summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2001-12-06Updated to 1.6b. List of changes is unknown as there is no ChangeLog file.martti2-5/+5
2001-12-05Fix path to example files in MESSAGE. Reported by Paul Hoffmann.wiz1-2/+2
2001-12-05Normalise all the uses of "wheel", and "root" for ${ROOT_GROUP}, now thatagc1-7/+1
the definition is available in all the defs.${OPSYS}.mk files.
2001-12-04By default, prevent invocation of GNU "auto*" driven by the generatedjlam1-2/+1
Makefiles during the build process by touching various auto{conf,make} source files to make them up-to-date. Packages that require regenerating the configure script and Makefile.in files should make the appropriate calls to auto{conf,make} in a pre-configure target. This allows the various targets listed in ${_CONFIG_PREREQ} to modify the generated files without triggering the GNU auto* tools and having the modifications be overwritten.
2001-12-03Use PKGREVISION to manage the package-specific version number when itjlam1-2/+2
differs from the distfile version number. G/C some the unused variables in php4/Makefile.common related to the old way of handling version numbers.
2001-12-03* Updated to 3.0.2.1martti5-69/+74
* Disabled scard-install (patch/patch-ah -- Do we need/want it?) Changes since 2.9.9.2: - Don't allow authorized_keys specified environment variables when UseLogin in active - Fix IPv4 default in ssh-keyscan - Fix early (and double) free of remote user when using Kerberos - fix krb5 authorization check - enable authorized_keys2 again - ignore SIGPIPE early, makes ssh work if agent dies, netbsd-pr via itojun@ - make ~& (backgrounding) work again for proto v1; add support ~& for v2, too - pad using the padding field from the ssh2 packet instead of sending extra ignore messages - missing free and sync dss/rsa code - crank c->path to 256 so they can hold a full hostname - cleanup libwrap support - Fix fd leak in loginrec.c - avoid possible FD_ISSET overflow for channels established during channnel_after_select() - chdir $HOME after krb_afslog() - stat subsystem command before calling do_exec - close all channels if the connection to the remote host has been closed, should fix sshd's hanging with WCHAN==wait - add NoHostAuthenticationForLocalhost; note that the hostkey is now check for localhost, too - loginrec.c: fix type conversion problems exposed when using 64-bit off_t - Update spec files for new x11-askpass
2001-12-02bsd.pkg.install.mk calls the INSTALL script at the right timesjlam3-7/+3
automatically, so no need to do it ourselves.
2001-11-30Oops. Correct leftover SHA1 -> HMACmjl1-2/+2
2001-11-30Enable p5-Digest-HMACmjl1-1/+2
2001-11-30Import p5-Digest-HMAC-1.01mjl4-0/+31
HMAC is used for message integrity checks between two parties that share a secret key, and works in combination with some other Digest algorithm, usually MD5 or SHA-1. The HMAC mechanism is described in RFC 2104.
2001-11-29A dependency on automake implies a dependency on autoconf; there's no needjlam1-2/+1
to list them both when we listing just automake will do.
2001-11-29Get rid of manually adding "nbX" to PKGNAME when a pkg was changed inhubertf5-10/+11
pkgsrc. Instead, a new variable PKGREVISION is invented that can get bumped independent of DISTNAME and PKGNAME. Example #1: DISTNAME= foo-X.Y PKGREVISION= Z => PKGNAME= foo-X.YnbZ Example #2: DISTNAME= barthing-X.Y PKGNAME= bar-X.Y PKGREVISION= Z => PKGNAME= bar=X.YnbZ (!) On subsequent changes, only PKGREVISION needs to be bumped, no more risk of getting DISTNAME changed accidentally.
2001-11-28Updated to p5-Net-SSLeay-1.09 (provided by Shell Hung in pkg/14512)martti2-6/+6
1.09 20.8.2001, - fixed Makefile.PL (computation of bin_path) and test.pl ($perl use before defined) per Gordon Lack <gml4410@ggr.co.uk> 11.9.2001, - Patch by Jeremy Mates <jmates@mbt.washington.edu> to make Handle.pm more acceptable for older perls 25.9.2001, - systematically implemented many of the newer functions of openssl API (per popular request and for completeness)
2001-11-28Update to 2.4.18, provided by Shell Hung in pkg/14707.wiz2-5/+5
Change: memory leak fixed.
2001-11-26Use PKG_{USERS,GROUPS} instead of PKG_{USER,GROUP}.jlam2-7/+7
2001-11-26Forgot a CONFDIR -> PKG_SYSCONFDIR replacement.jlam2-4/+4
2001-11-26Missed a CONFDIR -> PKG_SYSCONFDIR replacement.jlam1-2/+2
2001-11-26Buildlinkify, in the sense that only the perl headers are found injlam17-40/+56
${PREFIX} -- everything else is pickup up from ${BUILDLINK_DIR}.
2001-11-25PKG_SYSCONFDIR is where the configuration files for a package may be found.jlam3-7/+7
This value may be customized in various ways: PKG_SYSCONFBASE is the main config directory under which all package configuration files are to be found. PKG_SYSCONFSUBDIR is the subdirectory of PKG_SYSCONFBASE under which the configuration files for a particular package may be found. PKG_SYSCONFDIR.${PKGBASE} overrides the value of ${PKG_SYSCONFDIR} for a particular package. Users will typically want to set PKG_SYSCONFBASE to /etc, or accept the default location of ${PREFIX}/etc. This obsoletes the use of CONFDIR, which was active for only 6 days, so no need to have a workaround to still accept old CONFDIR settings.
2001-11-23Update to 2.09, provided by Shell Hung in pkg/14695.wiz3-11/+12
Changes since 2.06: - changed keysize back to 0 apparently setting keysize to 8 triggered a bad hack in Crypt::CBC which resulted in OpenSRS breaking. the "bad hack" in question is: $ks = $cipher =~ /blowfish/i ? 56 : 8 unless $ks > 0; ... anyway.. fixed. - added two new functions: min_keysize and max_keysize these allow modules like Crypt::CBC_IL and Crypt::CBC_R to use variable key lengths with CBC modes. - cleaned up test.pl - updated README - minor change in XS - additions to reported platforms Remove package version number from DESCR.
2001-11-23Stop the SSH daemom from truncating output on slow networks and/ortron2-5/+31
machines. Patch supplied by Michael Eriksson in PR pkg/9119.
2001-11-22Updated to version 4172 to include even more virus definitions.martti2-5/+5
2001-11-21Buildlinkify, respect ${CONFDIR}, use general INSTALL/DEINSTALL scripts,jlam6-204/+136
and make sasl_passwd into a real rc.d script.
2001-11-21These rc.d scripts are copied to ${RCD_SCRIPTS_DIR} == /etc/rc.d, so changejlam1-6/+6
the test for pre-rc.d systems to just whether /etc/rc.subr is present.
2001-11-21RCD_SCRIPTS now just lists the filenames (see bsd.pkg.install.mk).jlam1-2/+2
2001-11-21Buildlinkify and use general INSTALL/DEINSTALL scripts. Also modify rc.djlam4-102/+81
script to respect ${CONFDIR} and look more like other 1.5-release rc.d scripts.
2001-11-20Updated to version 3.21.3 (a.k.a 3.21c).martti4-36/+116
Changelog for version 3.21c, 2001.11.11, urgency: LOW: * autoconf scripts upgraded to version 2.52. * Problem with pthread_sigmask on Darwin fixed (I hope). * Some documentation typos corrected. * Attempt to ignore EINTR in transfer(). * Shared library version reported on startup. * DLLs for OpenSSL 0.9.6b.
2001-11-19Mark as USE_BUILDLINK_ONLY.jlam1-1/+2
2001-11-19Correct the list of headers.jlam1-5/+5
2001-11-19Respect ${CONFDIR} and use the general INSTALL/DEINSTALL scripts.jlam7-158/+49
2001-11-11Adjust format a bit:hubertf2-2/+8
* 75 * '=' * RCS ID * blank line * message text * optional blank line * 75 * '='
2001-11-09Updated keychain to version 1.7. Changes since 1.2:martti3-95/+32
* Use procmail's lockfile to serialize the execution of critical parts of keychain, thus avoiding multiple ssh-agent processes being started if you happen to have multiple xterms open automatically when you log in. Keychain will now auto-detect whether lockfile is installed; if it is, keychain will automatically use it * No longer "kill -9" our ssh-agent processes * Added argument "--quiet | -q" * Added "-h" as alias for "--help", added "-k" as alias for "--stop" * Add /usr/ucb to path for Solaris systems * Try to add multiple keys using ssh-add; avoid typing in identical passphrases more than once. * Misc. compatibility, signal handling, cleanup fixes * We now use .ssh-agent-[hostname] instead of .ssh-agent * "source" to "." shell-compatibility fixes. * "rm -f $pidf" after stopping ssh-agent fix
2001-11-09Update pgpdump to 0.14jun2-5/+5
0.14 2001/11/09 * Catching up to 2290bis-03.
2001-11-05The "aliases" file is now in /etc/mail, not /etc.hubertf1-2/+2
Pointed out by Volker Stolz <stolz@hyperion.informatik.rwth-aachen.de> in private mail.
2001-11-03Updated stunnel to 3.21.2. There was a file descriptor leak onmartti2-6/+6
failed connect() calls.
2001-11-02I'll be the new maintainer for stunnel (agreed with martin)martti1-2/+2
2001-11-02Fixed MASTER_SITESmartti1-3/+3
2001-11-01move pkg/INSTALL.SunOS to pkg toplevel directory or else this pkg is brokenseb1-1/+1
2001-11-01Update "stunnel" package to version 3.21.1 (3.21a). Changes since versiontron2-5/+6
3.21: - Small bug in Makefile fixed.
2001-11-01Move pkg/ files into package's toplevel directoryzuntum285-190/+190
2001-10-31Changelog for version 3.21, 2001.10.31, urgency: MEDIUM:martti3-15/+15
* Problem with errno and posix threads fixed. * It is assumed that system has getopt() if it has getopt.h header file. * SSL_CLIENT_DN and SSL_CLIENT_I_DN environment variables set in local mode (-l) process. This feature doesn't work if client mode (-c) or protocol negotiation (-n) is used. * Winsock error descriptions hardcoded (English version only). * SetConsoleCtrlHandler() used to handle CTRL+C, logoff and shutdown on Win32. * Stunnel always requests peer certificate with -v 0. * sysconf()/getrlimit() used to calculate number of clients allowed. * SSL mode changed for OpenSSL >= 0.9.6. * close-on-exec option used to avoid socket inheriting. * Buffer size increased from 8KB to 16KB. * fdscanf()/fdprintf() changes: - non-blocking socket support, - timeout after 1 minute of inactivity. * auth_user() redesigned to force 1 minute timeout. * Some source arrangement towards 4.x architecture. * No need for "goto" any more. * New Makefile "test" rule. It performs basic test of standalone/inetd, remote/local and server/client mode. * pop3 server mode support added.
2001-10-27Remove commented USE_LIBINTL definitions ... we already use thejlam1-2/+1
gettext-lib/buildlink.mk file.
2001-10-26upgrade to 20011026a. 20011016a had a serious bug in tunnel mode SAitojun2-6/+6
establishment.
2001-10-25Update pgpdump to 0.13jun2-5/+5
* Workaround for minus date. * No-libz hack. * Small fixes.
2001-10-22Make amavis conflict with amavis-perlmartti1-1/+3
2001-10-22Added amavis-perl-20010714martti1-1/+2
2001-10-22This is amavis-perl (a.k.a. amavisd), a virus scanning script written in perl.martti6-0/+222
The currently supported MTAs are exim, qmail, postfix, and sendmail. Please refer to the corresponding README.mta file for further documentation.
2001-10-22Backed out the update. I'll create a new package amavis-perl...martti6-91/+168
2001-10-22This is a new version taken from OpenBSD just before their next release.martti4-24/+67
Exact list of changes is unknown (you might take a look at OpenBSD's log entries at http://www.openbsd.org/cgi-bin/cvsweb/src/sbin/isakmpd/)
2001-10-22This version is a big change from the 0.2.x series of the software asmartti6-168/+91
the main virus scanning script has been rewritten in perl, replacing the original shell script. The currently supported MTAs are exim, qmail, postfix, and sendmail. Please refer to the corresponding README.mta file for further documentation.
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-11 03:54:13 +0000