summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-connectivity/freeradius
Commit message (Collapse)AuthorAgeFilesLines
* freeradius: upgrade 3.2.3 -> 3.2.5Yi Zhao11 days1-1/+1
| | | | | | | | | ChangeLog: https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_4 https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_5 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Start WORKDIR -> UNPACKDIR transitionKhem Raj2024-05-231-4/+4
| | | | | | | Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: 3.0.26 -> 3.2.3Robert Yang2024-04-027-622/+278
| | | | | | | | | | | | | | | | | * Add --without-rlm_json to fix: configure: error: set --without-rlm_json to disable it explicitly * Add --without-rlm_cache_redis to fix: configure: error: set --without-rlm_cache_redis to disable it explicitly. * Drop 0017-add-python.m4-for-detecting-python-3.10.patch and add 0017-Add-acinclude.m4-to-include-required-macros.patch to fix python3 related build errors * Rebased other patches for 3.2.3. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: make sub packages to runtime depends on freeradiusHongxu Jia2023-11-281-0/+7
| | | | | | | | | | | | | | | | | Otherwise install packages reported warning at do_rootfs ...log.do_rootfs... Installing : freeradius-ldap-3.0.26-r0.corei7_64 1235/1236 warning: user radiusd does not exist - using root warning: group radiusd does not exist - using root Installing : freeradius-krb5-3.0.26-r0.corei7_64 1236/1236 warning: user radiusd does not exist - using root ...log.do_rootfs... The user/group radiusd is added by package freeradius, explicitly made the sub packages to runtime depends on freeradius Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cve_check: fix conversion errorsPeter Marko2023-07-311-2/+2
| | | | | | | | Conversion from CVE_CHECK_IGNORE to CVE_STATUS had some copy+paste issues. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cve_check: convert CVE_CHECK_IGNORE to CVE_STATUSAndrej Valek2023-07-271-4/+2
| | | | | | | | | - Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: add UPSTREAM_CHECK_GITTAGREGEXYi Zhao2023-03-061-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | Add UPSTREAM_CHECK_GITTAGREGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version freeradius INFO: Current version: 3.0.26 INFO: Latest version: 4.0.0 INFO: Latest version's commit: 8b5bff2d8a2cd2be1da58a417787d907c7a5d8f1 4.0.0 is not a stable version tag[1]. After the patch: $ devtool latest-version freeradius INFO: Current version: 3.0.26 INFO: Latest version: 3.2.2 INFO: Latest version's commit: b9ed73ef2d2628fa6e2a6d15a7782f8217966be0 [1] https://github.com/FreeRADIUS/freeradius-server/tags Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: upgrade 3.0.21 -> 3.0.26Yi Zhao2023-01-0918-154/+632
| | | | | | | | | | | | Release Notes: https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_26 * Refresh patches * Add autogen.sh as we still need it in do_configure * Backport a patch to fix configure error for rlm_python3 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: fix multilib systemd service start failureKai Kang2022-11-182-1/+32
| | | | | | | | | | It fails to start radiusd.service from lib32-freeradius that the configure directory is /etc/lib32-raddb rather than /etc/raddb. So add an environment file to export a variable MLPREFIX for the service file to make it start successfully. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: fix daemon startup warningsYi Zhao2022-09-292-2/+2
| | | | | | | | | Fixes: chown[1483]: /bin/chown: warning: '.' should be ':': 'radiusd.radiusd' /etc/tmpfiles.d/radiusd.conf:2: Line references path below legacy directory /var/run/, updating /var/run/radiusd -> /run/radiusd Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: Fix buildpaths issueMingli Yu2022-08-062-0/+42
| | | | | | | | | Fixes: WARNING: freeradius-3.0.21-r0 do_package_qa: QA Issue: File /usr/bin/radeapclient in package freeradius-utils contains reference to TMPDIR [buildpaths] WARNING: freeradius-3.0.21-r0 do_package_qa: QA Issue: File /usr/lib/libfreeradius-server.so.0.0.0 in package freeradius contains reference to TMPDIR [buildpaths] Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: ignore patched CVEsDavide Gardenal2022-07-151-0/+5
| | | | | | | | | CVE-2002-0318 and CVE-2011-4966 are both patched in our version of freeradius. The CPE in the NVD database doesn't reflect correctly the vulnerable versions that's why they are incorrectly picked up. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: mutlilib fixesJeremy Puhlman2022-07-021-13/+21
| | | | | | | Define raddbdir based on multilib Add multilib headers and scripts for conflicting content Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Update LICENSE variable to use SPDX license identifiersKhem Raj2022-03-041-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Update SRC_URI branch and protocolsRichard Purdie2021-11-031-1/+1
| | | | | | | | | This patch updates SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls as generated by the conversion script in OE-Core. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Convert to new override syntaxMartin Jansa2021-08-031-25/+25
| | | | | | | | | | This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* freeradius: check existence of openssl's commands in bootstrapKai Kang2021-04-212-0/+39
| | | | | | | | | | | | | It calls openssl's commands 'dhparam' and 'pkcs12' in script bootstrap. These commands are configurable based on configure options 'no-dh' and 'no-des', and may not be provided by openssl. So check existence of these commands. If not, abort running of script bootstrap. 1. https://github.com/openssl/openssl/blob/master/apps/build.info#L37 2. https://github.com/openssl/openssl/blob/master/apps/build.info#L22 Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: Upgrade to 3.0.21Mingli Yu2021-04-062-60/+1
| | | | | | | | Drop one patch at the issue is already fixed in new version (307678b268 Fix rlm_python3 build) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: fix build failure with autoconf 2.71Hongxu Jia2021-02-072-0/+43
| | | | | | | | | | | | | While using autoconf 2.71, the AM_MISSING_PROG caused unexpected error: ... configure.ac: error: required file 'missing' not found ... Since these tools were explicitly added by autotools bbclass, remove the testing to workaround the error with autoconf 2.7 Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: fix the occasional verification failureMingli Yu2020-08-052-0/+136
| | | | | | | | | | | | | | | | | | | | | | | Fixes: # cd /etc/raddb/certs # ./bootstrap [snip] chmod g+r ca.key openssl pkcs12 -in server.p12 -out server.pem -passin pass:'whatever' -passout pass:'whatever' chmod g+r server.pem C = FR, ST = Radius, O = Example Inc., CN = Example Server Certificate, emailAddress = admin@example.org error 7 at 0 depth lookup: certificate signature failure 140066667427072:error:04067084:rsa routines:rsa_ossl_public_decrypt:data too large for modulus:../openssl-1.1.1g/crypto/rsa/rsa_ossl.c:553: 140066667427072:error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib:../openssl-1.1.1g/crypto/asn1/a_verify.c:170: error server.pem: verification failed make: *** [Makefile:107: server.vrfy] Error 2 It seems the ca.pem mismatchs server.pem which results in failing to execute "openssl verify -CAfile ca.pem server.pem", so add the logic to check the file to avoid inconsistency. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: fix the existed certificate errorMingli Yu2020-07-132-0/+56
| | | | | | | | | | | | | | | | | | | | | | | | Fixes the occasional error: # cd /etc/raddb/certs # ./bootstrap [snip] openssl ca -batch -keyfile ca.key -cert ca.pem -in client.csr -key 'whatever' -out client.crt -extensions xpclient_ext -extfile xpextensions -config ./client.cnf Using configuration from ./client.cnf Check that the request matches the signature Signature ok ERROR:There is already a certificate for /C=FR/ST=Radius/O=Example Inc./CN=user@example.org/emailAddress=user@example.org The matching entry has the following details Type :Valid Expires on :200908024833Z Serial Number :02 File name :unknown Subject Name :/C=FR/ST=Radius/O=Example Inc./CN=user@example.org/emailAddress=user@example.org make: *** [Makefile:128: client.crt] Error 1 Add the check to fix the above error and it does the same for server.crt. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: don't download LFS content by defaultChangqing Li2020-03-261-1/+1
| | | | | | | | | | | | | fix error: Fetcher failure: Repository git://github.com/FreeRADIUS/freeradius-server.git has LFS content, install git-lfs on host to download (or set lfs=0 to ignore it) upstream has file .lfsconfig to make it not download lfs files by default, so we also don't download it by default Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: upgrade 3.0.19 -> 3.0.20Yi Zhao2020-02-063-120/+77
| | | | | | | | | | | * Drop backported patch: 0001-su-to-radiusd-user-group-when-rotating-logs.patch * Disable python2 module build and add PACKAGECONFIG for python3 module build Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-networking: Remove using python2Khem Raj2020-01-221-2/+2
| | | | | | | This change makes the parsing go though, we still might have build issues, which will be reported in world builds seprately Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: set CLEANBROKENYi Zhao2019-11-011-0/+2
| | | | | | | | | | Fixed make clean error: NOTE: make clean Makefile:36: *** Missing 'Make.inc' Run './configure [options]' and retry. Stop. ERROR: oe_runmake failed Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: fix PIDFile path in radiusd.service fileTrevor Gamblin2019-10-211-2/+2
| | | | | | | | | | | | | | radiusd.service references a legacy path for its PIDFile, which results in a warning at boot: systemd[1]: /lib/systemd/system/radiusd.service:7: PIDFile= references a path below legacy directory /var/run/, updating /var/run/radiusd/radiusd.pid → /run/radiusd/radiusd.pid; please update the unit file accordingly. Modify the recipe's radiusd.service file to use the correct path. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: fix CVE-2019-10143Yi Zhao2019-10-162-0/+105
| | | | | | | | | | | Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-10143 Patch from: https://github.com/FreeRADIUS/freeradius-server/commit/1f233773962bf1a9c2d228a180eacddb9db2d574 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: add -latomic for armv5Trevor Gamblin2019-10-081-0/+1
| | | | | | | | | | | | | | | | | | | | | freeradius fails to build for armv5: | *** Warning: Linking the executable build/bin/local/radeapclient against the loadable module | *** libfreeradius-server.so is not portable! | | *** Warning: Linking the executable build/bin/local/radeapclient against the loadable module | *** libfreeradius-eap.so is not portable! path -Wl,/yow-lpggp31/tgamblin/freeradius.build/tmp-glibc/work/armv5e-oe-linux-gnueabi/freeradius/3.0.19-r0/git/build/lib/local//.libs /arm-oe-linux-gnueabi/9.2.0/ld: build/lib/local/.libs/libfreeradius-radius.so: undefined reference to `__atomic_compare_exchange_8' /arm-oe-linux-gnueabi/9.2.0/ld: build/lib/local/.libs/libfreeradius-radius.so: undefined reference to `__atomic_load_8' /arm-oe-linux-gnueabi/9.2.0/ld: build/lib/local/.libs/libfreeradius-radius.so: undefined reference to `__atomic_store_8' | collect2: error: ld returned 1 exit status | scripts/boiler.mk:630: recipe for target 'build/bin/local/radeapclient' failed Explicitly link libatomic to fix the issue. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: upgrade 3.0.17 -> 3.0.19Changqing Li2019-09-025-258/+32
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: add runtime dependency on perlMartin Jansa2019-08-171-1/+1
| | | | | | | | * fixes: ERROR: QA Issue: /usr/bin/radcrypt contained in package freeradius-utils requires /usr/bin/perl, but no providers found in RDEPENDS_freeradius-utils? [file-rdeps] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: Add PACKAGECONFIG openssl/rlm-eap-fast/rlm-eap-pwdChangqing Li2019-02-281-0/+4
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: update radiusd.serviceChangqing Li2019-02-271-1/+0
| | | | | | | | | Update radiusd.service that not run script /etc/raddb/certs/bootstrap before start radiusd. The script makes a set of default certificates. It should be only used for test purpose. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: fix radiusd.service startup failed problemChangqing Li2018-10-102-0/+45
| | | | | | | | | | | | | during radiusd start up, it will check several CVEs of libssl, if allow_vulnerable_openssl set to no and one of the CVEs is matched, radiusd will not startup. in tls.c, two CVEs's version number is wrong, and after upgrade openssl to 1.1.1, one CVE matched, so startup failed. correct the version numner to make radiusd startup successfully. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: upgrade 3.0.15 -> 3.0.17Changqing Li2018-07-273-83/+39
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: Upgrade to 3.0.15Jackie Huang2017-09-121-3/+2
| | | | | | | | | | | | * Upgrade to 3.0.15 to fix many CVE issues. * There is a defect for disabling dhcp feature: https://github.com/FreeRADIUS/freeradius-server/issues/2039 We don't need the dhcp feature but it's harmless to enable it, so enable it as the default. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* freeradius: Upgrade to 3.0.14Khem Raj2017-06-282-5/+33
| | | | | | | | | | | | | | | Fix a cross compile issue where it was looking for samba headers in build host. in src/modules/rlm_mschap/config.log Fix cc1: warning: include location "/usr/include/samba-4.0/" is unsafe for cross-compilation [-Wpoison-system-directories] Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* freeradius: add new recipeJackie Huang2017-06-2815-0/+1314
FreeRADIUS is an Internet authentication daemon, which implements the RADIUS protocol, as defined in RFC 2865 (and others). Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-09-21 22:59:29 +0000