7557 Commits

Author SHA1 Message Date
abieber
b6fc7ae2a3 +lego 2022-03-07 20:53:14 +00:00
abieber
fbca0700a1 Import lego 4.6.0
Lego is a Let's Encrypt/ACME client written in Go.

Description:
Lego can be use as a Let's Encrypt/ACME CLI and can solve multiple ACME
challenge types out of the box or use custom challenge solvers.

Features:
- ACME v2 RFC 8555
- Register with CA
- Obtain certificates, both from scratch or with an existing CSR
- Renew certificates
- Revoke certificates
- Robust implementation of all ACME challenges
- HTTP (http-01)
- DNS (dns-01)
- TLS (tls-alpn-01)
- SAN certificate support
- Comes with multiple optional DNS providers
- Custom challenge solvers
- Certificate bundling
- OCSP helper function

Maintainer: Horia Racoviceanu

Tweaks and OK from sthen@. Thanks Horia!
2022-03-07 20:52:39 +00:00
sthen
9b5601676f +py-pyotp 2022-03-07 17:04:26 +00:00
sthen
aba9b50942 import ports/security/py-pyotp, ok aja@
PyOTP is a Python library for generating and verifying one-time passwords,
used to implement two-factor (2FA) or multi-factor (MFA) authentication
methods in web applications and other systems.

PyOTP implements server-side support for HOTP (RFC 4226) and TOTP (RFC 6238).
2022-03-07 17:04:01 +00:00
sthen
c5ab4a97f3 update to gpgme-1.17.1 2022-03-07 13:29:39 +00:00
pvk
7eb6aa54f7 Update vault 1.9.3 -> 1.9.4
Changelog: https://github.com/hashicorp/vault/blob/main/CHANGELOG.md#194
2022-03-06 23:57:12 +00:00
landry
86cd540724 security/nss: update to 3.76, will be required by gecko 99
see https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_76.html
2022-03-05 08:43:17 +00:00
millert
18407824d0 Update to sudo 1.9.10 2022-03-04 17:54:43 +00:00
sthen
9344b1979b reinstate distinfo for the pypi tarball (accidentally replaced with the github one) 2022-03-01 21:23:16 +00:00
sthen
9c6b3e7d18 update to cfssl-1.6.1 2022-03-01 21:22:21 +00:00
sthen
5546e1c5aa typo in NO_TEST 2022-03-01 10:27:10 +00:00
sthen
b81a101c6f pykeepass: patch to remove the tight version checks, which appear to have
been done to tie it to versions of dependencies that still work with py2.
add missing RDEP while there. manually fetching and running the tests
from the github repo works ok
2022-03-01 10:23:58 +00:00
sthen
2b5e58302c update to libretls-3.5.0 2022-02-28 12:48:04 +00:00
sthen
ddb7321900 py-ecdsa: don't explicitly list py-test in TEST_DEPENDS; port uses
MODPY_PYTEST so it is added by python.port.mk where needed
2022-02-26 17:31:39 +00:00
sthen
d78b02fc5b update to p5-Crypt-OpenSSL-X509-1.913 2022-02-26 09:40:57 +00:00
sthen
2c3dd511ef update to p5-Crypt-OpenSSL-RSA-0.32 2022-02-26 09:39:07 +00:00
sebastia
7a7ac8e7fe simple update: 3.8.20 -> 3.8.21 2022-02-25 20:56:47 +00:00
sebastia
60b4dc56c3 simple update: 0.13.6 -> 0.13.7 2022-02-25 20:56:06 +00:00
ajacoutot
59d4acfca5 SECURITY update to cyrus-sasl-2.1.28. 2022-02-24 08:33:56 +00:00
bket
1671c11734 Convert unflavored python3 py-* ports, and update dependencies and bump REVISION of consumers
OK sthen@
2022-02-22 04:22:19 +00:00
bket
4129dbd919 python3 only ports - use proper construct for FLAVOR
Forcibly assign variable: FLAVOR=python3, not FLAVOR?=python3. No need to bump
REVISION.

OK sthen@
2022-02-20 15:05:11 +00:00
ajacoutot
a3b54f6c93 Update to libgcrypt-1.10.0.
ok robert@
2022-02-19 07:53:44 +00:00
kmos
53f57532da Pull addition of "-fdeclspec" to CFLAGS out of a patch and into the Makefile
but only for clang architectures. (ports-gcc doesn't have that options so
errors out).

Fixes the build on sparc64

ok kn
2022-02-18 22:45:39 +00:00
sthen
c41e91647a build yubikey-manager with its own copy of the current 0.8 version
of py3-fido.

should be a noop. if it doesn't work currently or only partially works
(like mine which times out usb transactions for many operations) then
this won't help, if it does work then this shouldn't break things.
but this gets ykman out of the way of updates to the main py-fido port.
2022-02-16 16:35:09 +00:00
abieber
3b296922b6 Update rbw to 1.4.3 2022-02-16 12:43:45 +00:00
ajacoutot
e8d6ee5ca9 Add comment about GUsb. 2022-02-13 12:03:25 +00:00
sebastia
03f88c1a64 simple update 5.1.1 -> 5.1.2
take MAINTAINER

OK jasper@ (previous MAINTAINER)
2022-02-12 20:47:28 +00:00
ajacoutot
c3fd19c360 Drop default CONFIGURE_ARGS. 2022-02-12 11:08:57 +00:00
sthen
587af6f03a remove pointless ports-clang from COMPILER 2022-02-10 21:01:52 +00:00
tb
c7bc64482c Update py3-tlsfuzzer to 20220209 2022-02-10 12:17:52 +00:00
sthen
807abcdd78 update to py3-openssl-22.0.0 2022-02-10 09:25:25 +00:00
sthen
be8bccce26 update to gpgme-1.17.0 2022-02-09 13:22:05 +00:00
sthen
c0f5579911 update to py3-cryptography-36.0.1 2022-02-09 12:31:04 +00:00
sthen
33643300d8 yubikey-manager: patch use of deprecated cryptography.utils.int_from_bytes 2022-02-08 21:51:08 +00:00
landry
f8bf8bd08e security/nss: update to 3.75, will be required by gecko 98
see https://hg.mozilla.org/projects/nss/file/tip/doc/rst/releases/nss_3_75.rst
and https://firefox-source-docs.mozilla.org/security/nss/releases/index.html
2022-02-07 12:51:29 +00:00
tb
9fe770620e openssl-ruby-tests: remove workaround for AEAD- TLSv1.3 ciphersuites 2022-02-05 18:37:14 +00:00
pvk
ec7a1830f3 Update vault 1.9.2 -> 1.9.3
Changelog: https://github.com/hashicorp/vault/blob/main/CHANGELOG.md#193
2022-02-03 15:54:20 +00:00
bluhm
b46e60e4ef update botan2 to 2.19.1
removed patch has been commited upstream
2022-02-02 18:21:43 +00:00
sebastia
a5b493dc5b update to 2022-01-29 2022-02-02 12:52:38 +00:00
tb
612036645c Update openssl-ruby-tests to 20220201
Add a workaround for a difference of the default names for TLSv1.3
ciphersuites between LibreSSL and OpenSSL that will hopefully not
be needed for long.
2022-02-01 18:54:28 +00:00
sthen
4b32a5bc6f add portroach marker 2022-02-01 18:32:10 +00:00
daniel
45b9190ff2 switch from python2 to python3
The ChangeLog for version 2.16.11 says:

     When building the test suites with GNU make, invoke python3 or python, not
     python2. The build still works with either Python 2.7 or 3.5+, but we
     recommend using a version of Python that is supported upstream.
2022-01-30 21:28:55 +00:00
gonzalo
85829400ad Update for Lynis to 3.0.7
OK sebastia@
2022-01-28 09:26:19 +00:00
ajacoutot
f1192e5d8e Update to libgpg-error-1.44. 2022-01-28 08:30:51 +00:00
semarie
3a15ebd3b4 security/py-scrypt: add missing WANTLIB
add crypto and pthread in WANTLIB
2022-01-22 08:09:12 +00:00
bluhm
f3098edb4c Change the local patch for RSA_generate_key() to the code that has
been commited upstream.
OK tb@
2022-01-20 19:27:09 +00:00
abieber
8dd9c43eae + gosec 2022-01-20 17:15:48 +00:00
abieber
c8914f2c6f Import gosec 2.9.6: a tool to inspect go source code for security problems.
OK op@
2022-01-20 17:15:08 +00:00
tb
7b8bed45bf openssl-ruby-tests: drop TS patch. It's a leftover of a patch that
was obsoleted by an upstream fix. It breaks regress on powerpc and
presumably all other BE arches with 32-bit long.
2022-01-20 00:42:44 +00:00
bluhm
704ee3cfc6 Document which p5-Net-SSLeay patches have been brought upstream.
Remove useless #ifdef LibreSSL around OCSP_single_get0_status().
Fix typo in OpenSSL version number 0x10100000L to 0x10100003L.
OK tb@
2022-01-19 16:17:43 +00:00