Hello community, here is the log from the commit of package ocserv for openSUSE:Factory checked in at 2018-02-26 23:25:39 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ocserv (Old) and /work/SRC/openSUSE:Factory/.ocserv.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ocserv" Mon Feb 26 23:25:39 2018 rev:5 rq:580001 version:0.11.10 Changes: -------- --- /work/SRC/openSUSE:Factory/ocserv/ocserv.changes 2017-05-31 12:20:03.105778390 +0200 +++ /work/SRC/openSUSE:Factory/.ocserv.new/ocserv.changes 2018-02-26 23:25:39.797230750 +0100 @@ -1,0 +2,10 @@ +Sat Feb 24 05:43:55 UTC 2018 - [email protected] + +- update version 0.11.10 + * see NEWS +- drop boo1021353-ocserv-doc-racing-in-parallel-build.patch + * upstreamed +- add ocserv-LZ4_compress_default.patch + * leap doesn't have LZ4_compress_default + +------------------------------------------------------------------- Old: ---- boo1021353-ocserv-doc-racing-in-parallel-build.patch ocserv-0.11.6.tar.xz New: ---- ocserv-0.11.10.tar.xz ocserv-LZ4_compress_default.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ocserv.spec ++++++ --- /var/tmp/diff_new_pack.lctHIA/_old 2018-02-26 23:25:40.897191190 +0100 +++ /var/tmp/diff_new_pack.lctHIA/_new 2018-02-26 23:25:40.901191046 +0100 @@ -1,7 +1,7 @@ # # spec file for package ocserv # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: ocserv -Version: 0.11.6 +Version: 0.11.10 Release: 0 Summary: OpenConnect VPN Server License: GPL-2.0 @@ -38,8 +38,8 @@ Patch1: %{name}-enable-systemd.patch #PATCH-FIX-UPSTREAM [email protected] tweak configuration Patch2: %{name}.config.patch -#PATCH-FIX-UPSTREAM [email protected] avoid racing problem when building documentation in parallel -Patch3: boo1021353-ocserv-doc-racing-in-parallel-build.patch +#PATCH-FIX-OPENSUSE [email protected] leap doesn't have LZ4_compress_default +Patch3: %{name}-LZ4_compress_default.patch BuildRequires: autogen BuildRequires: dbus-1-devel BuildRequires: freeradius-client-devel ++++++ ocserv-0.11.6.tar.xz -> ocserv-0.11.10.tar.xz ++++++ ++++ 87129 lines of diff (skipped) ++++++ ocserv-LZ4_compress_default.patch ++++++ Index: ocserv-0.11.10/src/worker-http.c =================================================================== --- ocserv-0.11.10.orig/src/worker-http.c +++ ocserv-0.11.10/src/worker-http.c @@ -137,7 +137,11 @@ int lz4_compress(void *dst, int dstlen, { /* we intentionally restrict output to srclen so that * compression fails early for packets that expand. */ +#ifdef LZ4_COMPRESS_DEFAULT return LZ4_compress_default(src, dst, srclen, srclen); +#else + return LZ4_compress_limitedOutput(src, dst, srclen, srclen); +#endif } #endif ++++++ ocserv.config.patch ++++++ --- /var/tmp/diff_new_pack.lctHIA/_old 2018-02-26 23:25:41.345175079 +0100 +++ /var/tmp/diff_new_pack.lctHIA/_new 2018-02-26 23:25:41.345175079 +0100 @@ -1,8 +1,8 @@ -Index: b/doc/sample.config +Index: ocserv-0.11.10/doc/sample.config =================================================================== ---- a/doc/sample.config -+++ b/doc/sample.config -@@ -41,7 +41,7 @@ +--- ocserv-0.11.10.orig/doc/sample.config ++++ ocserv-0.11.10/doc/sample.config +@@ -47,7 +47,7 @@ #auth = "pam" #auth = "pam[gid-min=1000]" #auth = "plain[passwd=./sample.passwd,otp=./sample.otp]" @@ -11,7 +11,7 @@ #auth = "certificate" #auth = "radius[config=/etc/radiusclient/radiusclient.conf,groupconfig=true]" -@@ -74,8 +74,8 @@ auth = "plain[passwd=./sample.passwd]" +@@ -80,8 +80,8 @@ auth = "plain[passwd=./sample.passwd]" #listen-host-is-dyndns = true # TCP and UDP port number @@ -22,7 +22,7 @@ # Accept connections using a socket file. It accepts HTTP # connections (i.e., without SSL/TLS unlike its TCP counterpart), -@@ -110,8 +110,8 @@ socket-file = /var/run/ocserv-socket +@@ -124,8 +124,8 @@ socket-file = /var/run/ocserv-socket # # There may be multiple server-cert and server-key directives, # but each key should correspond to the preceding certificate. @@ -33,7 +33,7 @@ # Diffie-Hellman parameters. Only needed if you require support # for the DHE ciphersuites (by default this server supports ECDHE). -@@ -137,7 +137,7 @@ server-key = ../tests/certs/server-key.p +@@ -151,7 +151,7 @@ server-key = ../tests/certs/server-key.p # The Certificate Authority that will be used to verify # client certificates (public keys) if certificate authentication # is set. @@ -42,7 +42,7 @@ ### All configuration options below this line are reloaded on a SIGHUP. -@@ -157,7 +157,7 @@ ca-cert = ../tests/certs/ca.pem +@@ -171,7 +171,7 @@ ca-cert = ../tests/certs/ca.pem # the isolation was tested at. If you get random failures on worker processes, try # disabling that option and report the failures you, along with system and debugging # information at: https://gitlab.com/ocserv/ocserv/issues @@ -51,8 +51,8 @@ # A banner to be displayed on clients #banner = "Welcome" -@@ -204,7 +204,7 @@ dpd = 90 - mobile-dpd = 1800 +@@ -234,7 +234,7 @@ mobile-dpd = 1800 + switch-to-tcp-timeout = 25 # MTU discovery (DPD must be enabled) -try-mtu-discovery = false @@ -60,7 +60,7 @@ # If you have a certificate from a CA that provides an OCSP # service you may provide a fresh OCSP status response within -@@ -362,8 +362,8 @@ rekey-method = ssl +@@ -398,8 +398,8 @@ rekey-method = ssl # STATS_BYTES_OUT, STATS_DURATION that contain a 64-bit counter of the bytes # output from the tun device, and the duration of the session in seconds. @@ -71,7 +71,7 @@ # UTMP # Register the connected clients to utmp. This will allow viewing -@@ -433,7 +433,8 @@ ipv4-netmask = 255.255.255.0 +@@ -469,7 +469,8 @@ ipv4-netmask = 255.255.255.0 # The advertized DNS server. Use multiple lines for # multiple servers. # dns = fc00::4be0 @@ -81,7 +81,7 @@ # The NBNS server (if any) #nbns = 192.168.1.3 -@@ -472,8 +473,8 @@ ping-leases = false +@@ -508,8 +509,8 @@ ping-leases = false # comment out all routes from the server, or use the special keyword # 'default'. @@ -92,10 +92,10 @@ #route = fef4:db8:1000:1001::/64 #route = default -Index: b/doc/systemd/socket-activated/ocserv.socket +Index: ocserv-0.11.10/doc/systemd/socket-activated/ocserv.socket =================================================================== ---- a/doc/systemd/socket-activated/ocserv.socket -+++ b/doc/systemd/socket-activated/ocserv.socket +--- ocserv-0.11.10.orig/doc/systemd/socket-activated/ocserv.socket ++++ ocserv-0.11.10/doc/systemd/socket-activated/ocserv.socket @@ -2,8 +2,8 @@ Description=OpenConnect SSL VPN server Socket
