7332 Commits

Author SHA1 Message Date
ajacoutot
e8d6ee5ca9 Add comment about GUsb. 2022-02-13 12:03:25 +00:00
sebastia
03f88c1a64 simple update 5.1.1 -> 5.1.2
take MAINTAINER

OK jasper@ (previous MAINTAINER)
2022-02-12 20:47:28 +00:00
ajacoutot
c3fd19c360 Drop default CONFIGURE_ARGS. 2022-02-12 11:08:57 +00:00
sthen
587af6f03a remove pointless ports-clang from COMPILER 2022-02-10 21:01:52 +00:00
tb
c7bc64482c Update py3-tlsfuzzer to 20220209 2022-02-10 12:17:52 +00:00
sthen
807abcdd78 update to py3-openssl-22.0.0 2022-02-10 09:25:25 +00:00
sthen
be8bccce26 update to gpgme-1.17.0 2022-02-09 13:22:05 +00:00
sthen
c0f5579911 update to py3-cryptography-36.0.1 2022-02-09 12:31:04 +00:00
sthen
33643300d8 yubikey-manager: patch use of deprecated cryptography.utils.int_from_bytes 2022-02-08 21:51:08 +00:00
landry
f8bf8bd08e security/nss: update to 3.75, will be required by gecko 98
see https://hg.mozilla.org/projects/nss/file/tip/doc/rst/releases/nss_3_75.rst
and https://firefox-source-docs.mozilla.org/security/nss/releases/index.html
2022-02-07 12:51:29 +00:00
tb
9fe770620e openssl-ruby-tests: remove workaround for AEAD- TLSv1.3 ciphersuites 2022-02-05 18:37:14 +00:00
pvk
ec7a1830f3 Update vault 1.9.2 -> 1.9.3
Changelog: https://github.com/hashicorp/vault/blob/main/CHANGELOG.md#193
2022-02-03 15:54:20 +00:00
bluhm
b46e60e4ef update botan2 to 2.19.1
removed patch has been commited upstream
2022-02-02 18:21:43 +00:00
sebastia
a5b493dc5b update to 2022-01-29 2022-02-02 12:52:38 +00:00
tb
612036645c Update openssl-ruby-tests to 20220201
Add a workaround for a difference of the default names for TLSv1.3
ciphersuites between LibreSSL and OpenSSL that will hopefully not
be needed for long.
2022-02-01 18:54:28 +00:00
sthen
4b32a5bc6f add portroach marker 2022-02-01 18:32:10 +00:00
daniel
45b9190ff2 switch from python2 to python3
The ChangeLog for version 2.16.11 says:

     When building the test suites with GNU make, invoke python3 or python, not
     python2. The build still works with either Python 2.7 or 3.5+, but we
     recommend using a version of Python that is supported upstream.
2022-01-30 21:28:55 +00:00
gonzalo
85829400ad Update for Lynis to 3.0.7
OK sebastia@
2022-01-28 09:26:19 +00:00
ajacoutot
f1192e5d8e Update to libgpg-error-1.44. 2022-01-28 08:30:51 +00:00
semarie
3a15ebd3b4 security/py-scrypt: add missing WANTLIB
add crypto and pthread in WANTLIB
2022-01-22 08:09:12 +00:00
bluhm
f3098edb4c Change the local patch for RSA_generate_key() to the code that has
been commited upstream.
OK tb@
2022-01-20 19:27:09 +00:00
abieber
8dd9c43eae + gosec 2022-01-20 17:15:48 +00:00
abieber
c8914f2c6f Import gosec 2.9.6: a tool to inspect go source code for security problems.
OK op@
2022-01-20 17:15:08 +00:00
tb
7b8bed45bf openssl-ruby-tests: drop TS patch. It's a leftover of a patch that
was obsoleted by an upstream fix. It breaks regress on powerpc and
presumably all other BE arches with 32-bit long.
2022-01-20 00:42:44 +00:00
bluhm
704ee3cfc6 Document which p5-Net-SSLeay patches have been brought upstream.
Remove useless #ifdef LibreSSL around OCSP_single_get0_status().
Fix typo in OpenSSL version number 0x10100000L to 0x10100003L.
OK tb@
2022-01-19 16:17:43 +00:00
abieber
2032874c53 Update ogvt to 1.2.0.
This update switches to a maintained pgp lib.
2022-01-19 12:49:20 +00:00
ajacoutot
7faab3f459 SECURITY update to gnutls-3.7.3. 2022-01-19 12:23:35 +00:00
kirby
4e77296295 update to qtkeychain-0.13.2 2022-01-19 07:39:01 +00:00
ajacoutot
4de21385fc Update to p11-kit-0.24.1. 2022-01-18 10:58:10 +00:00
gonzalo
aeecfaa73e Update for Sn0nit to 0.24.1
OK bcallah@
2022-01-18 09:06:52 +00:00
kmos
ac75d35bdb The pinentry -gnome multipackage fails wanting C++11 on sparc64
C++ should be using ports-gcc anyway. Update it to do so to fix
build on sparc64
2022-01-17 21:31:17 +00:00
tb
3183c91487 security/tcltls: mark broken. This port wasn't updated in 11 years and
hasn't seen a lot of maintenance. An update to 1.7.22 should be easy but
someone has to look into the numerous test failures. Apparently, some of
the dependent ports won't work with newer tcltls.

ok phessler
2022-01-17 08:31:33 +00:00
tb
5b35fa9a6f security/pivy: mark broken. This port includes OpenSSH source from before
the conversion to OpenSSL 1.1 API (Sep 2018). The most recent libcrypto
bump broke its build. Independently of that: that source needs updating
by upstream.

ok phessler
2022-01-17 08:23:08 +00:00
kmos
1a0cfd8f52 Fix build on sparc64 by switching to base-clang ports-gcc 2022-01-16 20:17:54 +00:00
kmos
475038a82e aircrack-ng uses C99. Fix build on sparc64 with the usual c99 fix 2022-01-16 09:24:09 +00:00
kmos
e2a79c221b C++ needs ports-gcc not base-gcc 2022-01-15 21:46:51 +00:00
kn
73a63805e4 link to upstream pull request 2022-01-15 21:40:52 +00:00
tb
bef5b13a94 p5-Net-SSLeay: reinstate the build fixes that were lost in the update.
ok aja
2022-01-15 12:03:04 +00:00
bluhm
e5aad1ab02 update p5-Net-SSLeay to 1.92 2022-01-14 19:58:46 +00:00
tb
25007e7697 py-cryptography: fix build with opaque structs in LibreSSL 3.5 and
adjust tests that test for absence of features we now provide.
2022-01-14 10:59:10 +00:00
tb
28c1275b8a openssl-ruby-tests: use PEM_write_bio_PrivateKey_traditional instead
of reaching into an EVP_PKEY.
2022-01-14 10:57:39 +00:00
tb
1f887f6c0d security/ikeman: fix build with opaque structs in LibreSSL 3.5.
We should probably consider removing this port.

no response from maintainer
2022-01-14 10:56:10 +00:00
sthen
9fa009b143 update to py3-josepy-1.12.0 2022-01-13 17:57:18 +00:00
sthen
6c51e87ae2 update to clamav-0.104.2 2022-01-13 17:47:59 +00:00
bluhm
a58d6439ad On OpenBSD i386 Botan dies with illegal instruction when using AVX2
extensions.  Our kernel does not set the OSXSAVE flag, so Botan
must not use them.  Cherry-pick fix from upstream.
2022-01-13 17:16:58 +00:00
ajacoutot
c9436280b6 Add a no_qt5 PSEUDO_FLAVOR (suggested by sthen@).
Add support for caps-lock warning in the -qt5 subpackage while here.
2022-01-13 14:43:49 +00:00
ajacoutot
48f41bb4c7 Update to pinentry-1.2.0.
Drop -gtk2 subpackage and add a -qt5 one.

ok sthen@ pea@ (maintainer)
2022-01-13 14:12:37 +00:00
tb
3269717130 Update ssh-ldap-helper to 8.0p1
This is the latest version of this tool, based on what Rocky Linux ships.
Red Hat have deprecated this, but their proposed alternative, SSSD is not
currently viable.

The update is ncessary since the previous version (which wasn't updated
since import in 2012) is based on an ancient SSH version that isn't ready
for opaque libcrypto structs.

Untested, but this has a better chance at working than a package that
doesn't build.

ok landry
2022-01-13 09:49:55 +00:00
sebastia
53d2df46ac update 0.0.2 -> 0.0.3 2022-01-12 10:17:13 +00:00
bluhm
09b56d3ebc As LibreSSL defines TLS1_3_VERSION now, IO::Socket::SSL can disable
protocol version TLSv1_3 if needed.  The hack in the test to set
version TLSv1_2 explicitly is no longer necessary.
2022-01-11 13:19:58 +00:00