mirror of
https://git.freebsd.org/ports.git
synced 2025-07-18 17:59:20 -04:00
net/freeradius3: Disable OpenSSL version checking
FreeRadius developers include a feature enabled by default which checks your OpenSSL version and refuses to run if certain CVEs are detected. This is an interesting idea but it means it's possible to upgrade FreeRadius on a production server and suddently it won't run, especially if FreeBSD's base OpenSSL doesn't report a version number that can convince the software it is free from the specified CVEs. Currently FreeRadius refuses to run on FreeBSD 10.3-RELEASE because it thinks base system OpenSSL is not patched for CVE-2016-6304, but that was in fact patched by FreeBSD-10.3-RELEASE-p9. This feature is only useful if you are using vanilla upstream versions of OpenSSL which we are not. Approved by: portmgr (with hat) MFH: 2017Q3
This commit is contained in:
parent
c23c2e8d85
commit
b784895067
Notes:
svn2git
2021-03-31 03:12:20 +00:00
svn path=/head/; revision=447967
1 changed files with 3 additions and 1 deletions
|
@ -3,6 +3,7 @@
|
|||
|
||||
PORTNAME= freeradius
|
||||
DISTVERSION= 3.0.15
|
||||
PORTREVISION= 1
|
||||
CATEGORIES= net
|
||||
MASTER_SITES= ftp://ftp.freeradius.org/pub/freeradius/%SUBDIR%/ \
|
||||
ftp://ftp.ntua.gr/pub/net/radius/freeradius/%SUBDIR%/ \
|
||||
|
@ -321,7 +322,8 @@ CONFIGURE_ARGS+=--with-logdir=${LOGDIR} \
|
|||
--without-rlm_securid \
|
||||
--without-rlm_cache_memcached \
|
||||
--with-vmps \
|
||||
--with-collectdclient-lib-dir=/dev/null
|
||||
--with-collectdclient-lib-dir=/dev/null \
|
||||
--disable-openssl-version-check
|
||||
|
||||
.if ${ARCH} == amd64
|
||||
CONFIGURE_ARGS+=--with-pic
|
||||
|
|
Loading…
Add table
Reference in a new issue