OpenWrt
/
packages
mirror of https://git.openwrt.org/feed/packages.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

freeradius3: update version 3.2.5 

Signed-off-by: Esaaprilia Salsabila <esaapriliasalsabila@gmail.com>
This commit is contained in:
Esaaprilia Salsabila 2024-07-19 08:27:45 +08:00 committed by Rosen Penev
parent 302dbe731d
commit 66f193181f
3 changed files with 13 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
net/freeradius3/Makefile
View File

@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk include $(TOPDIR)/rules.mk
PKG_NAME:=freeradius3 PKG_NAME:=freeradius3
PKG_VERSION:=3.2.4 PKG_VERSION:=3.2.5
PKG_RELEASE:=2 PKG_RELEASE:=1
PKG_SOURCE:=freeradius-server-$(PKG_VERSION).tar.gz PKG_SOURCE:=freeradius-server-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://freeradius.org/ftp/pub/freeradius PKG_SOURCE_URL:=https://freeradius.org/ftp/pub/freeradius
PKG_HASH:=fdd476949f3c991c19f14ef7199b522e5204896d139c69946381dce9b8922941 PKG_HASH:=1e75f5fc1961d9854d1cb3c6921612fbe2b9edb8ee508a5a7cbd69f1e7607115
PKG_MAINTAINER:= PKG_MAINTAINER:=
PKG_LICENSE:=GPL-2.0 PKG_LICENSE:=GPL-2.0
@ -21,7 +21,6 @@ PKG_LICENSE_FILES:=COPYRIGHT LICENSE
PKG_CPE_ID:=cpe:/a:freeradius:freeradius PKG_CPE_ID:=cpe:/a:freeradius:freeradius
PKG_BUILD_DIR:=$(BUILD_DIR)/freeradius-server-$(PKG_VERSION) PKG_BUILD_DIR:=$(BUILD_DIR)/freeradius-server-$(PKG_VERSION)
PKG_BUILD_PARALLEL:=0
PKG_FIXUP:=autoreconf PKG_FIXUP:=autoreconf
PYTHON3_PKG_BUILD:=0 PYTHON3_PKG_BUILD:=0

8
net/freeradius3/patches/002-disable-session-cache-CVE-2017-9148.patch
View File

@ -9,7 +9,7 @@ Last-Update: 2020-04-28
--- a/src/main/tls.c --- a/src/main/tls.c
+++ b/src/main/tls.c +++ b/src/main/tls.c
@@ -954,7 +954,7 @@ after_chain: @@ -956,7 +956,7 @@ after_chain:
} }
if (vp) vp->vp_integer = state->mtu; if (vp) vp->vp_integer = state->mtu;
@ -18,7 +18,7 @@ Last-Update: 2020-04-28
return state; return state;
} }
@@ -4517,7 +4517,7 @@ post_ca: @@ -4515,7 +4515,7 @@ post_ca:
/* /*
* Callbacks, etc. for session resumption. * Callbacks, etc. for session resumption.
*/ */
@ -27,7 +27,7 @@ Last-Update: 2020-04-28
/* /*
* Cache sessions on disk if requested. * Cache sessions on disk if requested.
*/ */
@@ -4597,7 +4597,7 @@ post_ca: @@ -4595,7 +4595,7 @@ post_ca:
/* /*
* Setup session caching * Setup session caching
*/ */
@ -36,7 +36,7 @@ Last-Update: 2020-04-28
/* /*
* Create a unique context Id per EAP-TLS configuration. * Create a unique context Id per EAP-TLS configuration.
*/ */
@@ -4885,7 +4885,7 @@ fr_tls_server_conf_t *tls_server_conf_pa @@ -4883,7 +4883,7 @@ fr_tls_server_conf_t *tls_server_conf_pa
goto error; goto error;
} }

12
net/freeradius3/patches/010-openssl-deprecated.patch
View File

@ -26,7 +26,7 @@
#if OPENSSL_VERSION_NUMBER >= 0x30000000L #if OPENSSL_VERSION_NUMBER >= 0x30000000L
# include <openssl/provider.h> # include <openssl/provider.h>
@@ -2998,7 +2999,7 @@ int cbtls_verify(int ok, X509_STORE_CTX @@ -2996,7 +2997,7 @@ int cbtls_verify(int ok, X509_STORE_CTX
int my_ok = ok; int my_ok = ok;
ASN1_INTEGER *sn = NULL; ASN1_INTEGER *sn = NULL;
@ -35,7 +35,7 @@
VALUE_PAIR **certs; VALUE_PAIR **certs;
char **identity; char **identity;
#ifdef HAVE_OPENSSL_OCSP_H #ifdef HAVE_OPENSSL_OCSP_H
@@ -3089,7 +3090,7 @@ int cbtls_verify(int ok, X509_STORE_CTX @@ -3087,7 +3088,7 @@ int cbtls_verify(int ok, X509_STORE_CTX
* Get the Expiration Date * Get the Expiration Date
*/ */
buf[0] = '\0'; buf[0] = '\0';
@ -44,7 +44,7 @@
if (certs && (lookup <= 1) && asn_time && if (certs && (lookup <= 1) && asn_time &&
(asn_time->length < (int) sizeof(buf))) { (asn_time->length < (int) sizeof(buf))) {
memcpy(buf, (char*) asn_time->data, asn_time->length); memcpy(buf, (char*) asn_time->data, asn_time->length);
@@ -3102,7 +3103,7 @@ int cbtls_verify(int ok, X509_STORE_CTX @@ -3100,7 +3101,7 @@ int cbtls_verify(int ok, X509_STORE_CTX
* Get the Valid Since Date * Get the Valid Since Date
*/ */
buf[0] = '\0'; buf[0] = '\0';
@ -53,7 +53,7 @@
if (certs && (lookup <= 1) && asn_time && if (certs && (lookup <= 1) && asn_time &&
(asn_time->length < (int) sizeof(buf))) { (asn_time->length < (int) sizeof(buf))) {
memcpy(buf, (char*) asn_time->data, asn_time->length); memcpy(buf, (char*) asn_time->data, asn_time->length);
@@ -3666,10 +3667,12 @@ static int set_ecdh_curve(SSL_CTX *ctx, @@ -3664,10 +3665,12 @@ static int set_ecdh_curve(SSL_CTX *ctx,
*/ */
int tls_global_init(TLS_UNUSED bool spawn_flag, TLS_UNUSED bool check) int tls_global_init(TLS_UNUSED bool spawn_flag, TLS_UNUSED bool check)
{ {
@ -66,7 +66,7 @@
/* /*
* Initialize the index for the certificates. * Initialize the index for the certificates.
@@ -3769,6 +3772,7 @@ int tls_global_version_check(char const @@ -3767,6 +3770,7 @@ int tls_global_version_check(char const
*/ */
void tls_global_cleanup(void) void tls_global_cleanup(void)
{ {
@ -74,7 +74,7 @@
#if OPENSSL_VERSION_NUMBER < 0x10000000L #if OPENSSL_VERSION_NUMBER < 0x10000000L
ERR_remove_state(0); ERR_remove_state(0);
#elif OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) #elif OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER)
@@ -3794,6 +3798,7 @@ void tls_global_cleanup(void) @@ -3792,6 +3796,7 @@ void tls_global_cleanup(void)
ERR_free_strings(); ERR_free_strings();
EVP_cleanup(); EVP_cleanup();
CRYPTO_cleanup_all_ex_data(); CRYPTO_cleanup_all_ex_data();