Tue Jan 8 23:45:40 2013 UTC ()
Update to 4.54. Changelog:

New Win32 features
        FIPS module updated to version 2.0.
        OpenSSL DLLs updated to version 1.0.1c.
        zlib DLL updated to version 1.2.7.
        Engine DLLs added: 4758cca, aep, atalla, capi, chil, cswift, gmp, gost, nuron, padlock, sureware, ubsec.

Other new features
        "session" option renamed to more readable "sessionCacheTimeout". The old name remains accepted for backward compatibility.
        New service-level "sessionCacheSize" option to control session cache size.
        New service-level option "reset" to control whether TCP RST flag is used to indicate errors. The default value is "reset = yes".
        New service-level option "renegotiation" to disable SSL renegotiation. This feature is based on a public-domain patch by Janusz Dziemidowicz.
        New FreeBSD socket options: IP_FREEBIND, IP_BINDANY, IPV6_BINDANY (thx to Janusz Dziemidowicz).
        New parameters to configure TLS v1.1/v1.2 with OpenSSL version 1.0.1 or higher (thx to Henrik Riomar).

Bugfixes
        Fixed "Application Failed to Initialize Properly (0xc0150002)" error.
        Fixed missing SSL state debug log entries.
        Fixed a race condition in libwrap code resulting in random stalls (thx to Andrew Skalski).
        Session cache purged at configuration file reload to reduce memory leak. Remaining leak of a few kilobytes per section is yet to be fixed.
        Fixed regression bug in "transparent = destination" functionality (thx to Stefan Lauterbach). This bug was introduced in stunnel 4.51.
        "transparent = destination" is now a valid endpoint in inetd mode.
        "delay = yes" fixed to work even if specified *after* "connect" option.
        Multiple "connect" targets fixed to also work with delayed resolver.
        The number of resolver retries of EAI_AGAIN error has been limited to 3 in order to prevent infinite loops.

Fix some directory owner/group rights and take over maintainership as I
use it almost daily.


(jym)
diff -r1.79 -r1.80 pkgsrc/security/stunnel/Makefile
diff -r1.35 -r1.36 pkgsrc/security/stunnel/distinfo
cvs diff -r1.79 -r1.80 pkgsrc/security/stunnel/Makefile (expand / switch to unified diff)

--- pkgsrc/security/stunnel/Makefile 2012/10/23 18:17:00 1.79
+++ pkgsrc/security/stunnel/Makefile 2013/01/08 23:45:39 1.80
@@ -1,60 +1,60 @@ @@ -1,60 +1,60 @@
1# $NetBSD: Makefile,v 1.79 2012/10/23 18:17:00 asau Exp $ 1# $NetBSD: Makefile,v 1.80 2013/01/08 23:45:39 jym Exp $
2 2
3DISTNAME= stunnel-4.53 3DISTNAME= stunnel-4.54
4PKGREVISION= 1 4PKGREVISION= 1
5CATEGORIES= security 5CATEGORIES= security
6MASTER_SITES= ftp://ftp.stunnel.org/stunnel/ 6MASTER_SITES= ftp://ftp.stunnel.org/stunnel/
7 7
8MAINTAINER= pkgsrc-users@NetBSD.org 8MAINTAINER= jym@NetBSD.org
9HOMEPAGE= http://www.stunnel.org/ 9HOMEPAGE= http://www.stunnel.org/
10COMMENT= Universal SSL tunnel 10COMMENT= Universal SSL tunnel
11LICENSE= gnu-gpl-v2 11LICENSE= gnu-gpl-v2
12 12
13BUILD_DEFS+= VARBASE 13BUILD_DEFS+= VARBASE
14USE_LIBTOOL= yes 14USE_LIBTOOL= yes
15GNU_CONFIGURE= yes 15GNU_CONFIGURE= yes
16CONFIGURE_ARGS+= --localstatedir=${VARBASE} 16CONFIGURE_ARGS+= --localstatedir=${VARBASE}
17CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR} 17CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR}
18CONFIGURE_ARGS+= --with-cert-dir=${SSLCERTS:Q} 
19CONFIGURE_ARGS+= --with-pem-dir=${SSLCERTS:Q} 
20CONFIGURE_ARGS+= --with-ssl=${SSLBASE:Q} 18CONFIGURE_ARGS+= --with-ssl=${SSLBASE:Q}
21 19
22.include "../../mk/bsd.prefs.mk" 20.include "../../mk/bsd.prefs.mk"
23 21
24STUNNEL_USER?= stunnel 22STUNNEL_USER?= stunnel
25STUNNEL_GROUP?= stunnel 23STUNNEL_GROUP?= stunnel
26PKG_HOME?= ${VARBASE}/chroot/stunnel 24PKG_HOME?= ${VARBASE}/chroot/stunnel
27PKG_USERS= ${STUNNEL_USER}:${STUNNEL_GROUP}::Stunnel:${PKG_HOME} 25PKG_USERS= ${STUNNEL_USER}:${STUNNEL_GROUP}::Stunnel:${PKG_HOME}
28PKG_GROUPS= ${STUNNEL_GROUP} 26PKG_GROUPS= ${STUNNEL_GROUP}
29USER_GROUP= ${STUNNEL_USER} ${STUNNEL_GROUP} 27USER_GROUP= ${STUNNEL_USER} ${STUNNEL_GROUP}
30 28
31PKG_SYSCONFSUBDIR= stunnel 29PKG_SYSCONFSUBDIR= stunnel
32PKG_SYSCONFDIR_PERMS= ${USER_GROUP} 0700 30PKG_SYSCONFDIR_PERMS= ${ROOT_USER} ${STUNNEL_GROUP} 0750
33 31
34OWN_DIRS_PERMS= ${PKG_HOME} ${USER_GROUP} 0700 32OWN_DIRS= ${PKG_HOME}/certs ${PKG_HOME}/crls
35CONF_FILES_PERMS+= ${PREFIX}/share/examples/stunnel/stunnel.conf-sample \ 33OWN_DIRS_PERMS= ${PKG_HOME}/pid ${USER_GROUP} 0750
36 ${PKG_SYSCONFDIR}/stunnel.conf ${USER_GROUP} 0644 34CONF_FILES+= ${PREFIX}/share/examples/stunnel/stunnel.conf-sample \
 35 ${PKG_SYSCONFDIR}/stunnel.conf
37 36
38RCD_SCRIPTS= stunnel 37RCD_SCRIPTS= stunnel
39 38
40REPLACE_PERL+= src/stunnel3.in 39REPLACE_PERL+= src/stunnel3.in
41USE_TOOLS+= perl:run 40USE_TOOLS+= perl:run
42 41
43SUBST_CLASSES+= chroot 42SUBST_CLASSES+= chroot
44SUBST_MESSAGE.chroot= Fix chroot path 43SUBST_MESSAGE.chroot= Fix chroot path
45SUBST_STAGE.chroot= pre-configure 44SUBST_STAGE.chroot= pre-configure
46SUBST_FILES.chroot= tools/stunnel.conf-sample.in 45SUBST_FILES.chroot= tools/stunnel.conf-sample.in
47SUBST_SED.chroot+= -e 's|@prefix@/var/lib|@localstatedir@/chroot|' 46SUBST_SED.chroot+= -e 's|@prefix@/var/lib|@localstatedir@/chroot|'
48 47
49SUBST_CLASSES+= stunnel 48SUBST_CLASSES+= stunnel
50SUBST_MESSAGE.stunnel= Fix user and group 49SUBST_MESSAGE.stunnel= Fix user, group and pid
51SUBST_STAGE.stunnel= post-configure 50SUBST_STAGE.stunnel= post-configure
52SUBST_FILES.stunnel= tools/stunnel.conf-sample 51SUBST_FILES.stunnel= tools/stunnel.conf-sample
53SUBST_SED.stunnel= -e 's|setuid = nobody|setuid = ${STUNNEL_USER}|' 52SUBST_SED.stunnel= -e 's|setuid = nobody|setuid = ${STUNNEL_USER}|'
54SUBST_SED.stunnel+= -e 's|setgid = nogroup|setgid = ${STUNNEL_GROUP}|' 53SUBST_SED.stunnel+= -e 's|setgid = nogroup|setgid = ${STUNNEL_GROUP}|'
 54SUBST_SED.stunnel+= -e 's|pid = /stunnel.pid|pid = /pid/stunnel.pid|'
55 55
56.include "options.mk" 56.include "options.mk"
57 57
58.include "../../devel/zlib/buildlink3.mk" 58.include "../../devel/zlib/buildlink3.mk"
59.include "../../security/openssl/buildlink3.mk" 59.include "../../security/openssl/buildlink3.mk"
60.include "../../mk/bsd.pkg.mk" 60.include "../../mk/bsd.pkg.mk"
cvs diff -r1.35 -r1.36 pkgsrc/security/stunnel/distinfo (expand / switch to unified diff)

--- pkgsrc/security/stunnel/distinfo 2012/04/16 16:55:21 1.35
+++ pkgsrc/security/stunnel/distinfo 2013/01/08 23:45:40 1.36
@@ -1,7 +1,7 @@ @@ -1,7 +1,7 @@
1$NetBSD: distinfo,v 1.35 2012/04/16 16:55:21 ryoon Exp $ 1$NetBSD: distinfo,v 1.36 2013/01/08 23:45:40 jym Exp $
2 2
3SHA1 (stunnel-4.53.tar.gz) = c167833c23fde388db697bd3edb4444aff0e449e 3SHA1 (stunnel-4.54.tar.gz) = e9e6414c699e81b0bd029f5b6ae018bb5e320bbd
4RMD160 (stunnel-4.53.tar.gz) = 4c3fe3c7ca3d65e6f9ad21e330a48beb291d9e4b 4RMD160 (stunnel-4.54.tar.gz) = c6889fda88f9987ba7a96476d29e7072668fa46d
5Size (stunnel-4.53.tar.gz) = 529720 bytes 5Size (stunnel-4.54.tar.gz) = 535202 bytes
6SHA1 (patch-aa) = 0e57d4fa383dad7891795073d1f6b5075715b346 6SHA1 (patch-aa) = 0e57d4fa383dad7891795073d1f6b5075715b346
7SHA1 (patch-ac) = 43521a88606981bc55dd94043d52b1a16f08e583 7SHA1 (patch-ac) = 43521a88606981bc55dd94043d52b1a16f08e583