Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Do not list client exports for revoked certificates. #194

Closed
wants to merge 1 commit into from
Closed

Do not list client exports for revoked certificates. #194

wants to merge 1 commit into from

Conversation

skrude61
Copy link
Contributor

Exporting clients for revoked certificates makes no sense.

@jim-p
Copy link
Contributor

jim-p commented Sep 22, 2016

It's a good start but it needs to be a stricter check. The fact that a cert is revoked doesn't mean it can't be used at all. Someone could have the same CA on two servers, with different CRLs chosen on each, but only have a specific cert revoked in one of them. So in that example, the certificate in question should be listed on one server and not on the other, depending on the chosen CRL.

So what this should do is only check the cert to see if it's revoked against the CRL chosen for this specific OpenVPN instance. If the OpenVPN instance has no CRL selected, then it should not check at all.

Thanks!

@jim-p jim-p closed this Sep 22, 2016
@skrude61
Copy link
Contributor Author

OK, good point. New PR submitted.

netgate-git-updates pushed a commit that referenced this pull request Dec 9, 2018
@ephemeralriggs
Update to upstream version 2.5.0
147da77 
Detailed maintainer log:
- Update from 2.4.2 to 2.5.0
- Change sources from MASTER_SITES to GitHub
- Update version of Python dependency
- Remove CONFIGURE
- Add CFLAGS to find gmp.h
- Remov INSTALL_TARGET
- Update WWW in pkg-descr
- Update pkg-plist

The new version brings some enhancements and changes:

- New AGS global solver (#194), thanks to Vladislav Sovrasov
- New nlopt_get_numevals function providing a built-in evaluation
  counter (#160)
- New nlopt_get_errmsg function for more descriptive error messages
- Build system is converted from autotools to cmake (#49), thanks
  to Julien Schueller
- Plugins updated for recent Octave and Guile versions
- Various other build fixes and minor bug fixes

PR:		233497
Submitted by:	[email protected] (maintainer)
netgate-git-updates pushed a commit that referenced this pull request Mar 3, 2020
@fernape
sysutils/yadm: update to 2.4.0
c204cea 
From ChangeLog: https://github.com/TheLocehiliosan/yadm/releases/tag/2.4.0

Update version number and update documentation

 * Support multiple keys in `yadm.gpg-recipient` (#139)
 * Ensure all templates are written atomically (#142)
 * Add encrypt_with_checksums to the hooks collection (#188)
 * Escape white space in YADM_HOOK_FULL_COMMAND (#187)
 * Improve parsing of os-release (#194)
 * Improve identification of WSL (#196)
 * Fix troff warnings emitted by man page (#195)
 * Write encrypt-based exclusions during decrypt

PR:	244509
Submitted by:	[email protected] (maintainer)
netgate-git-updates pushed a commit that referenced this pull request Nov 20, 2021
@fraggerfox
www/jira-cli: Update to 0.2.0
2300d71 
Changes since 0.1.1:

> This version has some breaking changes in the config file and, you will
need to regenerate the config for all features to work.

- The tool is now compatible with next-gen/team-managed project.
- New filters when listing issues, viz:
  - Filter by parent: This will allow you to list all sub-tasks of a task.
  - Order by filter: This will allow you to display a list sorted by their
    rank for example.
- You can now assign epic to the issue on creation.
- You can add issues to the sprint with `jira sprint add`

- feat: Allow to assign epic on create #194
- feat: Cmd to add issues to sprint #205
- feat: Allow to filter by parent #197
- feat: Add order-by filter #206
- feat: Add type on project listing #190

- fix: Make epic add work in next-gen project #195
- fix: Epic creation for next-gen project #192
- fix: Make epic remove work in next-gen project #196
- fix: Make epic list work for next-gen project #201
- fix: Segmentation fault on view #202
- fix(tui): Link/key copy is broken for altered key col #204

- cfg!: Expand config to include project type #191
- cfg!: Rename field to name and add link field to epic #193

- dep: Upgrade rivo/tview #176
- dep: Upgrade outdated deps to latest #177
- dep: Use Go 1.17 #178

**Full Changelog**: ankitpokhrel/jira-cli@v0.1.1...v0.2.0
netgate-git-updates pushed a commit that referenced this pull request Aug 4, 2022
comms/freedv: Update to v1.7.0
1731b07 
Unbreaks port

upstream notes:
Bugfixes:

    Resolves issue with waterfall appearing garbled on some systems. (PR #205)
    Resolves issue with Restore Defaults restoring previous settings on exit. (PR #207)
    Resolves issue with some sound valid sound devices causing PortAudio errors during startup checks. (PR #192)

Enhancements:

    Removes requirement to restart FreeDV after using Restore Defaults. (PR #207)
    Hides frequency display on main window unless PSK Reporter reporting is turned on. (PR #207)
    Scales per-mode squelch settings when in multi-RX mode to reduce unwanted noise. (PR #186)
    Single-thread mode is now the default when multi-RX is turned on. (PR #175)
    Makes multi-RX mode the default. (PR #175)
    Mic In/Speaker Out volume controls added to Filter window. (PR #208)
    Cleans up UI for filters and makes the dialog non-modal. (PR #208)
    Adds optional support for PulseAudio on Linux systems. (PR #194)

Documentation:

    Resolves issue with PDF image placement. (PR #203)

Build System:

    Uses more portable way of referring to Bash in build scripts. (PR #200)
    User manual now installed along with executable. (PR #187)
    macOS app bundle generated by CMake instead of manually. (PR #184)
    Fail as soon as a step in the build script fails. (PR #183)

PR:		ports/264769
Reported by:	[email protected]
Tested by:	[email protected]
netgate-git-updates pushed a commit that referenced this pull request Feb 15, 2023
@cschuber
security/sudo: Update to 1.9.13
8bd6398 
Major changes between sudo 1.9.13 and 1.9.12p2:

 * Fixed a bug running relative commands via sudo when "log_subcmds"
   is enabled.  GitHub issue #194.

 * Fixed a signal handling bug when running sudo commands in a shell
   script.  Signals were not being forwarded to the command when
   the sudo process was not run in its own process group.

 * Fixed a bug in cvtsudoers' LDIF parsing when the file ends without
   a newline and a backslash is the last character of the file.

 * Fixed a potential use-after-free bug with cvtsudoers filtering.
   GitHub issue #198.

 * Added a reminder to the default lecture that the password will
   not echo. This line is only displayed when the pwfeedback option
   is disabled. GitHub issue #195.

 * Fixed potential memory leaks in error paths.  GitHub issues #199,
   #202.

 * Fixed potential NULL dereferences on memory allocation failure.
   GitHub issues #204, #211.

 * Sudo now uses C23-style attributes in function prototypes instead
   of gcc-style attributes if supported.

 * Added a new "list" pseudo-command in sudoers to allow a user to
   list another user's privileges.  Previously, only root or a user
   with the ability to run any command as either root or the target
   user on the current host could use the -U option.  This also
   includes a fix to the log entry when a user lacks permission to
   run "sudo -U otheruser -l command".  Previously, the logs would
   indicate that the user tried to run the actual command, now the
   log entry includes the list operation.

 * JSON logging now escapes control characters if they happen to
   appear in the command or environment.

 * New Albanian translation from translationproject.org.

 * Regular expressions in sudoers or logsrvd.conf may no longer
   contain consecutive repetition operators.  This is implementation-
   specific behavior according to POSIX, but some implementations
   will allocate excessive amounts of memory.  This mainly affects
   the fuzzers.

 * Sudo now builds AIX-style shared libraries and dynamic shared
   objects by default instead of svr4-style. This means that the
   default sudo plugins are now .a (archive) files that contain a
   .so shared object file instead of bare .so files.  This was done
   to improve compatibility with the AIX Freeware ecosystem,
   specifically, the AIX Freeware build of OpenSSL.  Sudo will still
   load svr4-style .so plugins and if a .so file is requested,
   either via sudo.conf or the sudoers file, and only the .a file
   is present, sudo will convert the path from plugin.so to
   plugin.a(plugin.so) when loading it.  This ensures compatibility
   with existing configurations.  To restore the old, pre-1.9.13
   behavior, run configure using the --with-aix-soname=svr4 option.

 * Sudo no longer checks the ownership and mode of the plugins that
   it loads.  Plugins are configured via either the sudo.conf or
   sudoers file which are trusted configuration files.  These checks
   suffered from time-of-check vs. time-of-use race conditions and
   complicate loading plugins that are not simple paths.  Ownership
   and mode checks are still performed when loading the sudo.conf
   and sudoers files, which do not suffer from race conditions.
   The sudo.conf "developer_mode" setting is no longer used.

 * Control characters in sudo log messages and "sudoreplay -l"
   output are now escaped in octal format.  Space characters in the
   command path are also escaped.  Command line arguments that
   contain spaces are surrounded by single quotes and any literal
   single quote or backslash characters are escaped with a backslash.
   This makes it possible to distinguish multiple command line
   arguments from a single argument that contains spaces.

 * Improved support for DragonFly BSD which uses a different struct
   procinfo than either FreeBSD or 4.4BSD.

 * Fixed a compilation error on Linux arm systems running older
   kernels that may not define EM_ARM in linux/elf-em.h.
   GitHub issue #232.

 * Fixed a compilation error when LDFLAGS contains -Wl,--no-undefined.
   Sudo will now link using -Wl,--no-undefined by default if possible.
   GitHub issue #234.

 * Fixed a bug executing a command with a very long argument vector
   when "log_subcmds" or "intercept" is enabled on a system where
   "intercept_type" is set to "trace".  GitHub issue #194.

 * When sudo is configured to run a command in a pseudo-terminal
   but the standard input is not connected to a terminal, the command
   will now be run as a background process.  This works around a
   problem running sudo commands in the background from a shell
   script where changing the terminal to raw mode could interfere
   with the interactive shell that ran the script.
   GitHub issue #237.

 * A missing include file in sudoers is no longer a fatal error
   unless the error_recovery plugin argument has been set to false.

PR:		269563
Submitted by:	cy
Reported by:	cy
Approved by:	garga
MFH:		2023Q1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@skrude61 @jim-p @netgate-git-updates