Stunnel 5.14 Update

Somewhere along the way, I became the new maintainer for the stunnel package in OpenWRT.

I had initially needed stunnel because my auth server for wifidog only speaks TLS. In my testing, I required a more version of stunnel (for some reason I forgot).

At that point, the stunnel package had been abandoned already and was only available in OpenWrt 14.07 as part of the oldpackages repository. I had already built a working packaging script for stunnel 5.10 based on another attempt. So I figured, why not submit it to the OpenWrt repository?

Since then, an automatic email (nice!) reminded me that stunnel 5.14 had been released, including some security fixes. Luckily, the patches required for OpenWrt still applied cleanly.

Some items remain on the TODO list:

• Make SSP configurable upstream so I don't have to maintain 011_disable_ssp_linking.patch
• Failing that, make sure SSP works if enabled in OpenWrt buildroot
• Get rid of 010_fix_getnameinfo.patch

Overall, I'm quite happy with the packaging. Compared to earlier versions, only two trivial patches are required and the dependency on libpthread was dropped.

Wifidog speaks TLS natively these days. I personally don't need stunnel right now, but it's always good to have more cryptography options in a post-snowden world.