commit wireguard-tools for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package wireguard-tools for openSUSE:Factory checked in at 2023-10-22 21:02:40 Comparing /work/SRC/openSUSE:Factory/wireguard-tools (Old) and /work/SRC/openSUSE:Factory/.wireguard-tools.new.1945 (New) Package is "wireguard-tools" Sun Oct 22 21:02:40 2023 rev:18 rq:1119442 version:1.0.20210914 Changes: --- /work/SRC/openSUSE:Factory/wireguard-tools/wireguard-tools.changes 2022-09-07 11:06:37.612496543 +0200 +++ /work/SRC/openSUSE:Factory/.wireguard-tools.new.1945/wireguard-tools.changes 2023-10-22 21:02:57.875700433 +0200 @@ -1,0 +2,5 @@ +Fri Oct 20 13:16:54 UTC 2023 - Frederic Crozat + +- Update WireGuard.keyring with latest copy from upstream. + +--- Other differences: -- ++ wireguard-tools.spec ++ --- /var/tmp/diff_new_pack.CMbFRG/_old 2023-10-22 21:02:58.327716869 +0200 +++ /var/tmp/diff_new_pack.CMbFRG/_new 2023-10-22 21:02:58.331717014 +0200 @@ -1,7 +1,7 @@ # # spec file for package wireguard-tools # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2023 SUSE LLC # Copyright (c) 2020-2021, Martin Hauke # # All modifications and additions to the file contributed by third parties ++ WireGuard.keyring ++ --- /var/tmp/diff_new_pack.CMbFRG/_old 2023-10-22 21:02:58.359718032 +0200 +++ /var/tmp/diff_new_pack.CMbFRG/_new 2023-10-22 21:02:58.363718178 +0200 @@ -13,18 +13,18 @@ qQmmnvNNrArhYXlckYapIAZhwLJDGgv3ZhRyYRCEQ9BktVcE0+2R6zb3GQARAQAB tCRKYXNvbiBBLiBEb25lbmZlbGQgPEphc29uQHp4MmM0LmNvbT6JAlUEEwEIAD8C GwMGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAFiEEq5lC5tSkz8NBJiCnSfxwEqXe -A64FAmAlM/cFCRTURIcACgkQSfxwEqXeA67W2BAAt+ueWjWzC2liYQcrUIZ+95OR -BbDjJfzb9lV0SuZjOFmh3VtHN134SNbs9o0zIr/1+TqaFbin4YHGWaKxu5SmYBMy -s+TPr0A/ZUGQKpBEd40cgD+3EjgYUUxzzTtvAzWHpUKHO9aAMLDm6ASjFHDihiNr -dSoNUD6/FS3bAij5hzg995yCs0WJ39dycX0G/ik4YQcx2yy6cNf/GYSrniy0WW6D -SkrAedTndCGxmP+Tz723AfZd+TYAW6ymvpAjFEzxaxY94P/ZBZtNDUiMLXYAliqL -ozr4uZ6jqu0XZKIUS4+/FN5GZysNyvqSpm0zWpNJCAFmXurPneRlCT6UkViybgUC -x7aEaYgOzpFanIJ6jDr0FIICQMeKh1Btd09/2xMVcSIaHG722zGug7WHaM5WVNDI -8kusF+icIOH3QD62uQl8Ljfm7yQ8dWVtx/xOo2hqd/GP6ak+p6NRrUkEA6wux3M0 -OXHSc2c2+3uiAiydjXVOQCalm/7mMeePgB5Mwzsue812/l9GIdE/408tHs4nOvfn -choak5pV0qpQfxQcP1ftPkYfD0s9EblV63owW37HUE9lzrZtX7zWKOkvZ1mLijjl -p6r7Fel2m5+IF0F98+Z+TN8hxsZhNgn1By81rVUCzTRL3/Hf95ZXON3SWrtvWlND -/klrHEr7FcI2gS13bomJARwEEAECAAYFAk0ziSkACgkQf0OA0xciwD22iwf8Dv4X +A64FAmIu0jQFCRi/FkQACgkQSfxwEqXeA676LhAAh5Js34b2oK8r1ETFYBH3iK0x +YfO+vNNJWS/HQrRSDXkUj6mhgjA74d+Q+c/67tbEl/jJ743SByKgfsPFu+8sCnI5 +B7ybauhxOwcuNC+WTxQ1ZbWGSTjYmpf/1OQB9DI/fgUdnvurFlKToOX2PCxIcFpa +TLEzuz6j/p9JDITAJunBqsw5ndYk5+KwwMyXzdsqev2bBy96Hj5fAvGc9IGpGIRC +YvAnpeqaG5++V9EfHWi0xBffQME0iwSooSdXN9JXHKJuyMiG5kVFkGMmn9rSwmuE +2G4qjkty7Rkuax6Rc/gdvfX9v6YrALdf5hQ0VzerJ6m1vyyJTZnfjCAbxGmzW1gd +/Oiqp6DTQ7xxm+7xDvz7hKdc17hDF3jmDGzn199ysjbjXXln3SbUT1uTk6Wm/fu6 +AU5jSE81+r657+cdEd0bpqx+XqPWfH/JvKF7W3oYjr448J+Po7qT6pK/iGcaaEio +j9giGOBI9QHwLrdqYe/adJQbEt4wu5yiaQ2X7BYcMAay0tUrkzK28XcbGiqAICus +ikakAyf4+w98Fq/I7uDfn1ObpiYBOueMsIK0UZe8gZU+o3LsVokwZAJsza76CAAP +O3eWN1FsOdSRGYb55oY+xYIKrLyXklMnfBL0GNOb79F+WoEXk5w5fmwIAKrpFfJw +seEM2qdnL8X4H/tcJdeJARwEEAECAAYFAk0ziSkACgkQf0OA0xciwD22iwf8Dv4X kRmGvWygRdbWc/lxLndbJeC0S5p+O5Ir9N2NON2r425oGQDhwpKijD3VJUjfARkr UdTdcu++Ad2gnJDDMnXOniTeMoGUJFkzAbiESTrTay2Kq+OEZztoiyo8S4PBdtn5 PQPcgwt4OLWNLpTWAYy4rxpa6gU/QRPSI9sZdbK8iKpjyJunTlcYfmR/VueJ5XHy @@ -430,18 +430,18 @@ dXw76QCeOMCBWQ5yK6++8c3ye4ega9JuqOU4p2hfOzsXdULK2Nm2tFHxM2vGrTJj f5MHB3c1uJbycs8xq/rJL4bDHU4/6nclZgsq/xehaFMhq6vQvlsN4l40m1eYOYvz parqwVSz8MPM3QARAQABiQI8BBgBCAAmAhsMFiEEq5lC5tSkz8NBJiCnSfxwEqXe -A64FAmAlNBMFCRTURKMACgkQSfxwEqXeA65+3g//SgI2/VdnR/c8frd9/1Y/DeyM -fRvF/YHWzTTQW8Gd1ZBC/Ajfg9kWw/ly6Z66GNw12E9QJ6i96g0azAZPjGMyLqUj -b5F5V2ujTAG9AUhiG07oALewn0mc0DXY7tIVY3c6bAlvU0FY2tFtwmy7A5Ep7Bpw -40VUDUrJVKZBbDuZuZEH83u8K70t15owgDhD2rL6NXRd7VJKrtnEmlBUNqfreIw7 -PPOpIsB2/EeTsKaw0V7XWCmt+xS/xE1ioBk62VGaRYECNkGvQDHNaM4gXUkEsXxe -eLGd4GBrDMl32RRPNXgPtJv+X/oSVzZBiNBS5JgrDePbDV1kgz54xHYTaxesoT29 -ZipRXDcGbvVmSAsQsaTF3LTZk0c+Q0Hjne8wK/DIrcduk5zbQawxOTAJfQ4Yzcom -oORi4lyR4mIKOZs2U/A+QBrS9f6BWnA4PawFbmlc+s5XslLrx85Y5ZAJrlTTtzbt -t285kSzR4uyM0j5stbHXxZf3sJsQmrkfZNU3TKjhCJfAGsVzhTt04RvBLhSNrBK/ -06HNmy67R09YQ4fRyqGJrqxs8nROuyo48rUaVIoIuR6zk1CCXhZx5E50IDOdU0nr -zNQP3yQ8UY9xr48fu5YVYiDtRmJn86swhO2ucfcEl5akKmaNyZK/3IbknfUxzmft -nL4R5Qie03YIFHrDh/4= -=GTxh +A64FAmIu0kkFCRi/FlkACgkQSfxwEqXeA64+fw//R0M9Jrum5rEZgtqmyj5C58eM +/caYuJCl+teQVgqvp1YXSuBOyK+7VkaHIuVa/gDQfkJQWTGzDVdVxGSnu6u0X8pI +e5GMjWwNX/9BiBRaZDy1PKVeVnvd2jgbLXzM/cHVRRpM5PQuHev5xjqVOwlTtI2P +wWvoRmj7H3lQ9KSBR/HRgzqyHJ5r6jyHvyB8ZpUQmTK+nyZ5kllIuHvrq1bq/Kzy +DMpehi0RffUEUivyzzqFAIXjL7JNUycKbIJV
commit wireguard-tools for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package wireguard-tools for openSUSE:Factory
checked in at 2022-09-07 11:06:18
Comparing /work/SRC/openSUSE:Factory/wireguard-tools (Old)
and /work/SRC/openSUSE:Factory/.wireguard-tools.new.2083 (New)
Package is "wireguard-tools"
Wed Sep 7 11:06:18 2022 rev:17 rq:1001518 version:1.0.20210914
Changes:
--- /work/SRC/openSUSE:Factory/wireguard-tools/wireguard-tools.changes
2022-09-04 22:11:52.512301385 +0200
+++
/work/SRC/openSUSE:Factory/.wireguard-tools.new.2083/wireguard-tools.changes
2022-09-07 11:06:37.612496543 +0200
@@ -7,0 +8,5 @@
+Mon Aug 15 08:58:22 UTC 2022 - Thorsten Kukuk
+
+- Don't hard require systemd, it's not a hard dependency
+
+---
Other differences:
--
++ wireguard-tools.spec ++
--- /var/tmp/diff_new_pack.899NkR/_old 2022-09-07 11:06:38.116497824 +0200
+++ /var/tmp/diff_new_pack.899NkR/_new 2022-09-07 11:06:38.124497844 +0200
@@ -30,7 +30,7 @@
Patch1: Support-systemd-resolved-split-dns-setup.patch
BuildRequires: bash-completion
BuildRequires: pkgconfig
-%systemd_requires
+%{?systemd_ordering}
%description
WireGuard is a novel VPN that runs inside the Linux Kernel and uses
commit wireguard-tools for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package wireguard-tools for openSUSE:Factory
checked in at 2022-09-04 22:11:44
Comparing /work/SRC/openSUSE:Factory/wireguard-tools (Old)
and /work/SRC/openSUSE:Factory/.wireguard-tools.new.2083 (New)
Package is "wireguard-tools"
Sun Sep 4 22:11:44 2022 rev:16 rq:1001083 version:1.0.20210914
Changes:
--- /work/SRC/openSUSE:Factory/wireguard-tools/wireguard-tools.changes
2022-02-24 18:24:14.542646150 +0100
+++
/work/SRC/openSUSE:Factory/.wireguard-tools.new.2083/wireguard-tools.changes
2022-09-04 22:11:52.512301385 +0200
@@ -1,0 +2,6 @@
+Wed Aug 31 13:40:41 UTC 2022 - Dominik Heidler
+
+- Support multiple DNS search domains
+ * Support-systemd-resolved-split-dns-setup.patch
+
+---
Other differences:
--
++ Support-systemd-resolved-split-dns-setup.patch ++
--- /var/tmp/diff_new_pack.23eJgQ/_old 2022-09-04 22:11:52.944302601 +0200
+++ /var/tmp/diff_new_pack.23eJgQ/_new 2022-09-04 22:11:52.948302611 +0200
@@ -32,7 +32,7 @@
+ cmd resolvectl dns "$INTERFACE" "${DNS[@]}"
+ # Prefix each domain with '~' which will tell resolvectl to use
that domain
+ # for dns routing but not as a search domain
-+ cmd resolvectl domain "$INTERFACE" "${DNS_SEARCH[*]/#/\~}"
++ cmd resolvectl domain "$INTERFACE" ${DNS_SEARCH[*]/#/\~}
+ fi
HAVE_SET_DNS=1
}
commit wireguard-tools for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package wireguard-tools for openSUSE:Factory
checked in at 2022-02-24 18:20:53
Comparing /work/SRC/openSUSE:Factory/wireguard-tools (Old)
and /work/SRC/openSUSE:Factory/.wireguard-tools.new.1958 (New)
Package is "wireguard-tools"
Thu Feb 24 18:20:53 2022 rev:15 rq:957145 version:1.0.20210914
Changes:
--- /work/SRC/openSUSE:Factory/wireguard-tools/wireguard-tools.changes
2022-02-18 23:03:43.877409148 +0100
+++
/work/SRC/openSUSE:Factory/.wireguard-tools.new.1958/wireguard-tools.changes
2022-02-24 18:24:14.542646150 +0100
@@ -1,0 +2,7 @@
+Tue Feb 22 10:44:56 UTC 2022 - Johannes Segitz
+
+- Drop harden_wg-quick@.service.patch. The currrent logic for setting
+ DNS is fiddling massively with the system. This is currently not
+ compatible with these settings (bsc#1196096)
+
+---
Old:
harden_wg-quick@.service.patch
Other differences:
--
++ wireguard-tools.spec ++
--- /var/tmp/diff_new_pack.dKufFr/_old 2022-02-24 18:24:14.994646032 +0100
+++ /var/tmp/diff_new_pack.dKufFr/_new 2022-02-24 18:24:15.002646030 +0100
@@ -27,7 +27,6 @@
Source:
https://git.zx2c4.com/wireguard-tools/snapshot/wireguard-tools-%{version}.tar.xz
Source1:
https://git.zx2c4.com/wireguard-tools/snapshot/wireguard-tools-%{version}.tar.asc
Source99:
https://www.zx2c4.com/keys/AB9942E6D4A4CFC3412620A749FC7012A5DE03AE.asc#/WireGuard.keyring
-Patch0: harden_wg-quick@.service.patch
Patch1: Support-systemd-resolved-split-dns-setup.patch
BuildRequires: bash-completion
BuildRequires: pkgconfig
@@ -49,7 +48,6 @@
%prep
%setup -q -n wireguard-tools-%{version}
-%patch0 -p1
%patch1 -p1
## HACK: Fixing wg-quick's DNS= directive with a hatchet
contrib/dns-hatchet/apply.sh
commit wireguard-tools for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package wireguard-tools for openSUSE:Factory
checked in at 2022-02-18 23:03:04
Comparing /work/SRC/openSUSE:Factory/wireguard-tools (Old)
and /work/SRC/openSUSE:Factory/.wireguard-tools.new.1958 (New)
Package is "wireguard-tools"
Fri Feb 18 23:03:04 2022 rev:14 rq:955853 version:1.0.20210914
Changes:
--- /work/SRC/openSUSE:Factory/wireguard-tools/wireguard-tools.changes
2022-01-10 23:53:07.708779364 +0100
+++
/work/SRC/openSUSE:Factory/.wireguard-tools.new.1958/wireguard-tools.changes
2022-02-18 23:03:43.877409148 +0100
@@ -1,0 +2,6 @@
+Thu Feb 17 15:17:15 UTC 2022 - Dominik Heidler
+
+- Support systemd-resolved split-dns setup
+ * Support-systemd-resolved-split-dns-setup.patch
+
+---
New:
Support-systemd-resolved-split-dns-setup.patch
Other differences:
--
++ wireguard-tools.spec ++
--- /var/tmp/diff_new_pack.J2Ds4U/_old 2022-02-18 23:03:44.553409095 +0100
+++ /var/tmp/diff_new_pack.J2Ds4U/_new 2022-02-18 23:03:44.561409095 +0100
@@ -1,7 +1,7 @@
#
# spec file for package wireguard-tools
#
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
# Copyright (c) 2020-2021, Martin Hauke
#
# All modifications and additions to the file contributed by third parties
@@ -28,6 +28,7 @@
Source1:
https://git.zx2c4.com/wireguard-tools/snapshot/wireguard-tools-%{version}.tar.asc
Source99:
https://www.zx2c4.com/keys/AB9942E6D4A4CFC3412620A749FC7012A5DE03AE.asc#/WireGuard.keyring
Patch0:harden_wg-quick@.service.patch
+Patch1: Support-systemd-resolved-split-dns-setup.patch
BuildRequires: bash-completion
BuildRequires: pkgconfig
%systemd_requires
@@ -48,9 +49,10 @@
%prep
%setup -q -n wireguard-tools-%{version}
+%patch0 -p1
+%patch1 -p1
## HACK: Fixing wg-quick's DNS= directive with a hatchet
contrib/dns-hatchet/apply.sh
-%patch0 -p1
%build
export CFLAGS="%{optflags}"
++ Support-systemd-resolved-split-dns-setup.patch ++
>From 7fb4d491fab1e8e8b64c652f5e762b8025452c3a Mon Sep 17 00:00:00 2001
From: Dominik Heidler
Date: Thu, 17 Feb 2022 15:31:20 +0100
Subject: [PATCH] Support systemd-resolved split-dns setup
---
contrib/dns-hatchet/hatchet.bash | 12 +++-
1 file changed, 11 insertions(+), 1 deletion(-)
diff --git a/contrib/dns-hatchet/hatchet.bash b/contrib/dns-hatchet/hatchet.bash
index bc4d090..db44842 100644
--- a/contrib/dns-hatchet/hatchet.bash
+++ b/contrib/dns-hatchet/hatchet.bash
@@ -5,7 +5,8 @@ set_dns() {
{ printf 'nameserver %s\n' "${DNS[@]}"
[[ ${#DNS_SEARCH[@]} -eq 0 ]] || printf 'search %s\n'
"${DNS_SEARCH[*]}"
} | cmd resolvconf -a "$INTERFACE" -m 0 -x
- else
+ # Don't ruin a proper split dns setup
+ elif [[ "$(readlink /etc/resolv.conf)" !=
"/run/systemd/resolve/stub-resolv.conf" ]] ; then
echo "[#] mount \`${DNS[*]}' /etc/resolv.conf" >&2
[[ -e /etc/resolv.conf ]] || touch /etc/resolv.conf
{ cat <<-_EOF
@@ -30,6 +31,15 @@ set_dns() {
_EOF
)"
fi
+ # If systemd-resolved is installed, set the dns configuration there (as
well).
+ # It might be used additionally (eg for containers) or even for the
whole system.
+ # A teardown is not really needed as resolvectl detects the interface
disappearing.
+ if resolvectl status >/dev/null 2>&1 ; then
+ cmd resolvectl dns "$INTERFACE" "${DNS[@]}"
+ # Prefix each domain with '~' which will tell resolvectl to use
that domain
+ # for dns routing but not as a search domain
+ cmd resolvectl domain "$INTERFACE" "${DNS_SEARCH[*]/#/\~}"
+ fi
HAVE_SET_DNS=1
}
--
2.35.1
commit wireguard-tools for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package wireguard-tools for openSUSE:Factory
checked in at 2022-01-10 23:53:01
Comparing /work/SRC/openSUSE:Factory/wireguard-tools (Old)
and /work/SRC/openSUSE:Factory/.wireguard-tools.new.1892 (New)
Package is "wireguard-tools"
Mon Jan 10 23:53:01 2022 rev:13 rq:945229 version:1.0.20210914
Changes:
--- /work/SRC/openSUSE:Factory/wireguard-tools/wireguard-tools.changes
2021-10-04 18:42:17.418284162 +0200
+++
/work/SRC/openSUSE:Factory/.wireguard-tools.new.1892/wireguard-tools.changes
2022-01-10 23:53:07.708779364 +0100
@@ -1,0 +2,6 @@
+Wed Jan 5 10:43:06 UTC 2022 - Johannes Segitz
+
+- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
+ * harden_wg-quick@.service.patch
+
+---
New:
harden_wg-quick@.service.patch
Other differences:
--
++ wireguard-tools.spec ++
--- /var/tmp/diff_new_pack.0Mtr6G/_old 2022-01-10 23:53:08.736780265 +0100
+++ /var/tmp/diff_new_pack.0Mtr6G/_new 2022-01-10 23:53:08.740780268 +0100
@@ -27,6 +27,7 @@
Source:
https://git.zx2c4.com/wireguard-tools/snapshot/wireguard-tools-%{version}.tar.xz
Source1:
https://git.zx2c4.com/wireguard-tools/snapshot/wireguard-tools-%{version}.tar.asc
Source99:
https://www.zx2c4.com/keys/AB9942E6D4A4CFC3412620A749FC7012A5DE03AE.asc#/WireGuard.keyring
+Patch0:harden_wg-quick@.service.patch
BuildRequires: bash-completion
BuildRequires: pkgconfig
%systemd_requires
@@ -49,6 +50,7 @@
%setup -q -n wireguard-tools-%{version}
## HACK: Fixing wg-quick's DNS= directive with a hatchet
contrib/dns-hatchet/apply.sh
+%patch0 -p1
%build
export CFLAGS="%{optflags}"
++ harden_wg-quick@.service.patch ++
Index: wireguard-tools-1.0.20210914/src/systemd/wg-quick@.service
===
--- wireguard-tools-1.0.20210914.orig/src/systemd/wg-quick@.service
+++ wireguard-tools-1.0.20210914/src/systemd/wg-quick@.service
@@ -11,6 +11,16 @@ Documentation=https://git.zx2c4.com/wire
Documentation=https://git.zx2c4.com/wireguard-tools/about/src/man/wg.8
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=false
+ProtectHostname=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=oneshot
RemainAfterExit=yes
ExecStart=/usr/bin/wg-quick up %i
commit wireguard-tools for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package wireguard-tools for openSUSE:Factory
checked in at 2021-10-04 18:40:27
Comparing /work/SRC/openSUSE:Factory/wireguard-tools (Old)
and /work/SRC/openSUSE:Factory/.wireguard-tools.new.2443 (New)
Package is "wireguard-tools"
Mon Oct 4 18:40:27 2021 rev:12 rq:922718 version:1.0.20210914
Changes:
--- /work/SRC/openSUSE:Factory/wireguard-tools/wireguard-tools.changes
2021-04-25 21:29:06.092551632 +0200
+++
/work/SRC/openSUSE:Factory/.wireguard-tools.new.2443/wireguard-tools.changes
2021-10-04 18:42:17.418284162 +0200
@@ -1,0 +2,11 @@
+Fri Oct 1 20:54:57 UTC 2021 - Andreas Stieger
+
+- remove world-readable permissions from /etc/wireguard boo#1191224
+
+---
+Sun Sep 26 09:34:32 UTC 2021 - Martin Hauke
+
+- Update to version 1.0.20210914
+ * no relevant changes for Linux systems
+
+---
Old:
wireguard-tools-1.0.20210424.tar.asc
wireguard-tools-1.0.20210424.tar.xz
New:
wireguard-tools-1.0.20210914.tar.asc
wireguard-tools-1.0.20210914.tar.xz
Other differences:
--
++ wireguard-tools.spec ++
--- /var/tmp/diff_new_pack.PMFaD5/_old 2021-10-04 18:42:17.882284916 +0200
+++ /var/tmp/diff_new_pack.PMFaD5/_new 2021-10-04 18:42:17.882284916 +0200
@@ -18,7 +18,7 @@
Name: wireguard-tools
-Version:1.0.20210424
+Version:1.0.20210914
Release:0
Summary:WireGuard userspace tools
License:GPL-2.0-only
@@ -61,8 +61,6 @@
WITH_WGQUICK=yes \
WITH_SYSTEMDUNITS=yes
-install -d %{buildroot}/%{_sysconfdir}/wireguard/
-
%pre
%service_add_pre wg-quick.target wg-quick@.service
++ wireguard-tools-1.0.20210424.tar.xz ->
wireguard-tools-1.0.20210914.tar.xz ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/wireguard-tools-1.0.20210424/contrib/launchd/com.wireguard.wg0.plist
new/wireguard-tools-1.0.20210914/contrib/launchd/com.wireguard.wg0.plist
--- old/wireguard-tools-1.0.20210424/contrib/launchd/com.wireguard.wg0.plist
2021-04-24 22:43:19.0 +0200
+++ new/wireguard-tools-1.0.20210914/contrib/launchd/com.wireguard.wg0.plist
2021-09-14 00:43:31.0 +0200
@@ -1,5 +1,5 @@
-http://www.apple.com/DTDs/PropertyList-1.0.dtd";;>
+http://www.apple.com/DTDs/PropertyList-1.0.dtd";>
Label
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/wireguard-tools-1.0.20210424/src/Makefile
new/wireguard-tools-1.0.20210914/src/Makefile
--- old/wireguard-tools-1.0.20210424/src/Makefile 2021-04-24
22:43:19.0 +0200
+++ new/wireguard-tools-1.0.20210914/src/Makefile 2021-09-14
00:43:31.0 +0200
@@ -59,12 +59,16 @@
LDLIBS += -lnetwork -lbsd
endif
ifeq ($(PLATFORM),windows)
-CC := x86_64-w64-mingw32-gcc
-WINDRES := x86_64-w64-mingw32-windres
+CC := x86_64-w64-mingw32-clang
+WINDRES := $(shell $(CC) $(CFLAGS) -print-prog-name=windres 2>/dev/null)
CFLAGS += -Iwincompat/include -include wincompat/compat.h -DWINVER=0x0601
-D_WIN32_WINNT=0x0601 -flto
-LDLIBS += -lws2_32 -flto
+LDLIBS += -lws2_32 -lsetupapi -lole32 -ladvapi32 -Lwincompat
+LDFLAGS += -flto -Wl,--dynamicbase -Wl,--nxcompat -Wl,--tsaware -mconsole
+LDFLAGS += -Wl,--major-os-version=6 -Wl,--minor-os-version=1
-Wl,--major-subsystem-version=6 -Wl,--minor-subsystem-version=1
+# The use of -Wl,/delayload: here implies we're using llvm-mingw
+LDFLAGS += -Wl,/delayload:ws2_32.dll -Wl,/delayload:setupapi.dll
-Wl,/delayload:ole32.dll -Wl,/delayload:advapi32.dll
VERSION := $(patsubst "%",%,$(filter "%",$(file < version.h)))
-wg: wincompat/libc.o wincompat/init.o wincompat/resources.o
+wg: wincompat/libc.o wincompat/init.o wincompat/loader.o wincompat/resources.o
wincompat/resources.o: wincompat/resources.rc wincompat/manifest.xml
$(WINDRES) -DVERSION_STR=$(VERSION) -O coff -c 65001 -i $< -o $@
endif
@@ -78,12 +82,13 @@
COMPILE.c += $(BUILT_IN_COMPILE.c)
BUILT_IN_RM := $(RM)
RM := @a() { echo " CLEAN $$@"; $(BUILT_IN_RM) "$$@"; }; a
+WINDRES := @a() { echo " WINDRES $${@: -1}"; $(WINDRES) "$$@"; }; a
endif
wg: $(sort $(patsubst %.c,%.o,$(wildcard *.c)))
clean:
- $(RM) wg *.o *.d
+ $(RM) wg *.o *.d $(wildcard wincompat/*.o wincompat/*.lib
wincompat/*.dll)
install: wg
@install -v -d "$(DESTDIR)$(BINDIR)" && install -v -m 0755 wg
"$(DESTDIR)$(BINDIR)/wg"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/wireguard-tools-1.0.20210424/src/ipc-openbsd.h
new/wireguard-tools-1.0.20210914/sr
commit wireguard-tools for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package wireguard-tools for openSUSE:Factory
checked in at 2021-04-25 21:27:30
Comparing /work/SRC/openSUSE:Factory/wireguard-tools (Old)
and /work/SRC/openSUSE:Factory/.wireguard-tools.new.12324 (New)
Package is "wireguard-tools"
Sun Apr 25 21:27:30 2021 rev:11 rq:888307 version:1.0.20210424
Changes:
--- /work/SRC/openSUSE:Factory/wireguard-tools/wireguard-tools.changes
2021-03-16 15:46:47.693265079 +0100
+++
/work/SRC/openSUSE:Factory/.wireguard-tools.new.12324/wireguard-tools.changes
2021-04-25 21:29:06.092551632 +0200
@@ -1,0 +2,6 @@
+Sun Apr 25 08:46:05 UTC 2021 - Martin Hauke
+
+- Update to version 1.0.20210424
+ * wg-quick: kill route monitor when loop terminates
+
+---
Old:
wireguard-tools-1.0.20210315.tar.asc
wireguard-tools-1.0.20210315.tar.xz
New:
wireguard-tools-1.0.20210424.tar.asc
wireguard-tools-1.0.20210424.tar.xz
Other differences:
--
++ wireguard-tools.spec ++
--- /var/tmp/diff_new_pack.0zCar6/_old 2021-04-25 21:29:06.536552166 +0200
+++ /var/tmp/diff_new_pack.0zCar6/_new 2021-04-25 21:29:06.536552166 +0200
@@ -18,7 +18,7 @@
Name: wireguard-tools
-Version:1.0.20210315
+Version:1.0.20210424
Release:0
Summary:WireGuard userspace tools
License:GPL-2.0-only
++ wireguard-tools-1.0.20210315.tar.xz ->
wireguard-tools-1.0.20210424.tar.xz ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/wireguard-tools-1.0.20210315/src/version.h
new/wireguard-tools-1.0.20210424/src/version.h
--- old/wireguard-tools-1.0.20210315/src/version.h 2021-03-15
15:04:02.0 +0100
+++ new/wireguard-tools-1.0.20210424/src/version.h 2021-04-24
22:43:19.0 +0200
@@ -1,3 +1,3 @@
#ifndef WIREGUARD_TOOLS_VERSION
-#define WIREGUARD_TOOLS_VERSION "1.0.20210315"
+#define WIREGUARD_TOOLS_VERSION "1.0.20210424"
#endif
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/wireguard-tools-1.0.20210315/src/wg-quick/darwin.bash
new/wireguard-tools-1.0.20210424/src/wg-quick/darwin.bash
--- old/wireguard-tools-1.0.20210315/src/wg-quick/darwin.bash 2021-03-15
15:04:02.0 +0100
+++ new/wireguard-tools-1.0.20210424/src/wg-quick/darwin.bash 2021-04-24
22:43:19.0 +0200
@@ -324,22 +324,24 @@
echo "[+] Backgrounding route monitor" >&2
(trap 'del_routes; del_dns; exit 0' INT TERM EXIT
exec >/dev/null 2>&1
- local event pid=$BASHPID
+ exec 19< <(exec route -n monitor)
+ local event bpid=$BASHPID mpid=$!
[[ ${#DNS[@]} -gt 0 ]] && trap set_dns ALRM
# TODO: this should also check to see if the endpoint actually changes
# in response to incoming packets, and then call
set_endpoint_direct_route
# then too. That function should be able to gracefully cleanup if the
# endpoints change.
- while read -r event; do
+ while read -u 19 -r event; do
[[ $event == RTM_* ]] || continue
ifconfig "$REAL_INTERFACE" >/dev/null 2>&1 || break
[[ $AUTO_ROUTE4 -eq 1 || $AUTO_ROUTE6 -eq 1 ]] &&
set_endpoint_direct_route
[[ -z $MTU ]] && set_mtu
if [[ ${#DNS[@]} -gt 0 ]]; then
set_dns
- sleep 2 && kill -ALRM $pid 2>/dev/null &
+ sleep 2 && kill -ALRM $bpid 2>/dev/null &
fi
- done < <(route -n monitor)) &
+ done
+ kill $mpid) &
[[ -n $LAUNCHED_BY_LAUNCHD ]] || disown
}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/wireguard-tools-1.0.20210315/src/wg-quick/freebsd.bash
new/wireguard-tools-1.0.20210424/src/wg-quick/freebsd.bash
--- old/wireguard-tools-1.0.20210315/src/wg-quick/freebsd.bash 2021-03-15
15:04:02.0 +0100
+++ new/wireguard-tools-1.0.20210424/src/wg-quick/freebsd.bash 2021-04-24
22:43:19.0 +0200
@@ -152,28 +152,14 @@
done
}
-if_exists() {
- # HACK: The goal is simply to determine whether or not the interface
exists. The
- # straight-forward way of doing this would be `ifconfig $INTERFACE`,
but this
- # invokes the SIOCGIFSTATUS ioctl, which races with interface shutdown
inside
- # the tun driver, resulting in a kernel panic. So we work around it the
stupid
- # way by using the one utility that appears to call if_nametoindex
fairly early
- # and fails if it doesn't exist: `arp`.
- if arp -i "$INTERFACE" -a -n >/d
commit wireguard-tools for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package wireguard-tools for openSUSE:Factory
checked in at 2021-03-16 15:45:46
Comparing /work/SRC/openSUSE:Factory/wireguard-tools (Old)
and /work/SRC/openSUSE:Factory/.wireguard-tools.new.2401 (New)
Package is "wireguard-tools"
Tue Mar 16 15:45:46 2021 rev:10 rq:879265 version:1.0.20210315
Changes:
--- /work/SRC/openSUSE:Factory/wireguard-tools/wireguard-tools.changes
2021-02-25 18:30:06.934284856 +0100
+++
/work/SRC/openSUSE:Factory/.wireguard-tools.new.2401/wireguard-tools.changes
2021-03-16 15:46:47.693265079 +0100
@@ -1,0 +2,9 @@
+Mon Mar 15 15:11:03 UTC 2021 - Martin Hauke
+
+- Update to version 1.0.20210315
+ * Makefile: fix version indicator
+ * wireguard-tools: const correctness
+ * wireguard-tools: drag in headers for prototypes
+ * ipc: uniformly ignore preshared keys that are zero
+
+---
Old:
wireguard-tools-1.0.20210223.tar.asc
wireguard-tools-1.0.20210223.tar.xz
New:
wireguard-tools-1.0.20210315.tar.asc
wireguard-tools-1.0.20210315.tar.xz
Other differences:
--
++ wireguard-tools.spec ++
--- /var/tmp/diff_new_pack.S7S1U9/_old 2021-03-16 15:46:48.273265979 +0100
+++ /var/tmp/diff_new_pack.S7S1U9/_new 2021-03-16 15:46:48.277265986 +0100
@@ -2,7 +2,7 @@
# spec file for package wireguard-tools
#
# Copyright (c) 2021 SUSE LLC
-# Copyright (c) 2020, Martin Hauke
+# Copyright (c) 2020-2021, Martin Hauke
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
Name: wireguard-tools
-Version:1.0.20210223
+Version:1.0.20210315
Release:0
Summary:WireGuard userspace tools
License:GPL-2.0-only
++ wireguard-tools-1.0.20210223.tar.xz ->
wireguard-tools-1.0.20210315.tar.xz ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/wireguard-tools-1.0.20210223/src/Makefile
new/wireguard-tools-1.0.20210315/src/Makefile
--- old/wireguard-tools-1.0.20210223/src/Makefile 2021-02-23
19:32:18.0 +0100
+++ new/wireguard-tools-1.0.20210315/src/Makefile 2021-03-15
15:04:02.0 +0100
@@ -48,10 +48,13 @@
ifeq ($(DEBUG),yes)
CFLAGS += -g
endif
-WIREGUARD_TOOLS_VERSION = $(patsubst v%,%,$(shell
GIT_CEILING_DIRECTORIES="$(PWD)/../.." git describe --dirty 2>/dev/null))
+WIREGUARD_TOOLS_VERSION = $(patsubst v%,%,$(shell GIT_DIR="$(PWD)/../.git" git
describe --dirty 2>/dev/null))
ifneq ($(WIREGUARD_TOOLS_VERSION),)
CFLAGS += -D'WIREGUARD_TOOLS_VERSION="$(WIREGUARD_TOOLS_VERSION)"'
endif
+ifeq ($(PLATFORM),freebsd)
+LDLIBS += -lnv
+endif
ifeq ($(PLATFORM),haiku)
LDLIBS += -lnetwork -lbsd
endif
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/wireguard-tools-1.0.20210223/src/config.c
new/wireguard-tools-1.0.20210315/src/config.c
--- old/wireguard-tools-1.0.20210223/src/config.c 2021-02-23
19:32:18.0 +0100
+++ new/wireguard-tools-1.0.20210315/src/config.c 2021-03-15
15:04:02.0 +0100
@@ -561,7 +561,7 @@
return out;
}
-struct wgdevice *config_read_cmd(char *argv[], int argc)
+struct wgdevice *config_read_cmd(const char *argv[], int argc)
{
struct wgdevice *device = calloc(1, sizeof(*device));
struct wgpeer *peer = NULL;
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/wireguard-tools-1.0.20210223/src/config.h
new/wireguard-tools-1.0.20210315/src/config.h
--- old/wireguard-tools-1.0.20210223/src/config.h 2021-02-23
19:32:18.0 +0100
+++ new/wireguard-tools-1.0.20210315/src/config.h 2021-03-15
15:04:02.0 +0100
@@ -19,7 +19,7 @@
bool is_peer_section, is_device_section;
};
-struct wgdevice *config_read_cmd(char *argv[], int argc);
+struct wgdevice *config_read_cmd(const char *argv[], int argc);
bool config_read_init(struct config_ctx *ctx, bool append);
bool config_read_line(struct config_ctx *ctx, const char *line);
struct wgdevice *config_read_finish(struct config_ctx *ctx);
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/wireguard-tools-1.0.20210223/src/genkey.c
new/wireguard-tools-1.0.20210315/src/genkey.c
--- old/wireguard-tools-1.0.20210223/src/genkey.c 2021-02-23
19:32:18.0 +0100
+++ new/wireguard-tools-1.0.20210315/src/genkey.c 2021-03-15
15:04:02.0 +0100
@@ -72,7 +72,7 @@
}
#endif
-int genkey_main(int argc, char *argv[])
+int genkey_main(int argc, c
commit wireguard-tools for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package wireguard-tools for openSUSE:Factory checked in at 2021-02-25 18:30:03 Comparing /work/SRC/openSUSE:Factory/wireguard-tools (Old) and /work/SRC/openSUSE:Factory/.wireguard-tools.new.2378 (New) Package is "wireguard-tools" Thu Feb 25 18:30:03 2021 rev:9 rq:875062 version:1.0.20210223 Changes: --- /work/SRC/openSUSE:Factory/wireguard-tools/wireguard-tools.changes 2020-08-29 20:39:16.789387893 +0200 +++ /work/SRC/openSUSE:Factory/.wireguard-tools.new.2378/wireguard-tools.changes 2021-02-25 18:30:06.934284856 +0100 @@ -1,0 +2,11 @@ +Tue Feb 23 20:12:15 UTC 2021 - Martin Hauke + +- Update to version 1.0.20210223 + * embeddable-wg-library: sync latest from netlink.h + * completion: add help and syncconf completions + * sticky-sockets: do not use SO_REUSEADDR + * man: LOG_LEVEL variables changed name + * ipc: do not use fscanf with trailing \n + * ipc: read trailing responses after set operation + +--- Old: wireguard-tools-1.0.20200827.tar.asc wireguard-tools-1.0.20200827.tar.xz New: wireguard-tools-1.0.20210223.tar.asc wireguard-tools-1.0.20210223.tar.xz Other differences: -- ++ wireguard-tools.spec ++ --- /var/tmp/diff_new_pack.RGyR53/_old 2021-02-25 18:30:07.822285433 +0100 +++ /var/tmp/diff_new_pack.RGyR53/_new 2021-02-25 18:30:07.830285439 +0100 @@ -1,7 +1,7 @@ # # spec file for package wireguard-tools # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # Copyright (c) 2020, Martin Hauke # # All modifications and additions to the file contributed by third parties @@ -18,7 +18,7 @@ Name: wireguard-tools -Version:1.0.20200827 +Version:1.0.20210223 Release:0 Summary:WireGuard userspace tools License:GPL-2.0-only ++ WireGuard.keyring ++ --- /var/tmp/diff_new_pack.RGyR53/_old 2021-02-25 18:30:07.874285467 +0100 +++ /var/tmp/diff_new_pack.RGyR53/_new 2021-02-25 18:30:07.878285470 +0100 @@ -11,20 +11,20 @@ idMmAQMxAmhnQCqwSjIXzv1Gv4NeVGze+/t28zUQInTZyZmxi5niMiz0NUeLqREX bepmUJulYPeXrty/6/7N6jkakXp7kNGIK2Zigadca/18x9H5DgEXHl0eW7ZOgSUH qQmmnvNNrArhYXlckYapIAZhwLJDGgv3ZhRyYRCEQ9BktVcE0+2R6zb3GQARAQAB -tCRKYXNvbiBBLiBEb25lbmZlbGQgPEphc29uQHp4MmM0LmNvbT6JAlUEEwECAD8C +tCRKYXNvbiBBLiBEb25lbmZlbGQgPEphc29uQHp4MmM0LmNvbT6JAlUEEwEIAD8C GwMGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAFiEEq5lC5tSkz8NBJiCnSfxwEqXe -A64FAlp2RGIFCRLnu/IACgkQSfxwEqXeA67KJg//QxU7sM0SCN97+bu/Z7cRAffx -MW+X84rRZRrZvAwkDutTSsvSaBn3dwF5VEnCB25q3px4ybjl0bJF7Klp0RVOBJZo -FEo5BivXH9Ib6eCBn3EGk9g/K9ZZtJP44yF5oW/WZGjlTQdo/plYTd/8COkNA9LX -z3f59ljvQaJNMOUBxnMJVqgvNufbdQehS5dbimhDn5CmBfC7mEpMbrlC7e0O43yl -Tu+BuNssvrX/d3hU7zCYVDDZjVgqSY78YMpvre9xj1WdSdCx9FHo97UcGRHAlm2m -IFIunvZB4s2nWafYAjZ2mg0/gEmn6pIUO+yTSziscoZOedwYDY6FRR26YDjDebF3 -oy5AqgfF8pYACtaKRShJjEfncJhZGKYshuZbuRtXs3yfIQi3QT2MCaCpcZ7C2llS -/ire0qpq1Fp8a6tcyY/8ycr5fp7FO+SHPAQ9tnCZvej7N8guEF/LxkiekxQtkAYM -Fk3Ve4ihFpfy+vT7eF4k95nd067dOwWC+wo/RZMpl5ZBxZJ1ZNzR/Uf9WQ+26KpN -V3pu1cWuh4wjq9auz4MbU/sUMoC69HLDzxgPr8B0aKyU16nyy882R3Xp/SpKqhak -2l95vVi+vjz5YJ9xwoELQCGyb0HscmwNktOqNuev2tze7DpBq6SouK7mibVc9nhD -s9cpv6qFWLLPG9nXC2GJARwEEAECAAYFAk0ziSkACgkQf0OA0xciwD22iwf8Dv4X +A64FAmAlM/cFCRTURIcACgkQSfxwEqXeA67W2BAAt+ueWjWzC2liYQcrUIZ+95OR +BbDjJfzb9lV0SuZjOFmh3VtHN134SNbs9o0zIr/1+TqaFbin4YHGWaKxu5SmYBMy +s+TPr0A/ZUGQKpBEd40cgD+3EjgYUUxzzTtvAzWHpUKHO9aAMLDm6ASjFHDihiNr +dSoNUD6/FS3bAij5hzg995yCs0WJ39dycX0G/ik4YQcx2yy6cNf/GYSrniy0WW6D +SkrAedTndCGxmP+Tz723AfZd+TYAW6ymvpAjFEzxaxY94P/ZBZtNDUiMLXYAliqL +ozr4uZ6jqu0XZKIUS4+/FN5GZysNyvqSpm0zWpNJCAFmXurPneRlCT6UkViybgUC +x7aEaYgOzpFanIJ6jDr0FIICQMeKh1Btd09/2xMVcSIaHG722zGug7WHaM5WVNDI +8kusF+icIOH3QD62uQl8Ljfm7yQ8dWVtx/xOo2hqd/GP6ak+p6NRrUkEA6wux3M0 +OXHSc2c2+3uiAiydjXVOQCalm/7mMeePgB5Mwzsue812/l9GIdE/408tHs4nOvfn +choak5pV0qpQfxQcP1ftPkYfD0s9EblV63owW37HUE9lzrZtX7zWKOkvZ1mLijjl +p6r7Fel2m5+IF0F98+Z+TN8hxsZhNgn1By81rVUCzTRL3/Hf95ZXON3SWrtvWlND +/klrHEr7FcI2gS13bomJARwEEAECAAYFAk0ziSkACgkQf0OA0xciwD22iwf8Dv4X kRmGvWygRdbWc/lxLndbJeC0S5p+O5Ir9N2NON2r425oGQDhwpKijD3VJUjfARkr UdTdcu++Ad2gnJDDMnXOniTeMoGUJFkzAbiESTrTay2Kq+OEZztoiyo8S4PBdtn5 PQPcgwt4OLWNLpTWAYy4rxpa6gU/QRPSI9sZdbK8iKpjyJunTlcYfmR/VueJ5XHy @@ -429,18 +429,18 @@ 40qRcF5c91RGAKjsWb26zkPtHvGAZK6sacoASPhsP8kDJIdSj1LbMDci86EOPjLp dXw76QCeOMCBWQ5yK6++8c3ye4ega9JuqOU4p2hfOzsXdULK2Nm2tFHxM2vGrTJj f5MHB3c1uJbycs8xq/rJL4bDHU4/6nclZgsq/xehaFMhq6vQvlsN4l40m1eYOYvz -parqwVSz8MPM3QARAQABiQI8BBgBAgAmAhsMFiEEq5lC5tSkz8NBJiCnSfxwEqXe -A64FAlp2RHQFCRLnvAQACgkQSfxwEqXeA65YLhAAqB1N0Aeqe202Nh3RDEU6c9Pq -XhPjmCXQfP9SSqrVv6HZEwkJqHXCQ9QDtI8OTRnBa9EsiM4F8a8RYAgUzRgzSKBP -g4MPTZurF8A5HrqMhF
