target actually work again.
Follow the upstream author's idea of keeping all stunnel-related
configuration files into ${PREFIX}/etc/stunnel/ - now "make cert" also
installs the certificate there instead of ${PREFIX}/etc/.
Bump PORTREVISION and add a note to UPDATING for the certificate
location change.
PR: 91991
Reported by: Jiri Pridal <jiri.pridal@firebrno.cz>
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.
Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.
Preliminary documentation can be found at:
http://people.FreeBSD.org/~ade/autotools.txt
which is in the process of being SGMLized before introduction into the
Porters Handbook.
Light blue touch-paper. Run.
Remove our local patches for ucontext/pthread/fork model choice, since
this is handled by a configure argument now.
Note that ucontext is not supported on FreeBSD versions less than 5.0.
PR: 83245 (mostly)
Submitted by: Vasil Dimov <vd@datamax.bg>
Michael Trojnara[1].
Also, add the build-time WITH_FORK, WITH_PTHREAD, and WITH_UCONTEXT knobs
to control the stunnel threading model used, based on Vasil Dimov's PR's
with some modifications [2].
While I'm here, add in a <sys/types.h> inclusion that seems to be needed
for <ucontext.h> at least on FreeBSD 6.0/sparc64.
Reported by: many
Pointy hat to: roam (myself) for both not noticing this and then letting
it linger for a while
Obtained from: Michael Trojnara's BSD patch from
<53594c631989fde6ca0bdb3435b93dfe@mirt.net> [1]
PR: 81289, 82202 [2]
Submitted by: Vasil Dimov
buffer to hold a numeric IPv4/v6 address. Of course, IPv6 addresses may
be a bit longer than 20 characters :)
A-ha! moment during: discussion with the stunnel author
temporarily aliased to EAI_NONAME.
No PORTREVISION bump, since this is a no-op on earlier and later versions,
and it didn't build at all until now on the affected versions.
Reported by: Bretislav Kubesa <bretislav.kubesa@centrum.cz>
- enable the new IPv6 functionality when WITH_IPV6 is defined;
- at last move over to libtool-1.5 and get rid of the .la file;
- update the WITH_STUNNEL_SSL_ENGINE message to also mention FreeBSD 6.x;
- remove the obsolete sock_ioctlsocket() definition from patch-aa;
- fix a couple of getnameinfo(3)-related buglets;
- fix a poll(2)-related buglet: it seems FreeBSD insists (correctly) that
INFTIM passed to poll(2) should be -1, not just any negative value.
PR: 75519 (somewhat)
Submitted by: Dan Langille <dan@langille.org>
that the OpenSSL ENGINE code is, well, somewhat less than stellar,
especially in combo with malloc's 'j' option. Even without it, though,
there are some problems that I don't have time to look into right now.
So, disable the OpenSSL ENGINE activation on FreeBSD 5.x, unless
the WITH_STUNNEL_SSL_ENGINE knob is turned on. Also, while I'm here,
fix the CONFIGURE_TARGET so the GNU configure script does not complain
quite so loudly. Bump PORTREVISION for the functionality change
(well, I guess you could say "not working" -> "working" is a functionality
change ;)
the blinding when really needed. However, the name of
the patch file was not changed, which may confuse FreeBSD
distfile mirrors. So, host the patch file in my local
FreeBSD cluster space, changing the file's name.
Reported by: Dan Langille <dan@langille.org>
Note: this patch is not needed for the 4.8-RELEASE ports tree, since
FreeBSD 4.8 will ship with a fixed OpenSSL version. However, this patch
SHOULD be applied by anyone running stunnel with a version of OpenSSL
older than 0.9.7a, as reported by the 'openssl version' command.
Submitted by: Brian Hatch <bri@stunnel.org>
autoconf or automake over our local patches can ruin your whole day.
This rarely, if ever, affected the vpopmail ports, causing mysterious
failures at install time, but inevitably killed the stunnel build if
automake-1.5 happened to be installed.
Reported by: Dan Langille <dan@langille.org> for stunnel,
Sitchin Zech <mailsagan@yahoo.com> for vpopmail
*** WARNING WARNING WARNING ***
The stunnel invocation has changed! The program no longer accepts
command-line options, but is controlled by a config file instead.
Please refer to the stunnel(8) manual page for more information.
PR: 42249
Submitted by: Dan Langille <dan@langille.org>, lioux
- No resposnse from MAINTAINER
Submitter marked this as critical because the current version of the port has
security issues, see Message-ID: <20011227210538.GH3494@ifokr.org>
Subject: Stunnel: Format String Bug in versions <3.22
on the bugtraq list.
patch confirmed and tested.
PR: 33285, 33251
Submitted by: joseph@randomnetworks.com
Add a new knob, PEM_DIR, to specify the path to install the certificate
generated during the stunnel build, and later, the one generated using
the 'cert' target of the port Makefile.
Approved by: maintainer
Changelog for version 3.20, 2001.08.15, urgency: LOW:
* setsockopt() optlen set according to the optval for Solaris.
* Minor NetBSD compatibility fixes by Martti Kuparinen.
* Minor MSVC6 compatibility fixes by Patrick Mayweg.
* SSL close_notify timeout reduced to 10 seconds of inactivity.
* Socket close instead of reset on close_notify timeout.
* Some source arrangement and minor bugfixes.
PR: 29766
Submitted by: maintainer
* MAX_CLIENTS is calculated based on FD_SETSIZE, now.
* Problems with closing SSL in transfer() fixed.
* -I option to bind a static local IP address added.
* Debug output of info_callback redesigned.
o Reorder MASTER_SITES
PR: 29358
Submitted by: maintainer
