packages/net/stunnel, branch master

treewide: cleanup URLs

2026-05-08T20:28:27Z

This commit converts plain HTTP URLs to HTTPS, and updates old or outdated URLs. Signed-off-by: Yanase Yuki

stunnel: create PID directory before alt_config_file return

2026-04-01T06:47:47Z

When alt_config_file is set, global_defs() returns before creating the PID file directory. stunnel then fails to start because it cannot write its PID file to the nonexistent directory. Move the PID directory creation and ownership setup above the alt_config_file early return so it runs regardless of config mode. Fixes: openwrt/openwrt#28982 Signed-off-by: Joshua Klinesmith Co-Authored-By: Claude Opus 4.6 (1M context)

stunnel: update version to 5.75

2025-09-04T06:32:22Z

Bugfixes: * Fixed infinite loop triggered by OCSP URL parsing errors (thx to Richard Könning for reporting). * Fixed OPENSSL_NO_OCSP build issues (thx to Dmitry Mostovoy for reporting). * Fixed default curve selection in FIPS mode with OpenSSL 3.4+. * Fixed tests with modern Python versions. * Fixed tests with multiple OpenSSL versions installed. Features: * Added provider URI support for "cert" and "key" options. * Added new "CAstore" service-level option (OpenSSL 3.0+). * Added "provider" (OpenSSL 3.0+), "providerParameter" (OpenSSL 3.5+), and "setEnv" global options. * Key file/URI path added to passphrase prompt on Unix. * PKCS#11 provider installed on Windows. Signed-off-by: Florian Eckert

stunnel: update version to 5.74

2025-09-04T06:32:22Z

Bugfixes: * Fixed a stapling cache deallocation crash. * Fixed "redirect" with protocol negotiation. Features: * "protocolHost" support for "socks" protocol clients. * More detailed logs in OpenSSL 3.0 or later. Signed-off-by: Florian Eckert

stunnel: update version to 5.73

2025-09-04T06:32:22Z

Bugfixes * Fixed a memory leak while reloading stunnel.conf sections with "client=yes" and "delay=no". * Fixed TIMEOUTocsp with values greater than 4. * Fix the IPv6 test on a non-IPv6 machine. Features * HELO replaced with EHLO in the post-STARTTLS SMTP protocol negotiation * OCSP stapling fetches moved away from server threads. * improved client-side session resumption. * Added support for the mimalloc allocator. * Check for protocolHost moved to configuration file processing for the client-side CONNECT protocol. * Clarified some confusing OpenSSL's certificate verification error messages. Signed-off-by: Florian Eckert

stunnel: update to version 5.72

2024-05-06T11:25:01Z

Signed-off-by: Florian Eckert

stunnel: update version to 5.71

2023-09-27T23:37:19Z

Signed-off-by: Florian Eckert

treewide: remove AUTORELEASE

2023-04-21T20:46:58Z

Automatically compute and substitute current values for all $(AUTORELEASE) instances as this feature is deprecated and shouldn't be used. The following temporary change was made to the core: diff --git a/rules.mk b/rules.mk index 57d7995d4fa8..f16367de87a8 100644 --- a/rules.mk +++ b/rules.mk @@ -429,7 +429,7 @@ endef abi_version_str = $(subst -,,$(subst _,,$(subst .,,$(1)))) COMMITCOUNT = $(if $(DUMP),0,$(call commitcount)) -AUTORELEASE = $(if $(DUMP),0,$(call commitcount,1)) +AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile)) all: FORCE: ; And this command used to fix affected packages: for i in $(cd feeds/packages; git grep -l PKG_RELEASE:=.*AUTORELEASE | \ sed 's^.*/$[^/]*$/Makefile^\1^';); do make package/$i/download done Signed-off-by: Paul Fertser

stunnel: update version to 5.67

2023-02-01T09:05:10Z

Signed-off-by: Florian Eckert

stunnel: update version to 5.66

2022-10-10T11:28:52Z

Signed-off-by: Florian Eckert