Number of commits found: 49

Fix handling of /etc/resolv.conf during connect/disconnect. Now that FreeBSD 9.x
has a script called /sbin/resolvconf it tried to use the Debian, Ubuntu, Gentoo
syntax which is incompatible with FreeBSD's version of the script and will
therefore fail.

Feature safe:   yes

- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:             157936
Submitted by:   myself
Exp-runs by:    pav
Approved by:    pav

- Chase the libgcrypt shared lib version

Include a patchset that solves a problem with phase2 re-keying. That is, when
phase2 lifetime (either in seconds or bytes) expires, then vpnc either silently
stops passing traffic or that plus consuming CPU time by running a tight loop.

This issue have experienced this issue on various platforms.

Example of a bug report:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496718

Bump PORTREVISION and while we're here remove MD5 sums.

Submitted by:   avg
Obtained from:  http://www.gossamer-threads.com/lists/vpnc/devel/3442, with
                slight adjustments to apply to our patchlevel by avg

Chase security/libgcrypt shlib bump.

PR:             ports/148755
Submitted by:   Hirohisa Yamaguchi <umq@ueo.co.jp>

Fix rc.d script return value

PR:             145207
Submitted by:   Dominic Fandrey <kamikaze@bsdforen.de>

Mark MAKE_JOBS_SAFE

Unbreak security/vpnc and graphics/pecomato. Those ports were fixed by 133053,
thanks. However, it remains unclear why the PR wasn't assigned to me nor why I
wasn't notified as maintainer.

Mark BROKEN on ${OSVERSION} >= 800067 && ${ARCH} == "amd64"

Notified by:    pointyhat via pav

- Bump PORTREVISION due to share library version bump in security/libgcrypt

PR:              ports/127478

Update to 0.5.3

Use kldstat(8) to check for the availability of the if_tun module in the
kernel instead of checking for existance of /dev/tun. The latter causes
tun(8) to allocate new instance, which is not good by itself, but also
on all FreeBSD versions before the very recent -current it causes number
of tun devices to grow each time the script is invoked (and it's invoked
every time when vpnc makes a new connection).

Bump PORTREVISION.

Approved by:    MAINTAINER

- Remove duplicates from MAKE_ENV after inclusion of CC and CXX in default
MAKE_ENV

Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)

Use MASTER_SITE_CRITICAL

Follow the change of the pid file in the rc script.

Submitted by:   Dominic Fandrey <kamikaze@bsdforen.de>

Fix vpnc-disconnect script

PR:             121942
Submitted by:   Andreas Schwarz <bugs.asc@schwarzes.net>

Some Cisco Concentrator refuse connection if the presentation version string
differs from the official "Cisco VPN Client".

Provide an optional patch which masks the original version string.

PR:             116949
Submitted by:   Raffaele De Lorenzo <raffaele.delorenzo@libero.it>

- Update RC script
- Bump PORTREVISION

Submitted by:   kamikaze@bsdforen.de (author of rc script)

The upgrade of ports/security/vpnc to version 0.5.1 introduced some glitches
against the documented behaviour. In particular, the configuration files are
not searched in the documented locations: /usr/local/etc/vpnc/*.conf is not
searched at all, and /usr/local/etc/vpnc/default.conf is skipped, both in
contrast to the documentation.

PR:             121229
Submitted by:   Helge Oldach <ports-security-vpnc-feb08@oldach.net>

Chase libgcrypt library version

- Update to 0.5.1
- Take maintainership
- Optional install cisco-decrypt utility
- Optional build with hybrid support

Reset delta@lackas.net due to maintainer-timeouts and no response to email.

Hat:            portmgr

- In managed mode the script does not return the proper value due to $?
  is reset by the if command. Therefore, the script does not fail when
  starts with broken configuration files
- While I'm here, use %%RC_SUBR%% instead of /etc/rc.subr

PR:             ports/110320
Submitted by:   Dominic Fandrey <lon_kamikaze at gmx.de>
Approved by:    maintainer timeout (6 months)

- Make port fully respect CFLAGS
- Don't build with debug symbols
- Bump PORTREVISION

PR:             114863
Approved by:    maintainer timeout (14 days)

- Respect %%PREFIX%%
- Bump PORTREVISION

PR:             110466
Submitted by:   Helge Oldach <ports-vpnc-mar07@oldach.net> (maintainer)

- Update to 0.4.0

PR:             110272
Submitted by:   Christian Lackas <delta@lackas.net> (maintainer)

- Improve the style and behaviour of the rc.d script
- Bump PORTREVISION

Submitted by:   dougb
Reviewed by:    Dominic Fandrey <lon_kamikaze@gmx.de>
Approved by:    Christian Lackas <christian@lackas.net> (maintainer)

- Update rc.d script
- Use USE_RC_SUBR instead of direct patching
- Bump PORTREVISION

PR:             ports/107675
Submitted by:   Dominic Fandrey <lon_kamikaze@gmx.de> (with fixes from
maintainer)
Approved by:    Christian Lackas <delta@lackas.net> (maintainer),
                erwin (mentor, implicit)

- Add NAT keepalive capability as per RFC 3947
- Bump PORTREVISION

PR:             ports/100814
Submitted by:   Daniel Roethlisberger <daniel(at)roe.ch>
Approved by:    krion (mentor), maintainer

Remove USE_REINPLACE from all categories starting with S

- Unbreak vpnc-disconnect by fixing the config.c patch
- Remove obsolete vpnc-wrapper leftovers to make portlint happy
- Use PLIST_FILES and PORTDOCS instead of pkg-plist
- Bump PORTREVISION

PR:             ports/84491
Submitted by:   Daniel Roethlisberger <daniel@roe.ch>
Approved by:    Christian Lackas <delta@lackas.net> (maintainer)

- fix connect script
- remove obsolete fulltunnel script
- add disconnect script

PR:             81550
Submitted by:   Christian Lackas <delta@lackas.net>

Update to 0.3.3

PR:             ports/81008
Submitted by:   maintainer

- Update vpnc.sh-sample-fulltunnel to vpnc-wrapper 1.25
- Bump PORTREVISION.

PR:             79942
Submitted by:   Daniel Roethlisberger <daniel@roe.ch>
Approved by:    Christian Lackas <delta@lackas.net> (maintainer)

Update libgcrypt to 1.2.1. Changes:
        * made the code try to lock secure memory pool not only when running as
          root,
        * fixed type usage in Serpent,
        * made the code mix the PID into the entropy pool for better protection
          after a fork,
        * fixed memory leak in RSA.
        * fixed alignment problems in Rijndael,
        * fixed memory leak in gcry_pk_sign(),
        * fixed broken pointer access in gcry_ac_open(),
        * updated the documentation,
        * fixed several other bugs.
Chase Shared library version and bump PORTREVISION of affected ports.

Update to 0.3.2
- added support for preshared without xauth
- fixed NAT-T support with IOS and PIX
- fixed IP-Len header
- fixed reconnection problems with IOS and PIX

PR:             ports/74271
Submitted by:   maintainer

Update to 0.3.1:
- IPSec over UDP and NAT-T support
- added support for interactive authentication (security tokens for example)
- fixed IOS support

PR:             ports/74040
Submitted by:   maintainer

s/BROKEN/IGNORE/ to prevent package build

- Update to vpnc-0.2-rm+zomb.1.tar.gz
- Update manpage

PR:             ports/66624
Submitted by:   maintainer

- Fix MASTER_SITES
- Update to vpnc-wrapper-1.10 (better FreeBSD 4 support)
  (Daniel Roethlisberger)
- Bump PORTREVISION

PR:             ports/66571
Submitted by:   Christian Lackas (maintainer)

Update to vpnc-0.2-rm+zomb-pre9

PR:             ports/66202
Submitted by:   Christian Lackas <delta@lackas.net> (maintainer)

Update libgcrypt to the new stable version 1.2.0
Retire libgcrypt-devel

Switch back to security/libgcrypt and bump PORTREVISION for
- gnutls
- gnutls-devel
- gsasl
- opencdk
- vpnc

libggz:
- Remove dependency on libgcrypt, because the port does not yet
work with the new libgcrypt

libksba:

(Only the first 15 lines of the commit message are shown above )

Update to vpnc-0.2-rm+zomb-pre8
Add fulltunnel wrapper script by Daniel Roethlisberger

PR:             65945
Submitted by:   Christian Lackas

Mark broken on AMD64

- use tun0 as default-interface
- fix install of startscript

Approved by:    Christian Lackas <delta@lackas.net> (maintainer)
                arved (mentor)

Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 1)

Update to new version.
Depend on new libgcrypt-devel port.

PR:             62111
Submitted by:   Christian Lackas <delta@lackas.net>

- using PREFIX/CC/CFLAGS (with help from Markus Brueffer)
- added a man-page
- installing additional docs
- fixed installing with 0666
- sample start script now works and actually contains an usefull example
- fixed install target
- added a comment (in pkg-message) about ESP "Protocol not supported"

PR:             60364
Submitted by:   maintainer

Add vpnc 0.2,

VPNC - Client for Cisco 3000 VPN Concentrator

A VPN client compatible with Cisco's EasyVPN equipment.
Supports IPSec (ESP) with Mode Configuration and Xauth.
Supports only shared-secret IPSec authentication, 3DES, MD5,
and IP tunneling.  It runs entirely in userspace

PR:             60283
Submitted by:   Christian Lackas

Number of commits found: 49

15 vulnerabilities affecting 34 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities