File ucspi-ssl.changes of Package ucspi-ssl

Overview Repositories Revisions Requests Users Attributes Meta

File ucspi-ssl.changes of Package ucspi-ssl (Revision 6a0fe68fcbe2c10becf942d2f75aafa9)

Currently displaying revision 6a0fe68fcbe2c10becf942d2f75aafa9 , Show latest

-------------------------------------------------------------------
Tue Jun 25 10:36:09 UTC 2024 - Johannes Weberhofer <jweberhofer@weberhofer.at>

- Updated to ucspi-ssl version 0.12.10
  * Added argument '-y cdb' to sslserver in order to allow a rule checking
    for IP addresses prior of the DNS/IDENT lookup (to cope with DDos attacks).

- Updated to ucspi-ssl version 0.12.9
  * Included IP info in sslserver's TLS error messages for a quick lookup.
  * Fixed sslhandle's wrong if nesting.
  * sslserver return FATAL (and not ERROR) in case TLS is requested but missing.
  * Enhanced compatibility with OpenSSL 3.x.y.

- Updated to ucspi-ssl version 0.12.8
  * Added new x509 certs and key material; all ECC now.
  * Fixed wrong evaluation of peer cert in ssl_verify (none-critical).

- Updated to ucspi-ssl version 0.12.7
  * sslserver MAXCONIP feature is working now from the cdb read by the children.
  * MAXCONIP works even the general limit is 0.
  * Fixed wrong '-m' option for sslserver.
  * Added ip and port information in case sslserver/sslclient can't bind to local addresses.
  * Tweaked rts to include external load libraries.

- Updated to ucspi-ssl version 0.12.6
  * ssl_io uses now two specific return codes under condition 'BOMB' avoiding unnecessary 
    error messages in case of TLS client termination.

- Updated to ucspi-ssl version 0.12.5
  * Included tests on tai_now in ssl_timeout.c and removed obsolete pollmax variables.
  * ssl_io.c closes TLS connection gracefully upon SSL_ERROR_SSL recognition
    and not continue looping.

- Updated to ucspi-ssl version 0.12.4
  * Checked compatibility with LibreSSL 3.6/3.7.
  * The selected ciphers are now shown during start of sslserver/sslhandle.
  * Fixed duplicate symbol in sslhandle (Who).

-------------------------------------------------------------------
Fri Oct 22 12:24:08 UTC 2021 - Johannes Weberhofer <jweberhofer@weberhofer.at>

- Updated to ucspi-ssl version 0.12.3
  * Posseses preliminary compatibility with OpenSSL 3.0

- Do no longer strip debugging information from static library

-------------------------------------------------------------------
Mon Sep 27 15:13:06 UTC 2021 - Johannes Weberhofer <jweberhofer@weberhofer.at>

- Version 0.12.2
  * Fixed sslserver's binding to IPv4/IPv6 addresses; code aligned with 
  tcpserver.

- Version 0.12.1
  * fehQlibs-17 changes included regarding socket interface.
  * Synced with ucspi-tcp6-1.12.3 providing MAXCONIP capabilities.
  * Successful integration tests for OpenSSL 3.0.0-alpha13 and
    LibreSSL 3.3.1.

- Version 0.11.6a
  * GCC 10 compliance enforced; removed it-perl from basic install.

- Version 0.11.5
  * Added pollmax limit to sslserver and sslhandle.
  * sslclient streamlined with tcpclient. fehQlibs-15 are required.

-------------------------------------------------------------------
Tue Apr 28 12:19:52 UTC 2020 - Johannes Weberhofer <jweberhofer@weberhofer.at>

- Removed /etc/ucspi-ssl and it's content
- Added documentation files to package

-------------------------------------------------------------------
Tue Apr 21 04:50:09 UTC 2020 - Johannes Weberhofer <jweberhofer@weberhofer.at>

- Removed ucspi-ssl-0.11.0-corrections.patch

- Version 0.11.4
  * Straightend error codes and exiting for sslserver/sslhandle instead
    of dropping the session in case of errors.

- Updated to version 0.11.3
  * Fixed iopause return value evaluation in remoteinfo.c.
  * Removed return call evaluation of iopause in ssl_io.c and ssl_timeout.c
    Not clear, whether this a resulting the polling.

- Version 0.11.2
  Adopted some fixes contributed by Alan S. (mtx):
  * DNS IP Name qualification; X.509 DNS name matching; certs are only read on demand.
  * Support of STARTTLS in sslclient is postponed to next minor version.

-------------------------------------------------------------------
Mon Nov 18 08:19:51 UTC 2019 - Johannes Weberhofer <jweberhofer@weberhofer.at>

- Updated to version 0.11.1
  * Fixed TLSv1* macro's names in ucspissl.h to match ssl_context.c.
  * Clerified usage of 'SSL_CTX_set_ciphersuites()' in ssl_ciphers.c.

- Removed ucspi-ssl-0.11.0-SSL_CTX_set_ciphersuites.patch which is
  now included in upstream

-------------------------------------------------------------------
Mon Oct 21 14:45:38 UTC 2019 - Johannes Weberhofer <jweberhofer@weberhofer.at>

- Added basic configuration file in /etc/ucspi-ssl/openssl.cnf

-------------------------------------------------------------------
Fri Oct 18 13:53:06 UTC 2019 - Johannes Weberhofer <jweberhofer@weberhofer.at>

- Add include files

-------------------------------------------------------------------
Fri Oct 18 09:07:46 UTC 2019 - Johannes Weberhofer <jweberhofer@weberhofer.at>

- ucspi-ssl-0.11.0-SSL_CTX_set_ciphersuites.patch 
  fix detection of SSL_CTX_set_ciphersuites
- Added ucspi-ssl-0.11.0-corrections.patch

- Removed obsolete ucspi-ssl-0.10.8-openssl.patch

- Added ucspi-ssl-rpmlintrc

- Updated to version 0.11.0
  * Added compatibility with fehQlibs-13
  * Fixed wrong behavior of sslserver/sslclient given a local or remote IPv4
    address. sslhandle is now an own program (man sslhandle.3)
  * Code streamlined with ucspi-tcp6-1.11.0
  * Removed paranthesis from host in https@: [$host]:$port -> $host:port. Tx, A.E.

- Updated to version 0.10.11
  * Compatibility improvements for the forthcoming s/qmail.
  * Fixed potential stack corruption in sslclient/sslhande/sslserver
    while assigning hostname => 0.
  * Improved OpenSSL + LibreSSL compatibility:
    LibreSSL 2.5 to 2.9 is working
    OpenSSL 1.0.2 to 1.1.1 is working
  * Added SNI for sslclient.
  * Fixes for sslhandle.
  * Included new CIPHERLIST API for ssl_ciphers.
  * Removed dependency on conf-tcpbin; modules are expected to be in the path.
  * Modules rts.base and rts.sslperl are working now.

-------------------------------------------------------------------
Tue Jun 11 13:19:23 UTC 2019 - Johannes Weberhofer <jweberhofer@weberhofer.at>

- Updated to version 0.10.10
  * supports DSA/DSS (+ECC) additionally to RSA sigend X.509 certs

-------------------------------------------------------------------
Mon May  6 09:34:07 UTC 2019 - Johannes Weberhofer <jweberhofer@weberhofer.at>

- Updated to version 0.10.9
  * Fixed broken evaluation of CIDR and IPv6 addresses
  * adjusted with ucspi-tcp6-1.10.5
  * Improved compatibility with LibreSSL and included description

- Removed ucspi-ssl-0.10.8-openssl.patch included in upstream

-------------------------------------------------------------------
Sat Mar 23 06:49:37 UTC 2019 - Johannes Weberhofer <jweberhofer@weberhofer.at>

- Updated to version 0.10.8
  * Added dualstack handling for servers applying the
  * pseudo IP address ':0' on call (common now for all servers).
  * Tailored TLS error handling for EAGAIN end error codes.
  * Rewrote IPv4 CIDR address evaluation for rules.

- Added ucspi-ssl-0.10.8-openssl.patch to improve detection of the
  openssl interface used

-------------------------------------------------------------------
Sun Feb  3 17:01:15 UTC 2019 - jweberhofer@weberhofer.at

- Updated to version 0.10.7
  * complete redesign based on fehQlibs providing much better IPv6 compatibility
  * TLS 1.3 enabled supporting OpenSSL 1.1.1
  * allows sslserver to bind simultaneously to all available IPv4 and IPv6 
    addresses
  * provides a better error handling in case of TLS connection problems and 
    erratic behavior of the client in 'delayed' mode (STARTTLS)

-------------------------------------------------------------------
Wed Aug 29 09:35:08 UTC 2018 - jweberhofer@weberhofer.at

- Updated to version 0.99.e
  * Fixed missing 'return 0' in ssl_params.c for ECDH handshake (tx. J.W.)

-------------------------------------------------------------------
Sat Jun 16 06:13:08 UTC 2018 - jweberhofer@weberhofer.at

- Updated URLs
- Create required devel package

-------------------------------------------------------------------
Tue Apr 24 04:46:07 UTC 2018 - jweberhofer@weberhofer.at

- Set compile/link options

-------------------------------------------------------------------
Fri Dec 15 15:42:13 UTC 2017 - jweberhofer@weberhofer.at

- initial release 0.99d

Places

File ucspi-ssl.changes of Package ucspi-ssl (Revision 6a0fe68fcbe2c10becf942d2f75aafa9)

Places