Hello community, here is the log from the commit of package stunnel checked in at Thu Jan 24 21:24:30 CET 2008. -------- --- stunnel/stunnel.changes 2007-05-10 23:52:29.000000000 +0200 +++ /mounts/work_src_done/STABLE/stunnel/stunnel.changes 2007-10-29 17:54:46.000000000 +0100 @@ -1,0 +2,37 @@ +Mon Oct 29 17:54:21 CET 2007 - poeml@suse.de + +- update to 4.21: Changes: + Initial FIPS 140-2 support was added. Non-MT-safe libwrap (TCP + Wrappers) library support was rewritten. It's currently based on + pre-forked processes and should be much faster. Some bugfixes + were also added. + +------------------------------------------------------------------- +Thu Aug 16 09:21:23 CEST 2007 - poeml@suse.de + +- update to 4.20. Changes (edited): + Version 4.20, 2006.11.30, urgency: MEDIUM: + * Release notes + - There are a lot of new features in this version. + * New features + - New service-level option to specify OCSP server flag: + OCSPflag = <flag> + - "protocolCredentials" option changed to "protocolUsername" + and "protocolPassword" + - NTLM support to be enabled with the new service-level option: + protocolAuthentication = NTLM + - imap protocol negotiation support added. + - Passphrase cache was added so the user does not need to reenter + the same passphrase for each defined service any more. + - New service-level option to retry connect+exec section: + retry = yes|no + - Local IP and port is logged for each established connection. + * Bugfixes + - Serious problem with SSL_WANT_* retries fixed. + The new code requires extensive testing! + - Problem with detecting getaddrinfo() in ./configure fixed. + - Compilation problem due to misplaced #endif in ssl.c fixed. + - Duplicate 220 in smtp_server() function in protocol.c fixed. + - Minor update of safestring()/safename() macros. + +------------------------------------------------------------------- Old: ---- stunnel-4.16.tar.bz2 New: ---- stunnel-4.21.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ stunnel.spec ++++++ --- /var/tmp/diff_new_pack.h22061/_old 2008-01-24 21:23:56.000000000 +0100 +++ /var/tmp/diff_new_pack.h22061/_new 2008-01-24 21:23:56.000000000 +0100 @@ -1,7 +1,7 @@ # -# spec file for package stunnel (Version 4.16) +# spec file for package stunnel (Version 4.21) # -# Copyright (c) 2007 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany. # This file and all modifications and additions to the pristine # package are under the same license as the package itself. # @@ -18,12 +18,12 @@ BuildRequires: gcc-c++ tcp_wrappers %endif Summary: Universal SSL Tunnel -License: GNU Library General Public License v. 2.0 and 2.1 (LGPL) -Version: 4.16 -Release: 37 +License: LGPL v2.1 or later +Version: 4.21 +Release: 1 Group: Productivity/Networking/Security -URL: http://www.stunnel.org/ -Autoreqprov: on +Url: http://www.stunnel.org/ +AutoReqProv: on %if %{?suse_version:%suse_version}%{?!suse_version:0} > 800 PreReq: /usr/sbin/useradd fileutils textutils %insserv_prereq %fillup_prereq %endif @@ -151,14 +151,45 @@ %config /etc/init.d/* %changelog -* Thu May 10 2007 - ro@suse.de +* Mon Oct 29 2007 poeml@suse.de +- update to 4.21: Changes: + Initial FIPS 140-2 support was added. Non-MT-safe libwrap (TCP + Wrappers) library support was rewritten. It's currently based on + pre-forked processes and should be much faster. Some bugfixes + were also added. +* Thu Aug 16 2007 poeml@suse.de +- update to 4.20. Changes (edited): + Version 4.20, 2006.11.30, urgency: MEDIUM: + * Release notes + - There are a lot of new features in this version. + * New features + - New service-level option to specify OCSP server flag: + OCSPflag = <flag> + - "protocolCredentials" option changed to "protocolUsername" + and "protocolPassword" + - NTLM support to be enabled with the new service-level option: + protocolAuthentication = NTLM + - imap protocol negotiation support added. + - Passphrase cache was added so the user does not need to reenter + the same passphrase for each defined service any more. + - New service-level option to retry connect+exec section: + retry = yes|no + - Local IP and port is logged for each established connection. + * Bugfixes + - Serious problem with SSL_WANT_* retries fixed. + The new code requires extensive testing! + - Problem with detecting getaddrinfo() in ./configure fixed. + - Compilation problem due to misplaced #endif in ssl.c fixed. + - Duplicate 220 in smtp_server() function in protocol.c fixed. + - Minor update of safestring()/safename() macros. +* Thu May 10 2007 ro@suse.de - added openssl to buildrequires -* Mon Apr 02 2007 - rguenther@suse.de +* Mon Apr 02 2007 rguenther@suse.de - add zlib-devel BuildRequires -* Tue Oct 17 2006 - poeml@suse.de +* Tue Oct 17 2006 poeml@suse.de - there is no SuSEconfig.syslog script anymore, thus remove the YaST hint from the sysconfig template -* Wed Sep 27 2006 - poeml@suse.de +* Wed Sep 27 2006 poeml@suse.de - upstream 4.16 * New features sponsored by Hewlett-Packard - A new global option to control engine: engineCtrl = <command>[:<parameter>] @@ -188,7 +219,7 @@ - add BuildRequires: tcp_wrappers gcc-c++ for building on Fedora - remove doc files installed by make install, which are picked up by %%doc -* Fri Jun 23 2006 - poeml@suse.de +* Fri Jun 23 2006 poeml@suse.de - build as non-root - build with fPIE/pie on SUSE 10.0 or newer, or on any other platform @@ -211,16 +242,16 @@ - Retrying exec+connect services added. - make install now tries to create /var/lib/stunnel chmoded 1770 and group nogroup, which we don't do. -* Wed Jan 25 2006 - mls@suse.de +* Wed Jan 25 2006 mls@suse.de - converted neededforbuild to BuildRequires -* Sun Nov 27 2005 - lmuelle@suse.de +* Sun Nov 27 2005 lmuelle@suse.de - update to 4.14 -* Thu Oct 06 2005 - poeml@suse.de +* Thu Oct 06 2005 poeml@suse.de - fix hang/segfault upon connect. Use pthreads by removing configure check for ucontext.h [#119650] -* Tue Aug 30 2005 - poeml@suse.de +* Tue Aug 30 2005 poeml@suse.de - fix parsing of ldd output when setting up the chroot jail [#114090] -* Tue Jun 21 2005 - poeml@suse.de +* Tue Jun 21 2005 poeml@suse.de - update to 4.10 - Some bugfixes and code cleanup were done. - A new user-level non-preemptive thread model was added for even @@ -230,7 +261,7 @@ - add post-4.10 stunnel-4.10-inetd.patch - compile with tcp wrappers - compile as PIE and link with -z relro -* Tue Jan 04 2005 - poeml@suse.de +* Tue Jan 04 2005 poeml@suse.de - update to 4.07 * Bugfixes - Problem with infinite poll() timeout negative, but not equal @@ -245,7 +276,7 @@ exists. - Broken NT Service mode on WIN32 platform fixed. - Support for IPv4-only WIN32 machines restored. -* Tue Dec 28 2004 - poeml@suse.de +* Tue Dec 28 2004 poeml@suse.de - update to 4.06 In this version, IPv6 support, compression support, hardware engine selection and many other features were added. A new @@ -256,9 +287,9 @@ - add stunnel-4.06-nfds.dif stunnel-4.06-poll_timeout.patch stunnel-4.06-race_condition.patch -* Thu Nov 11 2004 - poeml@suse.de +* Thu Nov 11 2004 poeml@suse.de - fix filelist for /usr/lib -* Fri Mar 05 2004 - poeml@suse.de +* Fri Mar 05 2004 poeml@suse.de - update to 4.05. new features (excerpt): * New feature sponsored by SURFnet http://www.surfnet.nl/ - Support for CIFS aka SMB protocol SSL negotiation. @@ -287,27 +318,27 @@ - Libwrap detection bug in ./configure script fixed. - Some other minor updates. - show readme only at first installation -* Tue Aug 26 2003 - poeml@suse.de +* Tue Aug 26 2003 poeml@suse.de - add Config: syslog-ng to sysconfig.syslog-stunnel -* Thu Aug 14 2003 - poeml@suse.de +* Thu Aug 14 2003 poeml@suse.de - add activation metadata to sysconfig template [#28954] - rename README.SuSE to README.{SuSE,UnitedLinux} - don't show blurb in %%post if a certificate exists -* Tue Aug 12 2003 - poeml@suse.de +* Tue Aug 12 2003 poeml@suse.de - implement 'try-restart' in rcstunnel correctly [#28636] -* Wed Jul 30 2003 - poeml@suse.de +* Wed Jul 30 2003 poeml@suse.de - add an example configuration for tunneling MySQL - make stunnel3_wrapper compatible to more shells, and merge it with stunnel3_convert (which becomes a symlink) - new macros for stop/restart of services on rpm update/removal -* Tue May 13 2003 - poeml@suse.de +* Tue May 13 2003 poeml@suse.de - delete (from the build root) files not to be packaged - package the libtool library file - add a commented option to the sample configuration -* Thu Mar 13 2003 - poeml@suse.de +* Thu Mar 13 2003 poeml@suse.de - rc.stunnel: do not write the startup log to a world writable directory [cf. #25239] -* Mon Feb 17 2003 - poeml@suse.de +* Mon Feb 17 2003 poeml@suse.de - Version 4.04, 2003.01.12, urgency: MEDIUM: * New features [excerpt] - New 'options' configuration option to setup @@ -330,28 +361,28 @@ used with a device (like '/dev/urandom'). Temporary random file is created with 'dd' instead. - fix typo in conf file example -* Wed Feb 12 2003 - mmj@suse.de +* Wed Feb 12 2003 mmj@suse.de - Add sysconfig metadata [#22699] -* Thu Oct 31 2002 - poeml@suse.de +* Thu Oct 31 2002 poeml@suse.de - update to 4.03 - add stunnel3_wrapper that translates the cmdline arguments into a configuration file - fix default path of pidfile - more examples -* Fri Oct 25 2002 - poeml@suse.de +* Fri Oct 25 2002 poeml@suse.de - write the pid file before dropping the privileges -* Fri Oct 25 2002 - poeml@suse.de +* Fri Oct 25 2002 poeml@suse.de - major version upgrade to 4.02 - better permissions for /etc/stunnel and keys [#18557] - run as "stunnel" user in chroot jail - add sysconfig.syslog-stunnel template and /var/lib/stunnel/dev for an additional syslog socket - added init script and example configuration -* Sat Jul 27 2002 - adrian@suse.de +* Sat Jul 27 2002 adrian@suse.de - use %%run_ldconfig -* Thu Mar 08 2001 - bk@suse.de +* Thu Mar 08 2001 bk@suse.de - update to 3.14 and fix localstatedir (/var/run/stunnel) -* Mon Feb 05 2001 - bk@suse.de +* Mon Feb 05 2001 bk@suse.de - fixed neededforbuild -* Sun Feb 04 2001 - bk@suse.de +* Sun Feb 04 2001 bk@suse.de - new package ++++++ stunnel-4.16.tar.bz2 -> stunnel-4.21.tar.bz2 ++++++ ++++ 35937 lines of diff (skipped) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org