Sun Aug 10 14:54:12 2014 UTC ()
Update to 5.03:

Version 5.03, 2014.08.07, urgency: HIGH:
* Security bugfixes
  - OpenSSL DLLs updated to version 1.0.1i.
    See https://www.openssl.org/news/secadv_20140806.txt
* New features
  - FIPS autoconfiguration cleanup.
  - FIPS canister updated to version 2.0.6.
  - Improved SNI diagnostic logging.
* Bugfixes
  - Compilation fixes for old versions of OpenSSL.
  - Fixed whitespace handling in the stunnel.init script.

Version 5.02, 2014.06.09, urgency: HIGH:
* Security bugfixes
  - OpenSSL DLLs updated to version 1.0.1h.
    See https://www.openssl.org/news/secadv_20140605.txt
* New features
  - Major rewrite of the protocol.c interface: it is now possible to add
    protocol negotiations at multiple connection phases, protocols can
    individually decide whether the remote connection will be
    established before or after SSL/TLS is negotiated.
  - Heap memory blocks are wiped before release.  This only works for
    block allocated by stunnel, and not by OpenSSL or other libraries.
  - The safe_memcmp() function implemented with execution time not
    dependent on the compared data.
  - Updated the stunnel.conf and stunnel.init templates.
  - Added a client-mode example to the manual.
* Bugfixes
  - Fixed "failover = rr" broken since version 5.00.
  - Fixed "taskbar = no" broken since version 5.00.
  - Compilation fix for missing SSL_OP_MSIE_SSLV2_RSA_PADDING option.


(wiz)
diff -r1.91 -r1.92 pkgsrc/security/stunnel/Makefile
diff -r1.40 -r1.41 pkgsrc/security/stunnel/distinfo

cvs diff -r1.91 -r1.92 pkgsrc/security/stunnel/Makefile (expand / switch to unified diff)

--- pkgsrc/security/stunnel/Makefile 2014/05/29 23:37:26 1.91
+++ pkgsrc/security/stunnel/Makefile 2014/08/10 14:54:12 1.92
@@ -1,17 +1,16 @@ @@ -1,17 +1,16 @@
1# $NetBSD: Makefile,v 1.91 2014/05/29 23:37:26 wiz Exp $ 1# $NetBSD: Makefile,v 1.92 2014/08/10 14:54:12 wiz Exp $
2 2
3DISTNAME= stunnel-5.01 3DISTNAME= stunnel-5.03
4PKGREVISION= 1 
5CATEGORIES= security 4CATEGORIES= security
6MASTER_SITES= http://www.stunnel.org/downloads/ 5MASTER_SITES= http://www.stunnel.org/downloads/
7 6
8MAINTAINER= jym@NetBSD.org 7MAINTAINER= jym@NetBSD.org
9HOMEPAGE= http://www.stunnel.org/ 8HOMEPAGE= http://www.stunnel.org/
10COMMENT= Universal SSL tunnel 9COMMENT= Universal SSL tunnel
11LICENSE= gnu-gpl-v2 10LICENSE= gnu-gpl-v2
12 11
13BUILD_DEFS+= VARBASE 12BUILD_DEFS+= VARBASE
14USE_LIBTOOL= yes 13USE_LIBTOOL= yes
15GNU_CONFIGURE= yes 14GNU_CONFIGURE= yes
16CONFIGURE_ARGS+= --localstatedir=${VARBASE} 15CONFIGURE_ARGS+= --localstatedir=${VARBASE}
17CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR} 16CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR}

cvs diff -r1.40 -r1.41 pkgsrc/security/stunnel/distinfo (expand / switch to unified diff)

--- pkgsrc/security/stunnel/distinfo 2014/04/29 13:47:45 1.40
+++ pkgsrc/security/stunnel/distinfo 2014/08/10 14:54:12 1.41
@@ -1,7 +1,7 @@ @@ -1,7 +1,7 @@
1$NetBSD: distinfo,v 1.40 2014/04/29 13:47:45 ryoon Exp $ 1$NetBSD: distinfo,v 1.41 2014/08/10 14:54:12 wiz Exp $
2 2
3SHA1 (stunnel-5.01.tar.gz) = e974c2b7854c2de989b8b161be598cf2222a8a1a 3SHA1 (stunnel-5.03.tar.gz) = aebdf0b3b6db5afeb42c30093ab78c1a8df5e12a
4RMD160 (stunnel-5.01.tar.gz) = 7762a3b48b29c4b3fea46824bae0aeadb1193a6b 4RMD160 (stunnel-5.03.tar.gz) = 221945e5b2e67dcdb880a56d760e7a26048d323a
5Size (stunnel-5.01.tar.gz) = 587962 bytes 5Size (stunnel-5.03.tar.gz) = 590778 bytes
6SHA1 (patch-aa) = 0e57d4fa383dad7891795073d1f6b5075715b346 6SHA1 (patch-aa) = 0e57d4fa383dad7891795073d1f6b5075715b346
7SHA1 (patch-ac) = 63e80322e68efc7e6c5f0bab92e7260178a25109 7SHA1 (patch-ac) = 63e80322e68efc7e6c5f0bab92e7260178a25109