notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
All times are UTC
Ukraine
We just patched an SQL injection. There is no evidence it was exploited. That doesn’t mean it wasn’t. Please change your password. You might want to hold off on that change. We have a few more to fix.
non port: security/openvpn-devel/Makefile
SVNWeb

Number of commits found: 128 (showing only 100 on this page)

1 | 2  »  

Fri, 13 Jan 2023
[ 19:29 Matthias Andree (mandree) search for other commits by this committer Author: Gert Doering ]    commit hash:0ffbe3c4015a5c04bf8b6754f7cdf396262e931f  commit hash:0ffbe3c4015a5c04bf8b6754f7cdf396262e931f  commit hash:0ffbe3c4015a5c04bf8b6754f7cdf396262e931f  0ffbe3c 
security/openvpn-devel: upgrade port to git commit 480ad2a84e (2023-01-13)

this commit is also 2.6_rc2 (+ a freebsd/linux build fix).

contains a number of bugfixes and minor improvements, see
https://github.com/OpenVPN/openvpn/blob/v2.6_rc2/Changes.rst

Most notable improvement: this contains a default-enabled ratelimiter
for initial TLS handshake packets (100 per 10s), significantly reducing
the usefulness of abusing an OpenVPN server as a DDoS reflection engine.

Use '--connect-freq-initial' to tune parameters if needed.
Wed, 28 Dec 2022
[ 19:16 Matthias Andree (mandree) search for other commits by this committer Author: Gert Doering ]    commit hash:8e26351fa01eab391a7e3d28f3bffcce57dec5c4  commit hash:8e26351fa01eab391a7e3d28f3bffcce57dec5c4  commit hash:8e26351fa01eab391a7e3d28f3bffcce57dec5c4  8e26351 
security/openvpn-devel: upgrade port to git commit 84e70c479e (2022-12-28)

this commit is also 2.6_rc1.

contains a number of bugfixes and minor improvements, see
https://github.com/OpenVPN/openvpn/blob/v2.6_rc1/Changes.rst
Fri, 16 Dec 2022
[ 22:08 Matthias Andree (mandree) search for other commits by this committer Author: Gert Doering ]    commit hash:c6b754fbdee2abf5518a92edec15d702198261c3  commit hash:c6b754fbdee2abf5518a92edec15d702198261c3  commit hash:c6b754fbdee2abf5518a92edec15d702198261c3  c6b754f 
security/openvpn-devel: upgrade port to git commit 566c0791ca (2022-12-15)

this commit is also 2.6_beta2.

contains a number of bugfixes and minor improvements

user visible changes since last port upgrade
 - freebsd + DCO now has working byte counters in DCO mode
 - server no longer accepts new inbound client connections
   while in "explicit-exit-notify" shutdown phase
 - logging improvements for DCO key handling
Tue, 6 Dec 2022
[ 08:13 Matthias Andree (mandree) search for other commits by this committer Author: Gert Doering ]    commit hash:b9d3c13fb81c21b6ef4103e1d49453249f13cd74  commit hash:b9d3c13fb81c21b6ef4103e1d49453249f13cd74  commit hash:b9d3c13fb81c21b6ef4103e1d49453249f13cd74  b9d3c13 
security/openvpn-devel: upgrade port to git commit e778a6fd26d (2022-12-01)

this commit is also 2.6_beta1.

contains a good number of bugfixes and minor improvements

user visible changes since last port upgrade
 - binary identifies itself as "2.6_beta1"
 - client reconnect in p2p TLS mode works now with DCO enabled (on FreeBSD 14)
 - more robust handling of cipher negotiation issues in p2p TLS mode
 - supports server-pushable "tun-mtu" now
 - support DCO with AES-192-GCM on sufficiently-new FreeBSD 14 kernels
Thu, 27 Oct 2022
[ 18:08 Matthias Andree (mandree) search for other commits by this committer ]    commit hash:cf29b576633ccb16d7a1b2b7a7d9eddc063c7400  commit hash:cf29b576633ccb16d7a1b2b7a7d9eddc063c7400  commit hash:cf29b576633ccb16d7a1b2b7a7d9eddc063c7400  cf29b57 
security/openvpn-devel: fix up shebang of totpauth.py script

...and we also need to add USES+=python:build to fix
stage-qa complaints of the following kind:

Error: '/usr/local/bin/python' is an invalid shebang you need
USES=shebangfix for 'share/examples/openvpn/sample-scripts/totpauth.py'

ALTHOUGH the shebangfix has worked and replaced /usr/bin/python3
by /usr/local/bin/python (with /usr/local from LOCALBASE apparently).
[ 18:08 Matthias Andree (mandree) search for other commits by this committer Author: Gert Doering ]    commit hash:bb24536ac02a721fdc6657a2ff5e43c0c71ae54e  commit hash:bb24536ac02a721fdc6657a2ff5e43c0c71ae54e  commit hash:bb24536ac02a721fdc6657a2ff5e43c0c71ae54e  bb24536 
security/openvpn-devel: upgrade port to git commit ecad4839ca (2022-10-27)

contains a good number of bugfixes and minor improvements, no new features.

user visible changes:
  - "topology subnet" tun interfaces will now use IFF_POINTOPOINT
  - DCO option on FreeBSD 14 will default to "on" now
  - DCO on FreeBSD now requires  a FreeBSD kernel after
    commit 2e797555f701c38d9d to get kernel-side ovpn(4)
    improvements, necessary for proper subnet + iroute support
Wed, 7 Sep 2022
[ 21:10 Stefan Eßer (se) search for other commits by this committer ]    commit hash:b7f05445c00f2625aa19b4154ebcbce5ed2daa52  commit hash:b7f05445c00f2625aa19b4154ebcbce5ed2daa52  commit hash:b7f05445c00f2625aa19b4154ebcbce5ed2daa52  b7f0544  (Only the first 10 of 27931 ports in this commit are shown above. View all ports for this commit)
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Sun, 21 Aug 2022
[ 09:14 Matthias Andree (mandree) search for other commits by this committer Author: Gert Doering ]    commit hash:c5c7369a3fe85961f8322531462d33465d4a89c7  commit hash:c5c7369a3fe85961f8322531462d33465d4a89c7  commit hash:c5c7369a3fe85961f8322531462d33465d4a89c7  c5c7369 
security/openvpn-devel: Upgrade to current git revision, add DCO option

commits up to 734de8f9aa2df bring a number new developments, especially
inclusion of the "Data Channel Offload" (OpenVPN in kernel space)
feature.

Since this is still considered not very well tested and needs a
very recent FreeBSD 14 kernel, this is off by default, and a new option
  [ ] DCO
has been added to enable it.
[ 09:14 Matthias Andree (mandree) search for other commits by this committer ]    commit hash:d165aeb41ae7227ac5b1efcfa3d3162944c7ecfe  commit hash:d165aeb41ae7227ac5b1efcfa3d3162944c7ecfe  commit hash:d165aeb41ae7227ac5b1efcfa3d3162944c7ecfe  d165aeb 
security/openvpn-devel: options cleanup

- Drop TUNNELBLICK option and patch, which fails PATCH and if your force
  it, build. security/openvpn removed the option earlier this year.
  Drop pkg-help along with it
- Exclude DCO-option on FreeBSD 12 and 13. It requires FreeBSD 14
  kernel features, and FreeBSD 11 and older are no longer supported.

Approved by: portmgr (blanket)
Wed, 20 Jul 2022
[ 14:22 Tobias C. Berner (tcberner) search for other commits by this committer ]    commit hash:857c05f8674c5f4c990f49f9d0fb7034ebd340fe  commit hash:857c05f8674c5f4c990f49f9d0fb7034ebd340fe  commit hash:857c05f8674c5f4c990f49f9d0fb7034ebd340fe  857c05f  (Only the first 10 of 840 ports in this commit are shown above. View all ports for this commit)
security: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  <ports@c0decafe.net>
  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Adam Weinberger <adamw@FreeBSD.org>
  *  Ade Lovett <ade@FreeBSD.org>
  *  Aldis Berjoza <aldis@bsdroot.lv>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Kapranoff <kappa@rambler-co.ru>
  *  Alex Samorukov <samm@freebsd.org>
  *  Alexander Botero-Lowry <alex@foxybanana.com>
  *  Alexander Kriventsov <avk@vl.ru>
  *  Alexander Leidinger <netchild@FreeBSD.org>
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Fri, 6 May 2022
[ 17:34 Matthias Andree (mandree) search for other commits by this committer ]    commit hash:ad4519fef229984a468a3dd673d91047e46a32fd  commit hash:ad4519fef229984a468a3dd673d91047e46a32fd  commit hash:ad4519fef229984a468a3dd673d91047e46a32fd  ad4519f 
security/openvpn-devel: really clean up REINPLACE_CMD
[ 17:20 Matthias Andree (mandree) search for other commits by this committer ]    commit hash:7c6b784e198019d45dce050bb8b79a7bce1a771b  commit hash:7c6b784e198019d45dce050bb8b79a7bce1a771b  commit hash:7c6b784e198019d45dce050bb8b79a7bce1a771b  7c6b784 
security/openvpn-devel: integration improvements

fixing quirks
- PORTREVISION cannot be empty
- complete pkg-plist
- remove dead REINPLACE_CMD

Approved by:	portmgr@ (blanket, fix broken port)
Related to:
PR:		263818
[ 17:15 Matthias Andree (mandree) search for other commits by this committer Author: Gert Doering ]    commit hash:be05900d7d732c33b2cc48aac68d818c041728bd  commit hash:be05900d7d732c33b2cc48aac68d818c041728bd  commit hash:be05900d7d732c33b2cc48aac68d818c041728bd  be05900 
security/openvpn-devel: Upgrade to current git revision

commits up to 413877f522e  bring a number new developments, especially
hardening the server against TLS state exhaustion and being abused
for reflection/amplification attacks, a full MTU/MSS handling rehaul,
and proper OpenSSL 3.0.x support.

PR:		263818
Fri, 28 Jan 2022
[ 12:14 Tijl Coosemans (tijl) search for other commits by this committer ]    commit hash:b93e64d3c3240d1e4a8fc510b14aa2175e5be012  commit hash:b93e64d3c3240d1e4a8fc510b14aa2175e5be012  commit hash:b93e64d3c3240d1e4a8fc510b14aa2175e5be012  b93e64d  (Only the first 10 of 28 ports in this commit are shown above. View all ports for this commit)
security/mbedtls: Update to 2.28.0 and fix make test

Also bump dependent ports for library version change.

PR:		255084
Tue, 23 Nov 2021
[ 22:11 Stefan Eßer (se) search for other commits by this committer ]    commit hash:5933ac0b099d61d98eb531d373cf57a8927bc7af  commit hash:5933ac0b099d61d98eb531d373cf57a8927bc7af  commit hash:5933ac0b099d61d98eb531d373cf57a8927bc7af  5933ac0  (Only the first 10 of 157 ports in this commit are shown above. View all ports for this commit)
*/*: Remove redundant '-[0-9]*' from CONFLICTS_INSTALL

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Approved by: portmgr (blanket)
Thu, 3 Jun 2021
[ 15:30 Matthias Andree (mandree) search for other commits by this committer ]    commit hash:8c0ab38d7a4762277fdbb3da8f0f72a60b4cec2c  commit hash:8c0ab38d7a4762277fdbb3da8f0f72a60b4cec2c  commit hash:8c0ab38d7a4762277fdbb3da8f0f72a60b4cec2c  8c0ab38 
security/openvpn-devel: bugfix update to 0033811e

Changes:
* 0033811e 2021-06-03 | Fix SIGSEGV (NULL deref) receiving push "echo" [Matthias
Andree]
* b7fe49c2 2021-05-24 | Do not require CA when peer-fingerprint is used [Selva
Nair]
* 28240c4a 2021-06-01 | Fix parsing of IV_SSO string [Selva Nair]

Approved by: Gert Doering (maintainer, by IRC)
Sat, 29 May 2021
[ 10:51 Matthias Andree (mandree) search for other commits by this committer ]    commit hash:9364842b3b08f9eaa49bf80c7c14550c2689ab7f  commit hash:9364842b3b08f9eaa49bf80c7c14550c2689ab7f  commit hash:9364842b3b08f9eaa49bf80c7c14550c2689ab7f  9364842 
security/openvpn-devel: switch to Gitlab and new maintainer

The previous maintainer asked that the port be removed, but
we seem to have found a better solution. Gert Doering volunteered
to take over the port and reference Git directly.

Import security/openvpn fix for leftover .orig files.

PR:		256209
Maintainer change implicitly
Approved by:	ecrist@secure-computing.net (removal request)
New contents reviewed and
Approved by:	gert@greenie.muc.de (new maintainer, by IRC/mail)
Tue, 6 Apr 2021
[ 17:33 Matthias Andree (mandree) search for other commits by this committer ]    commit hash:e098d24a5aceebd6924b41a980ebb135a1dec0ed  commit hash:e098d24a5aceebd6924b41a980ebb135a1dec0ed  commit hash:e098d24a5aceebd6924b41a980ebb135a1dec0ed  e098d24 
security/openvpn-devel: Update to 2021-W13 development snapshot

Commit history from 202049 to 202113:

5ac8c3c7 Fix async push broken after auth deferred refactor
8ccce69d log file descriptor in more socket related error messages
c5fec838 Move auth deferred related members into its own struct
6ea62d50 Remove deprecated option '--keysize'
60f5889a Deprecate non TLS mode in OpenVPN
79ff3f79 Allow running a default configuration with TLS libraries without BF-CBC
9e702a5d Always disable TLS renegotiations
203afbe9 reliable: retransmit if 3 follow-up ACKs are received
343b6119 Remove do_init_socket_2 and do_init_socket_1 wrapper function
9fe0b2c2 Extract multi_assign_peer_id into its own function
18b4a838 Remove thread_mode field of multi_context
(Only the first 15 lines of the commit message are shown above View all of this commit message)
[ 14:31 Mathieu Arnold (mat) search for other commits by this committer ]    commit hash:305f148f482daf30dcf728039d03d019f88344eb  commit hash:305f148f482daf30dcf728039d03d019f88344eb  commit hash:305f148f482daf30dcf728039d03d019f88344eb  305f148  (Only the first 10 of 29333 ports in this commit are shown above. View all ports for this commit)
Remove # $FreeBSD$ from Makefiles.
Fri, 11 Dec 2020
[ 17:46 mandree search for other commits by this committer ] Original commit   Revision:557755
security/openvpn-devel: Update to 2020-W49 snapshot

Update port to 2020-W49 development snapshot.

1387f526 Fix port-share option with TLS-Crypt v2
4d307ed4 tls-crypt-v2: also preload tls-crypt-v2 keys (if --persist-key)
fb169c3b tls-crypt-v2: fix server memory leak
dfd624b5 Remove auth_user_pass.wait_for_push variable
fb789947 Fix auth-token not being updated if auth-nocache is set
88dc4276 Make any auth failure tls_authentication_status return auth failed
55d5eaa3 Send AUTH_FAILED message to clients on renegotiation failures
3ac8e592 Rename DECRYPT_KEY_ENABLED to TLS_AUTHENTICATED
f9d3fbf9 Clean up tls_authentication_status and document it
f1f0f074 Improve keys out of sync message
8292102b Add more documentation about our internal TLS functions
cc5a7163 Replace key_scan array of static pointers with inline function
fc25ca3a build: Fix missing install of man page in certain environments
0d4069e4 Change travis build scripts to use https when fetching prerequisites.

PR:		251761
Submitted by:	Eric F. Crist (maintainer)
Fri, 30 Oct 2020
[ 20:41 mandree search for other commits by this committer ] Original commit   Revision:553714
openvpn-devel Update to post 2.5 release development snapshot.

=== Commit Notes ===
99d217b2 Remove --disable-def-auth configure argument
0d4ca79d Remove explicit setting of peer_id to false
cb70cf51 Remove NULL checks before calling free
2c8a9877 Align reliable_free with other free methods to accept NULL
0d5aab88 Inline function tls_get_peer_info
bbcada8a Avoid passing NULL to argv_printf_cat() in temp_file error case.
a4eeef17 Add function for common env setting of verify user/pass calls
a480eaae Ignore deprecation warning for daemon on macOS
14bd92b7 Fix compilation on pre-EKM mbedTLS libraries.
f0734e49 Simplify key material exporter backend API
6dc09d0d Implement generating data channel keys via EKM/RFC 5705
1e6e083e networking_iproute2: fix memory leak in net_iface_mtu_set()
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Fri, 28 Aug 2020
[ 14:14 mandree search for other commits by this committer ] Original commit   Revision:546735
security/openvpn-devel: Update to 2020-W35 snapshot (take 2 + 1/2)

This also adds a fix to the optional TUNNELBLICK extra-patch that removes
context now gone from the upstream code.

Here are the changes in the W35 snapshot:

136c5f01 Fix compilation with older mbed TLS versions (mbedtls_tls_prf_types
undefined)
5e19cc2c Workaround FreeBSD 12+ race condition on tun/tap open with IPv6.
10abd656 Refactor key_state_export_keying_material functions
62560e2a Fixes a bug in management_callback_send_cc_message, should be strlen
instead of sizeof
2ab0a924 Fix client's poor man NCP fallback
ed47c097 tun.c: enable using wintun driver under SYSTEM
2da29362 Improve the documentation for --dhcp-option
bf911882 Changes.rst: fix mistyped option names
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Tue, 11 Aug 2020
[ 13:12 mandree search for other commits by this committer ] Original commit   Revision:544685
security/openvpn-devel: Update to 2020-W33 snapshot

Update to Week 33 snapshot:

e02616d8 Document comp-lzo no and compress being incompatible
c13d20fa Remove S_OP_NORMAL key state.
4b4f5fe2 Move parsing IV_PROTO to separate function
4edcf571 Skip existing interfaces on opening the first available utun on macOS
42b39e98 Merge check_coarse_timers and check_coarse_timers_dowork
cd88d947 Eliminate check_tls wrapper function
eed645b3 Eliminate check_incoming_control_channel wrapper function
b7aebba2 Eliminate check_fragment function
76ea0859 Rename check_ping_restart_dowork to trigger_ping_timeout_signal
ce7ddaaf Split pf_check_reload check and check timer in process_coarse_timers
feacd01c travis: don't run t_net.sh test
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Tue, 21 Jul 2020
[ 19:03 mandree search for other commits by this committer ] Original commit   Revision:542781
security/openvpn-devel: update to 2020-W30 snapshot

This is from the PR, with the addition of
BUILD_DEPENDS+=rst2man:textproc/py-docutils
such that the manpage gets built (it doesn't ship with
snapshots - which are from Git - any longer).

changes:

08469ca1 Remove --client-cert-not-required
2d5facaa Remove --ifconfig-pool-linear
94edc7c5 Require AEAD support in the crypto library
ec7d0e8e Drop support for OpenSSL 1.0.1
df85950a travis: Fix make distcheck failure
aad16b6c client-connect: Implement deferred connect support for plugin API v2
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Fri, 17 Jul 2020
[ 10:04 mandree search for other commits by this committer ] Original commit   Revision:542422
security/openvpn-devel: Update to 202028 (2020-W28 snapshot)

ChangeLog:
<https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=247974#c0>

While here:
* add cmocka as build-time requisite to include the engine test.
* use PLUGINDIR rather than hacking CPPFLAGS for PLUGIN_LIBDIR,
  the latter breaks -fPIC detection by configure (breaking the
  shared lib build for the engine unit tests)

PR:		247974
Submitted by:	Eric F. Crist (maintainer)
Mon, 20 Apr 2020
[ 14:35 mandree search for other commits by this committer ] Original commit   Revision:532210
Update to new snapshot 202016.

Git changes since 202015:

* 37bc691e 2020-04-15 | Fix illegal client float (CVE-2020-11810) [Lev Stipakov]
* 3b06b57d 2020-03-13 | Fix broken async push with NCP is used [Lev Stipakov]
* d8ac887c 2020-03-28 | Fix OpenSSL 1.1.1 not using auto elliptic curve
selection [Arne Schwabe]

Approved by:	ecrist@secure-computing.net (via IRC #openvpn-devel)
Security:	CVE-2020-11810
Security:	8604121c-7fc2-11ea-bcac-7781e90b0c8f
Sun, 12 Apr 2020
[ 15:57 mandree search for other commits by this committer ] Original commit   Revision:531525
security/openvpn-devel: update to 2020-W15 snapshot

Update openvpn-devel port to the 2020-W15 snapshot
(Changes from upstream's Git):

* 05229fb5 2020-04-07 | OpenSSL: Fix --crl-verify not loading multiple
			CRLs in one file [Maxim Plotnikov]
* e23fb6b8 2020-04-03 | Fix off-by-one in tls-crypt-v2 client wrapping
			with custom metadata [Arne Schwabe]

PR:		245573
Submitted by:	ecrist@secure-computing.net (maintainer)
Sun, 5 Apr 2020
[ 12:05 mandree search for other commits by this committer ] Original commit   Revision:530771
security/openvpn-devel: update to 2020-W14 snapshot

update to the 2020-W14 snapshot, Git log:

* 57578310 2020-03-30 | When auth-user-pass file has no password query the
management interface (if available). (HEAD -> master-2020-14, origin/master,
origin/HEAD, master) [Selva Nair]
* 8e5d30cf 2020-03-30 | Move querying username/password from management to a
function [Selva Nair]
* 3608d890 2020-04-02 | Fix OpenSSL error stack handling of
tls_ctx_add_extra_certs [Arne Schwabe]
* 09ae6280 2020-03-14 | tun.c: revise the IPv4 ifconfig flow on Windows [Simon
Rozman]
* 3e0e1692 2020-04-01 | Fetch OpenSSL versions via source/old links [Arne
Schwabe]
* a59e0754 2020-03-31 | mbedTLS: Make sure TLS session survives move [Tom van
Leeuwen]
* a2a2132c 2020-03-25 | docs: Add reference to X509_LOOKUP_hash_dir(3) [WGH]
* e8106537 2020-03-10 | tapctl: Support multiple hardware IDs [Simon Rozman]
* c6f8d1a7 2020-03-09 | openvpnmsica: Merge FindTUNTAPAdapters into
FindSystemInfo [Simon Rozman]

PR:		245373
Submitted by:	ecrist@secure-computing.net (maintainer)
Mon, 30 Mar 2020
[ 18:16 mandree search for other commits by this committer ] Original commit   Revision:529902
security/openvpn-devel: update to 2020-W13 snapshot

Changes since the 2020-W12 snapshot:

* be453156 2020-03-12 | Normalise ncp-ciphers option and restrict it to 127
bytes (HEAD -> master-2020-13, origin/master, origin/HEAD, master) [Arne
Schwabe]
* f67efa94 2019-10-21 | Fix OpenSSL private key passphrase notices [Santtu
Lakkala]
* 072f7d35 2020-03-22 | travis-ci: add arm64, s390x builds. [Ilya Shipitsin]
* 50d68142 2020-03-09 | openvpnmsica, tapctl: Revise default hardware ID
management [Simon Rozman]
* d263e4f3 2020-03-09 | openvpnmsica: Extend to support arbitrary HWID network
adapters [Simon Rozman]
* 8c487854 2020-03-09 | openvpnmsica: "TAP" => "TUN/TAP" [Simon Rozman]
* 52b2414d 2020-03-09 | openvpnmsica, tapctl: "interface" => "adapter" [Simon
Rozman]
* c8de3ddb 2020-03-09 | openvpnmsica: Simplify static function names [Simon
Rozman]
* e24049d5 2020-03-09 | openvpnmsica: Revise MSI custom actions interop [Simon
Rozman]
* d15bc3ad 2020-03-09 | tapctl: Add functions for enabling/disabling adapters
[Simon Rozman]

PR:		245192
Submitted by:	ecrist@secure-computing.net (maintainer)
Fri, 27 Mar 2020
[ 12:10 mandree search for other commits by this committer ] Original commit   Revision:529243
security/openvpn-devel: Update to new 2020-W12 snapshot.

Git history since 202010:
* e1eb630d 2020-03-14 | Fix building with --enable-async-push in FreeBSD [Lev
Stipakov]
* f3ef6ced 2020-03-10 | tun.c: reorder IPv6 ifconfig on Windows [Simon Rozman]
* 5d28b47c 2020-03-12 | tun.c: fix 'use after free' error [Lev Stipakov]
* 04f4b4fe 2020-02-05 | Skip DNS address validation [Domagoj Pensa]
* 089fbe65 2020-02-05 | wintun: upgrade error message in case of ring
registration failure [Simon Rozman]
* 57fe5a26 2020-03-09 | tapctl: Update documentation [Simon Rozman]
* 36493bf6 2020-03-09 | openvpnmsica: Fix TAPInterface.DisplayName field
interpretation [Simon Rozman]
* 026cf3e5 2020-03-09 | openvpnmsica: Remove required Windows driver
certification detection [Simon Rozman]
* 1828f9c1 2020-02-21 | Move NCP related function into a seperate file and add
unit tests [Arne Schwabe]
* 53e7d8db 2020-02-05 | wintun: check for conflicting options [Simon Rozman]
* baef44fc 2020-02-05 | tun.c: uncrustify [Simon Rozman]
* 4c71a647 2020-02-05 | tun.c: refactor driver detection and make it
case-insensitive [Simon Rozman]
* b111aa80 2020-02-29 | interactive.c: remove unused function [Lev Stipakov]

PR:		245098
Submitted by:	ecrist@secure-computing.net
Fri, 6 Mar 2020
[ 14:27 mandree search for other commits by this committer ] Original commit   Revision:527880
security/openvpn-devel update to snapshot 202010

PR:		244632
Submitted by:	ecrist@secure-computing.net (maintainer)
Sat, 7 Sep 2019
[ 07:37 mandree search for other commits by this committer ] Original commit   Revision:511396
security/openvpn-devel: Maintainer update to 201935

This commit updates the port to the latest development snapshot.

Additional changes over PR:
- leave CATEGORIES alone (leaving net-vpn in)
- move IGNORE_SSL upwards and remove USE_LDCONFIG to please portlint -CA

PR:		240376
Submitted by:	ecrist@secure-computing.net (maintainer)
Wed, 14 Aug 2019
[ 03:26 meta search for other commits by this committer ] Original commit   Revision:508887 (Only the first 10 of 30 ports in this commit are shown above. View all ports for this commit)
Implement new virtual category: net-vpn for VPN related ports

based on discussion at ports@ [1]. As VPN softwares are put in different
physical category net and security. This is a little bit confusing. Let's
give them new virtual category net-vpn.

[1] https://lists.freebsd.org/pipermail/freebsd-ports/2019-April/115915.html

PR:		239395
Submitted by:	myself
Approved by:	portmgr (mat)
Differential Revision:	https://reviews.freebsd.org/D21174
Thu, 28 Feb 2019
[ 21:52 swills search for other commits by this committer ] Original commit   Revision:494211
security/openvpn-devel: fix whitespace from r494062

Reported by:	Peter Jeremy <peter@rulingia.com>
Pointyhat to:	swills
Wed, 27 Feb 2019
[ 15:31 swills search for other commits by this committer ] Original commit   Revision:494062
security/openvpn-devel: Update to 201907 development snapshot

PR:		235859
Submitted by:	ecrist@secure-computing.net (maintainer)
Fri, 14 Sep 2018
[ 12:04 tijl search for other commits by this committer ] Original commit   Revision:479770 (Only the first 10 of 12 ports in this commit are shown above. View all ports for this commit)
Update security/mbedtls to 2.13.0 and bump dependent ports.
Fri, 10 Aug 2018
[ 14:23 tijl search for other commits by this committer ] Original commit   Revision:476834 (Only the first 10 of 13 ports in this commit are shown above. View all ports for this commit)
Update security/mbedtls to 2.12.0 and bump dependent ports.

MFH:		2018Q3
Security:	https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-02
Thu, 7 Jun 2018
[ 12:16 tijl search for other commits by this committer ] Original commit   Revision:471909
Update security/mbedtls to 2.9.0 and bump dependent ports.
Wed, 30 May 2018
[ 16:10 joneum search for other commits by this committer ] Original commit   Revision:471136
security/openvpn-devel: Update to 201821

PR:		228589
Submitted by:	ecrist@secure-computing.net (maintainer)
Thu, 24 May 2018
[ 02:53 meta search for other commits by this committer ] Original commit   Revision:470755
security/openvpn-devel: Update to 201815

PR:		227567
Submitted by:	ecrist@secure-computing.net (maintainer)
Approved by:	pi (mentor)
Mon, 23 Apr 2018
[ 19:26 tijl search for other commits by this committer ] Original commit   Revision:468134
Update security/mbedtls to 2.8.0 and bump dependent ports.

MFH:		2018Q2
Security:	https://tls.mbed.org/tech-updates/releases/mbedtls-2.8.0-2.7.2-and-2.1.11-released
Wed, 14 Mar 2018
[ 14:45 swills search for other commits by this committer ] Original commit   Revision:464495
security/openvpn-devel: update to latest 2018-11 snapshot

PR:		226588
Submitted by:	ecrist@secure-computing.net (maintainer)
Mon, 12 Mar 2018
[ 13:01 tijl search for other commits by this committer ] Original commit   Revision:464247
Update security/mbedtls to 2.7.1.

PR:		226550
MFH:		2018Q1
Sat, 10 Mar 2018
[ 18:49 tijl search for other commits by this committer ] Original commit   Revision:464085 (Only the first 10 of 12 ports in this commit are shown above. View all ports for this commit)
- Update security/polarssl13 to 1.3.22.
- Update security/mbedtls to 2.7.0 and bump dependent ports.

MFH:		2018Q1
Security:	https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-01
Thu, 11 Jan 2018
[ 14:18 danfe search for other commits by this committer ] Original commit   Revision:458739 (Only the first 10 of 100 ports in this commit are shown above. View all ports for this commit)
Do not abuse INSTALL_MAN when installing documentation, examples, and
other miscellaneous files that are not actually manual pages (part 2).
Wed, 21 Jun 2017
[ 19:19 jpaetzel search for other commits by this committer ] Original commit   Revision:444072
Update to latest version

PR:	220183
Submitted by:	ecrist@secure-computing.net
Mon, 15 May 2017
[ 22:40 mandree search for other commits by this committer ] Original commit   Revision:440983
Update to new snapshot.

Note I didn't take the original patch because it needed to NOT conflict
with itself, and I had to fix indentation - be sure to use TAB, not
blanks, after the VARIABLE= part.

PR:		219305
Submitted by:	ecrist@secure-computing.net (maintainer)
Wed, 4 Jan 2017
[ 14:38 mandree search for other commits by this committer ] Original commit   Revision:430558 (Only the first 10 of 12 ports in this commit are shown above. View all ports for this commit)
Update openvpn-devel to 2016-52 snapshot.

Align with security/openvpn for RC script improvements, dropping the
TUNNELBLICK patch (integrated upstream) and pkg-help file (no longer
required).

Note that pkcs11* and mbedTLS currently do not mix (I randomly checked
different option sets), an issue this port shares with security/openvpn.
"checking mbedtls pkcs11 support...
configure: error: mbedtls has no pkcs11 wrapper compiled in"

PR:		215734
Submitted by:	Eric F. Crist (maintainer)
Thu, 8 Dec 2016
[ 08:55 mandree search for other commits by this committer ] Original commit   Revision:428107
Update to 2016-W47 snapshot (2.4 beta).

PR:		214930
Submitted by:	ecrist@secure-computing.net (maintainer)
Thu, 3 Nov 2016
[ 22:32 mandree search for other commits by this committer ] Original commit   Revision:425277
Update to latest snapshot (week 43)

PR:		213982
Submitted by:	ecrist@secure-computing.net (maintainer)
Tue, 28 Jun 2016
[ 16:20 pi search for other commits by this committer ] Original commit   Revision:417735
security/openvpn-devel: 201607 -> 201623

Port Changes:
- password-save option is always on now, no longer optional
- LibreSSL has been renamed mbed TLS

Upstream Changes:
- Implement --push-remove option to remove options pushed by server
- Use mbedTLS 2.x now, instead of PolarSSL 1.x

PR:		210259
Submitted by:	ecrist@secure-computing.net (maintainer)
Fri, 1 Apr 2016
[ 14:25 mat search for other commits by this committer ] Original commit   Revision:412349 (Only the first 10 of 2099 ports in this commit are shown above. View all ports for this commit)
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight
Sat, 27 Feb 2016
[ 20:28 pi search for other commits by this committer ] Original commit   Revision:409687
security/openvpn-devel: 201548 -> 201607

- update to the latest development snapshot

PR:		207489
Submitted by:	ecrist@secure-computing.net (maintainer)
Mon, 30 Nov 2015
[ 11:08 miwi search for other commits by this committer ] Original commit   Revision:402661
- Update to 2015-48

PR:		        204805
Submitted by:	ecrist@secure-computing.net (maintainer)
Approved by:	mat (mentor)
Wed, 21 Oct 2015
[ 14:16 mat search for other commits by this committer ] Original commit   Revision:399908
Update to 201541. [1]

Convert to options helpers.

PR:		203823 [1]
Submitted by:	maintainer
Sponsored by:	Absolight
Sun, 2 Aug 2015
[ 15:03 tijl search for other commits by this committer ] Original commit   Revision:393429 (Only the first 10 of 234 ports in this commit are shown above. View all ports for this commit)
By default libtool replaces -export-symbols <file> with -retain-symbols-file
<file> on ELF systems, but this doesn't really do what -export-symbols is
meant to do.  On GNU ELF systems it converts <file> to a simple version
script first and then uses -version-script instead of -retain-symbols-file.
Let USES=libtool patch libtool scripts to do this on all systems with GNU
ld(1).

Bump PORTREVISION on all ports where the build log contains -export-symbols.

audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions.  Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to.  Fix a number of other issues in the same
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Tue, 16 Jun 2015
[ 01:29 delphij search for other commits by this committer ] Original commit   Revision:389811
Update to 201523.

PR:		200774
Submitted by:	maintainer
Fri, 12 Jun 2015
[ 16:14 tijl search for other commits by this committer ] Original commit   Revision:389281 (Only the first 10 of 11 ports in this commit are shown above. View all ports for this commit)
- Update security/polarssl13 to 1.3.11
- Patch a Makefile so regular make install works
- Replace a patch with MAKE_ENV
- Bump dependent ports

PR:		200816
Tue, 21 Apr 2015
[ 16:39 jpaetzel search for other commits by this committer ] Original commit   Revision:384431
Update to 201516 development snapshot

PR:	199580
Submitted by:	ecrist@secure-computing.net
Fri, 17 Apr 2015
[ 13:37 tijl search for other commits by this committer ] Original commit   Revision:384160
Specify library version when depending on libpolarssl and switch ports to
PolarSSL 1.3 when they fail to build with 1.2.
Fri, 5 Dec 2014
[ 16:51 feld search for other commits by this committer ] Original commit   Revision:374053
Update to the 201449 snapshot

PR:		195651
Submitted by:	ecrist (maintainer)
Wed, 23 Jul 2014
[ 20:33 rakuco search for other commits by this committer ] Original commit   Revision:362728
Update to the 201425 snapshot.

PR:		192006
Submitted by:	ecrist@secure-computing.net (maintainer)
Wed, 16 Jul 2014
[ 08:44 bapt search for other commits by this committer ] Original commit   Revision:362053 (Only the first 10 of 38 ports in this commit are shown above. View all ports for this commit)
Fix some non default LIB_DEPENDS

With hat:	portmgr
Tue, 15 Jul 2014
[ 16:57 adamw search for other commits by this committer ] Original commit   Revision:361977 (Only the first 10 of 14 ports in this commit are shown above. View all ports for this commit)
Add DOCS to OPTIONS_DEFINE to ports that check for PORT_OPTIONS:MDOCS.
Mon, 16 Jun 2014
[ 15:16 amdmi3 search for other commits by this committer ] Original commit   Revision:358015
- Add missing USES=libtool to archivers/snappy
- Bump dependent ports as .so version has changed

Approved by:	portmgr blanket
Sun, 8 Jun 2014
[ 19:51 olgeni search for other commits by this committer ] Original commit   Revision:357070 (Only the first 10 of 101 ports in this commit are shown above. View all ports for this commit)
Remove all space characters from Makefile assignments.

No functional changes included.

CR:		D193 (except math/sedumi)
Approved by:	portmgr (bapt)
Fri, 6 Jun 2014
[ 17:12 bdrewery search for other commits by this committer ] Original commit   Revision:356822
- Update to latest snapshot 201421
- Support staging
- Sync more with security/openvpn

PR:		190312
Submitted by:	ecrist@secure-computing.net (maintainer)
Tue, 3 Jun 2014
[ 14:34 vanilla search for other commits by this committer ] Original commit   Revision:356371 (Only the first 10 of 16 ports in this commit are shown above. View all ports for this commit)
Upgrade snappy to 1.1.1, and bump all related PORTREVISION to chase shared
library version.

PR:		ports/190409
Submitted by:	ports at robakdesign.com
Approved by:	portmgr@ (for NO_STAGE)
Wed, 12 Feb 2014
[ 14:03 mat search for other commits by this committer ] Original commit   Revision:343923 (Only the first 10 of 20 ports in this commit are shown above. View all ports for this commit)
Fix old makeplist bug.

Pointy hat to:	people who blindly use makeplist
Sponsored by:	Absolight
Fri, 20 Sep 2013
[ 22:55 bapt search for other commits by this committer ] Original commit   Revision:327769 (Only the first 10 of 1016 ports in this commit are shown above. View all ports for this commit)
Add NO_STAGE all over the place in preparation for the staging support (cat:
security)
Mon, 1 Jul 2013
[ 18:10 lme search for other commits by this committer ] Original commit   Revision:322134
Update to version 201326

PR:		ports/180167
Submitted by:	maintainer
Tue, 21 May 2013
[ 23:32 jpaetzel search for other commits by this committer ] Original commit   Revision:318735
Update to latest snapshot

PR:	ports/178814
Submitted by:	Eric F Crist <ecrist@secure-computing.net>
Sponsored by:	Claimlynx
Tue, 18 Dec 2012
[ 19:59 jpaetzel search for other commits by this committer ] Original commit   Revision:309198
Update to 201250 snapshot

PR:	ports/174520
Submitted by:	Eric F. Crist <ecrist@secure-computing.net>
Thu, 11 Oct 2012
[ 20:13 bdrewery search for other commits by this committer ] Original commit   Revision:305741
- Update to latest snapshot [1]
- Properly install symlinks for auth-pam and down-root plugins [1]
- Fix pkg-message description of locations of these plugins [1]
- Fix plist for nonexistent DOCSDIR/openvpn and DOCSDIRS/sample

PR:		ports/172587 [1]
Submitted by:	Eric F Crist <ecrist@secure-computing.net> (maintainer) [1]
Feature safe:	yes
Mon, 1 Oct 2012
[ 15:01 bdrewery search for other commits by this committer ] Original commit   Revision:305132
- Fix header to proper format

Reported by:	danfe
Fri, 28 Sep 2012
[ 18:45 bdrewery search for other commits by this committer ] Original commit   Revision:305007
- Update to 201237 snapshot [1]
- Convert to new options framework
- Remove ABI versions from LIB_DEPENDS
- Update to new header

PR:		ports/171743 [1]
Submitted by:	Eric F Crist <ecrist@secure-computing.net> (maintainer) [1]
Sun, 5 Aug 2012
[ 23:19 dougb search for other commits by this committer ] Original commit  (Only the first 10 of 936 ports in this commit are shown above. View all ports for this commit)
Move the rc.d scripts of the form *.sh.in to *.in

Where necessary add $FreeBSD$ to the file

No PORTREVISION bump necessary because this is a no-op
Wed, 25 Jul 2012
[ 16:52 scheidell search for other commits by this committer ] Original commit 
- Update to latest snapshot

PR:		ports/170111
Submitted by:	Eric F Crist <ecrist@secure-computing.net> (maintainer)
Mon, 27 Feb 2012
[ 19:20 jgh search for other commits by this committer ] Original commit 
- Update to 201208 snapshot
- while here use INSTALL_LIB for library installation

PR:     ports/165504
Submitted by:   maintainer, ecrist@secure-computing.net
Mon, 23 Jan 2012
[ 20:47 ohauer search for other commits by this committer ] Original commit 
- update to DISTVERSION 201204
- sort pkg-plist with help from ports-mgmt/genplist

PR:             164407
Submitted by:   Eric F Crist <ecrist@secure-computing.net> (maintainer)
Tue, 4 Oct 2011
[ 21:51 mandree search for other commits by this committer ] Original commit 
Update to new snapshot 201139, removing files/patch-t_cltsrv.sh [1].

Remove files/pkg-req.in and references in SUB_FILES and pre-install,
it was a (now obsolete) workaround to warn users that installed newer
6.X packages on older 6.X systems and ended up with the new rc world
order scripts unfound and openvpn not running. [2]

Fix version number in CONFLICTS to encompass openvpn (not just
openvpn20), and demote to CONFLICTS_INSTALL. Neither port installs
headers or libraries that might get in the way.

PR:           ports/161285
Submitted by: Eric F. Crist (maintainer) [1]
Approved by:  Eric F. Crist (maintainer) [2]
Sun, 7 Aug 2011
[ 17:23 pav search for other commits by this committer ] Original commit 
- Turn off self-tests on pointyhat, they fail

Reported by:    pointyhat
Mon, 25 Jul 2011
[ 20:03 mandree search for other commits by this committer ] Original commit 
Move LICENSE= up into a block of its own to silence portlint.

Remove the lzo/lzo2 version switch now that we only have lzo2.

Approved by: ecrist@secure-computing.net (maintainer)
Fri, 1 Jul 2011
[ 17:59 jpaetzel search for other commits by this committer ] Original commit 
Update to week 26 snapshot.

PR:     ports/158568
Submitted by:   Eric F Crist <ecrist@secure-computing.net>
Sponsored by:   ClaimLynx, Inc
Wed, 15 Jun 2011
[ 08:43 culot search for other commits by this committer ] Original commit 
- Update to 201124

PR:             ports/157812
Submitted by:   Jin-Sih Lin <linpct@gmail.com>
Approved by:    Eric Crist <ecrist@secure-computing.net> (maintainer)
Wed, 4 May 2011
[ 18:12 dhn search for other commits by this committer ] Original commit 
- Update to 201118

PR:             ports/156812
Submitted by:   Eric F Crist <ecrist@secure-computing.net> (maintainer)
Tue, 22 Mar 2011
[ 13:34 jpaetzel search for other commits by this committer ] Original commit 
Update to latest snapshot.

PR:     ports/155770
Submitted by:   Eric F Crist <ecrist@secure-computing.net>
Sponsored by:   ClaimLynx, Inc
Tue, 25 Jan 2011
[ 23:31 jpaetzel search for other commits by this committer ] Original commit 
Update to week 4 snapshot

PR:     ports/154296
Submitted by:   Eric F Crist <ecrist@secure-computing.net>
Feature safe:   yes
Sponsored by:   ClaimLynx, Inc
Fri, 10 Dec 2010
[ 15:04 jpaetzel search for other commits by this committer ] Original commit 
Update to latest snapshot.

PR:     ports/152992
Submitted by:   Eric F Crist <ecrist@secure-computing.net>
Sponsored by:   ClaimLynx, Inc
Thu, 14 Oct 2010
[ 20:27 jpaetzel search for other commits by this committer ] Original commit 
Update to latest snapshot

PR:     ports/151462
Submitted by:   Eric F Crist <ecrist@secure-computing.net>
Sponsored by:   ClaimLynx, Inc
Sun, 22 Aug 2010
[ 15:22 lwhsu search for other commits by this committer ] Original commit 
- Update to the latest week 34 snapshot.
- While here, resolve portlint(1) warning: Package conflicts with itself.

PR:             ports/149878
Submitted by:   Eric F Crist <ecrist@secure-computing.net>
Sat, 14 Aug 2010
[ 15:39 jpaetzel search for other commits by this committer ] Original commit 
Update CONFLICTS in preperation for new port security/openvpn-beta

PR:     ports/149618
Submitted by:   Eric F Crist <ecrist@secure-computing.net>
Wed, 4 Aug 2010
[ 16:02 jpaetzel search for other commits by this committer ] Original commit 
Update to latest weekly snapshot.
Add softrestart command to rc script.

PR:     ports/149272
Submitted by:   Eric F Crist <ecrist@secure-computing.net>
Tue, 20 Jul 2010
[ 15:55 jpaetzel search for other commits by this committer ] Original commit 
Update weekly snapshot

PR:     ports/148787
Submitted by:   Eric F Crist <ecrist@secure-computing.net>
Mon, 28 Jun 2010
[ 17:54 jpaetzel search for other commits by this committer ] Original commit 
Update to weekly snapshot

PR:     148212
Submitted by:   Eric F Crist <ecrist@secure-computing.net>
Approved by:    itetcu@ (mentor)
Feature safe:   yes
Wed, 16 Jun 2010
[ 22:35 jpaetzel search for other commits by this committer ] Original commit 
Update to week 24 snapshot

PR:     147850
Submitted by:   Eric F Crist <ecrist@secure-computing.net>
Approved by:    itetcu@ (mentor)
Thu, 3 Jun 2010
[ 17:20 jpaetzel search for other commits by this committer ] Original commit 
Update to latest snapshot

PR:     ports/147330
Submitted by:   Eric F Crist <ecrist@secure-computing.net>
Approved by:    itetcu@ (mentor)
Fri, 14 May 2010
[ 21:17 jpaetzel search for other commits by this committer ] Original commit 
Update to week 19 tarball

PR:     ports/146594
Submitted by:   Eric F Crist <ecrist@secure-computing.net>
Approved by:    itetcu@ (mentor)
Mon, 26 Apr 2010
[ 03:02 sylvio search for other commits by this committer ] Original commit 
- Update to 201017

PR:             ports/145762
Submitted by:   Eric F Crist <ecrist@secure-computing.net> (maintainer)
Sat, 27 Mar 2010
[ 06:14 dougb search for other commits by this committer ] Original commit  (Only the first 10 of 25 ports in this commit are shown above. View all ports for this commit)
RC_SUBR_SUFFIX has not been needed for a long time now, all supported
versions of FreeBSD now use /etc/rc.subr and rc.d scripts without .sh
appended to the script name.

Number of commits found: 128 (showing only 100 on this page)

1 | 2  »