43 Commits

Author SHA1 Message Date
sthen
0e4d63a7f8 remove extraunexec lines for now, fully working pkg_delete -c is less
important than users not getting bogus bad advice when updating
2020-01-30 22:37:58 +00:00
sthen
a64ae3dbe6 update to freeradius-3.0.20 2019-11-19 13:03:49 +00:00
sthen
f14ea1b4d3 regen PLISTs 2019-11-19 12:19:38 +00:00
cwen
65dc867165 freeradius3: unbreak the build on powerpc: it requires atomics.
While here, refresh WANTLIB for the -mysql subpackage.

OK sthen@ (maintainer)
2019-06-06 19:36:51 +00:00
sthen
9c6e9626b9 s/PERMIT_PACKAGE_CDROM/PERMIT_PACKAGE/ and some light whitespace tidying
in ports which I maintain
2019-06-03 16:06:50 +00:00
sthen
9ce80e2082 update to freeradius-3.0.19 2019-04-18 17:27:18 +00:00
sthen
365539f3dd PREFIX->TRUEPREFIX, problem reported by Robert Klein 2019-04-02 09:45:23 +00:00
sthen
7bcccd8f2d move the several @exec-add lines to a script for first-run.
run cert bootstrap there, this is complicated enough to configure it's
best if things match upstream's documentation as closely as possible.
prompted by a mail from Julien Dhaille
2019-03-14 01:33:14 +00:00
sthen
a94bfd8012 update to freeradius-3.0.18
- OPENSSL_VERSION_NUMBER patch needed for new use of SSL_CTX_set_num_tickets
2019-02-28 18:46:49 +00:00
sthen
6b8e265514 bump ports known/suspected to be affected by issue with libedit/libreadline
and termcap on lld arches.
2018-11-14 20:48:21 +00:00
jsing
9b238750f5 Get the MAC secret size from the TLS cipher, rather than reaching into
libssl internals. While here also take more of the OpenSSL 1.1 API code
paths.

ok sthen@ tb@
2018-10-24 17:15:25 +00:00
sthen
325d1948aa update to freeradius-3.0.17 2018-04-19 20:48:31 +00:00
sthen
43aef8f514 fix copy-and-pasto in patch to freeradius3's /etc/raddb/certs/Makefile 2018-03-08 14:09:43 +00:00
sthen
350d64d9ac replace unicode curly quote 2018-02-25 22:12:10 +00:00
sthen
33608667ec update to freeradius-3.0.16 2018-01-16 13:47:46 +00:00
rpe
9a8b5ccd06 Change the shebang line from /bin/sh to /bin/ksh in all ports rc.d
daemon scripts and bump subpackages that contain the *.rc scripts.

discussed with and OK aja@
OK tb
2018-01-11 19:27:01 +00:00
naddy
11e3dd67b3 switch COMPILER from the old, confusing shortcuts to the more explicit format 2017-11-16 23:20:37 +00:00
sthen
6b6a119fb2 update to freeradius-3.0.15
http://freeradius.org/security/fuzzer-2017.html
2017-07-17 23:15:05 +00:00
espie
cc5bc426ed switch everything to new COMPILER idiom, even stuff that won't build with clang
yet, but at least that part is done.
2017-05-31 08:08:15 +00:00
sthen
a4d4b9922a update to freeradius 3.0.14.
Security update for configurations with TLS; FreeRADIUS intentionally
skips inner authentication for TLS resumption, however it allows a
session to be resumed before the initial connection has authenticated,
allowing access without auth to a malicious supplicant. CVE-2017-9148,
See http://seclists.org/oss-sec/2017/q2/342

Workaround: set "enabled = no" in the cache section of raddb/mods-enabled/eap.
2017-05-30 13:12:30 +00:00
sthen
30d0b1e0ee apply patch-configure_ac to configure; now freeradius3 is back on a normal
release it's not regenerating the autoconf scripts. fixes accidentally picking
up collectdclient.

use WANT_CXX and MODGCC4_LANGS=c; thread-local-storage.
2017-05-23 14:35:04 +00:00
sthen
259a0e41ea fix PKGNAME-freetds and bump REVISION-iodbc; copy-and-past-o. 2017-03-09 21:25:50 +00:00
sthen
fda6c2ca46 update to freeradius-3.0.13 2017-03-08 17:23:25 +00:00
sthen
172daed650 - patch freeradius3's certs/Makefile to fix things with /usr/bin/make
- bump to 2048 bit DH params in certs/bootstrap
2016-11-19 12:13:23 +00:00
sthen
8c0bdfb902 update to freeradius-3.0.12 2016-11-15 12:24:19 +00:00
sthen
c15b136e13 sync WANTLIB (and in one case, add gettext to LIB_DEPENDS) in dependent ports
now that internationalised domain name support has been removed from net/curl
2016-11-04 11:35:18 +00:00
sthen
564c6c344a Cope with moving sqlite3 back to ports. 2016-09-23 09:16:52 +00:00
sthen
3df3bb2138 bump ports that might pick up IP_SENDSRCADDR 2016-08-17 20:58:19 +00:00
sthen
66a364ce62 Replace unnecessary freeradius build dep on autoconf-archive with changes to
autoconf/autoheader m4 include path instead (the m4 files were there, just not
being picked up). While there, update to a newer 3.0.x snapshot to fix a crash
when using raddebug with a condition matching on regexp.
2016-07-05 12:04:41 +00:00
espie
1d55a231e7 add is-branch to all trivial ports that exist as multiple branches. 2016-06-29 16:14:38 +00:00
sthen
1640f5d491 needs libtool m4 files as well 2016-06-28 12:24:38 +00:00
nigel
bb7f3b1bbb Two BUILD_DEPENDS= change 2nd to +=
Ok shen@
2016-06-28 10:39:36 +00:00
sthen
b38dcc320b switch to a 3.0.x snapshot of freeradius, it's fairly low risk and fixes
a few problems with 3.0.11 that are worth getting in before 6.0.
2016-06-27 20:35:31 +00:00
naddy
deea7ed07b drop SHARED_ONLY from python and ruby ports 2016-03-20 16:12:22 +00:00
naddy
ce859edcb4 garbage collect CONFIGURE_SHARED 2016-03-11 20:28:21 +00:00
sthen
260738232d update to freeradius-3.0.11 2016-01-25 20:32:15 +00:00
sthen
fdf2629360 cleanup patches (better comments, etc). remove bogus patch to sample config. 2015-12-10 09:56:45 +00:00
sthen
3a4b7c1c36 more @samples for the config files for freeradius3's subpackaged modules 2015-11-30 22:01:43 +00:00
sthen
125ec3d2b7 cherrypick a patch from upstream: create user-name from peer ID correctly 2015-11-27 13:13:07 +00:00
sthen
9795522f15 getpwnam -> getpwnam_shadow 2015-11-19 14:19:05 +00:00
sthen
6d1a00257d bump 2015-11-12 15:27:46 +00:00
sthen
61f0f99da7 Adapt freeradius3 to the yubico reorg, and depend on yubico-c-client.
Other minor tweaks while there (PLIST shuffle, rm .orig file).
2015-11-12 15:27:11 +00:00
sthen
c0c0d89ade Import ports/net/freeradius3, in parallel with net/freeradius (configuration
has changed and isn't directly compatible, additionally future 3.x releases
might well restrict arch support). Feedback gsoares, feedback/ok jca@.
2015-11-12 12:59:37 +00:00