D11199.id.diff
No OneTemporary
Actions

Size

14 KB

Referenced Files

None

Subscribers

None

D11199.id.diff
View Options

	diff --git a/abi_libs b/abi_libs
	new file mode 100644
	--- /dev/null
	+++ b/abi_libs
	@@ -0,0 +1,2 @@
	+openvpn-plugin-auth-pam.so
	+openvpn-plugin-down-root.so
	diff --git a/abi_symbols b/abi_symbols
	new file mode 100644
	--- /dev/null
	+++ b/abi_symbols
	@@ -0,0 +1,8 @@
	+openvpn-plugin-auth-pam.so:openvpn_plugin_abort_v1
	+openvpn-plugin-auth-pam.so:openvpn_plugin_close_v1
	+openvpn-plugin-auth-pam.so:openvpn_plugin_func_v1
	+openvpn-plugin-auth-pam.so:openvpn_plugin_open_v3
	+openvpn-plugin-down-root.so:openvpn_plugin_abort_v1
	+openvpn-plugin-down-root.so:openvpn_plugin_close_v1
	+openvpn-plugin-down-root.so:openvpn_plugin_func_v1
	+openvpn-plugin-down-root.so:openvpn_plugin_open_v1
	diff --git a/abi_used_libs b/abi_used_libs
	--- a/abi_used_libs
	+++ b/abi_used_libs
	@@ -1,5 +1,6 @@
	libc.so.6
	libdl.so.2
	+liblz4.so.1
	liblzo2.so.2
	libmbedcrypto.so.5
	libmbedtls.so.13
	diff --git a/abi_used_symbols b/abi_used_symbols
	new file mode 100644
	--- /dev/null
	+++ b/abi_used_symbols
	@@ -0,0 +1,266 @@
	+libc.so.6:__ctype_b_loc
	+libc.so.6:__ctype_toupper_loc
	+libc.so.6:__errno_location
	+libc.so.6:__fdelt_chk
	+libc.so.6:__fprintf_chk
	+libc.so.6:__isoc99_sscanf
	+libc.so.6:__libc_start_main
	+libc.so.6:__memcpy_chk
	+libc.so.6:__printf_chk
	+libc.so.6:__res_init
	+libc.so.6:__sprintf_chk
	+libc.so.6:__stack_chk_fail
	+libc.so.6:__strcat_chk
	+libc.so.6:__strcpy_chk
	+libc.so.6:__strncpy_chk
	+libc.so.6:__syslog_chk
	+libc.so.6:__vsnprintf_chk
	+libc.so.6:__xpg_basename
	+libc.so.6:__xstat
	+libc.so.6:_exit
	+libc.so.6:accept
	+libc.so.6:access
	+libc.so.6:bind
	+libc.so.6:calloc
	+libc.so.6:chdir
	+libc.so.6:chroot
	+libc.so.6:close
	+libc.so.6:closelog
	+libc.so.6:connect
	+libc.so.6:daemon
	+libc.so.6:difftime
	+libc.so.6:dirname
	+libc.so.6:dup
	+libc.so.6:dup2
	+libc.so.6:epoll_create
	+libc.so.6:epoll_ctl
	+libc.so.6:epoll_wait
	+libc.so.6:err
	+libc.so.6:execve
	+libc.so.6:exit
	+libc.so.6:fclose
	+libc.so.6:fcntl
	+libc.so.6:feof
	+libc.so.6:fflush
	+libc.so.6:fgetc
	+libc.so.6:fgets
	+libc.so.6:flock
	+libc.so.6:fopen
	+libc.so.6:fork
	+libc.so.6:fread
	+libc.so.6:free
	+libc.so.6:freeaddrinfo
	+libc.so.6:ftruncate
	+libc.so.6:gai_strerror
	+libc.so.6:getaddrinfo
	+libc.so.6:getenv
	+libc.so.6:getgrnam
	+libc.so.6:getnameinfo
	+libc.so.6:getpass
	+libc.so.6:getpeername
	+libc.so.6:getpid
	+libc.so.6:getpwnam
	+libc.so.6:getservbyname
	+libc.so.6:getsockname
	+libc.so.6:getsockopt
	+libc.so.6:gettimeofday
	+libc.so.6:if_indextoname
	+libc.so.6:if_nametoindex
	+libc.so.6:in6addr_any
	+libc.so.6:inet_ntoa
	+libc.so.6:inet_ntop
	+libc.so.6:inet_pton
	+libc.so.6:inotify_add_watch
	+libc.so.6:inotify_init
	+libc.so.6:ioctl
	+libc.so.6:isatty
	+libc.so.6:listen
	+libc.so.6:localtime
	+libc.so.6:lseek
	+libc.so.6:malloc
	+libc.so.6:memcmp
	+libc.so.6:memcpy
	+libc.so.6:memmove
	+libc.so.6:memset
	+libc.so.6:mlockall
	+libc.so.6:mmap
	+libc.so.6:munmap
	+libc.so.6:nice
	+libc.so.6:open
	+libc.so.6:openlog
	+libc.so.6:pipe
	+libc.so.6:poll
	+libc.so.6:random
	+libc.so.6:read
	+libc.so.6:recv
	+libc.so.6:recvfrom
	+libc.so.6:recvmsg
	+libc.so.6:select
	+libc.so.6:send
	+libc.so.6:sendmsg
	+libc.so.6:sendto
	+libc.so.6:setgid
	+libc.so.6:setgroups
	+libc.so.6:setsockopt
	+libc.so.6:setuid
	+libc.so.6:signal
	+libc.so.6:sleep
	+libc.so.6:socket
	+libc.so.6:socketpair
	+libc.so.6:srandom
	+libc.so.6:stderr
	+libc.so.6:stdin
	+libc.so.6:stdout
	+libc.so.6:strcasecmp
	+libc.so.6:strcat
	+libc.so.6:strchr
	+libc.so.6:strcmp
	+libc.so.6:strcpy
	+libc.so.6:strdup
	+libc.so.6:strerror
	+libc.so.6:strlen
	+libc.so.6:strncasecmp
	+libc.so.6:strncat
	+libc.so.6:strncmp
	+libc.so.6:strncpy
	+libc.so.6:strsep
	+libc.so.6:strstr
	+libc.so.6:strtok
	+libc.so.6:strtol
	+libc.so.6:strtoul
	+libc.so.6:time
	+libc.so.6:umask
	+libc.so.6:unlink
	+libc.so.6:waitpid
	+libc.so.6:warn
	+libc.so.6:write
	+libdl.so.2:dlclose
	+libdl.so.2:dlerror
	+libdl.so.2:dlopen
	+libdl.so.2:dlsym
	+liblz4.so.1:LZ4_compress_default
	+liblz4.so.1:LZ4_decompress_safe
	+liblzo2.so.2:__lzo_init_v2
	+liblzo2.so.2:lzo1x_1_15_compress
	+liblzo2.so.2:lzo1x_decompress_safe
	+liblzo2.so.2:lzo_version_string
	+libmbedcrypto.so.5:mbedtls_cipher_check_tag
	+libmbedcrypto.so.5:mbedtls_cipher_finish
	+libmbedcrypto.so.5:mbedtls_cipher_free
	+libmbedcrypto.so.5:mbedtls_cipher_info_from_string
	+libmbedcrypto.so.5:mbedtls_cipher_info_from_type
	+libmbedcrypto.so.5:mbedtls_cipher_list
	+libmbedcrypto.so.5:mbedtls_cipher_reset
	+libmbedcrypto.so.5:mbedtls_cipher_set_iv
	+libmbedcrypto.so.5:mbedtls_cipher_setkey
	+libmbedcrypto.so.5:mbedtls_cipher_setup
	+libmbedcrypto.so.5:mbedtls_cipher_update
	+libmbedcrypto.so.5:mbedtls_cipher_update_ad
	+libmbedcrypto.so.5:mbedtls_cipher_write_tag
	+libmbedcrypto.so.5:mbedtls_ctr_drbg_init
	+libmbedcrypto.so.5:mbedtls_ctr_drbg_random
	+libmbedcrypto.so.5:mbedtls_ctr_drbg_seed
	+libmbedcrypto.so.5:mbedtls_ctr_drbg_set_prediction_resistance
	+libmbedcrypto.so.5:mbedtls_ctr_drbg_update
	+libmbedcrypto.so.5:mbedtls_des_crypt_ecb
	+libmbedcrypto.so.5:mbedtls_des_key_check_key_parity
	+libmbedcrypto.so.5:mbedtls_des_key_check_weak
	+libmbedcrypto.so.5:mbedtls_des_key_set_parity
	+libmbedcrypto.so.5:mbedtls_des_setkey_enc
	+libmbedcrypto.so.5:mbedtls_dhm_free
	+libmbedcrypto.so.5:mbedtls_dhm_parse_dhm
	+libmbedcrypto.so.5:mbedtls_dhm_parse_dhmfile
	+libmbedcrypto.so.5:mbedtls_ecp_curve_info_from_name
	+libmbedcrypto.so.5:mbedtls_ecp_curve_list
	+libmbedcrypto.so.5:mbedtls_entropy_func
	+libmbedcrypto.so.5:mbedtls_entropy_init
	+libmbedcrypto.so.5:mbedtls_md
	+libmbedcrypto.so.5:mbedtls_md_finish
	+libmbedcrypto.so.5:mbedtls_md_free
	+libmbedcrypto.so.5:mbedtls_md_get_name
	+libmbedcrypto.so.5:mbedtls_md_get_size
	+libmbedcrypto.so.5:mbedtls_md_hmac_finish
	+libmbedcrypto.so.5:mbedtls_md_hmac_reset
	+libmbedcrypto.so.5:mbedtls_md_hmac_starts
	+libmbedcrypto.so.5:mbedtls_md_hmac_update
	+libmbedcrypto.so.5:mbedtls_md_info_from_string
	+libmbedcrypto.so.5:mbedtls_md_info_from_type
	+libmbedcrypto.so.5:mbedtls_md_init
	+libmbedcrypto.so.5:mbedtls_md_list
	+libmbedcrypto.so.5:mbedtls_md_setup
	+libmbedcrypto.so.5:mbedtls_md_starts
	+libmbedcrypto.so.5:mbedtls_md_update
	+libmbedcrypto.so.5:mbedtls_mpi_free
	+libmbedcrypto.so.5:mbedtls_mpi_init
	+libmbedcrypto.so.5:mbedtls_mpi_read_binary
	+libmbedcrypto.so.5:mbedtls_mpi_size
	+libmbedcrypto.so.5:mbedtls_mpi_write_string
	+libmbedcrypto.so.5:mbedtls_oid_get_attr_short_name
	+libmbedcrypto.so.5:mbedtls_oid_get_extended_key_usage
	+libmbedcrypto.so.5:mbedtls_oid_get_numeric_string
	+libmbedcrypto.so.5:mbedtls_oid_get_oid_by_md
	+libmbedcrypto.so.5:mbedtls_pem_free
	+libmbedcrypto.so.5:mbedtls_pem_read_buffer
	+libmbedcrypto.so.5:mbedtls_pem_write_buffer
	+libmbedcrypto.so.5:mbedtls_pk_check_pair
	+libmbedcrypto.so.5:mbedtls_pk_free
	+libmbedcrypto.so.5:mbedtls_pk_get_bitlen
	+libmbedcrypto.so.5:mbedtls_pk_get_type
	+libmbedcrypto.so.5:mbedtls_pk_parse_key
	+libmbedcrypto.so.5:mbedtls_pk_parse_keyfile
	+libmbedcrypto.so.5:mbedtls_pk_setup_rsa_alt
	+libmbedcrypto.so.5:mbedtls_strerror
	+libmbedcrypto.so.5:mbedtls_version_get_number
	+libmbedtls.so.13:mbedtls_debug_set_threshold
	+libmbedtls.so.13:mbedtls_ssl_conf_authmode
	+libmbedtls.so.13:mbedtls_ssl_conf_ca_chain
	+libmbedtls.so.13:mbedtls_ssl_conf_cbc_record_splitting
	+libmbedtls.so.13:mbedtls_ssl_conf_cert_profile
	+libmbedtls.so.13:mbedtls_ssl_conf_ciphersuites
	+libmbedtls.so.13:mbedtls_ssl_conf_curves
	+libmbedtls.so.13:mbedtls_ssl_conf_dbg
	+libmbedtls.so.13:mbedtls_ssl_conf_dh_param_ctx
	+libmbedtls.so.13:mbedtls_ssl_conf_export_keys_ext_cb
	+libmbedtls.so.13:mbedtls_ssl_conf_max_version
	+libmbedtls.so.13:mbedtls_ssl_conf_min_version
	+libmbedtls.so.13:mbedtls_ssl_conf_own_cert
	+libmbedtls.so.13:mbedtls_ssl_conf_renegotiation
	+libmbedtls.so.13:mbedtls_ssl_conf_rng
	+libmbedtls.so.13:mbedtls_ssl_conf_verify
	+libmbedtls.so.13:mbedtls_ssl_config_defaults
	+libmbedtls.so.13:mbedtls_ssl_config_free
	+libmbedtls.so.13:mbedtls_ssl_config_init
	+libmbedtls.so.13:mbedtls_ssl_free
	+libmbedtls.so.13:mbedtls_ssl_get_ciphersuite
	+libmbedtls.so.13:mbedtls_ssl_get_ciphersuite_id
	+libmbedtls.so.13:mbedtls_ssl_get_ciphersuite_name
	+libmbedtls.so.13:mbedtls_ssl_get_peer_cert
	+libmbedtls.so.13:mbedtls_ssl_get_version
	+libmbedtls.so.13:mbedtls_ssl_init
	+libmbedtls.so.13:mbedtls_ssl_list_ciphersuites
	+libmbedtls.so.13:mbedtls_ssl_read
	+libmbedtls.so.13:mbedtls_ssl_set_bio
	+libmbedtls.so.13:mbedtls_ssl_setup
	+libmbedtls.so.13:mbedtls_ssl_tls_prf
	+libmbedtls.so.13:mbedtls_ssl_write
	+libmbedx509.so.1:mbedtls_x509_crl_free
	+libmbedx509.so.1:mbedtls_x509_crl_parse
	+libmbedx509.so.1:mbedtls_x509_crl_parse_file
	+libmbedx509.so.1:mbedtls_x509_crt_check_key_usage
	+libmbedx509.so.1:mbedtls_x509_crt_free
	+libmbedx509.so.1:mbedtls_x509_crt_parse
	+libmbedx509.so.1:mbedtls_x509_crt_parse_file
	+libmbedx509.so.1:mbedtls_x509_crt_profile_suiteb
	+libmbedx509.so.1:mbedtls_x509_crt_verify_info
	+libmbedx509.so.1:mbedtls_x509_dn_gets
	+libmbedx509.so.1:mbedtls_x509_serial_gets
	+libmbedx509.so.1:mbedtls_x509_time_is_future
	+libmbedx509.so.1:mbedtls_x509_time_is_past
	+libpam.so.0:pam_acct_mgmt
	+libpam.so.0:pam_authenticate
	+libpam.so.0:pam_end
	+libpam.so.0:pam_start
	+libpam.so.0:pam_strerror
	+libsystemd.so.0:sd_booted
	+libsystemd.so.0:sd_notify
	+libsystemd.so.0:sd_notifyf
	diff --git a/files/0001-Change-the-default-cipher-to-AES-256-GCM-for-server-.patch b/files/0001-Change-the-default-cipher-to-AES-256-GCM-for-server-.patch
	deleted file mode 100644
	--- a/files/0001-Change-the-default-cipher-to-AES-256-GCM-for-server-.patch
	+++ /dev/null
	@@ -1,32 +0,0 @@
	-From b56d52fa409c62720791e189e501efb86df0aff4 Mon Sep 17 00:00:00 2001
	-From: David Sommerseth <dazo@eurephia.org>
	-Date: Tue, 4 Jul 2017 16:06:24 +0200
	-Subject: [PATCH] Change the default cipher to AES-256-GCM for server
	- configurations
	-
	-This change makes the server use AES-256-GCM instead of BF-CBC as the default
	-cipher for the VPN tunnel. To avoid breaking existing running configurations
	-defaulting to BF-CBC, the Negotiable Crypto Parameters (NCP) list contains
	-the BF-CBC in addition to AES-CBC. This makes it possible to migrate
	-existing older client configurations one-by-one to use at least AES-CBC unless
	-the client is updated to v2.4 (which defaults to upgrade to AES-GCM automatically)
	----
	- distro/systemd/openvpn-server@.service.in \| 2 +-
	- 1 file changed, 1 insertion(+), 1 deletion(-)
	-
	-diff --git a/distro/systemd/openvpn-server@.service.in b/distro/systemd/openvpn-server@.service.in
	-index 9a8a2c7..0ecda08 100644
	---- a/distro/systemd/openvpn-server@.service.in
	-+++ b/distro/systemd/openvpn-server@.service.in
	-@@ -10,7 +10,7 @@ Documentation=https://community.openvpn.net/openvpn/wiki/HOWTO
	- Type=notify
	- PrivateTmp=true
	- WorkingDirectory=/etc/openvpn/server
	--ExecStart=@sbindir@/openvpn --status %t/openvpn-server/status-%i.log --status-version 2 --suppress-timestamps --config %i.conf
	-+ExecStart=@sbindir@/openvpn --status %t/openvpn-server/status-%i.log --status-version 2 --suppress-timestamps --cipher AES-256-GCM --ncp-ciphers AES-256-GCM:AES-128-GCM:AES-256-CBC:AES-128-CBC:BF-CBC --config %i.conf
	- CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE CAP_AUDIT_WRITE
	- LimitNPROC=10
	- DeviceAllow=/dev/null rw
	---
	-2.11.0
	-
	diff --git a/package.yml b/package.yml
	--- a/package.yml
	+++ b/package.yml
	@@ -1,28 +1,33 @@
	name : openvpn
	-version : 2.4.9
	-release : 14
	+version : 2.5.2
	+release : 15
	source :
	- - https://github.com/OpenVPN/openvpn/archive/v2.4.9.tar.gz : cccadc1b4849107df3ba34f5d9d64284676ba99aa88415f1bcd481e08a3bc548
	+ - https://github.com/OpenVPN/openvpn/archive/v2.5.2.tar.gz : ba38b0f2a6b4e5b1a0f353afc175625fb492e479641523edd78ffebab3416cdb
	license :
	- GPL-2.0-only
	- BSD-4-Clause
	- OpenSSL
	- Zlib
	component : network.clients
	+homepage : https://openvpn.net/community/
	summary : OpenVPN Client
	description: \|
	An easy-to-use, robust, and highly configurable VPN (Virtual Private Network)
	builddeps :
	+ - pkgconfig(liblz4)
	- pkgconfig(lzo2)
	- - iproute2
	- mbedtls-devel
	+ - python-docutils
	setup : \|
	- %patch -p1 < $pkgfiles/0001-Change-the-default-cipher-to-AES-256-GCM-for-server-.patch
	- %reconfigure --enable-async-push --enable-iproute2 --enable-systemd --with-crypto-library=mbedtls
	+ %reconfigure --enable-async-push \
	+ --enable-systemd \
	+ --with-crypto-library=mbedtls
	build : \|
	%make
	install : \|
	%make_install
	+
	+ rm -rf $installdir/usr/share/doc
	check : \|
	%make check

	diff --git a/pspec_x86_64.xml b/pspec_x86_64.xml
	--- a/pspec_x86_64.xml
	+++ b/pspec_x86_64.xml
	@@ -1,9 +1,10 @@
	<PISI>
	<Source>
	<Name>openvpn</Name>
	+ <Homepage>https://openvpn.net/community/</Homepage>
	<Packager>
	- <Name>Joshua Strobl</Name>
	- <Email>joshua@streambits.io</Email>
	+ <Name>Reilly Brogan</Name>
	+ <Email>reilly@reillybrogan.com</Email>
	</Packager>
	<License>GPL-2.0-only</License>
	<License>BSD-4-Clause</License>
	@@ -28,16 +29,6 @@
	<Path fileType="library">/usr/lib64/systemd/system/openvpn-server@.service</Path>
	<Path fileType="library">/usr/lib64/tmpfiles.d/openvpn.conf</Path>
	<Path fileType="executable">/usr/sbin/openvpn</Path>
	- <Path fileType="doc">/usr/share/doc/openvpn/COPYING</Path>
	- <Path fileType="doc">/usr/share/doc/openvpn/COPYRIGHT.GPL</Path>
	- <Path fileType="doc">/usr/share/doc/openvpn/Changes.rst</Path>
	- <Path fileType="doc">/usr/share/doc/openvpn/README</Path>
	- <Path fileType="doc">/usr/share/doc/openvpn/README.IPv6</Path>
	- <Path fileType="doc">/usr/share/doc/openvpn/README.auth-pam</Path>
	- <Path fileType="doc">/usr/share/doc/openvpn/README.down-root</Path>
	- <Path fileType="doc">/usr/share/doc/openvpn/README.mbedtls</Path>
	- <Path fileType="doc">/usr/share/doc/openvpn/README.systemd</Path>
	- <Path fileType="doc">/usr/share/doc/openvpn/management-notes.txt</Path>
	<Path fileType="man">/usr/share/man/man8/openvpn.8</Path>
	</Files>
	</Package>
	@@ -48,7 +39,7 @@
	</Description>
	<PartOf>programming.devel</PartOf>
	<RuntimeDependencies>
	- <Dependency release="14">openvpn</Dependency>
	+ <Dependency release="15">openvpn</Dependency>
	</RuntimeDependencies>
	<Files>
	<Path fileType="header">/usr/include/openvpn-msg.h</Path>
	@@ -56,12 +47,12 @@
	</Files>
	</Package>
	<History>
	- <Update release="14">
	- <Date>2020-07-13</Date>
	- <Version>2.4.9</Version>
	+ <Update release="15">
	+ <Date>2021-06-01</Date>
	+ <Version>2.5.2</Version>
	<Comment>Packaging update</Comment>
	- <Name>Joshua Strobl</Name>
	- <Email>joshua@streambits.io</Email>
	+ <Name>Reilly Brogan</Name>
	+ <Email>reilly@reillybrogan.com</Email>
	</Update>
	</History>
	</PISI>
	\ No newline at end of file

File Metadata

Mime Type: text/plain
Expires: May 17 2023, 5:01 PM (12 w, 2 d ago)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 5818917
Default Alt Text: D11199.id.diff (14 KB)

D11199.id.diffNo OneTemporaryActions

D11199.id.diffView Options

File Metadata

Event Timeline

D11199.id.diff
No OneTemporary
Actions

D11199.id.diff
View Options