Dominique Leuenberger
bb9ebc4873
Accepting request 975724 from security:Stunnel
...
OBS-URL: https://build.opensuse.org/request/show/975724
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=31
2022-05-09 16:44:13 +00:00
e2f3f37f34
Accepting request 975537 from home:dirkmueller:Factory
...
- update to 5.64:
* Security bugfixes
- OpenSSL DLLs updated to version 3.0.3.
* New features
- Updated the pkcs11 engine for Windows.
* Bugfixes
- Removed the SERVICE_INTERACTIVE_PROCESS flag in
"stunnel -install".
OBS-URL: https://build.opensuse.org/request/show/975537
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=149
2022-05-09 07:32:17 +00:00
Dominique Leuenberger
b0945e2670
Accepting request 964297 from security:Stunnel
...
OBS-URL: https://build.opensuse.org/request/show/964297
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=30
2022-03-23 19:19:10 +00:00
e24e820cc6
Accepting request 963345 from home:dirkmueller:Factory
...
- update to 5.63:
* Security bugfixes
- OpenSSL DLLs updated to version 3.0.2.
* New features
- Updated stunnel.spec to support bash completion
* Bugfixes
- Fixed possible PRNG initialization crash (thx to Gleydson Soares).
OBS-URL: https://build.opensuse.org/request/show/963345
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=147
2022-03-23 12:57:43 +00:00
Dominique Leuenberger
4c46ba6694
Accepting request 957112 from security:Stunnel
...
OBS-URL: https://build.opensuse.org/request/show/957112
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=29
2022-02-24 17:20:48 +00:00
77877cdc95
Accepting request 957109 from home:pmonrealgonzalez:branches:security:Stunnel
...
- Update to 5.62:
* New features
- Added a bash completion script.
* Bugfixes
- Fixed a transfer() loop bug.
- Update to 5.61:
* New features
- Added new "protocol = capwin" and "protocol = capwinctrl"
configuration file options.
- Rewritten the testing framework in python.
- Added support for missing SSL_set_options() values.
- Updated stunnel.spec to support RHEL8.
* Bugfixes
- Fixed OpenSSL 3.0 build.
- Fixed reloading configuration with "systemctl reload stunnel.service".
- Fixed incorrect messages logged for OpenSSL errors.
- Fixed printing IPv6 socket option defaults on FreeBSD.
- Rebase harden_stunnel.service.patch
- Remove FIPS-related regression tests
- Remove obsolete version checks
OBS-URL: https://build.opensuse.org/request/show/957109
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=146
2022-02-23 15:15:52 +00:00
Dominique Leuenberger
cfe491e169
Accepting request 940847 from security:Stunnel
...
OBS-URL: https://build.opensuse.org/request/show/940847
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=28
2021-12-16 20:19:37 +00:00
c9cc2b83f1
Accepting request 933485 from home:jsegitz:branches:systemdhardening:security:Stunnel
...
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
OBS-URL: https://build.opensuse.org/request/show/933485
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=145
2021-12-16 10:19:47 +00:00
Richard Brown
42a77f97eb
Accepting request 912850 from security:Stunnel
...
OBS-URL: https://build.opensuse.org/request/show/912850
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=27
2021-08-19 08:01:04 +00:00
0e1f4f9ea1
Accepting request 912662 from home:asvetter:branches:security:Stunnel
...
- Update to 5.60:
* New features
- New 'sessionResume' service-level option to allow
or disallow session resumption
- Added support for the new SSL_set_options() values.
- Download fresh ca-certs.pem for each new release.
* Bugfixes
- Fixed 'redirect' with 'protocol'. This combination is
not supported by 'smtp', 'pop3' and 'imap' protocols.
OBS-URL: https://build.opensuse.org/request/show/912662
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=144
2021-08-18 08:28:04 +00:00
Dominique Leuenberger
3d87ccae1f
Accepting request 887332 from security:Stunnel
...
OBS-URL: https://build.opensuse.org/request/show/887332
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=26
2021-04-21 19:00:34 +00:00
536b741d30
Accepting request 885049 from home:dstoecker:branches:security:Stunnel
...
Submitted to author by e-mail.
P.S. The change in the comment line removes a rpm warning.
OBS-URL: https://build.opensuse.org/request/show/885049
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=142
2021-04-21 15:02:39 +00:00
Dominique Leuenberger
c06668890c
Accepting request 884991 from security:Stunnel
...
- Disable testsuite for everything except Tumbleweed since it does not work on Leap/SLE
- update to 5.59:
* new feature: Client-side "protocol = ldap" support
* Fix configuration reload when compression is used
* Fix paths in generated manuals
* Fix test suite fixed not to require external connectivity
- run testsuite during package build
OBS-URL: https://build.opensuse.org/request/show/884991
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=25
2021-04-14 08:10:33 +00:00
6365ab1daf
keyring
...
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=140
2021-04-13 13:26:36 +00:00
3cad4a3038
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=139
2021-04-13 13:22:02 +00:00
581473cb2c
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=138
2021-04-13 13:21:22 +00:00
70744188b9
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=137
2021-04-12 15:29:00 +00:00
027231b2c3
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=136
2021-04-12 15:28:45 +00:00
67c0317787
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=135
2021-04-12 15:28:00 +00:00
7f4c088529
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=134
2021-04-12 15:27:49 +00:00
e52e884b9e
Modified via webui
...
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=132
2021-04-12 15:24:17 +00:00
3410f9475d
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=131
2021-04-12 15:23:45 +00:00
d632faa071
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=130
2021-04-12 14:36:23 +00:00
8ada5fe46b
Accepting request 883808 from home:asvetter:branches:home:AndreasStieger:branches:security:Stunnel
...
- Disable testsuite for everything except Tumbleweed since it does not work on Leap/SLE
- update to 5.59:
* new feature: Client-side "protocol = ldap" support
* Fix configuration reload when compression is used
* Fix paths in generated manuals
* Fix test suite fixed not to require external connectivity
- run testsuite during package build
OBS-URL: https://build.opensuse.org/request/show/883808
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=129
2021-04-08 09:58:42 +00:00
Dominique Leuenberger
3ce5be19e2
Accepting request 874110 from security:Stunnel
...
- Update to 5.58:
* Security bugfixes
- The "redirect" option was fixed to properly handle unauthenticated requests (thx to Martin Stein). boo#1182529
OBS-URL: https://build.opensuse.org/request/show/874110
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=24
2021-02-21 21:14:33 +00:00
3cb932deda
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=127
2021-02-21 08:15:16 +00:00
e03236a509
Accepting request 874103 from home:asvetter:branches:security:Stunnel
...
- Update to 5.58:
* Security bugfixes
- The "redirect" option was fixed to properly handle unauthenticated requests (thx to Martin Stein).
And more bugfixes and new features.
OBS-URL: https://build.opensuse.org/request/show/874103
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=126
2021-02-21 07:21:31 +00:00
Dominique Leuenberger
bb1ad39b78
Accepting request 873188 from security:Stunnel
...
Add boo Number:
Do not replace the active config file: boo#1182376
OBS-URL: https://build.opensuse.org/request/show/873188
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=23
2021-02-18 19:39:51 +00:00
354106f0c2
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=124
2021-02-17 16:17:42 +00:00
Dominique Leuenberger
214743a9e4
Accepting request 866942 from security:Stunnel
...
OBS-URL: https://build.opensuse.org/request/show/866942
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=22
2021-01-27 17:57:43 +00:00
c6b2dad9e6
Accepting request 866858 from home:dstoecker:branches:security:Stunnel
...
- Do not replace the active config file
This setting silently killed my server instance. %config without noreplace should not be used for files which are modified by uses (which files in /etc are).
OBS-URL: https://build.opensuse.org/request/show/866858
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=122
2021-01-26 15:29:15 +00:00
Dominique Leuenberger
f08ddba1ce
Accepting request 854972 from security:Stunnel
...
OBS-URL: https://build.opensuse.org/request/show/854972
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=21
2020-12-12 19:32:02 +00:00
347e382da0
Accepting request 851865 from home:asvetter:branches:security:Stunnel
...
- Remove pidfile from service file fixes start bug: boo#1178533
OBS-URL: https://build.opensuse.org/request/show/851865
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=120
2020-12-11 19:52:27 +00:00
Dominique Leuenberger
d6bf7f8226
Accepting request 841268 from security:Stunnel
...
OBS-URL: https://build.opensuse.org/request/show/841268
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=20
2020-10-12 13:14:40 +00:00
cca48af767
Accepting request 841258 from home:AndreasStieger:branches:security:Stunnel
...
cl fixes for boo#1177580
OBS-URL: https://build.opensuse.org/request/show/841258
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=118
2020-10-12 12:48:37 +00:00
Dominique Leuenberger
f77030271e
Accepting request 841161 from security:Stunnel
...
OBS-URL: https://build.opensuse.org/request/show/841161
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=19
2020-10-12 11:59:35 +00:00
ba3519d3b2
Accepting request 841077 from home:stroeder:branches:security:Stunnel
...
update to 5.57 with security bugfixes
OBS-URL: https://build.opensuse.org/request/show/841077
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=116
2020-10-12 07:54:48 +00:00
Dominique Leuenberger
ba99a21eda
Accepting request 829785 from security:Stunnel
...
OBS-URL: https://build.opensuse.org/request/show/829785
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=18
2020-08-29 18:36:48 +00:00
c18fafa42f
Accepting request 829030 from home:dirkmueller:branches:security:Stunnel
...
- update to 5.56:
- Various text files converted to Markdown format.
- Support for realpath(3) implementations incompatible
with POSIX.1-2008, such as 4.4BSD or Solaris.
- Support for engines without PRNG seeding methods (thx to
Petr Mikhalitsyn).
- Retry unsuccessful port binding on configuration
file reload.
- Thread safety fixes in SSL_SESSION object handling.
- Terminate clients on exit in the FORK threading model.
OBS-URL: https://build.opensuse.org/request/show/829030
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=114
2020-08-26 13:54:12 +00:00
Dominique Leuenberger
d95c1925a6
Accepting request 783872 from security:Stunnel
...
- Fixup stunnel.conf handling:
* Remove old static openSUSE provided stunnel.conf.
* Use upstream stunnel.conf and tailor it for openSUSE using sed.
* Don't show README.openSUSE when installing.
- enable /etc/stunnel/conf.d
- re-enable openssl.cnf
OBS-URL: https://build.opensuse.org/request/show/783872
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=17
2020-03-11 17:55:33 +00:00
26f1e2d117
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=112
2020-03-11 14:09:40 +00:00
638591f267
Accepting request 783181 from home:asvetter:branches:security:Stunnel
...
- Fixup stunnel.conf handling:
* Remove old static openSUSE provided stunnel.conf.
* Use upstream stunnel.conf and tailor it for openSUSE using sed.
* Don't show README.openSUSE when installing.
- enable /etc/stunnel/conf.d
- re-enable openssl.cnf
OBS-URL: https://build.opensuse.org/request/show/783181
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=111
2020-03-11 14:05:16 +00:00
Dominique Leuenberger
2802233929
Accepting request 769756 from security:Stunnel
...
OBS-URL: https://build.opensuse.org/request/show/769756
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=16
2020-02-04 18:54:48 +00:00
7c3c7b36d8
Accepting request 769723 from home:dimstar:Factory
...
Shortcut through -mini
OBS-URL: https://build.opensuse.org/request/show/769723
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=109
2020-02-03 17:35:56 +00:00
Yuchen Lin
b935f25716
Accepting request 731260 from security:Stunnel
...
OBS-URL: https://build.opensuse.org/request/show/731260
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=15
2019-09-17 11:39:00 +00:00
30829f2f0f
Accepting request 730771 from home:vitezslav_cizek:branches:security:Stunnel
...
- Install the correct file as README.openSUSE (bsc#1150730)
* stunnel.keyring was accidentally installed instead
- update to version 5.55
New features
New "ticketKeySecret" and "ticketMacSecret" options to control confidentiality
and integrity protection of the issued session tickets. These options allow for
session resumption on other nodes in a cluster.
Logging of the assigned bind address instead of the requested bind address.
Check whether "output" is not a relative file name.
Added sslVersion, sslVersionMin and sslVersionMax for OpenSSL 1.1.0 and later.
Hexadecimal PSK keys are automatically converted to binary.
Session ticket support (requires OpenSSL 1.1.1 or later). "connect" address
persistence is currently unsupported with session tickets.
SMTP HELO before authentication (thx to Jacopo Giudici).
New "curves" option to control the list of elliptic curves in OpenSSL 1.1.0 and later.
New "ciphersuites" option to control the list of permitted TLS 1.3 ciphersuites.
Include file name and line number in OpenSSL errors.
Compatibility with the current OpenSSL 3.0.0-dev branch.
Better performance with SSL_set_read_ahead()/SSL_pending().
Bugfixes
A number of testing framework fixes and improvements.
Service threads are terminated before OpenSSL cleanup to prevent occasional stunnel crashes at shutdown.
Fixed data transfer stalls introduced in stunnel 5.51.
Fixed a transfer() loop bug introduced in stunnel 5.51.
Fixed PSKsecrets as a global option (thx to Teodor Robas).
Fixed a memory allocation bug (thx to matanfih).
Fixed PSK session resumption with TLS 1.3.
Fixed a memory leak in the WIN32 logging subsystem.
Allow for zero value (ignored) TLS options.
OBS-URL: https://build.opensuse.org/request/show/730771
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=107
2019-09-16 11:49:39 +00:00
Dominique Leuenberger
9d93bd678a
Accepting request 678202 from security:Stunnel
...
OBS-URL: https://build.opensuse.org/request/show/678202
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=14
2019-02-26 21:19:22 +00:00
15e411d7b6
Accepting request 678172 from home:fbui:branches:security:Stunnel
...
- Drop use of $FIRST_ARG in .spec
The use of $FIRST_ARG was probably required because of the
%service_* rpm macros were playing tricks with the shell positional
parameters. This is bad practice and error prones so let's assume
that no macros should do that anymore and hence it's safe to assume
that positional parameters remains unchanged after any rpm macro
call.
OBS-URL: https://build.opensuse.org/request/show/678172
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=105
2019-02-22 09:52:05 +00:00
Dominique Leuenberger
304252b587
Accepting request 648234 from security:Stunnel
...
OBS-URL: https://build.opensuse.org/request/show/648234
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=13
2018-11-12 08:44:59 +00:00
fe5b45c9f3
Accepting request 648213 from home:jsjhb:branches:security:Stunnel
...
update to 5.49, w/ rebased listenqueue patch. I had to disable checks in .spec, because the tests depend on ncat and network ressources.
OBS-URL: https://build.opensuse.org/request/show/648213
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=103
2018-11-11 16:56:24 +00:00