radsecproxy: update to 1.11.2

Changes since 1.9.1:
- Add TLS-PSK support and SSLKEYLOGFILE mechanism (1.11.0)
- Add options to require Message-Authenticator attribute (1.11.0)
- Add native dynamic discovery for NAPTR and SRV records (1.10.0)
- Add SNI support for outgoing TLS connections (1.10.0)
- Multiple TCP/TLS connection stability bug fixes (1.10.x)
- Reload complete TLS context on SIGHUP (1.11.0)
- Fix Message-Authenticator validation for Accounting-Response (1.11.2)

Update patch 200-logdest-on-foreground.patch for new code positions.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
This commit is contained in:
Alexandru Ardelean
2026-04-22 12:12:24 +03:00
committed by Alexandru Ardelean
parent 588cc4c904
commit bd66f3b4a1
4 changed files with 37 additions and 11 deletions
+2 -2
View File
@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk include $(TOPDIR)/rules.mk
PKG_NAME:=radsecproxy PKG_NAME:=radsecproxy
PKG_VERSION:=1.9.1 PKG_VERSION:=1.11.2
PKG_RELEASE:=1 PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/radsecproxy/radsecproxy/releases/download/$(PKG_VERSION)/ PKG_SOURCE_URL:=https://github.com/radsecproxy/radsecproxy/releases/download/$(PKG_VERSION)/
PKG_HASH:=e08e4e04d188deafd0b55b2f66b1e7fff9bdb553fb170846590317d02c9dc5db PKG_HASH:=1fe3f25a392b74db1fe62868e19e883acd1dc0e1f318715299920fcc5e166f97
PKG_MAINTAINER:=Alexandru Ardelean <ardeleanalex@gmail.com> PKG_MAINTAINER:=Alexandru Ardelean <ardeleanalex@gmail.com>
PKG_LICENSE:=BSD-3-CLAUSE PKG_LICENSE:=BSD-3-CLAUSE
@@ -1,18 +1,19 @@
--- a/radsecproxy.c --- a/radsecproxy.c
+++ b/radsecproxy.c +++ b/radsecproxy.c
@@ -3075,15 +3075,13 @@ int radsecproxy_main(int argc, char **ar @@ -3637,16 +3637,13 @@ int radsecproxy_main(int argc, char **ar
options.loglevel = loglevel; options.loglevel = loglevel;
else if (options.loglevel) else if (options.loglevel)
debug_set_level(options.loglevel); debug_set_level(options.loglevel);
- if (!foreground) { - if (!foreground) {
- debug_set_destination(options.logdestination - debug_set_destination(options.logdestination
- ? options.logdestination - ? options.logdestination
- : "x-syslog:///", LOG_TYPE_DEBUG); - : "x-syslog:///",
- if (options.ftickssyslogfacility) { - LOG_TYPE_DEBUG);
- if (options.ftickssyslogfacility) {
- debug_set_destination(options.ftickssyslogfacility, - debug_set_destination(options.ftickssyslogfacility,
- LOG_TYPE_FTICKS); - LOG_TYPE_FTICKS);
- free(options.ftickssyslogfacility); - free(options.ftickssyslogfacility);
- } - }
+ debug_set_destination(options.logdestination + debug_set_destination(options.logdestination
+ ? options.logdestination + ? options.logdestination
+ : "x-syslog:///", LOG_TYPE_DEBUG); + : "x-syslog:///", LOG_TYPE_DEBUG);
+1 -1
View File
@@ -1,6 +1,6 @@
--- a/gconfig.c --- a/gconfig.c
+++ b/gconfig.c +++ b/gconfig.c
@@ -119,7 +119,7 @@ FILE *pushgconfpaths(struct gconffile ** @@ -120,7 +120,7 @@ FILE *pushgconfpaths(struct gconffile **
int i; int i;
FILE *f = NULL; FILE *f = NULL;
glob_t globbuf; glob_t globbuf;
+25
View File
@@ -0,0 +1,25 @@
#!/bin/sh
[ "$1" = "radsecproxy" ] || exit 0
# Write a minimal config with a client so radsecproxy starts up
cat > /tmp/radsecproxy-test.conf << 'EOF'
LogLevel 3
LogDestination file:///tmp/radsecproxy-test.log
ListenUDP localhost:11812
client localhost {
type udp
secret testing123
}
EOF
rm -f /tmp/radsecproxy-test.log
timeout 2 radsecproxy -f -c /tmp/radsecproxy-test.conf 2>/dev/null || true
# Verify radsecproxy wrote to the log (proves it started and parsed the config)
[ -s /tmp/radsecproxy-test.log ] || {
echo "radsecproxy did not write to log file"
false
}
echo "radsecproxy started and logged OK"