Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
Community maintained packages for difos.
775 commits 8 branches 0 tags 65 MiB
Makefile 54.9%
Shell 29.9%
C 9%
C++ 2%
Lua 1.3%
Other 2.6%
Find a file
Jo-Philipp Wich de5e37ac5b freeradius2: backport fix for CVE-2015-4680 
Backport upstream commit 5e698b407dcac2bc45cf03484bac4398109d25c3 to fix
missing intermediate certificate validation in Freeradius2.

Advisory:

The FreeRADIUS server relies on OpenSSL to perform certificate validation,
including Certificate Revocation List (CRL) checks. The FreeRADIUS usage of
OpenSSL, in CRL application, limits the checks to leaf certificates,
therefore not detecting revocation of intermediate CA certificates.

An unexpired client certificate, issued by an intermediate CA with a revoked
certificate, is therefore accepted by FreeRADIUS.

Specifically sets the X509_V_FLAG_CRL_CHECK flag for leaf certificate CRL
checks, but does not use X509_V_FLAG_CRL_CHECK_ALL for CRL checks on the
complete trust chain.

The FreeRADIUS project advises that the recommended configuration is to use
self-signed CAs for all EAP-TLS methods.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2015-07-20 10:38:03 +02:00
admin zabbix: update to 2.4.3 2014-12-26 20:38:42 +01:00
devel/patch patch: --disable-xattr (v2) 2014-06-30 22:43:30 +02:00
ipv6 aiccu: Fix typo 2014-08-07 08:35:46 +02:00
lang perl: Don't link against libnsl, fix PPC signedness 2014-10-28 18:50:59 +01:00
libs gnutls: updated to 3.3.16 2015-07-12 21:44:45 +02:00
mail/dovecot dovecot: import from packages 2014-06-16 11:54:42 +02:00
multimedia mjpg-streamer: Fixed cambozola MD5 sum. 2015-03-27 07:41:41 +01:00
net freeradius2: backport fix for CVE-2015-4680 2015-07-20 10:38:03 +02:00
sound mpd: disable libsoup 2014-09-02 16:02:08 +02:00
utils grep: Fix CVE-2015-1345 heap buffer overrun 2015-02-17 12:59:59 +01:00
CONTRIBUTING.md Update contributing statement 2014-07-29 22:41:34 +02:00
LICENSE Add GPLv2 pro-forma license 2014-06-16 08:14:04 +02:00
README.md Split README in README.md and CONTRIBUTING.md 2014-07-23 00:57:08 +02:00

README.md

OpenWRT packages feed

Description

This is the OpenWrt "packages"-feed containing community-maintained packages.

Usage

This feed is enabled by default. To install all its package definitions:

Run: ./scripts/feeds update packages Run: ./scripts/feeds install -a -p packages

License

See LICENSE file.

Package Guidelines

See CONTRIBUTING.md file.