stunnel-5.00-6.1<>,[؉ZX踋/=„ kc_ĤgȇȘ.~#̬ ܾ?9ED^Nzɫ 2W( _(rW@m;Jbd/}b(ѱ_K¨%*ߝbi֙HNĉ&c=Pf/ (u&h,0V{S!]@+y$tJkE^tE|ߐwiw*|eZxDG{*+Pi>BA?Ad   ( D ]~`c2t2 2 <2 2 2 2222  $!P$$$($I8$P 9$ :%= =4}>4?4@4F4G42H5|2I6D2X6xY6\62]7`2^9b:c;Ad;e;f;l;u;2v<w?2x@2yAlzACstunnel5.006.1Universal SSL TunnelThe stunnel program is designed to work as an SSL encryption wrapper between a remote client and the local (inetd-startable) or remote server. The concept is that by having non-SSL aware daemons running on your system, you can easily set them to communicate with clients over a secure SSL channel. Stunnel can be used to add SSL functionality to commonly used inetd daemons, such as POP-2, POP-3, and IMAP servers, without any changes to the program code.ZXcloud115openSUSE Leap 42.3openSUSESUSE-GPL-2.0-with-openssl-exceptionhttp://bugs.opensuse.orgProductivity/Networking/Securityhttp://www.stunnel.org/linuxx86_64if ! /usr/bin/getent passwd stunnel >/dev/null; then /usr/sbin/useradd -r -c "Daemon user for stunnel (universal SSL tunnel)" -g nogroup -s /bin/false \ -d /var/lib/stunnel stunnel 2> /dev/null || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in stunnel.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else if [ "$FIRST_ARG" -gt 1 ]; then for service in stunnel.service ; do if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-stunnel-update-$service-new-in-upgrade" fi done fi for service in stunnel.service ; do sysv_service="${service%.*}" if [ ! -e "/var/lib/systemd/migrated/$sysv_service" ]; then services_to_migrate="$services_to_migrate $sysv_service" fi done if [ -n "$services_to_migrate" -a -x /usr/sbin/systemd-sysv-convert ]; then /usr/sbin/systemd-sysv-convert --save $services_to_migrate || : fi fi PNAME=syslog SUBPNAME=-stunnel TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi if ! test -s etc/stunnel/stunnel.conf; then cp -p usr/share/doc/packages/stunnel/stunnel.conf-sample etc/stunnel/stunnel.conf echo copying default config file to /etc/stunnel/stunnel.conf fi # first installation? if [ ${FIRST_ARG:-0} = 1 ]; then if ! test -f etc/stunnel/stunnel.pem; then cat usr/share/doc/packages/stunnel/README.SUSE fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in stunnel.service ; do sysv_service="${service%.*}" if [ ! -e "/var/lib/systemd/migrated/$sysv_service" ]; then services_to_migrate="$services_to_migrate $sysv_service" touch "/var/lib/systemd/migrated/$sysv_service" || : fi done if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ -n "$services_to_migrate" ]; then if [ -x /usr/sbin/systemd-sysv-convert ]; then /usr/sbin/systemd-sysv-convert --apply $services_to_migrate || : fi elif [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset stunnel.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in stunnel.service ; do if [ ! -e "/run/rpm-stunnel-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-stunnel-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable stunnel.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop stunnel.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart stunnel.service ) || : fi else # package uninstall for service in stunnel.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fi@]x >TFHݤ,8 ai 8 : UgOG1# u7vAAA큤A큤A큤AAAAAAAAZXZXZXZXZXZXZXZXM?M?)S?Fkv=6iS_ZXFٌ_OJDM?D*R=6hZXZXZXZXZXZXZXZXZX=6b=6a=6eSYD+SSSZXZXZXE5!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-5.00-6.1.src.rpmlibstunnel.so()(64bit)stunnelstunnel(x86-64) @ @@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/perl/usr/sbin/useraddcoreutilsdiffutilsfileutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.11)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcrypto.so.1.0.0()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libssl.so.1.0.0()(64bit)libutil.so.1()(64bit)libutil.so.1(GLIBC_2.2.5)(64bit)libwrap.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)systemdsystemdsystemdsystemdtextutilsrpmlib(PayloadIsLzma)3.0.4-14.0-14.4.6-14.11.2WUeSc@R'R@Ra@Q5@PrP4P2&MJjmkoutny@suse.comdrahn@suse.comdrahn@suse.comdrahn@suse.comdrahn@suse.comdrahn@suse.comdrahn@suse.comdrahn@suse.comdrahn@suse.comdrahn@suse.comdrahn@suse.dedaniel.rahn@novell.com- Delay stunnel start after network-online.target (bnc#990797)- stunnel-CVE-2015-3644.patch: Fix authentication bypass when using "redirect" option (CVE-2015-3644, bsc#931517, backport from v5.17)- update to final v5.00 code (FATE#315694) - security fix: Added PRNG state update in fork threading (CVE-2014-0016). - Patches: - stunnel-listenqueue-option.patch refreshed.- re-add stunnel.cnf openssl cert default config file (bnc#862294)- update license information to correct SPDX format - reintroduce stunnel3-binpath.patch - set correct PATH within stunnel3 wrapper- Update to version 5.0b1 (FATE#315694) - Default "pid" is now "", i.e. not to create a pid file at startup. - Default "ciphers" updated to "HIGH:MEDIUM:+3DES:+DH:!aNULL:!SSLv2" due to AlFBPPS attack and bad performance of DH ciphersuites. - New service-level option "redirect" to redirect SSL client connections on authentication failures instead of rejecting them. - New global "engineDefault" configuration file option to control which OpenSSL tasks are delegated to the current engine. - New service-level configuration file option "engineId" to select the engine by identifier, e.g. "engineId = capi". - Improved readability of error messages printed when stunnel refuses to start due to a critical error. - Patches: - stunnel-CVE-2013-1762.patch obsoleted. Drpped. - stunnel-default-fips-off.patch obsoleted. Dropped. - stunnel-listenqueue-option.patch refreshed.- stunnel-CVE-2013-1762.patch: Fix buffer overflow in NTLM authentication (CVE-2013-1762, bnc#807440)- update package to new version 4.54 (FATE#314256) - New features: * "session" option renamed to more readable "sessionCacheTimeout". The old name remains accepted for backward compatibility. * New service-level "sessionCacheSize" option to control session cache size. * New service-level option "reset" to control whether TCP RST flag is used to indicate errors. The default value is "reset = yes". * New service-level option "renegotiation" to disable SSL renegotiation. * Added client-mode "sni" option to directly control the value of TLS Server Name Indication (RFC 3546) extension. * Glibc-specific dynamic allocation tuning was applied to help unused memory deallocation. * Non-blocking OCSP implementation. * New "compression = deflate" global option to enable RFC 2246 compresion. - stunnel-init-openssl-fix.patch obsoleted. Dropped. - stunnel-cipher-handling.patch obsoleted. Dropped. - stunnel-listenqueue-option.patch rebased to new version. - stunnel-default-fips-off.patch rebased to new version.- stunnel-cipher-handling.patch: Fix stunnel cipher initialization. Backport from upstream version 4.53 (bnc#776756)- stunnel-init-openssl-fix.patch: Fix openSSL library initialization. Backport from upstream version 4.53. (bnc#775262) - stunnel-default-fips-off.patch: Default FIPS mode to off when built against updated openSSL library. (bnc#775262) - correct configure option to enable libwrap support- update package to 4.36 (FATE#311400) - obsoletes SOMAXCONN and libwrap disable patches (bnc#674554) - forward port listenqueue patch (bnc#674554)- checkin package for SLES11 SP1 (FATE#307180) - package source as bz2 - strip off debug package - update to 4.27: Version 4.27, 2009.04.16, urgency: MEDIUM: * New features - Win32 DLLs for OpenSSL 0.9.8k. - FIPS support was updated for openssl-fips 1.2. - New priority failover strategy for multiple "connect" targets, controlled with "failover=rr" (default) or "failover=prio". - pgsql protocol negotiation by Marko Kreen . - Building instructions were updated in INSTALL.W32 file. * Bugfixes - Libwrap helper processes fixed to close standard input/output/error file descriptors. - OS2 compilation fixes. - WCE fixes by Pierre Delaage ./bin/sh/bin/sh/bin/sh/bin/shcloud115 1515760616  !"#$%&'()*+,-./0125.00-6.15.00-6.1 stunnelstunnel.servicestunnellibstunnel.sostunnelstunnel3stunnel3_wrapperstunnelAUTHORSBUGSCOPYINGCOPYRIGHT.GPLCREDITSChangeLogINSTALL.FIPSNEWSPORTSREADMEREADME.SUSETODOVNC_StunnelHOWTO.htmlexamplesca.htmlca.plimportCA.htmlimportCA.shscript.shstunnel.initstunnel.servicestunnel.specplfaq.stunnel-2.htmltworzenie_certyfikatow.htmlstunnel.cnfstunnel.conf-samplestunnel.fr.htmlstunnel.htmlstunnel.pl.htmlstunnel.8.gzstunnel.fr.8.gzstunnel.pl.8.gzsysconfig.syslog-stunnelstunnelbindevetclib64sbinvarrun/etc//usr/lib/systemd/system//usr/lib64//usr/lib64/stunnel//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/stunnel//usr/share/doc/packages/stunnel/examples//usr/share/doc/packages/stunnel/pl//usr/share/man/man8//var/adm/fillup-templates//var/lib//var/lib/stunnel//var/lib/stunnel/var/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.opensuse.org/openSUSE:Maintenance:7661/openSUSE_Leap_42.3_Update/68b8d3839ab305946394e70984ac3994-stunnel.openSUSE_Leap_42.3_Updatedrpmlzma5x86_64-suse-linux  directoryASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a148b0fb9030ac519b3e70dd878ac6e662c92dae, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.0.0, BuildID[sha1]=06d360ee0e7f6fdc711cd4a981848df22774803d, strippedPerl script, ASCII text executableUTF-8 Unicode textHTML document, ASCII text, with CRLF line terminatorsHTML document, ASCII textBourne-Again shell script, ASCII text executablePOSIX shell script, ASCII text executablemakefile script, ASCII textHTML document, ISO-8859 textASCII text, with CRLF line terminatorsXML document texttroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)PRR RRRRRR RR RRRRRRRRR RGI7PE2 0q?]"k%Lwqs93Ԉ,&^DN{2{Kh.TmQywp~X]j$Qv0VqH1av7-n| 9Mp۞ߚ>SJ֊{iJ@>L^rБbCPGJxߠƞAx FvÏl&*' W kfS4^j+]GT5x8J[ 7[oPaTY}הx}{ > c!L״6`1 Pzx|dX5$*=#~Y^"|YqYw? @\c}"E(G8Uɉ&ϒ (YP3C&)uJ E2C: 3`}_L3/ u\/zd? @3Ru'GR8"y}kϠČ v۾ E/~fCa-2 1=%SE5ws 2Mw>pʸ=Q6[fM|\4D&mNiS9 W%wΡ2[Shqvͬ;H(iR&Ks[0D]+"xsϟ2cK> &z7nc93V̹ׯO- DQ;^A^-\{xi3O^{ _ӱB\0$~٬먝e^c0R +fa<5U.a+x[Cؿ sVCtk\DNK{ R264ο +"yVro!nRU7(M}e&*`U]NF3E[-\ѿe$7c3w8` 5s7QXNL.7 |̝|Mlz h'2 Ǟ7;$_0n] Φ>U4xt'hX7#p ~xo$a5@wq τH1E~joyɺ Cp! @qZ?@: Z9ek97&v}AcjN3,Ū]Ƒ6N@&kTސ~nY FiT :T+s$ `C5$/:(Ri j#8&,_!ى\J |4]CkuY  R. QgWF6yhJc=;]((È:?L3xWK:AWT*~~TX;qG~9Yv*3Ce :Rd_ tX3-Wl;MKit1 Ɖ"\AD4,pZz2v3Go90҅"dF.$8ĉ Zh[;=BRyF*L5 .ғ%`D@Ŝ>/&]f<ȜV|2.)!~0Ϧq.P.oo|l[O}d!) A7ꒂMN;w"jB:Y-}>]7;/k#U*㥿83wA:rZ1xD9hoF3cs&Z|csmIN]at#Xp{Fa(wEx]SE[ed0oLW3ŵO֑xL5O&zt~Kլflʏa!oZ)*Phf4|ӡ5v⟸ k‘fu;=#̔F#}Ϩ\ C5x/^۶:#"}P> Nwb?W{dЃtLLaq<\0{Z ~|O2:YUxߏYv8b*!- 4m҂5:8^4J"A1CNHdCuBAa L} ; eyi$+li^15t#2c㻇bMZ,#-K ]JI`{"䀁f+LRI吝TeKKt&E "s?\HKg 0Il k^{ە +(Tm]cDmg|ป];7*|IsKZK5uK~6rVbɮ WY]G !!"rZL1۪}ilh;uهD? dz9Q!LUERy- i6P(q~쀀Xs߿;ޝ^5&B%9r<[\V$W ,8J3cgǾgK10^t~!~ЇjvE600B٫.9v-HH]58I=qk ܞM'پ`qփтjB2iFҐB8d(fxw"J4oMː 0tPD̡p if 4\0IWj:WD +7@OyLv6&t5A s|lUR`Zbq24΅k{X¾rY!0!c,|u&"q^㰴L+*`JC\|pY"3zF%F8ukՠwC}wLu+!U2S_bRTU¶ŞmWQ h=!]$/ ;St:ϦVp{Iא2=X$}4}D_2Ӄ@An4+*9n6gi=™-wEAsXZګ ܬŏt[ i=w{P5ЫI%$$jCnxنٶCgl R\i)TA#AXa(kK\ҵ<\ Vɤ슛+{FA:qmF&<^P6VAAj"- ''CKڲxs|/+L,wm|t v 3 pe=-6&|\dJuS#B}SM<:G<?WfT{!tSKفQ;fU ׸ۑM^vrcMɊHxjjz]g$H)cDXELIDf oC-Y9K_k$ue_W?_\cp+b'RN ؒٷ?4hcؾJ)&GT0W~m2wѷ]LĜܜO :g^>_Xe"@Dϸ]-5}e6Łàt3gZ-n_e\rkXz"V b֑Cgw->7aJ(kS_>Y6 6v}:.CGS I=iXE' ާO,wxn95!gDh13.jSRNOsTՎY0mU c ; e ݵHڤ>'QO~u<ߐ ˩ g@#oL"&CESr 9-r|W o*t}h-#qcNEE1ΑYs= @ōw3zU,2ҫI,hZ|vX70z hfg;xmLPEOo jX2$2p*yL I"YT{A68zҀ; ImizLMCm=[ ۣVV4av)ݞhT ɭǺV~|0hdR)x#Epe<|C yPUyx%R wH3w4B4`4{jw>2l1#;nMAdPvc>b ֆ8zCݾI{)c5??#M6"&=kˈL 4.\m9SwSy?EhpoHfbqQ8}HRՙ ŸЛiIf|W).܌\ `)y*Ćd“EZɑ,be zG ):Ä{~7ʄޖ Hah'%y"g+X(/;3 5"Uҥmݡiooku&Z@ܯ"rn^a'ɐ͗)}+Ol Bm]cX|ΧMN䜇al