Commit Graph

3210 Commits

Author SHA1 Message Date
nigel
ac30ff0b05 Mozilla::CA provides a copy of Mozilla's bundle of Certificate
Authority certificates in a form that can be consumed by modules
and libraries based on OpenSSL.

Ok sthen, landry
2013-03-26 23:44:38 +00:00
sthen
3fba1507d4 +py-bcrypt 2013-03-26 21:37:44 +00:00
sthen
e2954dfa4a import ports/security/py-bcrypt, ok benoit@
py-bcrypt is a Python wrapper of OpenBSD's Blowfish password hashing code,
as described in "A Future-Adaptable Password Scheme" by Niels Provos and
David Mazières.

This system hashes passwords using a version of Bruce Schneier's
Blowfish block cipher with modifications designed to raise the cost of
off-line password cracking and frustrate fast hardware implementation.
The computation cost of the algorithm is parametised, so it can be
increased as computers get faster. The intent is to make a compromise
of a password database less likely to result in an attacker gaining
knowledge of the plaintext passwords (e.g. using John the Ripper).
2013-03-26 21:37:26 +00:00
benoit
e1e78d742e - update p5-Crypt-CBC to 2.32
- remove USE_GROFF
2013-03-25 17:58:46 +00:00
ajacoutot
8fbcd28002 Update to libassuan-2.1.0. 2013-03-23 13:44:44 +00:00
ajacoutot
d8f4036a00 Update to libgpg-error-1.11. 2013-03-23 13:38:06 +00:00
ajacoutot
822c55fa60 Update to libgcrypt-1.5.1. 2013-03-23 13:33:58 +00:00
ajacoutot
7ced100b6a Update to gnutls-3.1.10. 2013-03-23 13:25:04 +00:00
benoit
df18e85cc7 - update p5-Digest-MD4 to 1.9 2013-03-23 07:10:06 +00:00
rpe
992a77b691 add py-M2Crypto 2013-03-22 20:53:30 +00:00
rpe
83d0be72e8 import security/py-M2Crypto 0.21.1
M2Crypto is the most complete Python wrapper for OpenSSL featuring
RSA, DSA, DH, HMACs, message digests, symmetric ciphers (including
AES); SSL functionality to implement clients and servers; HTTPS
extensions to Python's httplib, urllib, and xmlrpclib; unforgeable
HMAC'ing AuthCookies for web session management; FTP/TLS client and
server; S/MIME; ZServerSSL: A HTTPS server for Zope and ZSmime: An
S/MIME messenger for Zope. M2Crypto can also be used to provide SSL
for Twisted.

with help and ok
sthen@ benoit@
2013-03-22 20:51:43 +00:00
sthen
49ed2a97f0 chmod clusterssh's MYMETA.json to be writable, needed for newer perl 2013-03-21 19:07:56 +00:00
landry
6865587314 Security update to nss 3.14.3.
Fixes CVE-2013-1620 / bug #822365 (Lucky Thirteen attack)
Required by firefox 20 & later anyway.. and tested to work fine with 20.0b6.
2013-03-21 12:49:42 +00:00
jasper
9775d07bcd - update to kc-2.3.0
from LEVAI Daniel (MAINTAINER)
2013-03-21 09:48:45 +00:00
ajacoutot
58f1a6f9f6 USE_LIBTOOL=Yes is the default now. 2013-03-21 08:45:11 +00:00
jeremy
ac78ad4e83 Make ruby 1.9 the default ruby for non-gem/extconf ports,
for consistency with the gem/extconf ports.

Update non-gem/extconf ports that relied on the previous
default of ruby 1.8 to explicitly specify it.

OK ajacoutot@
2013-03-20 19:13:50 +00:00
ajacoutot
d5c9376484 Fix a segfault when parsing certificates. 2013-03-19 16:07:49 +00:00
landry
505f877d4b Update to nss 3.14.2.
Remove a useless patch, unix_rand.c uses /dev/urandom on OpenBSD since
bug #174993 was fixed more that 5 years ago in nss 3.5.
Enforce dependency on sqlite 3.7.15.2.
Went in a handful of bulk builds.
2013-03-18 20:38:13 +00:00
jturner
faec099762 Add support for mips64el and update to 1.10.5 while here.
ok brad@ bcallah@
2013-03-17 14:34:26 +00:00
benoit
66ba3c9829 - update p5-Digest-MD4 to 1.8 2013-03-17 05:17:01 +00:00
sthen
a79d743a9d SECURITY update to ClamAV 0.97.7
"addresses several reported potential security bugs." (full details not
available yet, but there are some added checks for pointer out of bounds
in WWPack decompression).
2013-03-15 15:10:06 +00:00
ajacoutot
3dfa4ad2cf Update to p11-kit-0.16.4. 2013-03-14 20:08:14 +00:00
sthen
7b10e7c633 PERMIT_* 2013-03-11 12:27:53 +00:00
espie
eae66e4a7b PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00
jasper
70c1dbc3b1 - remove now unneeded CONFIGURE_STYLE 2013-03-10 19:35:26 +00:00
jasper
e891362f69 switch to the erlang module, so more stuff may be factored into the module, but
it's a good start.
2013-03-10 19:20:06 +00:00
benoit
3ba1c43919 - update ophcrack to 3.4.1
- update WANTLIB, MODULES and PERMIT_*
2013-03-10 12:45:09 +00:00
pascal
f8357f3f6a +netpgp 2013-03-09 16:03:02 +00:00
pascal
12d65e5780 Import NetPGP.
NetPGP is a standards-compliant library and suite of utilities
providing digital signature and verification functionality, as well
as data encryption and decryption, using RSA and DSA/Elgamal keys.

Several double frees found by bentley@, already committed upstream.

ok benoit@
2013-03-09 16:02:24 +00:00
jasper
d086e4408d sync 2013-03-08 12:07:42 +00:00
jasper
0e106170a5 import erl-oauth
Erlang OAuth implementation.

ok aja@
2013-03-08 12:07:09 +00:00
jasper
ba846b1e3a import erl-bcrypt
erl-bcrypt is a wrapper around the OpenBSD Blowfish password hashing
algorithm, as described in "A Future-Adaptable Password Scheme" by Niels
Provos and David Mazieres.

ok aja@
2013-03-08 12:06:44 +00:00
ajacoutot
38f95d2367 Move ocaml-cryptokit where it belongs. 2013-03-08 09:57:33 +00:00
ajacoutot
5211924705 +cvechecker 2013-03-08 09:55:59 +00:00
ajacoutot
639694f0e0 Import cvechecker-3.2.
The goal of cvechecker is to report about possible vulnerabilities on
your system, by scanning the installed software and matching the results
with the CVE database.
<...>

ok jasper@
2013-03-08 09:54:49 +00:00
gsoares
665d95b509 Security UPDATE to 4.55; Fix CVE-2013-1762
full changelog at:
https://www.stunnel.org/sdf_ChangeLog.html

OK sthen@
2013-03-05 14:10:40 +00:00
ajacoutot
e693f2833d Update to p11-kit-0.16.0. 2013-03-05 09:53:20 +00:00
jasper
25451b93b7 Security update of ruby-openid to 2.2.2, addresses CVE-2013-1812,
ruby-openid Gem Denial of Service Vulnerability
2013-03-05 09:09:57 +00:00
benoit
ce84d37edd - update py-paramiko to 1.10.0
- regen PLIST
2013-03-04 07:37:46 +00:00
ajacoutot
c4b67d5612 Update to gnutls-3.1.9. 2013-03-02 14:07:22 +00:00
ajacoutot
cd449ffa52 No need to @sample pkcs11.conf.example.
spotted by sthen@
2013-03-02 13:55:56 +00:00
ajacoutot
f44bdb4a47 Remove an annoying warning at pkg_add/delete time due to an empty manpage.
Theo confirmed this can still go in.
prodded by and ok sthen@, ok jasper@
2013-02-21 15:55:32 +00:00
sthen
f5a323c546 Don't use ${FLAVOR:L}, we only support lower-case flavours now.
OK ajacoutot@ espie@
2013-02-09 14:49:50 +00:00
sthen
8979f7fde1 take MAINTAINER, suggested by reyk@ 2013-02-07 12:32:08 +00:00
bluhm
8a08e28a3e update p5-IO-Socket-SSL to 1.83 2013-02-06 23:38:11 +00:00
sthen
b013715fc5 - enable reading PKCS12 certificates from files; from Gregor Best who
wants this for use with Eduroam.

- add an rc script and README.

- remove non-useful wpa_priv patch.

README tweak from ajacoutot, ok gsoares dcoppa
2013-02-06 17:27:13 +00:00
sthen
23ca7d6c7d bump; make sure static binaries get updated 2013-02-05 14:49:29 +00:00
ajacoutot
68dcc506da SECURITY update to gnutls-3.1.7.
GNUTLS-SA-2013-1: http://www.isg.rhul.ac.uk/tls/
2013-02-05 07:37:33 +00:00
rpointel
0b6e8563dc Update to 0.5.4.
security fix, more info http://www.libssh.org/2013/01/22/libssh-0-5-4-security-release/
2013-02-04 21:32:46 +00:00
sthen
e3e6f35472 don't try to access list members to free them unless already initialised;
fixes a crash with wpa_priv usage(); wpa_priv not yet enabled
2013-02-04 10:04:44 +00:00