of groups per account from 128 to 512 (#219) + * Allow connecting users to select an authgroup by appending the + group name to the URL, as in https://vpn.example.com/groupname; + this introduces the select-group-by-url config option (#597). + * Informational messages due to configuration loading are not printed + during worker initialization. +- Update to version 1.2.4 + * Get connection speed limits (traffic shaping) from RADIUS (#554) + * Fix logging to stderr: add missing newline. + * Fixed compatibility with AnyConnect clients on Linux (#544) + * Detect the new AnyConnect-compatible identifier of OpenConnect clients + * occtl: Print bit rates as kb/s. +- Update to version 1.2.3 + * Treat unknown clients as capable of IPv6 routes and DNS servers + * Introduced new ocserv options --log-stderr and --syslog that redirect + logging to stderr or syslog explicitly. The stderr option allows for better + integration with logging on containers or under systemd. The default remains + syslog. + * Warn when more than 2 DNS server IPv6 addresses are sent by Radius. + * Improved server shutdown (#563) + * Modified Camouflage functionality to allow AnyConnect clients (#544) + * ocserv-fw: Move under libexec. + * ocserv-fw: Fixed clean_all_rules logic on multiple similar devices (!384) + * occtl: added machine-readable raw_connected_at field for user stats + ------------------------------------------------------------------- Mon Feb 26 12:40:44 UTC 2024 - Dominique Leuenberger diff --git a/ocserv.spec b/ocserv.spec index c8f93bb..0f2f158 100644 --- a/ocserv.spec +++ b/ocserv.spec @@ -17,7 +17,7 @@ Name: ocserv -Version: 1.2.2 +Version: 1.3.0 Release: 0 Summary: OpenConnect VPN Server License: GPL-2.0-only @@ -45,6 +45,7 @@ BuildRequires: firewall-macros BuildRequires: freeradius-client-devel BuildRequires: gperf BuildRequires: gpg2 +BuildRequires: ipcalc BuildRequires: libev-devel #!BuildIgnore: libevent-devel BuildRequires: libgnutls-devel >= 3.1.10 @@ -145,7 +146,7 @@ sed -i '/^\[Service\].*/a ExecStartPre=%{_sbindir}/ocserv-forwarding --enable' % %{_bindir}/occtl %{_bindir}/ocpasswd %{_bindir}/ocserv-script -%{_bindir}/ocserv-fw +%{_libexecdir}/ocserv-fw %{_sbindir}/ocserv %{_sbindir}/ocserv-forwarding %{_sbindir}/ocserv-worker