socat is a relay for bidirectional data transfer between two independent
data channels. Each of these data channels may be a file, pipe, device
(terminal or modem etc.), socket (UNIX, IP4, IP6 - raw, UDP, TCP), a file
descriptor (stdin etc.), a program, or an arbitrary combination of two of
these.
socat can be used, e.g., as TCP relay (one-shot or daemon), as an external
socksifier, for attacking weak firewalls, as a shell interface to UNIX
sockets, IP6 relay, for redirecting TCP oriented programs like brutus to a
serial line, or to establish a relatively secure environment (su and chroot)
for running client or server shell scripts with network connections.
===> The following configuration options are available for socat-1.8.1.3:
DOCS=on: Build and/or install documentation
IPV6DEFAULT=off: Use IPv6 by default
READLINE=off: Command line editing via libreadline
===> Use 'make config' to modify these settings
net/socat: Add configurable IPv4/IPv6 preference option
In socat version 1.8.0.0, a new feature was introduced allowing users to
configure the default IP version preference at build time using the
`--enable-default-ipv` option. This change resulted in a default
preference for IPv6, which led to unexpected behavior for some users.
To address this, a new option has been added to the FreeBSD port of
socat. By default, the port restores the previous behavior where IPv4
is preferred. However, users now have the option to explicitly specify a
preference for IPv6 if desired.
This change aims to align with the Principle of Least Astonishment
(POLA) and provide users with flexibility in choosing their preferred IP
version.
PR: 275653 (based on)
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
net: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Aaron Straup Cope <ascope@cpan.org>
* Aaron Zauner <az_mail@gmx.at>
* Adam Jette <jettea46@yahoo.com>
* Adam Weinberger <adamw@FreeBSD.org>
* Alan Eldridge <alane@geeksrus.net>
* Alex Bakhtin <Alex.Bakhtin@gmail.com>
* Alex Deiter <Alex.Deiter@Gmail.COM>
* Alex Dupre <ale@FreeBSD.org>
* Alex Dupre <sysadmin@alexdupre.com>
(Only the first 15 lines of the commit message are shown above )
Enhance the sample configuration with a TCP example for making things
easier to start as quickly as possible.
PR: 253180
Submitted by: Harald Schmalzbauer <bugzilla.freebsd@omnilan.de>
Reinstate a patch from r384479 that was accidentally removed in r432474. It
restores support to bridge a serial port across tcp.
Notified by: leres, Alexandre.Fenyo@secu-independants.fr (via mail)
MFH: 2018Q2 (blanket)
Patch socat/Makefile to reference all of dependencies when
linking filan so that parallel make is reliable again.
PR: 226012
Reviewed by: ler (mentor)
Approved by: ler (mentor)
Differential Revision: https://reviews.freebsd.org/D14445
socat will automatically link against readline if devel/readline is installed.
Make readline optional and explicitly enable/disable during configure. This
did not affect pkg only users as readline is not present on package build
clusters but might affect (depending on readline presence) users that manually
build ports. Therefore bump PORTREVISION.
PR: 218370 (based on)
Submitted by: sunpoet
Fix usage of WITH_OPENSSL_BASE, WITH_OPENSSL_PORT and OPENSSL_PORT.
WITH_OPENSSL_* can't be set after bsd.port.pre.mk.
Fold all other usage into using SSL_DEFAULT == foo
PR: 210149
Submitted by: mat
Exp-run by: antoine
Sponsored by: The FreeBSD Foundation, Absolight
Differential Revision: https://reviews.freebsd.org/D6577
net/socat: Fix OpenSSL build issues
- While here fix CPE Vendor (NVD has dest-unreach)
- Fix build when OpenSSL from ports was built without SSLv3 support
- Fix build when OpenSSL is built without compression support
- Fix build for OpenSSL 1.1.0pre without EGD support
PR: 197192
Reviewed by: koobs (mentor), feld (mentor), ehaupt (maintainer)
Approved by: feld (mentor), ehaupt (maintainer)
Differential Revision: D2691
With SOCAT on systems where b0 to b4000000 options are not available, like
FreeBSD, setting the speed of a TERMIOS terminal is done using the ispeed and
ospeed options.
But when using simultaneously ispeed and ospeed parameters with SOCAT, the speed
values are set within two distinct ioctl requests, so changing the speed of
terminals or devices that need matching input and output returns an Invalid
argument error (the TIOCSETA/TIOCSETAW/TIOCSETAF ioctl returns -1 and sets errno
to EINVAL).
This is especially the case On FreeBSD, where many tty device drivers need
matching input and output speeds: - those that depend on ucom(4): uark(4),
ubsa(4), ubser(4), uftdi(4), umcs(4), uplcom(4), uslcom(4), uvscom(4) - some
others, even not depending on ucom(4): sio(4), digi(4), rp(4) But some don't:
tty(4)
(Only the first 15 lines of the commit message are shown above )
Update to 1.7.2.3, this fixes a security issue, where socats PROXY-CONNECT
address was vulnerable to a buffer overflow with data provided on the command
line.
Security: CVE-2014-0019
This patch will make the socat rc script more reliable. [1]
While here, use 'compiler' USES macro to determine compiler type.
PR: 185946 [1]
Submitted by: feld
Change the clang detector to use a pattern match instead of a conditional
define and always test. This fixes build on 9-STABLE and saves some shell
commands.
PR: 181007
Submitted by: "r4721@tormail.org" <r4721@tormail.org>
Make sure the binaries are linked against the port OpenSSL libraries when
and only when WITH_OPENSSL_PORT is defined.
PR: 180395 (based on)
Submitted by: "r4721@tormail.org" <r4721@tormail.org>
Handle clang 3.3 fallout. I wish we had a __FreeBSD_version tag from when the
clang 3.3 import happened, that way we wouldn't have to resort to such hacks.
Fix startup script issue with a wrapper script obtained from www/gatling.
This wrapper tries to emulate part of the functionality usually supplied by
software like daemontools or runit. It is used to start socat which does not
daemonize itself and logs to stdout/stderr. It redirects stdout and stderr to
logger(1) via a fifo.
While here also remove if-statement around PORTDOCS based on NOPORTDOCS since
it's redundant with checks in ports/Mk/bsd.ports.mk.
PR: 166947
Submitted by: Mark Felder <feld@feld.me>
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
- Update to 1.7.2.0 (this release allows tun/tap interfaces without IP
addresses)
- Remove the option to build without OpenSSL, we're supposed to provide
sensible default configurations and options. Building a port without
OpenSSL support in 2011 makes no sense. This has also been discussed at the
Dev Summit 2011
Feature safe: yes
Fix a few "bad example" problems in the rc.d scripts that have been
propogated by copy and paste.
1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).
No PORTREVISION bumps because all of these changes are noops.
- Update to 1.4.2.0 [1]
- OPTIONSify
- Fix the packing list when NOPORTDOCS is defined
- Polish the Makefile
PR: ports/82387 [1]
Submitted by: maintainer [1]
socat 1.4.0.0 has buggy SOCKS4A code. The maintainer patch on the web site has
(probably had, now) a platform-specific bug,
which was resolved in conjunction with the socat author earlier. The problem
will be corrected in socat 1.4.0.1, but in the
meantime is provided separately. This patch adds the fix as a replacement
xio-socks.c.
I have also set myself as the maintainer as part of the patch below. I am
willing to take on maintainership of this port.
PR: 69317
Submitted by: rik <freebsd-ports@rikrose.net>
Update net/socat: 1.3.1.0 -> 1.3.2.0
* A new mode allows you to directly connect an
executed program to the other side of the relay.
* A couple of minor improvements and corrections
have been made.
PR: 54284
Submitted by: Kirill Ponomarew <ponomarew@oberon.net>
