diff --git a/abi_libs b/abi_libs new file mode 100644 --- /dev/null +++ b/abi_libs @@ -0,0 +1,2 @@ +openvpn-plugin-auth-pam.so +openvpn-plugin-down-root.so diff --git a/abi_symbols b/abi_symbols new file mode 100644 --- /dev/null +++ b/abi_symbols @@ -0,0 +1,8 @@ +openvpn-plugin-auth-pam.so:openvpn_plugin_abort_v1 +openvpn-plugin-auth-pam.so:openvpn_plugin_close_v1 +openvpn-plugin-auth-pam.so:openvpn_plugin_func_v1 +openvpn-plugin-auth-pam.so:openvpn_plugin_open_v3 +openvpn-plugin-down-root.so:openvpn_plugin_abort_v1 +openvpn-plugin-down-root.so:openvpn_plugin_close_v1 +openvpn-plugin-down-root.so:openvpn_plugin_func_v1 +openvpn-plugin-down-root.so:openvpn_plugin_open_v1 diff --git a/abi_used_libs b/abi_used_libs --- a/abi_used_libs +++ b/abi_used_libs @@ -1,5 +1,6 @@ libc.so.6 libdl.so.2 +liblz4.so.1 liblzo2.so.2 libmbedcrypto.so.5 libmbedtls.so.13 diff --git a/abi_used_symbols b/abi_used_symbols new file mode 100644 --- /dev/null +++ b/abi_used_symbols @@ -0,0 +1,266 @@ +libc.so.6:__ctype_b_loc +libc.so.6:__ctype_toupper_loc +libc.so.6:__errno_location +libc.so.6:__fdelt_chk +libc.so.6:__fprintf_chk +libc.so.6:__isoc99_sscanf +libc.so.6:__libc_start_main +libc.so.6:__memcpy_chk +libc.so.6:__printf_chk +libc.so.6:__res_init +libc.so.6:__sprintf_chk +libc.so.6:__stack_chk_fail +libc.so.6:__strcat_chk +libc.so.6:__strcpy_chk +libc.so.6:__strncpy_chk +libc.so.6:__syslog_chk +libc.so.6:__vsnprintf_chk +libc.so.6:__xpg_basename +libc.so.6:__xstat +libc.so.6:_exit +libc.so.6:accept +libc.so.6:access +libc.so.6:bind +libc.so.6:calloc +libc.so.6:chdir +libc.so.6:chroot +libc.so.6:close +libc.so.6:closelog +libc.so.6:connect +libc.so.6:daemon +libc.so.6:difftime +libc.so.6:dirname +libc.so.6:dup +libc.so.6:dup2 +libc.so.6:epoll_create +libc.so.6:epoll_ctl +libc.so.6:epoll_wait +libc.so.6:err +libc.so.6:execve +libc.so.6:exit +libc.so.6:fclose +libc.so.6:fcntl +libc.so.6:feof +libc.so.6:fflush +libc.so.6:fgetc +libc.so.6:fgets +libc.so.6:flock +libc.so.6:fopen +libc.so.6:fork +libc.so.6:fread +libc.so.6:free +libc.so.6:freeaddrinfo +libc.so.6:ftruncate +libc.so.6:gai_strerror +libc.so.6:getaddrinfo +libc.so.6:getenv +libc.so.6:getgrnam +libc.so.6:getnameinfo +libc.so.6:getpass +libc.so.6:getpeername +libc.so.6:getpid +libc.so.6:getpwnam +libc.so.6:getservbyname +libc.so.6:getsockname +libc.so.6:getsockopt +libc.so.6:gettimeofday +libc.so.6:if_indextoname +libc.so.6:if_nametoindex +libc.so.6:in6addr_any +libc.so.6:inet_ntoa +libc.so.6:inet_ntop +libc.so.6:inet_pton +libc.so.6:inotify_add_watch +libc.so.6:inotify_init +libc.so.6:ioctl +libc.so.6:isatty +libc.so.6:listen +libc.so.6:localtime +libc.so.6:lseek +libc.so.6:malloc +libc.so.6:memcmp +libc.so.6:memcpy +libc.so.6:memmove +libc.so.6:memset +libc.so.6:mlockall +libc.so.6:mmap +libc.so.6:munmap +libc.so.6:nice +libc.so.6:open +libc.so.6:openlog +libc.so.6:pipe +libc.so.6:poll +libc.so.6:random +libc.so.6:read +libc.so.6:recv +libc.so.6:recvfrom +libc.so.6:recvmsg +libc.so.6:select +libc.so.6:send +libc.so.6:sendmsg +libc.so.6:sendto +libc.so.6:setgid +libc.so.6:setgroups +libc.so.6:setsockopt +libc.so.6:setuid +libc.so.6:signal +libc.so.6:sleep +libc.so.6:socket +libc.so.6:socketpair +libc.so.6:srandom +libc.so.6:stderr +libc.so.6:stdin +libc.so.6:stdout +libc.so.6:strcasecmp +libc.so.6:strcat +libc.so.6:strchr +libc.so.6:strcmp +libc.so.6:strcpy +libc.so.6:strdup +libc.so.6:strerror +libc.so.6:strlen +libc.so.6:strncasecmp +libc.so.6:strncat +libc.so.6:strncmp +libc.so.6:strncpy +libc.so.6:strsep +libc.so.6:strstr +libc.so.6:strtok +libc.so.6:strtol +libc.so.6:strtoul +libc.so.6:time +libc.so.6:umask +libc.so.6:unlink +libc.so.6:waitpid +libc.so.6:warn +libc.so.6:write +libdl.so.2:dlclose +libdl.so.2:dlerror +libdl.so.2:dlopen +libdl.so.2:dlsym +liblz4.so.1:LZ4_compress_default +liblz4.so.1:LZ4_decompress_safe +liblzo2.so.2:__lzo_init_v2 +liblzo2.so.2:lzo1x_1_15_compress +liblzo2.so.2:lzo1x_decompress_safe +liblzo2.so.2:lzo_version_string +libmbedcrypto.so.5:mbedtls_cipher_check_tag +libmbedcrypto.so.5:mbedtls_cipher_finish +libmbedcrypto.so.5:mbedtls_cipher_free +libmbedcrypto.so.5:mbedtls_cipher_info_from_string +libmbedcrypto.so.5:mbedtls_cipher_info_from_type +libmbedcrypto.so.5:mbedtls_cipher_list +libmbedcrypto.so.5:mbedtls_cipher_reset +libmbedcrypto.so.5:mbedtls_cipher_set_iv +libmbedcrypto.so.5:mbedtls_cipher_setkey +libmbedcrypto.so.5:mbedtls_cipher_setup +libmbedcrypto.so.5:mbedtls_cipher_update +libmbedcrypto.so.5:mbedtls_cipher_update_ad +libmbedcrypto.so.5:mbedtls_cipher_write_tag +libmbedcrypto.so.5:mbedtls_ctr_drbg_init +libmbedcrypto.so.5:mbedtls_ctr_drbg_random +libmbedcrypto.so.5:mbedtls_ctr_drbg_seed +libmbedcrypto.so.5:mbedtls_ctr_drbg_set_prediction_resistance +libmbedcrypto.so.5:mbedtls_ctr_drbg_update +libmbedcrypto.so.5:mbedtls_des_crypt_ecb +libmbedcrypto.so.5:mbedtls_des_key_check_key_parity +libmbedcrypto.so.5:mbedtls_des_key_check_weak +libmbedcrypto.so.5:mbedtls_des_key_set_parity +libmbedcrypto.so.5:mbedtls_des_setkey_enc +libmbedcrypto.so.5:mbedtls_dhm_free +libmbedcrypto.so.5:mbedtls_dhm_parse_dhm +libmbedcrypto.so.5:mbedtls_dhm_parse_dhmfile +libmbedcrypto.so.5:mbedtls_ecp_curve_info_from_name +libmbedcrypto.so.5:mbedtls_ecp_curve_list +libmbedcrypto.so.5:mbedtls_entropy_func +libmbedcrypto.so.5:mbedtls_entropy_init +libmbedcrypto.so.5:mbedtls_md +libmbedcrypto.so.5:mbedtls_md_finish +libmbedcrypto.so.5:mbedtls_md_free +libmbedcrypto.so.5:mbedtls_md_get_name +libmbedcrypto.so.5:mbedtls_md_get_size +libmbedcrypto.so.5:mbedtls_md_hmac_finish +libmbedcrypto.so.5:mbedtls_md_hmac_reset +libmbedcrypto.so.5:mbedtls_md_hmac_starts +libmbedcrypto.so.5:mbedtls_md_hmac_update +libmbedcrypto.so.5:mbedtls_md_info_from_string +libmbedcrypto.so.5:mbedtls_md_info_from_type +libmbedcrypto.so.5:mbedtls_md_init +libmbedcrypto.so.5:mbedtls_md_list +libmbedcrypto.so.5:mbedtls_md_setup +libmbedcrypto.so.5:mbedtls_md_starts +libmbedcrypto.so.5:mbedtls_md_update +libmbedcrypto.so.5:mbedtls_mpi_free +libmbedcrypto.so.5:mbedtls_mpi_init +libmbedcrypto.so.5:mbedtls_mpi_read_binary +libmbedcrypto.so.5:mbedtls_mpi_size +libmbedcrypto.so.5:mbedtls_mpi_write_string +libmbedcrypto.so.5:mbedtls_oid_get_attr_short_name +libmbedcrypto.so.5:mbedtls_oid_get_extended_key_usage +libmbedcrypto.so.5:mbedtls_oid_get_numeric_string +libmbedcrypto.so.5:mbedtls_oid_get_oid_by_md +libmbedcrypto.so.5:mbedtls_pem_free +libmbedcrypto.so.5:mbedtls_pem_read_buffer +libmbedcrypto.so.5:mbedtls_pem_write_buffer +libmbedcrypto.so.5:mbedtls_pk_check_pair +libmbedcrypto.so.5:mbedtls_pk_free +libmbedcrypto.so.5:mbedtls_pk_get_bitlen +libmbedcrypto.so.5:mbedtls_pk_get_type +libmbedcrypto.so.5:mbedtls_pk_parse_key +libmbedcrypto.so.5:mbedtls_pk_parse_keyfile +libmbedcrypto.so.5:mbedtls_pk_setup_rsa_alt +libmbedcrypto.so.5:mbedtls_strerror +libmbedcrypto.so.5:mbedtls_version_get_number +libmbedtls.so.13:mbedtls_debug_set_threshold +libmbedtls.so.13:mbedtls_ssl_conf_authmode +libmbedtls.so.13:mbedtls_ssl_conf_ca_chain +libmbedtls.so.13:mbedtls_ssl_conf_cbc_record_splitting +libmbedtls.so.13:mbedtls_ssl_conf_cert_profile +libmbedtls.so.13:mbedtls_ssl_conf_ciphersuites +libmbedtls.so.13:mbedtls_ssl_conf_curves +libmbedtls.so.13:mbedtls_ssl_conf_dbg +libmbedtls.so.13:mbedtls_ssl_conf_dh_param_ctx +libmbedtls.so.13:mbedtls_ssl_conf_export_keys_ext_cb +libmbedtls.so.13:mbedtls_ssl_conf_max_version +libmbedtls.so.13:mbedtls_ssl_conf_min_version +libmbedtls.so.13:mbedtls_ssl_conf_own_cert +libmbedtls.so.13:mbedtls_ssl_conf_renegotiation +libmbedtls.so.13:mbedtls_ssl_conf_rng +libmbedtls.so.13:mbedtls_ssl_conf_verify +libmbedtls.so.13:mbedtls_ssl_config_defaults +libmbedtls.so.13:mbedtls_ssl_config_free +libmbedtls.so.13:mbedtls_ssl_config_init +libmbedtls.so.13:mbedtls_ssl_free +libmbedtls.so.13:mbedtls_ssl_get_ciphersuite +libmbedtls.so.13:mbedtls_ssl_get_ciphersuite_id +libmbedtls.so.13:mbedtls_ssl_get_ciphersuite_name +libmbedtls.so.13:mbedtls_ssl_get_peer_cert +libmbedtls.so.13:mbedtls_ssl_get_version +libmbedtls.so.13:mbedtls_ssl_init +libmbedtls.so.13:mbedtls_ssl_list_ciphersuites +libmbedtls.so.13:mbedtls_ssl_read +libmbedtls.so.13:mbedtls_ssl_set_bio +libmbedtls.so.13:mbedtls_ssl_setup +libmbedtls.so.13:mbedtls_ssl_tls_prf +libmbedtls.so.13:mbedtls_ssl_write +libmbedx509.so.1:mbedtls_x509_crl_free +libmbedx509.so.1:mbedtls_x509_crl_parse +libmbedx509.so.1:mbedtls_x509_crl_parse_file +libmbedx509.so.1:mbedtls_x509_crt_check_key_usage +libmbedx509.so.1:mbedtls_x509_crt_free +libmbedx509.so.1:mbedtls_x509_crt_parse +libmbedx509.so.1:mbedtls_x509_crt_parse_file +libmbedx509.so.1:mbedtls_x509_crt_profile_suiteb +libmbedx509.so.1:mbedtls_x509_crt_verify_info +libmbedx509.so.1:mbedtls_x509_dn_gets +libmbedx509.so.1:mbedtls_x509_serial_gets +libmbedx509.so.1:mbedtls_x509_time_is_future +libmbedx509.so.1:mbedtls_x509_time_is_past +libpam.so.0:pam_acct_mgmt +libpam.so.0:pam_authenticate +libpam.so.0:pam_end +libpam.so.0:pam_start +libpam.so.0:pam_strerror +libsystemd.so.0:sd_booted +libsystemd.so.0:sd_notify +libsystemd.so.0:sd_notifyf diff --git a/files/0001-Change-the-default-cipher-to-AES-256-GCM-for-server-.patch b/files/0001-Change-the-default-cipher-to-AES-256-GCM-for-server-.patch deleted file mode 100644 --- a/files/0001-Change-the-default-cipher-to-AES-256-GCM-for-server-.patch +++ /dev/null @@ -1,32 +0,0 @@ -From b56d52fa409c62720791e189e501efb86df0aff4 Mon Sep 17 00:00:00 2001 -From: David Sommerseth -Date: Tue, 4 Jul 2017 16:06:24 +0200 -Subject: [PATCH] Change the default cipher to AES-256-GCM for server - configurations - -This change makes the server use AES-256-GCM instead of BF-CBC as the default -cipher for the VPN tunnel. To avoid breaking existing running configurations -defaulting to BF-CBC, the Negotiable Crypto Parameters (NCP) list contains -the BF-CBC in addition to AES-CBC. This makes it possible to migrate -existing older client configurations one-by-one to use at least AES-CBC unless -the client is updated to v2.4 (which defaults to upgrade to AES-GCM automatically) ---- - distro/systemd/openvpn-server@.service.in | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/distro/systemd/openvpn-server@.service.in b/distro/systemd/openvpn-server@.service.in -index 9a8a2c7..0ecda08 100644 ---- a/distro/systemd/openvpn-server@.service.in -+++ b/distro/systemd/openvpn-server@.service.in -@@ -10,7 +10,7 @@ Documentation=https://community.openvpn.net/openvpn/wiki/HOWTO - Type=notify - PrivateTmp=true - WorkingDirectory=/etc/openvpn/server --ExecStart=@sbindir@/openvpn --status %t/openvpn-server/status-%i.log --status-version 2 --suppress-timestamps --config %i.conf -+ExecStart=@sbindir@/openvpn --status %t/openvpn-server/status-%i.log --status-version 2 --suppress-timestamps --cipher AES-256-GCM --ncp-ciphers AES-256-GCM:AES-128-GCM:AES-256-CBC:AES-128-CBC:BF-CBC --config %i.conf - CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE CAP_AUDIT_WRITE - LimitNPROC=10 - DeviceAllow=/dev/null rw --- -2.11.0 - diff --git a/package.yml b/package.yml --- a/package.yml +++ b/package.yml @@ -1,24 +1,27 @@ name : openvpn -version : 2.4.9 -release : 14 +version : 2.5.2 +release : 15 source : - - https://github.com/OpenVPN/openvpn/archive/v2.4.9.tar.gz : cccadc1b4849107df3ba34f5d9d64284676ba99aa88415f1bcd481e08a3bc548 + - https://github.com/OpenVPN/openvpn/archive/v2.5.2.tar.gz : ba38b0f2a6b4e5b1a0f353afc175625fb492e479641523edd78ffebab3416cdb license : - GPL-2.0-only - BSD-4-Clause - OpenSSL - Zlib component : network.clients +homepage : https://openvpn.net/community/ summary : OpenVPN Client description: | An easy-to-use, robust, and highly configurable VPN (Virtual Private Network) builddeps : + - pkgconfig(liblz4) - pkgconfig(lzo2) - - iproute2 - mbedtls-devel + - python-docutils setup : | - %patch -p1 < $pkgfiles/0001-Change-the-default-cipher-to-AES-256-GCM-for-server-.patch - %reconfigure --enable-async-push --enable-iproute2 --enable-systemd --with-crypto-library=mbedtls + %reconfigure --enable-async-push \ + --enable-systemd \ + --with-crypto-library=mbedtls build : | %make install : | diff --git a/pspec_x86_64.xml b/pspec_x86_64.xml --- a/pspec_x86_64.xml +++ b/pspec_x86_64.xml @@ -1,9 +1,10 @@ openvpn + https://openvpn.net/community/ - Joshua Strobl - joshua@streambits.io + Reilly Brogan + reilly@reillybrogan.com GPL-2.0-only BSD-4-Clause @@ -37,7 +38,9 @@ /usr/share/doc/openvpn/README.down-root /usr/share/doc/openvpn/README.mbedtls /usr/share/doc/openvpn/README.systemd + /usr/share/doc/openvpn/gui-notes.txt /usr/share/doc/openvpn/management-notes.txt + /usr/share/doc/openvpn/openvpn.8.html /usr/share/man/man8/openvpn.8 @@ -48,7 +51,7 @@ programming.devel - openvpn + openvpn /usr/include/openvpn-msg.h @@ -56,12 +59,12 @@ - - 2020-07-13 - 2.4.9 + + 2021-06-01 + 2.5.2 Packaging update - Joshua Strobl - joshua@streambits.io + Reilly Brogan + reilly@reillybrogan.com \ No newline at end of file