VPNC - Client for Cisco 3000 VPN Concentrator, IOS and PIX
Vpnc is a VPN client for the Cisco 3000 VPN Concentrator, creating a
IPSec-like connection as a tunneling network device for the local
system. The created connection is presented as a tunneling network
device to the local system. The daemon runs entirely in userspace.
===> The following configuration options are available for vpnc-0.5.3_15:
CISCOVERSION=off: Mask linux presentation string
DECRYPT=on: cisco-decypt password decrypt utility
DOCS=on: Build and/or install documentation
SSL=off: SSL protocol support
===> Use 'make config' to modify these settings
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
Deorbit RESTRICTED && NO_CDROM, part one.
For ports that already use the licenses framwork, merge the content of
RESTRICTED/NO_CDROM/LEGAL* entries into LICENSEs.
Approved by: rene
Differential Revision: https://reviews.freebsd.org/D30010
Remove compatibility code for FreeBSD < 11.2 from all ports.
Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by: rene
Reviewed by: bapt, jbeich
Differential Revision: https://reviews.freebsd.org/D17724
Fix bug on __FreeBSD_version >= 1100042 where once vpnc set up a tunnel and
went into the main loop, no esp could be sent.
PR: 197835 (based on)
Submitted by: markiyan.kushnir@gmail.com
Fix confirmed: xmj
security/vpnc: Update sysdep.h patch to support dragonfly
While here, remove the __FreeBSD_version check as this will always
pass on supported releases of FreeBSD.
Approved by: blanket (non-invasive DragonFly support)
security/libgcrypt: 1.6.1 -> 1.6.2, bump depends
Changes:
- src/sexp.c (do_vsexp_sscan): Return error for invalid args.
- cipher/md.c (_gcry_md_info): Fix a segv in case of calling
with wrong parameters.
- cipher/primegen.c (_gcry_generate_elg_prime): Change to return an
error code, possible NULL deref in call to prime generator.
- cipher/dsa.c (generate): Take care of new return code.
- cipher/elgamal.c (generate): Change to return an error code. Take
care of _gcry_generate_elg_prime return code.
- ecc: Support the non-standard 0x40 compression flag for EdDSA.
- mpi: Extend the internal mpi_get_buffer.
- mpi: Fix regression for powerpc-apple-darwin detection.
- Fix bug inhibiting the use of the sentinel attribute in src/gcrypt.h.in
(Only the first 15 lines of the commit message are shown above )
- Convert USE_GMAKE to USES=gmake
- Change pkgconfig:build to pkgconfig since it's the same and it's bad practice.
It accidentally slipped in during the original introduction
- Trim header
Restore 'Created by' header information. This has been removed during the
first announcement of the new trimming rule and the finalized overworked
version.
Feature safe: yes
Point shebang in a perl script to ${PERL} in order to solve a build problem if
perl is installed without creating symlinks to /usr/bin/perl.
PR: 171673 (based on)
Notified by: Yuriy Taraday <yorik.sar@gmail.com>
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
Fix handling of /etc/resolv.conf during connect/disconnect. Now that FreeBSD 9.x
has a script called /sbin/resolvconf it tried to use the Debian, Ubuntu, Gentoo
syntax which is incompatible with FreeBSD's version of the script and will
therefore fail.
Feature safe: yes
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav
Include a patchset that solves a problem with phase2 re-keying. That is, when
phase2 lifetime (either in seconds or bytes) expires, then vpnc either silently
stops passing traffic or that plus consuming CPU time by running a tight loop.
This issue have experienced this issue on various platforms.
Example of a bug report:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496718
Bump PORTREVISION and while we're here remove MD5 sums.
Submitted by: avg
Obtained from: http://www.gossamer-threads.com/lists/vpnc/devel/3442, with
slight adjustments to apply to our patchlevel by avg
Unbreak security/vpnc and graphics/pecomato. Those ports were fixed by 133053,
thanks. However, it remains unclear why the PR wasn't assigned to me nor why I
wasn't notified as maintainer.
Use kldstat(8) to check for the availability of the if_tun module in the
kernel instead of checking for existance of /dev/tun. The latter causes
tun(8) to allocate new instance, which is not good by itself, but also
on all FreeBSD versions before the very recent -current it causes number
of tun devices to grow each time the script is invoked (and it's invoked
every time when vpnc makes a new connection).
Bump PORTREVISION.
Approved by: MAINTAINER
Bump portrevision due to upgrade of devel/gettext.
The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).
PR: ports/124340
Submitted by: edwin@
Approved by: portmgr (pav)
Some Cisco Concentrator refuse connection if the presentation version string
differs from the official "Cisco VPN Client".
Provide an optional patch which masks the original version string.
PR: 116949
Submitted by: Raffaele De Lorenzo <raffaele.delorenzo@libero.it>
The upgrade of ports/security/vpnc to version 0.5.1 introduced some glitches
against the documented behaviour. In particular, the configuration files are
not searched in the documented locations: /usr/local/etc/vpnc/*.conf is not
searched at all, and /usr/local/etc/vpnc/default.conf is skipped, both in
contrast to the documentation.
PR: 121229
Submitted by: Helge Oldach <ports-security-vpnc-feb08@oldach.net>
- In managed mode the script does not return the proper value due to $?
is reset by the if command. Therefore, the script does not fail when
starts with broken configuration files
- While I'm here, use %%RC_SUBR%% instead of /etc/rc.subr
PR: ports/110320
Submitted by: Dominic Fandrey <lon_kamikaze at gmx.de>
Approved by: maintainer timeout (6 months)
- Unbreak vpnc-disconnect by fixing the config.c patch
- Remove obsolete vpnc-wrapper leftovers to make portlint happy
- Use PLIST_FILES and PORTDOCS instead of pkg-plist
- Bump PORTREVISION
PR: ports/84491
Submitted by: Daniel Roethlisberger <daniel@roe.ch>
Approved by: Christian Lackas <delta@lackas.net> (maintainer)
Update libgcrypt to 1.2.1. Changes:
* made the code try to lock secure memory pool not only when running as
root,
* fixed type usage in Serpent,
* made the code mix the PID into the entropy pool for better protection
after a fork,
* fixed memory leak in RSA.
* fixed alignment problems in Rijndael,
* fixed memory leak in gcry_pk_sign(),
* fixed broken pointer access in gcry_ac_open(),
* updated the documentation,
* fixed several other bugs.
Chase Shared library version and bump PORTREVISION of affected ports.
Update to 0.3.2
- added support for preshared without xauth
- fixed NAT-T support with IOS and PIX
- fixed IP-Len header
- fixed reconnection problems with IOS and PIX
PR: ports/74271
Submitted by: maintainer
Update to 0.3.1:
- IPSec over UDP and NAT-T support
- added support for interactive authentication (security tokens for example)
- fixed IOS support
PR: ports/74040
Submitted by: maintainer
Update libgcrypt to the new stable version 1.2.0
Retire libgcrypt-devel
Switch back to security/libgcrypt and bump PORTREVISION for
- gnutls
- gnutls-devel
- gsasl
- opencdk
- vpnc
libggz:
- Remove dependency on libgcrypt, because the port does not yet
work with the new libgcrypt
libksba:
(Only the first 15 lines of the commit message are shown above )
- using PREFIX/CC/CFLAGS (with help from Markus Brueffer)
- added a man-page
- installing additional docs
- fixed installing with 0666
- sample start script now works and actually contains an usefull example
- fixed install target
- added a comment (in pkg-message) about ESP "Protocol not supported"
PR: 60364
Submitted by: maintainer
Add vpnc 0.2,
VPNC - Client for Cisco 3000 VPN Concentrator
A VPN client compatible with Cisco's EasyVPN equipment.
Supports IPSec (ESP) with Mode Configuration and Xauth.
Supports only shared-secret IPSec authentication, 3DES, MD5,
and IP tunneling. It runs entirely in userspace
PR: 60283
Submitted by: Christian Lackas
