7213 Commits

Author SHA1 Message Date
tb
9bb79d35dd security/botan: port BlockCipher/HashFunction classes to OpenSSL 1.1 API.
ok bluhm (maintainer)
2021-11-14 18:43:44 +00:00
sthen
2e2180c22b regen patches 2021-11-14 12:40:28 +00:00
sthen
bf5b5d1075 adjust the pledge string in gopass:
+-	if err := protect.Pledge("stdio rpath wpath cpath tty proc exec"); err != nil {
++	if err := protect.Pledge("stdio rpath wpath cpath fattr tty proc exec"); err != nil {

during "gopass fsck" if files or directories are encountered with
permissions that are too wide, it will use syscall.Chmod to fix too-open
permissions on files or directories. wpath is not enough for this, fattr
is needed.
2021-11-13 21:58:30 +00:00
tb
81b516f474 security/lastpass-cli: Use OpenSSL 1.1 API path to avoid upcoming build
breakage.

tested/ok bket (maintainer)
2021-11-13 19:41:10 +00:00
tb
790ddd7e55 security/libssh2: compile with HAVE_OPAQUE_STRUCTS to avoid upcoming
breakage. Regen patch while there.

ok benoit (maintainer)
2021-11-13 19:36:14 +00:00
sthen
cf2349cd10 update to gopass-1.12.8 2021-11-13 00:25:44 +00:00
bluhm
87301d575c update botan2 to 2.18.2 2021-11-12 22:02:50 +00:00
sthen
6c7fcaeaf7 @comment the gpgrt.info file in libgpg-error, it's not the world's most
useful documentation file, and triggers an annoying pkg_add warning message
ok aja@ (maintainer)
2021-11-12 20:55:21 +00:00
ajacoutot
a78f6919c5 Update to libtasn1-4.18.0. 2021-11-12 08:13:06 +00:00
tb
3d70442139 security/p5-IO-Socket-SSL: disable two tests that fail due to the fact
that we no longer allow creation of certificates containing illegal
sandns names (x509_alt.c r1.3, r1.5).

ok bluhm
beck agrees with the approach
2021-11-11 18:32:08 +00:00
sthen
3b8e5308e4 update to py3-argon2-cffi-21.1.0 2021-11-11 09:03:19 +00:00
sthen
10d1b0039b garbage-collect old dependencies no longer used by py-cryptography 2021-11-08 14:46:55 +00:00
sthen
371cc0c6db fix pkgname 2021-11-08 14:30:53 +00:00
sthen
c09544505e update to py3-service-identity-21.1.0 2021-11-08 14:19:32 +00:00
sthen
0e1184b4bc build up SUPDISTFILES from MODCARGO_CRATES so that !rust arches don't
fail on "Extra file 'cargo/XXX"
2021-11-08 14:17:04 +00:00
ajacoutot
fcba761211 Update to libgpg-error-1.43. 2021-11-05 08:02:58 +00:00
sthen
4f03df76ef update to clamav-0.104.1 2021-11-03 22:22:14 +00:00
tb
4dee49f060 Update py3-fastecdsa to 2.2.2 2021-11-02 22:41:17 +00:00
sthen
3b64c389bd sort 2021-11-02 21:18:38 +00:00
landry
886540d1e1 security/nss: update to 3.72, will be required by gecko 95.
cf https://hg.mozilla.org/projects/nss/file/tip/doc/rst/releases/nss_3_72.rst
2021-11-02 14:30:42 +00:00
tb
d4e85f3c7d Update openssl-ruby-tests to 20211101 2021-11-02 10:19:11 +00:00
sthen
c027fb0a81 update to py3-openssl-21.0.0
drop self-TEST_DEPENDS which is no longer needed with default PYTHONPATH setting
2021-11-02 01:18:46 +00:00
sthen
29389da44c bump REVISION for switch from Python 3.8 -> 3.9 2021-11-02 00:02:15 +00:00
tb
b25886123c rm empty file 2021-11-01 18:03:46 +00:00
tb
c155044f2e security/yubico/yubico-piv-tool: Stop using various LibreSSL-specific
code paths, now that we provide all the required API.
2021-10-31 17:33:05 +00:00
tb
798c270b3f security/yara/main: neuter some compat shims that break with the recent
LibreSSL bump, most of which were unnecessary since LibreSSL 2.7
2021-10-31 17:30:40 +00:00
tb
4773f8901d security/xmlsec: neuter some API redefinitions that are no longer needed.
(most of them were not needed since LibreSSL 2.7)
2021-10-31 17:27:57 +00:00
tb
76ec1ea830 security/py-cryptography: fix build after LibreSSL bump. Neuter various
now broken API reimplementations and stop redefining symbols that we
provide.
2021-10-31 17:26:24 +00:00
tb
8794e6b8e5 net/py-M2Crypto: LibreSSL now has BIO_get_init(), so remove no longer
needed patch.
2021-10-31 17:23:38 +00:00
tb
89967134d9 net/pivy: rework various codepaths so as not to use libcrypto internals.
Tested by jmatthew and Alex Wilson (upstream). ok jmatthew
2021-10-31 17:22:18 +00:00
tb
7139e99207 security/p5-Net-SSLeay: use X509_get0_tbs_sigalg() instead of reaching
into structs. ok bluhm
2021-10-31 17:20:16 +00:00
tb
668981d212 security/opensc: Neuter various API reimplementations that were broken
with the latest LibreSSL bump. All this API is now provided by the
libraries.
2021-10-31 17:19:13 +00:00
sthen
3f3f090494 add annotations for py-* ports using python 3 without a ,python3 flavour,
change some existing annotations, so "grep ' py-' ports/*/Makefile | grep
-v python3" does better at finding the py-* things still using py2
2021-10-29 16:23:36 +00:00
sthen
ea922cdbf7 convert another batch of py2+3 ports to py3-only, and remove a few more
py2-only ports providing py-* modules that are no longer used in ports.

this doesn't change ports used to support standalone py2-only applications,
not currently planned to remove those at least until a few things with no
real alternatives get ported to py3.
2021-10-29 15:38:40 +00:00
sthen
0cd37bc2c1 remove another py-toml used for setuptools_scm 2021-10-29 10:57:45 +00:00
sthen
d46d0db08e clamav/freshclam: patch resolv.h detection, cmake's check_include_file
tries to compile a test file which just #includes resolv.h and doesn't
seem to have a way to specify that another header is needed.

problem reported by Mikolaj Kucharski, the CDN for freshclam starts
refusing connections if you don't do DNS-based checks
https://github.com/Cisco-Talos/clamav/issues/340
2021-10-29 10:34:08 +00:00
tb
6ffbae0d9b security/openssl-ruby-tests: add a SKIP_EXPECTED_FAILURES environment
variable for regression testing.
2021-10-28 10:54:46 +00:00
sthen
54a6d011cf update to pass-otp-1.2.0 2021-10-26 20:16:44 +00:00
sthen
03a0711f4b remove some MODPY_VERSION=${MODPY_VERSION_2} py-* (non-standalone) ports
which aren't used as dependencies in ports. many are either old stuff,
or things used to provide backports of functionality from newer Python
base versions which were used in ports that have already been converted
to py3-only.
2021-10-26 19:52:41 +00:00
sthen
a28fcd4dfb update to py3-josepy-1.10.0 2021-10-26 19:41:08 +00:00
gonzalo
4ec0e8d701 Update for Suricata to 6.0.3
While here drop Jasper out by his request :'-(

OK rsadowski@ jasper@
2021-10-26 16:29:57 +00:00
tb
43487c6b41 security/sslsplit: add an ifdef to use X509_up_ref(). 2021-10-25 19:03:18 +00:00
tb
d179738f12 security/tcltls: backport a simple upstream patch to fix build with
opaque X509 structure.
2021-10-25 18:35:31 +00:00
sthen
f611d84e40 drop php 7.3 from -current, although it is still officially in
security support it appears this is not really the case any more
https://bugs.php.net/bug.php?id=81026

add @pkgpaths to merge pecl-* etc across
mark www/syweb broken, it was marked 7.3-only so looks like it needs more work
other php-ish ports have a RDEP on either 7.4 (default version) or 8.0
2021-10-25 12:33:18 +00:00
sthen
5c6ee67e1a add ,python3 to parent dir makefile where the relevant ports use
FLAVOR=python3 + FLAVORS=python3
2021-10-24 22:51:16 +00:00
sthen
0624b90976 remove surplus py-cryptography_vectors (non-,python3 entry) 2021-10-24 22:39:15 +00:00
tb
b4438f5dfb Update openssl-ruby-tests to 20211024 2021-10-24 17:23:15 +00:00
sthen
e27d4113bb switch some Python ports to py3-only. maintainer oks for the relevant
ports from semarie, kmos, jung, martin, benoit, juanfra. general oks
benoit bket daniel kmos
2021-10-24 09:28:46 +00:00
tb
876734e355 security/ikeman: more fixes for opaque structs in libcrypto 2021-10-21 09:33:34 +00:00
kirby
0ed5a88181 update to qtkeychain-0.12.0
ok rsadowski@
2021-10-21 05:49:43 +00:00