summaryrefslogtreecommitdiff
path: root/security/dirmngr/distinfo
AgeCommit message (Collapse)AuthorFilesLines
2011-05-25add patch from upstream to make network connections (to fetch CRLs)drochner1-1/+2
non-blocking. Blocking can be considered a DOS problem because other requests are not served in that time. (SA44680, no CVE entry) bump PKGREV
2011-03-11Fix building on Mac OS X; added LICENCEadam1-1/+2
2011-01-05Change the order in which LDAP libraries are detected; fixes building on Mac ↵adam1-1/+2
OS X and probably other machines. pkglint clean-up.
2010-09-01update to 1.1.0drochner1-11/+4
changes: -bugfixes -Make use of libassuan 2.0 which is available as a DSO
2009-12-15update to 1.0.3drochner1-10/+10
changes: * New option --url for the LOOKUP command and dirmngr-client. * The LOOKUP command does now also consults the local cache. New option --cache-only for it and --local for dirmngr-client. * Port to Windows completed. * Improved certificate chain construction. * Support loading of PEM encoded CRLs via HTTP. * Client based trust anchors are now supported. * Configured certificates with the suffix ".der" are now also used. * Libgcrypt 1.4 is now required. reviewed by John R. Shannon pkgsrc notes: I've left the build against a private libassuan with GNU-pth support alone for now, just updated libassuan to 1.0.5. We might build pkgsrc/libassuan against pkgsrc/pth at some point, but this needs to be checked for side effects. (As this pkg doesn't export a library which might propagate the pth dependency, the possibility of pthread-pth conflicts should be limited. Other uses of libassuan need to be checked.) Beiing here, support DESTDIR.
2007-11-071) Fix incorect patchshannonjr1-3/+3
2) Fix incorrect socket permission
2007-11-07Update to 1.0.1. Changes:shannonjr1-9/+9
* The option --ocsp-signer may now take a filename to allow several certificates to be valid signers for the default responder. * New option --ocsp-max-period and improved the OCSP time checks. * New option --force-default-signer for dirmngr-client.
2007-05-12Updated embedded libassuan to 1.0.1shannonjr1-5/+5
2006-12-18Fix invocation of /usr/bin/install to take out $(SHELL)smb1-1/+2
2006-12-12Update to release 1.0.0.shannonjr1-5/+13
Dirmngr is a server for managing and downloading certificate revocation lists (CRLs) for X.509 certificates and for downloading the certificates themselves. Dirmngr also handles OCSP requests as an alternative to CRLs. Dirmngr is either invoked internally by gpgsm (from GnuPG-2) or when running as a system daemon through the dirmngr-client tool.
2006-10-11Update to 0.9.6. Changes:shannonjr1-7/+7
* A couple of bug fixes for OCSP. * OCSP does now make use of the responder ID and optionally included certificates in the response to locate certificates. * No more lost file descriptors when loading CRLs via HTTP. * HTTP redirection for CRL and OCSP has been implemented. * Man pages are now build and installed from the texinfo source. Note, that you need to update libksba to version 1.0.0 for this release.
2006-01-06Update to 0.9.3. This is a bug fix release.shannonjr1-4/+4
2005-04-23Update from 0.9.0 to 0.9.1. This is a bug fix release.shannonjr1-7/+7
2005-03-02Problem: Dirmngr depends on pth. With an explicit buildlink to pth, theshannonjr1-1/+4
package builds and works correctly. This approach was taken prior to this change. The is a problem because pth installs pthread.h in ${LOCALBASE}/include. This causes problems for things like Ada tasking that depend on native pthreads when also linking against libraries in pkgsrc (eg., gmp). This change solve the problem by building a static pth library locally and linking against it.
2005-02-24Add RMD160 digests.agc1-1/+2
2005-01-04Update to release 0.90.shannonjr1-6/+4
Dirmngr is a server for managing and downloading certificate revocation lists (CRLs) for X.509 certificates and for downloading the certificates themselves. Dirmngr also handles OCSP requests as an alternative to CRLs. Dirmngr is either invoked internaly by gpgsm (from gnupg 1.9) or when running as a system daemon through the dirmngr-client tool. Whats new in this release ========================= * New option --daemon to start dirmngr as a system daemon. This switches to the use of different directories and also does CRL signing certificate validation on its own. * New tool dirmngr-client. * New options: --ldap-wrapper-program, --http-wrapper-program, --disable-ldap, --disable-http, --honor-http-proxy, --http-proxy, --ldap-proxy, --only-ldap-proxy, --ignore-ldap-dp and --ignore-http-dp. * Uses an external ldap wrapper to cope with timeouts and general LDAP problems. * SIGHUP may be used to reread the configuration and to flush the certificate cache. * An authorithyKeyIdentifier in a CRL is now handled correctly.
2004-11-05Update to 0.5.6nb2:jmmv1-2/+3
- Refill the DESCR file. - Remove BUILD_USES_MSGFMT; distfile ships with prebuilt .gmo files. - Do not use GNU make as it's not needed. - Use BUILDLINK_PREFIX.openldap instead of LOCALBASE to locate openldap. - Register info file properly and fix a typo in its directory entry so that it can be accessed. - Patch configure instead of configure.ac, so we can drop the build dependency on autoconf. - Add missing dependencies on libiconv and gettext-lib. - Sort USE_* and include sections alphabetically. - Remove BUILDLINK_DEPENDS.* version overrides because the respective buildlink3.mk files already pull in a newer version. - Drop all logic to detect the actual gettext-lib version. This was wrong because it relied on the version currently installed (thus having a good chance to produce different results between systems), and because it's not the way to go. Instead, simply include gettext-lib's buildlink3.mk file, and let the builtin.mk machinery decide what to do. - Also add the locale files to the PLIST.
2004-11-04Modified to honor http_proxy environment variable when retrieving crls.shannonjr1-1/+2
Change due to Werner Koch <wk@gnupg.org>
2004-10-23DirMngr is a server for managing and downloadingshannonjr1-0/+5
certificate revocation lists (CRLs) for X.509 certificates and for downloading the certificates themselves. DirMngr also handles OCSP requests as an alternative to CRLs. DirMngr is usually invoked by gpgsm and in general not used directly.