disable socket_wrapper on archs where it causes problems

This is needed for certain tests

.gitignore

@@ -227,3 +227,5 @@
 /ocserv-1.0.1.tar.xz
 /ocserv-1.1.0.tar.xz
 /ocserv-1.1.0.tar.xz.sig
+/ocserv-1.1.1.tar.xz
+/ocserv-1.1.1.tar.xz.sig

ocserv.conf

@@ -176,9 +176,12 @@ server-key = /etc/pki/ocserv/private/server.key
 # information at: https://gitlab.com/ocserv/ocserv/issues
 isolate-workers = true
 
-# A banner to be displayed on clients
+# A banner to be displayed on clients after connection
 #banner = "Welcome"
 
+# A banner to be displayed on clients before connection
+#pre-login-banner = "Welcome"
+
 # Limit the number of clients. Unset or set to zero for unlimited.
 #max-clients = 1024
 max-clients = 16
@@ -195,9 +198,11 @@ max-same-clients = 2
 # is recommended as it is more efficient in parsing.
 #listen-proxy-proto = true
 
-# Limit the number of client connections to one every X milliseconds 
-# (X is the provided value). Set to zero for no limit.
-#rate-limit-ms = 100
+# Rate limit the number of incoming connections to one every X milliseconds
+# (X is the provided value), as the secmod backlog grows. This
+# makes the server more resilient (and prevents connection failures) on
+# multiple concurrent connections. Set to zero for no limit.
+rate-limit-ms = 100
 
 # Stats report time. The number of seconds after which each
 # worker process will report its usage statistics (number of

ocserv.spec

@@ -1,6 +1,5 @@
-# This spec file has been automatically updated
-Version:	1.1.0
-Release: 3%{?dist}
+Version:	1.1.1
+Release: 1%{?dist}
 %global _hardened_build 1
 
 %if 0%{?fedora} || 0%{?rhel} >= 7
@@ -58,6 +57,7 @@ BuildRequires:	gnutls-devel
 BuildRequires:	pam-devel
 BuildRequires:	iproute
 BuildRequires:	openconnect
+BuildRequires:  gnutls-utils
 
 %if (0%{?use_local_protobuf} == 0)
 BuildRequires:	protobuf-c-devel
@@ -92,7 +92,11 @@ BuildRequires:	systemd
 BuildRequires:	systemd-devel
 BuildRequires:	liboath-devel
 BuildRequires:	uid_wrapper
+# Disable socket_wrapper on certain architectures because it
+# introduces new syscalls that the worker cannot handle.
+%ifnarch aarch64 %{ix86} %{arm}
 BuildRequires:	socket_wrapper
+%endif
 BuildRequires:	gnupg2
 
 %if 0%{?rhel} && 0%{?rhel} >= 7
@@ -204,7 +208,7 @@ mkdir -p -m 700 %{_sysconfdir}/pki/ocserv/private
 mkdir -p %{_sysconfdir}/pki/ocserv/cacerts
 
 %check
-make check %{?_smp_mflags} XFAIL_TESTS=test-sighup-key-change
+make check %{?_smp_mflags} VERBOSE=1
 
 %if %{use_systemd}
 %post
@@ -281,6 +285,11 @@ install -D -m 0755 %{SOURCE11} %{buildroot}/%{_initrddir}/%{name}
 %endif
 
 %changelog
+* Thu Sep 21 2020 Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> - 1.1.1-1
+- Update to upstream 1.1.1 release
+- Set default priorities to NORMAL as using @SYSTEM is no longer necessary
+  to follow crypto policies.
+
 * Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.1.0-3
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
 

sources

@@ -1,2 +1,2 @@
-SHA512 (ocserv-1.1.0.tar.xz) = 10a589ccf28bf9568e602fc26d9133c78a840205f1a777d62cb52b680221bdaa8c231c37a95587b3494437dafc649b40f71be05a4868646c48efb3d873615861
-SHA512 (ocserv-1.1.0.tar.xz.sig) = 29c4082fa34327663ce6bcd29102c2eba088d79049e6637fabd048c8310fa9ff27853f06ef696c19ef66c146ce9e6e455cecc0261676a6ed343de731142f2022
+SHA512 (ocserv-1.1.1.tar.xz) = 1173416f0d32f9faf98e539c8e73316a50ac93b519d1ade19374a3df865d10d975e13ac53e0c5a5e77c80f3605d7a810287b18b85b798887d227389761b54220
+SHA512 (ocserv-1.1.1.tar.xz.sig) = 9fe0f3e2ea4daaf1d053c2cdc87d38dc8256feb11c16f93e7e677500457914a82e659901f77f6ec4ca175fceeec74e3f8d001412c969c18dcf486545bac83393