Spiped (pronounced "ess-pipe-dee") is a utility for creating symmetrically
encrypted and authenticated pipes between socket addresses, so that one may
connect to one address (e.g., a UNIX socket on localhost) and transparently
have a connection established to another address (e.g., a UNIX socket on a
different system). This is similar to 'ssh -L' functionality, but does not
use SSH and requires a pre-shared symmetric key.
===> The following configuration options are available for spiped-1.6.4_1:
DOCS=on: Build and/or install documentation
===> Use 'make config' to modify these settings
sysutils/spiped: Clean up UNIX sockets
When a TCP socket is closed, it becomes possible to create a new
socket listening on the same address; the behaviour of UNIX (aka
"local") sockets is different, in that an inode remains even after
it is closed, and blocks the creation of a new socket with the same
address.
When spiped is launched with a UNIX socket as its source address,
delete any existing socket with that address first. This makes it
possible to "service spiped restart" when UNIX sockets are used.
Deleting the socket when stopping spiped would also work for the
case of restarting the daemon, but not for the case of starting the
daemon after an unclean system shutdown; so deleting only prior to
starting the daemon seemed like the better option.
PR: 295432
Reported by: feld
sysutils/spiped: Update to 1.6.4
This fixes a bug which causes spiped to abort if a RST packet and a FIN
packet arrive from opposite ends of a pipe at the same time.
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
Remove __BSD_VISIBLE from spiped build
I added this in 2013 because it was needed in order to have MSG_NOSIGNAL
defined; having that improved performance by avoiding the need go mask
and unmask SIGPIPE repeately.
From src r248932 onwards (aka. 10.0-RELEASE and later) __BSD_VISIBLE is
no longer needed for this; since FreeBSD 9.x and earlier are no longer
supported, there is no point keeping the workaround.
Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.
PR: 238330
Bump PORTREVISION for ports depending on the canonical version of GCC
defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t
GCC 8.2 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.
PR: 231590
Bump PORTREVISION for ports depending on the canonical version of GCC
in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which
has now moved from GCC 6 to GCC 7 by default.
This includes ports
- featuring USE_GCC=yes or USE_GCC=any,
- featuring USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and those
- with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.
PR: 222542
Bump PORTREVISION for ports depending on the canonical version of GCC
(via Mk/bsd.default-versions.mk and lang/gcc) which has moved from
GCC 5.4 to GCC 6.4 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang,
c++14-lang, c++0x, c11, or gcc-c++11-lib.
PR: 219275
Bump PORTREVISIONs for ports depending on the canonical version of GCC and
lang/gcc which have moved from GCC 4.9.4 to GCC 5.4 (at least under some
circumstances such as versions of FreeBSD or platforms).
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using using Mk/bsd.octave.mk which in turn has USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c++11-lib, c++14-lang,
c++11-lang, c++0x, c11, or gcc-c++11-lib.
PR: 216707
Add support for passing additional flags to spiped via new
spiped_pipe_X_flags variables. Replace USE_OPENSSL with
USES ssl. [1]
While I'm here, clarify the comment about needing C99 but
preferring a compiler with AESNI support; it applies to the
USES compiler:c11 part but not tar:tgz or ssl.
PR: 215501
Submitted by: Dave Cottlehuber
Bump PORTREVISIONS for ports depending on the canonical version of GCC and
lang/gcc which have moved from GCC 4.8.5 to GCC 4.9.4 (at least under some
circumstances such as versions of FreeBSD or platforms).
In particular that is ports with USE_GCC=yes, USE_GCC=any, or one of
gcc-c++11-lib, openmp, nestedfct, c++11-lib as well as c++14-lang,
c++11-lang, c++0x, c11 requested via USES=compiler.
Teach sysutils/spiped about libcrypto versions:
* Add USE_OPENSSL
* Add -I${OPENSSLINC} to CFLAGS
* Pass -L${OPENSSLLIB} to the linker
Thanks to: brnrd
Add patch to work around bug in FreeBSD before r226610 (MFCed to stable/9
as r230953): Add #include <sys/types.h> before <netinet/tcp.h>. This was
breaking the build on FreeBSD 8.4.
While I'm here, quiesce portlint by switching from EXTRACT_SUFX=.tgz to
the new spelling USES=tar:tgz.
Update to 1.5.0. This update:
1. Fixes a crash on platforms with AESNI support and a malloc which does
not align large allocations to 16-byte boundaries. (AFAIK this does not
affect FreeBSD.)
2. Turns on TCP_NODELAY in order to avoid Nagling latency problems.
Update to spiped 1.4.0. Ask for a C11 compiler, despite only needing a C99
compiler, in an attempt to make sure that on x86 systems we have a compiler
with support for AESNI.
According to the Porter's Handbook (5.12.2.3.) default options must be added to
OPTIONS_DEFINE. This policy has been implemented only recently that's why we
have many ports violating this policy.
This patch adds the default options specified in the Porter's Handbook to
OPTIONS_DEFINE where they are being used. Ports maintained by
gnome@FreeBSD.org, kde@FreeBSD.org and x11@FreeBSD.org have been excluded.
Approved by: portmgr (bapt)
Update to spiped 1.3.1.
This new version brings automatic DNS re-resolution (useful when connecting
from wifi networks which give fake DNS until you log in), fixes a bug in the
handling of reset TCP connections, and replaces README files with man pages.
As the spiped build sets _POSIX_C_SOURCE for maximal portability, yet looks
for and uses MSG_NOSIGNAL if it is available (as a performance optimization
relative to the POSIX-compliant approach of blocking SIGPIPE), we force the
__BSD_VISIBLE macro to be defined.
Feature safe: yes
Update to spiped-1.2.1. The only major change is the addition of the
spipe(1) utility which acts as a client for the spiped protocol,
suitable for use as an ssh ProxyCommand.
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
Remove more tags from pkg-descr files fo the form:
- Name
em@i.l
or variations thereof. While I'm here also fix some whitespace and other
formatting errors, including moving WWW: to the last line in the file.
Update to 1.1.0. The most notable change is that spiped will now (via the
-D option which has been added to the rc.d script) retry failed DNS lookups;
this is useful in case spiped is launched before DNS resolution is working.
With hat: maintainer
Spiped (pronounced "ess-pipe-dee") is a utility for creating symmetrically
encrypted and authenticated pipes between socket addresses, so that one may
connect to one address (e.g., a UNIX socket on localhost) and transparently
have a connection established to another address (e.g., a UNIX socket on a
different system). This is similar to 'ssh -L' functionality, but does not
use SSH and requires a pre-shared symmetric key.
WWW: http://www.tarsnap.com/spiped.html
- Colin Percival
cperciva@tarsnap.com
PR: ports/159899
Submitted by: Colin Percival
