Commit graph

341318 commits

Author SHA1 Message Date
tnn
09a7d78253 synergy: clang build fix 2021-06-27 08:51:34 +00:00
wiz
c82b675ef4 doc/TODO: add some
+ alsa-lib-1.2.5.1, cairomm-1.16.1, enchant2-2.3.0, exiv2-0.27.4,
  grpc-1.38.1, gsl-2.7, musicpd-0.22.9.
2021-06-27 08:51:27 +00:00
tnn
9b8c5dec17 doc: note GNU Radio update 2021-06-27 08:15:27 +00:00
tnn
41ca9dfb38 meta-pkgs/gnuradio: update to 3.9.2.0 2021-06-27 08:14:45 +00:00
tnn
e20e880208 + gnuradio-soapy-sdr 2021-06-27 08:12:28 +00:00
tnn
4865279fb7 ham/gnuradio-soapy-sdr: import gnuradio-soapy-sdr-3.9.2.0
GNU Radio bindings for SoapySDR.
2021-06-27 08:11:54 +00:00
tnn
4d767b0bb3 gnuradio-*: update to 3.9.2.0
Changed
 SoapySDR support (gr-soapy)
GRC
  Parameter expressions and/or values can be displayed in blocks on the flowgraph. Previously, only values were displayed. Look for the "Show Parameter ..." toggles under the View menu.
  Deprecated blocks are shown in a distinct color (orange), and the optional deprecated property has been added to block yaml
  Dark theme works better, especially for parameter fields
  Vector length is now correctly applied to all input ports
  Validation has been improved. Raw types are validated. Port connections are checked by type rather than by item size.
  Variable names that cause name conflicts in Python code (e.g., with package names) are rejected
  Bus logic fixes
  Blocks can no longer be dragged off the screen and lost forever
gnuradio-runtime
  Remove pmt::pmt_* functions, which were not actually implemented. This is technically an API change, but any use of the API would have resulted in a link error.
  Remove Python bindings for internal buffer functions
gr-analog
  Added an example for PLL Frequency Detector
  Better names for parameters in PLL GRC blocks
gr-blocks
  Consistent naming for Vector Length parameter in GRC blocks
  count_bits uses VOLK popcnt for better performance (used for example in the Correlate Access Code block)
  Rotator block phase increment parameter is controllable via a message, and a tag can be added at the point where the increment is adjusted
gr-digital
  MPSK example updated to use a Linear Equalizer (replacing deprecated block)
gr-filter
  Filter Delay documentation improvement
  Interpolating FIR filter can generate C++ code
gr-dtv
  VL-SNR bugs fixed (incorrect constants).
gr-qtgui
  Improve autoscaling for vector sinks
  Fix floating-point resolution problems in several widgets, due to interpretation of PMT doubles as floats
gr-uhd
  Add policy enum to Python bindings for tune_request
  Additional time spec options on UHD blocks (PC Clock on Next PPS, GPS Time on Next PPS)
  Fix up code that was generating warnings
  Fix command handler logic to apply commands from messages to the correct channel
gr_filter_design
  "File/Save" is disabled until the taps have been computed, and the GUI is reset after a save, to make it clearer which data is being saved.
  Entries are hidden for parameters that do not apply to the selected filter type.
  Save window type as an integer instead of a Python enum name
gr_modtool
  Improve validation of module and block names
Build System and Infrastructure
  Improved messages related to dependencies MPIR and GMP. Only one of these packages is required, and the previous error messages were confusing.
  Cleaner builds for Windows and Conda. A number of general cmake improvements have resulted from this work.
  In-tree packaging files for DEB and RPM, used with Launchpad and COPR
  Added man pages for GNU Radio tools
  Test code generation for all in-tree GRC examples
  In GrPybind.cmake, PYBIND11_INCLUDE_DIR (incorrect) was changed to
  pybind11_INCLUDE_DIR
2021-06-27 08:08:59 +00:00
tnn
63af6386f0 openjdk11: revert options.mk 1.5
https://mail-index.netbsd.org/pkgsrc-changes/2021/06/22/msg237065.html
2021-06-27 07:53:43 +00:00
nia
a1e2faba18 pt2-clone: remove list of operating systems from DESCR 2021-06-27 07:15:55 +00:00
nia
e3f79d276e dev86: update DESCR 2021-06-27 07:15:22 +00:00
nia
daebf1995c tint2: avoid listing operating systems in COMMENT 2021-06-27 07:13:47 +00:00
nia
0cf3954772 dev86: nothing about this package is Linux specific 2021-06-27 07:09:56 +00:00
nia
3bec43f574 pt2-clone: remove list of operating systems from COMMENT 2021-06-27 07:07:44 +00:00
nia
13328b096c mysql80: use __builtin_ffsll where ffsll is missing
mysql80 uses some inline asm on x86_64, but falls back to the
function on non-x86_64. netbsd does not have a ffsll function.
helps build on non-x86_64.
2021-06-27 06:41:55 +00:00
nia
c562656c5f eltclsh: Avoid infinite loop in build, PR pkg/56259 2021-06-27 05:56:02 +00:00
dholland
233b5821ec lang/kaffe: Fix broken build on current by patching invalid regexp. 2021-06-27 01:22:51 +00:00
rhialto
41594f048c doc: Updated x11/XaoS to 4.2.1 2021-06-26 21:22:00 +00:00
rhialto
a06f6215fc x11/XaoS: update to version 4.2.1.
Lots of changes, the biggest of which is that it now uses Qt5 as GUI toolkit.

4.2

New Features

    Palette editor, save/load palettes, storing user palettes in the .xpf file.
    The option 'User formulas' maintains a history of recently used formulas.
    Fractal info in the Help menu.
    Batch rendering.
    Enabled panning in rotate mode.
    Unified Open and Open Image option. Save Image option moved to Save as.

4.1

New Features

    Added option to show Cartesian coordinate grid.
    Custom palette helps visualizing palette before applying changes through slider selectable values now.
    PNGs exported using 'Save Image' option can be imported back and users can continue zooming on it.

4.0

What's new in 4.0

    The user interface is based on Qt, so XaoS has a modern look and feel.
    Works on macOS Catalina, which broke older versions.
    Animation rendering has been fixed.
    Menu entries are now standardized.
    TrueType text rendering so fonts look nicer and non-Latin alphabets are supported.
    Hindi, Icelandic, Russian, Serbian and Swedish translations.
    Several minor updates for the other languages.
    The language can be set in the View menu now.
    Lots of bug fixes.
    Zooming is possible also with the mouse wheel.
    Mouse cursor has been changed to cross.
    Iteration number N can be used in user formulas.
    Lots of source code cleanup and refactoring. It may not be obvious to end users but this will allow us to make better features and more frequent releases in the future.

3.7

There were quite a few bug fixes at this point since 3.6 was released.
2021-06-26 21:21:32 +00:00
tnn
f4ebe1f81e go-sys: Remove perl runtime dependency. Bump.
From what I can tell there are no perl scripts in the package, so
removed the build dependency also.
2021-06-26 17:58:17 +00:00
tnn
1203b50d94 gcc*: disable full bootstrap when the pkgsrc compiler is clang
LLVM versions >= 12 cannot currently correctly compile gcc stage 1 because
GCC assumes references to certain symbols like "ix86_isa_flags" will be
optimized away.
Details: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=255760
2021-06-26 17:42:23 +00:00
rhialto
71d36e502d emulators/fs-uae: correct condition for jit and set NOT_PAX_MPROTECT_SAFE 2021-06-26 14:08:44 +00:00
rhialto
8f49526d64 doc: Updated x11/x3270 to 4.0ga14 2021-06-26 13:51:55 +00:00
rhialto
fe8692168f x11/x3270: update to 4.0ga14.
Known issues

    * When running on Cygwin, child scripts (the Script() action, Execute() action and Prompt() action) fail with a bind error.

Improvements

    None.

Bug fixes

    The last screenful of NVT mode text is no longer lost when scrolling backwards.
    The programs ar and ranlib are resolved dynamically now when building.
    Numeric fields no longer ignore non-numeric characters and commas, when the NumericLock resource is false. When it is true, commas are considered valid numeric characters.
    Proxy connections did not initialize TELNET state properly (courtesy of Andreas Krebbel).
2021-06-26 13:51:20 +00:00
maya
464228fa7a switch $echo statements to printf "%s\n".
dash considers \1 to be octal escape.

for PR pkg/56248, from Michael Forney's suggestion.
$echo seems to be used for performance here (was previously cat) and not
for compatibility with some esoteric system.

I misunderstood things, and failed to test the last bootstrap diff, breaking
bootstrap on Ubuntu for a while.
2021-06-25 22:02:06 +00:00
adam
834204edf6 Updated databases/sqlite3, databases/sqlite3-docs, databases/sqlite3-tcl, devel/lemon 2021-06-25 21:22:21 +00:00
adam
2dafeba07e sqlite3: updated to 3.36.0
SQLite Release 3.36.0 On 2021-06-18

Improvement to the EXPLAIN QUERY PLAN output to make it easier to understand.
Byte-order marks at the start of a token are skipped as if they were whitespace.
An error is raised on any attempt to access the rowid of a VIEW or subquery. Formerly, the rowid of a VIEW would be indeterminate and often would be NULL. The -DSQLITE_ALLOW_ROWID_IN_VIEW compile-time option is available to restore the legacy behavior for applications that need it.
The sqlite3_deserialize() and sqlite3_serialize() interfaces are now enabled by default. The -DSQLITE_ENABLE_DESERIALIZE compile-time option is no longer required. Instead, there is is a new -DSQLITE_OMIT_DESERIALIZE compile-time option to omit those interfaces.
The "memdb" VFS now allows the same in-memory database to be shared among multiple database connections in the same process as long as the database name begins with "/".
Back out the EXISTS-to-IN optimization (item 8b in the SQLite 3.35.0 change log) as it was found to slow down queries more often than speed them up.
Improve the constant-propagation optimization so that it works on non-join queries.
The REGEXP extension is now included in CLI builds.
2021-06-25 21:21:31 +00:00
adam
44756044ed Updated security/py-oauthlib, lang/py-mypy 2021-06-25 21:08:23 +00:00
adam
48ae534bad py-mypy: updated to 0.910
Mypy 0.910 released

22 Jun 2021: Mypy 0.910 was released. This release includes the --non-interactive command-line option to install stubs without user interaction, plus other fixes and improvements. Python 3.5 is now deprecated. Read the blog post for the details.

Mypy 0.901 released

8 Jun 2021: Mypy 0.901 was released. This release moves third-party library stubs to stub packages, allowing newer stubs to be easily used without updating mypy. Mypy now supports pyproject.toml and type guards, and ships wheels for Apple Silicon. Plus, there are many other features and bug fixes. Read the blog post for the details.
2021-06-25 21:08:04 +00:00
adam
b10ccd73d4 py-oauthlib: updated to 3.1.1
3.1.1 (2021-05-31)
------------------
OAuth2.0 Provider - Bugfixes

  * Fix acceptance of valid IPv6 addresses in URI validation

OAuth2.0 Client - Bugfixes

  * Base OAuth2 Client now has a consistent way of managing the `scope`: it consistently
    relies on the `scope` provided in the constructor if any, except if overridden temporarily
    in a method call. Note that in particular providing a non-None `scope` in
    `prepare_authorization_request` or `prepare_refresh_token` does not override anymore
    `self.scope` forever, it is just used temporarily.
  * MobileApplicationClient.prepare_request_uri and MobileApplicationClient.parse_request_uri_response,
    ServiceApplicationClient.prepare_request_body,
    and WebApplicationClient.prepare_request_uri now correctly use the default `scope` provided in
    constructor.
  * LegacyApplicationClient.prepare_request_body now correctly uses the default `scope` provided in constructor

OAuth2.0 Provider - Bugfixes
  * client_credentials grant: fix log message
  * OpenID Connect Hybrid - fix nonce not passed to add_id_token
  * Different prompt values are now handled according to spec (e.g. prompt=none)
  * OpenID Connect - fix Authorization: Basic parsing

General
  * improved skeleton validator for public vs private client
  * replace mock library with standard unittest.mock
  * build isort integration
  * python2 code removal
  * add python3.8 support
  * bump minimum versions of pyjwt and cryptography
2021-06-25 21:00:12 +00:00
adam
5e2eb45dcc freeradius: add config.mk 2021-06-25 20:46:23 +00:00
tnn
f13cc4c572 doc: adjust changes entry for timescaledb-tune 2021-06-25 16:05:32 +00:00
tnn
16858a7357 timescaledb-tune: change git suffix in PKGVERSION to date of commit 2021-06-25 16:01:46 +00:00
tnn
19431b3711 doc: Updated databases/prometheus to 2.28.0 2021-06-25 15:26:25 +00:00
tnn
fad9eafebd prometheus: update to 2.28.0
While here try to make updates less painful for pkgsrc developers
by automating some of the manual steps.

2.28.0 / 2021-06-21
  [CHANGE] UI: Make the new experimental PromQL editor the default.
  [FEATURE] Linode SD: Add Linode service discovery.
  [FEATURE] HTTP SD: Add generic HTTP-based service discovery.
  [FEATURE] Kubernetes SD: Allow configuring API Server access via a kubeconfig file.
  [FEATURE] UI: Add exemplar display support to the graphing interface.
  [FEATURE] Consul SD: Add namespace support for Consul Enterprise.
  [ENHANCEMENT] Promtool: Allow silencing output when importing / backfilling data.
  [ENHANCEMENT] Consul SD: Support reading tokens from file.
  [ENHANCEMENT] Rules: Add a new .ExternalURL alert field templating variable, containing the external URL of the Prometheus server.
  [ENHANCEMENT] Scrape: Add experimental body_size_limit scrape configuration setting to limit the allowed response body size for target scrapes.
  [ENHANCEMENT] Kubernetes SD: Add ingress class name label for ingress discovery.
  [ENHANCEMENT] UI: Show a startup screen with progress bar when the TSDB is not ready yet.
  [ENHANCEMENT] SD: Add a target creation failure counter prometheus_target_sync_failed_total and improve target creation failure handling.
  [ENHANCEMENT] TSDB: Improve validation of exemplar label set length.
  [ENHANCEMENT] TSDB: Add a prometheus_tsdb_clean_start metric that indicates whether a TSDB lockfile from a previous run still existed upon startup.
  [BUGFIX] UI: In the experimental PromQL editor, fix autocompletion and parsing for special float values and improve series metadata fetching.
  [BUGFIX] TSDB: When merging chunks, split resulting chunks if they would contain more than the maximum of 120 samples.
[BUGFIX] SD: Fix the computation of the prometheus_sd_discovered_targets metric when using multiple service discoveries

2.27.0 / 2021-05-12
  [FEATURE] Promtool: Retroactive rule evaluation functionality.
  [FEATURE] Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag.
  [FEATURE] TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances.
  [FEATURE] UI: Add a dark theme.
  [FEATURE] AWS Lightsail Discovery: Add AWS Lightsail Discovery.
  [FEATURE] Docker Discovery: Add Docker Service Discovery.
  [FEATURE] OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used.
  [FEATURE] Remote Write: Send exemplars via remote write. Experimental and disabled by default.
  [ENHANCEMENT] Digital Ocean Discovery: Add __meta_digitalocean_vpc label.
  [ENHANCEMENT] Scaleway Discovery: Read Scaleway secret from a file.
  [ENHANCEMENT] Scrape: Add configurable limits for label size and count.
  [ENHANCEMENT] UI: Add 16w and 26w time range steps.
  [ENHANCEMENT] Templating: Enable parsing strings in humanize functions.
  [BUGFIX] UI: Provide errors instead of blank page on TSDB Status Page.
  [BUGFIX] TSDB: Do not panic when writing very large records to the WAL.
  [BUGFIX] TSDB: Avoid panic when mmaped memory is referenced after the file is closed.
  [BUGFIX] Scaleway Discovery: Fix nil pointer dereference.
  [BUGFIX] Consul Discovery: Restart no longer required after config update with no targets.
2021-06-25 15:25:48 +00:00
micha
3aaa581a86 games: Drop maintainership for Doom level packages
The levels likely will not be updated anymore.
2021-06-25 14:25:00 +00:00
rillig
bfa19bba08 doc: Updated pkgtools/pkglint to 21.2.1 2021-06-25 14:15:16 +00:00
rillig
1d1d611496 pkgtools/pkglint: update to 21.2.1
Changes since 21.2.0:

Files whose names ends in '~' are ignored by pkglint since they are
ignored by CVS as well.

Variables with name BUILDLINK_TRANSFORM.* may contain '-Wl,-rpath,'
directly in commands of the form 'rm:*', just like their counterpart
BUILDLINK_TRANSFORM without a package name in the variable name.

Several new tests.
2021-06-25 14:15:00 +00:00
micha
92bc54dc23 security/mdigest: Add additional licenses for statically linked libmdigest 2021-06-25 13:50:45 +00:00
micha
af95db8386 doc: Updated games/woof to 6.0.0 2021-06-25 13:44:17 +00:00
micha
b5e47a899f games/woof: Update to 6.0.0
Woof! 6.0.0
-----------
- Support for the MBF21 complevel has been added, compliant to Rev 1.2
  of the spec (@rfomin).
- Support for the label field has been added to the UMAPINFO
  implementation, bumping compliance to Rev 2 of the spec (@rfomin).
- Support for ExM0 maps has been fixed, the INTERPIC patch is used for
  intermission screens for episode > 3 (@rfomin).
- Support for autoloading from PWAD autoload directories has been added
  (@rfomin).
- Support for deleting savegames from the menu has been added (@rfomin).
- The "next level" key has been fixed for the last map in a UMAPINFO
  sequence (@rfomin).
- UMAPINFO lumps have been added to get autoloaded for MASTERLEVELS.WAD,
  NERVE.WAD, E1M4B.WAD and E1M8B.WAD (@rfomin).
- Parsing of the episode field in the UMAPINFO implementation has been
  fixed (@rfomin).
- Support for backward compatible savegames has been added (@rfomin).
- The colored blood feature has been ported over from PrBoom+ (@rfomin).
- The "Enemies" menu is not completely disabled in the Vanilla complevel
  anymore (@rfomin).
- The Automap overlay and rotate modes have been ported over from Crispy
  Doom (@rfomin).
- An option has been added to always show level stats.
- The UMAPINFO demo extension has been added (@rfomin).
- The ability to keep the default intermission screen for a map with an
  UMAPINFO entry has been fixed (@rfomin).
- Map entries without a 'levelname' field in their UMAPINFO entry now
  fall back to the default map title (@rfomin).
- The ability to set 'partime' with an UMAPINFO entry has been fixed
  (@rfomin).
2021-06-25 13:42:51 +00:00
micha
0aa3e8035e archivers/tartest: Add version 1.23
Tartest reads a tar archive from stdin and checks this archive for
compliance with POSIX.1-1990.
2021-06-25 13:41:48 +00:00
tnn
9166cd5add add timescaledb-tune 2021-06-25 13:36:56 +00:00
tnn
a21ec88976 databases/timescaledb-tune: import timescaledb-tune-0.11.0git
timescaledb-tune is a program for tuning a TimescaleDB database to perform its
best based on the host's resources such as memory and number of CPUs. It parses
the existing postgresql.conf file to ensure that the TimescaleDB extension is
appropriately installed and provides recommendations for memory, parallelism,
WAL, and other settings.
2021-06-25 13:34:41 +00:00
micha
843eb01630 doc: Added archivers/tartest version 1.23 2021-06-25 13:33:58 +00:00
tnn
5e8088be59 varnish: sync smf from pkgsrc-wip to add Solaris jail support (untested) 2021-06-25 12:38:00 +00:00
tnn
309f97979c doc: Updated www/varnish to 6.6.0 2021-06-25 12:22:36 +00:00
tnn
dd7c56cc84 varnish: update to 6.6.0
Based on pkgsrc-wip 5.1.1 package by Filip Hajny.

Changes in Varnish 6.0
  Support for UDS (Unix Domain Sockets)
  Because UNIX Domain Sockets have nothing like IP numbers, we were forced to
  define a new level of the VCL language vcl 4.1 to cope with UDS.
  The HTTP/2 code has received a lot of attention from Dag Haavi Finstad
  (Varnish Software) and it holds up in production on several large sites now.
  There are new and improved VMODs:
    vmod_directors – Much work on the shard director
    vmod_proxy – Proxy protocol information
    vmod_unix – Unix Domain Socket information
    vmod_vtc – Utility functions for writing varnishtest cases.
  The umem stevedore has been brought back on Solaris and it is the default
  storage method there now.
  More error situations now get vcl failure handling, this should make life
  simpler for everybody we hope.
  And it goes without saying that we have fixed a lot of bugs too.

Changes in Varnish 5.0
  Varnish 5.0 changes some (mostly) internal APIs and adds some major new
  features over Varnish 4.1.
  Separate VCL files and VCL labels
  Very Experimental HTTP/2 support
  The Shard Director
  Hit-For-Pass is now actually Hit-For-Miss
  Ban Lurker Improvements
  Request Body sent always / "cacheable POST"
  ESI and Backend Request Coalescing ("waitinglist") Improvement
  Backend PROXY protocol requests
  Default VCL search path
  devicedetect.vcl
  varnishtest
  misc
  News for VMOD authors

Changes in Varnish 4
  Varnish 4 is quite an extensive update to Varnish 3, with some very big
  improvements to central parts of varnish.
  Client/backend split
2021-06-25 12:21:08 +00:00
adam
58bbdf3aae Updated net/freeradius, textproc/py-elementpath 2021-06-25 11:46:05 +00:00
adam
bee202cba0 py-elementpath: updated to 2.2.3
v2.2.3:
* Add Python 3.10 in Tox and CI tests
* Apply __slots__ to TDOP and regex classes
2021-06-25 11:45:38 +00:00
adam
24c21d153f freeradius: updated to 3.0.23
FreeRADIUS 3.0.23

Feature improvements
* Update dictionary.aruba
* Add "set home_server state ... down" in order to mark the
  home server as administratively down.  Use "alive" to bring
  it back to life.
* Add Post-Auth-Type "Client-Lost" which should make it easier
  to log when clients stop responding.
* Add sites-available/totp as an example of how to use TOTP.
* Add %{mschap:Domain-Name}.
* Cache TLS messages in &session-state, for more debugging.
* Notes in eap configuration about TLS 1.0 / TLS 1.1, and setting
  cipher_list = "DEFAULT@SECLEVEL=1"
* Added MANY warning messages about using TLS 1.3 with EAP.
  In short, don't use it.  Microsoft will support it in fall 2021.

Bug fixes
* Fix crash in some cases when home server is down, in debug mode.
* Fix (again) "read clients from SQL" functionality.
* Fix sql_map to return values in more situations.
* Silently ignore LEAP configuration instead of erroring out.

FreeRADIUS 3.0.22

Feature improvements
* Many new "unlang" documentation files.  See "make docsite"
  and then see build/docsite/freeradius-server/*/index.html
* Limited support for dynamic home servers.  See proxy.conf
  and doc/configuration/dynamic_home_servers.md
* Add support for prepend operator ^=.  See "man unlang" for
  for details.
* Added rlm_totp, for use with the Google Authenticator app.
  See mods-available/totp.
* The default minimum TLS version is now TLS 1.2, as per RFC 8996.
  Older versions can be allowed by setting tls_min_version, and
  updating "cipher_list".
* Significantly improve the readability and contents of TLS
  debug messages.
* Allow CoA and Disconnect messages over TLS sockets.
* Automatically set fragment size / MTU, so that PEAP/EAP-TLS
  works, and no longer requires manual changes to the configuration.
* Allow "configurable_client_cert=yes" for EAP-TLS.  This should
  only be used for a "walled garden".  See mods-available/eap
* Add TLS 1.2 support for EAP-Fast.  Patches from Alex Clouter.
* Add ca_path_reload_interval option for tls.  See mods-available/eap.
* Abfab-tls updates from Alejandro Perez.
* Add "tls_min_version" to ldap module configuration.
* We now support running policies when receiving a RadSec connection.
  See sites-available/default, "New-TLS-Connection".
* Update TLS "ecdh_curve" code to allow for multiple curves.
* Allow delta CRLs.
* add rlm_sql_map, which can handle multiple columns from an SQL
  query.  See raddb/mods-available/sql_map.
* New xlat for setting status of rlm_always instances and new
  resource-check example virtual server for manipulating control flow
  in unlang policies based on status of some external resource.
  Patches from Terry Burton.
* Update radmin to show more information about the home servers
  using "show home_server list all".
* The default configuration now replies with EAP-Key-Name, if it
  is available, and was requested.
* Include extensions in generated certificates.
* Ignore user-provided dhparams in FIPS mode.
  Patch from Alexander Scheel.
* Remove native support for Cisco LEAP.  It is insecure, and
  should not be used.  Proxying LEAP is still supported.
* Allow use of password preparation methods with rlm_eap_pwd.
  Patch from Michael Braun.
* Many, many, improvements for DHCP from Nick Porter and Terry Burton.
* More RFC compliance for various corner cases of DHCP,
* Use DHCP-specific schemas.
* Add stored procedures for DHCP lease allocation
* Add support for DHCP-Decline.
* Added mods-available/dhcp_sql which is a DHCP-specific instance
  of the SQL module.
* Treat DHCP Discover and Request differently for lease allocation times.
* Add support for PBKDF2 keys.
* Update dictionary.mikrotik, dictionary.aruba, dictionary.paloalto,
   dictionary.juniper, dictionary.bskyb,
  dictionary.alcatel.sr.
* Update default PostgreSQL schema to use "text" instead of
  a fixed-size "varchar".
* Add radmin command "show client list verbose", which gives a lot
  more information about each client.
* Add support for EAPS-AKA authentication to rlm_wimax.
* Add rlm_rest support for HTTP/2.
* Add REST-HTTP-Status-Code attribute holding HTTP status code.
* Add option to set http_negotiation in rlm_rest.
* Encode / decode NAS-Filter-Rule according to RFC 4849.
  Inside of FreeRADIUS, each NAS-Filter-Rule just looks like
  a string.  But "on the wire", it follows RFC 4849.
  See src/tests/unit/rfc4849.txt
* Allow attributes using old names in configuration files, SQL,
  or modules to match attributes in the packet which use
  new names.
* Allow querying IPv6 stats via FreeRADIUS-Stats-Client-IPv6-Address
  and FreeRADIUS-Stats-Server-IPv6-Address
* Add warnings if there is no "real" User-Name to identify users.
* Add sample configuration to update Stripped-User-Name and/or
  Class for user sessions. See sites-available/default
* Add configuration to suppress printing values for User-Name, etc.
  See radiusd.conf, "suppress_secrets"
* Support dictionary.telrad, which is also in WiMAX format.
* PEAP 'proxy_tunneled_request_as_eap' is now configurable
  at runtime with Proxy-Tunneled-Request-As-EAP.
* Debug output now lists client/server proposed TLS ciphers.
* Add support for TLS1.3, patches from Alexander Clouter

Bug fixes
* Fix long-term double free due to PCRE calling our "free"
  function twice.
* Respect the "log_reject" configuration item in more places.
  This lowers the number of "Login incorrect"
  messages when "log_reject = no".
* Fix rpmbuild for Centos > 6.  Patch from Matthew Newton.
* Run Post-Proxy-Type Fail... when all home servers are down.
* Note that rlm_replicate can only use UDP, and not TCP or TLS.
* DHCP pool lookup is now keyed by Client Identifier (Option 61) when
  supplied by client, otherwise the hardware address is used. Compliant
  with RFC 2132. This change will not affect existing systems on upgrade,
  but new installations will use the new behavior.
  Patch from Terry Burton.
* Fix minor spelling mistakes in man pages.  Patch from
  Alexander Scheel.
* Don't print invalid tags in rlm_cache, among other places.
* Do home_server failover immediately when an initial TCP / Radsec
  connection fails.
* Port EAP-PWD constant time fixes from "master" branch.  The issue
  was verified by Mohamed Sabt, and a patch supplied by
  Daniel De Almeida Braga.
* Clear error on SQLITE_BUSY to prevent memory leak in corner cases.
  Patch from Nick Porter.
* Properly add SQL clients to virtual servers.
* Update documentation for cert generation.  Patch from Alexander Scheel.
* Use better API when decoding DHCP packets, to avoid unnecessary work.
  This improves performance noticeably.
* Parse locale-dependent dates.
* Strip out "-frecord-gcc-switches" from rlm_python3 configure build.
* Fix radiusd.conf ENV LD_PRELOAD function.
* Update the "sql" module so that it uses fewer handles for group selection,
  which means that it is less likely to complain that the
  connection pool is exhausted.
* Update the "sql" module to return "ok" when no rows have been updated
  for accounting on/off.
* Make the "date" module handle UTC more consistently.
* Check for, and complain about, inconsistent use of tls_min_version
  versus disable_tlsv1
* Fix "read client from SQL" code so that it properly ties clients
  to a virtual server.  Also document the behavior.
* Update / correct data types in dictionary.wimax
* Fix edge case in rlm_rest post decoder which could lead to the value of
  a post attribute being lost in the case where the output buffer was completely
  full after writing an attribute value, and more attributes needed to be encoded.
  Reported by Adrian Smith.
* Fix leak with unknown attributes in detail reader.
* Fix parenting issues in rlm_yubikey.
* Update Mongo examples to be correct.

Notices
* CentOS 6, Debian 8 (Jessie) and Ubuntu 14 (Trusty) are EOL and no
  longer supported. Docker files have been removed.
2021-06-25 11:42:48 +00:00