7619 Commits

Author SHA1 Message Date
kmos
93be9b639b Add py-in-toto and py-securesystemslib to the build 2022-08-23 20:36:13 +00:00
kmos
c6e8ebe704 in-toto provides a framework to protect the integrity of the software
supply chain. It does so by verifying that each task in the chain
is carried out as planned, by authorized personnel only, and that
the product is not tampered with in transit.

from George Rosamond

ok sthen
2022-08-23 20:34:36 +00:00
kmos
68afa1f2d9 A library that provides cryptographic and general-purpose functions
for Secure Systems Lab projects at New York University. The routines
are general enough to be usable by other projects.

From George Rosamond

ok sthen
2022-08-23 20:33:51 +00:00
sthen
58d8989a28 move py-argon2-cffi to MODPY_PEP517 and add some notes about updates 2022-08-22 14:49:54 +00:00
jasper
0ccc3028bc update to ROPgadget-6.8 2022-08-21 18:40:33 +00:00
landry
55cb0a61ca security/nss: update to 3.82.
see https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_82.html
2022-08-19 10:22:06 +00:00
sthen
47ff250980 make sure setuptools is present at build time 2022-08-19 09:12:34 +00:00
sebastia
7ecb949260 update to 2022-08-10 2022-08-18 15:15:09 +00:00
sthen
9238122526 py-ecdsa doesn't need a py2 flavour any more, it was used as TEST_DEPENDS
for py2-dnspy, but we dropped py2 tests with the pytest update
ok benoit@
2022-08-18 14:18:04 +00:00
sthen
eed574102a Fix ports for newer py3-setuptools; mostly just PLIST regens after some
files were dropped (mostly entry_points.txt) or .egg-info files changed
to directories. Small patches were needed where some other build systems
were calling Python tools to install due to changes in setuptools.
Messy patching needed for games/0ad which bundles a spidermonkey tar of
a specific version and patches it using files in its own distribution.

Been through a bulk on i386, plus I tested a few things separately on
amd64 where fallout from the recent qscintilla update has broken some ports
on !LP64 which was blocking them on i386.
2022-08-18 02:24:48 +00:00
jca
ba62589b85 Disable hidden deps, sync WANTLIB and zap the bundled libressl copy.
gawk hidden dep spotted in phessler's aarch64 bulk build, json-c noticed
after Makefile scrutiny.

Zap the LibreSSL copy so that we know it starts being built instead
using the system libs.

ok tb@ jmatthew@ (maintainer)
2022-08-16 00:58:44 +00:00
sthen
494c4d8d3b regen plist to unbreak 2022-08-15 20:13:01 +00:00
sthen
be731be323 update to py3-secretstorage-3.3.3 2022-08-15 11:20:10 +00:00
sthen
64596a8f47 missed bump, found by naddy 2022-08-10 21:49:01 +00:00
sthen
a00cf03ee0 split py2-parsing off from py-parsing, update to py3-parsing-3.0.9,
and fix up deps
2022-08-10 13:54:41 +00:00
kmos
e0a7d826f6 Do the usual C99 invocation for base-gcc
Fixes the build on sparc64
2022-08-10 06:12:51 +00:00
kn
e6e44ef3a9 Update about pending/merged PRs 2022-08-09 11:19:46 +00:00
jasper
511833e703 update to py-cryptodome-3.15.0 2022-08-05 18:23:07 +00:00
kn
fafa88ca84 Make sure OpenSC gets actually installed as dependency
Both ports dlopen(3) opensc-pkcs11.so, but since this unversioned library
is not registered in WANTLIB, LIB_DEPENDS += security/opensc won't be
turned into a RNU_DEPENDS and thus remains a mere BUILD_DEPENDS.

Turn LIB_ into BUILD_ + RUN_DEPENDS to match reality.
Noticed on a fresh install.
2022-08-01 00:06:57 +00:00
ajacoutot
7c513f3986 Bump openfiles to 384.
Default configuration requires at least 267 FD; that will leave us some margin.
While here, remove the _clamav user from the daemon class.

ok sthen (maintainer)
2022-07-31 08:12:57 +00:00
tb
3aeae59ed8 Update to tlsfuzzer 20220729 2022-07-29 17:19:51 +00:00
tb
0e82e2b37b Update to openssl-ruby-tests 20220728 2022-07-29 08:22:11 +00:00
ajacoutot
5459442f1b SECURITY update to gnutls-3.7.7.
CVE-2022-2509
2022-07-29 08:20:42 +00:00
abieber
60af17403c + sops 2022-07-28 22:24:31 +00:00
abieber
b1c34225b1 Import security/sops at 3.7.2
sops is a tool for managing secrets

Description:
sops is an editor of encrypted files that supports YAML, JSON, ENV, INI and
BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, age, and
PGP.

OK sdk@
2022-07-28 22:07:18 +00:00
ajacoutot
4ff1bb94e5 Update to libnettle-3.8.1. 2022-07-28 05:48:39 +00:00
sthen
b4797dc16d update to clamav-0.105.1 2022-07-27 20:42:59 +00:00
kn
612d602049 Update patch comment, two PRs have been merged
Upstream now builds without any local LibreSSL patches.
2022-07-26 15:15:12 +00:00
kn
14da97ac89 Update i386 patch (fixed bogus message) 2022-07-26 15:09:22 +00:00
tb
e34a538e2c Update to openssl-ruby-tests 20220725 2022-07-26 14:39:22 +00:00
landry
11c8b991e5 security/nss: update to 3.81.
see https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_81.html
remove patch from naddy@ that was merged upstream in #1762831.
2022-07-25 13:42:28 +00:00
kn
bb495b0cc2 Refetch tweaked LibreSSL patch
Actual bits from tb
2022-07-24 19:59:33 +00:00
benoit
73727fe7c0 Update to py-ecdsa-0.18.0. 2022-07-24 09:07:03 +00:00
kmos
fa1d94ee22 Swap HOMEPAGE and MASTER_SITES to https 2022-07-22 06:48:06 +00:00
kn
d9fb3c8247 Update to qdigidoc4 4.2.12
Trade local patches for rebased upstream PRs.
Stick to Qt5 for now (Qt6 is new default).
2022-07-22 05:32:54 +00:00
kn
b7e9b666b8 Update to libdigidocpp 3.14.10
Trade all local patches for their rebases PRs.
Old/current qdigidoc4 keeps working against new libdigidocpp.
2022-07-21 14:34:44 +00:00
kn
c56da5c31c Link to upstream PR for identical minizip fix 2022-07-21 14:11:16 +00:00
kn
b676f04a8d Remove DWORD cast to fix i386 build 2022-07-20 11:18:43 +00:00
ajacoutot
6104e62c34 Unbreak: missing BDEP on devel/py-six${MODPY_FLAVOR}. 2022-07-20 06:21:48 +00:00
kmos
9f982fe36d Hook py-duo_client up to the build 2022-07-18 18:55:07 +00:00
kmos
6f2960440d Python library for interacting with the Duo Auth, Admin, and Accounts
APIs.

From George Rosamund

ok sthen@

Tweaks from me
2022-07-18 18:54:33 +00:00
kn
1facf32fd0 Link to upstream PR fixing minizip's version
This also fixed libdigidocpp's test suite (forgot to mention in previous).
2022-07-16 10:09:20 +00:00
kn
c5a1f8364c Fix segfault in verify code path
libdigidocpp expects the original zlib minizip, but we built with the
incompatible minizip-ng.

Require <2.0.0 with cmake and thus force the bundled version.
This is the same as already done (and upstreamed) in net/tdesktop.
2022-07-13 19:11:50 +00:00
kn
b7e8d3795b Use single DIST_SUBDIR instead of prefixing every DISTFILE
Second and working version.
Also use FULLDISTDIR instead of DISTDIR plus DIST_SUBDIR.

This time with DIST_SUBDIR=qdigidoc4 instead of DIST_SUBDIR=${PKGSTEM}
which seems nice but (obviously) expands to the empty string if you
set it before the include line, thus FULLDISTDIR is botched and extract.

Bump REVISION again.
2022-07-13 17:52:58 +00:00
kn
5bd9e0a134 Revert previous, I'm missing something with DIST_SUBDIR
Still increment REVISION instead of going backwards.
2022-07-13 16:54:06 +00:00
kn
1cda2395f4 Use single DIST_SUBDIR instead of prefixing every DISTFILE
Bump REVISISON as CONFIG_URL ends up in the program's help text.
2022-07-13 16:19:41 +00:00
kmos
3a2cb10a44 The new version of yara/python won't build with base-gcc.
Shift to ports-gcc on base-gcc arches. Fixes build on sparc64
2022-07-12 14:14:27 +00:00
kn
21f36b57fa We can keep rerolling the TSL, commit it or simply use a more stable one
Do the latter to avoid build failures and XML blobs in our tree.
2022-07-11 15:43:10 +00:00
kn
5f7aefa38c Refetch eu-lotl.xml, noted by aja 2022-07-11 14:48:58 +00:00
kn
ccfe19bdc7 + qdigidoc4 2022-07-11 10:19:37 +00:00