8b55fc81ff
Changelog: Add SHA256 support for server cert hashes. Enable DHE ciphers for Cisco DTLS. Increase initial oNCP configuration buffer size. Reopen CONIN$ when stdin is redirected on Windows. Improve support for point-to-point routing on Windows. Check for non-resumed DTLS sessions which may indicate a MiTM attack. Add TUNIDX environment variable on Windows. Fix compatibility with Pulse Secure 8.2R5. Fix IPv6 support in Solaris. Support DTLS automatic negotiation. Support --key-password for GnuTLS PKCS#11 PIN. Support automatic DTLS MTU detection with OpenSSL. Drop support for combined GnuTLS/OpenSSL build. Update OpenSSL to allow TLSv1.2, improve compatibility options. Remove --no-cert-check option. It was being (mis)used. Fix OpenSSL support for PKCS#11 EC keys without public key. Support for final OpenSSL 1.1 release. Fix polling/retry on "tun" socket when buffers full. Fix AnyConnect server-side MTU setting. Fix ESP replay detection. Allow build with LibreSSL (for fetishists only; do not use this as DTLS is broken). Add certificate torture test suite. Support PKCS#11 PIN via pin-value= and --key-password for OpenSSL. Fix integer overflow issues with ESP packet replay detection. Add --pass-tos option as in OpenVPN. Support rôle selection form in Juniper VPN. Support DER-format certificates, add certificate format torture tests. For OpenSSL >= 1.0.2, fix certificate validation when only an intermediate CA is specified with the --cafile option. Support Juniper "Pre Sign-in Message".
28 lines
850 B
Makefile
28 lines
850 B
Makefile
# $NetBSD: Makefile,v 1.5 2017/01/03 00:02:03 khorben Exp $
|
|
|
|
DISTNAME= openconnect-7.08
|
|
CATEGORIES= net security
|
|
MASTER_SITES= ftp://ftp.infradead.org/pub/openconnect/
|
|
|
|
MAINTAINER= pkgsrc-users@NetBSD.org
|
|
HOMEPAGE= http://www.infradead.org/openconnect/
|
|
COMMENT= Client for Cisco AnyConnect VPN
|
|
LICENSE= gnu-lgpl-v2.1
|
|
|
|
GNU_CONFIGURE= yes
|
|
USE_LIBTOOL= yes
|
|
USE_TOOLS+= gmake pkg-config
|
|
|
|
DEPENDS+= vpnc-script-[0-9]*:../../net/vpnc-script
|
|
|
|
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR}
|
|
CONFIGURE_ARGS+= --with-vpnc-script=${PKG_SYSCONFDIR}/vpnc-script
|
|
CONFIGURE_ARGS+= --disable-nls
|
|
|
|
INSTALLATION_DIRS= sbin include lib ${PKGMANDIR}/man8
|
|
|
|
.include "../../textproc/libxml2/buildlink3.mk"
|
|
.include "../../devel/zlib/buildlink3.mk"
|
|
.include "../../security/openssl/buildlink3.mk"
|
|
.include "../../www/libproxy/buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|