Also since we can pass it several daemons now, simplify enabling:
- before
rcctl enable foo
rcctl enable bar
rcctl enable bla
- after
rcctl enable foo bar bla
MLVPN is VPN software that encrypts data with the Salsa20 stream cipher and
uses Ed25519 authentication. It can either run with a single ISP connection,
or can aggregate multiple circuits with active monitoring to identify and
remove faulty ones without dropping TCP connections. To avoid problems with
out-of-order packet delivery, it can optionally add delays per-connection
or buffer packets before delivering to the tun/tap interface.
MLVPN uses privilege separation and supports Linux, OpenBSD and FreeBSD.
- Replace previous backout with fixes from Gunnar Beutner (upstream):
. Make sure the timer thread is gone when calling fork()
. Ensure that the main thread pool gets re-initialized properly after fork()
- Add a check so that 'make test' fails early with a useful error if the
libconfig package is installed; the objects in the build directory don't
have a finalized rpath and they are looking in /usr/local/lib before the
build directory, so the wrong libconfig so is picked up.
I think this port should now be in good shape, please let me know if you're
using it and run into problems with forking etc.
upstream commit 86819f446e2 which broke daemon activation on OpenBSD.
Without this reversion ConfigItem::ActivateItems() doesn't get any
further after the call to DynamicObject::RestoreObjects().
(CVE-2015-4680) and a fix for EAP-TTLS with TLSv1.2 (notably affecting
Android 6.x wifi clients in TTLS configurations). OK pea@
Note: not updating to 3.x at present as the build system first requires
significant untangling for use with ports (I've spent days on it already
and still not there).
updates are triggered. This is following the struct if_data ABI change a few
days ago; if_msghdr has an embedded if_data. Some may be unnecessary, but
some are definitely needed and bumps are cheaper than debugging.
Problem reported with wpa_supplicant by Mikolaj Kucharski.
