Summary: | net/ocserv: Update to 1.1.1 | ||||||
---|---|---|---|---|---|---|---|
Product: | Ports & Packages | Reporter: | Juraj Lutter <otis> | ||||
Component: | Individual Port(s) | Assignee: | Kurt Jaeger <pi> | ||||
Status: | Closed FIXED | ||||||
Severity: | Affects Only Me | CC: | pi | ||||
Priority: | --- | Keywords: | buildisok | ||||
Version: | Latest | ||||||
Hardware: | Any | ||||||
OS: | Any | ||||||
URL: | https://ocserv.gitlab.io/www/index.html | ||||||
Attachments: |
|
Description
Juraj Lutter
2020-10-09 14:18:46 UTC
Build and package info is available at https://gitlab.com/swills/freebsd-ports/pipelines/200510910 Please do not commit, there is some issue when connecting using Cisco AnyConnect client. So it was a "false alarm" (due to my specific config), it works OK with cisco anyconnect client. Committed, thanks! A commit references this bug: Author: pi Date: Sun Oct 11 08:36:35 UTC 2020 New revision: 552035 URL: https://svnweb.freebsd.org/changeset/ports/552035 Log: net/ocserv: update 1.0.1 -> 1.1.1 - Fixed compatibility with OpenBSD that lacks procfs - Improved rate-limit-ms and made it dependent on secmod backlog. This makes the server more resilient (and prevents connection failures) on multiple concurrent connections - Added namespace support for listen address by introducing the listen-netns option - Disable TLS1.3 when cisco client compatibility is enabled. New anyconnect clients seem to supporting TLS1.3 but are unable to handle a client with an RSA key - Enable a race free user disconnection via occtl - Added the config option of a pre-login-banner - Ocserv siwtched to using multiple ocserv-sm processes to improve scale, with the number of ocserv-sm process dependent on maximum clients and number of CPUs. Configuration option sec-mod-scale can be used to override the heuristics. - Fixed issue with group selection on radius servers sending multiple group class attribute. PR: 250225 Submitted by: Juraj Lutter <juraj@lutter.sk> Relnotes: https://gitlab.com/openconnect/ocserv/-/releases/1.1.1 Changes: head/net/ocserv/Makefile head/net/ocserv/distinfo head/net/ocserv/files/patch-configure.ac head/net/ocserv/files/patch-doc_sample.config head/net/ocserv/pkg-plist |