Skip to content

feat: bump ocserv to 1.5.0 and migrate build to meson#38

Merged
gifi71 merged 1 commit into
mainfrom
feat/ocserv-1.5.0
Jun 21, 2026
Merged

feat: bump ocserv to 1.5.0 and migrate build to meson#38
gifi71 merged 1 commit into
mainfrom
feat/ocserv-1.5.0

Conversation

@gifi71

@gifi71 gifi71 commented Jun 21, 2026

Copy link
Copy Markdown
Owner

Bumps ocserv 1.4.0 → 1.5.0 (cumulative over 1.4.1/1.4.2, includes their security fixes).

Breaking upstream change

ocserv 1.4.2 replaced autotools with meson (#699). The 1.5.0 release tarball ships only meson.build — no configure — so the old ./configure && make && make install no longer works.

Dockerfile changes (ocserv-builder stage)

  • ARG OCSERV_VERSION 1.4.0 → 1.5.0
  • add meson + ninja-build to build deps
  • ./configure --enable-oidc-auth && make && make installmeson setup build --buildtype=release -Doidc-auth=enabled && meson compile -C build && meson install -C build
  • oidc-auth defaults to disabled in meson, so it is enabled explicitly to preserve OIDC support

Verification (local)

  • meson detects every dependency (gnutls 3.7.9, nettle 3.8.1, talloc, protobuf-c, pam, radcli, krb5-gssapi, liboath, libnl, lz4, seccomp, curl, cjose, jansson); oidc-auth: enabled
  • GPG signature of the tarball valid against key 96865171 (unchanged)
  • ocserv --versionOpenConnect VPN Server 1.5.0 — seccomp, oath, radius, gssapi, PAM, PKCS#11, AnyConnect, oidc_auth
  • integration suite 6/6 pass (TLS, VPN tunnel, TUN iface, IP assignment, gateway ping, exporter metrics)

Feature set unchanged vs 1.4.0. No config-option migration needed (removed cgroup / renamed min-reauth-time are not used in our configs).

ocserv 1.5.0 (cumulative over 1.4.1/1.4.2) replaced the autotools build
system with meson upstream (1.4.2, #699); the release tarball no longer
ships a configure script.

- ARG OCSERV_VERSION 1.4.0 -> 1.5.0
- add meson + ninja-build to the builder stage
- replace ./configure && make && make install with meson setup/compile/install
- oidc-auth is disabled by default in meson, so pass -Doidc-auth=enabled
  explicitly to preserve OIDC support

Build verified locally: meson detects all deps (gnutls/nettle/talloc/
protobuf-c/pam/radcli/krb5/liboath/libnl/lz4/seccomp/curl/cjose/jansson),
oidc-auth enabled, GPG signature valid. 'ocserv --version' reports 1.5.0
with seccomp, oath, radius, gssapi, PAM, AnyConnect, oidc_auth. Integration
suite passes 6/6.
@gifi71
gifi71 merged commit 23052f9 into main Jun 21, 2026
6 checks passed
@gifi71
gifi71 deleted the feat/ocserv-1.5.0 branch June 21, 2026 00:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant