5529 Commits

Author SHA1 Message Date
rpointel
f676cb2502 update yara to 3.7.1, enable python3 flavor and take maintainership.
ok benoit@.
2018-05-18 09:02:29 +00:00
sthen
e2085d7e93 update to yubikey-personalization-1.19.0 2018-05-17 10:32:12 +00:00
bket
a3125bf2b2 Update to pgpdump-0.33.
OK sthen@
2018-05-16 07:56:09 +00:00
bket
01f2245a25 Update to polarssl-2.9.0.
Fixes various security issues, and bugs,
https://tls.mbed.org/tech-updates/releases/mbedtls-2.9.0-2.7.3-and-2.1.12-released

Minor of mbedtls has been bumped as symbols have been added.

OK jca@
2018-05-15 17:39:19 +00:00
visa
88477b0ad7 Fix make depend on gcc architectures.
OK sthen@
2018-05-15 15:15:05 +00:00
bket
bb9a0659e6 Upstream provides distfile via githubs release infrastructure.
- Move from GH_* to MASTER_SITES and DISTNAME
  * Set EPOCH as version numbering has changed
  * Set HOMEPAGE
- No need to pull in automake and libtool
  * Drop BDEPs
  * Change CONFIGURE_STYLE
- Follow Makefile.template
- Change email address MAINTAINER

OK jca@, sthen@
2018-05-14 20:03:04 +00:00
jasper
65102cc4e2 switch to py-cryptodome 2018-05-14 18:54:13 +00:00
landry
b06e682696 Fix build on !x86 by inconditionally building FStar.c. Cf
https://bugzilla.mozilla.org/show_bug.cgi?id=1459739#c2
2018-05-14 18:43:47 +00:00
sthen
a78015aa89 Unbreak py-cryptodome on !x86 by using an arch-dependent subst'ed @comment
in the PLIST for the AES-NI related .so file. Reported by landry@,
ok landry jasper
2018-05-14 16:43:33 +00:00
jasper
b68fc5e6a6 switch to py-cryptodome
ok sthen@ (MAINTAINER)
2018-05-14 06:55:45 +00:00
jasper
5ec326ce42 switch to py-cryptodome 2018-05-13 13:48:39 +00:00
jasper
58b55e5608 -kedpm 2018-05-13 13:38:40 +00:00
jasper
f1ef1c9070 remove kedpm which is dead upstream and clearly shows it's signs:
doesn't work with the modern py-crypto API and enforces a maximum length
on passwords of 24 characters.

ok jung@ (MAINTAINER)
2018-05-13 13:38:24 +00:00
jasper
d230ee0d38 switch to py-cryptodome
ok danj@
2018-05-13 06:39:22 +00:00
jasper
68d4b4aad7 switch to py-cryptodome 2018-05-12 21:26:24 +00:00
jasper
22ff19c974 switch to py-cryptodome 2018-05-12 21:24:05 +00:00
jasper
727e817ae2 fix dependencies, this requires py-cryptography instead of py-crypto 2018-05-12 21:17:53 +00:00
landry
d6923b69fa Update to nss 3.37, needed by gecko 61.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.37_release_notes

Interestingly, in nss 3.31 the way entropy is gathered from the system
was revamped, and in #1057343 it started using the getentropy() syscall
by default if available, with a fallback to /dev/urandom...but only on
linux/glibc 2.25.

Add a patch to also use getentropy() on OpenBSD.. reported upstream in
#1461075
2018-05-12 18:10:12 +00:00
sthen
f03ddd8005 split pecl-libsodium into 1.x and 2.x versions, 2.x is PHP7+ only 2018-05-11 20:11:57 +00:00
kn
966582c490 Switch GH_* to stable /release/ MASTER_SITES
While here, turn `find | xargs rm' into `find -delete'.

OK sthen
2018-05-10 16:02:56 +00:00
ajacoutot
9ec6d43554 Remove docs, they prevent installing both the unflavored and python3
flavored version of this package.
2018-05-10 07:25:29 +00:00
rpointel
2232181935 small update to 0.0.34. 2018-05-09 06:32:20 +00:00
jca
93a5216064 Simpler pledge(2) approach
- always call pledge(2) with a string literal, instead of subtracting
promises from a mutable string.  Makes it easier to see what privileges
remain.

- call pledge(2) later in the initialization, so that we don't need to
care about too many promises eg "flock".

- always use "cpath" in the main process - needed at least if --pidfile
is passed.

Tested in basic setup, started as root with chroot and started as
_hitch, config reload still works.

ok kn@ (maintainer)
2018-05-08 23:22:51 +00:00
jasper
a27c90b711 update to py-scp-0.11.0 2018-05-07 18:08:15 +00:00
benoit
bbb6b610a7 Update to py-paramiko-2.4.1. 2018-05-04 20:31:30 +00:00
rpointel
d1597191a5 + SUBDIR += py-ropper
+     SUBDIR += py-ropper,python3
2018-05-04 05:32:28 +00:00
rpointel
c294c886ba import ropper, a rop gadget finder and binary information tool.
ok benoit@.
2018-05-04 05:31:15 +00:00
gonzalo
4531baab0d Update for Lynis to 2.6.4
OK benoit@
2018-05-03 14:05:04 +00:00
ajacoutot
a295e3568c Update to libgpg-error-1.31. 2018-05-03 06:13:32 +00:00
kn
a928eea659 + hitch 2018-05-01 13:48:52 +00:00
kn
153c68c6ff Hitch is a libev-based high performance TLS proxy designed to handle 10s of
thousands of connections efficiently on multicore machines.

It supports ALPN, SNI, PROXY protocol, automatic OCSP stapling as well as
seamless configuration reloads of certificates and listen endpoints.

Feedback and OK jca
2018-05-01 13:43:59 +00:00
ajacoutot
bb863d39d0 Update to libgpg-error-1.30. 2018-05-01 09:29:07 +00:00
millert
a2ffd7ed31 Update to sudo 1.8.23 2018-04-30 20:55:38 +00:00
jasper
fb7b8b3cc6 update to py-M2Crypto-0.30.1 2018-04-30 09:37:15 +00:00
jasper
ff72d9623d +py-cryptodome
+py-cryptodome,python3
2018-04-29 08:56:56 +00:00
jasper
480d231c41 import py-cryptodomex-3.6.1
PyCryptodome is a self-contained Python package of low-level cryptographic
primitives. It is an cleaned and simplified fork of PyCrypto, exposing
almost the same API. Most applications run unmodified, apart from a very
few compatibility breaks for those parts of the API that represented a
security hazard or that were too hard to maintain.

NB: currently we're packaging cryptodomex which doesn't conflict with py-crypto.
once all callers are migrated we can switch to the regular cryptodome package.

with and ok sthen@
2018-04-29 08:55:50 +00:00
rpointel
040673903e + SUBDIR += wapit 2018-04-27 07:27:56 +00:00
rpointel
4ef6477dd9 import wapiti, a web application vulnerability scanner.
inputs and ok gonzalo@.
2018-04-27 07:27:17 +00:00
ajacoutot
551a3230c6 Update to libfprint-0.6.0. 2018-04-26 16:01:45 +00:00
sthen
384af9db11 move pecl to multi-version; packages are now named pecl56-foo and pecl70-foo
for the relevant PHP versions.

ports which are 5.6-only remain in pecl-foo port directories, set to only
build 5.6 packages

ports which have separate versions for 5.6 and 7.0 are split; the port
directories are named pecl56-foo for the 5.6-compatible version and
pecl-foo for the 7+-version

normal ports are in pecl-foo port directories with flavours for 5.6 and 7.0
2018-04-26 15:08:56 +00:00
danj
552bd89342 Update to py-gnupg-0.4.2 2018-04-26 13:12:48 +00:00
jasper
81def4be93 enable ipfw mode which allows divert(4)'ing traffic to suricata in IPS mode
ok gonzalo@
2018-04-26 10:44:44 +00:00
jasper
bfa13946f1 update to py-M2Crypto-0.30.0 2018-04-26 08:25:22 +00:00
naddy
00094af4c3 char cannot hold the return value of getopt() 2018-04-25 20:13:04 +00:00
jasper
36375d30ee BIO_meth_new() and BIO_meth_free() are non-static in LibreSSL 2018-04-25 16:51:05 +00:00
jasper
d730e89cd7 add links 2018-04-25 16:49:20 +00:00
solene
78c111c290 + py-pgpdump
+ py-pgpdump,python3
2018-04-25 13:46:22 +00:00
solene
ae18a3bcef Import security/py-pgpdump v1.5
dependency for upcoming mailpile port

A Python library for parsing PGP packets, similar to the pgpdump utility.
Currently supports:
- Signature packets
- Public key packets
- ASCII-armor decoding and CRC check
- Secret key packets
- Trust, user ID, and user attribute packets

with help from sthen@ jca@

ok from jca@ sthen@
2018-04-25 13:37:26 +00:00
jasper
53054c2a14 - update to py-M2Crypto 0.29.0
- fix for python2 where .flush() would return EBADF, for example with
  "import M2Crypto; M2Crypto.BIO.openfile('/etc/ssl/cert.pem')"
2018-04-25 09:58:03 +00:00
danj
ede8042ddb Update to py-oauthlib-2.0.7
From Johan Huldtgren (maintainer)
2018-04-24 20:55:04 +00:00