summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2010-07-22Add py-crypto and py-cryptopp.gdt1-1/+3
2010-07-22Import py26-cryptopp-0.5.19 as security/py-cryptopp.gdt4-0/+93
pycryptopp is a set of Python wrappers for a few of the best crypto algorithms from the Crypto++ library.
2010-07-22Fix import; apparently importing a package that used to exist does notgdt3-0/+46
go well.
2010-07-22Import py26-crypto-2.1.0 as security/py-crypto.gdt2-0/+270
Python extensions using OpenSSL which contains hashing algorithms, This package more or less supersedes py-amkCrypto. chaffing/winnowing, random number generation, various utility modules, and several block encryption and digital signature algorithms.
2010-07-19Add devel/py-jersey, net/py-s3cm3, security, py-oauth, and www/py-pendrellver1-1/+2
to their respective category Make files.
2010-07-19Add py-oauth from http://pypi.python.org/pypi/oauth/1.0.1:ver4-0/+35
Library implementing OAuth version 1.0a as documented at http://oauth.net/
2010-07-19Upgrade py-OpenSSL to 0.10 from 0.7 for feature enhancements.ver3-9/+14
2010-07-18Update p5-Digest-SHA1 from version 2.12 to version 2.13.seb2-6/+6
Upstream changes: 2010-07-03 Release 2.13 Mike McCauley (1): Fix memory leak in sha1_transform
2010-07-17Bump depends for libpng bump. PR 43564 by David H. Gutteridge.wiz1-1/+2
2010-07-17Do not accept libassuan>=2 here.wiz1-1/+2
2010-07-16Update HOMEPAGEpettai1-2/+2
2010-07-16OpenDNSSEC 1.1.1:pettai2-6/+6
Bugfixes: * Bugreport #127: Large SOA serial numbers were not handled properly by signer * Bugreport #133: Better handling of SOA serial when setting is 'keep' * Bugreport #136: quicksorter could not handle standard bind format SOA rdata * The Auditor could not handle the new way of rolling KSKs * One log message in the Enforcer referred to an old command * The Enforcer forgot to publish certain keys during transition between states
2010-07-14Recursive PKGREVISION bump for the net/mDNSResponder updatesbd1-2/+2
2010-07-14Raise pam-p11 from the deadsmanu6-0/+90
2010-07-13pam-p11 comes backmanu1-1/+2
2010-07-10Need yacc and lex to build.obache1-1/+2
PR#43594 by Aleksey Cheusov.
2010-07-08delete non-existant pam-11 packagejnemeth1-2/+1
2010-07-06update to 2.30.3drochner5-23/+15
changes: -bugfixes -Add dbus activation service file for org.freedesktop.secrets pkgsrc note: removed dependency on libgnome-keyring; child pkgs should have been updated to list this dependency explicitely
2010-07-06update to 2.30.1drochner5-38/+20
This switches to the gnome-2.30 release branch.
2010-07-06Transfer ownership to pkgsrc-users. pancake's address is not valid anyjmmv2-4/+4
more and he has agreed in private mail to drop maintainership.
2010-07-05Update sudo package to 1.7.2p8.taca4-18/+18
Major changes between sudo 1.7.2p7 and 1.7.2p8: * Fixed a crash on AIX when LDAP support is in use. * Fixed problems with the QAS non-Unix group support
2010-07-04Add builtin OpenSSL support for Haiku.obache1-3/+13
2010-07-03Added security/gnupg-pkcs11-scd version 0.7.0manu1-1/+2
2010-07-03gnupg-pkcs11 is a project to implement a BSD-licensed smart-cardmanu4-0/+59
daemon to enable the use of PKCS#11 tokens with GnuPG. The motivation behind this project originates in the following two threads: * http://lists.gnupg.org/pipermail/gnupg-users/2006-February/027964.html * http://lists.gnupg.org/pipermail/gnupg-devel/2004-November/021522.html * http://lists.gnupg.org/pipermail/gnupg-users/2004-November/023673.html PKCS#11 is the de-facto standard for accessing cryptographic tokens, and thus we strongly disagree with WK's attitude towards it. The patch mentioned in the above threads is unmaintained, so we decided to implement PKCS#11 support "the right way". gnupg-pkcs11 is a (hopefully) drop-in replacement for the smart-card daemon (scd) shipped with GnuPG.
2010-07-03Added security/pam-p11 version 0.1.5manu1-1/+2
2010-07-03Added security/libassuan2 version 2.0.0manu1-1/+2
2010-07-03This is the IPC library used by GnuPG 2, GPGME and a few other packages.manu5-0/+56
2010-07-02Use CHECK_BUILTIN.heimdal to prevent the fake-krb5-config target to bejoerg1-1/+3
defined twice.
2010-07-01Don't include mk/bdb.m3.mk for the builtin heimdal.joerg1-1/+5
2010-07-01Needs py-expat for build. Fix destdir.joerg1-4/+5
2010-06-29Roll back commit: this is pkgsrc freeze (sorry, I missed the message)manu7-92/+1
2010-06-29Added security/pam-p11-0.1.5manu1-1/+2
2010-06-29Pam_p11 is a plugable authentication module (PAM) package for usingmanu6-0/+90
crpytographic PKCS#11 tokens such as smart cards and usb crypto tokens for local authentication. Pam_p11 implements two authentication modules: * pam_p11_openssh authenticates the user against public keys found in OpenSSH ~/.ssh/authorized_keys file. * pam_p11_opensc authenticates the user against certificates found in ~/.eid/authorized_certificates.
2010-06-28New version, 2.2.5. Fixes PR pkg/43528.roy2-8/+9
No upstream changelog.
2010-06-28DESTDIR supportjoerg3-5/+7
2010-06-25Remove configure override for funopen detection.wiz1-2/+1
Aleksey Cheusov reports in PR 43519 that this fixes a problem on Linux, and the function is still properly detected on NetBSD-5.99.31..
2010-06-25* fixes DESTDIR installationobache3-8/+37
* define TEST_TARGET.
2010-06-19Fix dependency patternjoerg1-2/+2
2010-06-16Update F-PROT Antivirus to 6.0.3.1.taca8-75/+90
pkgsrc changes: * Fix PKGNAME to really intended to. * Some permission problem with using scan-mail.pl 6.0.3 (Initially NetBSD only): - Scanning inside NSIS (Nullsoft) installer files - Generic IFRAME exploit detection - Numerous additions to the Eldorado heuristic engine, making it significantly more powerful than before - Scanning of 7-Zip, ACE and "solid RAR" archives - Improved scanning of JavaScript files - List of detected malware now includes Eldorado heuristic detections - Much faster initial loading of ANTIVIR.DEF - Scan engine updated
2010-06-16OpenDNSSEC 1.1.0:pettai4-22/+34
* Partial Auditor added * Dnsruby-1.46 required * Improved error messages when the system runs out of keys * Optimise communication of signconfs for multiple zones sharing keys. Group zones in zonelist.xml by policy to get this benefit. * Bugreport #101: Signer Engine now maintains its own pidfile. * Jitter redefined: now in the range of [-jitter, ..., +jitter] * Optimized sorter: quicksorter (sorter becomes obsolete). * Optimized zone_reader, includes nseccing/nsec3ing (nseccer and nsec3er become obsolete). * Enable database selection using --with-database-backend={sqlite3|mysql} * Enable the EPP-client using --enable-eppclient For sending DS RR to the parent zone (experimental) * Turn NSEC3 OptOut off by default * Install kasp2html XML stylesheet * Add simple kasp2html conversion script * DNSKEY records communicated to an external script if configured * The command 'ods-signer restart' is removed. * Signer Engine now also reuses signatures after a change in NSEC(3) configuration or rolling keys. * Quicksorter defaults to class IN. And a lot of bugfixes...
2010-06-15courier-authlib-0.63.0:pettai5-30/+29
* authldapescape.c: Factor out LDAP string escape function. * authldap.schema: Various fixes * authldap.ldif (olcObjectClasses): Create LDIF format schema from authldap.schema * authoption.c (auth_getoptionenvint): For account options that are parsed to an int, an option value that begins with t, T, y, or Y is evaluated as 1, other alphabetic values as 0; so that 'true' or 'yes' get evaluated as 1. (See the Changelog for the previous releases) Based on patch(es) from PR pkg/42989 by Brian Candler
2010-06-15fix build against gnome-keyring-2.30, should fix PR pkg/43479drochner3-3/+18
by Greg Oster being here, disable avahi support which is mostly useless
2010-06-15Remove patch-aa, upstream's Simon Josefsson said:wiz2-17/+1
The patch looks wrong to me, though, because stdint.h should be generated in lib/gllib/ if the system does not have it (or if it is not correct), and the -I's should make the code find the local file instead. Thus, the code should be able to unconditionally include the header file.
2010-06-15Add hpn-patch for OpenSSH 5.5p1.taca2-3/+6
No PKGREVISION bump since this option never worked with OpenSSH 5.5p1 before.
2010-06-14PR/43470 - Jack Lloyd -- update DESCRjnemeth2-15/+14
While here, do some minor delinting and set LICENSE.
2010-06-14PKGREVISION bump for png-1.4.x shlib change.wiz2-4/+4
(missed those and *emacs* the first time round because they pull in their png dependencies via default-on options; they were included in the test bulk build though)
2010-06-13Bump PKGREVISION for libpng shlib name change.wiz36-69/+75
Also add some patches to remove use of deprecated symbols and fix other problems when looking for or compiling against libpng-1.4.x.
2010-06-12Fix installation with latest gnome-doc-utils and depend on it.wiz1-1/+2
2010-06-11Updated security/openssh to 5.5.1martti12-144/+105
Lots of changes, including * After a transition period of about 10 years, this release disables SSH protocol 1 by default. Clients and servers that need to use the legacy protocol must explicitly enable it in ssh_config / sshd_config or on the command-line. * Remove the libsectok/OpenSC-based smartcard code and add support for PKCS#11 tokens. This support is automatically enabled on all platforms that support dlopen(3) and was inspired by patches written by Alon Bar-Lev. Details in the ssh(1) and ssh-add(1) manpages. * Add support for certificate authentication of users and hosts using a new, minimal OpenSSH certificate format (not X.509). Certificates contain a public key, identity information and some validity constraints and are signed with a standard SSH public key using ssh-keygen(1). CA keys may be marked as trusted in authorized_keys or via a TrustedUserCAKeys option in sshd_config(5) (for user authentication), or in known_hosts (for host authentication). Documentation for certificate support may be found in ssh-keygen(1), sshd(8) and ssh(1) and a description of the protocol extensions in PROTOCOL.certkeys. * Added a 'netcat mode' to ssh(1): "ssh -W host:port ..." This connects stdio on the client to a single port forward on the server. This allows, for example, using ssh as a ProxyCommand to route connections via intermediate servers. bz#1618
2010-06-11update to 2.30.1drochner7-79/+67
This switches to the gnome-2.30 release branch pkgsrc note: temporarily add a dependency on libgnome-keyring which was split out of the old gnome-keyring pkg, so that client pkgs get the same as before
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-28 03:44:41 +0000