linux/meta-openembedded.git/meta-networking/recipes-support/stunnel, branch styhead-next

stunnel: upgrade 5.72 -> 5.73

2024-11-19T21:13:19+00:00

fix-openssl-no-des.patch refreshed for 5.73 Changelog: =========== * Security bugfixes - OpenSSL DLLs updated to version 3.3.2. - OpenSSL FIPS Provider updated to version 3.0.9. * Bugfixes - Fixed a memory leak while reloading stunnel.conf sections with "client=yes" and "delay=no". - Fixed TIMEOUTocsp with values greater than 4. - Fix the IPv6 test on a non-IPv6 machine. * Features - HELO replaced with EHLO in the post-STARTTLS SMTP protocol negotiation (thx to Peter Pentchev). - OCSP stapling fetches moved away from server threads. - Improved client-side session resumption. - Added support for the mimalloc allocator. - Check for protocolHost moved to configuration file processing for the client-side CONNECT protocol. - Clarified some confusing OpenSSL's certificate verification error messages. - stunnel.nsi updated for Debian 13 and Fedora. - Improved NetBSD compatibility. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

stunnel: upgrade 5.69 -> 5.72

2024-03-08T18:07:24+00:00

fix-openssl-no-des.patch refreshed for 5.72 License-Update: Copyright year updated to 2024. Changelog: =========== * Security bugfixes - OpenSSL DLLs updated to version 3.2.1. - OpenSSL FIPS Provider updated to version 3.0.8. * Bugfixes - Fixed SSL_CTX_new() errors handling. - Fixed OPENSSL_NO_PSK builds. - Android build updated for NDK r23c. - stunnel.nsi updated for Debian 12. - Fixed tests with OpenSSL older than 1.0.2. - Fixed the console output of tstunnel.exe. - Fixed TLS socket EOF handling with OpenSSL 3.x. This bug caused major interoperability issues between stunnel built with OpenSSL 3.x and Microsoft's Schannel Security Support Provider (SSP). - Fixed reading certificate chains from PKCS#12 files. * Features sponsored by SAE IT-systems - OCSP stapling is requested and verified in the client mode. - Using "verifyChain" automatically enables OCSP stapling in the client mode. - OCSP stapling is always available in the server mode. - An inconclusive OCSP verification breaks TLS negotiation. This can be disabled with "OCSPrequire = no". - Added the "TIMEOUTocsp" option to control the maximum time allowed for connecting an OCSP responder. * Features - Added support for Red Hat OpenSSL 3.x patches. - Added configurable delay for the "retry" option. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

stunnel: upgrade 5.67 -> 5.69

2023-03-10T07:45:17+00:00

License-Update: Copyright year updated to 2023. Changelog: ========== * New features - Improved logging performance with the "output" option. - Improved file read performance on the WIN32 platform. - DH and kDHEPSK ciphersuites removed from FIPS defaults. - Set the LimitNOFILE ulimit in stunnel.service to allow for up to 10,000 concurrent clients. - Added the new 'CAengine' service-level option to load a trusted CA certificate from an engine. - Added requesting client certificates in server mode with 'CApath' besides 'CAfile'. - Improved file read performance. - Improved logging performance. * Bugfixes - Fixed the "CApath" option on the WIN32 platform by applying https://github.com/openssl/openssl/pull/20312. - Fixed stunnel.spec used for building rpm packages. - Fixed tests on some OSes and architectures by merging Debian 07-tests-errmsg.patch (thx to Peter Pentchev). - Fixed EWOULDBLOCK errors in protocol negotiation. - Fixed handling TLS errors in protocol negotiation. - Prevented following fatal TLS alerts with TCP resets. - Improved OpenSSL initialization on WIN32. - Improved testing suite stability. * Security bugfixes - OpenSSL DLLs updated to version 3.0.8. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

stunnel: upgrade 5.66 -> 5.67

2022-11-09T18:17:15+00:00

Changelog: ========== Security bugfixes ----------------- OpenSSL DLLs updated to version 3.0.7. New features ------------ Provided a logging callback to custom engines. Bugfixes --------- OpenSSL DLLs updated to version 3.0.6. Fixed "make cert" with OpenSSL older than 3.0. Fixed the code and the documentation to use concious language for SNI servers (thx to Clemens Lang). Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

stunnel: upgrade 5.65 -> 5.66

2022-10-10T17:19:33+00:00

Changelog: =========== New features OpenSSL 3.0 FIPS Provider support for Windows. Bugfixes Fixed building on machines without pkg-config. Added the missing "environ" declaration for BSD-based operating systems. Fixed the passphrase dialog with OpenSSL 3.0. Signed-off-by: Zheng Ruoqin Signed-off-by: Khem Raj

stunnel: upgrade 5.64 -> 5.65

2022-07-26T14:40:35+00:00

fix-openssl-no-des.patch refreshed for version 5.65 Changelog: ========== Security bugfixes OpenSSL DLLs updated to version 3.0.5. Bugfixes Fixed handling globally enabled FIPS. Fixed the default openssl.cnf path in stunnel.exe. Fixed a number of MSVC warnings. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

stunnel: upgrade 5.63 -> 5.64

2022-05-09T15:59:46+00:00

Changelog: ========== Security bugfixes OpenSSL DLLs updated to version 3.0.3. New features Updated the pkcs11 engine for Windows. Bugfixes Removed the SERVICE_INTERACTIVE_PROCESS flag in "stunnel -install". Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

stunnel: Update to 5.63

2022-03-27T01:15:11+00:00

License checksum changed due to copyright year update. The license is GPLv2+ with an OpenSSL exception. Switch fetch from ftp to https. This works better with proxies that frequently block traffic like ftp. stunnel added bash completion support in version 5.62, use the class to package the files properly. Signed-off-by: Robert Joslyn Signed-off-by: Khem Raj

recipes: Update LICENSE variable to use SPDX license identifiers

2022-03-05T01:41:45+00:00

Signed-off-by: Khem Raj

Convert to new override syntax

2021-08-03T17:21:25+00:00

This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa