Commit Graph

43 Commits

Author SHA1 Message Date
Florian Eckert dfcdf2e2f6 stunnel: update to version 5.72
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-05-06 13:25:01 +02:00
Florian Eckert 000fa810f0 stunnel: update version to 5.71
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-09-27 16:37:19 -07:00
Paul Fertser 0c10c224be treewide: remove AUTORELEASE
Automatically compute and substitute current values for all
$(AUTORELEASE) instances as this feature is deprecated and shouldn't be
used.

The following temporary change was made to the core:

diff --git a/rules.mk b/rules.mk
index 57d7995d4fa8..f16367de87a8 100644
--- a/rules.mk
+++ b/rules.mk
@@ -429,7 +429,7 @@ endef
 abi_version_str = $(subst -,,$(subst _,,$(subst .,,$(1))))

 COMMITCOUNT = $(if $(DUMP),0,$(call commitcount))
-AUTORELEASE = $(if $(DUMP),0,$(call commitcount,1))
+AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile))

 all:
 FORCE: ;

And this command used to fix affected packages:

for i in $(cd feeds/packages; git grep -l PKG_RELEASE:=.*AUTORELEASE | \
                              sed 's^.*/\([^/]*\)/Makefile^\1^';);
do
  make package/$i/download
done

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2023-04-21 22:46:58 +02:00
Florian Eckert 7bce2138ef stunnel: update version to 5.67
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-02-01 10:05:10 +01:00
Florian Eckert b9df9f10b8 stunnel: update version to 5.66
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-10-10 13:28:52 +02:00
Florian Eckert d446b5108d stunnel: update version to 5.65
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-07-28 17:40:28 -07:00
Florian Eckert d932134b1d stunnel: update to version 5.64
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-05-19 16:11:25 +02:00
Florian Eckert d7b73fb195 stunnel: update version to 5.62
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-02-04 08:16:33 +01:00
Florian Eckert 71467fe5ee stunnel: add new protocol option capwin and capwinctrl
The new protocol capwin and capwinctrl was added in version 5.61
https://www.stunnel.org/NEWS.html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-01-10 14:52:44 +01:00
Florian Eckert 1e17d3b93c stunnel: update to 5.61
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-01-10 14:37:09 +01:00
Florian Eckert 4e0a711bc2 stunnel: add missing sessionResume option
The option sessionResume was added in version 5.60
https://www.stunnel.org/NEWS.html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-01-10 14:32:03 +01:00
Florian Eckert 5517bd925d stunnel: update to version 5.60
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-08-30 11:49:04 +02:00
Florian Eckert 2d56dbfc27 stunnel: update to 5.59
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-04-20 08:42:57 +02:00
Florian Eckert 389c7f12cb stunnel: update to 5.58
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-02-22 09:52:52 +01:00
Florian Eckert 18a130c6bb stunnel: update version to 5.57
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-10-29 12:49:41 +01:00
Florian Eckert 32efe3609d stunnel: update to version 5.56
Update to version 5.56

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-11-28 12:09:52 +01:00
Sven Eckelmann bbb1ea7345 treewide: Change .*GPL.*+ licenses to SPDX compatible identifier
The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".

Signed-off-by: Sven Eckelmann <sven@narfation.org>
2019-09-10 07:45:15 +02:00
Florian Eckert 6713d1d771 stunnel: fix some shellcheck warnings
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-07-29 15:20:43 +02:00
Florian Eckert a17e90591c stunnel: update version to 5.55
Update version to 5.55

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-07-26 16:09:19 +02:00
Florian Eckert e4fe8dba53 stunnel: update version to 5.54
Update to latest stable release 5.54
Add new options ticketKeySecret and ticketMacSecret to uci validation.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-05-21 11:40:04 +02:00
Florian Eckert ed91f37e37 stunnel: update to version 5.53
Update to version 5.53

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-04-24 10:07:24 +02:00
Florian Eckert d745fd7c49 stunnel: update to version 5.51
Update to version 5.51

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-04-10 09:06:46 +02:00
Daniel Engberg 47038f69bb
net/stunnel: Update to 5.50
Update stunnel to 5.50
Remove --disable-fips switch as it's disabled by default

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2019-03-07 01:24:17 +01:00
Jeffery To 8bb3eba3c2 stunnel: Update init script
The reworked init script:
* Loads and validates options using uci_validate_section() (through
  uci_load_validate())
* Allows service options be specified in the globals section
* Hard-codes less global options (debug, syslog), as their default
  values already work
* Adds support for almost all options (up to the current package
  version, 5.49)
* Moves the pid file into a subdirectory (/var/run/stunnel) so that it
  can be created successfully when setuid is used

Certain options are omitted:
* chroot - requires more setup than the init script can manage
* fips, libwrap - disabled at compile-time
* iconActive, iconError, iconIdle, taskbar - gui/win32 only
* verify - obsolete, verifyChain and/or verifyPeer should be used
  instead

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-01-29 21:49:23 +08:00
Florian Eckert 76da682c75 stunnel: add cpe id
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-01-18 09:55:05 +08:00
Daniel Engberg 31e27e9d82
stunnel: Update to 5.49
Update stunnel to 5.49

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-11-05 20:41:01 +01:00
Florian Eckert 5c8298f279 net/stunnel: add archive mirror
The registered URLs only point to the latest version. After adding the archive
URL we could now download older version again.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-09-06 22:59:00 +08:00
Daniel Engberg faff71c576
net/stunnel: Update to 5.48
Update stunnel to 5.48

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-08-16 23:09:47 +02:00
Florian Eckert 3426baff06 net/stunnel: Remove abdicate maintainer
Update PKG_RELEASE version to 4.
Remove Daniel Engberg from PGK_MAINTANER list.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-01-23 14:37:02 +01:00
Florian Eckert 68f6fc25a0 net/stunnel: check if service section is configured to prevent crash loop
If a service section is not presented in the configuration then stunnel will
always start anyway. This ends in a crash loop because the configuration is not
valid.
Checking in "uci" mode if a service section is presented and only then
start the stunnel service will solve this issue.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-01-23 14:37:02 +01:00
Florian Eckert 66349b4cd9 net/stunnel: do always stop/start on config change
Do not send a SIGHUP on reload configuration let procd restart the
service with stop/start. This is saver.

Add uci generated stunnel file to procd "file" attribute to
reload/restart the stunnel service.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-01-23 11:53:47 +01:00
Florian Eckert 3fc880c2e9 net/stunnel: add enabled config option
Add an enabled option for the service section, so you could keep your
configuration in place without apply this section on startup or service reload.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-12-15 08:03:41 +01:00
Florian Eckert 5e0e6e0533 net/stunnel: add uci config support
Add uci config support.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-12-10 11:13:43 +01:00
Daniel Engberg 6b53b45e07 net/stunnel: Update to 5.44
Update stunnel to 5.44
* Disable FIPS

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2017-12-09 10:53:35 +01:00
Daniel Engberg 4f3b2f83d8 net/stunnel: Update to 5.41
Update stunnel to 5.41
Add main site as last resort mirror

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2017-04-02 10:49:49 +02:00
Daniel Engberg bfe17ade44 net/stunnel: Update to version 5.40
Update stunnel to 5.40

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2017-01-29 08:54:41 +01:00
Daniel Engberg 86257f8550 net/stunnel: Update to 5.38
Updates stunnel to version 5.38

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2016-11-28 08:56:44 +01:00
Daniel Engberg 169703d3e7 net/stunnel: Update to 5.37
Updates stunnel to version 5.37

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2016-11-20 22:59:07 +01:00
diizzyy 1c63894670 stunnel: Update to 5.36, use pthreads and SSP.
Updates stunnel to 5.36, changes it from using forking to pthreads and
enables SSP linking. Also changes maintainer to myself.

Regarding pthreads vs forking, http://blog.haproxy.com/2011/09/16/benchmarking_ssl_performance/
SSP is short for Stack Smashing Protector and you can read about it here: http://wiki.osdev.org/Stack_Smashing_Protector

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2016-10-01 00:04:33 +02:00
Felix Fietkau 0aa77e80f9 stunnel: add missing zlib dependency
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2016-07-24 14:52:50 +02:00
Michael Haas d3a38dc6a8 stunnel: Update from 5.14 to 5.20
* 010_fix_getnameinfo.patch is no longer needed
* 011-cron-without-pthread-fix.patch added, fixes incorrect
  ifdef when building without pthreads

Signed-off-by: Michael Haas <haas@computerlinguist.org>
2015-07-25 17:31:11 +02:00
Michael Haas 0c3713c767 stunnel: Bump from 5.10 to 5.14
Also refresh patches.

Signed-Off-By: Michael Haas <haas@computerlinguist.org>
2015-04-03 10:20:18 +02:00
Michael Haas f6927350e4 stunnel: Bring it back at v5.10
From: Michael Haas <haas@computerlinguist.org>

* init script no longer creates certificates (consider client mode as use
  case)
* patches/010_fix_getnameinfo.patch: Fix getnameinfo signature
* patches/011_disable_ssp_linking.patch: Disable -fstack-protector as it
  is not always available in OpenWRT
* old patches (in oldpackages) no longer necessary
* remove libwrap dependency
* remove libpthread dependency
* respect CONFIG_IPV6
* init script uses procd
* sample stunnel.conf runs in client mode - prevents start failure,
  does not require cert

Possible enhancement: automatically generate certificate as done in
uhttpd. However, as client mode is a possible use case, I'd rather not.
Additionally, stunnel may use several certs with user-defined locations
and we can't easily set a cert location via command-line args.

The package is based on
https://sites.google.com/site/twisteroidambassador/openwrt/stunnel

Signed-off-by: Michael Haas <haas@computerlinguist.org>
2015-03-17 13:47:55 +01:00