Hello community, here is the log from the commit of package ocserv for openSUSE:Factory checked in at 2020-07-06 16:33:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ocserv (Old) and /work/SRC/openSUSE:Factory/.ocserv.new.3060 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ocserv" Mon Jul 6 16:33:07 2020 rev:14 rq:818952 version:1.1.0 Changes: -------- --- /work/SRC/openSUSE:Factory/ocserv/ocserv.changes 2020-07-05 01:23:21.393934275 +0200 +++ /work/SRC/openSUSE:Factory/.ocserv.new.3060/ocserv.changes 2020-07-06 16:36:09.608428995 +0200 @@ -1,0 +2,14 @@ +Fri Jul 3 17:34:58 UTC 2020 - Michael Du <duyizhaozj...@yahoo.com> + +- Update to version 1.1.0: + * Switch from fork to fork/exec model to achieve better scaling + and ASLR protection. This introduces an ocserv-worker application + which should be installed at the same path as ocserv (#285). + * When Linux OOM takes control kill ocserv workers before + ocserv-main or ocserv-secmod (#283). + * Disable TCP queuing on the TLS port. + * Fix leak of GnuTLS session when DTLS connection is + re-established (#293). +- Verify source with keyring before build. + +------------------------------------------------------------------- Old: ---- ocserv-1.0.1.tar.xz ocserv-1.0.1.tar.xz.sig ocserv.keyring New: ---- gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg ocserv-1.1.0.tar.xz ocserv-1.1.0.tar.xz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ocserv.spec ++++++ --- /var/tmp/diff_new_pack.lqbvdB/_old 2020-07-06 16:36:10.760432541 +0200 +++ /var/tmp/diff_new_pack.lqbvdB/_new 2020-07-06 16:36:10.764432554 +0200 @@ -17,21 +17,21 @@ Name: ocserv -Version: 1.0.1 +Version: 1.1.0 Release: 0 Summary: OpenConnect VPN Server License: GPL-2.0-only Group: Productivity/Networking/Security URL: http://www.infradead.org/ocserv Source: ftp://ftp.infradead.org/pub/ocserv/%{name}-%{version}.tar.xz -Source100: ftp://ftp.infradead.org/pub/ocserv/%{name}-%{version}.tar.xz.sig -Source101: %{name}.keyring -Source1: ca.tmpl -Source2: server.tmpl -Source3: user.tmpl +Source1: ftp://ftp.infradead.org/pub/ocserv/%{name}-%{version}.tar.xz.sig +Source2: ca.tmpl +Source3: server.tmpl +Source4: user.tmpl Source5: ocserv.sysctl Source6: ocserv.firewalld.xml Source99: README.SUSE +Source100: gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg #PATCH-FIX-UPSTREAM marguer...@opensuse.org $LIBSYSTEMD_DAEMON env is not set on openSUSE Patch1: %{name}-enable-systemd.patch #PATCH-FIX-UPSTREAM marguer...@opensuse.org tweak configuration @@ -45,6 +45,7 @@ %endif BuildRequires: freeradius-client-devel BuildRequires: gperf +BuildRequires: gpg2 BuildRequires: libev-devel BuildRequires: libgnutls-devel >= 3.1.10 BuildRequires: libmaxminddb-devel @@ -89,6 +90,7 @@ A management interface allows for viewing and querying logged-in users. %prep +gpg --import %{SOURCE100} && gpg --verify %{SOURCE1} %setup -q %patch1 -p1 %patch2 -p1 @@ -112,9 +114,9 @@ %endif install -d %{buildroot}%{_sysconfdir}/ocserv/certificates -install -m 0644 %{SOURCE1} %{buildroot}%{_sysconfdir}/ocserv/certificates install -m 0644 %{SOURCE2} %{buildroot}%{_sysconfdir}/ocserv/certificates install -m 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/ocserv/certificates +install -m 0644 %{SOURCE4} %{buildroot}%{_sysconfdir}/ocserv/certificates install -m 0644 %{SOURCE99} %{buildroot}%{_sysconfdir}/ocserv/ install -m 0644 doc/sample.config %{buildroot}%{_sysconfdir}/ocserv/ocserv.conf install -m 0644 doc/sample.passwd %{buildroot}%{_sysconfdir}/ocserv/ocpasswd @@ -156,6 +158,7 @@ %{_bindir}/ocserv-script %{_bindir}/ocserv-fw %{_sbindir}/ocserv +%{_sbindir}/ocserv-worker %{_unitdir}/ocserv.service %{_unitdir}/ocserv.socket %{_mandir}/man8/occtl.8%{ext_man} ++++++ ocserv-1.0.1.tar.xz -> ocserv-1.1.0.tar.xz ++++++ ++++ 9341 lines of diff (skipped)
