The package rpms/ocserv.git has added or updated architecture specific content in its
spec file (ExclusiveArch/ExcludeArch or %ifarch/%ifnarch) in commit(s):
https://src.fedoraproject.org/cgit/rpms/ocserv.git/commit/?id=5fadde0d2a1....
Change:
+%ifnarch aarch64 %{ix86} %{arm}
Thanks.
Full change:
============
commit 5fadde0d2a15a1915c9dff6f90009c3ff3b1f4e1
Author: Nikos Mavrogiannopoulos <nmav(a)redhat.com>
Date: Mon Sep 21 14:51:06 2020 +0200
disable socket_wrapper on archs where it causes problems
diff --git a/ocserv.spec b/ocserv.spec
index 021a1fa..764219e 100644
--- a/ocserv.spec
+++ b/ocserv.spec
@@ -92,7 +92,11 @@ BuildRequires: systemd
BuildRequires: systemd-devel
BuildRequires: liboath-devel
BuildRequires: uid_wrapper
+# Disable socket_wrapper on certain architectures because it
+# introduces new syscalls that the worker cannot handle.
+%ifnarch aarch64 %{ix86} %{arm}
BuildRequires: socket_wrapper
+%endif
BuildRequires: gnupg2
%if 0%{?rhel} && 0%{?rhel} >= 7
commit 3e9d108a0d2dd2b4cee4490a75f961aaa043e91b
Author: Nikos Mavrogiannopoulos <nmav(a)redhat.com>
Date: Mon Sep 21 13:51:50 2020 +0200
make check: be verbose
diff --git a/ocserv.spec b/ocserv.spec
index 41715c1..021a1fa 100644
--- a/ocserv.spec
+++ b/ocserv.spec
@@ -204,7 +204,7 @@ mkdir -p -m 700 %{_sysconfdir}/pki/ocserv/private
mkdir -p %{_sysconfdir}/pki/ocserv/cacerts
%check
-make check %{?_smp_mflags}
+make check %{?_smp_mflags} VERBOSE=1
%if %{use_systemd}
%post
commit ab373ba555e77c9de62149b77d5b1f758f72009a
Author: Nikos Mavrogiannopoulos <nmav(a)redhat.com>
Date: Mon Sep 21 13:01:57 2020 +0200
removed xfail tests; they no longer fail
diff --git a/ocserv.spec b/ocserv.spec
index c1e65c2..41715c1 100644
--- a/ocserv.spec
+++ b/ocserv.spec
@@ -204,7 +204,7 @@ mkdir -p -m 700 %{_sysconfdir}/pki/ocserv/private
mkdir -p %{_sysconfdir}/pki/ocserv/cacerts
%check
-make check %{?_smp_mflags} XFAIL_TESTS=test-sighup-key-change
+make check %{?_smp_mflags}
%if %{use_systemd}
%post
commit b6951dd878afb37111ec6d306281dc870ca5bee7
Author: Nikos Mavrogiannopoulos <nmav(a)redhat.com>
Date: Mon Sep 21 12:52:20 2020 +0200
ensure gnutls-utils are installed when building
This is needed for certain tests
diff --git a/ocserv.spec b/ocserv.spec
index a88eea4..c1e65c2 100644
--- a/ocserv.spec
+++ b/ocserv.spec
@@ -57,6 +57,7 @@ BuildRequires: gnutls-devel
BuildRequires: pam-devel
BuildRequires: iproute
BuildRequires: openconnect
+BuildRequires: gnutls-utils
%if (0%{?use_local_protobuf} == 0)
BuildRequires: protobuf-c-devel
@@ -203,7 +204,7 @@ mkdir -p -m 700 %{_sysconfdir}/pki/ocserv/private
mkdir -p %{_sysconfdir}/pki/ocserv/cacerts
%check
-make check %{?_smp_mflags} XFAIL_TESTS="test-sighup-key-change resumption"
+make check %{?_smp_mflags} XFAIL_TESTS=test-sighup-key-change
%if %{use_systemd}
%post
commit dd764953e208b2b3b74f513801cafd069ebcaac9
Author: Nikos Mavrogiannopoulos <nmav(a)redhat.com>
Date: Mon Sep 21 12:51:06 2020 +0200
added resumption to XFAIL
This test seems to be failing
diff --git a/ocserv.spec b/ocserv.spec
index 6c40b4e..a88eea4 100644
--- a/ocserv.spec
+++ b/ocserv.spec
@@ -203,7 +203,7 @@ mkdir -p -m 700 %{_sysconfdir}/pki/ocserv/private
mkdir -p %{_sysconfdir}/pki/ocserv/cacerts
%check
-make check %{?_smp_mflags} XFAIL_TESTS=test-sighup-key-change
+make check %{?_smp_mflags} XFAIL_TESTS="test-sighup-key-change resumption"
%if %{use_systemd}
%post
commit 58691ff71f829832dd5b4a5c60cb1943974fd000
Author: Nikos Mavrogiannopoulos <nmav(a)redhat.com>
Date: Mon Sep 21 12:42:52 2020 +0200
documented crypto policies change
diff --git a/ocserv.spec b/ocserv.spec
index f3305db..6c40b4e 100644
--- a/ocserv.spec
+++ b/ocserv.spec
@@ -282,6 +282,8 @@ install -D -m 0755 %{SOURCE11} %{buildroot}/%{_initrddir}/%{name}
%changelog
* Thu Sep 21 2020 Nikos Mavrogiannopoulos <n.mavrogiannopoulos(a)gmail.com> -
1.1.1-1
- Update to upstream 1.1.1 release
+- Set default priorities to NORMAL as using @SYSTEM is no longer necessary
+ to follow crypto policies.
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
commit 8ed78459af375bdc551829ca5d91d57841b42d4d
Author: Nikos Mavrogiannopoulos <nmav(a)redhat.com>
Date: Mon Sep 21 12:37:59 2020 +0200
updated to 1.1.1
diff --git a/.gitignore b/.gitignore
index 00721b2..20cd616 100644
--- a/.gitignore
+++ b/.gitignore
@@ -227,3 +227,5 @@
/ocserv-1.0.1.tar.xz
/ocserv-1.1.0.tar.xz
/ocserv-1.1.0.tar.xz.sig
+/ocserv-1.1.1.tar.xz
+/ocserv-1.1.1.tar.xz.sig
diff --git a/ocserv.conf b/ocserv.conf
index 59d8e75..5daa176 100644
--- a/ocserv.conf
+++ b/ocserv.conf
@@ -176,9 +176,12 @@ server-key = /etc/pki/ocserv/private/server.key
# information at:
https://gitlab.com/ocserv/ocserv/issues
isolate-workers = true
-# A banner to be displayed on clients
+# A banner to be displayed on clients after connection
#banner = "Welcome"
+# A banner to be displayed on clients before connection
+#pre-login-banner = "Welcome"
+
# Limit the number of clients. Unset or set to zero for unlimited.
#max-clients = 1024
max-clients = 16
@@ -195,9 +198,11 @@ max-same-clients = 2
# is recommended as it is more efficient in parsing.
#listen-proxy-proto = true
-# Limit the number of client connections to one every X milliseconds
-# (X is the provided value). Set to zero for no limit.
-#rate-limit-ms = 100
+# Rate limit the number of incoming connections to one every X milliseconds
+# (X is the provided value), as the secmod backlog grows. This
+# makes the server more resilient (and prevents connection failures) on
+# multiple concurrent connections. Set to zero for no limit.
+rate-limit-ms = 100
# Stats report time. The number of seconds after which each
# worker process will report its usage statistics (number of
diff --git a/ocserv.spec b/ocserv.spec
index dca7776..f3305db 100644
--- a/ocserv.spec
+++ b/ocserv.spec
@@ -1,6 +1,5 @@
-# This spec file has been automatically updated
-Version: 1.1.0
-Release: 3%{?dist}
+Version: 1.1.1
+Release: 1%{?dist}
%global _hardened_build 1
%if 0%{?fedora} || 0%{?rhel} >= 7
@@ -281,6 +280,9 @@ install -D -m 0755 %{SOURCE11} %{buildroot}/%{_initrddir}/%{name}
%endif
%changelog
+* Thu Sep 21 2020 Nikos Mavrogiannopoulos <n.mavrogiannopoulos(a)gmail.com> -
1.1.1-1
+- Update to upstream 1.1.1 release
+
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
diff --git a/sources b/sources
index 9db8d9c..b716d8a 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (ocserv-1.1.0.tar.xz) =
10a589ccf28bf9568e602fc26d9133c78a840205f1a777d62cb52b680221bdaa8c231c37a95587b3494437dafc649b40f71be05a4868646c48efb3d873615861
-SHA512 (ocserv-1.1.0.tar.xz.sig) =
29c4082fa34327663ce6bcd29102c2eba088d79049e6637fabd048c8310fa9ff27853f06ef696c19ef66c146ce9e6e455cecc0261676a6ed343de731142f2022
+SHA512 (ocserv-1.1.1.tar.xz) =
1173416f0d32f9faf98e539c8e73316a50ac93b519d1ade19374a3df865d10d975e13ac53e0c5a5e77c80f3605d7a810287b18b85b798887d227389761b54220
+SHA512 (ocserv-1.1.1.tar.xz.sig) =
9fe0f3e2ea4daaf1d053c2cdc87d38dc8256feb11c16f93e7e677500457914a82e659901f77f6ec4ca175fceeec74e3f8d001412c969c18dcf486545bac83393