Commit Graph

3223 Commits

Author SHA1 Message Date
benoit
cf9538d7b9 - update py-paramiko to 1.10.1
- regen PLIST
2013-04-06 06:40:01 +00:00
sthen
e48f90b3b1 update to p5-Authen-Radius-0.22, from giovanni@, with a tweak from me
to avoid a hanging test. (still marked as interactive, as it requires a
local radius server to test), ok giovanni@
2013-04-04 17:05:16 +00:00
gsoares
d4674b9ecc update to 4.56; OK benoit@ 2013-04-02 12:34:31 +00:00
sthen
825d4c9e57 +easy-rsa 2013-04-02 11:41:02 +00:00
sthen
cac4849e00 Import security/easy-rsa, which is split off from OpenVPN in 2.3+.
From Bjorn Ketelaars, ok benoit@

Easy-RSA is a small RSA key management package, based on the openssl
command line tool, that can be found in the easy-rsa subdirectory
of the OpenVPN distribution. While this tool is primarily concerned
with key management for the SSL VPN application space, it can also
be used for building web certificates.
2013-04-02 11:40:36 +00:00
zhuk
43a3364c91 Hook up qoauth and kqoauth. 2013-04-01 11:56:58 +00:00
zhuk
ff2bcd660e Import kQOAuth, optional KIPI plugins dependency that's too similar
to QOAuth.

kQOAuth is a library written in C++ for Qt that implements the OAuth
1.0 authentication specification RFC 5849 and is based on QOAuth
library.  However, QOAuth's approach is improved in some ways.

kQOAuth main features:
  * Easy integrated solution for retrieving user authentication and
    access token.
  * No external dependency to QCA.
  * Convenient signals that can be used for easy OAuth authorization
    process handling.
  * Access to request objects that will wrap request signing and
    network access, but still gives possibility for detailed control
    of the authentication process for easier integration to existing
    application logic.

okay landry@
2013-04-01 11:55:32 +00:00
zhuk
5c9fabaf1e Import QOAuth, KDE 4 prerequisite.
QOAuth is an attempt to support interaction with OAuth-powered network
services in a Qt way, i.e. simply, clearly and efficiently.

okay landry@
2013-04-01 11:53:55 +00:00
fgsch
89714f3705 Update mirrors list and move ftp.gnupg.org at the bottom 2013-03-31 19:12:37 +00:00
sthen
c031b98635 update MASTER_SITES and remove the following lists from the sample config,
they are defunct: INetMsg-SpamDomains-2m.ndb INetMsg-SpamDomains-2w.ndb
2013-03-29 09:31:00 +00:00
sthen
f116256575 despam console output (deprecation warnings etc with modern Perl) 2013-03-27 11:44:24 +00:00
sthen
be91d058db +tinyca 2013-03-27 11:23:11 +00:00
sthen
3d4d40074f reinstate tinyca; this works again now that Perl is linked -lpthread
(note that xca has more, and more modern, options - but tinyca can be a
bit easier to get working)

ok jasper@
2013-03-27 11:16:32 +00:00
nigel
ac30ff0b05 Mozilla::CA provides a copy of Mozilla's bundle of Certificate
Authority certificates in a form that can be consumed by modules
and libraries based on OpenSSL.

Ok sthen, landry
2013-03-26 23:44:38 +00:00
sthen
3fba1507d4 +py-bcrypt 2013-03-26 21:37:44 +00:00
sthen
e2954dfa4a import ports/security/py-bcrypt, ok benoit@
py-bcrypt is a Python wrapper of OpenBSD's Blowfish password hashing code,
as described in "A Future-Adaptable Password Scheme" by Niels Provos and
David Mazières.

This system hashes passwords using a version of Bruce Schneier's
Blowfish block cipher with modifications designed to raise the cost of
off-line password cracking and frustrate fast hardware implementation.
The computation cost of the algorithm is parametised, so it can be
increased as computers get faster. The intent is to make a compromise
of a password database less likely to result in an attacker gaining
knowledge of the plaintext passwords (e.g. using John the Ripper).
2013-03-26 21:37:26 +00:00
benoit
e1e78d742e - update p5-Crypt-CBC to 2.32
- remove USE_GROFF
2013-03-25 17:58:46 +00:00
ajacoutot
8fbcd28002 Update to libassuan-2.1.0. 2013-03-23 13:44:44 +00:00
ajacoutot
d8f4036a00 Update to libgpg-error-1.11. 2013-03-23 13:38:06 +00:00
ajacoutot
822c55fa60 Update to libgcrypt-1.5.1. 2013-03-23 13:33:58 +00:00
ajacoutot
7ced100b6a Update to gnutls-3.1.10. 2013-03-23 13:25:04 +00:00
benoit
df18e85cc7 - update p5-Digest-MD4 to 1.9 2013-03-23 07:10:06 +00:00
rpe
992a77b691 add py-M2Crypto 2013-03-22 20:53:30 +00:00
rpe
83d0be72e8 import security/py-M2Crypto 0.21.1
M2Crypto is the most complete Python wrapper for OpenSSL featuring
RSA, DSA, DH, HMACs, message digests, symmetric ciphers (including
AES); SSL functionality to implement clients and servers; HTTPS
extensions to Python's httplib, urllib, and xmlrpclib; unforgeable
HMAC'ing AuthCookies for web session management; FTP/TLS client and
server; S/MIME; ZServerSSL: A HTTPS server for Zope and ZSmime: An
S/MIME messenger for Zope. M2Crypto can also be used to provide SSL
for Twisted.

with help and ok
sthen@ benoit@
2013-03-22 20:51:43 +00:00
sthen
49ed2a97f0 chmod clusterssh's MYMETA.json to be writable, needed for newer perl 2013-03-21 19:07:56 +00:00
landry
6865587314 Security update to nss 3.14.3.
Fixes CVE-2013-1620 / bug #822365 (Lucky Thirteen attack)
Required by firefox 20 & later anyway.. and tested to work fine with 20.0b6.
2013-03-21 12:49:42 +00:00
jasper
9775d07bcd - update to kc-2.3.0
from LEVAI Daniel (MAINTAINER)
2013-03-21 09:48:45 +00:00
ajacoutot
58f1a6f9f6 USE_LIBTOOL=Yes is the default now. 2013-03-21 08:45:11 +00:00
jeremy
ac78ad4e83 Make ruby 1.9 the default ruby for non-gem/extconf ports,
for consistency with the gem/extconf ports.

Update non-gem/extconf ports that relied on the previous
default of ruby 1.8 to explicitly specify it.

OK ajacoutot@
2013-03-20 19:13:50 +00:00
ajacoutot
d5c9376484 Fix a segfault when parsing certificates. 2013-03-19 16:07:49 +00:00
landry
505f877d4b Update to nss 3.14.2.
Remove a useless patch, unix_rand.c uses /dev/urandom on OpenBSD since
bug #174993 was fixed more that 5 years ago in nss 3.5.
Enforce dependency on sqlite 3.7.15.2.
Went in a handful of bulk builds.
2013-03-18 20:38:13 +00:00
jturner
faec099762 Add support for mips64el and update to 1.10.5 while here.
ok brad@ bcallah@
2013-03-17 14:34:26 +00:00
benoit
66ba3c9829 - update p5-Digest-MD4 to 1.8 2013-03-17 05:17:01 +00:00
sthen
a79d743a9d SECURITY update to ClamAV 0.97.7
"addresses several reported potential security bugs." (full details not
available yet, but there are some added checks for pointer out of bounds
in WWPack decompression).
2013-03-15 15:10:06 +00:00
ajacoutot
3dfa4ad2cf Update to p11-kit-0.16.4. 2013-03-14 20:08:14 +00:00
sthen
7b10e7c633 PERMIT_* 2013-03-11 12:27:53 +00:00
espie
eae66e4a7b PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00
jasper
70c1dbc3b1 - remove now unneeded CONFIGURE_STYLE 2013-03-10 19:35:26 +00:00
jasper
e891362f69 switch to the erlang module, so more stuff may be factored into the module, but
it's a good start.
2013-03-10 19:20:06 +00:00
benoit
3ba1c43919 - update ophcrack to 3.4.1
- update WANTLIB, MODULES and PERMIT_*
2013-03-10 12:45:09 +00:00
pascal
f8357f3f6a +netpgp 2013-03-09 16:03:02 +00:00
pascal
12d65e5780 Import NetPGP.
NetPGP is a standards-compliant library and suite of utilities
providing digital signature and verification functionality, as well
as data encryption and decryption, using RSA and DSA/Elgamal keys.

Several double frees found by bentley@, already committed upstream.

ok benoit@
2013-03-09 16:02:24 +00:00
jasper
d086e4408d sync 2013-03-08 12:07:42 +00:00
jasper
0e106170a5 import erl-oauth
Erlang OAuth implementation.

ok aja@
2013-03-08 12:07:09 +00:00
jasper
ba846b1e3a import erl-bcrypt
erl-bcrypt is a wrapper around the OpenBSD Blowfish password hashing
algorithm, as described in "A Future-Adaptable Password Scheme" by Niels
Provos and David Mazieres.

ok aja@
2013-03-08 12:06:44 +00:00
ajacoutot
38f95d2367 Move ocaml-cryptokit where it belongs. 2013-03-08 09:57:33 +00:00
ajacoutot
5211924705 +cvechecker 2013-03-08 09:55:59 +00:00
ajacoutot
639694f0e0 Import cvechecker-3.2.
The goal of cvechecker is to report about possible vulnerabilities on
your system, by scanning the installed software and matching the results
with the CVE database.
<...>

ok jasper@
2013-03-08 09:54:49 +00:00
gsoares
665d95b509 Security UPDATE to 4.55; Fix CVE-2013-1762
full changelog at:
https://www.stunnel.org/sdf_ChangeLog.html

OK sthen@
2013-03-05 14:10:40 +00:00
ajacoutot
e693f2833d Update to p11-kit-0.16.0. 2013-03-05 09:53:20 +00:00