summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2001-07-23Update to version 3.16.martin3-31/+26
Changes: * Some transfer() bugfixes/improvements. * STDIN/STDOUT are no logner assumed to be non-socket decriptors. * Problem with --with-tcp-wrappers patch fixed. * pop3 and nntp support bug fixed by Martin Germann. * -o option to append log messages to a file added. * Changed error message for SSL error 0. Provided by Martti Kuparinen in PR 13537.
2001-07-22Update ruby-ssl to 0.3.1c.taca2-5/+5
Fri Jul 20 01:26:07 2001 GOTOU YUUZOU <gotoyuzo@notwork.org> * ssl.c (Init_ssl): regardless of scope state, accessors should be public. It is required with 1.6.4 (2001-06-04).
2001-07-20Use "ftp.fu-berlin.de" as first master site because it is about a thousandtron1-2/+3
time faster from Germany and the USA.
2001-07-20Mechanical changes to buildlink.mk files to use EVAL_PREFIX to setjlam2-4/+4
BUILDLINK_PREFIX.<pkgname>. This allows buildlink to find X11BASE packages regardless of whether they were installed before or after xpkgwedge was installed. Idea by Alistair Crooks <agc@pkgsrc.org>.
2001-07-20Mechanical changes to buildlink.mk files to use EVAL_PREFIX to setjlam1-14/+40
BUILDLINK_PREFIX.<pkgname>. This allows buildlink to find X11BASE packages regardless of whether they were installed before or after xpkgwedge was installed. Idea by Alistair Crooks <agc@pkgsrc.org>. Also overhaul code to specify the minimum version of OpenSSL needed by a dependent package. We now set USE_OPENSSL_VERSION to the version number in <openssl/opensslv.h>. Idea also by Alistair Crooks <agc@pkgsrc.org>.
2001-07-20Mechanical changes to buildlink.mk files to use EVAL_PREFIX to setjlam2-4/+4
BUILDLINK_PREFIX.<pkgname>. This allows buildlink to find X11BASE packages regardless of whether they were installed before or after xpkgwedge was installed. Idea by Alistair Crooks <agc@pkgsrc.org>.
2001-07-19Update ruby-ssl to 0.3.1b and utilize USE_OPENSSL_096 for work welltaca3-12/+23
in NetBSD 1.5.1.
2001-07-19We do not need pthreads (as it doesn't work for stunnel), so don't dependmartin1-2/+1
on pth.
2001-07-19Update stunnel to 3.15.martin3-27/+54
Based on a pkg provided by Martti Kuparinen in PR 13484. Changes include: * Serious bug resulting in random transfer() hangs fixed. * Separate file descriptors are used for inetd mode. * -f (foreground) logs are now stamped with time. * New ./configure option: --with-tcp-wrappers by Brian Hatch. * pop3 protocol client support (-n pop3) by Martin Germann. * nntp protocol client support (-n nntp) by Martin Germann. * RFC 2487 (smtp STARTTLS) client mode support. * Transparency support for Tru64 added. * Some #includes for AIX added.
2001-07-18Allow definition of USE_OPENSSL_096 force a minimum dependency ofjlam1-11/+16
openssl>=0.9.6.
2001-07-17Fix patch-ab to not have hardcoded /usr/pkg.nra3-59/+11
2001-07-17Use MESSAGE_SUBST (and its default settings) instead of manually doingwiz2-14/+6
the same.
2001-07-17Enable logcheck.nra1-1/+2
2001-07-17Add logcheck-1.1.1. PR #13271 by Martti Kuparinen.nra8-0/+242
Auditing tool for system logs on Unix boxes. Logcheck helps spot problems and security violations in your logfiles automatically and will send the results to you in e-mail. Logcheck is part of the Abacus Project of security tools. It is a program created to help in the processing of UNIX system logfiles generated by the various Abacus Project tools, system daemons, Wietse Venema's TCP Wrapper and Log Daemon packages, and the Firewall Toolkit(c) by Trusted Information Systems Inc.(TIS). Logcheck also works very well at reporting on other common operating system security violations and strange events.
2001-07-16Update ruby-ssl to 0.3.1.taca4-21/+12
Sun Jun 17 23:27:52 2001 GOTOU YUUZOU <gotoyuzo@notwork.org> * make it the release 0.3.0 Sun Jun 17 16:23:19 2001 GOTOU YUUZOU <gotoyuzo@notwork.org> * sample/verify_cb.rb: for SSLSocket#verify_callback= * sample/x509.rb: new sample for X509. * sample/login.rb: new sample for Net::Telnet. Sun Jun 17 16:07:12 2001 GOTOU YUUZOU <gotoyuzo@notwork.org> * lib/net/protocols.rb: split NetPrivate from https.rb. Sun Jun 17 15:03:02 2001 GOTOU YUUZOU <gotoyuzo@notwork.org> * lib/net/https.rb: use forwardable.rb. * lib/net/https: follow SSLSocket. * lib/net/telnets: ditto. Sun Jun 17 13:00:37 2001 GOTOU YUUZOU <gotoyuzo@notwork.org> * ssl.c: use instance variable (rb_ivar_set/rb_ivar_get) instead of the fields in C structure. * ssl.c: new methods SSLSocket#timeout, SSLSocket#ciphers=, SSLSocket#verify_depth=. * ssl.c: new class X509_STORE_CTX. and fix arguments for the Proc#call at verify callback. * ssl.c: new methods X509#sigAlgor, X509#key_type, X509#extension, X509#verify, #X509#to_s * ssl.c: change the sequence of arguments of SSLSocket.new. Sun Jun 17 12:59:50 2001 GOTOU YUUZOU <gotoyuzo@notwork.org> * ChangeLog: new file.
2001-07-15Pass LDFLAGS through to link step so that zebedee gets the right rpathjlam3-29/+22
for systems where the dependent libraries aren't part of the base system. Don't include tcl/buildlink.mk as the libraries aren't required for the build -- only the tclsh binary is required at run-time. Also honor CFLAGS passed in from environment during the build.
2001-07-15Utilize buildlink.mk methodology and make it work on NetBSD 1.5.1.taca3-9/+14
2001-07-13Update my email address.fredb1-2/+2
2001-07-13In package Makefiles, create FILES_SUBST instead of duplicating sedjlam3-12/+40
expression for substituting in DEINSTALL/INSTALL scripts. Use "${CMP} -s" instead of "diff -q" since the former is more portable across OSes.
2001-07-12Let USE_SSL accept latest version of openssl, in current. Patch suppliedfredb1-1/+2
by Martti Kuparinen in PR pk/13447.
2001-07-12Properly handle the case that precompile package doesn't include atron1-3/+4
"ssh_prng_cmds".
2001-07-11Pull in security fix from basesrc by itojun. Commit message was:wiz3-2/+86
fix PRNG weakness. the workaround presented on bugtraq posting. Update to 0.9.6nb1.
2001-07-10Add support for "SPARC_TARGET_ARCH".tron1-3/+9
2001-07-04remove redundant USE_RUBY.taca1-2/+1
2001-07-01Move inclusion of bsd.buildlink.mk to start of file.jlam5-15/+15
2001-07-01Add and enable ruby-acl, ruby-sha1, ruby-ssl and ruby-tcpwrap.taca1-1/+5
2001-07-01Importing ruby-tcpwrap package.taca4-0/+65
ruby-tcpwrap -- TCP wrappers library for Ruby.
2001-07-01Importing ruby-sha1 package.taca5-0/+61
This is a Ruby module for handling SSL sockets, ported from Python.
2001-07-01Importing ruby-sha1 package.taca5-0/+61
ruby-sha1 - A Ruby interface to the SHA-1 Secure Hash Algorithm This is a Ruby extension which implements the SHA-1 Secure Hash Algorithm by NIST (the US' National Institute of Standards and Technology), described in FIPS PUB 180-1.
2001-07-01Importing ruby-acl package.taca4-0/+71
Ruby-acl provides Access Control List checks. list = %w( deny all allow 192.168.1.* allow 127.0.0.1 ) acl = ACL.new(list, ACL::DENY_ALLOW) ... ns = soc.accept unless acl.allow_socket?(ns) # forbidden end
2001-06-30Add ane enable ruby-md5.taca1-1/+2
2001-06-30Importing Ruby extension to MD5 library.taca3-0/+34
This will be part of ruby meta-package.
2001-06-29Add buildlink.mk file for use by other package Makefiles.jlam1-0/+33
2001-06-29USE_CONFIG_WRAPPER is automatically set if USE_BUILDLINK_ONLY is defined,jlam1-2/+1
so remove it from package Makefiles. Also move the inclusion of the buildlink.mk files to the end of the Makefile to just before bsd.pkg.mk to ensure that any Makefile settings occur before the buildlink.mk files.
2001-06-28make sure to link against local libipsec.a.itojun3-8/+18
From: Michael Richardson <mcr@sandelman.ottawa.on.ca>
2001-06-28Convert to use buildlink.mk files and mark as USE_BUILDLINK_ONLY.jlam5-41/+61
2001-06-28Check for openssl>=0.9.5a when depending on openssl.jlam1-4/+23
2001-06-28Convert to use buildlink.mk files and mark as USE_BUILDLINK_ONLY.jlam1-7/+5
2001-06-28add and enable gpawiz1-1/+2
2001-06-28Initial import of gpa, a graphical front-end for GnuPG.wiz4-0/+42
Still in development, not recommended for production use yet. Package provided by Peter Reich in pkg/12952, with some touch-ups by me.
2001-06-26Remove build time dependency on autoconf by adding a patch for configure.wiz3-9/+72
Fixes pkg/13004.
2001-06-25Rename rc.d script from xdm-krb4 to xdm_krb4, following a suggestionwiz3-8/+8
by Masao Uebayashi in pkg/13251, part 2.
2001-06-25Apply patch from pkg/13295; seems not to hurt NetBSD, and should helpwiz3-5/+6
Solaris. Bump to 1.10.
2001-06-24Update to the latest version. Fixes pr#13272veego2-5/+5
2001-06-24Enable zebedee.taca1-1/+2
2001-06-24Importing zebedee 2.2.2. Quoting from README.txt is here.taca6-0/+186
Zebedee Secure Tunnel ===================== Zebedee is a simple program to establish an encrypted, compressed "tunnel" for TCP/IP or UDP traffic between two systems. This allows data from, for example, telnet, ftp and X sessions to be protected from snooping. You can also use compression, either with or without data encryption, to gain performance over low-bandwidth networks. The main goals for Zebedee are to: * Provide client and server functionality under both UNIX and Windows 95/98/NT. * Be easy to install, use and maintain with little or no configuration required. * Have a small footprint, low wire protocol overhead and give significant traffic reduction by the use of compression. * Use only algorithms that are either unpatented or for which the patent has expired. * Be entirely free for commercial or non-commercial use and distributed under the term of the GNU General Public Licence (see LICENCE.txt for details). For further information on how to use Zebedee see the file zebedee.html in the distribution (or the manual page for zebedee(1) under UNIX -- it is basically the same text). Example configuration files are also provided.
2001-06-23Generalize how the dependency pattern may be specified. Instead of justjlam4-20/+18
FOO_REQD=1.0 being converted to foo>=1.0, one can now directly specify the dependency pattern as FOO_DEPENDS=foo>=1.0. This allows things like JPEG_DEPENDS=jpeg-6b, or fancier expressions like for postgresql-lib. Change existing FOO_REQD definitions in Makefiles to FOO_DEPENDS.
2001-06-20Convert to use buildlink.mk files and mark as USE_BUILDLINK_ONLY.jlam1-4/+6
2001-06-20Update to 3.14, from Martti Kuparinen via pkg/13256.wiz2-5/+5
Change: * Pidfile creation algorithm has been changed.
2001-06-19Convert to use buildlink.mk files and mark as USE_BUILDLINK_ONLY.jlam6-18/+20
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-13 08:38:11 +0000