summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2005-03-16Added patches for gcc-2.95.3 that properly order declarations and code.rillig3-1/+46
Approved by wiz.
2005-03-16Added proper CFLAGS quoting. Approved by wiz.rillig1-2/+2
2005-03-14There's no need to manually format and install a nroffed manpage.tv1-13/+1
Install the source and let man(1) do it. (Since this code is actually all commented out, no PKGREVISION bump.)
2005-03-10Make build on Interix, sharing some of the OS-specific oddities with _WIN32.tv4-7/+90
2005-03-10Sort.wiz1-2/+2
2005-03-08Make it explicit that the package doesn't install any authentication mechanismsbad1-2/+7
and what the likely, but opaque, error message is in that case.
2005-03-07nb5: Rework Interix support, based on work done by Interop Systemstv24-337/+613
*before* a BSD-with-advertising license was added to their diffs, and other work done personally by me. sshd now works. Most permissions checks work properly. Privsep is off by default, and the sshd user is not created, on Interix until some problems with privsep are fixed (perhaps by abstracting the auth functionality out to openpam).
2005-03-07Because LIBTOOLIZE_PLIST is "yes" by default we must list only the .la filebad1-10/+1
in the PLIST.
2005-03-07Fix quoting.uebayasi2-4/+4
2005-03-06Bump PKGREVISION with introduce of ruby16-base/ruby18-base pacakge.taca2-4/+4
2005-03-06Add and enable ruby-digest and ruby-openssl.taca1-1/+3
2005-03-06Revive separated ruby packages, ruby-dbm, ruby-zlib, ruby-digest andtaca9-0/+139
ruby-openssl with bump PKGREVISION.
2005-03-06Cosmetic change with pkglint(1).taca1-2/+2
2005-03-04Make p5-GnuPG-Interface and pgpenvelope work again by switching to thetv6-9/+49
Class::MethodMaker v1 compatibility interface in Class::MakeMethods. Bump PKGREVISION.
2005-03-03Update gpg2dot to version 1.4.agc2-14/+15
Fixes from Christoph Badura, who tested on gnupg-1.2. This new version works with gnupg-1.4.0 as well as older versions of gpg, and uses the --list-sigs argument as well as the --with-colons arguments to gpg.
2005-03-02- Change to my NetBSD.org addressadrianp1-2/+2
2005-03-02The path to the Courier authdaemond socket was improperly being set tojlam1-3/+3
the wrong value. Fix it so that the default is now correctly set to be /var/authdaemond/socket. Bump the PKGREVISION to 1.
2005-03-02Problem: Dirmngr depends on pth. With an explicit buildlink to pth, theshannonjr2-4/+14
package builds and works correctly. This approach was taken prior to this change. The is a problem because pth installs pthread.h in ${LOCALBASE}/include. This causes problems for things like Ada tasking that depend on native pthreads when also linking against libraries in pkgsrc (eg., gmp). This change solve the problem by building a static pth library locally and linking against it.
2005-02-28Add fwbuilder to the list of sub directories.bad1-1/+2
2005-02-28- Update to 0.6.8adrianp3-10/+7
> $Id: CHANGES,v 1.25 2005/02/20 16:02:21 sm Exp $ > version 0.6.8 (beta) - Sun Feb 20 2004 > * added detection for openssl 0.9.8 > * removed crlDistributionPoint for Root-CA > * added patch for multiple OUs > Thanks to Uwe Arndt <arndt@uni-koblenz.de> > * added patch for multiple subjectAltName extensions > Thanks to Peter Marschall <peter@adpm.de>
2005-02-28Changes 1.7.1:adam2-10/+8
* Fixed bug which caused hostnames containing hyphens to fail with an error. * Improved mapping of ID numbers to names in decode. This allows sparse IDs ranges (e.g. 1,2,3,65000) to be supported, which means that we can now decode XAUTH authentication method amongst other things. * Added SO_BROADCAST option to UDP socket to allow sending to broadcast addresses. Previously this gave a permission denied error.
2005-02-28Update to 0.2.5:wiz3-7/+10
* Version 0.2.5 (released 2005-02-08) ** Added self test of EXTERNAL mechanism. ** Vietnamese translation added, thanks to Clytie Siddall. * Version 0.2.4 (released 2005-01-01) ** The CRAM-MD5 mechanism is now preferred over DIGEST-MD5. This decision was based on recent public research that suggest MD5 is broken, while HMAC-MD5 not immediately compromised, and the lack of public analysis on what consequences the MD5 break have for DIGEST-MD5. Support for CRAM-SHA1 is under investigation, to enable users to avoid MD5 completely ** Fixed a bug that prevented SMTP client from working. ** New configure option --disable-obsolete to remove backwards compatibility. This is mostly intended to be used when compiling for platforms with constrained memory/space resources. ** DIGEST-MD5 rewritten and enabled by default (see lib/NEWS for details). ** Command line tool now query for realm, hostname and service name properly. ** Documentation updates and improvements. ** Self test improvements. ** Update of gnulib files.
2005-02-27Fix installation on NetBSD 1.6.peter3-7/+17
Reviewed by wiz@
2005-02-26Install some documentation files for courier-authlib, but only install thejlam3-5/+38
relevant ones depending on the options chosen. This fixes PR pkg/29465. Bump the PKGREVISION to 2.
2005-02-26Update to 0.4.1:jmmv3-8/+8
* Support for slaving lifecycle to a file descriptor * Translation updates
2005-02-26Upgrade fwbuilder and libfwbuilder to 2.0.6.bad9-35/+19
The main change is support for printing policies and NAT rules for firewall objects. Also improvments in the iptables compiler and lots of bug fixes, to numerous to mentions. See the release notes at: http://www.fwbuilder.org/archives/cat_release_notes.html#000185
2005-02-26Correct path to courier-authlib in comment.jlam1-3/+3
2005-02-25Work around broken dependency handling by explicitly setting timezonewiz1-1/+2
to UTC. Fixes PR 29530.
2005-02-24Add RMD160 digests.agc202-202/+411
2005-02-24Add RMD160 digests.bad2-2/+4
2005-02-24Initial import of fwbuilder-2.0.5.bad10-0/+204
Firewall Builder is a multi-platform firewall configuration and management tool. It consists of a GUI and a set of policy compilers for various firewall platforms. Firewall Builder uses an object-oriented approach, it helps administrators maintain a database of network objects and allows policy editing using simple drag-and-drop operations. Firewall Builder currently supports iptables, IP Filter, ipfw, OpenBSD PF, and Cisco PIX fwbuilder provides the GUI frontend and the policy compilers.
2005-02-24Replace libfwbuilder with version 2.0.5 as the previous version wasn'tbad9-212/+159
useful. Firewall Builder is a multi-platform firewall configuration and management tool. It consists of a GUI and a set of policy compilers for various firewall platforms. Firewall Builder uses an object-oriented approach, it helps administrators maintain a database of network objects and allows policy editing using simple drag-and-drop operations. Firewall Builder currently supports iptables, IP Filter, ipfw, OpenBSD PF, and Cisco PIX libfwbuilder provides the back-end functionality in a library.
2005-02-23Revert previous, fixed in perl5/module.mk.wiz1-5/+2
2005-02-22Changes 2.5.2:adam4-38/+45
Cross-platform fix for checksumming code. This is *incompatible* with version 2.5.1. As a temporary workaround, setting "bugcompatibility 251" will maintain compatibility with release 2.5.1 for little-endian platforms (e.g. Intel). This will be removed from the final production release. Upgrade to Inno Setup 4. More documentation fixes. Increased the default thread stack size to 64k and added "threadstacksize" for debug/test purposes. Fix handling of HTTP/1.1 responses from proxies. Added acceptconnecttimeout (supersedes "connecttimeout") along with connectattempts, serverconnecttimeout and targetconnecttimeout. Fixed bug with "clienthost" not being honoured when Zebedee was used as a service.
2005-02-22Override MAKE_PARAMS returned set by perl5/module.mk; fixes build on -current.wiz1-2/+5
2005-02-21Changes 2.1.20:adam5-19/+21
* Bug-fixes
2005-02-21Sign over maintainership to tech-pkg@hubertf2-4/+4
2005-02-21Fix the authdaemond rc.d script to invoke the correct script to startjlam2-3/+5
the authentication daemon. Fix provided by Inseo Park in private mail. Also, honor VARBASE. Bump the PKGREVISION to 1.
2005-02-21Remove ruby-openssl package since it is included in ruby18 package now.taca4-71/+0
2005-02-21Remove ruby-digest package since it is included in ruby16/ruby18 package now.taca3-45/+0
2005-02-21Delete databases/ruby-dbm, devel/ruby-zlib, security/ruby-digest andtaca1-3/+1
security/ruby-openssl.
2005-02-21Changes 2.2.3:adam10-28/+28
Nessus 2.2.3 contains a new option called "silent dependencies" which can be used to filter out the noise generated by some plugins not directly enabled by the user. It also contains a slightly more intuitive GUI which now contains a "Credentials" tab to put Windows and SSH usernames and passwords.
2005-02-20when linking shared libssl on Solaris, make sure the rpath isgrant2-6/+14
included so it can find libcrypto.
2005-02-20Fix file installation, add missing samples config filesmanu2-4/+29
2005-02-19Add PKGVULNDIR to BUILD_DEFS.wiz1-1/+3
2005-02-19[Changes for 0.44 - 2004-12-16]wiz2-6/+5
* Add "pmfiles.dat" to legacy manifest_skip routine to accomodate early Win32 hacks. Reported by Steve Hay via Michael Schwern. [Changes for 0.43 - 2004-12-16] * Updated t/0-signature.t to be more friendly with Test::More; contributed by Michael Schwern. * Add $Timeout (default 3 seconds) to control the timeout for probing connections to the key server. * Take account of the .ts files produced by newer MakeMakers in the suggested MANIFEST.SKIP list. [Changes for 0.42 - 2004-11-20] * Move under SVK version control management; ditch keyword tags. * Michael Schwern pointed out that during development, the "signature.t" file would keep failing. * Documented how to generate SIGNATURE files as part of "make dist", for Module::Install, ExtUtils::MakeMaker and Module::Build users .
2005-02-19Update to 1.2.0. From the release announcement:wiz4-70/+371
We are pleased to announce the availability of GnuTLS 1.2.0! This release is the result of the 23 development releases made on the development branch (1.1.x). Major changes compared to the 1.0 branch include: * Moved SRP password authentication from the GnuTLS-extra library (licensed under GPL) to the core library (licensed under LGPL). * The API has been cleaned up, and data types now use a '_t' suffix. * Fixes to handle denial of service problem when verifying long certificate chains. * The manual has been converted to Texinfo and is consequently available in many formats, see: <http://josefsson.org/gnutls/manual/> * A reference API manual has been added, and is available in HTML and DevHelp formats, thanks to GTK-DOC, see: <http://josefsson.org/gnutls/reference/gnutls-gnutls.html> The 1.2.0 version is intended to be stable, and to be a drop-in replacement of the stable 1.0.x branch. We encourage developers to move to the 1.2 branch as soon as possible, since we will now spend less time improving version 1.0.x. We are not planning to open a 1.3 development branch soon, because there are no plans to start work on any major new feature today. Instead, we will continue to carefully improve the quality of this release over time. Improving GnuTLS is costly, but you can help! We are looking for organizations that find GnuTLS useful and wish to contribute back. You can contribute by reporting bugs, improve the software, or donate money or equipment.
2005-02-18Update security/courier-authlib to 0.54. Changes from version 0.53jlam6-16/+47
include: * userdb/makeuserdb.in: Report dangling symlinks.
2005-02-18Update to 0.96:wiz2-7/+6
- Makefile's error messages now correct if output is redirected (patch from Ilya Zakharevich). - Non-blocking connects/accepts now work (Problem found by Uri Guttman). - new_from_fd() now works. - getline() and <> in scalar context now return undef instead of '' when the read failed. (Problem found by Christian Gilmore). - Broken pipe signals are now ignored during socket close to prevent a SSL shutdown message from killing the parent program. (Problem found by Christian Gilmore). - Tests should proceed much more quickly, and a semi-race was fixed, meaning that on slow machines the tests should be more reliable. - Check for Scalar::Util and Weakref now uses default $SIG{__DIE__} instead of a potentially user-altered one (suggestion from Olaf Schneider). This only applies to Perl 5.6.0 & above. - Session caching support (patch from Marko Asplund). - set_default_context() added to alter the behavior of modules that use IO::Socket::SSL from the main program. - get_ssl_object() renamed to _get_ssl_object() to reflect the fact that it's only supposed to be used internally (not that you should have cared, of course). - Added patch for Net::SSLeay to take advantage of client-side session caching. (i.e. use 1.26 of Net-SSLeay)
2005-02-18Update to (inofficial) 1.26 needed by p5-IO-Socket-SSL-0.96:wiz2-7/+8
(1.26)** 30.4.2004 - added get1_session()
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-22 05:53:50 +0000