From patchwork Thu Feb 23 18:25:27 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Petr Gotthard X-Patchwork-Id: 20056 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 96985C636D6 for ; Thu, 23 Feb 2023 18:25:41 +0000 (UTC) Received: from APC01-PSA-obe.outbound.protection.outlook.com (APC01-PSA-obe.outbound.protection.outlook.com [40.107.255.60]) by mx.groups.io with SMTP id smtpd.web11.18842.1677176734359331258 for ; Thu, 23 Feb 2023 10:25:36 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@advantech.cz header.s=selector1 header.b=CbmjSvMe; spf=pass (domain: advantech.cz, ip: 40.107.255.60, mailfrom: petr.gotthard@advantech.cz) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=krgD2xk4etVfH32OcTqVlCNaUpQc7Y3Cw5CHPfw/WaXeYOvRbHYcoqBHJNKm3Lvmrp14IfspCvhVBJ0SM8wwZKzg7jjKQ0ouRFBSY3TVhPc6zB0WbwKrWbt8b08/UYSCRqay3jII5GIEpIImhhKem26XlSP0S0B+e21Q/tb7yAGPeOLCxDVNJdz0dVAKhbtvbFq4sg/rGVnlPxhLanVDmHscgUui0xf2qEmfgBg9OyI0aJ0Qx4Xzfl8Aag4rLQRmAFJNzXt1Rr+YVtUY5whddzcG2cpyR+BZuIhgKlMhm2Vpkq/VDiCizOgy0ZFhWZk9Plyx/T3862lQC99yQksbSg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=aLd5WLq+F+Pg0Z6hv8dU7KUlUude0Vr38awft8A3G2s=; b=Quyw6yh2Y2L2QBlALz0KAwyiG3mrVnyUXBOsS0wMzRNEeafNNaHyIDrzCQXSwOd61EGEndPKM97cbAWG+eDIud2rmZqn8xmgZDtr/+w8jTQcCVjj52ghZ4fuglGRyDenxygJyvKPtClugyN/O2TKKXzFbZ1QAB8KwwldZN4Az8SRB86EPxa4+PFkxFrNKUd/p7Yi9QYinmTlwziw3C+OaBaP8gSo+0SLS4Cfk/qv0DxIoSQRIqtXfYxwa3B6bgQablPjHQy7opz8yNebskLo9VB+PXkIaO254s2H7/9WLcztCEG7LSwpGIbVj58Vwbt34lp/V0P7LgQL319OTg0kzQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=advantech.cz; dmarc=pass action=none header.from=advantech.cz; dkim=pass header.d=advantech.cz; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=advantech.cz; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aLd5WLq+F+Pg0Z6hv8dU7KUlUude0Vr38awft8A3G2s=; b=CbmjSvMerqApEjgmtg2tne2REjQxp++7F+2O9SgfXvE1dvA7r4bMt1OD988bTN3dqSYz7qTSWYkinrTPTD9czUruTmRmSUKZxVUmBaN3lUD6lzuPKlUBbaYp1J/lhrBEBn5D5ABY2pnb0OmiXO6Mu8uEFPbw93v2h4Qx2ParI5FArSGkcoznvkqF8bGlADPnE1p7WR6Se6FmJLRQ8efNTSLBmHJRXVkM0mZg0xvNi+gRAawz8PrOhoCBg5KnojCkL6AvQPqr+l97ypvUS3Cp2z9tTJzZ24Yi818Hu02HlNFBo2r01fotwlioH7UuNHaC+Xbi/Qp2ssgvC+A9nccxdQ== Received: from TY2PR02MB3678.apcprd02.prod.outlook.com (2603:1096:404:b7::12) by TY0PR02MB5623.apcprd02.prod.outlook.com (2603:1096:400:1b8::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6134.21; Thu, 23 Feb 2023 18:25:27 +0000 Received: from TY2PR02MB3678.apcprd02.prod.outlook.com ([fe80::e2f4:d03b:1736:e417]) by TY2PR02MB3678.apcprd02.prod.outlook.com ([fe80::e2f4:d03b:1736:e417%7]) with mapi id 15.20.6134.021; Thu, 23 Feb 2023 18:25:27 +0000 From: Petr Gotthard To: "openembedded-devel@lists.openembedded.org" Subject: [meta-networking][PATCH] openvpn: upgrade 2.5.8 -> 2.6.0 Thread-Topic: [meta-networking][PATCH] openvpn: upgrade 2.5.8 -> 2.6.0 Thread-Index: AdlHs5gmRk8xdYuhQJuyqMp40aYvww== Date: Thu, 23 Feb 2023 18:25:27 +0000 Message-ID: Accept-Language: en-US Content-Language: cs-CZ X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=advantech.cz; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: TY2PR02MB3678:EE_|TY0PR02MB5623:EE_ x-ms-office365-filtering-correlation-id: 5010f266-9dbd-446c-38e1-08db15cb5630 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:TY2PR02MB3678.apcprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230025)(4636009)(346002)(366004)(39860400002)(376002)(396003)(136003)(451199018)(52536014)(83380400001)(8936002)(41300700001)(71200400001)(44832011)(5660300002)(7696005)(316002)(55016003)(66946007)(64756008)(66556008)(66476007)(6916009)(8676002)(76116006)(66446008)(6506007)(38070700005)(186003)(26005)(9686003)(478600001)(122000001)(33656002)(2906002)(38100700002)(86362001);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?q?HC3RKwuvSfIPopUS/YR/MjmTdYdO?= =?utf-8?q?VLQlyOJRl8ctiFwOMttmtGQiutBNJFDMsRZZyBL7J6KRV6krqFRUE5mRnG8ID/322?= =?utf-8?q?SwkqbJC1OPrEL6KztMmAb/y3SVWrFNklZtF7F8DWx/I9QF1LoY4iLmnHYed9uJhWL?= =?utf-8?q?xUzUtLsv2AzQcAQJQ3Fpfd0Oq5tP/d9LszosGmC34JspcZY0ccmewPIErTZc2DL1V?= =?utf-8?q?28J/fQhbYGmVskUAVrSY56CExeWOSnfDe3ddUAlYgDPqEtBNhQHLsPRSqktrfBu7P?= =?utf-8?q?ZlA0FpcYe9WVqpP4OVMO6z3zHhsHCS9tAXslNeA5Q9uQr8WVLfe/pF57EwA6g5elj?= =?utf-8?q?rkX95dWwEQH7XKx4jz4dOtDpEeELezgm78E8USfb0R9umzayAbgewfk3TcB2RbsyP?= =?utf-8?q?zw14fovcV/S3VKZDt2t1Xxp7Q+tcAI98nTCwIFWIK2nahd8lkJUGqnJ7Wc8/CH3FN?= =?utf-8?q?dppu8gahsZqfyw3IQMgexuvsrhAeIy0SVVBu9hJYRZi6XSxobrGuRUUr0qKzVTwjT?= =?utf-8?q?KO21eXUCRK+3Af96M7hWbnJ/Cbwen/E1fV9bzXnatLQVo4Fg/ys/VBPTEY5cHQhlu?= =?utf-8?q?FECGUsqMgdOu1Xg+SHFaUs19Uf7sTx+zATWcD08MWGKAEizH2+5dhYrxUbWByCJtU?= =?utf-8?q?ZITFvjxOuu6xyYb4f91Vt2m0d6WQl/StdsRKZCrJE3AqENomMxgmKy6sBpbutQ5lj?= =?utf-8?q?RTDXByLyJ4KwGgbKKwvGOgz4OkEkapxdD+w+eabrkjgo7Kz/Hy5qXUmtzbbCgE1gf?= =?utf-8?q?i0zbzbicEa2zrJGeEUhzSiNUJ+DI9NdXvvTeZCWtlYEmw4BlFvQEbOLYGjOpXDRtE?= =?utf-8?q?tAACHiyumz05FhYys55e1ro1x1UN0Ue3CDcH0ep3qlNdpV/IxU4lbL5+m2wndDUr3?= =?utf-8?q?Wzztw5GewTZaLzTeGSlGvwk/+XyTTkEs0zo8gVZOKHrf5kgTZjDrmx8cngO6/Mg3I?= =?utf-8?q?z7jVLrND/cmnyFAT0pLRHzZto61XoF4heyHa7z5okzZzArH2EsvgnwTctUHe5g69W?= =?utf-8?q?1R3wCEoUofeB+4mIA+UcCgZ7vHR5B1GXHviR4Oe53kOrZvrH4TsXQ/4oI+AhVFHdF?= =?utf-8?q?/xd/Av1pFa2ytgLEGVqqbx8Lxulh8keLmeIP6/P/GL/9jVxbY+Z97PiLDgEA+WSZC?= =?utf-8?q?rpSqlXPi+L9Sl7V8wBP/TRPtVcaAct2RkyJdYE10DKsPjRJluofU6lNekZ8KBKXFF?= =?utf-8?q?LAtYfBpTBB+KPrUc7wuIwGZ0Z+8Kn2J4mGQ1rprtEp012q2yvZSXFoJOevYTWjQpC?= =?utf-8?q?xJNItfpAza7jtc2RfgX5qZEQ9ZC0O9bU8foPARMMeQlFeIySue2IgVsCDkUQF/8bD?= =?utf-8?q?GgMZFJex/bM9UPgIoZUSQOnsjEgJc49qNeUSA6HRpBaY9IT2b6DxQJL7qAjU/sf0S?= =?utf-8?q?S+3jYTkXD+knaLkJFObTcFD9rI9I1aqiYLrUG5Nm8TW57/c9zVMW8SJTJ52rpI6y0?= =?utf-8?q?QUSn+GeXoK/f7/CYPut93TDvdrZ8bcoKgYDVGNQTdCNtR+Pl681RZqsdy1LQX17i4?= =?utf-8?q?tegCPknMeMeD0WLQGTsPVCLI1EgrmVhYxQ=3D=3D?= MIME-Version: 1.0 X-OriginatorOrg: advantech.cz X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: TY2PR02MB3678.apcprd02.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 5010f266-9dbd-446c-38e1-08db15cb5630 X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Feb 2023 18:25:27.1133 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: a77d40d9-dcba-4dda-b571-5f18e6da853f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: C2iQ55UQZUTVurPYD5RU5vm8xW7Y8IQkUy0XS5k2lf/FFH4Rt+Cm0lCRIr4fim7o7fqc3fjv850N19oyHuDdZ1OLrQJWFH8VSLNRGA43KgI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY0PR02MB5623 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 23 Feb 2023 18:25:41 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/101237 New features and improvements in 2.6.0 compared to 2.5.8: - Data Channel Offload (DCO) kernel acceleration support for Windows, Linux, and FreeBSD. - OpenSSL 3 support. - Improved handling of tunnel MTU, including support for pushable MTU. - Outdated cryptographic algorithms disabled by default, but there are options to override if necessary. - Reworked TLS handshake, making OpenVPN immune to replay-packet state exhaustion attacks. - Added --peer-fingerprint mode for a more simplistic certificate setup and verification. - Added Pre-Logon Access Provider support to OpenVPN GUI for Windows. - Improved protocol negotiation, leading to faster connection setup. Signed-off-by: Petr Gotthard --- .../openvpn/{openvpn_2.5.8.bb => openvpn_2.6.0.bb} | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) rename meta-networking/recipes-support/openvpn/{openvpn_2.5.8.bb => openvpn_2.6.0.bb} (91%) -- 2.34.1 diff --git a/meta-networking/recipes-support/openvpn/openvpn_2.5.8.bb b/meta-networking/recipes-support/openvpn/openvpn_2.6.0.bb similarity index 91% rename from meta-networking/recipes-support/openvpn/openvpn_2.5.8.bb rename to meta-networking/recipes-support/openvpn/openvpn_2.6.0.bb index b2783d992..c8ab6cb46 100644 --- a/meta-networking/recipes-support/openvpn/openvpn_2.5.8.bb +++ b/meta-networking/recipes-support/openvpn/openvpn_2.6.0.bb @@ -2,8 +2,8 @@ SUMMARY = "A full-featured SSL VPN solution via tun device." HOMEPAGE = "https://openvpn.net/" SECTION = "net" LICENSE = "GPL-2.0-only" -LIC_FILES_CHKSUM = "file://COPYING;md5=b76abd82c14ee01cc34c4ff5e3627b89" -DEPENDS = "lzo openssl iproute2 ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" +LIC_FILES_CHKSUM = "file://COPYING;md5=3170e982baae61dbb8de963317d1ac94" +DEPENDS = "lzo lz4 openssl iproute2 libcap-ng ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" inherit autotools systemd update-rc.d pkgconfig @@ -14,7 +14,7 @@ SRC_URI = "http://swupdate.openvpn.org/community/releases/${BP}.tar.gz \ UPSTREAM_CHECK_URI = "https://openvpn.net/community-downloads" -SRC_URI[sha256sum] = "a6f315b7231d44527e65901ff646f87d7f07862c87f33531daa109fb48c53db2" +SRC_URI[sha256sum] = "ebec933263c9850ef6f7ce125e2f22214be60b1cbb8ccff18892643fe083ae8f" # CVE-2020-7224 and CVE-2020-27569 are for Aviatrix OpenVPN client, not for openvpn. CVE_CHECK_IGNORE += "CVE-2020-7224 CVE-2020-27569"