20 Commits

Author SHA1 Message Date
naddy
b086632fa8 Disable CAST cipher when configuring the embedded OpenSSL.
Since we don't build shared libraries, the CAST assembly implementation
is included on i386 even though there is no PIC version. Skip the whole
cipher as there are no SSL/TLS cipher suites that use CAST.

ok sthen@
2018-11-20 16:46:36 +00:00
sthen
10295c3ad6 adapt to new layout in security/openssl 2018-11-07 11:07:11 +00:00
jsing
08ec0d71c2 Stop using old/deprecated M_ASN1_* defines/macros.
Switch from the old/deprecated M_ASN1_OCTET_STRING_print() defines/macros
to ASN1_STRING_print(). While here, add const to the version struct member
to remove a compiler warning.

ok sthen@
2018-08-30 17:05:21 +00:00
sthen
fe9fd1abd1 don't fail if ${WRKSRC}/openssl/.git exists, found during ports src extraction 2018-02-24 13:30:11 +00:00
sthen
509b551836 update to sslscan-1.11.11 2018-01-01 14:35:24 +00:00
sthen
30eaa4b102 sync WANTLIB and bump, gc a few gettext MODULES while there 2017-09-22 21:30:32 +00:00
sthen
a0af7d140a update to sslscan-1.11.8, convert to GH_* variables, use the SSL_get_state()
accessor rather than digging in the struct directly which no longer works in
libressl (state was moved to internal).
2017-01-27 11:01:14 +00:00
sthen
1dcc764027 fix "make extract NO_DEPENDS=Yes" 2016-06-01 22:37:58 +00:00
sthen
248b31f1a2 update to sslscan-1.11.2, now built against static-linked openssl lib
with SSLv2 enabled to allow identification of misconfigured servers
again (as was the case before the last openssl update).
2016-03-03 14:41:46 +00:00
sthen
a91e23cb14 update to sslscan-1.11.1 2016-01-08 02:08:10 +00:00
sthen
53cb3ecedc update to sslscan-1.11.0-rbsec, take MAINTAINER 2015-10-21 13:23:54 +00:00
sthen
8b6b8e35b1 allow libressl and openssl versions of sslscan to coexist in installation;
now you can use one to check for chacha20-poly1305 and the other to check
for SSLv2/v3 support without messing around with pkg_delete/pkg_add between
tests.
2015-09-16 21:24:46 +00:00
sthen
170f3f8091 Add a flavour providing a choice of which SSL library to build sslscan against. 2015-09-10 14:08:44 +00:00
sthen
83db9a1edc switch to rbsec's version of sslscan. adds TLSv1.1/1.2 support, displays
cert information (alg/strength/issuer/times), heartbleed/compression/secure
reneg checks, etc.
2015-09-10 13:55:51 +00:00
sthen
f3a2d47f3b use openssl from ports, allows scanning for things which have been removed from
libressl
2015-07-19 00:07:15 +00:00
naddy
570aa62a9c Drop remaining MD5/RMD160/SHA1 checksums. 2015-01-18 03:12:39 +00:00
espie
eae66e4a7b PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00
jasper
cbcacca97f do not show --ssl2 commandline option if built with an OpenSSL without SSLv2 support.
from brad
2012-07-16 08:49:31 +00:00
jasper
7ce355632a let this work if sslv2 is disabled, from Brad 2012-06-26 10:12:21 +00:00
ajacoutot
c251bafcec Import sslscan-1.8.2.
SSLScan queries SSL services, such as HTTPS, in order to determine the
ciphers that are supported. SSLScan is designed to be easy, lean and
fast. The output includes prefered ciphers of the SSL service, the
certificate and is in Text and XML formats.

Heavily based on the FreeBSD port.

inputs from sthen@
ok jasper@
2011-06-21 21:05:48 +00:00