summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2000-08-14use devel/libnet, not net/libnet (devel/libnet has been there foritojun1-2/+2
more than half a year)
2000-08-11add RCS tagwiz1-0/+1
2000-08-11correct BUILD_DEPENDSitojun1-3/+3
2000-08-11BUILD_DEPENDS instead of DEPENDS since those libraries are static, andjlam1-3/+6
aren't needed at run-time.
2000-08-11add net/dsniffitojun1-1/+2
2000-08-11adapt to netbsd builditojun3-24/+11
2000-08-11dsniff 2.2itojun5-0/+56
2000-08-11When looking for -lcrypto, test linking with:jlam2-1/+76
-lcrypto NetBSD-1.5* -lcrypto -lrsaref OpenSSL and USE_RSAREF2=NO -lcrypto -lRSAglue -lrsaref OpenSSL and USE_RSAREF2=YES and use the first set of libraries which work. Closes the following PRs: 9820, 10268, 10681.
2000-08-11Add and enable ssh-askpassjlam1-1/+2
2000-08-11ssh-askpass - X11-based passphrase dialog for OpenSSHjlam7-0/+51
2000-08-11Set location of ssh-askpass to be ${X11PREFIX}/bin/ssh-askpass.jlam3-5/+20
Closes PR#10774.
2000-08-11add some comment on license change.itojun1-1/+5
we need stick to 1.2.27 (use openssh).
2000-08-10Comment out Kerberos 5 support, for now.thorpej2-14/+16
2000-08-10Don't syslog krb5_init_context() failure. It can happen ifthorpej2-7/+17
Kerberos is simply not configured on the system.
2000-08-10Make this work with Heimdal Kerberos 5. Requires fleshed-out MCCthorpej3-5/+48
support in Heimdal.
2000-08-09Remove a commend/if clause which turns out to not actuallythorpej1-4/+1
be true.
2000-08-09Add master site on ftp.openssh.com.wiz1-1/+4
Add note why we have both openssh.com entries.
2000-08-06master site moved stuffhubertf1-15/+15
2000-08-05mention license change issue in 1.2.27 -> 1.2.28.itojun1-1/+5
2000-08-04Fix a bug where the parser would fail if a keylength was notthorpej2-1/+39
explicitly specified in a Phase-1 proposal statement. Patch sent to sakane@kame.net.
2000-08-03Update nessus to 1.0.4.frueauf8-17/+43
What is new in Nessus 1.0.4 : changes by Christoph Puppe (pluto at defcom-sec.com) : added "Sort by Port" to the report window. Reports are sorted first by holes, then by warnings, then by notes. Previous version only sorted by holes. changes by Renaud Deraison (renaud at nessus.org) : ftp related checks : the user can now supply a login/password for the ftp checks, and relies on the ftp banner if nessusd can't log into the ftp server (requested by Jens.Oeser at connector.de). libnessus : ftp_log_in() would sometime fail against some ftp servers better handling of large reports on the client side tests are saved on the server side and can be restored. Note that this is experimental and disabled by default. Do ./configure --enable-save-sessions to enable this feature, and read doc/session_saving.txt for details. better handling of targets with multiple web servers running continue to launch the DoS if the state of the remote host can not be determined fixed a bug in smb_login_as_users.nasl, and improved smb_accessible_shares.nasl added checks for unpassworded MySQLs and PostgreSQL databases nessusd uses less memory changes by Pavel Kankovsky (peak at argo.troja.mff.cuni.cz) : fixed a possible deadlock in the nessusd internal communication fixed a problem in the client that would make it crash if it received a malformed message from the server the client would not detect the death of the server when run in batch mode possible header confusion (with regex.h) fixed possible signal deadlock when exiting fixed Other changes : fixed a problem in the function is_cgi_installed() that may sometime not work against odd clients (Thomas Reinke (reinke at e-softinc.com)) fixed a bug in snmp_default_communities.nasl (Lionel Cons (lionel.cons at cern.ch)) fixed showmount.nasl (Paul Ewing Jr. (ewing at ima.umn.edu)) typo in showmount.nasl would prevent it to work over udp (ctor at krixor.xy.org)
2000-07-31The gettext package gained a shared library. For all packages whichjlam1-2/+2
link against libintl.so, update the dependency on gettext to >=0.10.35nb1.
2000-07-30update to latest (7/31), to sync with /usr/include/netinet6/ipsec.h change.itojun4-17/+17
- improvements in multiple address case - sync with improvements in INET2000 bakeoff
2000-07-30Add libnasl, nessus-core, nessus-libraries and nessus-plugins tofrueauf1-1/+5
the SUBDIR entries.
2000-07-30Update nessus to 1.0.3.frueauf11-346/+68
Main change is the splitup into libnasl, nessus-libraries, nessus-core and nessus-plugins. Too many changes come with 1.0.3, but most noteable the number of checked security vulnerabilities increased and got updated. This is based on work Hubert Feyrer did on some former version.
2000-07-30Initial import of nessus-plugins 1.0.3, the Plugins for the Nessus Networkfrueauf5-0/+489
Security Scanner. Based on work Hubert Feyrer did on some former version.
2000-07-30Initial import of nessus-libraries 1.0.3, the Libs required by the Nessusfrueauf9-0/+104
Network security scanner. Based on work Hubert Feyrer did on some former version.
2000-07-30Initial import of nessus-core 1.0.3, the Core module of the Nessus Networkfrueauf8-0/+77
Security Scanner. Based on work from Hubert Feyrer for some former version.
2000-07-30Initial import of libnasl, a Nessus Attack Scripting Language library.frueauf5-0/+29
Based on work Hubert Feyrer did for some former version.
2000-07-28It's openssl>=0.9.5a, not openssl>=0.9.5.jlam1-3/+3
2000-07-27Add and enable pksjlam1-1/+2
2000-07-27pks - PGP Key Serverjlam13-0/+309
Taken from PR#10394 by Dave Burgess <burgess@neonramp.com> with modifications.
2000-07-26Make it work on Solaris.veego4-5/+13
2000-07-25Address concern raised in pkg/10268, part 3, by telling user how to getjlam1-5/+12
a working /dev/urandom if it's found not to work.
2000-07-25This produces some funny errors:hubertf1-2/+2
RESTRICT="foo; bar" Fix by s/;/,/
2000-07-24Make all the installed /usr/pkg/etc/rc.d/sshd.sh files match.jlam3-22/+96
Also default to "start" command if run with no arguments.
2000-07-24Add german mirror to master site list.tron1-2/+3
2000-07-22INSTALL file containing post-install code factored from package Makefilejlam1-0/+48
and PLIST.
2000-07-22Update openssh to 2.1.1p4.jlam8-84/+124
Package changes: * Factor out common post-install code from PLIST and package Makefile into files/INSTALL. * Enhance files/sshd.sh to handle start/stop/restart/status. * Check for usable installed version of OpenSSL. This bit possibly closes the following PRs: 10404, 10501, 10593 Changes from 2.1.1p3: * allow multiple whitespace but only one '=' between tokens * close can fail on AFS * allow leading whitespace in configuration files * Always create ~/.ssh with mode 700
2000-07-20Do not use NO_PACKAGE and NO_CDROM to denote restricted packages. Use therh2-6/+10
appropriate variables instead.
2000-07-20fix illegal name/version differenthubertf1-2/+3
2000-07-18update to 20000719a.itojun2-4/+4
changes: basically, result from TAHI 2nd interop test (www.tahi.org) - phase 1/2 SA removal corrections - remove possible memory leak - no notify message on information exchange - correct isakmp payload manipulation on duplicated payload types
2000-07-18update from racoon 20000701a tree to 20000716a tree.itojun2-4/+4
changes: - RFC2367 conformance for SADB_[AE]ALG_xxx. - implement initial contact - runs in background by default - delete notification - improve error handling
2000-07-17Add patch to make gnupg work on macppc/ELF.wiz2-1/+21
Patch provided by Gabriel Rosenkoetter <gr@eclipsed.net>.
2000-07-17Add Solaris support.veego2-5/+21
2000-07-16Man page is not distributed by itself anymore. (undo last commit, fix itwiz2-7/+2
correctly)
2000-07-16Corrected distfile name (two places) so package builds.mason1-3/+3
2000-07-15No '-' in pkg version!hubertf1-2/+2
2000-07-15Set maintainer to wiz@netbsd.org.wiz1-2/+2
2000-07-15Update gnupg to 1.0.2. NetBSD changes had been mailed to author andwiz6-56/+17
have been integrated. Relevant Changes: * Fixed expiration handling of encryption keys. * Add an experimental feature to do unattended key generation. * The user is now asked for the reason of revocation as required by the new OpenPGP draft. * There is a ~/.gnupg/random_seed file now which saves the state of the internal RNG and increases system performance somewhat. This way the full entropy source is only used in cases were it is really required. Use the option --no-random-seed-file to disable this feature. * New options --ignore-time-conflict and --lock-never. * Encryption is now much faster: About 2 times for 1k bit keys and 8 times for 4k keys. * New encryption keys are generated in a way which allows a much faster decryption. * New command --export-secret-subkeys which outputs the _primary_ key with it's secret parts deleted. This is useful for automated decryption/signature creation as it allows to keep the real secret primary key offline and thereby protecting the key certificates and allowing to create revocations for the subkeys. See the FAQ for a procedure to install such secret keys. * Keygeneration now writes to the first writeable keyring or as default to the one in the homedirectory. Prior versions ignored all --keyring options. * New option --command-fd to take user input from a file descriptor; to be used with --status-fd by software which uses GnuPG as a backend. * There is a new status PROGRESS which is used to show progress during key generation. * Support for the new MDC encryption packets. To create them either --force-mdc must be use or cipher algorithm with a blocksize other than 64 bits is to be used. --openpgp currently disables MDC packets entirely. This option should not yet be used. * New option --no-auto-key-retrieve to disable retrieving of a missing public key from a keyerver, when a keyerver has been set. * Danish, Esperanto, Japanese, Dutch, and Swedish translations
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-14 19:02:56 +0000