Tue Jan 24 03:34:28 2017 UTC ()
Update to 5.39

Changelog:
Version 5.39, 2017.01.01, urgency: LOW
* New features
  - PKCS#11 engine (pkcs11.dll) added to the Win32 build.
  - Per-destination TLS session cache added for the client mode.
  - The new "logId" parameter "process" added to log PID values.
  - Added support for the new SSL_set_options() values.
  - Updated the manual page.
  - Obsolete references to "SSL" replaced with "TLS".
* Bugfixes
  - Fixed "logId" parameter to also work in inetd mode.
  - "delay = yes" properly enforces "failover = prio".
  - Fixed fd_set allocation size on Win64.
  - Fixed reloading invalid configuration file on Win32.
  - Fixed resolving addresses with unconfigured network interfaces.

Version 5.38, 2016.11.26, urgency: MEDIUM
* New features
  - "sni=" can be used to prevent sending the SNI extension.
  - The AI_ADDRCONFIG resolver flag is used when available.
  - Merged Debian 06-lfs.patch (thx Peter Pentchev).
* Bugfixes
  - Fixed a memory allocation bug causing crashes with OpenSSL 1.1.0.
  - Fixed error handling for mixed IPv4/IPv6 destinations.
  - Merged Debian 08-typos.patch (thx Peter Pentchev).

Version 5.37, 2016.11.06, urgency: MEDIUM
* Bugfixes
  - OpenSSL DLLs updated to version 1.0.2j (stops crashes).
  - The default SNI target (not handled by any slave service)
    is handled by the master service rather than rejected.
  - Removed thread synchronization in the FORK threading model.

Version 5.36, 2016.09.22, urgency: HIGH
* Security bugfixes
  - OpenSSL DLLs updated to version 1.0.2i.
    https://www.openssl.org/news/secadv_20160922.txt
* New features
  - Added support for OpenSSL 1.1.0 built with "no-deprecated".
  - Removed direct zlib dependency.


(ryoon)
diff -r1.104 -r1.105 pkgsrc/security/stunnel/Makefile
diff -r1.51 -r1.52 pkgsrc/security/stunnel/distinfo
diff -r1.19 -r1.20 pkgsrc/security/stunnel/patches/patch-ac
cvs diff -r1.104 -r1.105 pkgsrc/security/stunnel/Makefile (expand / switch to unified diff)

--- pkgsrc/security/stunnel/Makefile 2016/08/29 19:21:24 1.104
+++ pkgsrc/security/stunnel/Makefile 2017/01/24 03:34:28 1.105
@@ -1,16 +1,16 @@ @@ -1,16 +1,16 @@
1# $NetBSD: Makefile,v 1.104 2016/08/29 19:21:24 jym Exp $ 1# $NetBSD: Makefile,v 1.105 2017/01/24 03:34:28 ryoon Exp $
2 2
3DISTNAME= stunnel-5.35 3DISTNAME= stunnel-5.39
4CATEGORIES= security 4CATEGORIES= security
5MASTER_SITES= http://www.stunnel.org/downloads/ 5MASTER_SITES= http://www.stunnel.org/downloads/
6 6
7MAINTAINER= jym@NetBSD.org 7MAINTAINER= jym@NetBSD.org
8HOMEPAGE= http://www.stunnel.org/ 8HOMEPAGE= http://www.stunnel.org/
9COMMENT= Universal SSL tunnel 9COMMENT= Universal SSL tunnel
10LICENSE= gnu-gpl-v2 10LICENSE= gnu-gpl-v2
11 11
12BUILD_DEFS+= VARBASE 12BUILD_DEFS+= VARBASE
13USE_LIBTOOL= yes 13USE_LIBTOOL= yes
14GNU_CONFIGURE= yes 14GNU_CONFIGURE= yes
15CONFIGURE_ARGS+= --localstatedir=${VARBASE} 15CONFIGURE_ARGS+= --localstatedir=${VARBASE}
16CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR} 16CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR}
cvs diff -r1.51 -r1.52 pkgsrc/security/stunnel/distinfo (expand / switch to unified diff)

--- pkgsrc/security/stunnel/distinfo 2016/08/29 19:21:24 1.51
+++ pkgsrc/security/stunnel/distinfo 2017/01/24 03:34:28 1.52
@@ -1,9 +1,9 @@ @@ -1,9 +1,9 @@
1$NetBSD: distinfo,v 1.51 2016/08/29 19:21:24 jym Exp $ 1$NetBSD: distinfo,v 1.52 2017/01/24 03:34:28 ryoon Exp $
2 2
3SHA1 (stunnel-5.35.tar.gz) = 90cafc2208aa3acefb503856482e163e9af463c4 3SHA1 (stunnel-5.39.tar.gz) = ca7d09262f1a612ac098943d64848f431e7fc43f
4RMD160 (stunnel-5.35.tar.gz) = 92f7c680e9de49740094a531c5b466aa5ac9d453 4RMD160 (stunnel-5.39.tar.gz) = 78031e43f8ea50ae592718b31b212db1150beb17
5SHA512 (stunnel-5.35.tar.gz) = cdec7ddafbfac4a1d420704baec72fedbd655871137ec8283c066203c0859019c6e11ce00647e5b471a019409e4eb5e9525166eddd7ddffa25055b95c0cacd9e 5SHA512 (stunnel-5.39.tar.gz) = 1a59ca3bedd00730598e5bdee61d1968e76d3b1c0bb666fcab5103f5ba6fac0585612198baab180ac0745f658041510fe0115ec8b111da6fd7c161a4ec301458
6Size (stunnel-5.35.tar.gz) = 645148 bytes 6Size (stunnel-5.39.tar.gz) = 647101 bytes
7SHA1 (patch-aa) = b247aca629197887fb720f7a02d9b73d60bb0d37 7SHA1 (patch-aa) = b247aca629197887fb720f7a02d9b73d60bb0d37
8SHA1 (patch-ac) = 91b09d39fb968ad76952acdff250150d3e372c36 8SHA1 (patch-ac) = 4e5e0a3cfe95b3952741814a1f26bcb99d002fdc
9SHA1 (patch-stunnel.conf-sample.in) = 86d195963e5ad2db381ac89ae0fca13a7f641fa5 9SHA1 (patch-stunnel.conf-sample.in) = 86d195963e5ad2db381ac89ae0fca13a7f641fa5
cvs diff -r1.19 -r1.20 pkgsrc/security/stunnel/patches/Attic/patch-ac (expand / switch to unified diff)

--- pkgsrc/security/stunnel/patches/Attic/patch-ac 2015/07/25 03:11:18 1.19
+++ pkgsrc/security/stunnel/patches/Attic/patch-ac 2017/01/24 03:34:28 1.20
@@ -1,15 +1,15 @@ @@ -1,15 +1,15 @@
1$NetBSD: patch-ac,v 1.19 2015/07/25 03:11:18 ryoon Exp $ 1$NetBSD: patch-ac,v 1.20 2017/01/24 03:34:28 ryoon Exp $
2 2
3We'll take care of PKG_SYSCONFSUBDIR ourselves, thanks. 3We'll take care of PKG_SYSCONFSUBDIR ourselves, thanks.
4 4
5--- src/Makefile.in.orig 2015-07-09 13:41:47.000000000 +0000 5--- src/Makefile.in.orig 2017-01-01 22:17:59.000000000 +0000
6+++ src/Makefile.in 6+++ src/Makefile.in
7@@ -396,7 +396,7 @@ libstunnel_la_LDFLAGS = -avoid-version 7@@ -375,7 +375,7 @@ CLEANFILES = stunnel3
8  8
9 # Additional preprocesor definitions 9 # Additional preprocesor definitions
10 stunnel_CPPFLAGS = -I/usr/kerberos/include -I$(SSLDIR)/include \ 10 stunnel_CPPFLAGS = -I/usr/kerberos/include -I$(SSLDIR)/include \
11- -DLIBDIR='"$(pkglibdir)"' -DCONFDIR='"$(sysconfdir)/stunnel"' 11- -DLIBDIR='"$(pkglibdir)"' -DCONFDIR='"$(sysconfdir)/stunnel"'
12+ -DLIBDIR='"$(pkglibdir)"' -DCONFDIR='"$(sysconfdir)"' 12+ -DLIBDIR='"$(pkglibdir)"' -DCONFDIR='"$(sysconfdir)"'
13  13
14 # SSL library 14 # TLS library
15 stunnel_LDFLAGS = -L$(SSLDIR)/lib64 -L$(SSLDIR)/lib -lssl -lcrypto 15 stunnel_LDFLAGS = -L$(SSLDIR)/lib64 -L$(SSLDIR)/lib -lssl -lcrypto