diff options
author | mandree <mandree@FreeBSD.org> | 2013-04-01 00:00:02 +0800 |
---|---|---|
committer | mandree <mandree@FreeBSD.org> | 2013-04-01 00:00:02 +0800 |
commit | cd43147c7574a27d6e993b413bc35ab9a765de42 (patch) | |
tree | 4b52f22d1163f4ef51e436e1d8ea9a2f7a49db9d /security/openvpn | |
parent | 752612f3eed46e985a0bba5eca484122608265e5 (diff) | |
download | freebsd-ports-gnome-cd43147c7574a27d6e993b413bc35ab9a765de42.tar.gz freebsd-ports-gnome-cd43147c7574a27d6e993b413bc35ab9a765de42.tar.zst freebsd-ports-gnome-cd43147c7574a27d6e993b413bc35ab9a765de42.zip |
security upgrade to OpenVPN 2.3.1; upstream release notes are
"This release adds supports for PolarSSL 1.2. It also adds a fix to
prevent potential side-channel attacks by switching to a constant-time
memcmp when comparing HMACs in the openvpn_decrypt function. In
addition, it contains several bugfixes and documentation updates, as
well as some minor enhancements."
Full ChangeLog:
<https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23>
The port upgrade also offers an option to use the GPLv2+-licensed
PolarSSL instead of OpenSSL (which brings in a license mix).
PR: ports/177517
Reviewed by: miwi
Approved by: portmgr (miwi)
Security: 92f30415-9935-11e2-ad4c-080027ef73ec
Diffstat (limited to 'security/openvpn')
-rw-r--r-- | security/openvpn/Makefile | 21 | ||||
-rw-r--r-- | security/openvpn/distinfo | 4 |
2 files changed, 16 insertions, 9 deletions
diff --git a/security/openvpn/Makefile b/security/openvpn/Makefile index a3cdd6640b2e..0b54dd2affc5 100644 --- a/security/openvpn/Makefile +++ b/security/openvpn/Makefile @@ -2,8 +2,7 @@ # $FreeBSD$ PORTNAME= openvpn -DISTVERSION= 2.3.0 -PORTREVISION= 3 +DISTVERSION= 2.3.1 CATEGORIES= security net MASTER_SITES= http://swupdate.openvpn.net/community/releases/ \ http://build.openvpn.net/downloads/releases/ @@ -16,18 +15,19 @@ LICENSE= GPLv2 CONFLICTS_INSTALL= openvpn-2.[!3].* openvpn-[!2].* openvpn-beta-[0-9]* openvpn-devel-[0-9]* GNU_CONFIGURE= yes -USE_OPENSSL= yes USE_XZ= yes # let OpenVPN's configure script pick up the requisite libraries: CPPFLAGS+= -I${LOCALBASE}/include LDFLAGS+= -L${LOCALBASE}/lib -# PolarSSL is not provided; OpenVPN does not currently compile with PolarSSL 1.2.0+ OPTIONS_DEFINE= PW_SAVE PKCS11 EASYRSA -OPTIONS_DEFAULT= EASYRSA +OPTIONS_DEFAULT= EASYRSA OPENSSL +OPTIONS_SINGLE= SSL +OPTIONS_SINGLE_SSL= OPENSSL POLARSSL PW_SAVE_DESC= Interactive passwords may be read from a file PKCS11_DESC= Use security/pkcs11-helper EASYRSA_DESC= Install security/easy-rsa RSA helper package +POLARSSL_DESC= SSL/TLS support via PolarSSL .include <bsd.port.options.mk> @@ -40,7 +40,15 @@ INSTALL_TARGET= install DESTDIR=${_stagedir} RUN_DEPENDS+= easy-rsa>=0:${PORTSDIR}/security/easy-rsa .endif -INSTALL_TARGET+= mandir=${MANPREFIX}/man +.if ${PORT_OPTIONS:MPOLARSSL} +LIB_DEPENDS+= polarssl:${PORTSDIR}/security/polarssl +CONFIGURE_ARGS+= --with-crypto-library=polarssl +.else +USE_OPENSSL= yes +CONFIGURE_ARGS+= --with-crypto-library=openssl +.endif + +.INSTALL_TARGET+= mandir=${MANPREFIX}/man MAN8= openvpn.8 USE_RC_SUBR= openvpn @@ -98,7 +106,6 @@ post-install: ${INSTALL_DATA} ${_stagedir}${PREFIX}/include/* ${PREFIX}/include/ ${INSTALL_MAN} ${_stagedir}${PREFIX}/man/man8/* ${MAN8PREFIX}/man/man8/ .if ${PORT_OPTIONS:MDOCS} - -${RMDIR} ${_stagedir}${DOCSDIR}/sample (cd ${_stagedir}${DOCSDIR} && ${COPYTREE_SHARE} \* ${DOCSDIR}/) .for i in AUTHORS ChangeLog PORTS ${INSTALL_MAN} ${WRKSRC}/${i} ${DOCSDIR}/ diff --git a/security/openvpn/distinfo b/security/openvpn/distinfo index 0a0ff0d9b6fe..b585f0193426 100644 --- a/security/openvpn/distinfo +++ b/security/openvpn/distinfo @@ -1,2 +1,2 @@ -SHA256 (openvpn-2.3.0.tar.xz) = a9fcf7bc1c1cd88cd8867ff567e8f8df5e695f0e983bd0aed3a3e1f6ae14d107 -SIZE (openvpn-2.3.0.tar.xz) = 762052 +SHA256 (openvpn-2.3.1.tar.xz) = 9d7723ea83cdc0c78b32005f4b9c1f7ca1cc9e53e90b77bd643a203e6189884b +SIZE (openvpn-2.3.1.tar.xz) = 776076 |