summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-support/stunnel
Commit message (Collapse)AuthorAgeFilesLines
* stunnel: upgrade 5.69 -> 5.72Wang Mingyu2024-03-082-18/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fix-openssl-no-des.patch refreshed for 5.72 License-Update: Copyright year updated to 2024. Changelog: =========== * Security bugfixes - OpenSSL DLLs updated to version 3.2.1. - OpenSSL FIPS Provider updated to version 3.0.8. * Bugfixes - Fixed SSL_CTX_new() errors handling. - Fixed OPENSSL_NO_PSK builds. - Android build updated for NDK r23c. - stunnel.nsi updated for Debian 12. - Fixed tests with OpenSSL older than 1.0.2. - Fixed the console output of tstunnel.exe. - Fixed TLS socket EOF handling with OpenSSL 3.x. This bug caused major interoperability issues between stunnel built with OpenSSL 3.x and Microsoft's Schannel Security Support Provider (SSP). - Fixed reading certificate chains from PKCS#12 files. * Features sponsored by SAE IT-systems - OCSP stapling is requested and verified in the client mode. - Using "verifyChain" automatically enables OCSP stapling in the client mode. - OCSP stapling is always available in the server mode. - An inconclusive OCSP verification breaks TLS negotiation. This can be disabled with "OCSPrequire = no". - Added the "TIMEOUTocsp" option to control the maximum time allowed for connecting an OCSP responder. * Features - Added support for Red Hat OpenSSL 3.x patches. - Added configurable delay for the "retry" option. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.67 -> 5.69Wang Mingyu2023-03-091-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: Copyright year updated to 2023. Changelog: ========== * New features - Improved logging performance with the "output" option. - Improved file read performance on the WIN32 platform. - DH and kDHEPSK ciphersuites removed from FIPS defaults. - Set the LimitNOFILE ulimit in stunnel.service to allow for up to 10,000 concurrent clients. - Added the new 'CAengine' service-level option to load a trusted CA certificate from an engine. - Added requesting client certificates in server mode with 'CApath' besides 'CAfile'. - Improved file read performance. - Improved logging performance. * Bugfixes - Fixed the "CApath" option on the WIN32 platform by applying https://github.com/openssl/openssl/pull/20312. - Fixed stunnel.spec used for building rpm packages. - Fixed tests on some OSes and architectures by merging Debian 07-tests-errmsg.patch (thx to Peter Pentchev). - Fixed EWOULDBLOCK errors in protocol negotiation. - Fixed handling TLS errors in protocol negotiation. - Prevented following fatal TLS alerts with TCP resets. - Improved OpenSSL initialization on WIN32. - Improved testing suite stability. * Security bugfixes - OpenSSL DLLs updated to version 3.0.8. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.66 -> 5.67Wang Mingyu2022-11-091-1/+1
| | | | | | | | | | | | | | | | | | | | | Changelog: ========== Security bugfixes ----------------- OpenSSL DLLs updated to version 3.0.7. New features ------------ Provided a logging callback to custom engines. Bugfixes --------- OpenSSL DLLs updated to version 3.0.6. Fixed "make cert" with OpenSSL older than 3.0. Fixed the code and the documentation to use concious language for SNI servers (thx to Clemens Lang). Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.65 -> 5.66zhengrq.fnst2022-10-101-1/+1
| | | | | | | | | | | | | | Changelog: =========== New features OpenSSL 3.0 FIPS Provider support for Windows. Bugfixes Fixed building on machines without pkg-config. Added the missing "environ" declaration for BSD-based operating systems. Fixed the passphrase dialog with OpenSSL 3.0. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.64 -> 5.65wangmy2022-07-262-8/+18
| | | | | | | | | | | | | | | | | fix-openssl-no-des.patch refreshed for version 5.65 Changelog: ========== Security bugfixes OpenSSL DLLs updated to version 3.0.5. Bugfixes Fixed handling globally enabled FIPS. Fixed the default openssl.cnf path in stunnel.exe. Fixed a number of MSVC warnings. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.63 -> 5.64wangmy2022-05-091-1/+1
| | | | | | | | | | | | | | | Changelog: ========== Security bugfixes OpenSSL DLLs updated to version 3.0.3. New features Updated the pkcs11 engine for Windows. Bugfixes Removed the SERVICE_INTERACTIVE_PROCESS flag in "stunnel -install". Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: Update to 5.63Robert Joslyn2022-03-261-8/+5
| | | | | | | | | | | | | | License checksum changed due to copyright year update. The license is GPLv2+ with an OpenSSL exception. Switch fetch from ftp to https. This works better with proxies that frequently block traffic like ftp. stunnel added bash completion support in version 5.62, use the class to package the files properly. Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Update LICENSE variable to use SPDX license identifiersKhem Raj2022-03-041-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Convert to new override syntaxMartin Jansa2021-08-031-2/+2
| | | | | | | | | | This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* stunnel: upgrade 5.58 -> 5.59zangrc2021-04-082-6/+6
| | | | | | | | Refresh the following patch: fix-openssl-no-des.patch Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.57 -> 5.58Wang Mingyu2021-02-241-2/+2
| | | | | | | License-Update: Update year to 2021 Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.56 -> 5.57Pierre-Jean Texier2020-10-191-3/+2
| | | | | | | | | | | | | | | | | License-Update: copyright years updated. This is a bug fix release: - X.509 v3 extensions required by modern versions of OpenSSL are added to generated self-signed test certificaes. - Fixed a tiny memory leak in configuration file reload error handling (thx to Richard Könning). - Merged Debian 05-typos.patch (thx to Peter Pentchev). - Merged with minor changes Debian 06-hup-separate.patch (thx to Peter Pentchev). - Merged Debian 07-imap-capabilities.patch (thx to Ansgar). - Merged Debian 08-addrconfig-workaround.patch (thx to Peter Pentchev). - Fixed tests on the WSL2 platform. Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: bump to version 5.56William A. Kennington III via Openembedded-devel2019-12-301-3/+3
| | | | | | | | | | | Release notes of the bugfix release: - https://www.stunnel.org/NEWS.html Also: - rename COPYING to COPYING.md Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: bump to version 5.55Pierre-Jean Texier2019-07-101-2/+2
| | | | | | | See full changelog https://www.stunnel.org/ChangeLog.md.html Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: update to 5.51Oleksandr Kravchuk2019-04-091-3/+3
| | | | | | | COPYING checksum was changed due to modified copyright years. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: update 5.35 -> 5.49Andre McCurdy2018-09-142-26/+37
| | | | | | | | | | | | | | | - Update LIC_FILES_CHKSUM due to change in COPYING copyright year - Fix dependency on libnsl2 (previously provided indirectly by tcp-wrappers) - Drop obsolete dependency on zlib - Add PACKAGECONFIG control for libwrap - Move legacy stunnel3 wrapper (and its perl dependency) into separate package For a full list of changes between stunnel 5.35 and 5.49 see: https://www.stunnel.org/sdf_ChangeLog.html Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: Use nogroup rather then nobody for groupJeremy Puhlman2018-06-161-0/+2
| | | | | | | [log_check] warning: group nobody does not exist - using root Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: fix compile error when openssl disable des supportKai Kang2018-01-082-1/+57
| | | | | | | | | | | | When openssl disable des support with configure option 'no-des', it doesn't provide des related header file and functions. That causes stunnel compile failed. Fix it by checking macro OPENSSL_NO_DES to use openssl des related library conditionaly. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* stunnel: Add HOMEPAGE info into recipe file.Huang Qiyu2017-09-221-0/+1
| | | | | | Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* Make use of the new bb.utils.filter() functionPeter Kjellerstedt2017-03-071-3/+1
| | | | | Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* stunnel: 5.28 -> 5.35Wang Xin2016-09-121-2/+2
| | | | | | | | Upgrade stunnel from 5.28 to 5.35. Signed-off-by: Wang Xin <wangxin2015.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* stunnel: control ipv6 support based on DISTRO_FEATURESJackie Huang2016-09-051-1/+4
| | | | | | | | | Add PACKAGECONFIG for ipv6 and control it based on DISTRO_FEATURES. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* meta-networking: use bb.utils.contains() instead of base_contains()Ross Burton2016-05-051-1/+1
| | | | | | | | | base_contains() is a compatibility wrapper and may warn in the future, so replace all instances with bb.utils.contains(). Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* stunnel: 5.21 -> 5.28Dai Caiyun2016-01-201-2/+2
| | | | | | | | Upgrade stunnel from 5.21 to 5.28. Signed-off-by: Dai Caiyun <daicy.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* stunnel: upgrade 5.17 -> 5.21Li xin2015-08-061-2/+2
| | | | | | Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* stunnel: upgrade to 5.17Roy Li2015-06-051-2/+2
| | | | | | | | | upgrade to include the fix for CVE-2015-3644: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3644 Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* stunnel: Update to version 5.10Sven Ebenfeld2015-03-102-17/+20
| | | | | | Signed-off-by: Sven Ebenfeld <sven.ebenfeld@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* stunnel: add perl to RDEPENDS_stunnelRobert Yang2014-09-261-0/+2
| | | | | | | Perl: stunnel/usr/bin/stunnel3:#!/usr/bin/perl Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
* stunnel: add dependency on zlib and tcp-wrappersMartin Jansa2014-08-111-1/+1
| | | | | | | * fixes floating dependency: stunnel/stunnel/latest lost dependency on libwrap zlib Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* stunnel: fix configure ssl parameterJavier Viguera2014-04-241-1/+1
| | | | | | | | | | | | | | | | | | '--with-ssl=DIR' configure parameter expects the location of the libraries and include files in the sysroot. This means the directory containing the 'lib' and 'include' subdirectories, not the include directory itself. This fixes an error at configure time: checking <local-path>/tmp/sysroots/ccimx6adpt/usr/include/include/openssl/engine.h usability... no (notice duplicated include entry in above line) Signed-off-by: Javier Viguera <javier.viguera@digi.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* stunnel: fix SRC_URIJavier Viguera2014-04-021-1/+1
| | | | | | | | | | | | Trying to build stunnel fails with: ERROR 404: Not Found. Seems that after the new release (5.x) they have moved the old tarball under a 'archive/4.x' subdirectory. Signed-off-by: Javier Viguera <javier.viguera@digi.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issuesMatthieu CRAPET2014-02-231-1/+2
| | | | | | | | | | | | | Changes: - rename SUMMARY with length > 80 to DESCRIPTION - rename DESCRIPTION with length < 80 to (non present tag) SUMMARY - drop final point character at the end of SUMMARY string - remove trailing whitespace of SUMMARY line Note: don't bump PR Signed-off-by: Matthieu Crapet <Matthieu.Crapet@ingenico.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* stunnel: Add 4.56 versionLaszlo Papp2013-09-051-0/+14
Signed-off-by: Laszlo Papp <lpapp@kde.org> Signed-off-by: Joe MacDonald <joe@deserted.net>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-07-11 21:05:02 +0000