[xl2tpd/el6] * Mon May 12 2014 Paul Wouters <pwouters at redhat.com> - 1.3.6-1 - Updated to 1.3.6 - using github-onl
Paul Wouters
pwouters at fedoraproject.org
Mon May 12 19:47:49 UTC 2014
commit 0ce1410b87d91d8a4c6535adbbcc1671b489db7b
Author: Paul Wouters <pwouters at redhat.com>
Date: Mon May 12 15:45:24 2014 -0400
* Mon May 12 2014 Paul Wouters <pwouters at redhat.com> - 1.3.6-1
- Updated to 1.3.6 - using github-only monstrosity packaging
- Resolves: rhbz#1051785 (new upstream version available)
- Resolves: rhbz#868391 - xl2tpd sends response packets from wrong IP address
- Revert: rhbz#929447 - Incorrect "ipparam" manipulation
- Removed patches merged in upstream.
- FIPS patch updated with advertising clause for openssl in xl2tpd -V
(although the GPL code was already basically taken from openssl)
.gitignore | 2 +
sources | 2 +-
xl2tpd-1.3.0-kernelmode.patch | 436 --------------------
xl2tpd-1.3.1-Makefile.patch | 21 -
xl2tpd-1.3.1-Wunused.patch | 41 --
xl2tpd-1.3.1-conf.patch | 94 -----
xl2tpd-1.3.1-ipparam-to-remotenumber.patch | 29 --
xl2tpd-1.3.1-kernelmode.patch | 362 ----------------
xl2tpd-1.3.1-pty.patch | 19 -
xl2tpd-1.3.6-conf.patch | 40 ++
...1-md5-fips.patch => xl2tpd-1.3.6-md5-fips.patch | 59 ++-
xl2tpd-bz80693.patch | 22 -
xl2tpd.spec | 49 +--
13 files changed, 101 insertions(+), 1075 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index df99795..c9a1699 100644
--- a/.gitignore
+++ b/.gitignore
@@ -9,3 +9,5 @@ xl2tpd-1.2.4.tar.gz
xl2tpd-1.2.5.tar.gz
xl2tpd-1.2.7.tar.gz
xl2tpd-1.3.1.tar.gz
+/xl2tpd-1.3.6.tar.gz
+/xl2tpd-5619e1771048e74b729804e8602f409af0f3faea.tar.gz
diff --git a/sources b/sources
index 568bb82..cbe85ac 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-cf61576fef5c2d6c68279a408ec1f0d5 xl2tpd-1.3.1.tar.gz
+e08e34510a97e126b324f3407c71806c xl2tpd-5619e1771048e74b729804e8602f409af0f3faea.tar.gz
diff --git a/xl2tpd-1.3.6-conf.patch b/xl2tpd-1.3.6-conf.patch
new file mode 100644
index 0000000..1976244
--- /dev/null
+++ b/xl2tpd-1.3.6-conf.patch
@@ -0,0 +1,40 @@
+diff -Naur xl2tpd-1.3.6-orig/examples/ppp-options.xl2tpd xl2tpd-1.3.6/examples/ppp-options.xl2tpd
+--- xl2tpd-1.3.6-orig/examples/ppp-options.xl2tpd 2014-01-15 15:58:37.000000000 -0500
++++ xl2tpd-1.3.6/examples/ppp-options.xl2tpd 2014-05-12 14:46:24.358653357 -0400
+@@ -1,9 +1,10 @@
+ ipcp-accept-local
+ ipcp-accept-remote
+-ms-dns 192.168.1.1
+-ms-dns 192.168.1.3
+-ms-wins 192.168.1.2
+-ms-wins 192.168.1.4
++ms-dns 8.8.8.8
++# ms-dns 192.168.1.1
++# ms-dns 192.168.1.3
++# ms-wins 192.168.1.2
++# ms-wins 192.168.1.4
+ noccp
+ auth
+ crtscts
+@@ -15,3 +16,11 @@
+ lock
+ proxyarp
+ connect-delay 5000
++# To allow authentication against a Windows domain EXAMPLE, and require the
++# user to be in a group "VPN Users". Requires the samba-winbind package
++# require-mschap-v2
++# plugin winbind.so
++# ntlm_auth-helper '/usr/bin/ntlm_auth --helper-protocol=ntlm-server-1 --require-membership-of="EXAMPLE\\VPN Users"'
++# You need to join the domain on the server, for example using samba:
++# http://rootmanager.com/ubuntu-ipsec-l2tp-windows-domain-auth/setting-up-openswan-xl2tpd-with-native-windows-clients-lucid.html
++
+diff -Naur xl2tpd-1.3.6-orig/examples/README xl2tpd-1.3.6/examples/README
+--- xl2tpd-1.3.6-orig/examples/README 2014-01-15 15:58:37.000000000 -0500
++++ xl2tpd-1.3.6/examples/README 2014-05-12 14:46:59.168476547 -0400
+@@ -1,4 +1,4 @@
+ These are example files for use with xl2tpd.
+
+-Openswan carries config examples for use with l2tp-over-ipsec.
+-See http://www.openswan.org/
++xl2tpd is often used in combination with libreswan to offer L2TP/IPsec
++See https://libreswan.org/
diff --git a/xl2tpd-1.3.1-md5-fips.patch b/xl2tpd-1.3.6-md5-fips.patch
similarity index 89%
rename from xl2tpd-1.3.1-md5-fips.patch
rename to xl2tpd-1.3.6-md5-fips.patch
index 6ad39ec..3ee8cc9 100644
--- a/xl2tpd-1.3.1-md5-fips.patch
+++ b/xl2tpd-1.3.6-md5-fips.patch
@@ -1,6 +1,6 @@
-diff -Naur xl2tpd-1.3.1/aaa.c xl2tpd-1.3.1-fips/aaa.c
---- xl2tpd-1.3.1/aaa.c 2011-10-06 15:22:05.000000000 -0400
-+++ xl2tpd-1.3.1-fips/aaa.c 2013-04-01 16:36:40.929098507 -0400
+diff -Naur xl2tpd-1.3.6-orig/aaa.c xl2tpd-1.3.6/aaa.c
+--- xl2tpd-1.3.6-orig/aaa.c 2014-01-15 15:58:37.000000000 -0500
++++ xl2tpd-1.3.6/aaa.c 2014-05-12 15:01:05.936492449 -0400
@@ -21,6 +21,8 @@
#include <errno.h>
#include "l2tp.h"
@@ -95,9 +95,9 @@ diff -Naur xl2tpd-1.3.1/aaa.c xl2tpd-1.3.1-fips/aaa.c
cnt = 0;
}
/* at the beginning of each segment, we save the current segment (16 octets or less) of cipher
-diff -Naur xl2tpd-1.3.1/aaa.h xl2tpd-1.3.1-fips/aaa.h
---- xl2tpd-1.3.1/aaa.h 2011-10-06 15:22:05.000000000 -0400
-+++ xl2tpd-1.3.1-fips/aaa.h 2013-04-01 16:46:39.532823130 -0400
+diff -Naur xl2tpd-1.3.6-orig/aaa.h xl2tpd-1.3.6/aaa.h
+--- xl2tpd-1.3.6-orig/aaa.h 2014-01-15 15:58:37.000000000 -0500
++++ xl2tpd-1.3.6/aaa.h 2014-05-12 15:02:39.262697808 -0400
@@ -15,7 +15,7 @@
#ifndef _AAA_H
@@ -107,27 +107,26 @@ diff -Naur xl2tpd-1.3.1/aaa.h xl2tpd-1.3.1-fips/aaa.h
#define ADDR_HASH_SIZE 256
#define MD_SIG_SIZE 16
-@@ -34,7 +43,8 @@
+@@ -34,7 +34,7 @@
struct challenge
{
- struct MD5Context md5;
-+ /* struct MD5Context md5; */
+ MD5_CTX md5;
unsigned char ss; /* State we're sending in */
unsigned char secret[MAXSTRLEN]; /* The shared secret */
unsigned char *challenge; /* The original challenge */
-diff -Naur xl2tpd-1.3.1/Makefile xl2tpd-1.3.1-fips/Makefile
---- xl2tpd-1.3.1/Makefile 2013-04-01 16:40:44.576870296 -0400
-+++ xl2tpd-1.3.1-fips/Makefile 2013-04-01 16:48:30.405039381 -0400
-@@ -91,8 +91,8 @@
+diff -Naur xl2tpd-1.3.6-orig/Makefile xl2tpd-1.3.6/Makefile
+--- xl2tpd-1.3.6-orig/Makefile 2014-01-15 15:58:37.000000000 -0500
++++ xl2tpd-1.3.6/Makefile 2014-05-12 15:03:43.832223559 -0400
+@@ -92,8 +92,8 @@
IPFLAGS?= -DIP_ALLOCATION
CFLAGS+= $(DFLAGS) -O2 -fno-builtin -Wall -DSANITY $(OSFLAGS) $(IPFLAGS)
-HDRS=l2tp.h avp.h misc.h control.h call.h scheduler.h file.h aaa.h md5.h
-OBJS=xl2tpd.o pty.o misc.o control.o avp.o call.o network.o avpsend.o scheduler.o file.o aaa.o md5.o
+HDRS=l2tp.h avp.h misc.h control.h call.h scheduler.h file.h aaa.h
-+OBJS=xl2tpd.o pty.o misc.o control.o avp.o call.o network.o avpsend.o scheduler.o file.o aaa.o
++OBJS=xl2tpd.o pty.o misc.o control.o avp.o call.o network.o avpsend.o scheduler.o file.o aaa.o
SRCS=${OBJS:.o=.c} ${HDRS}
CONTROL_SRCS=xl2tpd-control.c
#LIBS= $(OSLIBS) # -lefence # efence for malloc checking
@@ -139,11 +138,11 @@ diff -Naur xl2tpd-1.3.1/Makefile xl2tpd-1.3.1-fips/Makefile
+ $(CC) $(LDFLAGS) -o $@ $(OBJS) -lcrypto $(LDLIBS)
$(CONTROL_EXEC): $(CONTROL_SRCS)
- $(CC) $(CFLAGS) -c $(CONTROL_SRCS)
-diff -Naur xl2tpd-1.3.1/md5.c xl2tpd-1.3.1-fips/md5.c
---- xl2tpd-1.3.1/md5.c 2011-10-06 15:22:05.000000000 -0400
-+++ xl2tpd-1.3.1-fips/md5.c 1969-12-31 19:00:00.000000000 -0500
-@@ -1,275 +0,0 @@
+ $(CC) $(CFLAGS) $(LDFLAGS) $(CONTROL_SRCS) -o $@
+diff -Naur xl2tpd-1.3.6-orig/md5.c xl2tpd-1.3.6/md5.c
+--- xl2tpd-1.3.6-orig/md5.c 2014-01-15 15:58:37.000000000 -0500
++++ xl2tpd-1.3.6/md5.c 1969-12-31 19:00:00.000000000 -0500
+@@ -1,274 +0,0 @@
-#ifdef FREEBSD
-# include <machine/endian.h>
-#elif defined(OPENBSD)
@@ -307,8 +306,7 @@ diff -Naur xl2tpd-1.3.1/md5.c xl2tpd-1.3.1-fips/md5.c
- byteReverse (ctx->in, 14);
-
- /* Append length in bits and transform */
-- ((uint32 *) ctx->in)[14] = ctx->bits[0];
-- ((uint32 *) ctx->in)[15] = ctx->bits[1];
+- memcpy(ctx->in + 14 * sizeof(uint32), ctx->bits, sizeof(ctx->bits));
-
- MD5Transform (ctx->buf, (uint32 *) ctx->in);
- byteReverse ((unsigned char *) ctx->buf, 4);
@@ -419,9 +417,9 @@ diff -Naur xl2tpd-1.3.1/md5.c xl2tpd-1.3.1-fips/md5.c
-}
-
-#endif
-diff -Naur xl2tpd-1.3.1/md5.h xl2tpd-1.3.1-fips/md5.h
---- xl2tpd-1.3.1/md5.h 2011-10-06 15:22:05.000000000 -0400
-+++ xl2tpd-1.3.1-fips/md5.h 1969-12-31 19:00:00.000000000 -0500
+diff -Naur xl2tpd-1.3.6-orig/md5.h xl2tpd-1.3.6/md5.h
+--- xl2tpd-1.3.6-orig/md5.h 2014-01-15 15:58:37.000000000 -0500
++++ xl2tpd-1.3.6/md5.h 1969-12-31 19:00:00.000000000 -0500
@@ -1,28 +0,0 @@
-#ifndef MD5_H
-#define MD5_H
@@ -451,3 +449,18 @@ diff -Naur xl2tpd-1.3.1/md5.h xl2tpd-1.3.1-fips/md5.h
-typedef struct MD5Context MD5_CTX;
-
-#endif /* !MD5_H */
+diff -Naur xl2tpd-1.3.6-orig/xl2tpd.c xl2tpd-1.3.6/xl2tpd.c
+--- xl2tpd-1.3.6-orig/xl2tpd.c 2014-01-15 15:58:37.000000000 -0500
++++ xl2tpd-1.3.6/xl2tpd.c 2014-05-12 14:58:58.903490392 -0400
+@@ -1310,7 +1310,10 @@
+
+
+ void usage(void) {
+- printf("\nxl2tpd version: %s\n", SERVER_VERSION);
++ printf("\nxl2tpd version: %s\n"
++"This product includes software developed by the OpenSSL Project for use\n"
++"in the OpenSSL Toolkit. (http://www.openssl.org/)\n"
++, SERVER_VERSION);
+ printf("Usage: xl2tpd [-c <config file>] [-s <secret file>] [-p <pid file>]\n"
+ " [-C <control file>] [-D]\n"
+ " [-v, --version]\n");
diff --git a/xl2tpd.spec b/xl2tpd.spec
index 94a94e2..006849d 100644
--- a/xl2tpd.spec
+++ b/xl2tpd.spec
@@ -1,23 +1,17 @@
+%global commit 5619e1771048e74b729804e8602f409af0f3faea
+
Summary: Layer 2 Tunnelling Protocol Daemon (RFC 2661)
Name: xl2tpd
-Version: 1.3.1
-Release: 7%{?dist}
+Version: 1.3.6
+Release: 1%{?dist}
License: GPL+
-Url: http://www.xelerance.com/software/xl2tpd/
+Url: https://github.com/xelerance/%{name}/
Group: System Environment/Daemons
-Source0: http://www.xelerance.com/software/xl2tpd/xl2tpd-%{version}.tar.gz
-Patch1: xl2tpd-1.3.1-Wunused.patch
-Patch2: xl2tpd-bz80693.patch
-Patch3: xl2tpd-1.3.1-kernelmode.patch
-Patch4: xl2tpd-1.3.1-conf.patch
-Patch5: xl2tpd-1.3.1-pty.patch
-Patch6: xl2tpd-1.3.1-ipparam-to-remotenumber.patch
-Patch7: xl2tpd-1.3.1-Makefile.patch
-Patch8: xl2tpd-1.3.1-md5-fips.patch
-
-BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Source0: https://github.com/xelerance/%{name}/archive/%{commit}/%{name}-%{commit}.tar.gz
+Patch1: xl2tpd-1.3.6-conf.patch
+Patch2: xl2tpd-1.3.6-md5-fips.patch
+
# The next ppp package seems to not make it into rhel6, see rhbz#815128
-# out to ease interoperability with Windows
# Requires: ppp > 2.4.5-5
Requires: ppp >= 2.4.5-5
@@ -55,17 +49,9 @@ Xl2tpd is based on the 0.69 L2TP by Jeff McAdams <jeffm at iglou.com>
It was de-facto maintained by Jacco de Leeuw <jacco2 at dds.nl> in 2002 and 2003.
%prep
-%setup -q
+%setup -qn %{name}-%{commit}
%patch1 -p1
%patch2 -p1
-%patch3 -p1
-%patch4 -p1
-%patch5 -p1
-%patch6 -p1
-%patch7 -p1
-%patch8 -p1
-
-rm linux/include/linux/if_pppol2tp.h
%build
export CFLAGS="$CFLAGS -fPIC -Wall"
@@ -118,6 +104,15 @@ fi
%ghost %attr(0600,root,root) %{_localstatedir}/run/xl2tpd/l2tp-control
%changelog
+* Mon May 12 2014 Paul Wouters <pwouters at redhat.com> - 1.3.6-1
+- Updated to 1.3.6 - using github-only monstrosity packaging
+- Resolves: rhbz#1051785 (new upstream version available)
+- Resolves: rhbz#868391 - xl2tpd sends response packets from wrong IP address
+- Revert: rhbz#929447 - Incorrect "ipparam" manipulation
+- Removed patches merged in upstream.
+- FIPS patch updated with advertising clause for openssl in xl2tpd -V
+ (although the GPL code was already basically taken from openssl)
+
* Fri May 24 2013 Paul Wouters <pwouters at redhat.com> - 1.3.1-7
- Rebuild for newer libpcap
@@ -293,7 +288,7 @@ fi
configuration files to /etc/ipsec.d and create symbolic links in
those directories.
-* Tue Aug 18 2004 Jacco de Leeuw <jacco2 at dds.nl>
+* Wed Aug 18 2004 Jacco de Leeuw <jacco2 at dds.nl>
- Removed 'leftnexthop=' lines. Not relevant for recent versions
of FreeS/WAN and derivates.
@@ -317,7 +312,7 @@ fi
('Specify your hostname', error 629: "You have been disconnected
from the computer you are dialing").
-* Thu Jul 20 2003 Jacco de Leeuw <jacco2 at dds.nl> 0.69-7jdl
+* Sun Jul 20 2003 Jacco de Leeuw <jacco2 at dds.nl> 0.69-7jdl
- Added the "listen-addr" global parameter for l2tpd.conf. By
default, the daemon listens on *all* interfaces. Use
"listen-addr" if you want it to bind to one specific
@@ -334,7 +329,7 @@ fi
IPsec client by Microsoft, it turns out that 17/0 must have
been a mistake: the updated client now also uses 17/1701.
-* Mon Apr 10 2003 Jacco de Leeuw <jacco2 at dds.nl> 0.69-6jdl
+* Thu Apr 10 2003 Jacco de Leeuw <jacco2 at dds.nl> 0.69-6jdl
- Changed sample chap-secrets to be valid only for specific
IP addresses.
More information about the scm-commits
mailing list