[arch-commits] Commit in freeradius/repos (6 files)

Felix Yan felixonmars at archlinux.org
Wed Jan 16 15:17:33 UTC 2019


    Date: Wednesday, January 16, 2019 @ 15:17:32
  Author: felixonmars
Revision: 423562

archrelease: copy trunk to community-staging-x86_64

Added:
  freeradius/repos/community-staging-x86_64/
  freeradius/repos/community-staging-x86_64/PKGBUILD
    (from rev 423561, freeradius/trunk/PKGBUILD)
  freeradius/repos/community-staging-x86_64/freeradius-sysusers.conf
    (from rev 423561, freeradius/trunk/freeradius-sysusers.conf)
  freeradius/repos/community-staging-x86_64/freeradius-tmpfiles.conf
    (from rev 423561, freeradius/trunk/freeradius-tmpfiles.conf)
  freeradius/repos/community-staging-x86_64/freeradius.service
    (from rev 423561, freeradius/trunk/freeradius.service)
  freeradius/repos/community-staging-x86_64/openssl-cve.patch
    (from rev 423561, freeradius/trunk/openssl-cve.patch)

--------------------------+
 PKGBUILD                 |   66 +++++++++++++++++++++++++++++++++++++++++++++
 freeradius-sysusers.conf |    1 
 freeradius-tmpfiles.conf |    8 +++++
 freeradius.service       |   19 ++++++++++++
 openssl-cve.patch        |   24 ++++++++++++++++
 5 files changed, 118 insertions(+)

Copied: freeradius/repos/community-staging-x86_64/PKGBUILD (from rev 423561, freeradius/trunk/PKGBUILD)
===================================================================
--- community-staging-x86_64/PKGBUILD	                        (rev 0)
+++ community-staging-x86_64/PKGBUILD	2019-01-16 15:17:32 UTC (rev 423562)
@@ -0,0 +1,66 @@
+# Maintainer: Sergej Pupykin <pupykin.s+arch at gmail.com>
+# Contributor: Jason R Begley (jayray at digitalgoat.com>
+# Contributor: Daniel Micay <danielmicay at gmail.com>
+
+pkgname=freeradius
+pkgver=3.0.17
+pkgrel=9
+pkgdesc='The premier open source RADIUS server'
+arch=('x86_64')
+url="https://freeradius.org/"
+license=('GPL')
+depends=('krb5' 'pth' 'net-snmp' 'postgresql-libs' 'mariadb-libs' 'talloc'
+         'libpcap' 'libwbclient')
+makedepends=('unixodbc' 'python2' 'curl' 'json-c' 'samba')
+optdepends=('unixodbc: for ODBC'
+            'python2: for Python'
+            'json-c: rlm_rest module'
+            'curl: for REST')
+options=('!makeflags')
+validpgpkeys=('BF2384EC6938B9744B03E2A620E37C25995B4F85') # FreeRADIUS - Package Signing [...] <packages at freeradius.org>
+source=("ftp://ftp.freeradius.org/pub/radius/freeradius-server-$pkgver.tar.bz2"{,.sig}
+        'openssl-cve.patch'
+        'freeradius-sysusers.conf'
+        'freeradius-tmpfiles.conf'
+        'freeradius.service')
+sha256sums=('3f03404b6e4a4f410e1f15ea2ababfec7f8a7ae8a49836d8a0c137436d913b96'
+            'SKIP'
+            '57cb7c8e446b914301c0ae42c01cdb7c0b9e56f32ef57e7ea7e6fd6bc0ccb4fc'
+            '573c05df429405d8647f5b52f68f7ad13bf7392314d30154df770ab170d793f8'
+            'f536a9aa972e3e42a6b1a6d8ee17166eb721c7cba2e80f60473811497c7bd8bc'
+            'c469e1a3f9edad769da01c324779babe783ee85a9b53ce4638d3d2d09c7c8d4b')
+
+prepare() {
+  cd "$srcdir"/freeradius-server-$pkgver
+
+  patch -Np1 < ../openssl-cve.patch
+}
+
+build() {
+  cd "$srcdir"/freeradius-server-$pkgver
+
+  ./configure \
+    --prefix=/usr \
+    --sbindir=/usr/bin \
+    --sysconfdir=/etc \
+    --libdir=/usr/lib/freeradius \
+    --localstatedir=/var \
+    --enable-heimdal-krb5 \
+    --with-system-libltdl \
+    --with-system-libtool \
+    --with-udpfromto
+  make
+}
+
+package() {
+  cd "$srcdir"/freeradius-server-$pkgver
+
+  make install R="$pkgdir"
+  chmod o+r "$pkgdir"/etc/raddb/*
+  mv "$pkgdir"/etc/raddb "$pkgdir"/etc/raddb.default
+  rm -rf "$pkgdir"/var/run
+
+  install -D -m0644 "$srcdir"/$pkgname.service "$pkgdir"/usr/lib/systemd/system/$pkgname.service
+  install -D -m0644 "$srcdir"/$pkgname-sysusers.conf "$pkgdir"/usr/lib/sysusers.d/$pkgname.conf
+  install -D -m0644 "$srcdir"/$pkgname-tmpfiles.conf "$pkgdir"/usr/lib/tmpfiles.d/$pkgname.conf
+}

Copied: freeradius/repos/community-staging-x86_64/freeradius-sysusers.conf (from rev 423561, freeradius/trunk/freeradius-sysusers.conf)
===================================================================
--- community-staging-x86_64/freeradius-sysusers.conf	                        (rev 0)
+++ community-staging-x86_64/freeradius-sysusers.conf	2019-01-16 15:17:32 UTC (rev 423562)
@@ -0,0 +1 @@
+u radiusd - "radius daemon" /var/lib/radiusd

Copied: freeradius/repos/community-staging-x86_64/freeradius-tmpfiles.conf (from rev 423561, freeradius/trunk/freeradius-tmpfiles.conf)
===================================================================
--- community-staging-x86_64/freeradius-tmpfiles.conf	                        (rev 0)
+++ community-staging-x86_64/freeradius-tmpfiles.conf	2019-01-16 15:17:32 UTC (rev 423562)
@@ -0,0 +1,8 @@
+# configuration directory
+C /etc/raddb 0755 radiusd radiusd - /etc/raddb.default
+
+# log file
+f /var/log/radius/radius.log 0644 radiusd radiusd -
+
+# run directory
+d /run/radiusd 0755 radiusd radiusd -

Copied: freeradius/repos/community-staging-x86_64/freeradius.service (from rev 423561, freeradius/trunk/freeradius.service)
===================================================================
--- community-staging-x86_64/freeradius.service	                        (rev 0)
+++ community-staging-x86_64/freeradius.service	2019-01-16 15:17:32 UTC (rev 423562)
@@ -0,0 +1,19 @@
+[Unit]
+Description=FreeRADIUS high performance RADIUS server.
+After=syslog.target network.target
+Documentation=man:radiusd(8) man:radiusd.conf(5) https://wiki.freeradius.org/Home https://networkradius.com/freeradius-documentation/
+
+[Service]
+Type=forking
+PIDFile=/run/radiusd/radiusd.pid
+ExecStartPre=/usr/bin/radiusd -C
+ExecStart=/usr/bin/radiusd -d /etc/raddb
+ExecReload=/usr/bin/radiusd -C
+ExecReload=/bin/kill -HUP $MAINPID
+Restart=on-failure
+RestartSec=2
+ProtectSystem=full
+ProtectHome=on
+
+[Install]
+WantedBy=multi-user.target

Copied: freeradius/repos/community-staging-x86_64/openssl-cve.patch (from rev 423561, freeradius/trunk/openssl-cve.patch)
===================================================================
--- community-staging-x86_64/openssl-cve.patch	                        (rev 0)
+++ community-staging-x86_64/openssl-cve.patch	2019-01-16 15:17:32 UTC (rev 423562)
@@ -0,0 +1,24 @@
+diff --git a/src/main/tls.c b/src/main/tls.c
+index 6ab4f2cb9a..6e9e4a6156 100644
+--- a/src/main/tls.c
++++ b/src/main/tls.c
+@@ -72,15 +72,15 @@ typedef struct libssl_defect {
+ static libssl_defect_t libssl_defects[] =
+ {
+ 	{
+-		.low		= 0x01010101f,		/* 1.1.0a */
+-		.high		= 0x01010101f,		/* 1.1.0a */
++		.low		= 0x01010001f,		/* 1.1.0a */
++		.high		= 0x01010001f,		/* 1.1.0a */
+ 		.id		= "CVE-2016-6309",
+ 		.name		= "OCSP status request extension",
+ 		.comment	= "For more information see https://www.openssl.org/news/secadv/20160926.txt"
+ 	},
+ 	{
+-		.low		= 0x01010100f,		/* 1.1.0  */
+-		.high		= 0x01010100f,		/* 1.1.0  */
++		.low		= 0x01010000f,		/* 1.1.0  */
++		.high		= 0x01010000f,		/* 1.1.0  */
+ 		.id		= "CVE-2016-6304",
+ 		.name		= "OCSP status request extension",
+ 		.comment	= "For more information see https://www.openssl.org/news/secadv/20160922.txt"


More information about the arch-commits mailing list