summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-support/openvpn
Commit message (Collapse)AuthorAgeFilesLines
* openvpn: upgrade 2.6.13 -> 2.6.14Wang Mingyu2025-04-071-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.12 -> 2.6.13Wang Mingyu2025-01-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== - Refuse clients if username or password is longer than USER_PASS_LEN - Improve peer fingerprint documentation - console_systemd: remove the timeout when using 'systemd-ask-password' - Fix missing spaces in various messages - GHA: Update macOS runners - GHA: Simplify macOS builds - Various typo fixes - forward: Fix potential unaligned access in drop_if_recursive_routing - send uname() release as IV_PLAT_VER= on non-windows versions - preparing release 2.6.13 - Route: remove incorrect routes on exit - Use a more robust way to get dco-win version - Fix check_addr_clash argument order - Add calls to nvlist_destroy to avoid leaks - proxy.c: Clear sensitive data after use - Protect cached username, password and token on client - Fix more of uninitialized struct user_pass local vars - Fix IPv6 in port-share journal - Fix port-share journal doc Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: add ptest supportJiaying Song2024-11-192-2/+51
| | | | | | | | | | | | | | | | | | | | | | | | | All test cases PASS. Add openvpn to PTESTS_SLOW because test duration longer than 30s Below is parts of the run log: [==========] xkey provider tests: Running 3 test(s). [ RUN ] xkey_provider_test_fetch [ OK ] xkey_provider_test_fetch [ RUN ] xkey_provider_test_mgmt_sign_cb [ OK ] xkey_provider_test_mgmt_sign_cb [ RUN ] xkey_provider_test_generic_sign_cb [ OK ] xkey_provider_test_generic_sign_cb [==========] xkey provider tests: 3 test(s) run. [ PASSED ] 3 test(s). PASS: provider_testdriver The files t_client.sh.in and t_cltsrv.sh were not added because they require specific environment configuration files. It is recommended that users configure these based on their environment before testing. Since the recipe enables iproute2, the condition for t_net.sh based on HAVE_SITNL is not met, so t_net.sh will not be included in the build. Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.11 -> 2.6.12Wang Mingyu2024-08-092-4/+4
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.10 -> 2.6.11Wang Mingyu2024-06-272-7/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0001-configure.ac-eliminate-build-path-from-openvpn-versi.patch refreshed for 2.6.11 Changelog: ============= - Implement server_poll_timeout for socks - Use snprintf instead of sprintf for get_ssl_library_version - Add bracket in fingerprint message and do not warn about missing verification - Replace macos11 with macos14 in github runners - Only run coverity scan in OpenVPN/OpenVPN repository - Workaround issue in LibreSSL crashing when enumerating digests/ciphers - Properly handle null bytes and invalid characters in control messages - Allow to set ifmode for existing DCO interfaces in FreeBSD - samples: Update sample configurations - documentation: make section levels consistent - phase2_tcp_server: fix Coverity issue 'Dereference after null check' - script-options.rst: Update ifconfig_* variables - LZO: do not use lzoutils.h macros - Remove "experimental" denotation for --fast-io - Implement Windows CA template match for Crypto-API selector - misc.c: remove unused code - interactive.c: Improve access control for gui<->service pipe - Only schedule_exit() once Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Start WORKDIR -> UNPACKDIR transitionKhem Raj2024-05-231-1/+1
| | | | | | | Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.9 -> 2.6.10Yi Zhao2024-03-211-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: Update copyright years to 2024 ChangeLog: https://github.com/OpenVPN/openvpn/blob/v2.6.10/Changes.rst Security fixes: CVE-2024-27459: Windows: fix a possible stack overflow in the interactive service component which might lead to a local privilege escalation. CVE-2024-24974: Windows: disallow access to the interactive service pipe from remote computers. CVE-2024-27903: Windows: disallow loading of plugins from untrusted installation paths, which could be used to attack openvpn.exe via a malicious plugin. Plugins can now only be loaded from the OpenVPN install directory, the Windows system directory, and possibly from a directory specified by HKLM\SOFTWARE\OpenVPN\plugin_dir. CVE-2024-1305: Windows TAP driver: Fix potential integer overflow in !TapSharedSendPacket. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.7 -> 2.6.9Yi Zhao2024-03-021-2/+2
| | | | | | | | | | | | License-Update: Remove conditional text for Apache2 linking exception[1] ChangeLog: https://github.com/OpenVPN/openvpn/blob/v2.6.9/Changes.rst [1] https://github.com/OpenVPN/openvpn/commit/20bc8bd5af9d1ee0489d0ee58ae9c2c2f9b0cf9f Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.6 -> 2.6.7Wang Mingyu2023-11-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ dco: fix crash when --multihome is used with --proto tcp Mock openvpn_exece on win32 also for test_tls_crypt Add warning for the --show-groups command that some groups are missing Print peer temporary key details Add warning if a p2p NCP client connects to a p2mp server Remove openssl engine method for loading the key Remove saving initial frame code Double check that we do not use a freed buffer when freeing a session Fix using to_link buffer after freed GHA: do not trigger builds in openvpn-build anymore GHA: new workflow to submit scan to Coverity Scan service buffer: use memcpy in buf_catrunc vcpkg-ports/pkcs11-helper: Backport MinGW series from master to release/2.6 CMake: backport CMake buildsystem from master to release/2.6 Remove all traces of the previous MSVC build system doc: fix argument name in --route-delay documentation dns option: remove support for exclude-domains Warn user if INFO control command is too long dco-win: get driver version dco: warn if DATA_V1 packets are sent to userspace Make cert_data.h and test_cryptoapi/pkcs11.c MSVC compliant Log OpenSSL errors on failure to set certificate configure: disable engines if OPENSSL_NO_ENGINE is defined Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.3 -> 2.6.6Khem Raj2023-11-061-2/+2
| | | | | | License-Update: Added Apache2 linking exception Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cve_check: convert CVE_CHECK_IGNORE to CVE_STATUSAndrej Valek2023-07-271-2/+1
| | | | | | | | | - Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.2 -> 2.6.3Wang Mingyu2023-04-171-1/+1
| | | | | | | | | | | | | Changelog: ========== GHA: remove Ubuntu 18.04 builds vcpkg: request "tools" feature of openssl for MSVC build doc: run rst2* with --strict to catch warnings Support of DNS domain for DHCP-less drivers Bug-fix: segfault in dco_get_peer_stats() Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.1 -> 2.6.2Wang Mingyu2023-04-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== dco: don't use NetLink to exchange control packets dco: print version to log if available dco-linux: remove M_ERRNO flag when printing netlink error message multi: don't call DCO APIs if DCO is disabled dco-freebsd: use m->instances[] instead of m->hash dco-linux: implement dco_get_peer_stats{, multi} API Set netlink socket to be non-blocking Ensure n = 2 is set in key2 struct in tls_crypt_v2_unwrap_client_key Fix memory leaks in open_tun_dco() Fix memory leaks in HMAC initial packet generation Use key_state instead of multi for tls_send_payload parameter Make sending plain text control message session aware Only update frame calculation if we have a valid link sockets Improve description of compat-mode Simplify --compress parsing in options.c Refuse connection if server pushes an option contradicting allow-compress Add 'allow-compression stub-only' internally for DCO Parse compression options and bail out when compression is disabled tests/unit_tests: Fix 'make distcheck' with subdir-objects enabled preparing release 2.6.2 dns option: allow up to eight addresses per server dco: print FreeBSD version Support --inactive option for DCO Fix '--inactive <time> 0' behavior for DCO Print DCO client stats on SIGUSR2 Don't overwrite socket flags when using DCO on Windows using OpenSSL3 API for EVP PKEY type name reporting Bugfix: Convert ECDSA signature form pkcs11-helper to DER encoded form Import some sample certificates into Windows store for testing Add tests for finding certificates in Windows cert store Refactor SSL_CTX_use_CryptoAPI_certificate() Add a test for signing with certificates in Windows store Unit tests: add test for SSL_CTX_use_Cryptoapi_certificate() Improve error message on short read from socks proxy Make error in setting metric for IPv6 interface non-fatal Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.0 -> 2.6.1Petr Gotthard2023-03-101-1/+1
| | | | | | | | Changelog: https://github.com/OpenVPN/openvpn/blob/v2.6.1/Changes.rst Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.8 -> 2.6.0Petr Gotthard2023-02-241-3/+3
| | | | | | | | | | | | | | | | | | | New features and improvements in 2.6.0 compared to 2.5.8: - Data Channel Offload (DCO) kernel acceleration support for Windows, Linux, and FreeBSD. - OpenSSL 3 support. - Improved handling of tunnel MTU, including support for pushable MTU. - Outdated cryptographic algorithms disabled by default, but there are options to override if necessary. - Reworked TLS handshake, making OpenVPN immune to replay-packet state exhaustion attacks. - Added --peer-fingerprint mode for a more simplistic certificate setup and verification. - Added Pre-Logon Access Provider support to OpenVPN GUI for Windows. - Improved protocol negotiation, leading to faster connection setup. Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.7 -> 2.5.8Wang Mingyu2022-11-091-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== tls-crypt-v2: bail out if the client key is too small Remove useless empty line from CR_RESPONSE message Allow running a default configuration with TLS libraries without BF-CBC Change command help to match man page and implementation Fix OpenVPN querying user/password if auth-token with user expires t_client: Allow to force FAIL on prerequisite fails t_client.sh: do not require fping6 Preparing release 2.5.8 msvc: add branch name and commit hash to version output Update the replay-window backtrack log message Do not skip ERROR:/SUCCESS: response from management interface Fix auth-token usage with management-def-auth Allow a few levels of recursion in virtual_output_callback() Ensure --auth-nocache is handled during renegotiation Purge auth-token as well while purging passwords Do not copy auth_token username to itself Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: distribute sample-config-filesAlex Stewart2022-07-081-0/+4
| | | | | | | | | | | | | | | The openvpn tarball has additional sample config files which are generally useful to users, and which are typically distributed in other distros' openvpn packages. Include these sample configs in the OE recipe. Signed-off-by: Bill Pittman <bill.pittman@ni.com> Rebased to openvpn_2.5.7. Signed-off-by: Alex Stewart <alex.stewart@ni.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: add PACKAGECONFIG for selinuxYi Zhao2022-07-071-0/+2
| | | | | | | This is useful for selinux distro feature. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: add PACKAGECONFIG for systemdYi Zhao2022-07-074-40/+22
| | | | | | | | The systemd support had been integrated to openvpn for a long time. Add PACKAGECONFIG for it and use its own service files and volatile file. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: eliminate build path from openvpn --version optionYi Zhao2022-06-302-0/+49
| | | | | | | | | | | | | | | | | | | | | | | | Before the patch: $ openvpn --version OpenVPN 2.5.7 x86_64-poky-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [snip] Compile time defines: enable_async_push=no enable_comp_stub=no [snip] with_crypto_library=openssl with_gnu_ld=yes with_libtool_sysroot=/buildarea/build/tmp/work/core2-64-poky-linux/openvpn/2.5.7-r0/recipe-sysroot with_mem_check=no with_openssl_engine=auto After the patch: $ openvpn --version OpenVPN 2.5.7 x86_64-poky-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [snip] Compile time defines: enable_async_push=no enable_comp_stub=no [snip] with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_openssl_engine=auto Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.6 -> 2.5.7Wang Mingyu2022-06-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= networking: use OPENVPN_ETH_ALEN instead of ETH_ALEN networking_iproute2: don't pass M_WARN to openvpn_execve_check() t_net.sh: delete dummy iface using iproute command auth-pam.c: add missing include limits.h Add insecure tls-cert-profile options Refactor early initialisation and uninitialisation into methods Allow loading of non default providers Add ubuntu 22.04 to Github Actions Add macos OpenSSL 3.0 and ASAN builds Add --with-openssl-engine autoconf option (auto|yes|no) Fix allowing/showing unsupported ciphers and digests Remove dependency on BF-CBC existance from test_ncp Add message when decoding PKCS12 file fails. Translate OpenSSL 3.0 digest names to OpenSSL 1.1 digest names Fix client-pending-auth error message to say ERROR instead of SUCCESS Preparing release 2.5.7 cipher-negotiation.rst missing from doc/Makefile.am vcpkg-ports\pkcs11-helper: shorten patch filename msvc: adjust build options to harden binaries vcpkg-ports: remove openssl port vcpkg: switch to manifest Fix M_ERRNO behavior on Windows vcpkg-ports/pkcs11-helper: bump to release 1.29 tapctl: Resolve MSVC C4996 warnings Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.5 -> 2.5.6wangmy2022-03-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Liense-Update : year updated to 2022. Changelog: ========= GitHub Actions: update script to same version as master update copyright year to 2022 keyingmaterialexporter.c: include strings.h remove unused sitnl.h file sample-plugin: New plugin for testing multiple auth plugins plug-ins: Disallow multiple deferred authentication plug-ins doc/Makefile: rebuild rst docs if input files change doc/options: clean up documentation for --proto and related options fix Changes.rst errors in 2.5.3 and 2.5.5 announcement Repair --inactive with 'bytes' argument larger 2Gbytes. Fix --mtu-disc maybe|yes on Linux. Preparing release 2.5.6 CI: github actions: keep "pdb" in artifacts auth_token.c: add NULL initialization vcpkg-ports/pkcs11-helper: bump to release 1.28 vcpkg-ports/pkcs11-helper: indicate OpenSSL EC support msvc: cleanup vcpkg: link lzo statically vcpkg-ports/pkcs11-helper: adapt to new upstream URL vcpkg-ports: add openssl 1.1.1n Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Update LICENSE variable to use SPDX license identifiersKhem Raj2022-03-041-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Use new CVE_CHECK_IGNORE variableKhem Raj2022-02-211-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.4 -> 2.5.5zhengruoqin2021-12-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= Fix error in example firewall.sh script configure: remove useless -Wno-* from default CFLAGS Add argv_insert_head__empty_argv__head_only to argv tests Move deprecation of SWEET32/64bit block size ciphers to 2.7 Include --push-remove in the output of --help. Move '--push-peer-info' documentation from 'server' to 'client options' add test case(s) to notice 'openvpn --show-cipher' crashing BUILD: enable CFG and Spectre mitigation for MSVC Fix loading PKCS12 files on Windows msvc: fix product version display msvc: add missing header to project file config-msvc.h: fix OpenSSL-related defines contrib/vcpkg-ports: remove openssl port GitHub Actions: use latest working lukka/run-vcpkg Use network address for emulated DHCP server as a default Load OpenSSL config on Windows from trusted location ring_buffer.h: fix GCC warning about unused function ssh_openssl.h: remove unused declaration vcpkg/pkcs11-helper: compatibility with latest vcpkg config-msvc.h: indicate key material export support Don't use BF-CBC in unit tests if we don't have it Define have_blowfish variable in ncp unit tests doc link-options.rst: Use free open-source dynamic-DNS provider URL Fix some more wrong defines in config-msvc.h Ensure the current common_name is in the environment for scripts Require EC key support in Windows builds resolvconf fails with -p Update IRC information in CONTRIBUTING.rst doc/man (vpn-network-options): fix foreign_option_{n} typo README.down-root: Fix plugin module name Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: Change the default cipher to AES-256-GCM for server configurationswangmy2021-11-151-1/+1
| | | | | | | | | | | | | | This change makes the server use AES-256-GCM instead of BF-CBC as the default cipher for the VPN tunnel. To avoid breaking existing running configurations defaulting to BF-CBC, the Negotiable Crypto Parameters (NCP) list contains the BF-CBC in addition to AES-CBC. This makes it possible to migrate existing older client configurations one-by-one to use at least AES-CBC unless the client is updated to v2.4 (which defaults to upgrade to AES-GCM automatically) Upstream-Status: Backport [https://src.fedoraproject.org/rpms/openvpn/blob/rawhide/f/0001-Change-the-default-cipher-to-AES-256-GCM-for-server-.patch] Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.3 -> 2.5.4wangmy2021-10-141-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2021.10.04 -- Version 2.5.4 Antonio Quartulli (3): route.c: pass the right parameter to IN6_IS_ADDR_UNSPECIFIED configure: search also for rst2{man, html}.py networking: add networking API net_addr_ll_set() and use it on Linux Arne Schwabe (1): Move examples into openvpn-examples(5) man page David Korczynski (1): Fix argv leaks in add_route() and add_route_ipv6() David Sommerseth (2): doc: Use generic rules for man/html generation man: Clarify IV_HWADDR Gert Doering (1): Add error reporting to get_console_input_win32(). Lev Stipakov (3): Fix console prompts with redirected log Add building man page on Windows GitHub Actions: remove Ubuntu 16.04 environment Max Fillinger (1): Update Fox e-mail address in copyright notices Selva Nair (1): Minor doc correction: tls-crypt-v2 key generation Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Convert to new override syntaxMartin Jansa2021-08-031-8/+8
| | | | | | | | | | This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* openvpn: add CVE-2020-7224 and CVE-2020-27569 to allowlistAkifumi Chikazawa2021-06-261-0/+3
| | | | | | | | CVE-2020-7224 and CVE-2020-27569 are for Aviatrix OpenVPN client, not for openvpn. Signed-off-by: Akifumi Chikazawa <chikazawa.akifu@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.2 -> 2.5.3zangrc2021-06-231-3/+3
| | | | | | | -License-Update: Copyright year updated to 2021. Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.1 -> 2.5.2zangrc2021-04-291-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.0 -> 2.5.1zangrc2021-03-041-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.4.9 -> 2.5.0Zang Ruochen2020-11-091-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.4.8 -> 2.4.9Andreas Müller2020-05-031-2/+2
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: fix upstream check URLPierre-Jean Texier2020-03-241-0/+2
| | | | | | | | | | | | Fixes: $: devtool check-upgrade-status openvpn <...> INFO: openvpn 2.4.8 UNKNOWN_BROKEN None Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.4.7 -> 2.4.8Pierre-Jean Texier2020-03-241-2/+2
| | | | | | | See full changelog https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: respect pid file in init.d service startFabian Klemp2019-07-301-2/+10
| | | | | | | | | | | | | openvpn only provides options to update a pid file but not to check it for running processes. Consecutive issued start commands therefore lead to multiple running processes with the same configurations, which is the origin of all kinds of problems of which unnecessary resource usage is the least. Using start-stop-daemon the pid file is inspected for running processes before start. Signed-off-by: Fabian Klemp <fabian.klemp@axino-group.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: update to 2.4.7Oleksandr Kravchuk2019-05-111-3/+3
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: update to 2.4.6Armin Kuster2018-10-091-3/+3
| | | | | | | | | | LIC_FILES_CHKSUM changed do to "Update copyright to include 2018 plus company name change" includes: CVE-2018-9336 see: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: enable sysvinitArmin Kuster2018-10-081-1/+5
| | | | | | | add INITSCRIPT Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: Upgrade 2.4.3 -> 2.4.4fan.xin2018-01-081-2/+2
| | | | | | Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* openvpn: 2.4.2 -> 2.4.3Kai Kang2017-09-121-3/+3
| | | | | | | | Upgrade openvpn from 2.4.2 to 2.4.3. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* openvpn: Upgrade 2.3.9 -> 2.4.2fan.xin2017-06-281-3/+3
| | | | | | Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* openvpn: avoid hardcoded pathAndrea Galbusera2017-04-251-1/+1
| | | | | | Signed-off-by: Andrea Galbusera <gizero@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* openvpn: avoid packaging /runAndrea Galbusera2017-04-251-1/+1
| | | | | | | | /run is in FILES_${PN} but nothing either populate or even create it. Signed-off-by: Andrea Galbusera <gizero@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* openvpn: openvpn-volatile.conf: avoid hardcoded localstatedirAndrea Galbusera2017-04-252-1/+2
| | | | | | Signed-off-by: Andrea Galbusera <gizero@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* openvpn: remove duplicate attempt to create dir in ${localstatedir}Andrea Galbusera2017-04-251-2/+0
| | | | | | | | | | | | | | | | | | When systemd is in DISTRO_FEATURES we have two attempts to create ${localstatedir}/run/openvpn: one at build time with install command and the other via systemd-tmpfiles at runtime which is enabled by installing openvpn-volatile.conf. Beside looking redundant, by dropping the build-time dir creation attempt solves the following error when building images with both base-files and openvpn: Error: Transaction check error: file /var/run conflicts between attempted installs of openvpn-2.3.9-r0.cortexa7hf_neon_vfpv4 and base-files-3.0.14-r89.raspberrypi3 Signed-off-by: Andrea Galbusera <gizero@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* openvpn: ensure ${sysconfdir}/tmpfiles.d is packagedAndrea Galbusera2017-04-251-0/+1
| | | | | | | | | The file was installed but never packaged, ending up in no systemd-tmpfiles configuration on the final rootfs. Signed-off-by: Andrea Galbusera <gizero@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* openvpn: 2.3.8 -> 2.3.9Wang Xin2016-09-051-3/+3
| | | | | | | | | | | | | | 1) Upgrade openvpn from 2.3.8 to 2.3.9. 2) Modify EXTRA_OECONF, Since the Changelog in the new version shows: Remove --enable-password-save option Reflect enable-password-save change in documentation Also remove second instance of enable-password-save in the man page 3) Fix the Warning: WARNING: openvpn-2.3.9-r0 do_configure: QA Issue: openvpn: configure was passed unrecognised options: --enable-password-save [unknown-configure-option] Signed-off-by: Wang Xin <wangxin2015.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* meta-networking: use bb.utils.contains() instead of base_contains()Ross Burton2016-05-051-3/+3
| | | | | | | | | base_contains() is a compatibility wrapper and may warn in the future, so replace all instances with bb.utils.contains(). Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-22 02:50:14 +0000