Update to 1.4.0 upstream release

- Resolves: rhbz#2427015

Upstream tag: 1.4.0
Upstream commit: 5f5ac6fe

Commit authored by Packit automation (https://packit.dev/)

.gitignore

@@ -1,5 +1,186 @@
-/ocserv-0.12.4.tar.xz
+/ocserv-0.2.1.tar.xz
+/ocserv-0.2.3.tar.xz
+/ocserv-0.3.0.tar.xz
+/ocserv-0.3.1.tar.xz
+/ocserv-0.3.2.tar.xz
+/ocserv-0.3.3.tar.xz
+/ocserv-0.3.4.tar.xz
+/ocserv-0.3.5.tar.xz
+/ocserv-0.8.0pre0.tar.xz
+/ocserv-0.8.0pre0.tar.xz.sig
+/ocserv-0.8.0.tar.xz
+/ocserv-0.8.0.tar.xz.sig
+/ocserv-0.8.1.tar.xz
+/ocserv-0.8.1.tar.xz.sig
+/ocserv-0.8.2.tar.xz
+/ocserv-0.8.2.tar.xz.sig
+/ocserv-0.8.4.tar.xz
+/ocserv-0.8.4.tar.xz.sig
+/ocserv-0.8.7.tar.xz.sig
+/ocserv-0.8.7.tar.xz
+/ocserv-0.8.8.tar.xz.sig
+/ocserv-0.8.8.tar.xz
+/ocserv-0.8.9.tar.xz.sig
+/ocserv-0.8.9.tar.xz
+/ocserv-0.10.2.tar.xz
+/ocserv-0.10.2.tar.xz.sig
+/ocserv-0.10.6.tar.xz
+/ocserv-0.10.6.tar.xz.sig
+/ocserv-0.10.7.tar.xz.sig
+/ocserv-0.10.7.tar.xz
+/ocserv-0.10.8.tar.xz.sig
+/ocserv-0.10.8.tar.xz
+/ocserv-0.10.9.tar.xz.sig
+/ocserv-0.10.9.tar.xz
+/ocserv-0.10.10.tar.xz.sig
+/ocserv-0.10.10.tar.xz
+/ocserv-0.10.11.tar.xz.sig
+/ocserv-0.10.11.tar.xz
+/ocserv-0.11.0.tar.xz
+/ocserv-0.11.0.tar.xz.sig
+/ocserv-0.11.1.tar.xz.sig
+/ocserv-0.11.1.tar.xz
+/ocserv-0.11.2.tar.xz
+/ocserv-0.11.2.tar.xz.sig
+/ocserv-0.11.3.tar.xz
+/ocserv-0.11.3.tar.xz.sig
+/ocserv-0.11.4.tar.xz
+/ocserv-0.11.4.tar.xz.sig
+/ocserv-0.11.5.tar.xz
+/ocserv-0.11.5.tar.xz.sig
+/ocserv-0.11.6.tar.xz
+/ocserv-0.11.6.tar.xz.sig
+/gpgkey-56EE7FA9E8173B19FE86268D763712747F343FA7.gpg
+/ocserv-script
+/ocserv-genkey
+/PACKAGE-LICENSING
+/ocserv-pamd.conf
+/ocserv.service
+/ocserv.conf
+/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
+/ocserv-0.11.7.tar.xz.sig
+/ocserv-0.11.7.tar.xz
+/ocserv.init
+/gpgkey-56EE7FA9E8173B19FE86268D763712747F343FA7.gpg
+/ocserv-script
+/ocserv-genkey
+/PACKAGE-LICENSING
+/ocserv-pamd.conf
+/ocserv.service
+/ocserv.conf
+/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
+/ocserv-0.11.8.tar.xz.sig
+/ocserv-0.11.8.tar.xz
+/ocserv.init
+/gpgkey-56EE7FA9E8173B19FE86268D763712747F343FA7.gpg
+/ocserv-script
+/ocserv-genkey
+/PACKAGE-LICENSING
+/ocserv-pamd.conf
+/ocserv.service
+/ocserv.conf
+/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
+/ocserv-0.11.9.tar.xz.sig
+/ocserv-0.11.9.tar.xz
+/ocserv.init
+/gpgkey-56EE7FA9E8173B19FE86268D763712747F343FA7.gpg
+/ocserv-script
+/ocserv-genkey
+/PACKAGE-LICENSING
+/ocserv-pamd.conf
+/ocserv.service
+/ocserv.conf
+/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
+/ocserv-0.11.9.tar.xz.sig
+/ocserv-0.11.9.tar.xz
+/ocserv.init
+/gpgkey-56EE7FA9E8173B19FE86268D763712747F343FA7.gpg
+/ocserv-script
+/ocserv-genkey
+/PACKAGE-LICENSING
+/ocserv-pamd.conf
+/ocserv.service
+/ocserv.conf
+/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
+/ocserv-0.11.10.tar.xz.sig
+/ocserv-0.11.10.tar.xz
+/ocserv.init
+/gpgkey-56EE7FA9E8173B19FE86268D763712747F343FA7.gpg
+/ocserv-script
+/ocserv-genkey
+/PACKAGE-LICENSING
+/ocserv-pamd.conf
+/ocserv.service
+/ocserv.conf
+/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
+/ocserv-0.11.11.tar.xz.sig
+/ocserv-0.11.11.tar.xz
+/ocserv.init
+/gpgkey-56EE7FA9E8173B19FE86268D763712747F343FA7.gpg
+/ocserv-script
+/ocserv-genkey
+/PACKAGE-LICENSING
+/ocserv-pamd.conf
+/ocserv.service
+/ocserv.conf
+/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
+/ocserv-0.11.11.tar.xz.sig
+/ocserv-0.11.11.tar.xz
+/ocserv.init
+/gpgkey-56EE7FA9E8173B19FE86268D763712747F343FA7.gpg
+/ocserv-script
+/ocserv-genkey
+/PACKAGE-LICENSING
+/ocserv-pamd.conf
+/ocserv.service
+/ocserv.conf
+/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
+/ocserv-0.12.0.tar.xz.sig
+/ocserv-0.12.0.tar.xz
+/ocserv.init
+/gpgkey-56EE7FA9E8173B19FE86268D763712747F343FA7.gpg
+/ocserv-script
+/ocserv-genkey
+/PACKAGE-LICENSING
+/ocserv-pamd.conf
+/ocserv.service
+/ocserv.conf
+/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
+/ocserv-0.12.1.tar.xz.sig
+/ocserv-0.12.1.tar.xz
+/ocserv.init
+/gpgkey-56EE7FA9E8173B19FE86268D763712747F343FA7.gpg
+/ocserv-script
+/ocserv-genkey
+/PACKAGE-LICENSING
+/ocserv-pamd.conf
+/ocserv.service
+/ocserv.conf
+/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
+/ocserv-0.12.2.tar.xz.sig
+/ocserv-0.12.2.tar.xz
+/ocserv.init
+/gpgkey-56EE7FA9E8173B19FE86268D763712747F343FA7.gpg
+/ocserv-script
+/ocserv-genkey
+/PACKAGE-LICENSING
+/ocserv-pamd.conf
+/ocserv.service
+/ocserv.conf
+/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
+/ocserv-0.12.3.tar.xz.sig
+/ocserv-0.12.3.tar.xz
+/ocserv.init
+/gpgkey-56EE7FA9E8173B19FE86268D763712747F343FA7.gpg
+/ocserv-script
+/ocserv-genkey
+/PACKAGE-LICENSING
+/ocserv-pamd.conf
+/ocserv.service
+/ocserv.conf
+/gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
 /ocserv-0.12.4.tar.xz.sig
+/ocserv-0.12.4.tar.xz
 /ocserv.init
 /gpgkey-56EE7FA9E8173B19FE86268D763712747F343FA7.gpg
 /ocserv-script
@@ -68,3 +249,5 @@
 /ocserv-1.2.4.tar.xz.sig
 /ocserv-1.3.0.tar.xz
 /ocserv-1.3.0.tar.xz.sig
+/ocserv-1.4.0.tar.xz
+/ocserv-1.4.0.tar.xz.sig

README.packit

@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 0.95.0.post1.dev8+gce6bd577.
+The file was generated using packit 1.13.0.post1.dev2+g84134016c.

ocserv-genkey

@@ -1,9 +1,25 @@
 #!/bin/sh
+#default key type:rsa
+KEY_TYPE="rsa"
+
+#check key type 'rsa', 'rsa-pss', 'dsa', 'ecdsa', 'ed25519, 'ed448', 'x25519', and 'x448'
+if [ $# -gt 0 ]; then
+    case "$1" in
+        rsa|rsa-pss|dsa|ecdsa|ed25519|ed448|x25519|x448)
+            KEY_TYPE="$1"
+            ;;
+        *)
+            echo "Usage: $0 [rsa|rsa-pss|dsa|ecdsa|ed25519|ed448|x25519|x448]"
+            echo "Default key type: rsa"
+            exit 1
+            ;;
+    esac
+fi
 
 #generate CA certificate/key
 if test ! -f /etc/pki/ocserv/private/ca.key;then
 mkdir -p /etc/pki/ocserv/private
-certtool --generate-privkey --outfile /etc/pki/ocserv/private/ca.key >/dev/null 2>&1
+certtool --generate-privkey --key-type=$KEY_TYPE --outfile /etc/pki/ocserv/private/ca.key >/dev/null 2>&1
 echo "cn=`hostname -f` CA" >/etc/pki/ocserv/ca.tmpl
 echo "expiration_days=-1" >>/etc/pki/ocserv/ca.tmpl
 echo "serial=1" >>/etc/pki/ocserv/ca.tmpl
@@ -17,7 +33,7 @@ fi
 
 #generate server certificate/key
 if test ! -f /etc/pki/ocserv/private/server.key;then
-certtool --generate-privkey --outfile /etc/pki/ocserv/private/server.key >/dev/null 2>&1
+certtool --generate-privkey --key-type=$KEY_TYPE --outfile /etc/pki/ocserv/private/server.key >/dev/null 2>&1
 echo "cn=`hostname -f`" >/etc/pki/ocserv/server.tmpl
 echo "serial=2" >>/etc/pki/ocserv/server.tmpl
 echo "expiration_days=-1" >>/etc/pki/ocserv/server.tmpl

ocserv.conf

@@ -301,7 +301,7 @@ cert-user-oid = 0.9.2342.19200300.100.1.1
 # difference with AES_128_CBC_SHA1 (the default for anyconnect clients)
 # in your system.
 
-# Note that in RHEL gnutls follows crypto policies so insecure options
+# Note that in Fedora gnutls follows crypto policies so insecure options
 # are disabled within it.
 tls-priorities = "NORMAL:%SERVER_PRECEDENCE"
 

ocserv.spec

@@ -1,5 +1,5 @@
-Version:	1.3.0
-Release:  1%{?dist}
+Version:	1.4.0
+Release: %autorelease
 %global _hardened_build 1
 
 %if 0%{?fedora} || 0%{?rhel} >= 7
@@ -25,8 +25,8 @@ Summary:	OpenConnect SSL VPN server
 
 # For a breakdown of the licensing, see PACKAGE-LICENSING 
 # To simplify licenses LGPLv2+ files have been promoted to GPLv2+.
-License:	GPLv2+ and BSD and MIT and CC0
-URL:		https://gui.openconnect-vpn.net
+License:	GPL-2.0-or-later AND BSD-3-Clause AND MIT AND CC0-1.0
+URL:		https://ocserv.openconnect-vpn.net/
 Source0:	https://www.infradead.org/ocserv/download/%{name}-%{version}.tar.xz
 Source1:	https://www.infradead.org/ocserv/download/%{name}-%{version}.tar.xz.sig
 Source2:	gpgkey-1F42418905D8206AA754CCDC29EE58B996865171.gpg
@@ -43,6 +43,7 @@ Source11:	ocserv.init
 # http://git.infradead.org/ocserv.git/commitdiff/7d70006a2dbddf783213f1856374bacc74217e09
 
 BuildRequires: make
+BuildRequires: libxcrypt-devel
 BuildRequires:	gcc
 %if 0%{?rhel} && 0%{?rhel} <= 6
 BuildRequires:	gnutls30-devel
@@ -56,7 +57,7 @@ BuildRequires:	protobuf-c-devel
 %endif
 
 BuildRequires:	libnl3-devel, krb5-devel, libtasn1-devel, gperf, libtalloc-devel
-BuildRequires:	libev-devel, radcli-devel, lz4-devel, readline-devel
+BuildRequires:	libev-devel, llhttp-devel, radcli-devel, lz4-devel, readline-devel
 BuildRequires:	automake, autoconf
 
 %if %{use_libwrap}
@@ -73,7 +74,11 @@ BuildRequires:	systemd
 BuildRequires:	systemd-devel
 BuildRequires:	liboath-devel
 BuildRequires:	uid_wrapper
+# Disable socket_wrapper on certain architectures because it
+# introduces new syscalls that the worker cannot handle.
+%ifnarch aarch64 %{ix86} %{arm}
 BuildRequires:	socket_wrapper
+%endif
 BuildRequires:	gnupg2
 
 %if 0%{?rhel} && 0%{?rhel} >= 7
@@ -90,20 +95,18 @@ BuildRequires:	libseccomp-devel
 
 # no rubygem in epel7
 %if 0%{?fedora}
-BuildRequires: rubygem(ronn)
+BuildRequires:	rubygem-ronn-ng
 %endif
 
 Recommends:		gnutls-utils
 Recommends:		iproute
 Recommends:		pam
-Requires(pre):		shadow-utils
 %if %{use_systemd}
 Requires(post):		systemd
 Requires(preun):	systemd
 Requires(postun):	systemd
 %endif
 
-Provides:		bundled(llhttp)
 #gnulib is bundled. See https://fedorahosted.org/fpc/ticket/174
 Provides:		bundled(gnulib)
 #CCAN is bundled. See https://fedorahosted.org/fpc/ticket/364
@@ -126,7 +129,6 @@ gpgv2 --keyring %{SOURCE2} %{SOURCE1} %{SOURCE0} || gpgv2 --keyring %{SOURCE10}
 
 %autosetup -p1
 
-rm -f src/http-parser/http_parser.c src/http-parser/http_parser.h
 %if (0%{?use_local_protobuf} == 0)
 rm -rf src/protobuf/protobuf-c/
 touch src/*.proto
@@ -139,6 +141,11 @@ sed -i 's/run-as-group = nogroup/run-as-group = nobody/g' tests/data/*.config
 echo "int main() { return 77; }" > tests/valid-hostname.c
 %endif
 
+# Create a sysusers.d config file
+cat >ocserv.sysusers.conf <<EOF
+u ocserv - 'ocserv' %{_localstatedir}/lib/ocserv -
+EOF
+
 %build
 
 %if 0%{?rhel} && 0%{?rhel} <= 6
@@ -169,10 +176,6 @@ autoreconf -fvi
 make %{?_smp_mflags}
 
 %pre
-getent group ocserv &>/dev/null || groupadd -r ocserv
-getent passwd ocserv &>/dev/null || \
-	/usr/sbin/useradd -r -g ocserv -s /sbin/nologin -c ocserv \
-		-d %{_localstatedir}/lib/ocserv ocserv
 mkdir -p %{_sysconfdir}/pki/ocserv/public
 mkdir -p -m 700 %{_sysconfdir}/pki/ocserv/private
 mkdir -p %{_sysconfdir}/pki/ocserv/cacerts
@@ -223,6 +226,8 @@ install -D -m 0755 %{SOURCE11} %{buildroot}/%{_initrddir}/%{name}
 
 %make_install
 
+install -m0644 -D ocserv.sysusers.conf %{buildroot}%{_sysusersdir}/ocserv.conf
+
 %files
 %defattr(-,root,root,-)
 
@@ -253,355 +258,7 @@ install -D -m 0755 %{SOURCE11} %{buildroot}/%{_initrddir}/%{name}
 %else
 %{_initrddir}/%{name}
 %endif
+%{_sysusersdir}/ocserv.conf
 
 %changelog
-* Sun May  5 2024 Packit <hello@packit.dev> - 1.3.0-1
-- Switch to https://github.com/nodejs/llhttp from http-parser.
-  http-parser was a liability as an unmaintained project (#598)
-- Bump the number of groups per account from 128 to 512 (#219)
-- Allow connecting users to select an authgroup by appending the
-  group name to the URL, as in https://vpn.example.com/groupname;
-  this introduces the select-group-by-url config option (#597).
-- Informational messages due to configuration loading are not printed
-  during worker initialization.
-
-
-- Resolves: rhbz#2279186
-
-* Wed Jan  24 2024 Packit <hello@packit.dev> - 1.2.4-1
-- Get connection speed limits (traffic shaping) from RADIUS (#554)
-- Fix logging to stderr: add missing newline.
-- Fixed compatibility with AnyConnect clients on Linux (#544)
-- Detect the new AnyConnect-compatible identifier of OpenConnect clients
-- occtl: Print bit rates as kb/s.
-
-
-* Thu Sep  21 2023 Packit <hello@packit.dev> - 1.2.2-1
-- Fix session and accounting data tracking of ocserv. This
-  reverts fix for #444 (#541)
-- No longer account ICMP and IGMP data for idle session detection
-
-
-* Wed Aug  23 2023 Packit <hello@packit.dev> - 1.2.1-1
-- Accept the Clavister OneConnect VPN Android client (#485)
-- No longer require to set device name per vhost (#480)
-- Account the correct number of points when proxyproto is in use (#529)
-- nuttcp tests were replaced with iperf3 that is available
-  in more environments
-- occtl: fix duplicate key in `occtl --json show users` output
-
-
-* Tue Aug 15 2023 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 1.2.0-2
-- Restart service on upgrade
-
-* Tue Jul 11 2023 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 1.2.0-1
-- Updated to 1.2.0
-
-* Thu Jun 22 2023 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 1.1.7-2
-- Updated to 1.1.7
-- Backported patch for expired certificates
-
-* Thu Feb 17 2022 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 1.1.6-1
-- Updated to 1.1.6
-
-* Sat Nov 13 2021 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 1.1.4-1
-- Update to upstream 1.1.4 release
-
-* Wed Jun  2 2021 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 1.1.3-1
-- Updated to latest release
-
-* Wed Dec  9 2020 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 1.1.2-3
-- Recompile without pcllib dependency
-- Recompile with http-parser
-
-* Sun Dec  6 2020 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 1.1.2-1
-- Update to upstream 1.1.2 release
-
-* Mon Sep 21 2020 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 1.1.1-1
-- Update to upstream 1.1.1 release
-
-* Tue Jun 16 2020 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 1.1.0-1
-- Update to upstream 1.1.0 release (introduces ocserv-worker)
-
-* Thu Apr 09 2020 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 1.0.1-1
-- Update to upstream 1.0.1 release
-
-* Fri Mar 20 2020 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 1.0.0-1
-- Update to upstream 1.0.0 release
-
-* Thu Jan  2 2020 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 0.12.6-2
-- Updated configuration file from upstream and marked profile as config file
-
-* Sat Dec 28 2019 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 0.12.6-1
-- Update to upstream 0.12.6 release
-
-* Wed Oct 16 2019 Nikos Mavrogiannopoulos <nmav@gnutls.org> - 0.12.5-1
-- Update to upstream 0.12.5 release
-
-* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.12.4-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
-
-* Wed Jul 03 2019 Nikos Mavrogiannopoulos <nmav@gnutls.org> - 0.12.4-1
-- Update to upstream 0.12.4 release
-
-* Tue Mar 12 2019 Nikos Mavrogiannopoulos <nmav@gnutls.org> - 0.12.3-1
-- Update to upstream 0.12.3 release
-
-* Sun Feb 17 2019 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 0.12.2-4
-- Rebuild for readline 8.0
-
-* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.12.2-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
-
-* Mon Jan 14 2019 Björn Esser <besser82@fedoraproject.org> - 0.12.2-2
-- Rebuilt for libcrypt.so.2 (#1666033)
-
-* Thu Jan 10 2019 Nikos Mavrogiannopoulos <nmav@gnutls.org> - 0.12.2-1
-- Update to upstream 0.12.2 release
-
-* Tue Jul 24 2018 Nikos Mavrogiannopoulos <nmav@gnutls.org> - 0.12.1-3
-- Added gcc as build-dependency
-
-* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.12.1-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
-
-* Sat May 12 2018 Nikos Mavrogiannopoulos <nmav@gnutls.org> - 0.12.1-1
-- Update to upstream 0.12.1 release
-
-* Mon Apr 23 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.12.0-1
-- Update to upstream 0.12.0 release
-
-* Thu Apr 12 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.11-2
-- Update to upstream 0.11.11 release
-- include crypt.h to use crypt()
-
-* Mon Mar 05 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.11-1
-- Update to upstream 0.11.11 release
-
-* Thu Feb 08 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.11.10-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
-
-* Sat Jan 20 2018 Björn Esser <besser82@fedoraproject.org> - 0.11.10-2
-- Rebuilt for switch to libxcrypt
-
-* Mon Jan 08 2018 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.10-1
-- Update to upstream 0.11.10 release
-
-* Tue Nov 21 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.9-3
-- Update to upstream 0.11.9 release
-
-* Thu Nov 16 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.9-2
-- Do not enable libwrap
-
-* Tue Oct 10 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.9-1
-- Update to upstream 0.11.9 release
-
-* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.11.8-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
-
-* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.11.8-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
-
-* Wed May 03 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.8-1
-- Update to upstream 0.11.8 release
-
-* Mon Feb 13 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.7-1
-- Update to upstream 0.11.7 release
-
-* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.11.6-4
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
-
-* Thu Jan 12 2017 Igor Gnatenko <ignatenko@redhat.com> - 0.11.6-3
-- Rebuild for readline 7.x
-
-* Tue Nov 15 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.6-2
-- Removed gpgkeys from sources
-
-* Tue Nov 15 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.6-1
-- New upstream release
-
-* Wed Sep 14 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.4-3
-- Added getrandom to the list of allowed syscalls (#1375851)
-
-* Thu Sep  8 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.4-2
-- Rebuild to address http-parser breakage (#1374081)
-
-* Fri Aug  5 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.4-1
-- New upstream release
-
-* Thu Jun 16 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.3-1
-- New upstream release
-
-* Tue Apr 26 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.2-1
-- New upstream release
-- Added automatic verification of signature during build
-
-* Mon Mar 21 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.1-1
-- new upstream release
-
-* Fri Feb 19 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.11.0-1
-- new upstream release
-
-* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.10.11-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
-
-* Mon Jan 11 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.11-1
-- new upstream release
-
-* Mon Nov 30 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.10-1
-- new upstream release
-
-* Thu Oct  8 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.9-1
-- new upstream release (#1269479)
-
-* Thu Sep 17 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.8-2
-- compile ocserv using radcli
-
-* Mon Sep  7 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.8-1
-- new upstream release (#1260327)
-
-* Fri Aug  7 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.7-1
-- new upstream release (#1251305)
-
-* Thu Jul  9 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.6-2
-- corrected JSON output
-
-* Thu Jul  2 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.6-1
-- new upstream release (#1238499)
-
-* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.10.5-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
-
-* Mon May 25 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.5-1
-- new upstream release (#1215326)
-
-* Mon Apr 27 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.4-1
-- new upstream release
-
-* Mon Mar 30 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.2-1
-- new upstream release
-
-* Mon Mar 16 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.1-1
-- new upstream release
-
-* Wed Mar 11 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.0-1
-- new upstream release
-
-* Wed Feb 18 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.9.2-1
-- new upstream release
-- enabled lz4 compression
-
-* Mon Feb 16 2015 Peter Robinson <pbrobinson@fedoraproject.org> 0.9.1-2
-- aarch64 (and ARMv7) now has seccomp support
-
-* Mon Feb 16 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.9.1-1
-- new upstream release
-
-* Thu Jan 29 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.9.0-2
-- only enable seccomp in x86-64. It seems to be broken in x86:
-  http://sourceforge.net/p/libseccomp/mailman/message/33275762/
-
-* Thu Jan 22 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.9.0-1
-- new upstream release
-
-* Fri Jan  9 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.8.9-4
-- enable PIE
-
-* Tue Jan  6 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.8.9-3
-- Comply with system-wide crypto policies (#1179332)
-
-* Mon Jan  5 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.8.9-2
-- ocserv.service: depend on network-online.target (#1178760)
-- enable seccomp (on platforms it is available)
-
-* Thu Dec 11 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.8.9-1
-- New upstream release
-
-* Wed Nov 26 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.8.8-1
-- New upstream release
-
-* Mon Oct 27 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.8.7-1
-- New upstream release
-
-* Tue Sep 09 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.8.4-2
-- Ship a default ocserv-script, which will put connecting clients
-  into the internal firewall zone.
-
-* Thu Aug 28 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.8.4-1
-- New upstream release
-
-* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.8.2-4
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
-
-* Fri Aug 08 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.8.2-3
-- Rebuilt
-
-* Tue Aug 05 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.8.2-2
-- Rebuilt for new protobuf-c
-
-* Mon Jul 28 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.8.2-1
-- New upstream release
-
-* Mon Jun 30 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.8.1-1
-- New upstream release
-
-* Fri Jun 06 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.8.0-2
-- Generate certificates and private keys before the first run
-- Corrected chroot path
-
-* Mon Jun 02 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.8.0-1
-- New upstream release
-
-* Mon May 26 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.8.0pre0-1
-- New upstream release
-
-* Fri May 09 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.3.5-1
-- New upstream release
-
-* Fri May 02 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.3.4-1
-- New upstream release
-
-* Thu Apr 10 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.3.3-1
-- New upstream release
-
-* Fri Mar 14 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.3.2-1
-- New upstream release
-
-* Mon Feb 17 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.3.1-2
-- new upstream release
-
-* Wed Jan 29 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.3.0-2
-- Generated certificates no longer carry an expiration date.
-
-* Mon Jan 27 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.3.0-1
-- Updated to latest upstream version (0.3.0).
-- Certificates and private keys are auto-generated.
-
-* Mon Dec 16 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.2.3-1
-- Updated to latest upstream version (0.2.3).
-- Corrected the chroot directory in config file.
-
-* Fri Dec  6 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.2.1-6
-- Added exception for the bundling of CCAN components.
-
-* Wed Nov 13 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.2.1-5
-- Updated the way PACKAGE-LICENSING is handled.
-
-* Tue Nov 12 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.2.1-4
-- Replaced gnulib's GPLv3+ license with GPLv2+. According to 
-  http://lists.gnu.org/archive/html/bug-gnulib/2013-11/msg00062.html
-  it was a gnulib bug.
-- Reduced the number of applicable licenses by upgrading LGPLv2+ 
-  components to GPLv2+.
-- Added PACKAGE-LICENSING.
-
-* Mon Nov 11 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.2.1-3
-- Updated spec to add http-parser and pcllib as dependencies.
-- Bundled library files are removed.
-- Updated license information.
-
-* Fri Nov  8 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.2.1-2
-- Updated spec to account improvements suggested by Alec Leamas.
-
-* Thu Nov  7 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.2.1-1
-- Initial version of the package
+%autochangelog

sources

@@ -1,2 +1,2 @@
-SHA512 (ocserv-1.3.0.tar.xz) = 24c3129b389fa767ad14f158580d8abd6830e697162b8fcfe3df6a4d21d543460c1955c3e0c63fecb8b4b01bd2492254d3eea8d5ba60d864cea314325badda7e
-SHA512 (ocserv-1.3.0.tar.xz.sig) = dd6a2e6f28a512bda19e758b32149cfe7951151edab8c34ac371dbcd17eed4a8b10fdfee306629c1d42c2a3e22bcfe523ee2aafb84d59181d5be719c399cfb7d
+SHA512 (ocserv-1.4.0.tar.xz) = cef771c6ee43925d743b7a21fed1cd7d54c10e39c0966fbc7062df9b7691c9a3a73c1c4589382592668f81809edea0fe0b947c7ddf86a6cdc1a144cf059526b0
+SHA512 (ocserv-1.4.0.tar.xz.sig) = a73ce14e8e355f747e40241056c2bb734d6dae4e1d6aed0f24aaa6d1a469f6d86a077af4a38e6376846fd5520ee33c7be8ce7b3830bcb0faa5e32b12ed7483cd