Date: Mon, 14 Aug 2017 22:36:24 +0000 (UTC) From: Mark Felder <feld@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org Subject: svn commit: r447968 - branches/2017Q3/net/freeradius3 Message-ID: <201708142236.v7EMaOEM099408@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: feld Date: Mon Aug 14 22:36:24 2017 New Revision: 447968 URL: https://svnweb.freebsd.org/changeset/ports/447968 Log: MFH: r446076 r447967 - Update to 3.0.15 net/freeradius3: Disable OpenSSL version checking FreeRadius developers include a feature enabled by default which checks your OpenSSL version and refuses to run if certain CVEs are detected. This is an interesting idea but it means it's possible to upgrade FreeRadius on a production server and suddently it won't run, especially if FreeBSD's base OpenSSL doesn't report a version number that can convince the software it is free from the specified CVEs. Currently FreeRadius refuses to run on FreeBSD 10.3-RELEASE because it thinks base system OpenSSL is not patched for CVE-2016-6304, but that was in fact patched by FreeBSD-10.3-RELEASE-p9. This feature is only useful if you are using vanilla upstream versions of OpenSSL which we are not. Approved by: portmgr (with hat) Modified: branches/2017Q3/net/freeradius3/Makefile branches/2017Q3/net/freeradius3/distinfo branches/2017Q3/net/freeradius3/pkg-plist Directory Properties: branches/2017Q3/ (props changed) Modified: branches/2017Q3/net/freeradius3/Makefile ============================================================================== --- branches/2017Q3/net/freeradius3/Makefile Mon Aug 14 22:32:53 2017 (r447967) +++ branches/2017Q3/net/freeradius3/Makefile Mon Aug 14 22:36:24 2017 (r447968) @@ -2,7 +2,8 @@ # $FreeBSD$ PORTNAME= freeradius -DISTVERSION= 3.0.14 +DISTVERSION= 3.0.15 +PORTREVISION= 1 CATEGORIES= net MASTER_SITES= ftp://ftp.freeradius.org/pub/freeradius/%SUBDIR%/ \ ftp://ftp.ntua.gr/pub/net/radius/freeradius/%SUBDIR%/ \ @@ -321,7 +322,8 @@ CONFIGURE_ARGS+=--with-logdir=${LOGDIR} \ --without-rlm_securid \ --without-rlm_cache_memcached \ --with-vmps \ - --with-collectdclient-lib-dir=/dev/null + --with-collectdclient-lib-dir=/dev/null \ + --disable-openssl-version-check .if ${ARCH} == amd64 CONFIGURE_ARGS+=--with-pic Modified: branches/2017Q3/net/freeradius3/distinfo ============================================================================== --- branches/2017Q3/net/freeradius3/distinfo Mon Aug 14 22:32:53 2017 (r447967) +++ branches/2017Q3/net/freeradius3/distinfo Mon Aug 14 22:36:24 2017 (r447968) @@ -1,3 +1,3 @@ -TIMESTAMP = 1496324608 -SHA256 (freeradius-server-3.0.14.tar.bz2) = 2771f6ecd6c816ac4d52b66bb8ae6781ca20e1e4984c5804fc4e67de3a807c59 -SIZE (freeradius-server-3.0.14.tar.bz2) = 3037721 +TIMESTAMP = 1500299843 +SHA256 (freeradius-server-3.0.15.tar.bz2) = 23267d8505e7b2909f5bdbf3938ca077c1fe122290dc969304d4f3b594f7e3ba +SIZE (freeradius-server-3.0.15.tar.bz2) = 3038070 Modified: branches/2017Q3/net/freeradius3/pkg-plist ============================================================================== --- branches/2017Q3/net/freeradius3/pkg-plist Mon Aug 14 22:32:53 2017 (r447967) +++ branches/2017Q3/net/freeradius3/pkg-plist Mon Aug 14 22:36:24 2017 (r447968) @@ -133,9 +133,9 @@ include/freeradius/vqp.h %%LIBDIR%%/rlm_dynamic_clients.a %%LIBDIR%%/rlm_dynamic_clients.la %%LIBDIR%%/rlm_dynamic_clients.so -%%EXPM%%%%LIBDIR%%/rlm_idn.a -%%EXPM%%%%LIBDIR%%/rlm_idn.la -%%EXPM%%%%LIBDIR%%/rlm_idn.so +%%RLMIDN%%%%LIBDIR%%/rlm_idn.a +%%RLMIDN%%%%LIBDIR%%/rlm_idn.la +%%RLMIDN%%%%LIBDIR%%/rlm_idn.so %%LIBDIR%%/rlm_eap.a %%LIBDIR%%/rlm_eap.la %%LIBDIR%%/rlm_eap.so
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201708142236.v7EMaOEM099408>