Gentoo Archives: gentoo-commits

From: "Manuel Rüger" <mrueg@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] repo/gentoo:master commit in: net-misc/openvpn/, net-misc/openvpn/files/
Date: Sat, 09 Jul 2016 13:59:43
Message-Id: 1468072749.fb1d10decb6790e409312fa64f549318a3185075.mrueg@gentoo
1 commit: fb1d10decb6790e409312fa64f549318a3185075
2 Author: Manuel Rüger <mrueg <AT> gentoo <DOT> org>
3 AuthorDate: Sat Jul 9 13:59:09 2016 +0000
4 Commit: Manuel Rüger <mrueg <AT> gentoo <DOT> org>
5 CommitDate: Sat Jul 9 13:59:09 2016 +0000
6 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=fb1d10de
7
8 net-misc/openvpn: Remove old
9
10 Package-Manager: portage-2.3.0
11
12 net-misc/openvpn/Manifest | 2 -
13 .../openvpn/files/2.3.6-disable-compression.patch | 18 ---
14 net-misc/openvpn/files/2.3.6-null-cipher.patch | 46 -------
15 .../files/openvpn-2.3.10-fix-libressl.patch | 36 ------
16 net-misc/openvpn/openvpn-2.3.10-r1.ebuild | 136 ---------------------
17 net-misc/openvpn/openvpn-2.3.8.ebuild | 129 -------------------
18 6 files changed, 367 deletions(-)
19
20 diff --git a/net-misc/openvpn/Manifest b/net-misc/openvpn/Manifest
21 index da03008..80ecc74 100644
22 --- a/net-misc/openvpn/Manifest
23 +++ b/net-misc/openvpn/Manifest
24 @@ -1,3 +1 @@
25 -DIST openvpn-2.3.10.tar.gz 1225636 SHA256 f8b0b5b92e35bbca1db1a7e6b49e04639e45634e9accd460459b40b2c99ec8f6 SHA512 13f7cfb8e5a7485f930d13830691a937da40b4cc881c403ab613132cb94aba0a30b1727debdfa1b8d7d761b447ccbcf0d1c2d56ca82f6a6ce7e2eec9642fd13f WHIRLPOOL ce52f9d89c0512a76ccc71a4c227e8f098ffdd00d4a0ed4518f35b1f86c53c638e2805e1b32e87c664ba7ceeb1a7e50875effa3c302a5e53e1b7143ac9a68685
26 DIST openvpn-2.3.11.tar.gz 1242816 SHA256 9117a4434fd35e61cf94f9ee7ef84b7aecbc6fa556f779ff599560f219756163 SHA512 10273dc2c13a3db4b4d21bdac51c441bd028045d7ad710ce54b58d9713278e1c083f25b0e4842b8cc77ed8b804ce0fa50ed17eb5c05478d2f4e158b892d7c565 WHIRLPOOL 899402429458b4da6b528a52de8261393f9ebf3aa9ce76e196c034c406d286f13c62bd30a69f14491c476eb7bfc6d7d1730a30f0d64cc317fb09a8e745ca1cdb
27 -DIST openvpn-2.3.8.tar.gz 1214843 SHA256 532435eff61c14b44a583f27b72f93e7864e96c95fe51134ec0ad4b1b1107c51 SHA512 b619283d87eea2e47a2f0dfdbf0ffd1d10388fbdaadb33b43c7a2743748a4814f869fad6215d32fab156664d554ae94af456e7bf496890c68e6729b153d76db9 WHIRLPOOL 4868c735ca5e65b34f477457ea38eb6db45fae80563490d1e39ece9bf29b13976dd82d50d054da70c4ee146cb2e88e847bafc3f7ff47112d4494fa0f408d65d0
28
29 diff --git a/net-misc/openvpn/files/2.3.6-disable-compression.patch b/net-misc/openvpn/files/2.3.6-disable-compression.patch
30 deleted file mode 100644
31 index d9d1c76..0000000
32 --- a/net-misc/openvpn/files/2.3.6-disable-compression.patch
33 +++ /dev/null
34 @@ -1,18 +0,0 @@
35 -https://community.openvpn.net/openvpn/changeset/5d5233778868ddd568140c394adfcfc8e3453245/
36 -
37 ---- openvpn-2.3.6/src/openvpn/ssl_openssl.c.orig 2014-11-29 23:00:35.000000000 +0800
38 -+++ openvpn-2.3.6/src/openvpn/ssl_openssl.c 2015-01-12 21:14:30.186993686 +0800
39 -@@ -238,6 +238,13 @@
40 - if (tls_ver_min > TLS_VER_1_2 || tls_ver_max < TLS_VER_1_2)
41 - sslopt |= SSL_OP_NO_TLSv1_2;
42 - #endif
43 -+
44 -+#ifdef SSL_OP_NO_COMPRESSION
45 -+ msg (M_WARN, "[Workaround] disable SSL compression");
46 -+ sslopt |= SSL_OP_NO_COMPRESSION;
47 -+#endif
48 -+
49 -+
50 - SSL_CTX_set_options (ctx->ctx, sslopt);
51 - }
52 -
53
54 diff --git a/net-misc/openvpn/files/2.3.6-null-cipher.patch b/net-misc/openvpn/files/2.3.6-null-cipher.patch
55 deleted file mode 100644
56 index 1e831cf..0000000
57 --- a/net-misc/openvpn/files/2.3.6-null-cipher.patch
58 +++ /dev/null
59 @@ -1,46 +0,0 @@
60 -The "really fix cipher none" patch has been merged to release/2.3 and master:
61 -
62 -commit 785838614afc20d362b64907b0212e9a779e2287 (release/2.3)
63 -commit 98156e90e1e83133a6a6a020db8e7333ada6156b (master)
64 -
65 -diff --git a/src/openvpn/crypto_backend.h b/src/openvpn/crypto_backend.h
66 -index 8749878..4e45df0 100644
67 ---- a/src/openvpn/crypto_backend.h
68 -+++ b/src/openvpn/crypto_backend.h
69 -@@ -237,8 +237,7 @@ int cipher_kt_mode (const cipher_kt_t *cipher_kt);
70 - *
71 - * @return true iff the cipher is a CBC mode cipher.
72 - */
73 --bool cipher_kt_mode_cbc(const cipher_kt_t *cipher)
74 -- __attribute__((nonnull));
75 -+bool cipher_kt_mode_cbc(const cipher_kt_t *cipher);
76 -
77 - /**
78 - * Check if the supplied cipher is a supported OFB or CFB mode cipher.
79 -@@ -247,8 +246,7 @@ bool cipher_kt_mode_cbc(const cipher_kt_t *cipher)
80 - *
81 - * @return true iff the cipher is a OFB or CFB mode cipher.
82 - */
83 --bool cipher_kt_mode_ofb_cfb(const cipher_kt_t *cipher)
84 -- __attribute__((nonnull));
85 -+bool cipher_kt_mode_ofb_cfb(const cipher_kt_t *cipher);
86 -
87 -
88 - /**
89 -diff --git a/tests/t_lpback.sh b/tests/t_lpback.sh
90 -index 8f88ad9..d7792cd 100755
91 ---- a/tests/t_lpback.sh
92 -+++ b/tests/t_lpback.sh
93 -@@ -35,6 +35,9 @@ CIPHERS=$(${top_builddir}/src/openvpn/openvpn --show-ciphers | \
94 - # GD, 2014-07-06 do not test RC5-* either (fails on NetBSD w/o libcrypto_rc5)
95 - CIPHERS=$(echo "$CIPHERS" | egrep -v '^(DES-EDE3-CFB1|DES-CFB1|RC5-)' )
96 -
97 -+# Also test cipher 'none'
98 -+CIPHERS=${CIPHERS}$(printf "\nnone")
99 -+
100 - "${top_builddir}/src/openvpn/openvpn" --genkey --secret key.$$
101 - set +e
102 -
103 ---
104 -1.9.1
105 -
106
107 diff --git a/net-misc/openvpn/files/openvpn-2.3.10-fix-libressl.patch b/net-misc/openvpn/files/openvpn-2.3.10-fix-libressl.patch
108 deleted file mode 100644
109 index 35e5b36..0000000
110 --- a/net-misc/openvpn/files/openvpn-2.3.10-fix-libressl.patch
111 +++ /dev/null
112 @@ -1,36 +0,0 @@
113 -From 9dfc2309c6b4143892137844197f5f84755f6580 Mon Sep 17 00:00:00 2001
114 -From: Niels Ole Salscheider <niels_ole@××××××××××××××××××.de>
115 -Date: Sun, 10 Jan 2016 14:44:35 +0100
116 -Subject: [PATCH] Fix build with libressl
117 -
118 -Signed-off-by: Niels Ole Salscheider <niels_ole@××××××××××××××××××.de>
119 -Acked-by: Steffan Karger <steffan.karger@××××××.com>
120 -Message-Id: <1452433475-16779-1-git-send-email-niels_ole@××××××××××××××××××.de>
121 -URL: http://article.gmane.org/gmane.network.openvpn.devel/10975
122 -Signed-off-by: Gert Doering <gert@×××××××××××.de>
123 ----
124 - src/openvpn/ssl_openssl.c | 4 ++--
125 - 1 file changed, 2 insertions(+), 2 deletions(-)
126 -
127 -diff --git a/src/openvpn/ssl_openssl.c b/src/openvpn/ssl_openssl.c
128 -index d2f40e7..e390f4d 100644
129 ---- a/src/openvpn/ssl_openssl.c
130 -+++ b/src/openvpn/ssl_openssl.c
131 -@@ -358,7 +358,7 @@ tls_ctx_check_cert_time (const struct tls_root_ctx *ctx)
132 -
133 - ASSERT (ctx);
134 -
135 --#if OPENSSL_VERSION_NUMBER >= 0x10002000L
136 -+#if OPENSSL_VERSION_NUMBER >= 0x10002000L && !defined(LIBRESSL_VERSION_NUMBER)
137 - /* OpenSSL 1.0.2 and up */
138 - cert = SSL_CTX_get0_certificate (ctx->ctx);
139 - #else
140 -@@ -393,7 +393,7 @@ tls_ctx_check_cert_time (const struct tls_root_ctx *ctx)
141 - }
142 -
143 - cleanup:
144 --#if OPENSSL_VERSION_NUMBER < 0x10002000L
145 -+#if OPENSSL_VERSION_NUMBER < 0x10002000L || defined(LIBRESSL_VERSION_NUMBER)
146 - SSL_free (ssl);
147 - #endif
148 - return;
149
150 diff --git a/net-misc/openvpn/openvpn-2.3.10-r1.ebuild b/net-misc/openvpn/openvpn-2.3.10-r1.ebuild
151 deleted file mode 100644
152 index 93639b1..0000000
153 --- a/net-misc/openvpn/openvpn-2.3.10-r1.ebuild
154 +++ /dev/null
155 @@ -1,136 +0,0 @@
156 -# Copyright 1999-2016 Gentoo Foundation
157 -# Distributed under the terms of the GNU General Public License v2
158 -# $Id$
159 -
160 -EAPI=5
161 -
162 -inherit multilib flag-o-matic user systemd
163 -
164 -DESCRIPTION="Robust and highly flexible tunneling application compatible with many OSes"
165 -SRC_URI="http://swupdate.openvpn.net/community/releases/${P}.tar.gz"
166 -HOMEPAGE="http://openvpn.net/"
167 -
168 -LICENSE="GPL-2"
169 -SLOT="0"
170 -KEYWORDS="~alpha amd64 arm hppa ia64 ~mips ppc ppc64 ~s390 ~sh sparc x86 ~sparc-fbsd ~x86-fbsd ~x86-freebsd ~amd64-linux ~arm-linux ~x86-linux"
171 -IUSE="examples down-root iproute2 libressl +lzo pam pkcs11 +plugins polarssl selinux socks +ssl static systemd userland_BSD"
172 -
173 -REQUIRED_USE="static? ( !plugins !pkcs11 )
174 - polarssl? ( ssl !libressl )
175 - pkcs11? ( ssl )
176 - !plugins? ( !pam !down-root )"
177 -
178 -DEPEND="
179 - kernel_linux? (
180 - iproute2? ( sys-apps/iproute2[-minimal] ) !iproute2? ( sys-apps/net-tools )
181 - )
182 - pam? ( virtual/pam )
183 - ssl? (
184 - !polarssl? (
185 - !libressl? ( >=dev-libs/openssl-0.9.7:* )
186 - libressl? ( dev-libs/libressl )
187 - )
188 - polarssl? ( >=net-libs/polarssl-1.3.8 )
189 - )
190 - lzo? ( >=dev-libs/lzo-1.07 )
191 - pkcs11? ( >=dev-libs/pkcs11-helper-1.11 )
192 - systemd? ( sys-apps/systemd )"
193 -RDEPEND="${DEPEND}
194 - selinux? ( sec-policy/selinux-openvpn )
195 -"
196 -
197 -src_prepare() {
198 - epatch "${FILESDIR}"/${P}-fix-libressl.patch
199 -}
200 -
201 -src_configure() {
202 - use static && LDFLAGS="${LDFLAGS} -Xcompiler -static"
203 - local myconf
204 - use polarssl && myconf="--with-crypto-library=polarssl"
205 - econf \
206 - ${myconf} \
207 - --docdir="${EPREFIX}/usr/share/doc/${PF}" \
208 - --with-plugindir="${ROOT}/usr/$(get_libdir)/$PN" \
209 - $(use_enable ssl) \
210 - $(use_enable ssl crypto) \
211 - $(use_enable lzo) \
212 - $(use_enable pkcs11) \
213 - $(use_enable plugins) \
214 - $(use_enable iproute2) \
215 - $(use_enable socks) \
216 - $(use_enable pam plugin-auth-pam) \
217 - $(use_enable down-root plugin-down-root) \
218 - $(use_enable systemd)
219 -}
220 -
221 -src_install() {
222 - default
223 - find "${ED}/usr" -name '*.la' -delete
224 - # install documentation
225 - dodoc AUTHORS ChangeLog PORTS README README.IPv6
226 -
227 - # Install some helper scripts
228 - keepdir /etc/openvpn
229 - exeinto /etc/openvpn
230 - doexe "${FILESDIR}/up.sh"
231 - doexe "${FILESDIR}/down.sh"
232 -
233 - # Install the init script and config file
234 - newinitd "${FILESDIR}/${PN}-2.1.init" openvpn
235 - newconfd "${FILESDIR}/${PN}-2.1.conf" openvpn
236 -
237 - # install examples, controlled by the respective useflag
238 - if use examples ; then
239 - # dodoc does not supportly support directory traversal, #15193
240 - insinto /usr/share/doc/${PF}/examples
241 - doins -r sample contrib
242 - fi
243 -
244 - systemd_newtmpfilesd "${FILESDIR}"/${PN}.tmpfile ${PN}.conf
245 - systemd_newunit distro/systemd/openvpn-client@.service openvpn-client@.service
246 - systemd_newunit distro/systemd/openvpn-server@.service openvpn-server@.service
247 -}
248 -
249 -pkg_postinst() {
250 - # Add openvpn user so openvpn servers can drop privs
251 - # Clients should run as root so they can change ip addresses,
252 - # dns information and other such things.
253 - enewgroup openvpn
254 - enewuser openvpn "" "" "" openvpn
255 -
256 - if [ path_exists -o "${ROOT}/etc/openvpn/*/local.conf" ] ; then
257 - ewarn "WARNING: The openvpn init script has changed"
258 - ewarn ""
259 - fi
260 -
261 - elog "The openvpn init script expects to find the configuration file"
262 - elog "openvpn.conf in /etc/openvpn along with any extra files it may need."
263 - elog ""
264 - elog "To create more VPNs, simply create a new .conf file for it and"
265 - elog "then create a symlink to the openvpn init script from a link called"
266 - elog "openvpn.newconfname - like so"
267 - elog " cd /etc/openvpn"
268 - elog " ${EDITOR##*/} foo.conf"
269 - elog " cd /etc/init.d"
270 - elog " ln -s openvpn openvpn.foo"
271 - elog ""
272 - elog "You can then treat openvpn.foo as any other service, so you can"
273 - elog "stop one vpn and start another if you need to."
274 -
275 - if grep -Eq "^[ \t]*(up|down)[ \t].*" "${ROOT}/etc/openvpn"/*.conf 2>/dev/null ; then
276 - ewarn ""
277 - ewarn "WARNING: If you use the remote keyword then you are deemed to be"
278 - ewarn "a client by our init script and as such we force up,down scripts."
279 - ewarn "These scripts call /etc/openvpn/\$SVCNAME-{up,down}.sh where you"
280 - ewarn "can move your scripts to."
281 - fi
282 -
283 - if use plugins ; then
284 - einfo ""
285 - einfo "plugins have been installed into /usr/$(get_libdir)/${PN}"
286 - fi
287 -
288 - einfo ""
289 - einfo "OpenVPN 2.3.x no longer includes the easy-rsa suite of utilities."
290 - einfo "They can now be emerged via app-crypt/easy-rsa."
291 -}
292
293 diff --git a/net-misc/openvpn/openvpn-2.3.8.ebuild b/net-misc/openvpn/openvpn-2.3.8.ebuild
294 deleted file mode 100644
295 index 7c88025..0000000
296 --- a/net-misc/openvpn/openvpn-2.3.8.ebuild
297 +++ /dev/null
298 @@ -1,129 +0,0 @@
299 -# Copyright 1999-2015 Gentoo Foundation
300 -# Distributed under the terms of the GNU General Public License v2
301 -# $Id$
302 -
303 -EAPI=4
304 -
305 -inherit multilib flag-o-matic user systemd
306 -
307 -DESCRIPTION="Robust and highly flexible tunneling application compatible with many OSes"
308 -SRC_URI="http://swupdate.openvpn.net/community/releases/${P}.tar.gz"
309 -HOMEPAGE="http://openvpn.net/"
310 -
311 -LICENSE="GPL-2"
312 -SLOT="0"
313 -KEYWORDS="alpha amd64 arm hppa ia64 ~mips ppc ppc64 ~s390 ~sh sparc x86 ~sparc-fbsd ~x86-fbsd ~x86-freebsd ~amd64-linux ~arm-linux ~x86-linux"
314 -IUSE="examples down-root iproute2 +lzo pam passwordsave pkcs11 +plugins polarssl selinux socks +ssl static systemd userland_BSD"
315 -
316 -REQUIRED_USE="static? ( !plugins !pkcs11 )
317 - polarssl? ( ssl )
318 - pkcs11? ( ssl )
319 - !plugins? ( !pam !down-root )"
320 -
321 -DEPEND="
322 - kernel_linux? (
323 - iproute2? ( sys-apps/iproute2[-minimal] ) !iproute2? ( sys-apps/net-tools )
324 - )
325 - pam? ( virtual/pam )
326 - ssl? (
327 - !polarssl? ( >=dev-libs/openssl-0.9.7 ) polarssl? ( >=net-libs/polarssl-1.2.10 )
328 - )
329 - lzo? ( >=dev-libs/lzo-1.07 )
330 - pkcs11? ( >=dev-libs/pkcs11-helper-1.11 )
331 - systemd? ( sys-apps/systemd )"
332 -RDEPEND="${DEPEND}
333 - selinux? ( sec-policy/selinux-openvpn )
334 -"
335 -
336 -src_configure() {
337 - use static && LDFLAGS="${LDFLAGS} -Xcompiler -static"
338 - local myconf
339 - use polarssl && myconf="--with-crypto-library=polarssl"
340 - econf \
341 - ${myconf} \
342 - --docdir="${EPREFIX}/usr/share/doc/${PF}" \
343 - --with-plugindir="${ROOT}/usr/$(get_libdir)/$PN" \
344 - $(use_enable passwordsave password-save) \
345 - $(use_enable ssl) \
346 - $(use_enable ssl crypto) \
347 - $(use_enable lzo) \
348 - $(use_enable pkcs11) \
349 - $(use_enable plugins) \
350 - $(use_enable iproute2) \
351 - $(use_enable socks) \
352 - $(use_enable pam plugin-auth-pam) \
353 - $(use_enable down-root plugin-down-root) \
354 - $(use_enable systemd)
355 -}
356 -
357 -src_install() {
358 - default
359 - find "${ED}/usr" -name '*.la' -delete
360 - # install documentation
361 - dodoc AUTHORS ChangeLog PORTS README README.IPv6
362 -
363 - # Install some helper scripts
364 - keepdir /etc/openvpn
365 - exeinto /etc/openvpn
366 - doexe "${FILESDIR}/up.sh"
367 - doexe "${FILESDIR}/down.sh"
368 -
369 - # Install the init script and config file
370 - newinitd "${FILESDIR}/${PN}-2.1.init" openvpn
371 - newconfd "${FILESDIR}/${PN}-2.1.conf" openvpn
372 -
373 - # install examples, controlled by the respective useflag
374 - if use examples ; then
375 - # dodoc does not supportly support directory traversal, #15193
376 - insinto /usr/share/doc/${PF}/examples
377 - doins -r sample contrib
378 - fi
379 -
380 - systemd_newtmpfilesd "${FILESDIR}"/${PN}.tmpfile ${PN}.conf
381 - systemd_newunit distro/systemd/openvpn-client@.service openvpn-client@.service
382 - systemd_newunit distro/systemd/openvpn-server@.service openvpn-server@.service
383 -}
384 -
385 -pkg_postinst() {
386 - # Add openvpn user so openvpn servers can drop privs
387 - # Clients should run as root so they can change ip addresses,
388 - # dns information and other such things.
389 - enewgroup openvpn
390 - enewuser openvpn "" "" "" openvpn
391 -
392 - if [ path_exists -o "${ROOT}/etc/openvpn/*/local.conf" ] ; then
393 - ewarn "WARNING: The openvpn init script has changed"
394 - ewarn ""
395 - fi
396 -
397 - elog "The openvpn init script expects to find the configuration file"
398 - elog "openvpn.conf in /etc/openvpn along with any extra files it may need."
399 - elog ""
400 - elog "To create more VPNs, simply create a new .conf file for it and"
401 - elog "then create a symlink to the openvpn init script from a link called"
402 - elog "openvpn.newconfname - like so"
403 - elog " cd /etc/openvpn"
404 - elog " ${EDITOR##*/} foo.conf"
405 - elog " cd /etc/init.d"
406 - elog " ln -s openvpn openvpn.foo"
407 - elog ""
408 - elog "You can then treat openvpn.foo as any other service, so you can"
409 - elog "stop one vpn and start another if you need to."
410 -
411 - if grep -Eq "^[ \t]*(up|down)[ \t].*" "${ROOT}/etc/openvpn"/*.conf 2>/dev/null ; then
412 - ewarn ""
413 - ewarn "WARNING: If you use the remote keyword then you are deemed to be"
414 - ewarn "a client by our init script and as such we force up,down scripts."
415 - ewarn "These scripts call /etc/openvpn/\$SVCNAME-{up,down}.sh where you"
416 - ewarn "can move your scripts to."
417 - fi
418 -
419 - if use plugins ; then
420 - einfo ""
421 - einfo "plugins have been installed into /usr/$(get_libdir)/${PN}"
422 - fi
423 -
424 - einfo ""
425 - einfo "OpenVPN 2.3.x no longer includes the easy-rsa suite of utilities."
426 - einfo "They can now be emerged via app-crypt/easy-rsa."
427 -}