Commit Graph

16 Commits

Author SHA1 Message Date
Jan Pavlinec 299e5b0a9b
treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-17 12:40:26 +02:00
Audric Schiltknecht 3f6f6080d9 freeradius3: Fix conffiles for mod-sql-* packages
Signed-off-by: Audric Schiltknecht <audric.schiltknecht@viagenie.ca>
2019-05-10 07:38:48 -04:00
Robby K 15b21c1359 freeradius3: Update to 3.0.19
Latest stable release, contains security fixes for EAP-PWD.

Signed-off-by: Robby K <robbyke@gmail.com>
2019-04-16 16:11:14 +02:00
Robby K 7b122f6eeb freeradius3: Fix the libpcre dependency in Makefile.
Signed-off-by: Robby K <robbyke@gmail.com>
2019-04-16 16:06:27 +02:00
David Yang 76b013228d freeradius3: update to 3.0.18
Signed-off-by: David Yang <mmyangfl@gmail.com>
2019-04-02 22:51:10 +08:00
David Yang 6ed9c2d5ae freeradius3: Add support for SQL
Signed-off-by: David Yang <mmyangfl@gmail.com>
2019-04-02 22:00:13 +08:00
Eneas U de Queiroz f7db77282c
freeradius3: allow build without openssl engines
This applies a patch from upstream that avoids a call to ENGINE_cleanup
when the openssl library was built without engine support.

A workaround for a missing header check was used to silence a warning
about the implicit definition of RAND_load_file.  A proper fix has been
merged upstream as well.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2019-02-25 14:10:06 -03:00
Robby K bb7b3204e0 freeradius3: Enable the EAP-PWD module.
This enables the EAP-PWD module, which allows for logging in with only
a username and password, while still being secure (see the links below
for the details of this EAP method, if interested).

https://en.wikipedia.org/wiki/Extensible_Authentication_Protocol#EAP_Password_(EAP-PWD)

Also found this blog post which talks about EAP-PWD and its benefits:
https://dustri.org/b/eap-pwd-wifi-security-done-right.html

Signed-off-by: Robby K <robbyke@gmail.com>
2018-08-20 20:02:14 +02:00
Eneas U de Queiroz 9ded227056 freeradius3: update to 3.0.17
Latest stable release, support for openssl 1.1

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-05-25 17:33:12 -03:00
Hauke Mehrtens 7bb34ef7fc freeradius3: fix CVE-2017-9148
This takes the fix for CVE-2017-9148 from Debian.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-10-08 21:05:12 +02:00
Etienne Champetier 4006865ae8 treewide: run "make check FIXUP=1"
fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git

(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2017-08-29 21:41:14 -07:00
Daniel Golle 92b2a187bb Merge pull request #4099 from dangowrt/freeradius3-ldap
freeradius3: build and package support for LDAP
2017-06-05 16:51:38 +02:00
Toke Høiland-Jørgensen 3922206a34 freeradius3: Bump package release
Forgot to bump the package release in commit 424f4e2c.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2017-04-26 16:35:56 +02:00
Toke Høiland-Jørgensen 424f4e2c63 freeradius3: A couple of small fixes
- Moves /etc/freeradius3/sites-{enabled,available}/inner-tunnel to be part of
  the freeradius3-mod-eap package. This prevents conflicts between
  freeradius3-mod-eap-peap and freeradius3-mod-eap-ttls which both included the
  file before. This fixes LEDE bug FS#678.

- Change the demo cert validity to be 1 year instead of 60 days. Should keep the
  cert valid for the duration of the LEDE release cycle (with some slack). This
  fixes #4239.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2017-04-26 16:32:16 +02:00
Daniel Golle c275909c38 freeradius3: build and package support for LDAP
The lack of LDAP support was one of the things which prevented users
from migrating from freeradius2 to freeradius3.
Enable LDAP in freeradius3 so we can finally burry freeradius2.

Reported-by: Martin Mueller <mm@sig21.net>
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-03-03 10:34:55 +01:00
Lucile Quirion 0871991d8d freeradius3: add package
freeradius-server version 2.x has been marked End-Of-Life.
This commit adds freeradius-server version 3.0.11 in a new package.

This commit also introduces the option "freeradius3-default"
which activate all modules needed to run radiusd with its default
configuration.

- rlm_digest (HTTP Digest Authentication) has been added
- rlm_unix (System Authentication) has been added
- rlm_attr_rewrite has been deleted

Note that SQL and LDAP support has been disabled.

Signed-off-by: Lucile Quirion <lucile.quirion@savoirfairelinux.com>
2016-07-12 11:37:05 -04:00