19 Commits
Author SHA1 Message Date
Franco Fichtner 31f4ce7879 security/stunnel: bump revision 2025-07-21 10:03:57 +02:00
Patrick M. HausenandGitHub 6864606351 security/stunnel Add LDAP and NNTP to supported STARTTLS protocols (#4788) 2025-07-03 14:21:44 +02:00
Ad Schellevis a186956c52 security/stunnel - fix regression caused by changed parent save() method (https://github.com/opnsense/core/commit/e36123c99f4ff2a518a927f1807be51186f78577) 2023-12-26 12:38:23 +01:00
Franco Fichtner 1a97275116 security/stunnel: revision bump 2023-04-24 07:22:50 +02:00
Franco Fichtner f045045354 plugins: annotate support tier levels in plugins
PR: https://github.com/opnsense/core/issues/5983
2023-01-18 14:57:32 +01:00
Franco Fichtner e8ef909a94 security/stunnel: fix missing include 2023-01-11 07:55:00 +01:00
Ad Schellevis d162124a4f Squashed commit of the following:
commit e873aa41591442e16ec0581fa8b6e8696a1821ff
Author: Ad Schellevis <ad@opnsense.org>
Date:   Mon Jul 4 14:23:32 2022 +0200

    security/stunnel: Add option to chain intermediate CAs (https://github.com/opnsense/plugins/pull/2854), better explain impact and add move to advanced

commit 1e86212ad759a10ae3c229d709a5718ab79208d5
Author: Johnny S. Lee <6614805+johnnyslee@users.noreply.github.com>
Date:   Mon Feb 21 09:52:26 2022 +0800

    security/stunnel: Allow GUI usage of restart action

    For example, we can now select "Restart Stunnel" from
    `Service/ACME-Client/Automations>Run-Command>System-or-Plugin-Command`
    in GUI.

commit 005af925b1e4c96022953757297c5a0782a81825
Author: Johnny S. Lee <6614805+johnnyslee@users.noreply.github.com>
Date:   Mon Feb 21 09:45:28 2022 +0800

    security/stunnel: Add option to chain intermediate CAs

    Add an option, defaults disabled, to chain intermediate CAs which is
    required when using ACME cert.
2022-07-04 14:36:27 +02:00
Franco Fichtner db3fb848d9 plugins: style sweep 2022-05-11 12:07:59 +02:00
Ad Schellevis 45030fabf4 security/stunnel - with the deprecation of __items on our model fields make sure non of our plugins uses the old magic property.
Traversing __items is actually the same as usnig iterateItems(), which should be a valid replacement.

ref https://github.com/opnsense/core/commit/fc8890851a87d3041b820d801e6a386b88ee244b cc @swhite2
2022-04-22 19:17:28 +02:00
Franco Fichtner 8c253fee03 security/stunnel: bump version 2022-03-01 10:04:56 +01:00
Franco Fichtner 7845166d0d security/stunnel: new version 2021-03-05 13:52:44 +01:00
Franco Fichtner cdd4d15db7 security: bump revision numbers 2021-02-22 15:14:23 +01:00
fhlostonandGitHub a56b2acd3e stunnel: add protocol support to stunnel (#2022) 2020-09-24 17:00:15 +02:00
Ad Schellevis 4716fb18a2 stunnel identd: increase request_queue_size, default 5 is quite low. While here, switch to threading tcp server to better cope with concurrent requests 2020-08-17 13:00:55 +02:00
Ad Schellevis 72980508a7 security/stunnel prepare release version 2020-05-26 21:02:37 +02:00
Ad Schellevis 1f7654103d stunnel: new revision 2020-05-20 06:13:59 +02:00
Ad Schellevis 84585d959b stunnel: minor cleanups and versioning, closes https://github.com/opnsense/plugins/issues/1829 2020-05-20 00:57:15 +02:00
Franco Fichtner 7f90141b60 security/stunnel: style and sync 2020-05-18 16:40:47 +02:00
Ad SchellevisandGitHub 2a8b0a58ed stunnel: initial release (#1840)
* stunnel: boilerplate for https://github.com/opnsense/plugins/issues/1829

* stunnel: work in progress for https://github.com/opnsense/plugins/issues/1829

* stunnel: add service control and acl for https://github.com/opnsense/plugins/issues/1829

* stunnel: add cipher selection for https://github.com/opnsense/plugins/issues/1829

Since stunnel uses different parameter pairs for TLSv1.[1,2] and TLSv1.3, we'll try to sort them out in our config template.
When no TLSv1.3 ciphers are allowed, we should limit the sslVersionMax parameter as well as it seems.

* stunnel: set TLS1.2 as minimum

* stunnel: disable rc conf when no services are active https://github.com/opnsense/plugins/issues/1829

* stunnel: CRL support for https://github.com/opnsense/plugins/issues/1829

* stunnel: simplify cert creation, combine cert+key in one file. for https://github.com/opnsense/plugins/issues/1829

* stunnel: syslog and log viewer for https://github.com/opnsense/plugins/issues/1829

* stunnel: add hasync anchor, for https://github.com/opnsense/plugins/issues/1829
2020-05-18 15:31:18 +02:00