Log message:
Update to 4.39

Version 4.39, 2011.07.06, urgency: LOW:

    New features
        New Win32 installer module to build self-signed stunnel.pem.
        Added configuration file editing with Windows GUI.
        Added log file reopening file editing with Windows GUI. It might be \ 
useful to also implement log file rotation.
        Improved configuration file reload with Windows GUI.

Version 4.38, 2011.06.28, urgency: MEDIUM:

    New features
        Server-side SNI implemented (RFC 3546 section 3.1) with a new \ 
service-level option "nsi".
        "socket" option also accepts "yes" and \ 
"no" for flags.
        Nagle's algorithm is now disabled by default for improved interactivity.
    Bugfixes
        A compilation fix was added for OpenSSL version < 1.0.0.
        Signal pipe set to non-blocking mode. This bug caused hangs of stunnel \ 
features based on signals, e.g. local mode, FORK threading, or configuration \ 
file reload on Unix. Win32 platform was not affected.

Version 4.37, 2011.06.17, urgency: MEDIUM:

    New features
        Client-side SNI implemented (RFC 3546 section 3.1).
        Default "ciphers" changed from the OpenSSL default to a more \ 
secure and faster "RC4-MD5:HIGH:!aNULL:!SSLv2". A paranoid (and \ 
usually slower) setting would be "HIGH:!aNULL:!SSLv2".
        Recommended "options = NO_SSLv2" added to the sample \ 
stunnel.conf file.
        Default client method upgraded from SSLv3 to TLSv1. To connect servers \ 
without TLS support use "sslVersion = SSLv3" option.
        Improved --enable-fips and --disable-fips ./configure option handling.
        On startup stunnel now compares the compiled version of OpenSSL against \ 
the running version of OpenSSL. A warning is logged on mismatch.
    Bugfixes
        Non-blocking socket handling in local mode fixed (Debian bug #626856).
        UCONTEXT threading mode fixed.
        Removed the use of gcc Thread-Local Storage for improved portability.
        va_copy macro defined for platforms that do not have it.
        Fixed "local" option parsing on IPv4 systems.
        Solaris compilation fix (redefinition of "STR").

Version 4.36, 2011.05.03, urgency: LOW:

    New features
        Updated Win32 DLLs for OpenSSL 1.0.0d.
        Dynamic memory management for strings manipulation: no more static \ 
STRLEN limit, lower stack footprint.
        Strict public key comparison added for "verify = 3" \ 
certificate checking mode (thx to Philipp Hartwig).
        Backlog parameter of listen(2) changed from 5 to SOMAXCONN: improved \ 
behavior on heavy load.
        Example tools/stunnel.service file added for systemd service manager.
    Bugfixes
        Missing pthread_attr_destroy() added to fix memory leak (thx to Paul \ 
Allex and Peter Pentchev).
        Fixed the incorrect way of setting FD_CLOEXEC flag.
        Fixed --enable-libwrap option of ./configure script.
        /opt/local added to OpenSSL search path for MacPorts compatibility.
        Workaround implemented for signal handling on MacOS X.
        A trivial bug fixed in the stunnel.init script.
        Retry implemented on EAI_AGAIN error returned by resolver calls.

Version 4.35, 2011.02.05, urgency: LOW:

    New features
        Updated Win32 DLLs for OpenSSL 1.0.0c.
        Transparent source (non-local bind) added for FreeBSD 8.x.
        Transparent destination ("transparent = destination") added \ 
for Linux.
    Bugfixes
        Fixed reload of FIPS-enabled stunnel.
        Compiler options are now auto-detected by ./configure script in order to \ 
support obsolete versions of gcc.
        Async-signal-unsafe s_log() removed from SIGTERM/SIGQUIT/SIGINT handler.
        CLOEXEC file descriptor leaks fixed on Linux >= 2.6.28 with glibc \ 
>= 2.10. Irreparable race condition leaks remain on other Unix platforms. \ 
This issue may have security implications on some deployments: \ 
http://udrepper.livejournal.com/20407.html
        Directory lib64 included in the OpenSSL library search path.
        Windows CE compilation fixes (thx to Pierre Delaage).
        Deprecated RSA_generate_key() replaced with RSA_generate_key_ex().
    Domain name changes (courtesy of Bri Hatch)
        http://stunnel.mirt.net/ --> http://www.stunnel.org/
        ftp://stunnel.mirt.net/ --> http://ftp.stunnel.org/
        stunnel.mirt.net::stunnel --> rsync.stunnel.org::stunnel
        stunnel-users@mirt.net --> stunnel-users@stunnel.org
        stunnel-announce@mirt.net --> stunnel-announce@stunnel.org

Version 4.34, 2010.09.19, urgency: LOW:

    New features
        Updated Win32 DLLs for OpenSSL 1.0.0a.
        Updated Win32 DLLs for zlib 1.2.5.
        Updated automake to version 1.11.1
        Updated libtool to version 2.2.6b
        Added ECC support with a new service-level "curve" option.
        DH support is now enabled by default.
        Added support for OpenSSL builds with some algorithms disabled.
        ./configure modified to support cross-compilation.
        Sample stunnel.init updated based on Debian init script.
    Bugfixes
        Implemented fixes in user interface to enter engine PIN.
        Fixed a transfer() loop issue on socket errors.
        Fixed missing WIN32 taskbar icon while displaying a global option error.

Log message:
Update "stunnel" package to version 4.33. Changes since 4.29:
- New features
  - New service-level "libwrap" option for run-time control whether
    /etc/hosts.allow and /etc/hosts.deny are used for access control.
    Disabling libwrap significantly increases performance of stunnel.
  - Log file reopen on USR1 signal was added.
  - Graceful configuration reload with HUP signal on Unix
    and with GUI on Windows.
- Bugfixes
  - Inetd mode fixed
  - Fixed a transfer() loop issue with SSLv2 connections.
  - Fixed a "setsockopt IP_TRANSPARENT" warning with "local" \ 
option.
  - Logging subsystem bugfixes and cleanup.
  - Installer bugfixes for Vista and later versions of Windows.
  - FIPS mode can be enabled/disabled at runtime.

Log message:
Update to 4.29:

Version 4.29, 2009.12.02, urgency: MEDIUM:
* New features sponsored by Searchtech Limited http://www.astraweb.com/
  - sessiond, a high performance SSL session cache was built for stunnel.
    A new service-level "sessiond" option was added.  sessiond is
    available for download on ftp://stunnel.mirt.net/stunnel/sessiond/ .
    stunnel clusters will be a lot faster, now!
* Bugfixes
  - "execargs" defaults to the "exec" parameter (thx to \ 
Peter Pentchev).
  - Compilation fixes added for AIX and old versions of OpenSSL.
  - Missing "fips" option was added to the manual.

Version 4.28, 2009.11.08, urgency: MEDIUM:
* New features
  - Win32 DLLs for OpenSSL 0.9.8l.
  - Transparent proxy support on Linux kernels >=2.6.28.
    See the manual for details.
  - New socket options to control TCP keepalive on Linux:
    TCP_KEEPCNT, TCP_KEEPIDLE, TCP_KEEPINTVL.
  - SSL options updated for the recent version of OpenSSL library.
* Bugfixes
  - A serious bug in asynchronous shutdown code fixed.
  - Data alignment updated in libwrap.c.
  - Polish manual encoding fixed.
  - Notes on compression implementation in OpenSSL added to the manual.

Log message:
Recursive PKGREVISION bump for jpeg update to 8.

Log message:
- create a specific user:group for stunnel
- fix the configuration path and file, so it can use the proper user:group
 and the chroot
- fix some pkglint warnings regarding PKG_OPTIONS: 'pthread' => 'threads',
'libwrap' => 'tcpwrappers' (in accordance to mk/defaults/options.description)

Bump PKGREVISION.

Log message:
Update "stunnel" package to version 4.27. Changes since 4.26:
- New features
  - FIPS support was updated for openssl-fips 1.2.
  - New priority failover strategy for multiple "connect" targets,
    controlled with "failover=rr" (default) or "failover=prio".
  - pgsql protocol negotiation by Marko Kreen <markokr@gmail.com>.
- Bugfixes
  - Libwrap helper processes fixed to close standard
    input/output/error file descriptors.

Log message:
Remove @dirrm entries from PLISTs

Log message:
Changes 4.26:
* libwrap related fixes, better debugging messages, MS Visual C++ support

Changes 4.25:
* delay libwrap process spawning after dropping privs, other improvements

Log message:
* Move inclusion of phthread.buildlink3.mk to rightful place in options.mk and
  only suggest pthread option when native pthread exists.
  We cannot use pthread.buildlink3.mk to just detect if suituable pthread
  implementation exist or not.
  Avoid unwanted dependency on pthread package when no native pthread and
  pthread option off.

* Move inclusion of seculity/tcp_wappers/buildlink3.mk to rightful place in
  options.mk.
  Avoid unwanted dependency on tcp_wrappers when libwrap option off.

* Remove deprecated(?) --with-tcp-wrappers from CONFIGURE_ARGS.

* Remove --enable-libwrap from CONFIGURE_ARGS even if require tcp_wrappers.
  It affect not only check of existence of tcp_wappers but also blow off
  needful addition of -lwrap to LIBS.
  Fixes PR 39635

Log message:
Expose libwrap through options.mk (no change to default builds)