From Bjorn Ketelaars, ok benoit@
Easy-RSA is a small RSA key management package, based on the openssl
command line tool, that can be found in the easy-rsa subdirectory
of the OpenVPN distribution. While this tool is primarily concerned
with key management for the SSL VPN application space, it can also
be used for building web certificates.
to QOAuth.
kQOAuth is a library written in C++ for Qt that implements the OAuth
1.0 authentication specification RFC 5849 and is based on QOAuth
library. However, QOAuth's approach is improved in some ways.
kQOAuth main features:
* Easy integrated solution for retrieving user authentication and
access token.
* No external dependency to QCA.
* Convenient signals that can be used for easy OAuth authorization
process handling.
* Access to request objects that will wrap request signing and
network access, but still gives possibility for detailed control
of the authentication process for easier integration to existing
application logic.
okay landry@
py-bcrypt is a Python wrapper of OpenBSD's Blowfish password hashing code,
as described in "A Future-Adaptable Password Scheme" by Niels Provos and
David Mazières.
This system hashes passwords using a version of Bruce Schneier's
Blowfish block cipher with modifications designed to raise the cost of
off-line password cracking and frustrate fast hardware implementation.
The computation cost of the algorithm is parametised, so it can be
increased as computers get faster. The intent is to make a compromise
of a password database less likely to result in an attacker gaining
knowledge of the plaintext passwords (e.g. using John the Ripper).
M2Crypto is the most complete Python wrapper for OpenSSL featuring
RSA, DSA, DH, HMACs, message digests, symmetric ciphers (including
AES); SSL functionality to implement clients and servers; HTTPS
extensions to Python's httplib, urllib, and xmlrpclib; unforgeable
HMAC'ing AuthCookies for web session management; FTP/TLS client and
server; S/MIME; ZServerSSL: A HTTPS server for Zope and ZSmime: An
S/MIME messenger for Zope. M2Crypto can also be used to provide SSL
for Twisted.
with help and ok
sthen@ benoit@
for consistency with the gem/extconf ports.
Update non-gem/extconf ports that relied on the previous
default of ruby 1.8 to explicitly specify it.
OK ajacoutot@
Remove a useless patch, unix_rand.c uses /dev/urandom on OpenBSD since
bug #174993 was fixed more that 5 years ago in nss 3.5.
Enforce dependency on sqlite 3.7.15.2.
Went in a handful of bulk builds.
"addresses several reported potential security bugs." (full details not
available yet, but there are some added checks for pointer out of bounds
in WWPack decompression).
NetPGP is a standards-compliant library and suite of utilities
providing digital signature and verification functionality, as well
as data encryption and decryption, using RSA and DSA/Elgamal keys.
Several double frees found by bentley@, already committed upstream.
ok benoit@
erl-bcrypt is a wrapper around the OpenBSD Blowfish password hashing
algorithm, as described in "A Future-Adaptable Password Scheme" by Niels
Provos and David Mazieres.
ok aja@
The goal of cvechecker is to report about possible vulnerabilities on
your system, by scanning the installed software and matching the results
with the CVE database.
<...>
ok jasper@