Changeset 50d61ed for postlfs/security/stunnel.xml

Timestamp:

07/20/2005 06:28:37 PM (19 years ago)

Author:

Randy McMurchy <randy@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 6.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

3b6a18a

Parents:

033c86d

Message:

Updated to Stunnel-4.11

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@4743 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:

• postlfs/security/stunnel.xml (modified) (9 diffs)

postlfs/security/stunnel.xml

@@ -8 +8 @@
   <!ENTITY stunnel-download-http "http://www.stunnel.org/download/stunnel/src/stunnel-&stunnel-version;.tar.gz">
   <!ENTITY stunnel-download-ftp  "ftp://stunnel.mirt.net/stunnel/stunnel-&stunnel-version;.tar.gz">
-  <!ENTITY stunnel-md5sum        "2077669b04c36e4c0baa68348e8860a7">
+  <!ENTITY stunnel-md5sum        "253c50435d4d81cba6f19ca34266e6dc">
   <!ENTITY stunnel-size          "484 KB">
-  <!ENTITY stunnel-buildsize     "3.9 MB">
-  <!ENTITY stunnel-time          "0.10 SBU">
+  <!ENTITY stunnel-buildsize     "4.0 MB">
+  <!ENTITY stunnel-time          "0.1 SBU">
 ]>
 
@@ -62 +62 @@
     </itemizedlist>
 
-    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <!-- <bridgehead renderas="sect3">Additional Downloads</bridgehead>
     <itemizedlist spacing="compact">
       <listitem>
@@ -68 +68 @@
         url="ftp://stunnel.mirt.net/stunnel/stunnel-&stunnel-version;-1_minute_sleep_fix.patch"/></para>
       </listitem>
-    </itemizedlist>
+    </itemizedlist> -->
 
     <bridgehead renderas="sect3">Stunnel Dependencies</bridgehead>
@@ -86 +86 @@
     <command>chroot</command> jail by an unprivileged user. Create the
     new user, group and <command>chroot</command> home directory structure
-    using the following commands as the <systemitem
-    class="username">root</systemitem> user:</para>
+    using the following commands as the
+    <systemitem class="username">root</systemitem> user:</para>
 
 <screen role="root"><userinput>groupadd -g 51 stunnel &amp;&amp;
 useradd -c "Stunnel Daemon" -d /var/lib/stunnel \
         -g stunnel -s /bin/false -u 51 stunnel &amp;&amp;
-install -d -m 700 -o stunnel -g stunnel /var/lib/stunnel/run</userinput></screen>
+install -v -m700 -o stunnel -g stunnel -d /var/lib/stunnel/run</userinput></screen>
 
     <note>
@@ -98 +98 @@
       the <command>stunnel</command> daemon. If you own, or have already
       created a signed SSL Certificate you wish to use, copy it to
-      <filename>/etc/stunnel/stunnel.pem</filename> before starting the build,
-      otherwise you will be prompted to create one during the installation
-      process. The <filename>.pem</filename> file must be formatted as shown
-      below:</para>
+      <filename>/etc/stunnel/stunnel.pem</filename> before starting the build
+      (ensure only root has read and write access), otherwise you will be
+      prompted to create one during the installation process. The
+      <filename>.pem</filename> file must be formatted as shown below:</para>
 
 <screen><literal>-----BEGIN RSA PRIVATE KEY-----
@@ -108 +108 @@
 -----BEGIN CERTIFICATE-----
 <replaceable>[many encrypted lines of certificate]</replaceable>
------END CERTIFICATE-----</literal></screen>
-
+-----END CERTIFICATE-----
+-----BEGIN DH PARAMETERS-----
+<replaceable>[multiple encrypted lines of DH parameters]</replaceable>
+-----END DH PARAMETERS-----</literal></screen>
     </note>
 
@@ -115 +117 @@
     commands:</para>
 
-<screen><userinput>patch -Np1 -i ../stunnel-&stunnel-version;-1_minute_sleep_fix.patch &amp;&amp;
-./configure --prefix=/usr --sysconfdir=/etc \
+<screen><userinput>./configure --prefix=/usr --sysconfdir=/etc \
     --localstatedir=/var/lib &amp;&amp;
 make</userinput></screen>
+
+    <para>This package does not come with a test suite.</para>
 
     <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
@@ -146 +149 @@
 
     <para>prompt with the name or IP address you will be using
-    to access the service.</para>
+    to access the service(s).</para>
 
   </sect2>
@@ -181 +184 @@
 EOF</userinput></screen>
 
-    <para>Next, you need to add the service you wish to encrypt to the
+    <para>Next, you need to add the service(s) you wish to encrypt to the
     configuration file. The format is as follows:</para>