36d3edc435
The OpenVPN community project team is proud to release OpenVPN 2.5.2. It fixes two related security vulnerabilities (CVE-2020-15078) which under very specific circumstances allow tricking a server using delayed authentication (plugin or management) into returning a PUSH_REPLY before the AUTH_FAILED message, which can possibly be used to gather information about a VPN setup. In combination with “–auth-gen-token” or a user-specific token auth solution it can be possible to get access to a VPN with an otherwise-invalid account. OpenVPN 2.5.2 also includes other bug fixes and improvements. Updated OpenSSL and OpenVPN GUI are included in Windows installers.
30 lines
866 B
Makefile
30 lines
866 B
Makefile
# $NetBSD: Makefile,v 1.11 2021/04/22 13:53:16 adam Exp $
|
|
|
|
.include "../../net/openvpn/Makefile.common"
|
|
|
|
DISTNAME= openvpn-nagios-20130210
|
|
DISTFILES= ${DISTNAME}${EXTRACT_SUFX} ${OPENVPN_DISTFILE}
|
|
CATEGORIES= net
|
|
MASTER_SITES= http://ftp.espci.fr/pub/openvpn-nagios/
|
|
EXTRACT_SUFX= .tgz
|
|
|
|
MAINTAINER= manu@NetBSD.org
|
|
HOMEPAGE= https://ftp.espci.fr/pub/openvpn-nagios/
|
|
COMMENT= OpenVPN certificate checks for Nagios
|
|
LICENSE= 2-clause-bsd
|
|
|
|
PKG_DESTDIR_SUPPORT= user-destdir
|
|
|
|
USE_LIBTOOL= yes
|
|
USE_TOOLS+= install
|
|
|
|
MAKE_ENV+= OPENVPN_PLUGINSDIR=${PREFIX}/${OPENVPN_PLUGINSDIR}
|
|
MAKE_ENV+= OPENVPN_DISTNAME=${OPENVPN_DISTNAME}
|
|
|
|
PLIST_SUBST+= OPENVPN_PLUGINSDIR=${OPENVPN_PLUGINSDIR}
|
|
MESSAGE_SUBST+= OPENVPN_PLUGINSDIR=${PREFIX}/${OPENVPN_PLUGINSDIR}
|
|
|
|
DEPENDS+= openvpn>=2.4.2:../../net/openvpn
|
|
|
|
.include "../../security/openssl/buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|