<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="3">
<package pkgid="3fc899a9dadb17cd4893fe30ad26ad0458af46b2c187550003789e078c4e9edf" name="stunnel" arch="src">
  <version epoch="0" ver="5.55" rel="39.1"/>
  <changelog author="drahn@suse.com" date="1476446400">- update to version 5.36
- Removed direct zlib dependency.</changelog>
  <changelog author="jengelh@inai.de" date="1476619200">- Update rpm group and description and make -doc noarch
- Do not suppress errors from useradd
- Remove redundant %clean section</changelog>
  <changelog author="michael@stroeder.com" date="1481198400">- update to version 5.38</changelog>
  <changelog author="michael@stroeder.com" date="1483358400">- update to version 5.39</changelog>
  <changelog author="michael@stroeder.com" date="1485604800">- update to version 5.40</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Don't require insserv if we don't use it</changelog>
  <changelog author="michael@stroeder.com" date="1491048000">- update to version 5.41</changelog>
  <changelog author="werner@suse.de" date="1491480000">- Require package config for libsystemd to help the configure script
  to detect and enable systemd socket activation (boo#1032557)
- Refresh patch stunnel-listenqueue-option.patch</changelog>
  <changelog author="michael@stroeder.com" date="1500465600">- update to version 5.42</changelog>
  <changelog author="vetter@physik.uni-wuerzburg.de" date="1502971200">- add more verbose change log:
  Version 5.42, 2017.07.16, urgency: HIGH
- New features
  * "redirect" also supports "exec" and not only "connect".
  * PKCS#11 engine DLL updated to version 0.4.7.
- Bugfixes
  * Fixed premature cron thread initialization causing hangs.
  * Fixed "verifyPeer = yes" on OpenSSL &lt;= 1.0.1.
  * Fixed pthreads support on OpenSolaris.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- update to version 5.44
  * Default accept address restored to INADDR_ANY
  * Fix race condition in "make check"
  * Fix removing the pid file after configuration reload
- includes 5.43
  * Allow for multiple "accept" ports per section
  * Self-test framework (make check)
  * Added config load before OpenSSL init
  * OpenSSL 1.1.1-dev compilation fixes
  * Fixed round-robin failover in the FORK threading model
  * Fixed handling SSL_ERROR_ZERO_RETURN in SSL_shutdown()
  * Minor fixes of the logging subsystem
  * OpenSSL DLLs updated to version 1.0.2m
- add new checking to build
- rebase stunnel-listenqueue-option.patch
- Cleanup with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Do not ignore errors from useradd. Ensure nogroup exists
  beforehand.
- Replace old $RPM_ variables. Combine two nested ifs.</changelog>
  <changelog author="vetter@physik.uni-wuerzburg.de" date="1517918400">- Revamp SLE11 builds</changelog>
  <changelog author="obs@botter.cc" date="1541937600">- update to version 5.49
  * Logging of negotiated or resumed TLS session IDs (thx to ANSSI - National Cybersecurity Agency of France).
  * Merged Debian 10-enabled.patch and 11-killproc.patch (thx to Peter Pentchev).
  * OpenSSL DLLs updated to version 1.0.2p.
  * PKCS#11 engine DLL updated to version 0.4.9.
  * Fixed a crash in the session persistence implementation.
  * Fixed syslog identifier after configuration file reload.
  * Fixed non-interactive "make check" invocations.
  * Fixed reloading syslog configuration.
  * stunnel.pem created with SHA-256 instead of SHA-1.
  * SHA-256 "make check" certificates.
- includes new version 5.48
  * Fixed requesting client certificate when specified as a global option.
  * Certificate subject checks modified to accept certificates if at least one of the specified checks matches.
- includes new version 5.47
  * Fast add_lock_callback for OpenSSL &lt; 1.1.0. This largely improves performance on heavy load.
  * Automatic detection of Homebrew OpenSSL.
  * Clarified port binding error logs.
  * Various "make test" improvements.
  * Fixed a crash on switching to SNI slave sections.
- includes new version 5.46
  * The default cipher list was updated to a safer value: "HIGH:!aNULL:!SSLv2:!DH:!kDHEPSK".
  * Default accept address restored to INADDR_ANY.
- includes new version 5.45
  * Implemented delayed deallocation of service sections after configuration file reload.
  * OpenSSL DLLs updated to version 1.0.2o.
  * Deprecated the sslVersion option.
  * The "socket" option is now also available in service sections.
  * Implemented try-restart in the SysV init script (thx to Peter Pentchev).
  * TLS 1.3 compliant session handling for OpenSSL 1.1.1.
  * Default "failover" value changed from "rr" to "prio".
  * New "make check" tests.
  * A service no longer refuses to start if binding fails for some (but not all) addresses:ports.
  * Fixed compression handling with OpenSSL 1.1.0 and later.
  * _beginthread() replaced with safer _beginthreadex().
  * Fixed exception handling in libwrap.
  * Fixed exec+connect services.
  * Fixed automatic resolver delaying.
  * Fixed a Gentoo cross-compilation bug (thx to Joe Harvell).
  * A number of "make check" framework fixes.
  * Fixed false postive memory leak logs.
  * Build fixes for OpenSSL versions down to 0.9.7.
  * Fixed (again) round-robin failover in the FORK threading model.</changelog>
  <changelog author="obs@botter.cc" date="1541937601">- disabled checks; checks depend on ncat and network accessibility</changelog>
  <changelog author="fbui@suse.com" date="1550836800">- Drop use of $FIRST_ARG in .spec
  The use of $FIRST_ARG was probably required because of the
  %service_* rpm macros were playing tricks with the shell positional
  parameters. This is bad practice and error prones so let's assume
  that no macros should do that anymore and hence it's safe to assume
  that positional parameters remains unchanged after any rpm macro
  call.</changelog>
  <changelog author="vcizek@suse.com" date="1568376000">- update to version 5.55
  New features
    New "ticketKeySecret" and "ticketMacSecret" options to control confidentiality
    and integrity protection of the issued session tickets. These options allow for
    session resumption on other nodes in a cluster.
    Logging of the assigned bind address instead of the requested bind address.
    Check whether "output" is not a relative file name.
    Added sslVersion, sslVersionMin and sslVersionMax for OpenSSL 1.1.0 and later.
    Hexadecimal PSK keys are automatically converted to binary.
    Session ticket support (requires OpenSSL 1.1.1 or later). "connect" address
    persistence is currently unsupported with session tickets.
    SMTP HELO before authentication (thx to Jacopo Giudici).
    New "curves" option to control the list of elliptic curves in OpenSSL 1.1.0 and later.
    New "ciphersuites" option to control the list of permitted TLS 1.3 ciphersuites.
    Include file name and line number in OpenSSL errors.
    Compatibility with the current OpenSSL 3.0.0-dev branch.
    Better performance with SSL_set_read_ahead()/SSL_pending().
  Bugfixes
    A number of testing framework fixes and improvements.
    Service threads are terminated before OpenSSL cleanup to prevent occasional stunnel crashes at shutdown.
    Fixed data transfer stalls introduced in stunnel 5.51.
    Fixed a transfer() loop bug introduced in stunnel 5.51.
    Fixed PSKsecrets as a global option (thx to Teodor Robas).
    Fixed a memory allocation bug (thx to matanfih).
    Fixed PSK session resumption with TLS 1.3.
    Fixed a memory leak in the WIN32 logging subsystem.
    Allow for zero value (ignored) TLS options.
    Partially refactored configuration file parsing and logging subsystems for clearer code and minor bugfixes.
  Caveats
    We removed FIPS support from our standard builds. FIPS will still be available with custom builds.
- drop stunnel-listenqueue-option.patch
  Its original purpose (from bsc#674554) was to allow setting a higher
  backlog value for listen(). As that value was raised to SOMAXCONN
  years ago (in 4.36), we don't need it anymore</changelog>
  <changelog author="vcizek@suse.com" date="1568376001">- Install the correct file as README.openSUSE (bsc#1150730)
  * stunnel.keyring was accidentally installed instead</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
</package>
<package pkgid="3672a3b69aa77143981615376df7ea5e91936c69aef66e3d65d0dfdb64a91c6b" name="stunnel" arch="x86_64">
  <version epoch="0" ver="5.55" rel="39.1"/>
  <changelog author="drahn@suse.com" date="1476446400">- update to version 5.36
- Removed direct zlib dependency.</changelog>
  <changelog author="jengelh@inai.de" date="1476619200">- Update rpm group and description and make -doc noarch
- Do not suppress errors from useradd
- Remove redundant %clean section</changelog>
  <changelog author="michael@stroeder.com" date="1481198400">- update to version 5.38</changelog>
  <changelog author="michael@stroeder.com" date="1483358400">- update to version 5.39</changelog>
  <changelog author="michael@stroeder.com" date="1485604800">- update to version 5.40</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Don't require insserv if we don't use it</changelog>
  <changelog author="michael@stroeder.com" date="1491048000">- update to version 5.41</changelog>
  <changelog author="werner@suse.de" date="1491480000">- Require package config for libsystemd to help the configure script
  to detect and enable systemd socket activation (boo#1032557)
- Refresh patch stunnel-listenqueue-option.patch</changelog>
  <changelog author="michael@stroeder.com" date="1500465600">- update to version 5.42</changelog>
  <changelog author="vetter@physik.uni-wuerzburg.de" date="1502971200">- add more verbose change log:
  Version 5.42, 2017.07.16, urgency: HIGH
- New features
  * "redirect" also supports "exec" and not only "connect".
  * PKCS#11 engine DLL updated to version 0.4.7.
- Bugfixes
  * Fixed premature cron thread initialization causing hangs.
  * Fixed "verifyPeer = yes" on OpenSSL &lt;= 1.0.1.
  * Fixed pthreads support on OpenSolaris.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- update to version 5.44
  * Default accept address restored to INADDR_ANY
  * Fix race condition in "make check"
  * Fix removing the pid file after configuration reload
- includes 5.43
  * Allow for multiple "accept" ports per section
  * Self-test framework (make check)
  * Added config load before OpenSSL init
  * OpenSSL 1.1.1-dev compilation fixes
  * Fixed round-robin failover in the FORK threading model
  * Fixed handling SSL_ERROR_ZERO_RETURN in SSL_shutdown()
  * Minor fixes of the logging subsystem
  * OpenSSL DLLs updated to version 1.0.2m
- add new checking to build
- rebase stunnel-listenqueue-option.patch
- Cleanup with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Do not ignore errors from useradd. Ensure nogroup exists
  beforehand.
- Replace old $RPM_ variables. Combine two nested ifs.</changelog>
  <changelog author="vetter@physik.uni-wuerzburg.de" date="1517918400">- Revamp SLE11 builds</changelog>
  <changelog author="obs@botter.cc" date="1541937600">- update to version 5.49
  * Logging of negotiated or resumed TLS session IDs (thx to ANSSI - National Cybersecurity Agency of France).
  * Merged Debian 10-enabled.patch and 11-killproc.patch (thx to Peter Pentchev).
  * OpenSSL DLLs updated to version 1.0.2p.
  * PKCS#11 engine DLL updated to version 0.4.9.
  * Fixed a crash in the session persistence implementation.
  * Fixed syslog identifier after configuration file reload.
  * Fixed non-interactive "make check" invocations.
  * Fixed reloading syslog configuration.
  * stunnel.pem created with SHA-256 instead of SHA-1.
  * SHA-256 "make check" certificates.
- includes new version 5.48
  * Fixed requesting client certificate when specified as a global option.
  * Certificate subject checks modified to accept certificates if at least one of the specified checks matches.
- includes new version 5.47
  * Fast add_lock_callback for OpenSSL &lt; 1.1.0. This largely improves performance on heavy load.
  * Automatic detection of Homebrew OpenSSL.
  * Clarified port binding error logs.
  * Various "make test" improvements.
  * Fixed a crash on switching to SNI slave sections.
- includes new version 5.46
  * The default cipher list was updated to a safer value: "HIGH:!aNULL:!SSLv2:!DH:!kDHEPSK".
  * Default accept address restored to INADDR_ANY.
- includes new version 5.45
  * Implemented delayed deallocation of service sections after configuration file reload.
  * OpenSSL DLLs updated to version 1.0.2o.
  * Deprecated the sslVersion option.
  * The "socket" option is now also available in service sections.
  * Implemented try-restart in the SysV init script (thx to Peter Pentchev).
  * TLS 1.3 compliant session handling for OpenSSL 1.1.1.
  * Default "failover" value changed from "rr" to "prio".
  * New "make check" tests.
  * A service no longer refuses to start if binding fails for some (but not all) addresses:ports.
  * Fixed compression handling with OpenSSL 1.1.0 and later.
  * _beginthread() replaced with safer _beginthreadex().
  * Fixed exception handling in libwrap.
  * Fixed exec+connect services.
  * Fixed automatic resolver delaying.
  * Fixed a Gentoo cross-compilation bug (thx to Joe Harvell).
  * A number of "make check" framework fixes.
  * Fixed false postive memory leak logs.
  * Build fixes for OpenSSL versions down to 0.9.7.
  * Fixed (again) round-robin failover in the FORK threading model.</changelog>
  <changelog author="obs@botter.cc" date="1541937601">- disabled checks; checks depend on ncat and network accessibility</changelog>
  <changelog author="fbui@suse.com" date="1550836800">- Drop use of $FIRST_ARG in .spec
  The use of $FIRST_ARG was probably required because of the
  %service_* rpm macros were playing tricks with the shell positional
  parameters. This is bad practice and error prones so let's assume
  that no macros should do that anymore and hence it's safe to assume
  that positional parameters remains unchanged after any rpm macro
  call.</changelog>
  <changelog author="vcizek@suse.com" date="1568376000">- update to version 5.55
  New features
    New "ticketKeySecret" and "ticketMacSecret" options to control confidentiality
    and integrity protection of the issued session tickets. These options allow for
    session resumption on other nodes in a cluster.
    Logging of the assigned bind address instead of the requested bind address.
    Check whether "output" is not a relative file name.
    Added sslVersion, sslVersionMin and sslVersionMax for OpenSSL 1.1.0 and later.
    Hexadecimal PSK keys are automatically converted to binary.
    Session ticket support (requires OpenSSL 1.1.1 or later). "connect" address
    persistence is currently unsupported with session tickets.
    SMTP HELO before authentication (thx to Jacopo Giudici).
    New "curves" option to control the list of elliptic curves in OpenSSL 1.1.0 and later.
    New "ciphersuites" option to control the list of permitted TLS 1.3 ciphersuites.
    Include file name and line number in OpenSSL errors.
    Compatibility with the current OpenSSL 3.0.0-dev branch.
    Better performance with SSL_set_read_ahead()/SSL_pending().
  Bugfixes
    A number of testing framework fixes and improvements.
    Service threads are terminated before OpenSSL cleanup to prevent occasional stunnel crashes at shutdown.
    Fixed data transfer stalls introduced in stunnel 5.51.
    Fixed a transfer() loop bug introduced in stunnel 5.51.
    Fixed PSKsecrets as a global option (thx to Teodor Robas).
    Fixed a memory allocation bug (thx to matanfih).
    Fixed PSK session resumption with TLS 1.3.
    Fixed a memory leak in the WIN32 logging subsystem.
    Allow for zero value (ignored) TLS options.
    Partially refactored configuration file parsing and logging subsystems for clearer code and minor bugfixes.
  Caveats
    We removed FIPS support from our standard builds. FIPS will still be available with custom builds.
- drop stunnel-listenqueue-option.patch
  Its original purpose (from bsc#674554) was to allow setting a higher
  backlog value for listen(). As that value was raised to SOMAXCONN
  years ago (in 4.36), we don't need it anymore</changelog>
  <changelog author="vcizek@suse.com" date="1568376001">- Install the correct file as README.openSUSE (bsc#1150730)
  * stunnel.keyring was accidentally installed instead</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
</package>
<package pkgid="d52a0e8a6e3812d5179be982b8b9c2a978c04148e05015863425fa827acdf862" name="stunnel-doc" arch="noarch">
  <version epoch="0" ver="5.55" rel="39.1"/>
  <changelog author="drahn@suse.com" date="1476446400">- update to version 5.36
- Removed direct zlib dependency.</changelog>
  <changelog author="jengelh@inai.de" date="1476619200">- Update rpm group and description and make -doc noarch
- Do not suppress errors from useradd
- Remove redundant %clean section</changelog>
  <changelog author="michael@stroeder.com" date="1481198400">- update to version 5.38</changelog>
  <changelog author="michael@stroeder.com" date="1483358400">- update to version 5.39</changelog>
  <changelog author="michael@stroeder.com" date="1485604800">- update to version 5.40</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Don't require insserv if we don't use it</changelog>
  <changelog author="michael@stroeder.com" date="1491048000">- update to version 5.41</changelog>
  <changelog author="werner@suse.de" date="1491480000">- Require package config for libsystemd to help the configure script
  to detect and enable systemd socket activation (boo#1032557)
- Refresh patch stunnel-listenqueue-option.patch</changelog>
  <changelog author="michael@stroeder.com" date="1500465600">- update to version 5.42</changelog>
  <changelog author="vetter@physik.uni-wuerzburg.de" date="1502971200">- add more verbose change log:
  Version 5.42, 2017.07.16, urgency: HIGH
- New features
  * "redirect" also supports "exec" and not only "connect".
  * PKCS#11 engine DLL updated to version 0.4.7.
- Bugfixes
  * Fixed premature cron thread initialization causing hangs.
  * Fixed "verifyPeer = yes" on OpenSSL &lt;= 1.0.1.
  * Fixed pthreads support on OpenSolaris.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- update to version 5.44
  * Default accept address restored to INADDR_ANY
  * Fix race condition in "make check"
  * Fix removing the pid file after configuration reload
- includes 5.43
  * Allow for multiple "accept" ports per section
  * Self-test framework (make check)
  * Added config load before OpenSSL init
  * OpenSSL 1.1.1-dev compilation fixes
  * Fixed round-robin failover in the FORK threading model
  * Fixed handling SSL_ERROR_ZERO_RETURN in SSL_shutdown()
  * Minor fixes of the logging subsystem
  * OpenSSL DLLs updated to version 1.0.2m
- add new checking to build
- rebase stunnel-listenqueue-option.patch
- Cleanup with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Do not ignore errors from useradd. Ensure nogroup exists
  beforehand.
- Replace old $RPM_ variables. Combine two nested ifs.</changelog>
  <changelog author="vetter@physik.uni-wuerzburg.de" date="1517918400">- Revamp SLE11 builds</changelog>
  <changelog author="obs@botter.cc" date="1541937600">- update to version 5.49
  * Logging of negotiated or resumed TLS session IDs (thx to ANSSI - National Cybersecurity Agency of France).
  * Merged Debian 10-enabled.patch and 11-killproc.patch (thx to Peter Pentchev).
  * OpenSSL DLLs updated to version 1.0.2p.
  * PKCS#11 engine DLL updated to version 0.4.9.
  * Fixed a crash in the session persistence implementation.
  * Fixed syslog identifier after configuration file reload.
  * Fixed non-interactive "make check" invocations.
  * Fixed reloading syslog configuration.
  * stunnel.pem created with SHA-256 instead of SHA-1.
  * SHA-256 "make check" certificates.
- includes new version 5.48
  * Fixed requesting client certificate when specified as a global option.
  * Certificate subject checks modified to accept certificates if at least one of the specified checks matches.
- includes new version 5.47
  * Fast add_lock_callback for OpenSSL &lt; 1.1.0. This largely improves performance on heavy load.
  * Automatic detection of Homebrew OpenSSL.
  * Clarified port binding error logs.
  * Various "make test" improvements.
  * Fixed a crash on switching to SNI slave sections.
- includes new version 5.46
  * The default cipher list was updated to a safer value: "HIGH:!aNULL:!SSLv2:!DH:!kDHEPSK".
  * Default accept address restored to INADDR_ANY.
- includes new version 5.45
  * Implemented delayed deallocation of service sections after configuration file reload.
  * OpenSSL DLLs updated to version 1.0.2o.
  * Deprecated the sslVersion option.
  * The "socket" option is now also available in service sections.
  * Implemented try-restart in the SysV init script (thx to Peter Pentchev).
  * TLS 1.3 compliant session handling for OpenSSL 1.1.1.
  * Default "failover" value changed from "rr" to "prio".
  * New "make check" tests.
  * A service no longer refuses to start if binding fails for some (but not all) addresses:ports.
  * Fixed compression handling with OpenSSL 1.1.0 and later.
  * _beginthread() replaced with safer _beginthreadex().
  * Fixed exception handling in libwrap.
  * Fixed exec+connect services.
  * Fixed automatic resolver delaying.
  * Fixed a Gentoo cross-compilation bug (thx to Joe Harvell).
  * A number of "make check" framework fixes.
  * Fixed false postive memory leak logs.
  * Build fixes for OpenSSL versions down to 0.9.7.
  * Fixed (again) round-robin failover in the FORK threading model.</changelog>
  <changelog author="obs@botter.cc" date="1541937601">- disabled checks; checks depend on ncat and network accessibility</changelog>
  <changelog author="fbui@suse.com" date="1550836800">- Drop use of $FIRST_ARG in .spec
  The use of $FIRST_ARG was probably required because of the
  %service_* rpm macros were playing tricks with the shell positional
  parameters. This is bad practice and error prones so let's assume
  that no macros should do that anymore and hence it's safe to assume
  that positional parameters remains unchanged after any rpm macro
  call.</changelog>
  <changelog author="vcizek@suse.com" date="1568376000">- update to version 5.55
  New features
    New "ticketKeySecret" and "ticketMacSecret" options to control confidentiality
    and integrity protection of the issued session tickets. These options allow for
    session resumption on other nodes in a cluster.
    Logging of the assigned bind address instead of the requested bind address.
    Check whether "output" is not a relative file name.
    Added sslVersion, sslVersionMin and sslVersionMax for OpenSSL 1.1.0 and later.
    Hexadecimal PSK keys are automatically converted to binary.
    Session ticket support (requires OpenSSL 1.1.1 or later). "connect" address
    persistence is currently unsupported with session tickets.
    SMTP HELO before authentication (thx to Jacopo Giudici).
    New "curves" option to control the list of elliptic curves in OpenSSL 1.1.0 and later.
    New "ciphersuites" option to control the list of permitted TLS 1.3 ciphersuites.
    Include file name and line number in OpenSSL errors.
    Compatibility with the current OpenSSL 3.0.0-dev branch.
    Better performance with SSL_set_read_ahead()/SSL_pending().
  Bugfixes
    A number of testing framework fixes and improvements.
    Service threads are terminated before OpenSSL cleanup to prevent occasional stunnel crashes at shutdown.
    Fixed data transfer stalls introduced in stunnel 5.51.
    Fixed a transfer() loop bug introduced in stunnel 5.51.
    Fixed PSKsecrets as a global option (thx to Teodor Robas).
    Fixed a memory allocation bug (thx to matanfih).
    Fixed PSK session resumption with TLS 1.3.
    Fixed a memory leak in the WIN32 logging subsystem.
    Allow for zero value (ignored) TLS options.
    Partially refactored configuration file parsing and logging subsystems for clearer code and minor bugfixes.
  Caveats
    We removed FIPS support from our standard builds. FIPS will still be available with custom builds.
- drop stunnel-listenqueue-option.patch
  Its original purpose (from bsc#674554) was to allow setting a higher
  backlog value for listen(). As that value was raised to SOMAXCONN
  years ago (in 4.36), we don't need it anymore</changelog>
  <changelog author="vcizek@suse.com" date="1568376001">- Install the correct file as README.openSUSE (bsc#1150730)
  * stunnel.keyring was accidentally installed instead</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
</package>
</otherdata>