Adolf Belka ab5113ae07 stunnel: Update to version 5.71 ...

- Update from vesrion 5.69 to 5.71
- Update of rootfile not required
- Changelog
    5.71, 2023.09.19, urgency: MEDIUM
	 Security bugfixes
	  - OpenSSL DLLs updated to version 3.1.3.
	 Bugfixes
	  - Fixed the console output of tstunnel.exe.
	 Features sponsored by SAE IT-systems
	  - OCSP stapling is requested and verified in the client mode.
	  - Using "verifyChain" automatically enables OCSP
	    stapling in the client mode.
	  - OCSP stapling is always available in the server mode.
	  - An inconclusive OCSP verification breaks TLS negotiation.
	    This can be disabled with "OCSPrequire = no".
	  - Added the "TIMEOUTocsp" option to control the maximum
	    time allowed for connecting an OCSP responder.
	 Features
	  - Added support for Red Hat OpenSSL 3.x patches.
    5.70, 2023.07.12, urgency: HIGH
	 Security bugfixes
	  - OpenSSL DLLs updated to version 3.0.9.
	  - OpenSSL FIPS Provider updated to version 3.0.8.
	 Bugfixes
	  - Fixed TLS socket EOF handling with OpenSSL 3.x.
	    This bug caused major interoperability issues between
	    stunnel built with OpenSSL 3.x and Microsoft's
	    Schannel Security Support Provider (SSP).
	  - Fixed reading certificate chains from PKCS#12 files.
	 Features
	  - Added configurable delay for the "retry" option.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

2024-01-23 13:56:42 +00:00

3.8 KiB

Raw Blame History

View Raw