20:30 Juraj Lutter (otis) 

net/ocserv: Update to 1.2.3

Release notes: https://gitlab.com/openconnect/ocserv/-/releases/1.2.3

    7f0a801

13:08 Juraj Lutter (otis) 

net/ocserv: Update to 1.2.0

- Update to 1.2.0
- Adjust dependencies
- Make DTLS work
- Regen patches

Co-authored-by:	Eugene Mitrofanov <emitrofanov@gmail.com>

    944e00e

16:49 Juraj Lutter (otis) 

net/ocserv: Update to 1.1.7

- Update to 1.1.7
- Regen patches

    39beea1

21:26 otis 

net/ocserv: Update to 1.1.2

- Update to 1.1.2
- Reformat Makefile according to portclippy/portfmt
- Install sample config with PREFIX-ized values where
  apropriate.
- Take MAINTAINERship

Reviewed by:	osa (mentor)
Approved by:	osa (mentor)
MFH:		2021Q1
Differential Revision:	https://reviews.freebsd.org/D28346

 

08:36 pi 

net/ocserv: update 1.0.1 -> 1.1.1

- Fixed compatibility with OpenBSD that lacks procfs
- Improved rate-limit-ms and made it dependent on secmod backlog. This makes
  the server more resilient (and prevents connection failures) on multiple
  concurrent connections
- Added namespace support for listen address by introducing the listen-netns
  option
- Disable TLS1.3 when cisco client compatibility is enabled. New anyconnect
  clients seem to supporting TLS1.3 but are unable to handle a
  client with an RSA key
- Enable a race free user disconnection via occtl
- Added the config option of a pre-login-banner
- Ocserv siwtched to using multiple ocserv-sm processes to improve scale,
  with the number of ocserv-sm process dependent on maximum clients
  and number of CPUs. Configuration option sec-mod-scale can be
  used to override the heuristics.
- Fixed issue with group selection on radius servers sending multiple group
  class attribute.

PR:		250225
Submitted by:	Juraj Lutter <juraj@lutter.sk>
Relnotes:	https://gitlab.com/openconnect/ocserv/-/releases/1.1.1

 

14:38 mandree 

net/ocserv: Update to 1.0.1

Changelog:
https://gitlab.com/openconnect/ocserv/-/blob/1.0.1/NEWS#L1

This commit makes the following additional changes from Juraj's
submission:

- fix LIB_DEPENDS to libpc.so:devel/pcl (not devel/libpcl)
- replace LOCALBASE by PREFIX throughout, as these are internal references
- remove the src/config.c patch, it makes no sense to first
  statically patch and then run REINPLACE_CMD for DEFAULT_CFG_FILE
- remove doc/sample.config from another REINPLACE_CMD
- remove @ - it makes no sense to hide running commands
- patch example configuration to avoid isolate-workers = true, which
  currently only works on Linux's seccomp.
- in the same vein, put up a warning pkg-message that there is no worker
  process isolation
- install the @sample file as ocserv.conf.sample, not conf.sample,
  so it matches the default configuration file path

Things that could be done but are not:
- rcfile option to configure a separate config file

PR:		245521
Submitted by:	Juraj Lutter <juraj@lutter.sk>
Approved by:	cpm@ (maintainer timeout, 15 d)

 

18:23 cpm 

net/ocserv: update to 0.12.1

Changelog: https://gitlab.com/ocserv/ocserv/blob/master/NEWS

Tested by:	Jov <amutu@amutu.com>