SHA256
1
0
forked from pool/stunnel

152 Commits

Author SHA256 Message Date
Dominique Leuenberger
bb9ebc4873 Accepting request 975724 from security:Stunnel
OBS-URL: https://build.opensuse.org/request/show/975724
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=31
2022-05-09 16:44:13 +00:00
e2f3f37f34 Accepting request 975537 from home:dirkmueller:Factory
- update to 5.64:
  * Security bugfixes
    - OpenSSL DLLs updated to version 3.0.3.
  * New features
    - Updated the pkcs11 engine for Windows.
  * Bugfixes
    - Removed the SERVICE_INTERACTIVE_PROCESS flag in
      "stunnel -install".

OBS-URL: https://build.opensuse.org/request/show/975537
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=149
2022-05-09 07:32:17 +00:00
Dominique Leuenberger
b0945e2670 Accepting request 964297 from security:Stunnel
OBS-URL: https://build.opensuse.org/request/show/964297
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=30
2022-03-23 19:19:10 +00:00
e24e820cc6 Accepting request 963345 from home:dirkmueller:Factory
- update to 5.63:
  * Security bugfixes
    - OpenSSL DLLs updated to version 3.0.2.
  * New features
    - Updated stunnel.spec to support bash completion
  * Bugfixes
    - Fixed possible PRNG initialization crash (thx to Gleydson Soares).

OBS-URL: https://build.opensuse.org/request/show/963345
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=147
2022-03-23 12:57:43 +00:00
Dominique Leuenberger
4c46ba6694 Accepting request 957112 from security:Stunnel
OBS-URL: https://build.opensuse.org/request/show/957112
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=29
2022-02-24 17:20:48 +00:00
77877cdc95 Accepting request 957109 from home:pmonrealgonzalez:branches:security:Stunnel
- Update to 5.62:
  * New features
    - Added a bash completion script.
  * Bugfixes
    - Fixed a transfer() loop bug.
- Update to 5.61:
  * New features
    - Added new "protocol = capwin" and "protocol = capwinctrl"
      configuration file options.
    - Rewritten the testing framework in python.
    - Added support for missing SSL_set_options() values.
    - Updated stunnel.spec to support RHEL8.
  * Bugfixes
    - Fixed OpenSSL 3.0 build.
    - Fixed reloading configuration with "systemctl reload stunnel.service".
    - Fixed incorrect messages logged for OpenSSL errors.
    - Fixed printing IPv6 socket option defaults on FreeBSD.
- Rebase harden_stunnel.service.patch
- Remove FIPS-related regression tests
- Remove obsolete version checks

OBS-URL: https://build.opensuse.org/request/show/957109
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=146
2022-02-23 15:15:52 +00:00
Dominique Leuenberger
cfe491e169 Accepting request 940847 from security:Stunnel
OBS-URL: https://build.opensuse.org/request/show/940847
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=28
2021-12-16 20:19:37 +00:00
c9cc2b83f1 Accepting request 933485 from home:jsegitz:branches:systemdhardening:security:Stunnel
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/933485
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=145
2021-12-16 10:19:47 +00:00
Richard Brown
42a77f97eb Accepting request 912850 from security:Stunnel
OBS-URL: https://build.opensuse.org/request/show/912850
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=27
2021-08-19 08:01:04 +00:00
0e1f4f9ea1 Accepting request 912662 from home:asvetter:branches:security:Stunnel
- Update to 5.60:
  * New features
    - New 'sessionResume' service-level option to allow
      or disallow session resumption
    - Added support for the new SSL_set_options() values.
    - Download fresh ca-certs.pem for each new release.
  * Bugfixes
    - Fixed 'redirect' with 'protocol'.  This combination is
      not supported by 'smtp', 'pop3' and 'imap' protocols.

OBS-URL: https://build.opensuse.org/request/show/912662
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=144
2021-08-18 08:28:04 +00:00
Dominique Leuenberger
3d87ccae1f Accepting request 887332 from security:Stunnel
OBS-URL: https://build.opensuse.org/request/show/887332
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=26
2021-04-21 19:00:34 +00:00
536b741d30 Accepting request 885049 from home:dstoecker:branches:security:Stunnel
Submitted to author by e-mail.

P.S. The change in the comment line removes a rpm warning.

OBS-URL: https://build.opensuse.org/request/show/885049
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=142
2021-04-21 15:02:39 +00:00
Dominique Leuenberger
c06668890c Accepting request 884991 from security:Stunnel
- Disable testsuite for everything except Tumbleweed since it does not work on Leap/SLE
- update to 5.59:
  * new feature: Client-side "protocol = ldap" support
  * Fix configuration reload when compression is used
  * Fix paths in generated manuals
  * Fix test suite fixed not to require external connectivity
- run testsuite during package build

OBS-URL: https://build.opensuse.org/request/show/884991
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=25
2021-04-14 08:10:33 +00:00
6365ab1daf keyring
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=140
2021-04-13 13:26:36 +00:00
3cad4a3038 OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=139 2021-04-13 13:22:02 +00:00
581473cb2c OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=138 2021-04-13 13:21:22 +00:00
70744188b9 OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=137 2021-04-12 15:29:00 +00:00
027231b2c3 OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=136 2021-04-12 15:28:45 +00:00
67c0317787 OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=135 2021-04-12 15:28:00 +00:00
7f4c088529 OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=134 2021-04-12 15:27:49 +00:00
e52e884b9e Modified via webui
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=132
2021-04-12 15:24:17 +00:00
3410f9475d OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=131 2021-04-12 15:23:45 +00:00
d632faa071 OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=130 2021-04-12 14:36:23 +00:00
8ada5fe46b Accepting request 883808 from home:asvetter:branches:home:AndreasStieger:branches:security:Stunnel
- Disable testsuite for everything except Tumbleweed since it does not work on Leap/SLE
- update to 5.59:
  * new feature: Client-side "protocol = ldap" support
  * Fix configuration reload when compression is used
  * Fix paths in generated manuals
  * Fix test suite fixed not to require external connectivity
- run testsuite during package build

OBS-URL: https://build.opensuse.org/request/show/883808
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=129
2021-04-08 09:58:42 +00:00
Dominique Leuenberger
3ce5be19e2 Accepting request 874110 from security:Stunnel
- Update to 5.58:
  *  Security bugfixes
     -  The "redirect" option was fixed to properly handle unauthenticated requests (thx to Martin Stein). boo#1182529

OBS-URL: https://build.opensuse.org/request/show/874110
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=24
2021-02-21 21:14:33 +00:00
3cb932deda OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=127 2021-02-21 08:15:16 +00:00
e03236a509 Accepting request 874103 from home:asvetter:branches:security:Stunnel
- Update to 5.58:
  *  Security bugfixes
     -  The "redirect" option was fixed to properly handle unauthenticated requests (thx to Martin Stein).

And more bugfixes and new features.

OBS-URL: https://build.opensuse.org/request/show/874103
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=126
2021-02-21 07:21:31 +00:00
Dominique Leuenberger
bb1ad39b78 Accepting request 873188 from security:Stunnel
Add boo Number:
Do not replace the active config file: boo#1182376

OBS-URL: https://build.opensuse.org/request/show/873188
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=23
2021-02-18 19:39:51 +00:00
354106f0c2 OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=124 2021-02-17 16:17:42 +00:00
Dominique Leuenberger
214743a9e4 Accepting request 866942 from security:Stunnel
OBS-URL: https://build.opensuse.org/request/show/866942
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=22
2021-01-27 17:57:43 +00:00
c6b2dad9e6 Accepting request 866858 from home:dstoecker:branches:security:Stunnel
- Do not replace the active config file

This setting silently killed my server instance. %config without noreplace should not be used for files which are modified by uses (which files in /etc are).

OBS-URL: https://build.opensuse.org/request/show/866858
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=122
2021-01-26 15:29:15 +00:00
Dominique Leuenberger
f08ddba1ce Accepting request 854972 from security:Stunnel
OBS-URL: https://build.opensuse.org/request/show/854972
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=21
2020-12-12 19:32:02 +00:00
347e382da0 Accepting request 851865 from home:asvetter:branches:security:Stunnel
- Remove pidfile from service file fixes start bug: boo#1178533

OBS-URL: https://build.opensuse.org/request/show/851865
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=120
2020-12-11 19:52:27 +00:00
Dominique Leuenberger
d6bf7f8226 Accepting request 841268 from security:Stunnel
OBS-URL: https://build.opensuse.org/request/show/841268
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=20
2020-10-12 13:14:40 +00:00
cca48af767 Accepting request 841258 from home:AndreasStieger:branches:security:Stunnel
cl fixes for boo#1177580

OBS-URL: https://build.opensuse.org/request/show/841258
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=118
2020-10-12 12:48:37 +00:00
Dominique Leuenberger
f77030271e Accepting request 841161 from security:Stunnel
OBS-URL: https://build.opensuse.org/request/show/841161
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=19
2020-10-12 11:59:35 +00:00
ba3519d3b2 Accepting request 841077 from home:stroeder:branches:security:Stunnel
update to 5.57 with security bugfixes

OBS-URL: https://build.opensuse.org/request/show/841077
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=116
2020-10-12 07:54:48 +00:00
Dominique Leuenberger
ba99a21eda Accepting request 829785 from security:Stunnel
OBS-URL: https://build.opensuse.org/request/show/829785
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=18
2020-08-29 18:36:48 +00:00
c18fafa42f Accepting request 829030 from home:dirkmueller:branches:security:Stunnel
- update to 5.56:
  - Various text files converted to Markdown format.
  - Support for realpath(3) implementations incompatible
    with POSIX.1-2008, such as 4.4BSD or Solaris.
  - Support for engines without PRNG seeding methods (thx to
    Petr Mikhalitsyn).
  - Retry unsuccessful port binding on configuration
    file reload.
  - Thread safety fixes in SSL_SESSION object handling.
  - Terminate clients on exit in the FORK threading model.

OBS-URL: https://build.opensuse.org/request/show/829030
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=114
2020-08-26 13:54:12 +00:00
Dominique Leuenberger
d95c1925a6 Accepting request 783872 from security:Stunnel
- Fixup stunnel.conf handling:
  * Remove old static openSUSE provided stunnel.conf.
  * Use upstream stunnel.conf and tailor it for openSUSE using sed.
  * Don't show README.openSUSE when installing.
- enable /etc/stunnel/conf.d
- re-enable openssl.cnf

OBS-URL: https://build.opensuse.org/request/show/783872
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=17
2020-03-11 17:55:33 +00:00
26f1e2d117 OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=112 2020-03-11 14:09:40 +00:00
638591f267 Accepting request 783181 from home:asvetter:branches:security:Stunnel
- Fixup stunnel.conf handling:
  * Remove old static openSUSE provided stunnel.conf.
  * Use upstream stunnel.conf and tailor it for openSUSE using sed.
  * Don't show README.openSUSE when installing.
- enable /etc/stunnel/conf.d
- re-enable openssl.cnf

OBS-URL: https://build.opensuse.org/request/show/783181
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=111
2020-03-11 14:05:16 +00:00
Dominique Leuenberger
2802233929 Accepting request 769756 from security:Stunnel
OBS-URL: https://build.opensuse.org/request/show/769756
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=16
2020-02-04 18:54:48 +00:00
7c3c7b36d8 Accepting request 769723 from home:dimstar:Factory
Shortcut through -mini

OBS-URL: https://build.opensuse.org/request/show/769723
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=109
2020-02-03 17:35:56 +00:00
Yuchen Lin
b935f25716 Accepting request 731260 from security:Stunnel
OBS-URL: https://build.opensuse.org/request/show/731260
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=15
2019-09-17 11:39:00 +00:00
30829f2f0f Accepting request 730771 from home:vitezslav_cizek:branches:security:Stunnel
- Install the correct file as README.openSUSE (bsc#1150730)
  * stunnel.keyring was accidentally installed instead

- update to version 5.55
  New features
    New "ticketKeySecret" and "ticketMacSecret" options to control confidentiality
      and integrity protection of the issued session tickets. These options allow for
      session resumption on other nodes in a cluster.
    Logging of the assigned bind address instead of the requested bind address.
    Check whether "output" is not a relative file name.
    Added sslVersion, sslVersionMin and sslVersionMax for OpenSSL 1.1.0 and later.
    Hexadecimal PSK keys are automatically converted to binary.
    Session ticket support (requires OpenSSL 1.1.1 or later). "connect" address
      persistence is currently unsupported with session tickets.
    SMTP HELO before authentication (thx to Jacopo Giudici).
    New "curves" option to control the list of elliptic curves in OpenSSL 1.1.0 and later.
    New "ciphersuites" option to control the list of permitted TLS 1.3 ciphersuites.
    Include file name and line number in OpenSSL errors.
    Compatibility with the current OpenSSL 3.0.0-dev branch.
    Better performance with SSL_set_read_ahead()/SSL_pending().
  Bugfixes
    A number of testing framework fixes and improvements.
    Service threads are terminated before OpenSSL cleanup to prevent occasional stunnel crashes at shutdown.
    Fixed data transfer stalls introduced in stunnel 5.51.
    Fixed a transfer() loop bug introduced in stunnel 5.51.
    Fixed PSKsecrets as a global option (thx to Teodor Robas).
    Fixed a memory allocation bug (thx to matanfih).
    Fixed PSK session resumption with TLS 1.3.
    Fixed a memory leak in the WIN32 logging subsystem.
    Allow for zero value (ignored) TLS options.

OBS-URL: https://build.opensuse.org/request/show/730771
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=107
2019-09-16 11:49:39 +00:00
Dominique Leuenberger
9d93bd678a Accepting request 678202 from security:Stunnel
OBS-URL: https://build.opensuse.org/request/show/678202
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=14
2019-02-26 21:19:22 +00:00
15e411d7b6 Accepting request 678172 from home:fbui:branches:security:Stunnel
- Drop use of $FIRST_ARG in .spec
  The use of $FIRST_ARG was probably required because of the
  %service_* rpm macros were playing tricks with the shell positional
  parameters. This is bad practice and error prones so let's assume
  that no macros should do that anymore and hence it's safe to assume
  that positional parameters remains unchanged after any rpm macro
  call.

OBS-URL: https://build.opensuse.org/request/show/678172
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=105
2019-02-22 09:52:05 +00:00
Dominique Leuenberger
304252b587 Accepting request 648234 from security:Stunnel
OBS-URL: https://build.opensuse.org/request/show/648234
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=13
2018-11-12 08:44:59 +00:00
fe5b45c9f3 Accepting request 648213 from home:jsjhb:branches:security:Stunnel
update to 5.49, w/ rebased listenqueue patch. I had to disable checks in .spec, because the tests depend on ncat and network ressources.

OBS-URL: https://build.opensuse.org/request/show/648213
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=103
2018-11-11 16:56:24 +00:00