5766 Commits

Author SHA1 Message Date
sthen
e7e89a6669 disable pecl-libsodium for php 7.2, use the built-in support instead 2018-12-11 11:42:23 +00:00
sthen
b8441a656c fix symlinkable ini-file, it should be "sodium" not "libsodium"
reported by johnwmail at gmail
2018-12-11 10:51:06 +00:00
jca
c459f7c54f Unbreak on gcc archs by rewriting C99 construct
Spotted on sparc64 by landry@ who had the same diff.
ok aja@ (maintainer) landry@
2018-12-11 10:46:06 +00:00
ajacoutot
edd203cd90 Don't hardcode user in $deamon (i.e. -u foo).
Use daemon_flags for this, it's what it's for.

ok sthen@
2018-12-09 12:05:25 +00:00
ajacoutot
1e480d204a Update to libgpg-error-1.33. 2018-12-09 10:39:51 +00:00
bket
b466d99c0a Update to mbedtls-2.14.1
Addresses CVE-2018-19608. Bump minor of mbedcrypto as symbols have been
added.

OK kn@, jca@
2018-12-07 13:11:24 +00:00
ajacoutot
ddc1b1a04a Update to libnettle-3.4.1. 2018-12-06 14:03:41 +00:00
rpointel
76951103b5 update oledump to 0.0.39. 2018-12-06 09:52:09 +00:00
sthen
b4a89ef73b fix previous a different way that avoids the extra headers 2018-12-04 13:40:06 +00:00
sthen
bfed3247f0 some additional headers are needed to use libclamav but aren't installed by
default; install them, and use a subdir because one of them has a common name
2018-12-04 13:23:11 +00:00
sthen
4f38af6a00 update to ClamAV 0.101.0 2018-12-04 12:33:40 +00:00
bluhm
de139e244f update p5-POE-Component-SSLify to 1.012
from Charlene Wendling
2018-12-04 11:02:31 +00:00
robert
becdcd5b83 use arc4random_buf(3) in libgcrypt instead of /dev/random
this issue came to the light after using an unveil(2)'d chrome
inside a GNOME environment where it was trying to use the keyring
which was relying on libgcrypt

ok ajacoutot@
2018-12-02 11:24:15 +00:00
landry
a5821d16a7 Update to nss 3.40.1.
Fixes CVE-2018-12404
2018-12-01 09:18:26 +00:00
sthen
c7b148abe8 update to pecl-libsodium-2.0.15 2018-11-29 23:11:00 +00:00
rpointel
480dd4dce6 update TheHarvester to 3.0.1, and switch to python3. 2018-11-27 16:32:48 +00:00
sthen
5349f30d3b unhook/remove Math::Pari and dependent ports, this has been blocking
math/pari updates (Math::Pari still gets updated but even recently
released versions require old Pari; the crypto libs based on this
seem a bit unloved these days).

ok daniel semarie
2018-11-26 21:47:01 +00:00
bket
e1717927a1 Update to mbedtls-2.14.0.
Bump major number of shared libs, as symbols have been removed.

OK jca@
2018-11-26 15:18:28 +00:00
ajacoutot
891cc967e3 Update to vault-0.11.5. 2018-11-23 09:49:41 +00:00
gonzalo
402388b9f4 Update to 1.2.11
OK benoit@
2018-11-21 11:23:02 +00:00
sthen
68ac84cbdb update to openssl-1.1.1a 2018-11-20 22:19:57 +00:00
sthen
b2ca7ff77a update to openssl-1.0.2q 2018-11-20 22:19:48 +00:00
naddy
b086632fa8 Disable CAST cipher when configuring the embedded OpenSSL.
Since we don't build shared libraries, the CAST assembly implementation
is included on i386 even though there is no PIC version. Skip the whole
cipher as there are no SSL/TLS cipher suites that use CAST.

ok sthen@
2018-11-20 16:46:36 +00:00
jca
ed688c7797 LibreSSL and packaging tweaks
- don't force-disable the use of BN_GENCB_new() and friends, supported
  since LibreSSL 2.7.1
- fix WANTLIB, this is c++
- provide a correct WRKDIST, and use it
- install README.md, it has useful data

ok abieber@ (maintainer)
2018-11-20 13:01:08 +00:00
ajacoutot
d5f7a3c543 Update to cyrus-sasl-2.1.27.
This survived a bulk but only got light testing.
Getting this in early to get feedback about potential regressions.
Please *test* :-)
2018-11-19 08:24:23 +00:00
naddy
c22e808d10 don't bother with a non-PIC i386 assembly implementation of Blowfish, just
use the C version like all other archs
2018-11-18 21:25:43 +00:00
naddy
e1c4f1c499 allow text relocations from non-PIC i386 assembly code 2018-11-18 21:09:47 +00:00
ajacoutot
cad5071144 Add comment. 2018-11-18 16:09:52 +00:00
millert
5d08bf42fb Update to sudo 1.8.26
The PLIST file was missing cvtsudoers(1) which was added in 1.8.23
2018-11-16 13:19:23 +00:00
rpointel
e83a67332d update oletools to 0.53.1. 2018-11-16 08:02:25 +00:00
solene
852c42ff01 https for MASTER_SITES and HOMEPAGE
ok jca@
2018-11-15 20:21:33 +00:00
sthen
5fcd38d614 mark BROKEN-i386 for now (undefined reference to `__guard_local'), not sure
what's going on yet..
2018-11-15 10:03:08 +00:00
sthen
492606ac6e update to pecl-libsodium-2.0.14
2.0.14 	- Some Base64-encoded values couldn't be decoded when using unpadded variants. This has been fixed.
2.0.13 	- Security fix: sodium_pad() used to read extra memory when given an empty string
2018-11-15 09:44:09 +00:00
pvk
47e8ec619b +softhsm2 2018-11-14 22:25:20 +00:00
pvk
03646ce00f Import softhsm2 2.5.0, developement of SoftHSM crypto store
ok sthen@
2018-11-14 22:23:07 +00:00
sthen
6b8e265514 bump ports known/suspected to be affected by issue with libedit/libreadline
and termcap on lld arches.
2018-11-14 20:48:21 +00:00
jasper
b726e95319 update to suricata-update-1.0.0 2018-11-14 19:18:16 +00:00
jasper
653a5fb0ad +dirb 2018-11-14 19:11:15 +00:00
jasper
a938f054a2 import dirb-2.2.2
DIRB is a Web Content Scanner. It looks for hidden Web Objects. It
basically works by launching a dictionary based attack against a web
server and analizing the response. DIRB main purpose is to help in web
application auditing.

ok rpointel@ a while ago
2018-11-14 19:10:38 +00:00
naddy
dc2d68a931 recognize lld as compatible with GNU ld 2018-11-13 14:36:08 +00:00
ajacoutot
b3d5c184ec Fix HOMEPAGE. 2018-11-13 13:46:42 +00:00
naddy
cdcd991d42 enable the included PIC assembly code to fix text relocations on i386 2018-11-11 21:14:33 +00:00
tim
5646b8310d Use the right includedir in the .pc files; OK sthen@ 2018-11-10 20:38:07 +00:00
naddy
49670c1200 Do not clobber CC from the qt5 module, the build framework uses CC=@CXX@.
This means C++ code will be linked with c++(1) and lld will be happy.
2018-11-09 23:23:35 +00:00
sthen
4642a94f71 update to certbot/py-acme 0.28.0 2018-11-08 18:00:20 +00:00
sthen
10295c3ad6 adapt to new layout in security/openssl 2018-11-07 11:07:11 +00:00
sthen
7531c6480c split the openssl port into branches; move the existing to 1.0.2 and add
a new 1.1 branch.
2018-11-07 11:00:29 +00:00
bluhm
29c09a083e Start to enable features that LibreSSL is supporting now. My pull
requests are at github, commit it now to test it with ports.
Patches OK jsing@ tb@
2018-11-07 01:55:42 +00:00
naddy
74ac1bc33b When building with ports gcc, compile the C parts with -std=gnu11
to match the visibility of max_align_t between C and C++.

GCC 4.9 defaults to C89 and does not accept the "restrict" keyword
by default.  This causes a configure check to add -std=gnu99 to the
compiler flags.  Since max_align_t is from C11, the -std=gnu99 flag
removes it from visibility and gnutls's copy of gnulib then provides
its own replacement definition of max_align_t.  When gnutls builds
its C++ library, the C++ visibility rules are different.  The
max_align_t from stddef.h reappears and collides with the gnulib
replacement.
2018-11-05 21:29:50 +00:00
naddy
0f3a8bd688 We no longer need to handle the case that the system compiler is
not clang on amd64.  Also add COMPILER_LIBCXX to WANTLIB on all
archs.
ok sthen@ ajacoutot@
2018-11-05 14:57:09 +00:00