forked from pool/stunnel
Accepting request 355231 from home:dstoecker
Fix was extremely easy, so I did it. OBS-URL: https://build.opensuse.org/request/show/355231 OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=74
This commit is contained in:
parent
2b40af0db6
commit
fd5e6cd131
@ -1,3 +0,0 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:8ad628a6948153cdb2044283f6988384a30585ea7e14778c2ee616a6678cb83f
|
||||
size 627014
|
@ -1,17 +0,0 @@
|
||||
-----BEGIN PGP SIGNATURE-----
|
||||
Version: GnuPG v1
|
||||
|
||||
iQIVAwUAVbn7ti78f/DUFuAUAQqYdw//SlfjSMAc1bDEwoGMYgoNtaEMZt+MZJkT
|
||||
U6rk2BJ9jIbf9k2LAtshYF9dJ3bllglkfn3BhtIwyGormvr1GypFDO1ExfGCg/Sw
|
||||
6mQTUd45XSylefg3n/JJcmIulyw/Tufq1951Uzfwyus8hPpar47O2Fs3e+kadq1T
|
||||
AZGELfTT0y2EIquoP2f3vZQXukinij5ItnU4uD+lfbefEue1HyQta6Pk7tFA2bzJ
|
||||
MbdszaIL5CKMhRDW0f/1vGSVNZB1+9BYTsUCsw4XZiaEO1100ity55KTEoZxSfCb
|
||||
2XAmH0n0KRBZGwTCKNsC1GnHGcDd+c3XXuRZDbIW+sF/H1n/78psaXFpNkaUEzVW
|
||||
GgdrqbKVuRF17c9pfUqUL7AETyMdmpCR6Xn6PZEG4NhZzEgmj5Oaa6hRnCjnet70
|
||||
fpZmgyad1yDp1F3+wH5efdsW+YWr+otYGF0B3V8uz+aCXAQS9INDu2FIieMqUdVk
|
||||
u+s48AiOBwicJzTmZRK0GRkYjaDgEtimTEIkIBjHKFGWnynSCz299HWtP/JvI44c
|
||||
vYpyXFMOXHm5Rm3XbzmScFVtrCVb+Y2RJ0IN9GNnofMEVzh6OXX0rPnHoGgVi/vi
|
||||
pXqbQPgj5dlKNTDkYbd3P0joi/NQYysOnFq6p7Oy0QEok0iEniQoQqZTLMkV72Ne
|
||||
DHT+LZhopL4=
|
||||
=dNHS
|
||||
-----END PGP SIGNATURE-----
|
3
stunnel-5.29.tar.gz
Normal file
3
stunnel-5.29.tar.gz
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:43909625403ea634fa7cb8399d58faf8e7f11c1b7b29097491469951f56df551
|
||||
size 637806
|
17
stunnel-5.29.tar.gz.asc
Normal file
17
stunnel-5.29.tar.gz.asc
Normal file
@ -0,0 +1,17 @@
|
||||
-----BEGIN PGP SIGNATURE-----
|
||||
Version: GnuPG v1
|
||||
|
||||
iQIVAwUAVo/tjC78f/DUFuAUAQrRSRAAtD4jEiR1O847nPxc71k+O3ChVowVPQRR
|
||||
jQnLQO8v5sgFhD6hwNTyhZhprhtflLghF7xfmqL/offY4ZPoi6EhIZIrXBvJUe3Q
|
||||
kHQUhQF3wm73Kwg16adPR+Bmx1O7SknFWH7Y/0kjU7LWcOpm6Mfd4DLbe7DIxapc
|
||||
WNH0e1A+knQhZlEBDzepeKtmj26U6l1dNB69OKsWd260cgnqz690TFEK/Ks+g7fX
|
||||
K29IpvfO79vOAa9UzUpCSYA0jFgcCI7rhBvM5urYO+rYG+oVearVeAmBPQbGHBwV
|
||||
TLIIU0W0B+84kX4rTkDO0uzhlMIRYvk/umID3n2g1z94nlvs1V2zfdTuEh1lUAi1
|
||||
QfWrB8ENsx8KqEcbcZpAgjAQL4/YFLTHLuNRR567ZBFl4IfXJmhyyIeV2sCxxj80
|
||||
9YY/ti7C93Y9RRvj5gc9/LavwNkCP9uEpkrdODKziUjkFkSYgxITKZ3Y4oq6IqID
|
||||
Iby/0ZLb444DHhrYuQnQUDQgGELkLwo1RClOjCcV0SNwaM0yDhikV5sQ8Vo9cqrH
|
||||
s5Krx6Oe/4OZhEi09w84XA97XB4P2ZehSrg31r4ot0snayqSgL28Q56w1dgb1gLE
|
||||
GHHQvmVXYWkGwa5J2pOkFMDuwc8kqAwSjVaRIN0da2lOIgsdKX7n01a2Qhjf4yWp
|
||||
HRQz3ikX8TI=
|
||||
=tZoN
|
||||
-----END PGP SIGNATURE-----
|
@ -1,386 +0,0 @@
|
||||
#
|
||||
# spec file for package stunnel
|
||||
#
|
||||
# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
|
||||
#
|
||||
# All modifications and additions to the file contributed by third parties
|
||||
# remain the property of their copyright owners, unless otherwise agreed
|
||||
# upon. The license for this file, and modifications and additions to the
|
||||
# file, is the same license as for the pristine package itself (unless the
|
||||
# license for the pristine package is not an Open Source License, in which
|
||||
# case the license is the MIT License). An "Open Source License" is a
|
||||
# license that conforms to the Open Source Definition (Version 1.9)
|
||||
# published by the Open Source Initiative.
|
||||
|
||||
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
||||
#
|
||||
|
||||
Name: stunnel
|
||||
Version: 5.03
|
||||
Release: 0
|
||||
Summary: Universal SSL Tunnel
|
||||
License: GPL-2.0+
|
||||
Group: Productivity/Networking/Security
|
||||
Url: http://www.stunnel.org/
|
||||
PreReq: /usr/sbin/useradd fileutils textutils %insserv_prereq %fillup_prereq
|
||||
Source: ftp://ftp.stunnel.org/stunnel/%{name}-%{version}.tar.gz
|
||||
Source1: stunnel.conf
|
||||
Source2: stunnel.README
|
||||
Source3: sysconfig.syslog-stunnel
|
||||
Source4: stunnel.rc
|
||||
Source5: stunnel.service
|
||||
Patch0: stunnel-listenqueue-option.patch
|
||||
Patch1: stunnel3-binpath.patch
|
||||
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
||||
%define VENDOR openSUSE
|
||||
BuildRequires: tcpd-devel zlib-devel
|
||||
BuildRequires: libopenssl1-devel
|
||||
|
||||
%if 0%{?suse_version} >= 1210
|
||||
BuildRequires: systemd
|
||||
%{?systemd_requires}
|
||||
%define has_systemd 1
|
||||
%endif
|
||||
|
||||
%description
|
||||
The stunnel program is designed to work as an SSL encryption wrapper
|
||||
between remote clients and local (inetd-startable) or remote
|
||||
servers. The concept is that having non-SSL aware daemons running on
|
||||
your system you can easily set them to communicate with clients over a
|
||||
secure SSL channels. Stunnel can be used to add SSL functionality to
|
||||
commonly used inetd daemons, such as POP-2, POP-3, and IMAP servers,
|
||||
without any changes to the program code.
|
||||
|
||||
%package doc
|
||||
Summary: Documentation for the universal SSL Tunnel
|
||||
Group: Productivity/Networking/Security
|
||||
Requires: stunnel = %{version}
|
||||
|
||||
%description doc
|
||||
This package contains additional documentation of the universal SSL tunnel
|
||||
stunnel.
|
||||
|
||||
%prep
|
||||
%setup -q -n stunnel-%{version}
|
||||
%patch0 -p0
|
||||
%patch1 -p0
|
||||
|
||||
%build
|
||||
sed -i 's/-m 1770 -g nogroup//g' tools/Makefile.in
|
||||
%configure --disable-static --bindir=%{_sbindir}
|
||||
make %{?_smp_mflags} LDADD="-pie -Wl,-z,defs,-z,relro"
|
||||
|
||||
%install
|
||||
make install DESTDIR=$RPM_BUILD_ROOT
|
||||
|
||||
cp -p %{S:1} tools/stunnel.conf-sample.%VENDOR
|
||||
cp -p %{S:2} README.%VENDOR
|
||||
mkdir -p $RPM_BUILD_ROOT/var/adm/fillup-templates
|
||||
cp -p %{S:3} $RPM_BUILD_ROOT/var/adm/fillup-templates/
|
||||
%if 0%{?has_systemd}
|
||||
install -D -m 0644 $RPM_SOURCE_DIR/stunnel.service $RPM_BUILD_ROOT/%_unitdir/stunnel.service
|
||||
%else
|
||||
mkdir -p $RPM_BUILD_ROOT/etc/init.d/
|
||||
install -m 744 $RPM_SOURCE_DIR/stunnel.rc $RPM_BUILD_ROOT/etc/init.d/stunnel
|
||||
ln -s ../../etc/init.d/stunnel $RPM_BUILD_ROOT/usr/sbin/rcstunnel
|
||||
%endif
|
||||
mv $RPM_BUILD_ROOT/%{_sysconfdir}/stunnel/stunnel.conf-sample tools/stunnel.conf-sample
|
||||
rm $RPM_BUILD_ROOT/%{_libdir}/stunnel/*.la
|
||||
rm -rf $RPM_BUILD_ROOT/usr/share/doc/packages/stunnel/INSTALL
|
||||
rm -rf $RPM_BUILD_ROOT/usr/share/doc/packages/stunnel/INSTALL.WCE
|
||||
rm -rf $RPM_BUILD_ROOT/usr/share/doc/packages/stunnel/INSTALL.W32
|
||||
rm -rf $RPM_BUILD_ROOT/usr/share/doc/packages/stunnel/tools/stunnel.cnf
|
||||
rm -rf $RPM_BUILD_ROOT/usr/share/doc/stunnel
|
||||
mkdir -p $RPM_BUILD_ROOT/var/lib/stunnel/{bin,etc,dev,%_lib,sbin,var/run}
|
||||
|
||||
%clean
|
||||
rm -rf $RPM_BUILD_ROOT
|
||||
|
||||
%pre
|
||||
if ! /usr/bin/getent passwd stunnel >/dev/null; then
|
||||
%{_sbindir}/useradd -r -c "Daemon user for stunnel (universal SSL tunnel)" -g nogroup -s /bin/false \
|
||||
-d /var/lib/stunnel stunnel 2> /dev/null || :
|
||||
fi
|
||||
|
||||
%if 0%{?has_systemd}
|
||||
%service_add_pre %{name}.service
|
||||
%endif
|
||||
|
||||
%post
|
||||
%if 0%{?has_systemd}
|
||||
%service_add_post %{name}.service
|
||||
%else
|
||||
%{fillup_and_insserv -f}
|
||||
%endif
|
||||
%{fillup_only -ans syslog stunnel}
|
||||
if ! test -s etc/stunnel/stunnel.conf; then
|
||||
cp -p usr/share/doc/packages/stunnel/stunnel.conf-sample etc/stunnel/stunnel.conf
|
||||
echo copying default config file to /etc/stunnel/stunnel.conf
|
||||
fi
|
||||
# first installation?
|
||||
if [ ${FIRST_ARG:-0} = 1 ]; then
|
||||
if ! test -f etc/stunnel/stunnel.pem; then
|
||||
cat usr/share/doc/packages/stunnel/README.%VENDOR
|
||||
fi
|
||||
fi
|
||||
|
||||
|
||||
|
||||
%preun
|
||||
%if 0%{?has_systemd}
|
||||
%service_del_preun %{name}.service
|
||||
%else
|
||||
%stop_on_removal stunnel
|
||||
%endif
|
||||
|
||||
%postun
|
||||
%if 0%{?has_systemd}
|
||||
%service_del_postun %{name}.service
|
||||
%else
|
||||
%restart_on_update stunnel
|
||||
%insserv_cleanup
|
||||
%endif
|
||||
|
||||
%files
|
||||
%defattr(-, root, root)
|
||||
%doc COPYING COPYRIGHT.GPL CREDITS
|
||||
%doc README.%VENDOR
|
||||
%doc tools/ca.*
|
||||
%doc tools/importCA.*
|
||||
%doc tools/stunnel.conf-sample
|
||||
%{_sbindir}/*
|
||||
%{_libdir}/stunnel
|
||||
%{_mandir}/man8/*
|
||||
%dir %attr(700,root,root) %{_sysconfdir}/stunnel
|
||||
%dir %attr(755,root,root) /var/lib/stunnel
|
||||
%dir %attr(755,root,root) /var/lib/stunnel/bin
|
||||
%dir %attr(755,root,root) /var/lib/stunnel/etc
|
||||
%dir %attr(755,root,root) /var/lib/stunnel/dev
|
||||
%dir %attr(755,root,root) /var/lib/stunnel/%_lib
|
||||
%dir %attr(755,root,root) /var/lib/stunnel/sbin
|
||||
%dir %attr(755,root,root) /var/lib/stunnel/var
|
||||
%dir %attr(755,stunnel,root) /var/lib/stunnel/var/run
|
||||
/var/adm/fillup-templates/sysconfig.syslog-stunnel
|
||||
%if 0%{?has_systemd}
|
||||
%_unitdir/stunnel.service
|
||||
%else
|
||||
%config /etc/init.d/*
|
||||
%endif
|
||||
|
||||
%files doc
|
||||
%defattr(-,root,root)
|
||||
%doc AUTHORS BUGS COPYING COPYRIGHT.GPL CREDITS ChangeLog NEWS PORTS
|
||||
%doc README TODO
|
||||
%doc doc/stunnel.html
|
||||
%doc doc/stunnel.*.html
|
||||
%doc doc/en/*
|
||||
%doc doc/pl
|
||||
|
||||
%changelog
|
||||
* Wed Feb 18 2009 - vetter@physik.uni-wuerzburg.de
|
||||
- updated to 4.26
|
||||
- adjust ownership of /var/lib/stunnel/var/run (pid file creation)
|
||||
* Thu May 10 2007 - ro@suse.de
|
||||
- added openssl to buildrequires
|
||||
* Mon Apr 02 2007 - rguenther@suse.de
|
||||
- add zlib-devel BuildRequires
|
||||
* Tue Oct 17 2006 - poeml@suse.de
|
||||
- there is no SuSEconfig.syslog script anymore, thus remove the
|
||||
YaST hint from the sysconfig template
|
||||
* Wed Sep 27 2006 - poeml@suse.de
|
||||
- upstream 4.16
|
||||
* New features sponsored by Hewlett-Packard
|
||||
- A new global option to control engine: engineCtrl = <command>[:<parameter>]
|
||||
- A new service-level option to select engine to read private key: engineNum = <engine number>
|
||||
- OCSP support: ocsp = <URL>
|
||||
* New features
|
||||
- A new option to select version of SSL protocol: sslVersion = all|SSLv2|SSLv3|TLSv1
|
||||
- Visual Studio vc.mak by David Gillingham <dgillingham@gmail.com>.
|
||||
- OS2 support by Paul Smedley (http://smedley.info)
|
||||
* Bugfixes
|
||||
- An ordinary user can install stunnel again.
|
||||
- Compilation problem with --enable-dh fixed.
|
||||
- Some minor compilation warnings fixed.
|
||||
- Service-level CRL cert store implemented.
|
||||
- GPF on protocol negotiations fixed.
|
||||
- Problem detecting addrinfo() on Tru64 fixed.
|
||||
- Default group is now detected by configure script.
|
||||
- Check for maximum number of defined services added.
|
||||
- OpenSSL_add_all_algorithms() added to SSL initialization.
|
||||
- configure script sections reordered to detect pthread library funcions.
|
||||
- RFC 2487 autdetection improved (thx to Hans Werner Strube). High
|
||||
resolution s_poll_wait() not currently supported by UCONTEXT threading.
|
||||
- More precise description of cert directory file names (thx to Muhammad
|
||||
Muquit).
|
||||
* Other changes
|
||||
- Maximum number of services increased from 64 to 256 when poll() is used.
|
||||
- add BuildRequires: tcp_wrappers gcc-c++ for building on Fedora
|
||||
- remove doc files installed by make install, which are picked up
|
||||
by %%doc
|
||||
* Fri Jun 23 2006 - poeml@suse.de
|
||||
- build as non-root
|
||||
- build with fPIE/pie on SUSE 10.0 or newer, or on any other
|
||||
platform
|
||||
- fix BuildRequires for Fedora Core, and wrap suse_version macros
|
||||
- upstream 4.15
|
||||
* Release notes
|
||||
- There are a lot of new features in this version. I recommend
|
||||
to test it well before upgrading your mission-critical systems.
|
||||
[note by packager: out since 3 months, without major problems]
|
||||
* Bugfixes
|
||||
- Default threading model changed to pthread for better portability.
|
||||
- DH parameters are not included in the certificate by default.
|
||||
* New features sponsored by Software House http://www.swhouse.com/
|
||||
- Most SSL-related options (including client, cert, key) are now
|
||||
available on service level, so it is possible to have an SSL
|
||||
client and an SSL server in a single stunnel process.
|
||||
* New features
|
||||
- Client mode CONNECT protocol support (RFC 2817 section 5.2).
|
||||
http://www.ietf.org/rfc/rfc2817.txt
|
||||
- Retrying exec+connect services added.
|
||||
- make install now tries to create /var/lib/stunnel chmoded 1770
|
||||
and group nogroup, which we don't do.
|
||||
* Wed Jan 25 2006 - mls@suse.de
|
||||
- converted neededforbuild to BuildRequires
|
||||
* Sun Nov 27 2005 - lmuelle@suse.de
|
||||
- update to 4.14
|
||||
* Thu Oct 06 2005 - poeml@suse.de
|
||||
- fix hang/segfault upon connect. Use pthreads by removing
|
||||
configure check for ucontext.h [#119650]
|
||||
* Tue Aug 30 2005 - poeml@suse.de
|
||||
- fix parsing of ldd output when setting up the chroot jail [#114090]
|
||||
* Tue Jun 21 2005 - poeml@suse.de
|
||||
- update to 4.10
|
||||
- Some bugfixes and code cleanup were done.
|
||||
- A new user-level non-preemptive thread model was added for even
|
||||
greater scalability.
|
||||
- The stunnel3 script was improved to be more compatible with
|
||||
getopt.
|
||||
- add post-4.10 stunnel-4.10-inetd.patch
|
||||
- compile with tcp wrappers
|
||||
- compile as PIE and link with -z relro
|
||||
* Tue Jan 04 2005 - poeml@suse.de
|
||||
- update to 4.07
|
||||
* Bugfixes
|
||||
- Problem with infinite poll() timeout negative, but not equal
|
||||
to -1 fixed.
|
||||
- Problem with a file descriptor ready to be read just after a
|
||||
non-blocking connect call fixed.
|
||||
- Compile error with EAI_NODATA not defined or equal to
|
||||
EAI_NONAME fixed.
|
||||
- IP address and TCP port textual representation length (IPLEN)
|
||||
increased to 128 bytes.
|
||||
- OpenSSL engine support is only used if engine.h header file
|
||||
exists.
|
||||
- Broken NT Service mode on WIN32 platform fixed.
|
||||
- Support for IPv4-only WIN32 machines restored.
|
||||
* Tue Dec 28 2004 - poeml@suse.de
|
||||
- update to 4.06
|
||||
In this version, IPv6 support, compression support, hardware
|
||||
engine selection and many other features were added. A new
|
||||
stunnel3 Perl script to emulate version 3.x command line options
|
||||
was added. poll() is used instead of select() where available,
|
||||
so FD_SETSIZE no longer limits the number of concurrent
|
||||
connections.
|
||||
- add stunnel-4.06-nfds.dif
|
||||
stunnel-4.06-poll_timeout.patch
|
||||
stunnel-4.06-race_condition.patch
|
||||
* Thu Nov 11 2004 - poeml@suse.de
|
||||
- fix filelist for /usr/lib
|
||||
* Fri Mar 05 2004 - poeml@suse.de
|
||||
- update to 4.05. new features (excerpt):
|
||||
* New feature sponsored by SURFnet http://www.surfnet.nl/
|
||||
- Support for CIFS aka SMB protocol SSL negotiation.
|
||||
* New features
|
||||
- CRL support with new CApath and CAfile global options.
|
||||
- New -fd command line parameter to read configuration
|
||||
from a specified file descriptor instead of a file.
|
||||
- accept is reported as error with [section] defined (in
|
||||
stunnel 4.04 it was silently ignored causing problems
|
||||
for lusers that did not read the fine manual).
|
||||
- Use fcntl() instead of ioctlsocket() to set socket
|
||||
nonblocking when it is supported.
|
||||
- Basic support for hardware engines with OpenSSL >= 0.9.7.
|
||||
- French manual by Bernard Choppy <choppy@imaginet.fr>.
|
||||
- Thread stack size reduced to 64KB for maximum scalability.
|
||||
- Added optional code to debug thread stack usage.
|
||||
- Support for nsr-tandem-nsk (thx to Tom Bates <tom.bates@hp.com>).
|
||||
* Bugfixes
|
||||
- TCP wrappers code moved to CRIT_NTOA critical section
|
||||
since it uses static inet_ntoa() result buffer.
|
||||
- SSL_ERROR_SYSCALL handling problems fixed.
|
||||
- added code to retry nonblocking SSL_shutdown() calls.
|
||||
- Use FD_SETSIZE instead of 16 file descriptors in inetd
|
||||
mode.
|
||||
- fdscanf groks lowercase protocol negotiation commands.
|
||||
- Libwrap detection bug in ./configure script fixed.
|
||||
- Some other minor updates.
|
||||
- show readme only at first installation
|
||||
* Tue Aug 26 2003 - poeml@suse.de
|
||||
- add Config: syslog-ng to sysconfig.syslog-stunnel
|
||||
* Thu Aug 14 2003 - poeml@suse.de
|
||||
- add activation metadata to sysconfig template [#28954]
|
||||
- rename README.SuSE to README.{SuSE,UnitedLinux}
|
||||
- don't show blurb in %%post if a certificate exists
|
||||
* Tue Aug 12 2003 - poeml@suse.de
|
||||
- implement 'try-restart' in rcstunnel correctly [#28636]
|
||||
* Wed Jul 30 2003 - poeml@suse.de
|
||||
- add an example configuration for tunneling MySQL
|
||||
- make stunnel3_wrapper compatible to more shells, and merge it
|
||||
with stunnel3_convert (which becomes a symlink)
|
||||
- new macros for stop/restart of services on rpm update/removal
|
||||
* Tue May 13 2003 - poeml@suse.de
|
||||
- delete (from the build root) files not to be packaged
|
||||
- package the libtool library file
|
||||
- add a commented option to the sample configuration
|
||||
* Thu Mar 13 2003 - poeml@suse.de
|
||||
- rc.stunnel: do not write the startup log to a world writable
|
||||
directory [cf. #25239]
|
||||
* Mon Feb 17 2003 - poeml@suse.de
|
||||
- Version 4.04, 2003.01.12, urgency: MEDIUM:
|
||||
* New features [excerpt]
|
||||
- New 'options' configuration option to setup
|
||||
OpenSSL library hacks with SSL_CTX_set_options().
|
||||
- 'service' option also changes the name for
|
||||
TCP Wrappers access control in inetd mode.
|
||||
- SSL is negotiated before connecting remote host
|
||||
or spawning local process whenever possible.
|
||||
- REMOTE_HOST variable is always placed in the
|
||||
enrivonment of a process spawned with 'exec'.
|
||||
- Whole SSL error stack is dumped on errors.
|
||||
- 'make cert' rule is back (was missing since 4.00).
|
||||
- Manual page updated (special thanks to Brian Hatch).
|
||||
* Bugfixes
|
||||
- Major code cleanup (thx to Steve Grubb <linux_4ever@yahoo.com>).
|
||||
- Unsafe functions are removed from SIGCHLD handler.
|
||||
- Several bugs in auth_user() fixed.
|
||||
- Incorrect port when using 'local' option fixed.
|
||||
- OpenSSL tools '-rand' option is no longer directly
|
||||
used with a device (like '/dev/urandom').
|
||||
Temporary random file is created with 'dd' instead.
|
||||
- fix typo in conf file example
|
||||
* Wed Feb 12 2003 - mmj@suse.de
|
||||
- Add sysconfig metadata [#22699]
|
||||
* Thu Oct 31 2002 - poeml@suse.de
|
||||
- update to 4.03
|
||||
- add stunnel3_wrapper that translates the cmdline arguments into a
|
||||
configuration file
|
||||
- fix default path of pidfile
|
||||
- more examples
|
||||
* Fri Oct 25 2002 - poeml@suse.de
|
||||
- write the pid file before dropping the privileges
|
||||
* Fri Oct 25 2002 - poeml@suse.de
|
||||
- major version upgrade to 4.02
|
||||
- better permissions for /etc/stunnel and keys [#18557]
|
||||
- run as "stunnel" user in chroot jail
|
||||
- add sysconfig.syslog-stunnel template and /var/lib/stunnel/dev
|
||||
for an additional syslog socket
|
||||
- added init script and example configuration
|
||||
* Sat Jul 27 2002 - adrian@suse.de
|
||||
- use %%run_ldconfig
|
||||
* Thu Mar 08 2001 - bk@suse.de
|
||||
- update to 3.14 and fix localstatedir (/var/run/stunnel)
|
||||
* Mon Feb 05 2001 - bk@suse.de
|
||||
- fixed neededforbuild
|
||||
* Sun Feb 04 2001 - bk@suse.de
|
||||
- new package
|
@ -1,26 +0,0 @@
|
||||
diff -ru stunnel-5.22-orig/src/verify.c stunnel-5.22/src/verify.c
|
||||
--- stunnel-5.22-orig/src/verify.c 2015-07-30 12:08:46.000000000 +0200
|
||||
+++ stunnel-5.22/src/verify.c 2015-08-06 09:26:59.129991000 +0200
|
||||
@@ -717,6 +717,7 @@
|
||||
s_log(LOG_DEBUG, "OCSP: Connected %s:%s", host, port);
|
||||
|
||||
/* OCSP protocol communication loop */
|
||||
+#if OPENSSL_VERSION_NUMBER>=0x10000000L
|
||||
req_ctx=OCSP_sendreq_new(bio, path, NULL, -1);
|
||||
if(!req_ctx) {
|
||||
sslerror("OCSP: OCSP_sendreq_new");
|
||||
@@ -728,6 +729,14 @@
|
||||
}
|
||||
if(!OCSP_REQ_CTX_set1_req(req_ctx, req))
|
||||
goto cleanup;
|
||||
+#else
|
||||
+ /* there is no way to send the Host header with older OpenSSL versions */
|
||||
+ req_ctx=OCSP_sendreq_new(bio, path, req, -1);
|
||||
+ if(!req_ctx) {
|
||||
+ sslerror("OCSP: OCSP_sendreq_new");
|
||||
+ goto cleanup;
|
||||
+ }
|
||||
+#endif
|
||||
while(OCSP_sendreq_nbio(&resp, req_ctx)==-1) {
|
||||
s_poll_init(c->fds);
|
||||
s_poll_add(c->fds, c->fd, BIO_should_read(bio), BIO_should_write(bio));
|
@ -1,3 +1,11 @@
|
||||
-------------------------------------------------------------------
|
||||
Wed Jan 20 20:13:10 UTC 2016 - opensuse@dstoecker.de
|
||||
|
||||
- update to 5.29
|
||||
- system script restarts stunnel after a crash
|
||||
- readd rcstunnel macro for systemd systems
|
||||
- drop stunnel-ocsp-host.patch (included upstream)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Aug 6 08:16:48 UTC 2015 - drahn@suse.com
|
||||
|
||||
|
@ -5,6 +5,9 @@ After=network.target
|
||||
[Service]
|
||||
ExecStart=/usr/sbin/stunnel
|
||||
Type=forking
|
||||
# stunnel is chrooted, so pidpath is combination of 2 configfile options
|
||||
PIDFile=/var/lib/stunnel/var/run/stunnel.pid
|
||||
Restart=always
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
@ -16,7 +16,7 @@
|
||||
#
|
||||
|
||||
Name: stunnel
|
||||
Version: 5.22
|
||||
Version: 5.29
|
||||
Release: 0
|
||||
Summary: Universal SSL Tunnel
|
||||
License: GPL-2.0+
|
||||
@ -30,7 +30,6 @@ Source3: sysconfig.syslog-stunnel
|
||||
Source4: stunnel.rc
|
||||
Source5: stunnel.service
|
||||
Patch0: stunnel-listenqueue-option.patch
|
||||
Patch1: stunnel-ocsp-host.patch
|
||||
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
||||
%define VENDOR openSUSE
|
||||
BuildRequires: tcpd-devel zlib-devel
|
||||
@ -63,9 +62,6 @@ stunnel.
|
||||
%prep
|
||||
%setup -q -n stunnel-%{version}
|
||||
%patch0 -p0
|
||||
%if 0%{?suse_version} <= 1130
|
||||
%patch1 -p1
|
||||
%endif
|
||||
chmod -x $RPM_BUILD_DIR/stunnel-%{version}/tools/ca.*
|
||||
chmod -x $RPM_BUILD_DIR/stunnel-%{version}/tools/importCA.*
|
||||
|
||||
@ -87,6 +83,7 @@ mkdir -p $RPM_BUILD_ROOT/var/adm/fillup-templates
|
||||
cp -p %{S:3} $RPM_BUILD_ROOT/var/adm/fillup-templates/
|
||||
%if 0%{?has_systemd}
|
||||
install -D -m 0644 $RPM_SOURCE_DIR/stunnel.service $RPM_BUILD_ROOT/%_unitdir/stunnel.service
|
||||
ln -s service $RPM_BUILD_ROOT/usr/sbin/rcstunnel
|
||||
%else
|
||||
mkdir -p $RPM_BUILD_ROOT/etc/init.d/
|
||||
install -m 744 $RPM_SOURCE_DIR/stunnel.rc $RPM_BUILD_ROOT/etc/init.d/stunnel
|
||||
@ -183,4 +180,3 @@ fi
|
||||
%doc doc/stunnel.*.html
|
||||
%doc doc/en/*
|
||||
%doc doc/pl
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user