Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
home:weberho:sqmail
ucspi-ssl
ucspi-ssl.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File ucspi-ssl.changes of Package ucspi-ssl
------------------------------------------------------------------- Tue Jun 25 10:36:09 UTC 2024 - Johannes Weberhofer <jweberhofer@weberhofer.at> - Updated to ucspi-ssl version 0.12.10 * Added argument '-y cdb' to sslserver in order to allow a rule checking for IP addresses prior of the DNS/IDENT lookup (to cope with DDos attacks). - Updated to ucspi-ssl version 0.12.9 * Included IP info in sslserver's TLS error messages for a quick lookup. * Fixed sslhandle's wrong if nesting. * sslserver return FATAL (and not ERROR) in case TLS is requested but missing. * Enhanced compatibility with OpenSSL 3.x.y. - Updated to ucspi-ssl version 0.12.8 * Added new x509 certs and key material; all ECC now. * Fixed wrong evaluation of peer cert in ssl_verify (none-critical). - Updated to ucspi-ssl version 0.12.7 * sslserver MAXCONIP feature is working now from the cdb read by the children. * MAXCONIP works even the general limit is 0. * Fixed wrong '-m' option for sslserver. * Added ip and port information in case sslserver/sslclient can't bind to local addresses. * Tweaked rts to include external load libraries. - Updated to ucspi-ssl version 0.12.6 * ssl_io uses now two specific return codes under condition 'BOMB' avoiding unnecessary error messages in case of TLS client termination. - Updated to ucspi-ssl version 0.12.5 * Included tests on tai_now in ssl_timeout.c and removed obsolete pollmax variables. * ssl_io.c closes TLS connection gracefully upon SSL_ERROR_SSL recognition and not continue looping. - Updated to ucspi-ssl version 0.12.4 * Checked compatibility with LibreSSL 3.6/3.7. * The selected ciphers are now shown during start of sslserver/sslhandle. * Fixed duplicate symbol in sslhandle (Who). ------------------------------------------------------------------- Fri Oct 22 12:24:08 UTC 2021 - Johannes Weberhofer <jweberhofer@weberhofer.at> - Updated to ucspi-ssl version 0.12.3 * Posseses preliminary compatibility with OpenSSL 3.0 - Do no longer strip debugging information from static library ------------------------------------------------------------------- Mon Sep 27 15:13:06 UTC 2021 - Johannes Weberhofer <jweberhofer@weberhofer.at> - Version 0.12.2 * Fixed sslserver's binding to IPv4/IPv6 addresses; code aligned with tcpserver. - Version 0.12.1 * fehQlibs-17 changes included regarding socket interface. * Synced with ucspi-tcp6-1.12.3 providing MAXCONIP capabilities. * Successful integration tests for OpenSSL 3.0.0-alpha13 and LibreSSL 3.3.1. - Version 0.11.6a * GCC 10 compliance enforced; removed it-perl from basic install. - Version 0.11.5 * Added pollmax limit to sslserver and sslhandle. * sslclient streamlined with tcpclient. fehQlibs-15 are required. ------------------------------------------------------------------- Tue Apr 28 12:19:52 UTC 2020 - Johannes Weberhofer <jweberhofer@weberhofer.at> - Removed /etc/ucspi-ssl and it's content - Added documentation files to package ------------------------------------------------------------------- Tue Apr 21 04:50:09 UTC 2020 - Johannes Weberhofer <jweberhofer@weberhofer.at> - Removed ucspi-ssl-0.11.0-corrections.patch - Version 0.11.4 * Straightend error codes and exiting for sslserver/sslhandle instead of dropping the session in case of errors. - Updated to version 0.11.3 * Fixed iopause return value evaluation in remoteinfo.c. * Removed return call evaluation of iopause in ssl_io.c and ssl_timeout.c Not clear, whether this a resulting the polling. - Version 0.11.2 Adopted some fixes contributed by Alan S. (mtx): * DNS IP Name qualification; X.509 DNS name matching; certs are only read on demand. * Support of STARTTLS in sslclient is postponed to next minor version. ------------------------------------------------------------------- Mon Nov 18 08:19:51 UTC 2019 - Johannes Weberhofer <jweberhofer@weberhofer.at> - Updated to version 0.11.1 * Fixed TLSv1* macro's names in ucspissl.h to match ssl_context.c. * Clerified usage of 'SSL_CTX_set_ciphersuites()' in ssl_ciphers.c. - Removed ucspi-ssl-0.11.0-SSL_CTX_set_ciphersuites.patch which is now included in upstream ------------------------------------------------------------------- Mon Oct 21 14:45:38 UTC 2019 - Johannes Weberhofer <jweberhofer@weberhofer.at> - Added basic configuration file in /etc/ucspi-ssl/openssl.cnf ------------------------------------------------------------------- Fri Oct 18 13:53:06 UTC 2019 - Johannes Weberhofer <jweberhofer@weberhofer.at> - Add include files ------------------------------------------------------------------- Fri Oct 18 09:07:46 UTC 2019 - Johannes Weberhofer <jweberhofer@weberhofer.at> - ucspi-ssl-0.11.0-SSL_CTX_set_ciphersuites.patch fix detection of SSL_CTX_set_ciphersuites - Added ucspi-ssl-0.11.0-corrections.patch - Removed obsolete ucspi-ssl-0.10.8-openssl.patch - Added ucspi-ssl-rpmlintrc - Updated to version 0.11.0 * Added compatibility with fehQlibs-13 * Fixed wrong behavior of sslserver/sslclient given a local or remote IPv4 address. sslhandle is now an own program (man sslhandle.3) * Code streamlined with ucspi-tcp6-1.11.0 * Removed paranthesis from host in https@: [$host]:$port -> $host:port. Tx, A.E. - Updated to version 0.10.11 * Compatibility improvements for the forthcoming s/qmail. * Fixed potential stack corruption in sslclient/sslhande/sslserver while assigning hostname => 0. * Improved OpenSSL + LibreSSL compatibility: LibreSSL 2.5 to 2.9 is working OpenSSL 1.0.2 to 1.1.1 is working * Added SNI for sslclient. * Fixes for sslhandle. * Included new CIPHERLIST API for ssl_ciphers. * Removed dependency on conf-tcpbin; modules are expected to be in the path. * Modules rts.base and rts.sslperl are working now. ------------------------------------------------------------------- Tue Jun 11 13:19:23 UTC 2019 - Johannes Weberhofer <jweberhofer@weberhofer.at> - Updated to version 0.10.10 * supports DSA/DSS (+ECC) additionally to RSA sigend X.509 certs ------------------------------------------------------------------- Mon May 6 09:34:07 UTC 2019 - Johannes Weberhofer <jweberhofer@weberhofer.at> - Updated to version 0.10.9 * Fixed broken evaluation of CIDR and IPv6 addresses * adjusted with ucspi-tcp6-1.10.5 * Improved compatibility with LibreSSL and included description - Removed ucspi-ssl-0.10.8-openssl.patch included in upstream ------------------------------------------------------------------- Sat Mar 23 06:49:37 UTC 2019 - Johannes Weberhofer <jweberhofer@weberhofer.at> - Updated to version 0.10.8 * Added dualstack handling for servers applying the * pseudo IP address ':0' on call (common now for all servers). * Tailored TLS error handling for EAGAIN end error codes. * Rewrote IPv4 CIDR address evaluation for rules. - Added ucspi-ssl-0.10.8-openssl.patch to improve detection of the openssl interface used ------------------------------------------------------------------- Sun Feb 3 17:01:15 UTC 2019 - jweberhofer@weberhofer.at - Updated to version 0.10.7 * complete redesign based on fehQlibs providing much better IPv6 compatibility * TLS 1.3 enabled supporting OpenSSL 1.1.1 * allows sslserver to bind simultaneously to all available IPv4 and IPv6 addresses * provides a better error handling in case of TLS connection problems and erratic behavior of the client in 'delayed' mode (STARTTLS) ------------------------------------------------------------------- Wed Aug 29 09:35:08 UTC 2018 - jweberhofer@weberhofer.at - Updated to version 0.99.e * Fixed missing 'return 0' in ssl_params.c for ECDH handshake (tx. J.W.) ------------------------------------------------------------------- Sat Jun 16 06:13:08 UTC 2018 - jweberhofer@weberhofer.at - Updated URLs - Create required devel package ------------------------------------------------------------------- Tue Apr 24 04:46:07 UTC 2018 - jweberhofer@weberhofer.at - Set compile/link options ------------------------------------------------------------------- Fri Dec 15 15:42:13 UTC 2017 - jweberhofer@weberhofer.at - initial release 0.99d
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
