Commit Graph

10 Commits

Author SHA1 Message Date
Alexey Dobrovolsky 2d410422c5 freeradius3: fix hostname invocation in radtest
Canonical radtest start results in an error:

$ radtest bob hello localhost 0 testing123
/usr/bin/radtest: line 1: hostname: not found
(0) Error parsing "stdin": Failed to get value

hostname command is not present in OpenWrt.
Instead, hostname can be obtained from file /proc/sys/kernel/hostname.

added: 005-get-hostname-from-proc-in-radtest.patch

(backported from commit 8b2792a)
Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
2020-09-14 01:36:30 +03:00
Robby K cb10971c14 freeradius3: Updated patches/004-fix-target-python-header-detection.patch to remove the rlm_python3 specific changes as it is no longer needed to compile and updated the Makefile to reflect this due to the following change/commit in freeradius:
https://github.com/FreeRADIUS/freeradius-server/commit/307678b268cf8898a65632147ecc40d37ea3f9d3

This is in preparation for the 3.0.21 update.

Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 20:03:17 +02:00
Robby K 4c9d290938 freeradius3: Refreshed patches/002-disable-session-cache-CVE-2017-9148.patch in preparation for the 3.0.21 update.
Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 20:02:37 +02:00
Robby K c417bddda7 freeradius3: Enable the rlm_python and rlm_python3 modules.
Signed-off-by: Robby K <robbyke@gmail.com>
2020-02-07 17:18:50 +01:00
Robby K b3c1a67ff1 freeradius3: Update to 3.0.20
Latest stable release, contains security fixes for EAP-PWD (side-channel leak), logrotate settings (CVE-2019-10143) and a DoS issue due to multithreaded BN_CTX access (CVE-2019-17185).

Also refreshed patches/002-disable-session-cache-CVE-2017-9148.patch due to the following changes/commits in freeradius:
https://github.com/FreeRADIUS/freeradius-server/commit/bf1a1eda2387745bbe538998f3d2e6514f981bfd
https://github.com/FreeRADIUS/freeradius-server/commit/a3c46544b38ab46218c385d0ee197538fad5b3da

Signed-off-by: Robby K <robbyke@gmail.com>
2020-01-26 14:43:06 +01:00
David Yang 76b013228d freeradius3: update to 3.0.18
Signed-off-by: David Yang <mmyangfl@gmail.com>
2019-04-02 22:51:10 +08:00
Eneas U de Queiroz f7db77282c freeradius3: allow build without openssl engines
This applies a patch from upstream that avoids a call to ENGINE_cleanup
when the openssl library was built without engine support.

A workaround for a missing header check was used to silence a warning
about the implicit definition of RAND_load_file.  A proper fix has been
merged upstream as well.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2019-02-25 14:10:06 -03:00
Eneas U de Queiroz 9ded227056 freeradius3: update to 3.0.17
Latest stable release, support for openssl 1.1

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-05-25 17:33:12 -03:00
Hauke Mehrtens 7bb34ef7fc freeradius3: fix CVE-2017-9148
This takes the fix for CVE-2017-9148 from Debian.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-10-08 21:05:12 +02:00
Toke Høiland-Jørgensen 424f4e2c63 freeradius3: A couple of small fixes
- Moves /etc/freeradius3/sites-{enabled,available}/inner-tunnel to be part of
  the freeradius3-mod-eap package. This prevents conflicts between
  freeradius3-mod-eap-peap and freeradius3-mod-eap-ttls which both included the
  file before. This fixes LEDE bug FS#678.

- Change the demo cert validity to be 1 year instead of 60 days. Should keep the
  cert valid for the duration of the LEDE release cycle (with some slack). This
  fixes #4239.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2017-04-26 16:32:16 +02:00