From mboxrd@z Thu Jan 1 00:00:00 1970 From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH] stunnel: Update to version 5.71 Date: Thu, 18 Jan 2024 12:40:29 +0100 Message-ID: <20240118114031.6171-12-adolf.belka@ipfire.org> In-Reply-To: <20240118114031.6171-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1039719955338702646==" List-Id: --===============1039719955338702646== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable - Update from vesrion 5.69 to 5.71 - Update of rootfile not required - Changelog 5.71, 2023.09.19, urgency: MEDIUM Security bugfixes - OpenSSL DLLs updated to version 3.1.3. Bugfixes - Fixed the console output of tstunnel.exe. Features sponsored by SAE IT-systems - OCSP stapling is requested and verified in the client mode. - Using "verifyChain" automatically enables OCSP stapling in the client mode. - OCSP stapling is always available in the server mode. - An inconclusive OCSP verification breaks TLS negotiation. This can be disabled with "OCSPrequire =3D no". - Added the "TIMEOUTocsp" option to control the maximum time allowed for connecting an OCSP responder. Features - Added support for Red Hat OpenSSL 3.x patches. 5.70, 2023.07.12, urgency: HIGH Security bugfixes - OpenSSL DLLs updated to version 3.0.9. - OpenSSL FIPS Provider updated to version 3.0.8. Bugfixes - Fixed TLS socket EOF handling with OpenSSL 3.x. This bug caused major interoperability issues between stunnel built with OpenSSL 3.x and Microsoft's Schannel Security Support Provider (SSP). - Fixed reading certificate chains from PKCS#12 files. Features - Added configurable delay for the "retry" option. Signed-off-by: Adolf Belka --- lfs/stunnel | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/stunnel b/lfs/stunnel index 24527bb25..61d1fe4a1 100644 --- a/lfs/stunnel +++ b/lfs/stunnel @@ -1,7 +1,7 @@ ############################################################################= ### # = # # IPFire.org - A linux based firewall = # -# Copyright (C) 2007-2023 IPFire Team = # +# Copyright (C) 2007-2024 IPFire Team = # # = # # This program is free software: you can redistribute it and/or modify = # # it under the terms of the GNU General Public License as published by = # @@ -24,7 +24,7 @@ =20 include Config =20 -VER =3D 5.69 +VER =3D 5.71 SUMMARY =3D Universal TLS Tunnel =20 THISAPP =3D stunnel-$(VER) @@ -33,7 +33,7 @@ DL_FROM =3D $(URL_IPFIRE) DIR_APP =3D $(DIR_SRC)/$(THISAPP) TARGET =3D $(DIR_INFO)/$(THISAPP) PROG =3D stunnel -PAK_VER =3D 11 +PAK_VER =3D 12 =20 DEPS =3D =20 @@ -47,7 +47,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_BLAKE2 =3D fd213d1c7bc9efb42ee501bccd720c6535d123fe9d78354ff14a17= 01edcc30f1b563ff46fa34fd3f53bb976a7e700f0cd63589a8488738314604e593a95ad7bd +$(DL_FILE)_BLAKE2 =3D d323363c7bfdd6c0b7931b84a6069cf9a8337e967c31e14d15976d= 7932f0c0d6f40f7a1cbf5abbdff0e9edc52176cdcead4f848653088193b2debf4e77443b42 =20 install : $(TARGET) =20 --=20 2.43.0 --===============1039719955338702646==--