From patchwork Tue Apr 1 12:26:50 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 8588 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R10" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4ZRnLX67gDz3xD7 for ; Tue, 1 Apr 2025 12:27:00 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) client-signature ECDSA (secp384r1)) (Client CN "mail02.haj.ipfire.org", Issuer "E5" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4ZRnLX3GyhzGg for ; Tue, 1 Apr 2025 12:27:00 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4ZRnLX2YShz331X for ; Tue, 1 Apr 2025 12:27:00 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R10" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4ZRnLT2fbXz2xLw for ; Tue, 1 Apr 2025 12:26:57 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4ZRnLS3WFpzGg; Tue, 1 Apr 2025 12:26:56 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1743510416; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=43x6fskvNmzd0THdh7E0j+uUx6ZMhE3Bxr12wrwQHpU=; b=E07MlSB754GDmjhHNGCtyeZ6PfVBWGsBzWqcJV1G5V1Rn+Su14c0fZ/Pdug3EzEpsXRPBp JMq+zdQg4E8s9fCg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1743510416; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=43x6fskvNmzd0THdh7E0j+uUx6ZMhE3Bxr12wrwQHpU=; b=ifTLk787PrkOc4tlpgtje0pmvmAk6lmAKiskKFPssUPC1eH9ja4A5yb3jbpLrotw0F4+An GIg4hOaoqzl4OgyTGMCvCYDVZrtx3sHGFVBzrg0IuDGwlUQn6J3JyCENqvEeodJmifCzSZ xRsE291vMGRaAHXIFAvodKO/apBB+yERlA2X0vuyGB2M/Jozvclx8Da9+01jWKpJPxyFHY x6ZejTbK9FHqdToIhPRQlF3q8FQfwAe8ZFEl6CZI5CEj0F57JUL3wTmwF2xRIrZ5MvnmM6 RuCn1ncAnq6Nfk5ZecW3DaZ8kBnGHE4gAc2z0sMhJS/PAmoakX9A5Ob7jUA3EA== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] core194: Ship changed openssl.cnf file from CU184 Date: Tue, 1 Apr 2025 14:26:50 +0200 Message-ID: <20250401122650.5358-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - openssl.cnf had copy_extensions = copyall added to the [ IPFire ] section as part of the ipsec host cert renewal process but the file was missed to be shipped with the Core Update 184 update. So only users doing fresh installs of CU184 or later will have the updated openssl.cnf file. - This patch rectifies that situation. Signed-off-by: Adolf Belka --- config/rootfiles/core/194/filelists/files | 1 + 1 file changed, 1 insertion(+) diff --git a/config/rootfiles/core/194/filelists/files b/config/rootfiles/core/194/filelists/files index e615ef92e..a16782a5c 100644 --- a/config/rootfiles/core/194/filelists/files +++ b/config/rootfiles/core/194/filelists/files @@ -2,3 +2,4 @@ etc/rc.d/init.d/firewall etc/rc.d/init.d/functions srv/web/ipfire/cgi-bin/aliases.cgi srv/web/ipfire/cgi-bin/pakfire.cgi +etc/ssl/openssl.cnf