summaryrefslogtreecommitdiff
path: root/security/dirmngr
AgeCommit message (Collapse)AuthorFilesLines
2012-05-07Set BUILDLINK_ABI_DEPENDS correctly (with +=, not ?=)dholland1-2/+2
It turns out there were a lot of these.
2012-04-12Fix path to rc.subr.wiz2-5/+5
From Sascha Wildner in PR 46323.
2011-05-25add patch from upstream to make network connections (to fetch CRLs)drochner3-3/+87
non-blocking. Blocking can be considered a DOS problem because other requests are not served in that time. (SA44680, no CVE entry) bump PKGREV
2011-04-22recursive bump from gettext-lib shlib bump.obache1-1/+2
2011-03-11Fix building on Mac OS X; added LICENCEadam3-16/+29
2011-01-05Change the order in which LDAP libraries are detected; fixes building on Mac ↵adam3-10/+24
OS X and probably other machines. pkglint clean-up.
2010-09-01update to 1.1.0drochner3-43/+10
changes: -bugfixes -Make use of libassuan 2.0 which is available as a DSO
2010-01-17Recursive PKGREVISION bump for jpeg update to 8.wiz1-1/+2
2009-12-15update to 1.0.3drochner6-32/+85
changes: * New option --url for the LOOKUP command and dirmngr-client. * The LOOKUP command does now also consults the local cache. New option --cache-only for it and --local for dirmngr-client. * Port to Windows completed. * Improved certificate chain construction. * Support loading of PEM encoded CRLs via HTTP. * Client based trust anchors are now supported. * Configured certificates with the suffix ".der" are now also used. * Libgcrypt 1.4 is now required. reviewed by John R. Shannon pkgsrc notes: I've left the build against a private libassuan with GNU-pth support alone for now, just updated libassuan to 1.0.5. We might build pkgsrc/libassuan against pkgsrc/pth at some point, but this needs to be checked for side effects. (As this pkg doesn't export a library which might propagate the pth dependency, the possibility of pthread-pth conflicts should be limited. Other uses of libassuan need to be checked.) Beiing here, support DESTDIR.
2009-03-20Simply and speed up buildlink3.mk files and processing.joerg1-13/+6
This changes the buildlink3.mk files to use an include guard for the recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS, BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of enter/exit marker, which can be used to reconstruct the tree and to determine first level includes. Avoiding := for large variables (BUILDLINK_ORDER) speeds up parse time as += has linear complexity. The include guard reduces system time by avoiding reading files over and over again. For complex packages this reduces both %user and %sys time to half of the former time.
2009-01-29Fix installation.joerg1-2/+4
2008-01-18Per the process outlined in revbump(1), perform a recursive revbumptnn1-2/+2
on packages that are affected by the switch from the openssl 0.9.7 branch to the 0.9.8 branch. ok jlam@
2007-11-071) Fix incorect patchshannonjr5-25/+45
2) Fix incorrect socket permission
2007-11-07Update to 1.0.1. Changes:shannonjr5-35/+40
* The option --ocsp-signer may now take a filename to allow several certificates to be valid signers for the default responder. * New option --ocsp-max-period and improved the OCSP time checks. * New option --force-default-signer for dirmngr-client.
2007-07-04Make it easier to build and install packages "unprivileged", wherejlam1-1/+3
the owner of all installed files is a non-root user. This change affects most packages that require special users or groups by making them use the specified unprivileged user and group instead. (1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to unprivileged.mk. These two variables are lists of other bmake variables that define package-specific users and groups. Packages that have user-settable variables for users and groups, e.g. apache and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP}, etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER} and ${UNPRIVILEGED_GROUP}. (2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
2007-05-12Updated embedded libassuan to 1.0.1shannonjr3-12/+12
2006-12-18Fix invocation of /usr/bin/install to take out $(SHELL)smb2-1/+14
2006-12-12Update to release 1.0.0.shannonjr8-14/+100
Dirmngr is a server for managing and downloading certificate revocation lists (CRLs) for X.509 certificates and for downloading the certificates themselves. Dirmngr also handles OCSP requests as an alternative to CRLs. Dirmngr is either invoked internally by gpgsm (from GnuPG-2) or when running as a system daemon through the dirmngr-client tool.
2006-10-11Update to 0.9.6. Changes:shannonjr3-16/+17
* A couple of bug fixes for OCSP. * OCSP does now make use of the responder ID and optionally included certificates in the response to locate certificates. * No more lost file descriptors when loading CRLs via HTTP. * HTTP redirection for CRL and OCSP has been implemented. * Man pages are now build and installed from the texinfo source. Note, that you need to update libksba to version 1.0.0 for this release.
2006-10-04Update MASTER_SITES and/or HOMEPAGE, from Sergey Svishchev.wiz1-2/+2
2006-07-27Rename "SITES_* to "SITES.*" for file-specific lists of sites from whichjlam1-2/+2
to fetch the file. This completes the renaming described in revision 1.1799 of bsd.pkg.mk.
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-05-31The databases/openldap package has been split in -client and -server componentghen1-3/+3
packages. Convert LDAP-based applications to depend on openldap-client, and bump PKGREVISION for those that depend on it by default.
2006-05-25Fix pasto/thinko: it's PKG_HOME.${DIRMNGR_USER}seb1-2/+2
not PKG_SHELL.${DIRMNGR_USER}
2006-04-23Modify packages that set PKG_USERS and PKG_GROUPS to follow the newjlam1-2/+4
syntax as specified in pkgsrc/mk/install/bsd.pkginstall.mk:1.47.
2006-04-17Strip ${PKGLOCALEDIR} from PLISTs of packages that already obeyjlam1-2/+2
PKGLOCALEDIR and which install their locale files directly under ${PREFIX}/${PKGLOCALEDIR} and sort the PLIST file entries. From now on, pkgsrc/mk/plist/plist-locale.awk will automatically handle transforming the PLIST to refer to the correct locale directory.
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig1-2/+2
that they look nicer.
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-3/+3
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-03-31List the info pages directly in the PLIST and ensure that we honorjlam2-4/+4
PKGINFODIR.
2006-03-31Create directories needed for proper package functionality in anjlam2-14/+12
INSTALL script using OWN_DIRS_PERMS. Drop the redundant targets and PLIST entries. Bump the PKGREVISION to 3.
2006-03-31Package Makefiles should never set PKG_RCD_SCRIPTS -- that is a user-onlyjlam1-2/+1
variable.
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg2-3/+4
2006-01-06DEPENDS and PKGREVISION bumps because db4's library name changed.wiz2-4/+4
2006-01-06Update to 0.9.3. This is a bug fix release.shannonjr2-6/+7
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-05Ran "pkglint --autofix", which corrected some of the quoting issues inrillig1-3/+3
CONFIGURE_ARGS.
2005-08-23The real user name in PKG_USERS does not need to be escaped with doublerillig1-2/+2
backslashes anymore. A single backslash is enough. Changed the definition in all affected packages. For those that are not caught, an additional check is placed into bsd.pkginstall.mk.
2005-05-22Remove USE_GNU_TOOLS and replace with the correct USE_TOOLS definitions:jlam1-2/+2
USE_GNU_TOOLS -> USE_TOOLS awk -> gawk m4 -> gm4 make -> gmake sed -> gsed yacc -> bison
2005-05-02Remove the auto-registration of rc.d scripts. RCD_SCRIPTS_EXAMPLEDIR isreed1-1/+2
no longer a custom option. Add rc.d scripts to the PLIST.
2005-05-02Complying with request from Jeremy C. Reed, "Can you remove theshannonjr3-6/+5
INSTALL_SCRIPT step and set RCD_SCRIPTS=dirmngr instead?"
2005-04-25Removed USE_BUILDLINK3shannonjr1-2/+1
We don't need this any longer -- it's now default.
2005-04-25Added missiong USE_BUILDLINK3shannonjr1-1/+2
2005-04-23Update from 0.9.0 to 0.9.1. This is a bug fix release.shannonjr3-15/+15
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-03-02Problem: Dirmngr depends on pth. With an explicit buildlink to pth, theshannonjr2-4/+14
package builds and works correctly. This approach was taken prior to this change. The is a problem because pth installs pthread.h in ${LOCALBASE}/include. This causes problems for things like Ada tasking that depend on native pthreads when also linking against libraries in pkgsrc (eg., gmp). This change solve the problem by building a static pth library locally and linking against it.
2005-02-24Add RMD160 digests.agc1-1/+2
2005-01-22Fix C99-isms to make this pkg build with gcc 2.95.kristerw1-2/+2
2005-01-04Update to release 0.90.shannonjr8-66/+309
Dirmngr is a server for managing and downloading certificate revocation lists (CRLs) for X.509 certificates and for downloading the certificates themselves. Dirmngr also handles OCSP requests as an alternative to CRLs. Dirmngr is either invoked internaly by gpgsm (from gnupg 1.9) or when running as a system daemon through the dirmngr-client tool. Whats new in this release ========================= * New option --daemon to start dirmngr as a system daemon. This switches to the use of different directories and also does CRL signing certificate validation on its own. * New tool dirmngr-client. * New options: --ldap-wrapper-program, --http-wrapper-program, --disable-ldap, --disable-http, --honor-http-proxy, --http-proxy, --ldap-proxy, --only-ldap-proxy, --ignore-ldap-dp and --ignore-http-dp. * Uses an external ldap wrapper to cope with timeouts and general LDAP problems. * SIGHUP may be used to reread the configuration and to flush the certificate cache. * An authorithyKeyIdentifier in a CRL is now handled correctly.
2004-11-05Update to 0.5.6nb2:jmmv6-66/+57
- Refill the DESCR file. - Remove BUILD_USES_MSGFMT; distfile ships with prebuilt .gmo files. - Do not use GNU make as it's not needed. - Use BUILDLINK_PREFIX.openldap instead of LOCALBASE to locate openldap. - Register info file properly and fix a typo in its directory entry so that it can be accessed. - Patch configure instead of configure.ac, so we can drop the build dependency on autoconf. - Add missing dependencies on libiconv and gettext-lib. - Sort USE_* and include sections alphabetically. - Remove BUILDLINK_DEPENDS.* version overrides because the respective buildlink3.mk files already pull in a newer version. - Drop all logic to detect the actual gettext-lib version. This was wrong because it relied on the version currently installed (thus having a good chance to produce different results between systems), and because it's not the way to go. Instead, simply include gettext-lib's buildlink3.mk file, and let the builtin.mk machinery decide what to do. - Also add the locale files to the PLIST.
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-13 23:55:53 +0000