summaryrefslogtreecommitdiff
path: root/security/mit-krb5
AgeCommit message (Collapse)AuthorFilesLines
2005-02-24Add RMD160 digests.agc1-1/+2
2004-12-28The default location of the pkgsrc-installed rc.d scripts is nowreed1-1/+2
under share/examples/rc.d. The variable name already was named RCD_SCRIPTS_EXAMPLEDIR. This is from ideas from Greg Woods and others. Also bumped PKGREVISION for all packages using RCD_SCRIPTS mechanism (as requested by wiz).
2004-12-23Update security/mit-krb5 to 1.3.6.jlam2-34/+16
NOTE: THIS IS A SECURITY UPDATE. Changes from version 1.3.4 include: * [2841] Fix heap buffer overflow in password history mechanism. [MITKRB5-SA-2004-004] * [2682] Fix ftpd hang caused by empty PASS command. * [2686] Fix double-free errors. [MITKRB5-SA-2004-002] * [2687] Fix denial-of-service vulnerability in ASN.1 decoder. [MITKRB5-SA-2004-003]
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv2-4/+4
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
2004-09-22Mechanical changes to package PLISTs to make use of LIBTOOLIZE_PLIST.jlam1-37/+1
All library names listed by *.la files no longer need to be listed in the PLIST, e.g., instead of: lib/libfoo.a lib/libfoo.la lib/libfoo.so lib/libfoo.so.0 lib/libfoo.so.0.1 one simply needs: lib/libfoo.la and bsd.pkg.mk will automatically ensure that the additional library names are listed in the installed package +CONTENTS file. Also make LIBTOOLIZE_PLIST default to "yes".
2004-09-15Force using the BSD utmp interface on NetBSD until the configurejlam1-1/+9
scripts can be taught how to properly detect our utmpx implementation. This should fix the build on NetBSD-2.0 and -current.
2004-09-07Apply the patches for security/mit-krb5 that fix MITKRB5-SA-2004-00{2,3}.jlam2-3/+17
Bump the PKGREVISION for this security update.
2004-08-22Change the way that legacy USE_* and FOO_USE_* options are convertedjlam1-8/+3
into the bsd.options.mk framework. Instead of appending to ${PKG_OPTIONS_VAR}, it appends to PKG_DEFAULT_OPTIONS. This causes the default options to be the union of PKG_DEFAULT_OPTIONS and any old USE_* and FOO_USE_* settings. This fixes PR pkg/26590.
2004-07-30Convert to use bsd.options.mk. The relevant options variable to setjlam1-3/+15
for each package can be determined by invoking: make show-var VARNAME=PKG_OPTIONS_VAR The old options are still supported unless the variable named in PKG_OPTIONS_VAR is set within make(1) (usually via /etc/mk.conf).
2004-07-24Bump PKGREVISION for last change.jlam1-1/+2
2004-07-24Honor VARBASE.jlam1-2/+2
2004-06-24Set BUILDLINK_RECOMMMENDED to mit-krb5>=1.3.4 due to the security advisory:jlam1-3/+4
http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-001-an_to_ln.txt
2004-06-24Update to security/mit-krb5 to 1.3.4. Major changes from version 1.3.3jlam2-6/+5
include a fix for security advisory [MITKRB-SA-2004-001]: http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-001-an_to_ln.txt Please read the security advisory to see if you are affected and should update your MIT krb5 installation.
2004-05-18There is no ${PREFIX}/include/kerberosIV directory as part of this package.jlam1-2/+1
2004-05-10Correct PLIST when not renaming the applications.kristerw2-3/+4
Bump PKGREVISION.
2004-05-10Move WRKSRC from the DISTNAME section to silence a pkglint FATAL error.kristerw1-2/+3
2004-04-26Updated security/mit-krb5 to 1.3.3. Changes from version 1.3.2 include:jlam2-14/+10
[2284] Fixed accept_sec_context to use a replay cache in the GSS_C_NO_CREDENTIAL case. [2453] The AES string-to-key function no longer returns a pointer to stack memory when given a password longer than 64 characters. [2277] In sendto_kdc, a socket leak on connection failure was fixed. [2384] A memory leak in the TCP handling code in the KDC has been fixed.
2004-04-23mk/bsd.pkg.install.mk now automatically registersreed1-3/+1
the RCD_SCRIPTS rc.d script(s) to the PLIST. This GENERATE_PLIST idea is part of Greg A. Woods' PR #22954. This helps when the RC_SCRIPTS are installed to a different ${RCD_SCRIPTS_EXAMPLEDIR}. (Later, the default RCD_SCRIPTS_EXAMPLEDIR will be changed to be more clear that they are the examples.) These patches also remove the etc/rc.d/ scripts from PLISTs (of packages that use RCD_SCRIPTS). (This also removes now unused references from openssh* makefiles. Note that qmail package has not been changed yet.) I have been doing automatic PLIST registration for RC_SCRIPTS for over a year. Not all of these packages have been tested, but many have been tested and used. Somethings maybe to do: - a few packages still manually install the rc.d scripts to hard-coded etc/rc.d. These need to be fixed. - maybe remove from mk/${OPSYS}.pkg.dist mtree specifications too.
2004-04-11No longer used.snj1-33/+0
2004-04-08Use ${PREFIX}/${INFO_DIR} instead of ${PREFIX}/info forreed1-3/+3
info documentation. (Okay'd by jlam.)
2004-04-07Fix wip reference. (hi jlam!)salo1-2/+2
2004-03-30Updated security/mit-krb5 to 1.3.2. Changes from version 1.3.1 include:jlam4-31/+23
* Support for AES in GSSAPI has been implemented. This corresponds to the in-progress work in the IETF (CFX). * To avoid compatibility problems, unrecognized TGS options will now be ignored. * 128-bit AES has been added to the default enctypes. * AES cryptosystem now chains IVs. This WILL break backwards compatibility for the kcmd applications, if they are using AES session keys. * Assorted minor bug fixes and plugged memory leaks.
2004-03-30Fix up the krb5-config script to not emit "$(LIBTOOL) --mode=link". Don'tjlam2-1/+14
bother with a PKGREVSION bump since this package is 15 minutes old.
2004-03-30Import MIT Kerberos 5 as security/mit-krb5. This package is partly basedjlam17-0/+765
on the wip/mit-krb5 package by Jeremy Reed, but heavily modified by me to libtoolize the build. Kerberos V5 is an authentication system developed at MIT. It is a network authentication protocol designed to provide strong authentication for client/server applications by using secret-key cryptography. (Kerberos 5 is discussed in RFC 1510.) This package provides Kerberos and GSSAPI (Generic Security Services Application Programming Interface) development headers and libraries. It also includes Kerberos ticket and principal tools, and Kerberized r-services, telnet and ftp services.