buffer to hold a numeric IPv4/v6 address. Of course, IPv6 addresses may
be a bit longer than 20 characters :)
A-ha! moment during: discussion with the stunnel author
- enable the new IPv6 functionality when WITH_IPV6 is defined;
- at last move over to libtool-1.5 and get rid of the .la file;
- update the WITH_STUNNEL_SSL_ENGINE message to also mention FreeBSD 6.x;
- remove the obsolete sock_ioctlsocket() definition from patch-aa;
- fix a couple of getnameinfo(3)-related buglets;
- fix a poll(2)-related buglet: it seems FreeBSD insists (correctly) that
INFTIM passed to poll(2) should be -1, not just any negative value.
PR: 75519 (somewhat)
Submitted by: Dan Langille <dan@langille.org>
that the OpenSSL ENGINE code is, well, somewhat less than stellar,
especially in combo with malloc's 'j' option. Even without it, though,
there are some problems that I don't have time to look into right now.
So, disable the OpenSSL ENGINE activation on FreeBSD 5.x, unless
the WITH_STUNNEL_SSL_ENGINE knob is turned on. Also, while I'm here,
fix the CONFIGURE_TARGET so the GNU configure script does not complain
quite so loudly. Bump PORTREVISION for the functionality change
(well, I guess you could say "not working" -> "working" is a functionality
change ;)
the blinding when really needed. However, the name of
the patch file was not changed, which may confuse FreeBSD
distfile mirrors. So, host the patch file in my local
FreeBSD cluster space, changing the file's name.
Reported by: Dan Langille <dan@langille.org>
Note: this patch is not needed for the 4.8-RELEASE ports tree, since
FreeBSD 4.8 will ship with a fixed OpenSSL version. However, this patch
SHOULD be applied by anyone running stunnel with a version of OpenSSL
older than 0.9.7a, as reported by the 'openssl version' command.
Submitted by: Brian Hatch <bri@stunnel.org>
autoconf or automake over our local patches can ruin your whole day.
This rarely, if ever, affected the vpopmail ports, causing mysterious
failures at install time, but inevitably killed the stunnel build if
automake-1.5 happened to be installed.
Reported by: Dan Langille <dan@langille.org> for stunnel,
Sitchin Zech <mailsagan@yahoo.com> for vpopmail
*** WARNING WARNING WARNING ***
The stunnel invocation has changed! The program no longer accepts
command-line options, but is controlled by a config file instead.
Please refer to the stunnel(8) manual page for more information.
PR: 42249
Submitted by: Dan Langille <dan@langille.org>, lioux
- No resposnse from MAINTAINER
Submitter marked this as critical because the current version of the port has
security issues, see Message-ID: <20011227210538.GH3494@ifokr.org>
Subject: Stunnel: Format String Bug in versions <3.22
on the bugtraq list.
patch confirmed and tested.
PR: 33285, 33251
Submitted by: joseph@randomnetworks.com
Add a new knob, PEM_DIR, to specify the path to install the certificate
generated during the stunnel build, and later, the one generated using
the 'cert' target of the port Makefile.
Approved by: maintainer
Changelog for version 3.20, 2001.08.15, urgency: LOW:
* setsockopt() optlen set according to the optval for Solaris.
* Minor NetBSD compatibility fixes by Martti Kuparinen.
* Minor MSVC6 compatibility fixes by Patrick Mayweg.
* SSL close_notify timeout reduced to 10 seconds of inactivity.
* Socket close instead of reset on close_notify timeout.
* Some source arrangement and minor bugfixes.
PR: 29766
Submitted by: maintainer
* MAX_CLIENTS is calculated based on FD_SETSIZE, now.
* Problems with closing SSL in transfer() fixed.
* -I option to bind a static local IP address added.
* Debug output of info_callback redesigned.
o Reorder MASTER_SITES
PR: 29358
Submitted by: maintainer
it is no longer required. Apologies to the various maintainers whom I
did not yet hear back from, but the ports freeze is coming up in a few
hours and I will be verifying all of these ports on a 4.1 machine
myself to catch any problems.
