update to freeradius-2.2.9, include a crash fix, missing CRL checking

(CVE-2015-4680) and a fix for EAP-TTLS with TLSv1.2 (notably affecting
Android 6.x wifi clients in TTLS configurations). OK pea@

Note: not updating to 3.x at present as the build system first requires
significant untangling for use with ports (I've spent days on it already
and still not there).
This commit is contained in:
sthen 2015-10-14 11:19:56 +00:00
parent c1e29696fa
commit 8156732754
4 changed files with 6 additions and 25 deletions

View File

@ -1,4 +1,4 @@
# $OpenBSD: Makefile,v 1.62 2015/08/25 07:30:29 ajacoutot Exp $
# $OpenBSD: Makefile,v 1.63 2015/10/14 11:19:56 sthen Exp $
SHARED_ONLY= Yes
SHARED_LIBS += freeradius-radius 4.2 # .0.0
@ -10,8 +10,7 @@ COMMENT-mysql= freeradius mysql rlm addon
COMMENT-pgsql= freeradius pgsql rlm addon
COMMENT-ldap= freeradius ldap rlm addon
V= 2.2.7
REVISION-main= 1
V= 2.2.9
DISTNAME= freeradius-server-$V
EXTRACT_SUFX= .tar.bz2

View File

@ -1,2 +1,2 @@
SHA256 (freeradius-server-2.2.7.tar.bz2) = awr2Le0P2puySu5WjDvJ5fDAtzZTDfPBJg4rYIXy5fk=
SIZE (freeradius-server-2.2.7.tar.bz2) = 2791603
SHA256 (freeradius-server-2.2.9.tar.bz2) = U5hMHfX1A+kd1vE2cn8bmKJywtO6vY1unuGqlu0EeIQ=
SIZE (freeradius-server-2.2.9.tar.bz2) = 2793005

View File

@ -1,18 +0,0 @@
$OpenBSD: patch-raddb_sites-available_default,v 1.1 2015/06/23 21:38:06 sthen Exp $
From 796d49527703b97cc7f9e9cef88dfa85454cc6f9 Mon Sep 17 00:00:00 2001
From: "Alan T. DeKok" <aland@freeradius.org>
Date: Wed, 20 May 2015 17:36:09 -0400
Subject: [PATCH] Oops
--- raddb/sites-available/default.orig Tue Jun 23 22:34:44 2015
+++ raddb/sites-available/default Tue Jun 23 22:35:00 2015
@@ -157,8 +157,6 @@ authorize {
ok = return
}
- reject
-
#
# Pull crypt'd passwords from /etc/passwd or /etc/shadow,
# using the system API's to get the password. If you want

View File

@ -1,4 +1,4 @@
@comment $OpenBSD: PLIST-main,v 1.28 2015/08/25 07:30:29 ajacoutot Exp $
@comment $OpenBSD: PLIST-main,v 1.29 2015/10/14 11:19:56 sthen Exp $
@conflict radiusd-cistron-*
@conflict radiusd-lucent-*
@pkgpath net/freeradius
@ -104,7 +104,7 @@ lib/freeradius/rlm_wimax.so
lib/libfreeradius-eap.a
lib/libfreeradius-eap.la
@lib lib/libfreeradius-eap.so.${LIBfreeradius-eap_VERSION}
lib/libfreeradius-radius-020207.la
lib/libfreeradius-radius-020209.la
lib/libfreeradius-radius.a
lib/libfreeradius-radius.la
@lib lib/libfreeradius-radius.so.${LIBfreeradius-radius_VERSION}