summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2000-01-10be consistent on which version to wildcardhubertf1-2/+2
2000-01-05Strip trailing '.', and/or leading '(a|an) 'abs7-7/+7
1999-12-30CHANGESjlam7-115/+54
1999-12-28changed PKGNAME to p5-${DISTNAME}wiz1-3/+3
1999-12-28It looks like libwrap wasn't used ever since it became a dynamic lib?kim3-315/+396
I recommend checking their binary to everyone (e.g. with ldd).
1999-12-28One of our patches changes --with-kerberos5 to --with-krb5kim1-3/+3
1999-12-26Sync checksum. Fixes PR pkg/9055 and pkg/9057.tron1-2/+2
1999-12-25Regenerate md5, keep checksums for the old "distribution" patcheskim2-4/+4
in Makefile as comments for future reference.
1999-12-25Folded in IPv6 and Kerberos IV patches, so that both can bekim40-153/+9932
compiled. This also fixes problems with Kerberos IV and V support clashing (you still have to choose one or the other at compile time, though). Compiles and runs on 1.4O -- needs testing on 1.4.2, and also some closer looking at certain patches (e.g. patch-au has a "#if 0" that could maybe be something else).
1999-12-16Update depends to rsaref 2.0p3abs2-4/+4
1999-12-16regenfredb1-2/+2
1999-12-16Fix ns32k specific syntax error. Require use of rsaref-2.0p3 instead ofjonb3-7/+16
faulty rsaref-2.0p2 while I'm in here.
1999-12-14Roll rsaref version to rsaref-2.0p3 to reflect updated security patchesabs1-2/+2
1999-12-14Revised buffer-overrun fix from CERT CA-99-15sommerfeld2-10/+14
(believed more complete than previous fix).
1999-12-12Correct location for file to patch.rh2-8/+8
1999-12-09Regenerated patch-sum after adding patch file.he1-1/+2
1999-12-09Add a minor man page formatting fix (missing "." ahead of "SH").he1-0/+13
1999-12-05Catch up to rev 1.11 of regular patch-sumsommerfeld1-3/+3
1999-12-02Range-check input buffer length against maximum modulus size. Forsommerfeld2-7/+43
RSA*Encrypt() routines, require 3 bytes extra space for PKCS tags. From Bugtraq posting <3845D352.95E47E26@core-sdi.com>, by Gerardo Richarte <core.lists.bugtraq@CORE-SDI.COM>, dated Wed, 1 Dec 1999 23:09:12 -0300 If you build packages with USE_RSAREF2 set, it is advisable to update the rsaref package and any packages which may depend on it (openssl, pgp2, ssh).
1999-12-02Update gnupg to 1.0.0. As sideeffect this fixes pr 8826 and pr 8606.frueauf7-95/+48
/* XXX someone should test this in i386/aout, maybe that broke in exchange, so someone would need to fix it. I have no system to test on. But since this package was totaly broken, its an improvement... XXX */ Noteworthy changes in version 1.0.0 (1999-09-07) ----------------------------------- * Add a very preliminary version of the GNU Privacy Handbook to the distribution (lynx doc/gph/index.html). * Changed the version number to GnuPG 2001 ;-) Noteworthy changes in version 0.9.11 ------------------------------------ * UTF-8 strings are now correctly printed (if --charset is set correctly). Output of --with-colons remains C-style escaped UTF-8. * Workaround for a problem with PGP 5 detached signature in textmode. * Fixed a problem when importing new subkeys (duplicated signatures). Noteworthy changes in version 0.9.10 ------------------------------------ * Some strange new options to help pgpgpg * Cleaned up the dox a bit. Noteworthy changes in version 0.9.9 ----------------------------------- * New options --[no-]utf8-strings. * New edit-menu commands "enable" and "disable" for entire keys. * You will be asked for a filename if gpg cannot deduce one. * Changes to support libtool which is needed for the development of libgcrypt. * New script tools/lspgpot to help transferring assigned trustvalues from PGP to GnuPG. * New commands --lsign-key and made --sign-key a shortcut for --edit and sign. * New options (#122--126 ;-) --[no-]default-recipient[-self], --disable-{cipher,pubkey}-algo. See the man page. * Enhanced info output in case of multiple recipients and fixed exit code. * New option --allow-non-selfsigned-uid to work around a problem with the German IN way of separating signing and encryption keys. Noteworthy changes in version 0.9.8 ----------------------------------- * New subcommand "delsig" in the edit menu. * The name of the output file is not anymore the one which is embedded in the processed message, but the used filename with the extension stripped. To revert to the old behaviour you can use the option --use-embedded-filename. * Another hack to cope with pgp2 generated detached signatures. * latin-2 character set works (--charset=iso-8859-2). * New option --with-key-data to list the public key parameters. New option -N to insert notations and a --set-policy-url. A couple of other options to allow reseting of options. * Better support for HPUX. Noteworthy changes in version 0.9.7 ----------------------------------- * Add some work arounds for a bugs in pgp 2 which led to bad signatures when used with canonical texts in some cases. * Enhanced some status outputs. Noteworthy changes in version 0.9.6 ----------------------------------- * Twofish is now statically linked by default. The experimental 128 bit version is now disabled. Full support will be available as soon as the OpenPGP WG has decided on an interpretation of rfc2440. * Dropped support for the ancient Blowfish160 which is not OpenPGP. * Merged gpgm and gpg into one binary. * Add "revsig" and "revkey" commands to the edit menu. It is now possible to revoke signature and subkeys.
1999-12-02These two modules cannot peacefully coexist.rh2-2/+6
1999-12-02Add and enable p5-Digest-MD5rh1-1/+2
1999-12-02Import of p5-Digest-MD5-2.09, a perl extension interface for variousrh7-0/+87
message digest algorithms.
1999-12-02Oups, forgot to commit this one (thanks Bernd :)bouyer1-3/+3
1999-12-01Make this work on solaris.bouyer1-4/+7
1999-12-01Use $(INSTALL_DATA), not /usr/bin/install -c ...bouyer1-8/+7
1999-11-30Make this work with -current's krb5 stuff.explorer5-14/+36
1999-11-26Install the RSAglue library if USERSAREF2 if set to YES.erh2-1/+11
1999-11-25Update openssl to 0.9.4.erh17-169/+268
1999-11-13Revise previous fix (overly restrictive range check)sommerfeld3-7/+7
1999-11-12Enable alternate rsh path with SSH_RSHPATHabs1-1/+6
Patch from NoRM <norm@mono.org>
1999-11-12fix security problem with using RSAREF with ssh, reported in FreeBSDsommerfeld3-8/+30
PR14749 (missing range checks in rsaglue.c) see http://www.freebsd.org/cgi/query-pr.cgi?pr=14749
1999-11-01Checksum of distfiles changed.jlam1-2/+2
1999-10-28Change LICENSE to fee-based-commercial-usejlam1-2/+2
1999-10-28Add and enable fortifyjlam1-1/+2
1999-10-28Initial import of fortify for Netscape. Closes PR#8450.jlam8-0/+894
1999-10-22Use wildcard dependence for "gtk+" package.tron1-2/+2
1999-10-19s/DONT_USE_IDEA/SSH_DONT_USE_IDEA/ to make it more obvious which packageagc1-4/+4
uses this definition.
1999-10-19Make openssl compile whether or not RSAref is defined.erh3-11/+59
1999-10-07Remove me as maintainer of those packages.tron1-2/+2
1999-10-04Regenbouyer1-4/+5
1999-10-04Add crack.bouyer1-2/+2
1999-10-04+ MIRROR_DISTFILE= nobouyer1-1/+3
1999-10-04Split to fit into hier(7): Crack and Reporter in sbin/,bouyer6-181/+415
scripts, dics and run in share/crack, docs in share/docs/crack and binaries in libexec/crack. Also, rename patches from 01, 02... to aa, ab, ...
1999-09-30Don't attempt to rebuild binaries and dictionaries at each run, but only whenbouyer2-0/+83
-makeonly or -makedict was specified. While I'm there add the patch-sum file I forgot yesterday.
1999-09-30Create /usr/pkg/crack more 0700.bouyer1-1/+2
1999-09-29Adapt to NetBSD.bouyer5-23/+311
1999-09-29Import crack from FreeBSD.bouyer9-0/+97
1999-09-28Use a relative path for bsd.pkg.mk instead of relying on the search path.soren2-6/+3
1999-09-21install(1) wants directories to install to to existhubertf1-1/+2