2022-08-17 14:06:38 by Tobias Nygren | Files touched by this commit (2) |
Log message:
s6-networking: rename man-pages distfile to a distinguished name
|
2021-12-22 17:07:04 by Amitai Schleier | Files touched by this commit (3) |
Log message:
Update to 2.5.1.0. From the changelog:
- SNI wildcarding support in s6-tlsd-io.
- New sbearssl_*_set_tain(n)_g convenience macros.
- Bugfixes.
|
2021-10-26 13:07:15 by Nia Alarie | Files touched by this commit (958) |
Log message:
net: Replace RMD160 checksums with BLAKE2s checksums
All checksums have been double-checked against existing RMD160 and
SHA512 hashes
Not committed (merge conflicts...):
net/radsecproxy/distinfo
The following distfiles could not be fetched (fetched conditionally?):
./net/citrix_ica/distinfo citrix_ica-10.6.115659/en.linuxx86.tar.gz
./net/djbdns/distinfo dnscache-1.05-multiple-ip.patch
./net/djbdns/distinfo djbdns-1.05-test28.diff.xz
./net/djbdns/distinfo djbdns-1.05-ignoreip2.patch
./net/djbdns/distinfo djbdns-1.05-multiip.diff
./net/djbdns/distinfo djbdns-cachestats.patch
|
2021-10-07 16:43:07 by Nia Alarie | Files touched by this commit (962) |
Log message:
net: Remove SHA1 hashes for distfiles
|
2021-09-29 11:56:37 by Amitai Schleier | Files touched by this commit (4) |
Log message:
Update to 2.5.0.0. From the changelog:
- Adaptation to skalibs-2.11.0.0.
- minidentd removed.
- Full client certificate support.
- Full SNI support, including server-side.
- s6-ucspitls[cd] -v2 now logs whether TLS is activated or not.
Complete client certificate and SNI support now make the TLS part of
s6-networking a fully viable replacement of stunnel and other similar
TLS tunneling tools.
|
2021-04-26 17:05:30 by Amitai Schleier | Files touched by this commit (4) |
Log message:
Update to 2.4.1.1. From the changelog:
- Libraries and binaries don't have the .note.GNU-stack section stripped
anymore. Previously, "make strip" would strip that section, which
would sometimes (depending on the toolchain) cause binaries to be
incorrectly tagged as needing an executable stack. This is not a
security issue in itself, but an executable stack makes it easier for
an attacker to turn bugs into exploits, so it should be avoided
whenever possible. Thanks to Xavier Stonestreet for reporting and
finding the cause of the problem.
- Link tests are now performed with a regular file as their
output, instead of /dev/null, which makes them more portable to
old/buggy linkers.
Bump default BUILDLINK_API_DEPENDS to match.
|
2021-02-16 15:07:52 by Amitai Schleier | Files touched by this commit (3) |
Log message:
Update to 2.4.1.0. From the changelog:
- Bugfixes.
- Handshake timeout now also works with the libtls backend.
- The SNI server name is now exported after the handshake in the
SSL_TLS_SNI_SERVERNAME variable.
|
2021-02-04 10:16:45 by Amitai Schleier | Files touched by this commit (4) |
Log message:
Add manual pages. Bump PKGREVISION.
|
2021-01-22 18:16:45 by Amitai Schleier | Files touched by this commit (3) |
Log message:
Also restore the hack to get SSLCERTS defined. Ride previous bump.
|
2021-01-22 17:20:39 by Amitai Schleier | Files touched by this commit (2) |
Log message:
LibreTLS + OpenSSL isn't working well for me yet. Switch back to BearSSL
for now, riding recent PKGREVISION bump.
|