Jul. 2004 - vsftpd-2.0.0 released and continuing vsftpd support * vsftpd-2.0.0 is released - with SSL support and lots of little features and fixes! Please refer to the v2.0.0 Changelog and vsftpd FAQ (frequently asked questions) for a list of common questions! Changelog - Improve logging (log deletes, renames, chmods, etc. as requested by users). - Add no_log_lock to work around Solaris / Veritas locking hangs. - Add EPRT, EPSV, PASV and TVFS to FEAT response. - Implement use of MDTM to set timestamps. - Recognize FEAT prior to login. - Add OpenSSL (AUTH TLS / SSL) support for encrypted control and data connections! Hurrah. - Increase max size of .message files to 4000 characters, thanks to Eric Pancer <epancer@security.depaul.edu> for the report. - Add easy builddefs.h ability to disable PAM builds even when PAM is installed. - Report vsftpd version in STAT output. - Add REFS file. - Change parent<->child socket comms from DGRAM to STREAM for increased reliability. The main benefit is should the parent be killed (or crash out) then the child won't block on a read() that will never return. - Make str_reserve reserve space for the trailing zero as well, so we don't cause a reallocation if we exactly fill the buffer. - Optimize the sending of strings over the parent<->child comms links. - Improve the build system so tcp_wrappers, PAM and OpenSSL can be forcibly compiled out. - Fix vsftpd.conf.5 typos, thanks to Dmitry V. Levin <ldv@altlinux.org>. - If trans_chunk_size is between 1 and 4096, use 4096 rather than ignoring totally. Thanks to Brad <brad@intradonline.com>. - Lose Makefile.sun and README.solaris special cases. - Add SSL / TLS info to SECURITY texts. - Add README.ssl - Add documentation for new SSL options to vsftpd.conf.5. - Add support for CWD ~ (and in general support ~ at start of any filename). Also support stuff like ~chris/pics, if tilde_user_enable=YES is set. Note that all of this is for very very broken clients :-( - Fix compile warnings. - Update INSTALL with (recent) OS X as a working platform. At this point: v2.0.0 released! ===============================
Make that vsftpd-2.0.1 ;-)
Moving right along... vsftpd-2.0.2pre1 :) SSL/TLS is a pain to implement especially with all the buggy clients around. - Add -lcrypto for the SSL build; needed for some systems! Thanks to Nelson Chang <nelsoncybernet@bigfoot.com>. - Oops; fix session bale out if an empty length password is given. - Fix build on Fedora Core 2 (-lcap cannot seem to find /lib/libcap.so). - Fix vsftpd.conf.5 man page error in "ssl_sslv3", thanks to Etienne Chevillard <echevillard@yahoo.fr>. - Clarify licensing: I allow linking of my GPL software with the OpenSSL libraries. Thanks to Jonas Bofjall <job@abc.se>. - Add COPYRIGHT. - Fix build on OpenBSD, FreeBSD, probably NetBSD too (they aren't SuSv2 compliant; timezone should be a variable not a function). - Fix build where PAM build is enabled but PAM headers are missing. - Fix build on RHEL3 (remove errant include from twoprocess.c). At this point: v2.0.1 released! =============================== - Fix FAQ typo, thanks to Jose Santiago Oyervides Gonzalez <jose.oyervides@elnorte.com>. - Emit data transfer status messages (success / failure) after flushing and waiting for the dull data transfer to reach the client. This should work around buggy FTP clients such as FlashFXP, which is known to truncate files incorrectly. (v2.0.2pre1)
Created attachment 34918 [details] vsftpd-2.0.2_pre1.ebuild
Created attachment 34919 [details, diff] files/vsftpd-2.0.2_pre1-gentoo.diff
Created attachment 34920 [details] vsftpd-2.0.2_pre1.ebuild Sigh found a typo :(
oh sorry, I didn't see I mutilated the URL field ;)
Fixed typos in ebuild. Also, works for 2.0.2pre2 now (use the existing diff file).
Created attachment 36673 [details] Updated ebuild for 2.0.2pre2 (and fixed typos)
Created attachment 36683 [details] Updated ebuild for 2.0.2pre2 This version actually works. (Previously PAM support was broken (always on), and SSL support was totally missing). Also, if you want SSL support remember to read vsftpd.conf and add the appropriate lines. Also, you need a certificate. If you want to make one yourself: http://www.jabberdoc.org/app_sslkey.html Settings in vsftpd.conf you will probably need to set: ssl_enable,force_local_logins_ssl,force_data_ssl,rsa_cert_file (Someone should write this down!)
When downloaded via Firefox the "updated ebuild for 2.0.2pre2" is a CRLF terminated file (i.e. windows text format). Portage wouldn't handle it. But after a dos2unix it worked fine. :)
when i try to emerge this (this beeing the "updated ebuild vor 2.0.2pre2, attachment id=36683 by adam luter), i get the following error: * Cannot find $EPATCH_SOURCE! Value for $EPATCH_SOURCE is: * /usr/local/portage/net-ftp/vsftpd/files/vsftpd-2.0.2_pre2-gentoo.diff Where can i get the required diff file ? It isn't in the portage tree, not is it attached to this bug, and the ebuild doesn't download it ?!? Am i missing something important here ? Also, with v1.2.2 (which is the latest in portage) marked stable in x86 and alpha, how about introducing v2.x ebuilds as unstable versions now ? I'd say it's about time - it's almost 2 months now since v2.0.0 was released :-)
Ok, sorry everyone, i should have paid more attention to the comments here :-) Now having found the required diff file, it emerged fine on my system. So at least the last part of my comment (about introduction into the portage tree) still makes some sense ;) [BTW: Bug 60401 looks like a duplicate considering this bug provides ebuilds for even newer versions of vsftpd, doesn't it?]
Ah, official bump already pls.! ;-)
Oops sorry that was just of my plead ;-) Adam, I'm having virtual users (pam-related most prolly) problems with this ebuild, I was hoping to be able to login with 'apache' for sftp updates, but for the love of God, vsftpd refuses to log me in, just hangs after 'logging in'
*** Bug 60401 has been marked as a duplicate of this bug. ***
Look at the Attachment from Bug 60401 at http://bugs.gentoo.org/attachment.cgi?id=39688&action=view for a different ebuild for 2.0.1. It has some changes that should be integrated and also adds support for ssl.
I found new version 2.0.1 in portage ans now it work for me so I closed bug
