Subject: CVS commit: pkgsrc/net
From: Adam Ciarcinski
Date: 2019-11-04 13:52:14
Message id: 20191104125214.29132FA93@cvs.NetBSD.org

Log Message:
openvpn: updated to 2.4.8

Version 2.4.8

This is primarily a maintenance release with minor bugfixes and improvements.

New features
Support compiling with OpenSSL 1.1 without deprecated APIs
handle PSS padding in cryptoapicert (necessary for TLS >= 1.2)

User visible changes
do not abort when hitting the combination of "--pull-filter" and \ 
"--mode server" (this got hit when starting OpenVPN servers using the \ 
windows GUI which installs a pull-filter to force ip-win32)
increase listen() backlog queue to 32 (improve response behaviour on openvpn \ 
servers using TCP that get portscanned)
fix and enhance documentation (INSTALL, man page, ...)

Bug fixes
the combination "IPv6 and proto UDP and SOCKS proxy" did not work - as \ 
a workaround, force IPv4 in this case until a full implementation for \ 
IPv6-UDP-SOCKS can be made.
fix IPv6 routes on tap interfaces on OpenSolaris/OpenIndiana
fix building with LibreSSL
do not set pkcs11-helper 'safe fork mode' (should fix PIN querying in systemd \ 
environments)
repair windows builds
repair Darwin builds (remove -no-cpp-precomp flag)

Files:
RevisionActionfile
1.71modifypkgsrc/net/openvpn/Makefile
1.17modifypkgsrc/net/openvpn/Makefile.common
1.44modifypkgsrc/net/openvpn/distinfo
1.21modifypkgsrc/net/openvpn-acct-wtmpx/distinfo
1.18modifypkgsrc/net/openvpn-nagios/distinfo