29 Commits

Author SHA1 Message Date
sthen
33608667ec update to freeradius-3.0.16 2018-01-16 13:47:46 +00:00
rpe
9a8b5ccd06 Change the shebang line from /bin/sh to /bin/ksh in all ports rc.d
daemon scripts and bump subpackages that contain the *.rc scripts.

discussed with and OK aja@
OK tb
2018-01-11 19:27:01 +00:00
naddy
11e3dd67b3 switch COMPILER from the old, confusing shortcuts to the more explicit format 2017-11-16 23:20:37 +00:00
sthen
6b6a119fb2 update to freeradius-3.0.15
http://freeradius.org/security/fuzzer-2017.html
2017-07-17 23:15:05 +00:00
espie
cc5bc426ed switch everything to new COMPILER idiom, even stuff that won't build with clang
yet, but at least that part is done.
2017-05-31 08:08:15 +00:00
sthen
a4d4b9922a update to freeradius 3.0.14.
Security update for configurations with TLS; FreeRADIUS intentionally
skips inner authentication for TLS resumption, however it allows a
session to be resumed before the initial connection has authenticated,
allowing access without auth to a malicious supplicant. CVE-2017-9148,
See http://seclists.org/oss-sec/2017/q2/342

Workaround: set "enabled = no" in the cache section of raddb/mods-enabled/eap.
2017-05-30 13:12:30 +00:00
sthen
30d0b1e0ee apply patch-configure_ac to configure; now freeradius3 is back on a normal
release it's not regenerating the autoconf scripts. fixes accidentally picking
up collectdclient.

use WANT_CXX and MODGCC4_LANGS=c; thread-local-storage.
2017-05-23 14:35:04 +00:00
sthen
259a0e41ea fix PKGNAME-freetds and bump REVISION-iodbc; copy-and-past-o. 2017-03-09 21:25:50 +00:00
sthen
fda6c2ca46 update to freeradius-3.0.13 2017-03-08 17:23:25 +00:00
sthen
172daed650 - patch freeradius3's certs/Makefile to fix things with /usr/bin/make
- bump to 2048 bit DH params in certs/bootstrap
2016-11-19 12:13:23 +00:00
sthen
8c0bdfb902 update to freeradius-3.0.12 2016-11-15 12:24:19 +00:00
sthen
c15b136e13 sync WANTLIB (and in one case, add gettext to LIB_DEPENDS) in dependent ports
now that internationalised domain name support has been removed from net/curl
2016-11-04 11:35:18 +00:00
sthen
564c6c344a Cope with moving sqlite3 back to ports. 2016-09-23 09:16:52 +00:00
sthen
3df3bb2138 bump ports that might pick up IP_SENDSRCADDR 2016-08-17 20:58:19 +00:00
sthen
66a364ce62 Replace unnecessary freeradius build dep on autoconf-archive with changes to
autoconf/autoheader m4 include path instead (the m4 files were there, just not
being picked up). While there, update to a newer 3.0.x snapshot to fix a crash
when using raddebug with a condition matching on regexp.
2016-07-05 12:04:41 +00:00
espie
1d55a231e7 add is-branch to all trivial ports that exist as multiple branches. 2016-06-29 16:14:38 +00:00
sthen
1640f5d491 needs libtool m4 files as well 2016-06-28 12:24:38 +00:00
nigel
bb7f3b1bbb Two BUILD_DEPENDS= change 2nd to +=
Ok shen@
2016-06-28 10:39:36 +00:00
sthen
b38dcc320b switch to a 3.0.x snapshot of freeradius, it's fairly low risk and fixes
a few problems with 3.0.11 that are worth getting in before 6.0.
2016-06-27 20:35:31 +00:00
naddy
deea7ed07b drop SHARED_ONLY from python and ruby ports 2016-03-20 16:12:22 +00:00
naddy
ce859edcb4 garbage collect CONFIGURE_SHARED 2016-03-11 20:28:21 +00:00
sthen
260738232d update to freeradius-3.0.11 2016-01-25 20:32:15 +00:00
sthen
fdf2629360 cleanup patches (better comments, etc). remove bogus patch to sample config. 2015-12-10 09:56:45 +00:00
sthen
3a4b7c1c36 more @samples for the config files for freeradius3's subpackaged modules 2015-11-30 22:01:43 +00:00
sthen
125ec3d2b7 cherrypick a patch from upstream: create user-name from peer ID correctly 2015-11-27 13:13:07 +00:00
sthen
9795522f15 getpwnam -> getpwnam_shadow 2015-11-19 14:19:05 +00:00
sthen
6d1a00257d bump 2015-11-12 15:27:46 +00:00
sthen
61f0f99da7 Adapt freeradius3 to the yubico reorg, and depend on yubico-c-client.
Other minor tweaks while there (PLIST shuffle, rm .orig file).
2015-11-12 15:27:11 +00:00
sthen
c0c0d89ade Import ports/net/freeradius3, in parallel with net/freeradius (configuration
has changed and isn't directly compatible, additionally future 3.x releases
might well restrict arch support). Feedback gsoares, feedback/ok jca@.
2015-11-12 12:59:37 +00:00