6265 Commits

Author SHA1 Message Date
sthen
276848c429 ap_scan is not supported in wpa_supplicant on OpenBSD and breaks things if
used but maybe present in some sample configs - disable the option if set
to avoid one possible source of errors
2019-12-28 17:50:11 +00:00
sthen
718517b82d improve wpa_supplicant pkg-readme, enable syslog in default flags 2019-12-28 17:45:52 +00:00
ajacoutot
21188ad9e5 Update to vault-1.3.1. 2019-12-28 09:45:58 +00:00
tb
72127d5e89 Update to HEAD, no change in the packaged JSON files.
ok kn
2019-12-27 18:37:55 +00:00
kmos
ccbfa8aff9 Hook security/py-trustme up to the build 2019-12-27 05:21:15 +00:00
kmos
52a4afc4b2 security/py-trustme
"You wrote a cool network client or server. It encrypts connections
using TLS. Your test suite needs to make TLS connections to itself.

Uh oh. Your test suite probably doesn't have a valid TLS certificate.
Now what?

trustme is a tiny Python package that does one thing: it gives you
a fake certificate authority (CA) that you can use to generate fake
TLS certs to use in your tests. Well, technically they're real
certs, they're just signed by your CA, which nobody trusts. But you
can trust it. Trust me."

Provides a temporary CA for doing TLS tests.

Needed for (at least) the py-aiohttp tests.

Version 0.5.3

OK kn@
2019-12-27 05:20:36 +00:00
cwen
409e7f3cfb nss: powerpc-only fix. Work around the lack of <sys/auxv.h> and
getauxval(), and keep it built with base-gcc. Thanks to jca@ who
improved my diff.

OK jca@, "Fix it whichever way you prefer" landry@ (maintainer)
2019-12-26 22:15:12 +00:00
kmos
fe99b39846 Update security/py-ecdsa 0.13.2 -> 0.14.1
Fixes CVE-2019-14853 and CVE-2019-14859

From Wen Heping

OK benoit@ (maintainer)
2019-12-26 17:28:33 +00:00
bket
c9f85345d1 Update to rhash-1.3.9
Maintenance release. Changelog can be found at
https://github.com/rhash/RHash/blob/v1.3.9/ChangeLog.

While here add debug package.

OK kn@
2019-12-26 04:02:11 +00:00
sthen
f1cf6cb576 update to passwdqc-1.4.0 2019-12-25 20:44:42 +00:00
jasper
f53540d577 remove py-libnacl; unused after py-raet went away
ok aja@
2019-12-24 18:46:41 +00:00
sthen
f812d9149f update to libsrtp-2.3.0 2019-12-24 15:34:21 +00:00
sthen
ea819976d3 update to py-fido2-0.8.1, from Lucas Raab 2019-12-24 14:18:28 +00:00
sthen
113114c55b update to openssl-1.0.2u 2019-12-20 17:11:58 +00:00
tb
959ef604e5 Update wycheproof-testvectors to HEAD as of Dec 14.
No change to existing test vectors. This adds HMAC(3) that will be
picked up by wycheproof.go. All these tests currently pass.

ok sthen
2019-12-16 17:15:49 +00:00
jasper
05c5e605ac update to suricata-5.0.1
ok gonzalo@ (MAINTAINER)
2019-12-16 15:33:27 +00:00
jasper
b2507313fb update to boofuzz-0.1.6 2019-12-12 16:16:51 +00:00
sebastia
ad556adfc1 Update to 2019-12-12 2019-12-12 08:04:54 +00:00
sthen
d0ce11bc87 remove php71 builds of pecl modules, and pecl-libsodium which is rolled
into php core as of 7.2
2019-12-11 15:59:26 +00:00
sthen
7be9278dfc update to passwdqc-1.3.2 2019-12-11 15:02:48 +00:00
kmos
c00afab16c Move tests to MODPY_PYTEST 2019-12-11 03:48:00 +00:00
ajacoutot
9cffb1ee14 DISTDIR -> FULLDISTDIR to get the proper distfile. 2019-12-10 16:35:54 +00:00
landry
aba44ded0e Update to NSS 3.48.
Cf https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
2019-12-09 09:43:36 +00:00
ajacoutot
fc0e79ed5b Update to gnutls-3.6.11.1. 2019-12-09 07:56:20 +00:00
gonzalo
313b7600d1 Update for SQLMap to 1.3.12
OK rsadowski@
2019-12-09 07:39:20 +00:00
jasper
80853e0aa4 update to py-cryptodome-3.9.4 2019-12-08 20:25:02 +00:00
ajacoutot
d488fde921 Update bindata_assetfs.go to version 1.3.0.
Use DIST_SUBDIR because that's an unversioned distfile; prodded by naddy@
2019-12-08 09:47:40 +00:00
sthen
df169311c5 fix packaging on arm, NEON was disabled but the PFRAG was still used.
leave the PFRAG and just comment-out the conditional making it easier to
reinstate if this is fixed (upstream bug is still active).
2019-12-06 14:29:40 +00:00
rsadowski
61db6fe656 Update qca to 2.2.1
- Only new exports added so bump minor.
- Cleanup WANTLIB
- Fix MASTER_SITE URL
- Cleanup plugin configuration

LibreSSL patches from Gentoo developer Stefan Strogin from here:
3e69b18db7
2019-12-06 07:10:41 +00:00
kmos
7b0cad171d Fix and enable tests with MODPY_PYTEST.
Needed to add security/py-josepy to TEST_DEPENDS and move py-funcsigs
behind a .if since it is python2 only (and only needed for python2)
2019-12-05 22:19:28 +00:00
sthen
e4ed723874 update to certbot/py-acme 1.0.0 2019-12-05 17:16:28 +00:00
sthen
cd8873dda9 fix openssl 1.1 pc files, from kristaps 2019-12-05 16:24:07 +00:00
sthen
4c39430a5d Use a link rather than compile test to for __builtin_bswap64 in libnettle;
fixes little-endian base-gcc (mips64el). From George Koehler, tested by
manphiz@gmail.com, ok aja@.
2019-12-04 10:36:34 +00:00
kn
e488a8e1d9 Update to hitch 1.5.2
hitch-1.5.2 (2019-11-27)
- Fix a problem introduced in the previous release that prevented us from
  running as a non-privileged user (Issue: 322).
hitch-1.5.1 (2019-11-26)
- Support for TCP Fast Open. Is is disabled by default (Issue: 185)
- Various code cleanups and minor bug fixes.

Upstream reworked their privdrop code and I have neither time nor further
interest in maintaining pledge patches, so drop support for it.
2019-11-28 20:00:44 +00:00
rsadowski
727e48c455 Update qca-qt5 to 2.2.1
- Only new exports added so bump minor.
- Cleanup WANTLIB
- Fix MASTER_SITE URL
- Cleanup plugin configuration

LibreSSL patches from Gentoo developer Stefan Strogin from here:
3e69b18db7

Tested by landry@ with qgis
2019-11-28 17:44:07 +00:00
tb
855ae2be6a Update to HEAD. Refines and extends existing tests and contains many new
things. Most notably it allows testing RSA_padding_check_PKCS1_OAEP_mgf1()
and dlg's XChaCha20-Poly1305 implementation.

ok fcambus (earlier diff) jsing
2019-11-28 17:02:13 +00:00
jasper
d208e72984 fix hardcoded 'sphinx-build' which is for python2-only.
broken since the switch to python3

noticed by sthen@
2019-11-26 10:44:33 +00:00
cwen
3240842ef8 libtasn1: requires `-std=gnu99' to be built with base-gcc.
OK aja@ (maintainer)
2019-11-24 10:25:52 +00:00
bket
6d63db6554 Update to rhash-1.3.9.
Fixes some bugs and adds support for a new hash function. Changelog can
be found at https://github.com/rhash/RHash/blob/v1.3.8/ChangeLog.

Additional changes:
- Change HOMEPAGE; the old one gave a 404
- Take MAINTAINER

OK sthen@
2019-11-24 04:43:26 +00:00
kmos
32faa9c4d8 Fix tests by moving to MODPY_PYTEST and having pre-test remove
.pyc files mistakenly included in the PyPI tarball.

Filed issue upstream with pull request to fix the .pyc problem
in future:
https://github.com/saltstack/libnacl/issues/112
2019-11-23 21:08:26 +00:00
sthen
0270cc6c5b Add a dependency on py-scrypt to py-passlib. passlib has code to
use three scrypt backends; one in hashlib in python itself, one is
py-scrypt, and one is an internal slow pure-python implementation.

hashlib in our Python packages doesn't include scrypt (this requires
OpenSSL 1.1+'s scrypt code and isn't supported in libressl), and slow
pure-python implementation is slow, so provide the best available one.
2019-11-23 15:23:14 +00:00
sthen
712b020a86 +py-scrypt 2019-11-23 15:10:23 +00:00
sthen
1fcd1bab33 import ports/security/py-scrypt, ok bket@
This is a set of Python bindings for the scrypt key derivation function.

Scrypt is useful when encrypting passwords as it is possible to specify a
*minimum* amount of time to use when encrypting and decrypting. If, for
example, a password takes 0.05 seconds to verify, a user won't notice
the slight delay when signing in, but doing a brute force search of
several billion passwords will take a considerable amount of time. This
is in contrast to more traditional hash functions such as MD5 or the SHA
family which can be implemented extremely fast on cheap hardware.
2019-11-23 15:10:06 +00:00
sthen
49f22decef update to py-passlib 1.7.2 2019-11-23 14:53:06 +00:00
ajacoutot
c27c585f87 Update to libtasn1-4.15.0. 2019-11-23 12:13:33 +00:00
sthen
04e8d1d982 +yubikey-manager 2019-11-21 23:38:36 +00:00
sthen
e28edd4837 import security/yubico/yubikey-manager, ok kn@
The YubiKey Manager can configure FIDO2, OTP and PIV functionality on
a YubiKey. It works with any currently supported YubiKey. You can also
use the tool to check the type and firmware of a YubiKey. In addition,
you can use the extended settings to specify other features, such as to
configure 3-second long touch.
2019-11-21 23:38:08 +00:00
landry
9fcada5e4a Security update to nss 3.47.1
(no details yet, dont ask)
2019-11-21 18:26:07 +00:00
sthen
598ff65966 update to clamav-0.102.1, lower daemon_timeout 2019-11-20 19:00:24 +00:00
kn
e3dd9f525a + py-fido2 2019-11-19 18:54:59 +00:00