Commit Graph

3245 Commits

Author SHA1 Message Date
ajacoutot
6a8b22e40d Committed upstream. 2012-08-22 06:28:53 +00:00
avsm
135b64580d mark a secondary pkgpath for ocaml-cryptokit to reflect the renaming from
security/cryptokit. bump REVISION.
2012-08-22 00:41:38 +00:00
sthen
c34880420b sync configure.ac program_invocation_short_name test with the one in
gnulib in gnutls, this fixes a build problem I've seen on some (but not
other) machines. ok ajacoutot@
2012-08-21 09:13:33 +00:00
pascal
e051391d3c After feedback from kettenis@, we won't be defining -DPIC on PIE archs per
default.  Garbage collect the patches that dealt with these issues, and use
the builtin define __PIC__ to detect if we're PIE/PIC.

ok naddy@
2012-08-20 11:50:59 +00:00
ajacoutot
057028b194 RCS id cleanup; also add OpenBSD RCS Id where missing... 2012-08-19 22:30:36 +00:00
ajacoutot
b81709215a Forgot in previous. 2012-08-19 13:31:39 +00:00
ajacoutot
ec4340a364 Remove lpthread patches from the "security" category. 2012-08-19 13:30:04 +00:00
ajacoutot
47f3bffd1f Bugfix update to p11-kit-0.13. 2012-08-19 11:10:43 +00:00
ajacoutot
4f20d1860d Fix DESCR. 2012-08-18 22:58:00 +00:00
avsm
3262fe6634 +ocaml-ssl
cryptokit->ocaml-cryptokit
2012-08-18 22:41:58 +00:00
avsm
4015bb18af update to ocaml-cryptokit-1.6
* new HOMEPAGE, new MASTER_SITE
* use new CONFIGURE_STYLE=oasis
* rename from cryptokit to ocaml-cryptokit

From: Christopher Zimmermann <madroach@gmerlin.de>
2012-08-18 22:40:36 +00:00
avsm
51f6b4c5ee initial import of ocaml-ssl-0.4.6
from Christopher Zimmermann <madroach@gmerlin.de>
2012-08-18 22:34:57 +00:00
ajacoutot
7ab36748ae Remove irrelevant $FreeBSD RCS ids. 2012-08-18 12:41:37 +00:00
ajacoutot
b7eab0566c boring morning useless cleanup: remove the FreeBSD RCS tags; it makes
sense for ports Makefile but not really for categories.

ok espie@
2012-08-18 07:25:25 +00:00
pascal
2a05f2db9c Further PIE preparations: aircrack-ng and avidemux both use non-PIC optimised
assembler.  Wrap an #ifndef PIC around it.

ok naddy@
2012-08-11 22:58:18 +00:00
gsoares
6457aa1c8d - update to 4.53
- drop maintainer per his request

ok sthen@
2012-08-09 14:13:59 +00:00
sthen
d1cfb54f2b Add a few more useful sanesecurity-mirrored lists to clamav-unofficial-sigs
sample config file (e.g. winnow_bad_cw and various bofhland lists).
Comment-out MBL to disable by default, it has various problems with
false-positives and doesn't seem very effective at present.
2012-08-09 00:34:29 +00:00
dcoppa
fb334582c2 Enable pcsc-lite support
Diff looks good to pea@ (maintainer)

Tested with my O2 O2Micro CCID SC Reader
2012-08-08 15:10:02 +00:00
naddy
ee86b61264 arpa/inet.h and netinet/in.h can now be #included in either order 2012-08-07 10:18:47 +00:00
ajacoutot
f9a1d41896 Update to assl-1.1.0.
from David Hill (maintainer)
2012-08-07 07:34:23 +00:00
dcoppa
85390daaf6 +ccid 2012-08-06 13:23:48 +00:00
dcoppa
863b04e540 Import security/ccid, a user-space USB CCID driver used by
security/pcsc-lite.

OK sthen@
2012-08-06 13:20:48 +00:00
dcoppa
5f5997167f Major update to pcsc-lite-1.8.5
OK sthen@
2012-08-06 13:03:12 +00:00
sthen
59f1eb3ac1 update to gnutls 3.0.22, ok ajacoutot@
- bugfixes and now supports gnutls_certificate_set_x509_system_trust on OpenBSD
2012-08-06 07:54:22 +00:00
ajacoutot
e97dd452f3 Remove useless comment. 2012-08-05 10:48:12 +00:00
espie
6fdca43594 fix non-sensible libtool parameters, allows us to drop some very weird
libtool code.
2012-08-04 14:24:23 +00:00
sthen
ffbfde3b63 import ports/security/yubiserve, ok jsaper@
YubiServe is a lightweight Validation Server supporting both OATH/HOTP
and Yubico Yubikey implementations, written in Python that uses an
SQLite database or, optionally, a MySQL database. It has an integrated
threaded webserver, with HTTPS/SSL support, compatible with the
Yubico validation protocol 2.0 including HMAC SHA-1 signatures to
provide for authentication of the server.
2012-07-18 08:25:07 +00:00
jasper
cbcacca97f do not show --ssl2 commandline option if built with an OpenSSL without SSLv2 support.
from brad
2012-07-16 08:49:31 +00:00
ajacoutot
f6c4c2aeb4 Update to Botan 1.10.3.
A change in 1.10.2 accidentally broke ABI compatibility with
1.10.1 and earlier versions, causing programs compiled against
1.10.1 to crash if linked with 1.10.2 at runtime.

Recent versions of OpenSSL include extra information in ECC
private keys, the presence of which caused an exception when
such a key was loaded by botan. The decoding of ECC private
keys has been changed to ignore these fields if they are set.

from Brad
2012-07-15 08:12:13 +00:00
jasper
0abc6be283 consistent spelling of Node.js, as used on the official web site 2012-07-12 21:42:53 +00:00
naddy
4bd8b1fcb9 remove gnupg's idea flavor here, too 2012-07-12 20:57:51 +00:00
naddy
5e1bcbad44 The American/European/Japanese patents on IDEA have expired. Remove
the flavor and just include it by default.  ok zinke@
2012-07-12 16:32:47 +00:00
sebastia
4ef301dd98 Update libgsasl to 1.8.0
OK naddy@
2012-07-12 16:01:53 +00:00
ajacoutot
290df0134f -gnomint 2012-07-10 19:16:35 +00:00
ajacoutot
278bb3cacd Bad robert! 2012-07-10 19:16:08 +00:00
ajacoutot
245e0ca14b Remove, in the way, not maintained......
This software had deprecated warnings for years and didn't manage to update
so kill it with fire.

ok jasper@
2012-07-10 19:15:23 +00:00
jasper
144e2930d7 handle multiple lua versions, for now everything builds with the "old" 5.1 in the new location.
use FLAVOR=lua52 to use lua 5.2 with these ports.
2012-07-10 15:22:44 +00:00
ajacoutot
4f785e279f Unbreak with gnutls>=3. 2012-07-09 18:38:45 +00:00
ajacoutot
e0b037b6ec Better patch. 2012-07-09 13:29:51 +00:00
ajacoutot
5e3a59ff36 -prelude 2012-07-09 09:05:42 +00:00
ajacoutot
c03b7b59ed Remove prelude. It's been unmaintained for years. Updating to a newer
version would require a lot of work and we have no maintainer; not to
mention the source code is not available right now.
A "security" software that is unmaintained is something that should live
in an attic.

ok jasper@ sthen@
2012-07-09 09:05:22 +00:00
giovanni
e6cdd4e74c Use devel/llvm instead of the bundled one on $LLVM_ARCHS
help & ok sthen@ (Maintainer)
2012-07-08 21:24:58 +00:00
ajacoutot
5c286b8833 Major update to gnutls-3.0.21.
ok jasper@
2012-07-08 09:02:10 +00:00
jasper
49359fb413 zap this old, broken and unmaintained cruft.
ok msf@ (MAINTAINER), aja@
2012-07-06 16:37:24 +00:00
jasper
af344bb14d unhook tinyca 2012-07-06 16:37:03 +00:00
ajacoutot
ed9f7f03ac Bugfix update to gnutls-2.12.20.
* fixed memory leak in PKCS #8 key import
2012-07-05 06:36:59 +00:00
ajacoutot
60c9f4f1b8 Update to libtasn1-2.13. 2012-07-05 06:21:04 +00:00
ajacoutot
b19dd97d26 Update to Botan 1.10.2.
from Brad
2012-07-04 12:03:42 +00:00
mpi
862513d4e1 Unbreak the configure step with systrace, no package change, issue and fix
reported by Juan Francisco Cantero Hurtado.
2012-07-02 16:36:33 +00:00
jasper
4a3b232786 Allow building against OpenSSL without SSLv2 support.
from brad
2012-06-29 08:33:20 +00:00
bluhm
df1e76062d update p5-IO-Socket-SSL to 1.76 2012-06-28 23:43:41 +00:00
jasper
e0b7a40c35 Allow building against OpenSSL without SSLv2 support.
from brad
2012-06-28 18:57:29 +00:00
jasper
07f3a1c4cf Allow building against OpenSSL without SSLv2 support.
from brad
2012-06-28 18:49:54 +00:00
jeremy
0c9db2e825 Update node-bcrypt to 0.6.0, works with node 0.8.0.
Build process changed from waf to gyp, but no patches required.
2012-06-28 17:33:05 +00:00
rpointel
fc05848416 regen PLIST to permit to build with Python 3.2.3, bump revision. 2012-06-27 19:01:51 +00:00
jasper
9041fc74ae - these patches (or chunks) are not needed anymore since arpa/inet.h -r1.12 2012-06-26 14:40:06 +00:00
jasper
7ce355632a let this work if sslv2 is disabled, from Brad 2012-06-26 10:12:21 +00:00
jasper
abf0631829 let assl work if sslv2 is disabled, from Brad 2012-06-26 10:07:27 +00:00
robert
7f7d57b857 --enable-xml-log is needed for both the client and the server so enable
it by default
2012-06-25 18:54:07 +00:00
naddy
fd3f2648f8 explicitly include <sys/param.h> before <sys/sysctl.h> and don't rely on
it being pulled in by some other header file
2012-06-25 14:06:26 +00:00
okan
0848a8a56c WANTLIB sync after ImageMagick update; ok sthen 2012-06-19 12:57:32 +00:00
jasper
5a01675bf3 ${HOBBITS} take maintainership 2012-06-19 09:48:04 +00:00
sthen
cc7f90c406 SECURITY update to clamav 0.97.5
ClamAV 0.97.5 addresses possible evasion cases in some archive formats
(CVE-2012-1457, CVE-2012-1458, CVE-2012-1459).  It also addresses stability
issues in portions of the bytecode engine.  This release is recommended for all
users.
2012-06-16 10:34:54 +00:00
gonzalo
4487e8afed Update for Jailkit to 2.15, patch-configure is not needed anymore
(applied upstream), while here, USE_GROFF is not needed and zap some
white space.

Ok sebastia@ (maintainer), aja@
2012-06-15 13:50:58 +00:00
jasper
8afd5febb8 add this 2012-06-13 15:27:24 +00:00
jasper
87d2271924 oh crumbs...upstream rolled a new release with out patches. bump to 1.1.1 2012-06-13 15:26:16 +00:00
jasper
77ba102a3d sync 2012-06-13 15:14:31 +00:00
jasper
84c8aa8a35 import libpwquality 1.1.0
The libpwquality library purpose is to provide common functions for
password quality checking and also scoring them based on their apparent
randomness. The library also provides a function for generating random
passwords with good pronounceability. The library supports reading and
parsing of a configuration file.

including patches that have been committed upstream to disable pam, as
suggested by and ok aja@
2012-06-13 15:13:09 +00:00
dcoppa
d5ab1e6c92 Fix crash without a deactivate callback: code was checking for
->activate existing instead of ->deactivate
(upstream git commit 3d2e54526454ed1436b6436dffb0e8769fdbff1d)

ok robert@ (maintainer)
2012-06-13 09:52:23 +00:00
sthen
3e7efbda74 subst /usr/local for ${TRUEPREFIX}, reminded by ajacoutot, ok aja mcbride 2012-06-09 13:03:40 +00:00
mcbride
f67ddd6517 +password-gorilla 2012-06-09 12:35:01 +00:00
mcbride
2cb771857d cross-platform password manager (supports databases in Password Safe format)
ok and fixes from sthen@
2012-06-09 12:31:55 +00:00
pascal
ec51964fb9 Use PROPERTIES to check for be/le.
ok jasper@ naddy@
2012-06-04 21:04:42 +00:00
pascal
ee654d693d Use PROPERTIES to check for be/le.
ok naddy@ jasper@
2012-06-04 21:03:07 +00:00
jasper
525669c457 remove some files that live in PFRAG.no-python3 already
prompted by rd thrush
2012-05-26 09:26:53 +00:00
jasper
13607ba6bc - security update of py-crypto to 2.6
Fixes  CVE-2012-2417, PyCrypto <= 2.5 insecure ElGamal key generation.

ok mpi@ (MAINTAINER)
2012-05-25 12:13:01 +00:00
jasper
1dd4aa573a adjust for node.port.mk location change 2012-05-23 15:13:20 +00:00
bluhm
f91b4f1bab update p5-IO-Socket-SSL to 1.74
with wen heping
2012-05-22 22:52:38 +00:00
naddy
e5b9105f73 Fix build on big endian architectures:
* For samdump2, use the bswap.h wrapper header from the main source.
* Also add bswap64, which is required by nteightxl.c.

ok benoit@
2012-05-20 20:13:39 +00:00
ajacoutot
d31ed2038a Fix several warnings.
ok rpointel@ (maintainer)
2012-05-20 17:04:55 +00:00
ajacoutot
9866105e83 No need for @extraunexec here, @extra is enough. 2012-05-18 13:05:15 +00:00
ajacoutot
9aa5ebca2b typo: Zabbix -> Samhain 2012-05-18 11:30:09 +00:00
robert
2bb0ee1cd7 Add support for te samhain in-binary password so that remote logging
works and add a readme on how to set this up properly.
2012-05-18 10:28:05 +00:00
ajacoutot
f7d38c649a Unbreak on a clean box: fix the way FLAVOR are handled.
spotted by sthen@

ok sthen@ robert@ (maintainer)
2012-05-16 13:47:18 +00:00
sthen
ee0e3c5d53 SECURITY update to pidgin-otr 3.2.1; CVE-2012-2369
Format string security flaw could be exploited by a remote attacker
to cause arbitrary code to be executed on the user's machine.
2012-05-16 12:18:29 +00:00
ajacoutot
61d2f52129 Fix dependency loop; spotted by robert@ 2012-05-16 09:36:53 +00:00
jasper
cf8f4d9083 fold PFRAG.shared into PLIST 2012-05-15 20:36:28 +00:00
jasper
fa4d879b11 adjust to new lua.port.mk 2012-05-15 15:15:19 +00:00
ajacoutot
9210b9f432 Make -server and -client RUN_DEPENDS on -main.
Make DESCR consisten.

ok robert@ (maintainer)
2012-05-15 09:47:03 +00:00
ajacoutot
9c6bcdb4d1 Tweak error message; FLAVORs can be either conflicting or unknown.
No pkg change.

ok robert@ (maintainer)
2012-05-15 07:20:37 +00:00
sthen
72078a5e2a update to Digest::BubbleBabble 0.02 from dhill
- update license marker, it is not specifically "artistic" it is "under
the same terms as perl itself" so just use "Perl".
2012-05-14 09:33:48 +00:00
dcoppa
0fe34d24b6 Re-enable smartcard support: it works again with rthreads.
Internal CCID driver only, as it was before.

OK pea@ (maintainer)
2012-05-14 08:49:54 +00:00
bluhm
4824b87b8e update p5-Net-SSLeay to 1.48 2012-05-13 12:49:11 +00:00
jasper
d77c3fdbb8 tweak MASTER_SITES 2012-05-11 21:24:22 +00:00
jasper
ddda8698fa regen PLIST 2012-05-11 20:49:58 +00:00
robert
05fb56a5ef +samhain 2012-05-11 09:39:28 +00:00
ajacoutot
34c989a247 No need to specify localstatedir, gnu CONFIGURE_STYLE takes care of it.
Remove content of /var/samhain/* with pkg_delete -c.

ok robert@ (maintainer)
2012-05-11 09:38:28 +00:00
robert
14ae1c3418 import of samhain:
Samhain is an open source file integrity and host-based intrusion
detection system for Linux and Unix. It can run as a daemon process,
and and thus can remember file changes - contrary to a tool that runs
from cron, if a file is modified you will get only one report, while
subsequent checks of that file will ignore the modification as it is
already reported (unless the file is modified again).

ok jasper@
2012-05-11 09:24:23 +00:00
william
ca2ad28cdb conflict with logtail; spotted by Markus Lude, thanks.
ok sthen
2012-05-11 03:35:03 +00:00
jasper
b7292ed89a - set NO_REGRESS where applicable and add a comment as to why it's set
- run the tests of node-pg during 'regress' not 'build'

with and ok sthen@
2012-05-10 08:41:39 +00:00
jasper
40cced5fcb unbreak on mips64* 2012-05-09 16:29:23 +00:00
ajacoutot
a0e734b938 Bugfix update to gnutls-2.12.19. 2012-05-09 08:06:53 +00:00
jasper
3681ae85d3 - bump node requirement to the latest and greatest 2012-05-09 06:39:04 +00:00
jasper
c9b9ea117b - bump after recent node.port.mk change 2012-05-08 17:11:02 +00:00
kili
41ecc945ab + hs-cprng-aes 2012-04-28 19:45:39 +00:00
kili
1ced715c56 Bump. 2012-04-28 19:34:54 +00:00
kili
6086506f42 Simple crypto pseudo-random-number-generator with really good
randomness property.

ok jasper@
2012-04-28 19:21:53 +00:00
ajacoutot
6a25f21ca1 Regen PLIST.
req by espie@
2012-04-28 14:08:53 +00:00
ajacoutot
689f54b24a --localstatedir=/var is the default now. 2012-04-28 10:52:08 +00:00
ajacoutot
727ca6dbc2 Update to assl-1.0.0.
from David Hill (maintainer)
2012-04-28 09:26:50 +00:00
benoit
745ecd3b43 - update ophcrack to 3.4.0
- update patches

ok ajacoutot@
2012-04-28 08:28:22 +00:00
okan
821c19ae2d +kc 2012-04-25 14:07:38 +00:00
okan
11efaba3dc import kc; feedback and ok sthen@, merdely@
Console based password storing application using an encrypted XML
document as its database.

updated and tweaked submission from LEVAI Daniel
2012-04-25 14:04:06 +00:00
espie
4ed7caa04f first pass at handling sqlite3 move 2012-04-23 17:15:17 +00:00
benoit
3e975b5cb3 - update samdump2 to 3.0.0
- remove USE_GROFF
- update patches
2012-04-21 15:16:27 +00:00
gonzalo
3b880fd9c8 Update for zkt to 1.1.0, with change of default
timers,bug fixes and new option -M for zkt-ls.

Tested on i386. USE_GROFF is not needed here.

OK aja@, gsoares@
2012-04-20 20:04:34 +00:00
okan
9ec351410d +p5-Crypt-RC5 2012-04-19 14:53:39 +00:00
okan
51adc5a6ca import p5-Crypt-RC5
Crypt::RC5 is a Perl implementation of the RC5 encryption algorithm.

RC5 is a fast block cipher designed by Ronald Rivest for RSA Data Security
(now RSA Security) in 1994. It is a parameterized algorithm with a variable
block size, a variable key size, and a variable number of rounds.
This particular implementation is 32 bit. As such, it is suggested that a
minimum of 12 rounds be performed.

from Olivier Cherrier.

ok gsoares@
2012-04-19 14:52:43 +00:00
gsoares
19c53271c2 update p5-GnuPG to 0.19
changes:
* POD typo fix. (patch by Salvatore Bonaccorso) [RT72600]
* Don't use deprecated shared memory mode (patch by Adam Benjamin)
* Log format. (pointed out by Adam Benjamin)
* command output parsing for newer gnupg (patch by Adam Benjamin)
2012-04-18 14:44:56 +00:00
gsoares
8ef9896bd6 update p5-IO-Socket-SSL to 1.66
OK bluhm@
2012-04-18 14:25:29 +00:00
naddy
ed872aafd0 * honor CFLAGS (will also build on alpha now)
* drop obsolete patches for i386 a.out
* don't require MMX support on i386

ok benoit@
2012-04-13 09:12:21 +00:00
bluhm
fe8052e9b4 update p5-Net-SSLGlue to 1.01 2012-04-11 18:55:49 +00:00
bluhm
4789a0b4f8 update p5-Net-SSLeay to 1.47 2012-04-11 18:51:49 +00:00
bluhm
f5375bde7b update p5-IO-Socket-SSL to 1.64
from wen heping
2012-04-11 18:24:23 +00:00
gsoares
feb91d984f * apply correctly patches/patch-appdefs_resp
* while here adjust post-extract target switching LOCALBASE to TRUEPREFIX
* tidy up whitespaces in Makefile around CATEGORIES=

OK aja@
2012-04-09 18:21:18 +00:00
gonzalo
5b62b1f98a update for Amap, with this fixes:
* Fix for IPv6 introduced in v5.3,
        ! This is a release to fix IPv6 UDP port scanning as no other tool
        ! currently exists to do that.
        ! Beside this, amap is outdated, and nmap should be prefered
        * Fixed UDP port scanning for IPv6
        * Disabled web update
        * added printing of [] brackets around IPv6 addresses (required)
        * Fixed a bug in amapcrap that the trigger would not display
	correctly

USE_GROFF is not needed and maintainer request drop maintainership.
ok sthen@ ok aja@
2012-04-09 15:04:53 +00:00
sthen
8e97f8bcf7 Update security/p5-Catalyst-Plugin-Authorization-Roles to version 0.09.
from Andreas Voegele
2012-04-08 22:02:37 +00:00
sthen
fa0ac5a54a Update security/p5-Catalyst-Plugin-Authorization-ACL to version 0.15.
from Andreas Voegele
2012-04-08 22:02:35 +00:00
sthen
2578013d9c Update security/p5-Catalyst-Plugin-Authentication to version 0.10018.
from Andreas Voegele
2012-04-08 22:02:33 +00:00
sthen
015bbd9ed7 Update security/p5-Catalyst-Authentication-Store-DBIx-Class to version
0.1502.

from Andreas Voegele
2012-04-08 22:02:31 +00:00
sthen
f251882cfe Modify security/p5-Catalyst-Plugin-Authentication-Store-DBIC to use
MRO::Compat instead of the deprecated module NEXT.  Disable TEST_POD as
the POD coverage tests complain about undocumented code.
Catalyst::Plugin::Authentication::Store::DBIC is deprecated.  Use
Catalyst::Authentication::Store::DBIx::Class instead.
From Andreas Voegele's repo
2012-04-07 16:46:05 +00:00
ajacoutot
e5c8b593e1 Update to new stable branch: 1.5.0 (compatible with 1.4). 2012-04-04 06:59:23 +00:00
ajacoutot
834fc949ea Some cleanups:
* get the SHARED_LIBS from shared_libs.log
* sanitize COMMENT
* tighten LIB_DEPENDS
2012-04-04 06:45:27 +00:00
ajacoutot
94ead82f69 Use MASTER_SITE_GNU. 2012-04-04 06:27:38 +00:00
ajacoutot
39247360ed Pick a less generic variable for a MODULE: VERSION -> NPM_VERSION
no objection from jeremy@
2012-04-04 05:48:15 +00:00
jeremy
1f3fa71a68 Hookup new node ports 2012-04-03 18:58:01 +00:00
jeremy
8894e9819d Import node-bcrypt 0.5.0.
BCrypt password hashing library for nodejs, with both asynchronous and
synchronous versions.

OK sthen@
2012-04-03 18:41:57 +00:00
ajacoutot
c4dabce681 Update to ipguard-1.04.
rc script not included from the original diff because ipguard needs to
be teached to return the proper code when failing to start.

maintainer timeout
from Gonzalo L. R.
2012-03-30 07:24:45 +00:00
sthen
88ea72915d Change SEPARATE_BUILD=(concurrent|simple) to Yes; bsd.port.mk doesn't
make a distinction between these.  ok aja@ dcoppa@
2012-03-29 13:38:12 +00:00
pea
d151b2c72e Update to 2.0.19
ok ajacoutot@
2012-03-28 12:35:41 +00:00
ajacoutot
ba9bc2aa60 Update to p11-kit-0.12. 2012-03-23 13:22:38 +00:00
fgsch
2b3993467c switch to libc getline(3). 2012-03-21 23:49:02 +00:00
sthen
b7b9359510 update to gnutls 2.2.18, OK ajacoutot@
- minitasn1: Upgraded to libtasn1 version 2.12 (pre-release).
- Corrected SRP-RSA ciphersuites when used under TLS 1.2.
- Fixed leaks in key generation.
2012-03-21 16:05:36 +00:00
sthen
8372c80d95 update to libtasn1 2.12; corrects SECURITY-related DER decoding issue,
see http://www.openwall.com/lists/oss-security/2012/03/20/3

ok ajacoutot@
2012-03-20 14:01:14 +00:00
ajacoutot
6e5d41bdfb -gksu-polkit 2012-03-19 17:20:28 +00:00
ajacoutot
4bb06d1a35 Retire. It's mostly unmaintained and pkexec(1) from polkit is the way to
go nowadays.
2012-03-19 17:20:08 +00:00
naddy
17f2d9860d getline -> get_line 2012-03-18 16:50:09 +00:00
naddy
c51deb119a getline -> get_line 2012-03-17 22:42:26 +00:00
sthen
418282d256 update to ClamAV 0.97.4, minor bugfixes and detection improvements
- merge PFRAG.shared into PLIST, this is SHARED_ONLY
2012-03-15 22:04:44 +00:00
ajacoutot
62e4351341 Drop maintainership. 2012-03-15 13:38:33 +00:00
sebastia
7534deef5a minor update to 2.14
from gonzalo AT x61.com.ar via ports@, thanks

OK ajacoutot@
2012-03-12 17:56:44 +00:00
dcoppa
cc4501904b Fix an error into configure wrt libcurl checking and regen WANTLIB
accordingly

ok pea@ (maintainer)
2012-03-09 12:11:23 +00:00
ajacoutot
a89a75cd04 Garbage collect the /dev/arandom patches.
from Brad
ok landry@ sthen@
2012-03-08 12:13:00 +00:00
pea
5954d0a55c Update to 2.0.3
ok dcoppa@
2012-03-07 20:42:36 +00:00
ajacoutot
e182004240 Minor update to gnutls-2.12.17. 2012-03-06 16:37:49 +00:00
dhill
d018e19204 update to 0.12.2 2012-02-28 02:25:30 +00:00
landry
fb31069d9c Update to nss 3.13.3.
This release actively distrusts the MITM subCA issued by TrustWave, see
details at https://bugzilla.mozilla.org/show_bug.cgi?id=724929 (also
#727167 & #728617). While here, depend on nspr 4.9.
2012-02-22 20:00:55 +00:00
dcoppa
1b6e355dec Update to libfprint-0.4.0
OK robert@ (maintainer)
2012-02-22 09:30:19 +00:00
ajacoutot
04f34342b4 CONFIGURE_STYLE autoconf already appends gnu, so no need to explicitely
list it.

ok sthen@
2012-02-21 16:21:41 +00:00
ajacoutot
af3c8e57c9 Unbreak after recent intltool update: AUTOCONF_VERSION 2.59 -> 2.60
build breakage reported by fgsch@
2012-02-21 09:13:50 +00:00
landry
e1119cc19f Update to nss 3.12.2, needed by mozilla 11+.
Tested on alpha amd64 hppa i386 powerpc sparc64, no change in regress
output.
2012-02-20 09:18:05 +00:00
ajacoutot
aad00d8f5b Update to p11-kit-0.11. 2012-02-19 19:08:37 +00:00
mpi
781ee73feb Update to py-crypto 2.5 and add a python3 flavor.
mostly from and ok rpointel@
2012-02-17 09:32:18 +00:00
ajacoutot
c8731b53b3 Fix a NULL ptr dereference (from upstream).
reported by "remco"
ok naddy@ sthen@
2012-02-07 06:36:39 +00:00
espie
0322fed35a properly re-conflict gpg1/2. Noticed by naddy@
okay ajacoutot@, pea@
2012-01-31 10:51:48 +00:00
okan
976099cbda update to 4.01_01; from LEVAI Daniel.
ok kevlo@ (MAINTAINER)
2012-01-26 15:37:48 +00:00
sebastia
904edf430c Fix problem with bulk build, introduced when importing qca-ossl:
* renaming libqca to libqca2 for the qca2 port
  * removed conflict line from qca2 PLIST
  * bumped qca2
  * updated conflict line in qca PLIST
  * bumped qca2
  * updated WANTLIB of qca-ossl and bumped
  * hooked qca2 up to the build in the ports/security/Makefile

OK shadchin@, espie@
2012-01-26 09:25:46 +00:00
ajacoutot
e128a0bf97 Put these users in the daemon class to be consistent with all the other
ones in ports.

discussed with and ok sthen@
2012-01-26 08:03:56 +00:00
bluhm
bc9324b36a update p5-Net-SSLGlue to 0.9 2012-01-25 21:56:16 +00:00
bluhm
e58af54072 update p5-IO-Socket-SSL to 1.54 2012-01-25 21:51:16 +00:00
ajacoutot
d631672629 Minor update to p11-kit-0.10. 2012-01-24 09:46:04 +00:00
espie
ffc317cb53 comment change -> descr checkum change -> rev bump 2012-01-23 16:59:38 +00:00
kili
06a8c737f1 Sort. 2012-01-22 17:24:24 +00:00
kili
6d786caa73 Update to 0.8.
ok ajacoutot@
2012-01-22 17:21:54 +00:00
kili
4a8d0287db Hook new hs-* ports. 2012-01-22 17:19:43 +00:00
kili
9543ca2ef5 Skein (http://www.skein-hash.info/) is a family of fast
secure cryptographic hash functions designed by Niels
Ferguson, Stefan Lucks, Bruce Schneier, Doug Whiting, Mihir
Bellare, Tadayoshi Kohno, Jon Callas and Jesse Walker.
This package uses bindings to the optimized C implementation of
Skein.  We provide a high-level interface (see module "Crypto.Skein")
to some of the Skein use cases.  We also provide a low-level interface
(see module "Crypto.Skein.Internal") should you need to use Skein
in a different way.
Currently we have support for Skein as cryptographic hash function
as Skein as a message authentication code (Skein-MAC).  For examples
of how to use this package, see "Crypto.Skein" module documentation.

ok sthen@
2012-01-22 17:17:51 +00:00
kili
61d6a9fd8a To store passwords securely, they should be salted, then hashed
with a slow hash function. This library uses PBKDF1-SHA256, and
handles all the details.

ok sthen@
2012-01-22 17:16:57 +00:00
kili
ca7604ff1e This package contains code for generating high quality random numbers
that follow either a uniform or normal distribution.  The generated
numbers are suitable for use in statistical applications.

The uniform PRNG uses Marsaglia's MWC256 (also known as MWC8222)
multiply-with-carry generator, which has a period of 2^8222 and
fares well in tests of randomness.  It is also extremely fast,
between 2 and 3 times faster than the Mersenne Twister.

Compared to the mersenne-random package, this package has a more
convenient API, is faster, and supports more statistical distributions.

ok sthen@
2012-01-22 17:16:04 +00:00
kili
8629a4fd7b A platform independent method to obtain cryptographically strong entropy
(CryptAPI on Windows, urandom everywhere else, patches welcome).

ok sthen@
2012-01-22 17:15:24 +00:00
ajacoutot
b941f6d166 /usr/local -> ${TRUEPREFIX} 2012-01-21 23:13:59 +00:00
sthen
a58fb78b01 Add an rc.d script for clamav-milter, from Benny 2012-01-21 23:02:57 +00:00
kili
dc3e232a05 Sigh. This needs yet another bump after the update of hs-base64-bytestring.
BTW: whenever you get error messages about missing or broken packages from
running ghc-pkg, some port is probably missing a bump.
2012-01-21 17:19:47 +00:00
kili
e1cdb4c06a This needs a bump after the update of hs-attoparsec. 2012-01-21 12:03:15 +00:00
kili
2e0de0ca17 Update to hs-certificate-0.8.1.
ok (portswise) ajacoutot@, sthen@
2012-01-20 20:34:21 +00:00
kili
60f37e3862 Update to hs-certificate-0.9.5.
ok (portswise) ajacouto@, sthen@
2012-01-20 20:33:17 +00:00
kili
fa549180d2 Update to hs-asn1-data-0.6.1.2.
ok (portswise) ajacoutot@, sthen@
2012-01-20 20:32:16 +00:00
sthen
1087a247ad tweaks to the passwdqc port:
- adjust COMMENT to point out that this includes a password generator
(pwqgen; defaults to reasonably memorable passwords with a decent keyspace).

- manpages are fine with mandoc, so remove USE_GROFF

- adjust whitespace
2012-01-20 01:01:49 +00:00
sthen
90c5bd4b76 update to wpa_supplicant 0.7.3 - as noted by Martin Pelikan the version
in-tree is currently broken and this fixes it for him.
2012-01-19 16:14:11 +00:00
ajacoutot
d50765ea72 Remove, it's not nor won't be used by anything.
ok robert@
2012-01-19 10:22:43 +00:00
ajacoutot
0ec201f184 Tweak DESCR. 2012-01-17 15:34:50 +00:00
sthen
83b570a541 regen patches, no package change (i.e. this doesn't fix it. ;) 2012-01-14 12:57:10 +00:00
sthen
48cda88214 qca-ossl was not linked to the build; add it 2012-01-13 12:32:57 +00:00
ajacoutot
226cf67bc3 Minor update to gnutls-2.12.16.
* corrected functionality of gnutls_record_get_direction()
2012-01-09 14:03:59 +00:00
sthen
bf9111f925 fix bogus pkgname 2012-01-07 19:09:45 +00:00
shadchin
a56a959d27 Import qca-ossl.
ok sebastia@, Amit Kulkarni, Vadim Zhukov (Maintainer)
2012-01-07 16:55:13 +00:00
sthen
3a78685d34 drop Andreas Voegele as maintainer as per his request. 2012-01-07 13:48:39 +00:00
sthen
859422beb1 drop Vadim Zhukov as maintainer, as per his request. 2012-01-07 13:45:24 +00:00
dhill
c912cabd10 update to 0.12.0 2012-01-07 01:47:53 +00:00
sthen
10a7aebff8 update libsrtp to 1.4.4. use -fPIC when building the static library,
so that it may be linked with shared objects. update homepage, enable tests.
ok dhill@ (maintainer).
2012-01-06 00:45:06 +00:00
sebastia
a6ca379d6a libfwbuilder is gone, merged into fwbuilder
OK sthen@
2012-01-04 08:59:57 +00:00
sebastia
baaa2ca0d4 update fwbuilder to 5.0.1
libfwbuilder got merged into fwbuilder.

Besides still not fully supporting all new features of recent OpenBSD pf,
it generally works well.

feedback and OK sthen@
2012-01-04 08:57:50 +00:00
bluhm
8f84f76b28 - update p5-IO-Socket-SSL to 1.53
- no USE_GROFF
2012-01-01 12:22:44 +00:00
kili
1ea5b092a3 This needs a bump, too, according to my build iterations. 2011-12-31 22:29:47 +00:00
kili
94f4cad048 Bump after previous hs- library updates.
Necessary because of ghc's over-aggressive inlining
which causes ABI changes in libraries depending on
updated libraries.

ok jasper@
2011-12-31 22:19:45 +00:00
ajacoutot
74fb5c138b Sort PLIST. 2011-12-30 11:17:08 +00:00
bluhm
f60b6888a7 update p5-Net-SSLeay to 1.42
from wen heping and Gleydson Soares
2011-12-29 11:57:21 +00:00
bluhm
95c152f399 In order to update p5-Net-SSLey to 1.42, p5-POE-Component-SSLify
has to be fixed first.  Convert the version check from /1.3/ regex
to >= 1.3 numerical comparison.
ok sthen@
2011-12-29 11:50:36 +00:00
mpi
ea4e34c722 Update to py-crypto 2.4.1
Properly honor CFLAGS and build the fastmath module, with inputs from
rpointel@

ok rpointel@, benoit@
2011-12-28 09:56:38 +00:00
ajacoutot
d195f120e6 Unbreak. 2011-12-22 10:00:35 +00:00
pea
3ebee1957e Install sample and rcscript before fragments to avoid wrong permissions
with the ldap flavor.

ok ajacoutot@
2011-12-21 14:36:15 +00:00
sthen
91faa22c52 Where a program with an rc script _requires_ a certain command line
parameter to daemonize, move the parameter from daemon to daemon_flags,
so that the user cannot inadvertently prevent it from daemonizing by
adjusting the flags.

Discussed with ajacoutot and schwarze, this method was suggested
by schwarze@ as a simpler alternative to my diff. ok aja@
2011-12-17 22:01:12 +00:00
jasper
9901530052 drop hidden gmake dependency only needed by autogen.sh, but not in the
actual build
2011-12-12 18:18:15 +00:00
jasper
7437487788 regen 2011-12-12 09:11:10 +00:00
sthen
38fa0cfdea update to stunnel 4.50; use better MASTER_SITES while there. 2011-12-08 13:42:05 +00:00
jasper
db3e86623f - add missing build dependency
- zap trailing whitespace

ok sthen@ (MAINTAINER)
2011-12-07 09:29:02 +00:00
espie
3b98dfbbf1 somehow uses libtoolize during autogen.sh, even if it doesn't use libtool
later (found out by dpb -J, again)
2011-12-05 10:41:44 +00:00
ajacoutot
9986287cc4 oops... "quoi encore ?!" espie@ 2011-12-02 22:02:43 +00:00
ajacoutot
b8b6d1c346 qca2/qca conflicts. 2011-12-02 22:00:34 +00:00
shadchin
1f996719aa Update to 2.0.3.
ok aja@, benoit@, Amit Kulkarni
2011-12-01 19:02:48 +00:00
dhill
7d606f23c6 +libsrtp 2011-11-30 21:19:13 +00:00
dhill
d9383761dd import libsrtp
The libSRTP library is an open-source implementation of the Secure
Real-time Transport Protocol (SRTP) originally authored by Cisco
Systems, Inc.

ok benoit@
2011-11-30 21:16:42 +00:00
sthen
1532a55649 update to stunnel 4.49 2011-11-30 19:37:21 +00:00
dcoppa
1eed8714f8 clearer comment 2011-11-28 15:38:38 +00:00
dcoppa
caf4d0df5c Temporarily disable Smartcard support due to issues with mixing gnu pth
and libpthread. See: http://marc.info/?l=openbsd-ports&m=132197024628355

Ok pea@ (maintainer)
2011-11-27 12:48:30 +00:00
pirofti
9e968f07f3 Drop maintainership 2011-11-27 11:12:46 +00:00
pirofti
e303d6c2df Drop maintainership. 2011-11-27 11:08:48 +00:00
ajacoutot
f4107226d0 Unbreak. Wrong version of this port was imported. 2011-11-26 10:55:17 +00:00
benoit
9536fab45e - update john to 1.7.9
- regen patches

ok ajacoutot@, gsoares@
2011-11-26 10:31:37 +00:00
benoit
d7875109e6 - update libssh2 to 1.3.0
- minor SHARED_LIBS bump
- regen PLIST

ok ajacoutot@
2011-11-26 09:25:46 +00:00
jasper
47679d0556 sync 2011-11-26 09:08:22 +00:00
jasper
79ca3f4145 import botan 1.10.1
Botan is a crypto library written in C++. It provides a variety of
cryptographic algorithms, including common ones such as AES, MD5, SHA,
HMAC, RSA, Diffie-Hellman, DSA, and ECDSA, as well as many others that
are more obscure or specialized. It also offers X.509v3 certificates
and CRLs, and PKCS #10 certificate requests. A message processing
system that uses a filter/pipeline metaphor allows for many common
cryptographic tasks to be completed with just a few lines of code.
Assembly optimizations for common CPUs, including x86, x86-64, and
PowerPC, offers further speedups for critical tasks such as SHA-1
hashing and multiple precision integer operations.

from brad
tested by aja@ and me@
ok aja@
2011-11-26 09:07:52 +00:00
eric
04c2d8718b upgrade to 0.13
prodded by and ok rpointel@
2011-11-25 20:19:30 +00:00
ajacoutot
04b2a387a8 Minor update to p11-kit-0.9. 2011-11-24 15:01:26 +00:00
gsoares
b6c61ceb85 update to 0.18
ok sthen@
2011-11-22 23:42:34 +00:00
jasper
ee21fc640b fix tests by removing a stupid bashism. 2011-11-22 15:36:33 +00:00
jasper
4655d2ff68 - just because it links with libltdl, doesn't mean it needs USE_LIBTOOL=gnu. 2011-11-22 15:34:10 +00:00
ajacoutot
797204e9b7 SECURITY update to gnutls-2.12.14.
Fix a possible buffer overflow.
2011-11-21 14:48:09 +00:00
nigel
de798d08da Removing CVS markers from within the patch
reported by Mark Patruck
2011-11-18 23:31:01 +00:00
nigel
c9c77840a6 Update to 3.13.1 with ckbi 1.88 changes include
SSL 2.0 is disabled by default.

A defense against the SSL 3.0 and TLS 1.0 CBC chosen plaintext attack
demonstrated by Rizzo and Duong (CVE-2011-3389) is enabled by default.

SHA-224 is supported.

additional blacklist CA's.  Malaysia-based DigiCert Sdn. Bhd

Ok sthen@
2011-11-18 12:32:37 +00:00
espie
cbb5e400a1 shrink, this lives in bsd.port.mk itself now 2011-11-18 11:16:23 +00:00
jeremy
16703d23fa Update ruby ports to deal with the regress changes to ruby.port.mk.
Start using MODRUBY_REGRESS with ruby, rspec2, and testrb entries.
Switch away from manual do_regress targets where possible.  Add
some patches to make regress tests run for some ports.
2011-11-17 16:08:00 +00:00
sthen
52c177c5ac bumps; net/if.h 2011-11-16 00:20:08 +00:00
dhill
d491724463 update to 0.11.0 2011-11-14 17:06:08 +00:00
ajacoutot
b4a21348f0 Build a gnupg package with all available FLAVORs so that we can spot
breakage more easily.
2011-11-13 22:44:00 +00:00
ajacoutot
6973ee7fdc Unbreak the "card" FLAVOR after the libusb->libusb-compat switch, spotted
by naddy@ (thanks).
2011-11-13 22:39:50 +00:00
ajacoutot
fcbe5f3ae2 Sync dependencies after move from libusb to libusb-compat and fix a
couple of fallouts. Note that these ports are only the ones that used to
have a direct dependency on devel/libusb so there may be some other
hidden ports that may break because of the switch. If that's the case,
no need to start ranting all over but instead tell me which one(s)
break. Thanks.

Note: sysutils/nut hasn't been fixed yet but will be today.
2011-11-13 13:54:04 +00:00
stsp
83a302b911 Fix '/usr/local/bin/pinentry' symlink in -main package.
It was pointing to the binary installed by the -gtk2 package.
Also, tweak package descriptions to make more sense.
found by, and ok, naddy
2011-11-08 16:55:19 +00:00
nigel
215311df0d remove patch to hydra man page. Thanks to schwarze@ for
updating mandoc, the syntax error is no longer displayed.
2011-11-05 21:25:52 +00:00
nigel
43cbd6d89e Update hydra from v5.4 to v7.1
Ok and Comments rpointel@ brad@ benoit@
2011-11-05 15:24:38 +00:00
ajacoutot
43dc057a35 Fix DEPENDS. 2011-11-04 13:36:16 +00:00