summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2001-06-10Use cookies (.*_done) to determine whether headers and libs have beenjlam1-6/+12
linked from a particular package, and add a pre-configure target to the buildlink.mk file to more painlessly use buildlink.mk files. A ${BUILDLINK_TARGETS} variable still exists in case a package _must_ define NO_CONFIGURE.
2001-06-09' ' -> '\t'wiz1-2/+2
2001-06-09Remove trailing whitespace.wiz1-14/+14
2001-06-09Add patches from Simon Burge <simonb@wasabisystems.com> to build cfsjlam6-18/+94
without needing -traditional. This fixes socklen_t lossage mentioned in the README.netbsd file. This was tested on i386 NetBSD-1.5 and -current.
2001-06-07Add patches missing from commit that did the following modifications:jlam3-0/+46
* Use NetBSD's getpass() function instead of the homegrown one, as the homegrown one doesn't seem to hide the password when it is being entered. * Add a rc.d style script to start cfsd, and also install the documentation for the filesystem. * Rename c* commands to cfs_* to avoid conflicts with coda programs with a similar name.
2001-06-07* Use NetBSD's getpass() function instead of the homegrown one, as thejlam5-78/+216
homegrown one doesn't seem to hide the password when it is being entered. * Add a rc.d style script to start cfsd, and also install the documentation for the filesystem. * Rename c* commands to cfs_* to avoid conflicts with coda programs with a similar name.
2001-06-06Fix warning output if new file is smaller than old one.wiz2-3/+3
Noted by Kimmo Suominen. Bump to 1.9.
2001-06-06LICENSE=srp_client-licensejtb1-1/+3
2001-06-06LICENSE=portsentry-license.jtb1-1/+3
2001-06-06Back out the socklen_t Makefile magic - causes core dumps on 1.5 i386simonb1-2/+1
and alpha. Discussed with agc.
2001-06-06Remove files from jlam's cfs package import (on top of agc's) untilwiz3-136/+0
jlam has time to merge them, on request by jlam.
2001-06-05cfs - Cryptographic File Systemjlam5-27/+170
CFS pushes encryption services into the UN*X file system. It supports secure storage at the system level through a standard UN*X file system interface to encrypted files. Users associate a cryptographic key with the directories they wish to protect. Files in these directories (as well as their pathname components) are transparently encrypted and decrypted with the specified key without further user intervention; cleartext is never stored on a disk or sent to a remote file server. CFS employs a novel combination of DES stream and codebook cipher modes to provide high security with good performance on a modern workstation. CFS can use any available file system for its underlying storage without modification, including remote file servers such as NFS. System management functions, such as file backup, work in a normal manner and without knowledge of the key.
2001-06-05Define RINCLUDES, since otherwise cc -I will eat the next argument,agc2-4/+4
which is not TRT.
2001-06-05Install a workaround for socklen_t definition woes on 1.5agc1-2/+4
2001-06-05Add and enable cfsagc1-1/+2
2001-06-05Initial import of Steve Bellovin's port of Matt Blaze's CFS into theagc5-0/+148
packages collection. CFS is an encrypting file system for Unix-like OSs. It uses NFS as its interface, and so is reasonably portable. The FS code dates back to 1989, and the crypto to 1992, so it is showing signs of age. This code should be regarded as completely unsupported; a complete rewrite will follow eventually. Please don't download this code if you're in a place that's forbidden (under US or local law) to export cryptographic software from the US to, or if you're on the State Department's "Denied Persons List." If you aren't sure, ask a good lawyer.
2001-06-04Use slightly modified idea.c, which recognizes NetBSD PowerPC machines aswiz2-6/+6
big endian. Makes gnupg work with IDEA support on ppc machines. XXX: Probably similar changes needed for some other big-endian platforms.
2001-05-31Update to 1.0.6, provided by Nathan Ahlstrom in pkg/13069.wiz3-7/+6
Changes: Fixed a format string bug which is exploitable if --batch is not used. Checked all translations for format strings bugs. Removed the Russian translation due to too many bugs. Fixed keyserver access and expire time calculation.
2001-05-26No functional change...just rework some code and re-sort some lines.jlam1-11/+9
2001-05-26Protect against multiple inclusion.jlam1-1/+6
2001-05-24Add buildlink.mk file to link libraries and headers into ${WRKDIR}, to bejlam1-0/+59
used by other packages.
2001-05-23Fix compilation on macppc. (relocation error because of missing -fPIC)wiz3-1/+29
2001-05-22linux is much like solaris (for today)abs1-0/+1
2001-05-22We also work under Linuxabs2-4/+4
2001-05-21add RATS.jun1-1/+2
2001-05-21Initial import of "RATS":jun5-0/+45
RATS, the Rough Auditing Tool for Security
2001-05-21Update pgpdump to 0.08 -> 0.11 .jun2-5/+5
0.11 2001/05/20 * Defining line_not_blank(). Stefan H. Holek <stefan@epy.co.at> * Enhancing Public_Key_Encrypted_Session_Key_Packet(). Stefan H. Holek <stefan@epy.co.at> Brian M. Carlson <karlsson@hal-pc.org> 0.10 2001/05/08 * Fixing key_server_preferences(). * Fixing signature_multi_precision_integer(). 0.09 2001/05/05 * Implementing additional_decryption_key() like revocation_key(). Stefan H. Holek <stefan@epy.co.at>
2001-05-19Use ${XARGS} instead of invoking xargs directly.jlam2-4/+4
2001-05-14use portable openssh 2.9p1.itojun3-17/+41
Important Changes: ================== WARNING: SSH protocol v2 is now the default protocol version use the 'Protocol' option from ssh(1) and sshd(8) if you want to change this. SSH protocol v2 implementation adds support for: HostbasedAuthentication, similar to RhostsRSA in SSH protocol v1 Rekeying (negotiate new encryption keys for the current SSH session, try ~R in interactive SSH sessions) updated DH group exchange: draft-ietf-secsh-dh-group-exchange-01.txt client option HostKeyAlgorithms server options ClientAliveInterval and ClientAliveCountMax tty mode passing general: gid swapping in sshd (fixes access to /home/group/user based directory structures) Dan Kaminsky <dankamin@cisco.com> contributed an experimental SOCKS4 proxy to the ssh client (yes, client not the server). Use 'ssh -D 1080 server' if you want to try this out. server option PrintLastLog improvements for scp > 2GB improved ListenAddress option. You can now use ListenAddress host:port improved interoperability (bug detection for older implementations) improved documentation
2001-05-14use USE_PYTHONdrochner1-15/+5
2001-05-14Tidy up, and remove note about RSA.wiz1-3/+3
2001-05-14Update to 1.0.5, provided by Mark White in private mail.wiz5-65/+30
Some pkg related changes by me. Changes since 1.0.4: * WARNING: The semantics of --verify have changed to address a problem with detached signature detection. --verify now ignores signed material given on stdin unless this is requested by using a "-" as the name for the file with the signed material. Please check all your detached signature handling applications and make sure that they don't pipe the signed material to stdin without using a filename together with "-" on the the command line. * WARNING: Corrected hash calculation for input data larger than 512M - it was just wrong, so you might notice bad signature in some very big files. It may be wise to keep an old copy of GnuPG around. * Secret keys are no longer imported unless you use the new option --allow-secret-key-import. This is a kludge and future versions will handle it in another way. * New command "showpref" in the --edit-key menu to show an easier to understand preference listing. * There is now the notation of a primary user ID. For example, it is printed with a signature verification as the first user ID; revoked user IDs are not printed there anymore. In general the primary user ID is the one with the latest self-signature. * New --charset=utf-8 to bypass all internal conversions. * Large File Support (LFS) is now working. * New options: --ignore-crc-error, --no-sig-create-check, --no-sig-cache, --fixed_list_mode, --no-expensive-trust-checks, --enable-special-filenames and --use-agent. See man page. * New command --pipemode, which can be used to run gpg as a co-process. Currently only the verification of detached signatures are working. See doc/DETAILS. * Rewritten key selection code so that GnuPG can better cope with multiple subkeys, expire dates and so. The drawback is that it is slower. * A whole lot of bug fixes. * The verification status of self-signatures are now cached. To increase the speed of key list operations for existing keys you can do the following in your GnuPG homedir (~/.gnupg): $ cp pubring.gpg pubring.gpg.save && $ gpg --export-all >x && \ rm pubring.gpg && gpg --import x Only v4 keys (i.e not the old RSA keys) benefit from this caching. * New translations: Estonian, Turkish.
2001-05-14Update uvscan-dat to 4137. Notable changes include the detection ofrh2-5/+5
several new viruses.
2001-05-12Fix build problem under NetBSD-current.tron2-1/+17
2001-05-12fix types on 64-bit systems.dmcmahill2-7/+18
2001-05-11Move NetBSD only patches to a distribution patch file to avoid uglytron10-235/+7
conditional patch hack.
2001-05-11Convert all patches to unified output format.tron6-305/+226
2001-05-11mark as broken on alpha, mips, sparc, vax as it doesn't build here.dmcmahill1-1/+6
2001-05-10use -C with rpcgen to generate ansi code. Makes sure some needed headersdmcmahill2-10/+11
are included.
2001-05-10add missing example file, caught by latest bulk build.agc1-1/+2
2001-05-10Add missing manual page, from results of last bulk build.agc1-1/+2
2001-05-10Add missing manual page, pointed out by the last bulk buildagc1-1/+2
2001-05-09Move to SHA1, and add size.wiz1-2/+3
2001-05-09Define USE_LTDL as this library requires it.jlam1-1/+2
2001-05-07Remove py-crypto, which has been obsoleted by py-amkCrypto.wiz14-328/+0
2001-05-07Replace py-crypto with py-amkCrypto.wiz1-2/+2
2001-05-07Initial import of py-amkCrypto, crypto functions for python, towiz5-0/+137
replace security/py-crypto (which isn't python-2.0-ready, and failed the last dozen bulk builds for that reason). Some help provided by Ty Sarna -- thanks!
2001-05-02o we don't want it to depend on X, so disable X support -> don't built niftyzuntum2-3/+4
Fixes bulk build problem.
2001-04-30Change build dependency from perl-5.* to perl>=${PERL5_REQD}. Also changejlam3-6/+6
dependency from libperl-5.* to libperl>=${PERL5_REQD}.
2001-04-29Update to SHA1 instead of MD5. The MD5 of the distfile downloaded fromrh1-2/+3
both the original MASTER_SITE and the Austrian ftp.netbsd.org mirror matched the MD5 recorded for the package.
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-16 18:58:16 +0000