summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2016-09-04Updated py-oauthlib to 2.0.0.wiz3-8/+11
2.0.0 (2016-09-03) ------------------ * (New Feature) **OpenID** support. * Documentation improvements and fixes.
2016-09-02+ py-pbkdf2, py-slowaeswiz1-1/+3
2016-09-02Import py-pbkdf2-1.3 as security/py-pbkdf2.wiz4-0/+38
Packaged for wip by Jonathan Schleifer. PKCS#5 v2.0 PBKDF2 Module This module implements the password-based key derivation function, PBKDF2, specified in RSA PKCS#5 v2.0.
2016-09-02Import py-slowaes-0.1a1 as security/py-slowaes.wiz4-0/+34
Packaged for wip by Neil Booth. Implementation of AES in pure Python. As such it will be slow (hence the project name) but still useful when faster ones are not available (for example, for JavaScript clients in browsers, and Python servers on Google App Engine).
2016-09-01Use COMPILER_RPATH_FLAG properly. Reconciles libgcrypt-config withfhajny3-5/+12
Darwin linker. Fixes joyent/pkgsrc#400. Bump PKGREVISION.
2016-08-31Updated py-cryptography to 1.5.wiz2-7/+7
1.5 - 2016-08-26 ~~~~~~~~~~~~~~~~ * Added :func:`~cryptography.hazmat.primitives.asymmetric.padding.calculate_max_pss_salt_length`. * Added "one shot" :meth:`~cryptography.hazmat.primitives.asymmetric.dsa.DSAPrivateKey.sign` and :meth:`~cryptography.hazmat.primitives.asymmetric.dsa.DSAPublicKey.verify` methods to DSA keys. * Added "one shot" :meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.sign` and :meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey.verify` methods to ECDSA keys. * Switched back to the older callback model on Python 3.5 in order to mitigate the locking callback problem with OpenSSL <1.1.0. * :class:`~cryptography.x509.CertificateBuilder`, :class:`~cryptography.x509.CertificateRevocationListBuilder`, and :class:`~cryptography.x509.RevokedCertificateBuilder` now accept timezone aware ``datetime`` objects as method arguments * ``cryptography`` now supports OpenSSL 1.1.0 as a compilation target.
2016-08-31Updated p5-Crypt-ECB to 2.20.wiz2-10/+8
v2.20, 30.03.2016 - made passing a custom padding method possible without specifying a cipher before - added verifying correct truncation of custom padding methods - added verifying padded bytes when truncating (for standard and zeroes padding) - added testing encrypt_hex and decrypt_hex function style - added testing start-crypt-finish - added testing usage of pre-existing cipher objects - updated eg/ecb.pl to recognize cipher modules in the Crypt::OpenSSL namespace - added option to eg/ecb.pl to print the Crypt::ECB version used - changed license again, to GPL or Artistic
2016-08-29PR pkg/51449jym3-20/+34
Update stunnel to 5.35. - Add patch to provide an explicit chroot option to the default configuration sample (option is documented but not found within the default conf file). While here, enable setuid/setgid as stunnel user/group creations are handled by package. - Rework SUBSTs so that they apply to the correct sample config file. Changelog: Version 5.35, 2016.07.18, urgency: HIGH * Bugfixes - Fixed incorrectly enforced client certificate requests. - Only default to SO_EXCLUSIVEADDRUSE on Vista and later. - Fixed thread safety of the configuration file reopening. Version 5.34, 2016.07.05, urgency: HIGH * Security bugfixes - Fixed malfunctioning "verify = 4". * New features - Bind sockets with SO_EXCLUSIVEADDRUSE on WIN32. - Added three new service-level options: requireCert, verifyChain, and verifyPeer for fine-grained certificate verification control. - Improved compatibility with the current OpenSSL 1.1.0-dev tree. Version 5.33, 2016.06.23, urgency: HIGH * New features - Improved memory leak detection performance and accuracy. - Improved compatibility with the current OpenSSL 1.1.0-dev tree. - SNI support also enabled on OpenSSL 0.9.8f and later (thx to Guillermo Rodriguez Garcia). - Added support for PKCS #12 (.p12/.pfx) certificates (thx to Dmitry Bakshaev). * Bugfixes - Fixed a TLS session caching memory leak (thx to Richard Kraemer). Before stunnel 5.27 this leak only emerged with sessiond enabled. - Yet another WinCE socket fix (thx to Richard Kraemer). - Fixed passphrase/pin dialogs in tstunnel.exe. - Fixed a FORK threading build regression bug. - OPENSSL_NO_DH compilation fix (thx to Brian Lin).
2016-08-28Update netpgpverify and libnetpgpverify to 20160828agc3-28/+34
+ bring over change from christos in src/crypto to check for the end of an ASCII-armored signature + no need for namespace protection in array.h any more, now that netpgp/verify.h now contains opaque structures + minor typo clean-up in a definition (benign, ignored by compiler)
2016-08-28Remove unnecessary PLIST_SUBST and FILES_SUBST that are now providedwiz1-3/+1
by the infrastructure. Mark a couple more packages as not ready for python-3.x.
2016-08-24Updated caff to 2.4.wiz2-8/+7
signing-party (2.4-1) unstable; urgency=medium * caff, gpg-key2latex, gpgsigs: Ignore "KEY_CONSIDERED" status output emitted by gpg 2.1.13 and later. * caff, gpgsigs: Allow input produced by gpgparticipants(1) using gpg 2.1.13. With this version, key IDs are not displayed by default and the "Key fingerprint = " prefix is omitted. * caff: + Fix GnuPG version number comparison. + With GnuPG 2.1.13 or later, use gpgconf(1) to determine the socket paths. (It is not used on earlier gpg since earlier gpgconf do not support --homedir.) This fixes compatibility with GnuPG 2.1.13. (Closes: #834984) + When ~/.caff/gnupghome/gpg.conf does not exist, instead of creating a temporary file (as it's done since signing-party 2.3), parse ~/.gnup/gpg.conf and pass the GnuPG options that are known to be safe (and useful) for caff to gpg(1) using command line options. This soves the problem of lingering configuration files in case caff is killed. + Use full fingerprints internally to avoid collisions. (However $CONFIG{'keyid'} and $CONFIG{'local-users'} are kept to 64-bits key IDs as per RFC 4880 full fingerprints are not available in key signatures, and thus not exposed by `gpg --with-colons --list-sigs`.) + Automatically import the $CONFIG{'also-encrypt-to'} from the normal GnuPGHOME when possible. * d/source.lintian-overrides: Add 'debian-watch-file-is-missing' as we're upstream. * d/control: Remove Franck Joncourt from the Uploaders list per request of the MIA team. (Closes: #831321) -- Guilhem Moulin <guilhem@guilhem.org> Mon, 22 Aug 2016 00:19:48 +0200
2016-08-24Updated p5-IO-Socket-SSL to 2.037.wiz2-7/+7
2.037 2016/08/22 - fix session cache del_session: it freed the session but did not properly remove it from the cache. Further reuse causes crash.
2016-08-22Updated libksba to 1.3.5.wiz2-7/+7
Noteworthy changes in version 1.3.5 (2016-08-22) [C19/A11/R6] ------------------------------------------------ * Limit the allowed size of complex ASN.1 objects (e.g. certificates) to 16MiB. * Avoid read access to unitialized memory. * Improve detection of invalid RDNs. * Encode the OCSP nonce value as an octet string as described by RFC-6960.
2016-08-22Update security/hitch to 1.3.1.fhajny4-20/+20
hitch-1.3.1 (2016-08-16) - Fixes a bug in the autotools configuration which led to man pages not being built. hitch-1.3.0 (2016-08-16) - Fix a bug where we crashed in the OCSP handling if there was no default SSLCTX configured. - Minor documentation fix. hitch-1.3.0-beta3 (2016-07-26) - Fully automated retrieval and refreshes of OCSP responses (see configuration.md for details). - New parameters ocsp-dir, ocsp-resp-tmo and ocsp-connect-tmo. - Cleanup of various log messages. - Verification of OCSP staples. Enabled by setting ocsp-verify-staple = on. - Make rst2man an optional requirement (#93). Thanks to Barry Allard. - Avoid stapling expired OCSP responses - A few fixes to the shared cache updating code. Thanks to Piyush Dewnani hitch-1.3.0-beta2 (2016-05-31) - Options given on the command line now take presedence over configuration file settings. I.e. there is no longer a need to specify --config first to get this behavior. - Config file regression: "yes" and "no" are now accepted by the config file parser as boolean values. - Documentation improvements and spelling fixes. - Various minor autotools build fixes. hitch-1.3.0-beta1 (2016-05-11) - Support for OCSP stapling (see configuration.md for details) - Initialize OpenSSL locking callback if an engine is loaded. Some SSL accelerator cards have their custom SSL engine running in a multithreaded context. For these to work correctly, Hitch needs to initialize a set of mutexes utilized by the OpenSSL library. - #82: A mistake in the SNI lookup code caused us to inspect the wrong list when looking for wildcard certificate matches.
2016-08-21Update KDE Frameworks to 5.25.0markd5-18/+18
5.22: KWallet Framework * disable seession restore for kwalletd5 5.23: KWallet Framework * KWalletd migration: fix error handling, stops the migration from happening on every single boot.
2016-08-21Add and enable pear-Crypt_GPG.taca1-1/+2
2016-08-21Add pear-Crypt_GPG 1.4.2.taca4-0/+43
This package provides an object oriented interface to GNU Privacy Guard (GnuPG). It requires the GnuPG executable to be on the system. Though GnuPG can support symmetric-key cryptography, this package is intended only to facilitate public-key cryptography.
2016-08-20Depends on libgpg-error-1.13.wiz1-2/+2
From David H. Gutteridge in PR 51430.
2016-08-20Add upstream bug report URL, thanks bsiegert!wiz2-3/+4
2016-08-20Link gpgscm against libintl to fix build failures. Add required minimumbsiegert3-2/+21
versions of libcrypt and libksba. Reported by Andreas Kusalananda Kähäri in mail to pkgsrc-user.
2016-08-20Revbump packages using Go for Go 1.7 release.bsiegert3-5/+6
2016-08-19Updated p5-Net-SSLeay to 1.78.wiz2-7/+7
1.78 2016-08-13 Fixed broken OCSP code and tests. Broken since 1.75. Patched by Steffen Ullrich. Thanks.
2016-08-19Updated p5-IO-Socket-SSL to 2.036.wiz2-7/+7
Changes for 2.036 not documented. 2.035 2016/08/11 - fixes for issues introduced in 2.034 - return with error in configure_SSL if context creation failed. This might otherwise result in an segmentation fault later. - apply builtin defaults before any (user configurable) global settings (i.e. done with set_defaults, set_default_context...) so that builtins don't replace user settings Thanks to joel[DOT]a[DOT]berger[AT]gmail[DOT]com for reporting
2016-08-18Update security/keychain to 2.8.2.nonaka4-30/+10
* keychain 2.8.2 (06 Nov 2015) Summary: Support new ssh features, bug fix release. Support for new hash algorithms (Ben Boeckel) Remove bashisms (Daniel Hertz) Various optimizations (Daniel Hahler) --timeout option now gets passed to agent, doc fixes (Andrew Bezella, Emil Lundberg) RPM, Makefile fixes (Mike Frysinger) * keychain 2.8.1 (29 May 2015) Summary: POSIX compatibility and bug fix release. Only set PATH to a standard value if PATH is not set. Otherwise, do not modify. Makefile Cygwin and RPM spec fixes (thanks Luke Bakken and Ricardo Silva) Confhost fixes. Deprecate in_path. Use command -v instead. Find_pids: Modify "ps" call to work with non-GNU ps. (Bryan Drewery) Re-introduce POSIX compatibility (remove shopt.) (vaeth) * keychain 2.8.0 (21 Mar 2015) Support for OpenSSH 6.8 fingerprints. Support for GnuPG 2.1.0. Handle private keys that are symlinks, even if the associated public key is in the target directory rather than alongside the symlink. Allow private keys to have extensions, such as foo.priv. When looking for matching public keys, look for foo.priv.pub, but also strip extension and look for foo.pub if foo.priv.pub doesn't exist. Initial support for --list/-l option to list SSH keys. Updated docs for fish shell usage. * keychain 2.7.2_beta1 (07 July 2014) Various changes and updates: Fixes for fish from Marc Joliet. Keychain will default to start only ssh-agent unless GPG is explicitly updated using --agents. Write ~/.gpg-agent-info when launching gpg-agent - fix from Thomas Spura. Add support for injecting agents into systemd (Ben Boeckel) Add support for --query option (Ben Boeckel) Add --absolute flag, allowing user to set a full path without getting a .keychain suffix automatically appended. Add --confhost option to scan ~/.ssh/config file to locate private key path specified there.
2016-08-17Update libgcrypt to 1.7.3maya3-9/+9
Changelog: 2016-08-17 Werner Koch <wk@gnupg.org> Release 1.7.3. * configure.ac: Set LT version to C21/A1/R3. random: Hash continuous areas in the csprng pool. * random/random-csprng.c (mix_pool): Store the first hash at the end of the pool. random: Improve the diagram showing the random mixing. * random/random-csprng.c (mix_pool): Use DIGESTLEN instead of 20. 2016-07-19 Jussi Kivilinna <jussi.kivilinna@iki.fi> crc-intel-pclmul: split assembly block to ease register pressure. * cipher/crc-intel-pclmul.c (crc32_less_than_16): Split inline assembly block handling 4 byte input into multiple blocks. rijndael-aesni: split assembly block to ease register pressure. * cipher/rijndael-aesni.c (do_aesni_ctr_4): Use single register constraint for passing 'bige_addb' to assembly block; split first inline assembly block into two parts. 2016-07-14 Jussi Kivilinna <jussi.kivilinna@iki.fi> Add ARMv8/AArch32 Crypto Extension implementation of AES. * cipher/Makefile.am: Add 'rijndael-armv8-ce.c' and 'rijndael-armv-aarch32-ce.S'. * cipher/rijndael-armv8-aarch32-ce.S: New. * cipher/rijndael-armv8-ce.c: New. * cipher/rijndael-internal.h (USE_ARM_CE): New. (RIJNDAEL_context_s): Add 'use_arm_ce'. * cipher/rijndael.c [USE_ARM_CE] (_gcry_aes_armv8_ce_setkey) (_gcry_aes_armv8_ce_prepare_decryption) (_gcry_aes_armv8_ce_encrypt, _gcry_aes_armv8_ce_decrypt) (_gcry_aes_armv8_ce_cfb_enc, _gcry_aes_armv8_ce_cbc_enc) (_gcry_aes_armv8_ce_ctr_enc, _gcry_aes_armv8_ce_cfb_dec) (_gcry_aes_armv8_ce_cbc_dec, _gcry_aes_armv8_ce_ocb_crypt) (_gcry_aes_armv8_ce_ocb_auth): New. (do_setkey) [USE_ARM_CE]: Add ARM CE/AES HW feature check and key setup for ARM CE. (prepare_decryption, _gcry_aes_cfb_enc, _gcry_aes_cbc_enc) (_gcry_aes_ctr_enc, _gcry_aes_cfb_dec, _gcry_aes_cbc_dec) (_gcry_aes_ocb_crypt, _gcry_aes_ocb_auth) [USE_ARM_CE]: Add ARM CE support. * configure.ac: Add 'rijndael-armv8-ce.lo' and 'rijndael-armv8-aarch32-ce.lo'. Add ARMv8/AArch32 Crypto Extension implementation of GCM. * cipher/Makefile.am: Add 'cipher-gcm-armv8-aarch32-ce.S'. * cipher/cipher-gcm-armv8-aarch32-ce.S: New. * cipher/cipher-gcm.c [GCM_USE_ARM_PMULL] (_gcry_ghash_setup_armv8_ce_pmull, _gcry_ghash_armv8_ce_pmull) (ghash_setup_armv8_ce_pmull, ghash_armv8_ce_pmull): New. (setupM) [GCM_USE_ARM_PMULL]: Enable ARM PMULL implementation if HWF_ARM_PULL HW feature flag is enabled. * cipher/cipher-gcm.h (GCM_USE_ARM_PMULL): New. Add ARMv8/AArch32 Crypto Extension implemenation of SHA-256. * cipher/Makefile.am: Add 'sha256-armv8-aarch32-ce.S'. * cipher/sha256-armv8-aarch32-ce.S: New. * cipher/sha256.c (USE_ARM_CE): New. (sha256_init, sha224_init): Check features for HWF_ARM_SHA1. [USE_ARM_CE] (_gcry_sha256_transform_armv8_ce): New. (transform) [USE_ARM_CE]: Use ARMv8 CE implementation if HW supports. (SHA256_CONTEXT): Add 'use_arm_ce'. * configure.ac: Add 'sha256-armv8-aarch32-ce.lo'. Add ARMv8/AArch32 Crypto Extension implementation of SHA-1. * cipher/Makefile.am: Add 'sha1-armv8-aarch32-ce.S'. * cipher/sha1-armv7-neon.S (_gcry_sha1_transform_armv7_neon): Add missing size. * cipher/sha1-armv8-aarch32-ce.S: New. * cipher/sha1.c (USE_ARM_CE): New. (sha1_init): Check features for HWF_ARM_SHA1. [USE_ARM_CE] (_gcry_sha1_transform_armv8_ce): New. (transform) [USE_ARM_CE]: Use ARMv8 CE implementation if HW supports it. * cipher/sha1.h (SHA1_CONTEXT): Add 'use_arm_ce'. * configure.ac: Add 'sha1-armv8-aarch32-ce.lo'. Add HW feature check for ARMv8 AArch64 and crypto extensions. * configure.ac: Add '--disable-arm-crypto-support'; enable hwf-arm module on 64-bit ARM. (armcryptosupport, gcry_cv_gcc_inline_aarch32_crypto) (gcry_cv_inline_asm_aarch64_neon) (gcry_cv_gcc_inline_asm_aarch64_crypto): New. * src/g10lib.h (HWF_ARM_AES, HWF_ARM_SHA1, HWF_ARM_SHA2) (HWF_ARM_PMULL): New. * src/hwf-arm.c [__aarch64__]: Enable building in AArch64 mode. (feature_map_s): New. [__arm__] (AT_HWCAP, AT_HWCAP2, HWCAP2_AES, HWCAP2_PMULL) (HWCAP2_SHA1, HWCAP2_SHA2, arm_features): New. [__aarch64__] (AT_HWCAP, AT_HWCAP2, HWCAP_ASIMD, HWCAP_AES) (HWCAP_PMULL, HWCAP_SHA1, HWCAP_SHA2, arm_features): New. (get_hwcap): Add reading of 'AT_HWCAP2'; Change auxv use 'unsigned long'. (detect_arm_at_hwcap): Add mapping of HWCAP/HWCAP2 to HWF flags. (detect_arm_proc_cpuinfo): Add mapping of CPU features to HWF flags. (_gcry_hwf_detect_arm): Use __ARM_NEON instead of legacy __ARM_NEON__. * src/hwfeatures.c (hwflist): Add 'arm-aes', 'arm-sha1', 'arm-sha2' and 'arm-pmull'.
2016-08-17Update gnupg to 1.4.21maya2-8/+7
Changelog: 2016-08-17 Werner Koch <wk@gnupg.org> Release 1.4.21. gpg: Add dummy option --with-subkey-fingerprint. * g10/gpg.c (opts): Add dummy option. build: Create a swdb file during "make distcheck". * Makefile.am (distcheck-hook): New. 2016-08-17 Ineiev <ineiev@gnu.org> po: Update Russian translation. 2016-08-17 Werner Koch <wk@gnupg.org> random: Hash continuous areas in the csprng pool. * cipher/random.c (mix_pool): Store the first hash at the end of the pool. cipher: Improve readability by using a macro. * cipher/random.c (mix_pool): Use DIGESTLEN instead of 20. 2016-08-09 Daniel Kahn Gillmor <dkg@fifthhorseman.net> gpg: Avoid publishing the GnuPG version by default. * g10/gpg.c (main): initialize opt.emit_version to 0 * doc/gpg.texi: document different default for --emit-version 2016-08-04 Daniel Kahn Gillmor <dkg@fifthhorseman.net> Clean up "allow to" * README, cipher/cipher.c, cipher/pubkey.c, doc/gpg.texi: replace "allow to" with clearer text In standard English, the normal construction is "${XXX} allows ${YYY} to" -- that is, the subject (${XXX}) of the sentence is allowing the object (${YYY}) to do something. When the object is missing, the phrasing sounds awkward, even if the object is implied by context. There's almost always a better construction that isn't as awkward. These changes should make the language a bit clearer. Fix spelling: "occured" should be "occurred" * checks/armor.test, cipher/des.c, g10/ccid-driver.c, g10/pkclist.c, util/regcomp.c, util/regex_internal.c: correct the spelling of "occured" to "occurred" 2016-08-04 NIIBE Yutaka <gniibe@fsij.org> g10: Fix checking key for signature validation. * g10/sig-check.c (signature_check2): Not only subkey, but also primary key should have flags.valid=1. 2016-08-03 Justus Winter <justus@g10code.com> Partially revert "g10: Fix another race condition for trustdb access." This amends db246f8b which accidentally included the compiled translation files. 2016-07-09 NIIBE Yutaka <gniibe@fsij.org> gpgv: Tweak default options for extra security. * g10/gpgv.c (main): Set opt.no_sig _cache, so that it doesn't depend on cached status. Similarly, set opt.flags.require_cross_cert for backsig validation for subkey signature. 2016-07-06 NIIBE Yutaka <gniibe@fsij.org> g10: Fix keysize with --expert. * g10/keygen.c (ask_keysize): It's 768 only for DSA. 2016-06-28 NIIBE Yutaka <gniibe@fsij.org> g10: Fix --list-packets. * g10/gpg.c (main): Call set_packet_list_mode after assignment of opt.list_packets. * g10/mainproc.c (do_proc_packets): Don't stop processing with --list-packets as the comment says. * g10/options.h (list_packets): Fix the comment. * g10/parse-packet.c: Fix the condition for opt.list_packets. 2016-06-15 Niibe Yutaka <gniibe@fsij.org> g10: Fix another race condition for trustdb access. * g10/tdbio.c (create_version_record): Call create_hashtable to always make hashtable, together with the version record. (get_trusthashrec): Remove call to create_hashtable. 2016-02-12 NIIBE Yutaka <gniibe@fsij.org> g10: Make sure to have the directory for trustdb. * g10/tdbio.c (tdbio_set_dbname): Return earlier if !CREATE. Check the directory and create it if none before calling take_write_lock. 2016-02-01 Werner Koch <wk@gnupg.org> Fix possible sign extension problem with newer compilers. * cipher/des.c (READ_64BIT_DATA): Cast to u32 before shifting by 24. * cipher/blowfish.c (do_encrypt_block): Ditto. (do_decrypt_block): Ditto. * cipher/camellia.c (CAMELLIA_RR8): Ditto. * cipher/cast5.c (do_encrypt_block): Ditto. (do_decrypt_block): Ditto. (do_cast_setkey): Ditto. * cipher/twofish.c (INPACK): Ditto. * util/iobuf.c (block_filter): Ditto. 2016-01-26 NIIBE Yutaka <gniibe@fsij.org> g10: Fix iobuf API of filter function for alignment. * include/iobuf.h (struct iobuf_struct): Remove DESC. * util/iobuf.c (iobuf_desc): New. (print_chain, iobuf_close, iobuf_open, iobuf_fdopen, iobuf_sockopen) (iobuf_create, iobuf_append, iobuf_openrw, iobuf_ioctl) (iobuf_push_filter2, pop_filter, underflow): Use iobuf_desc. (file_filter, sock_filter, block_filter): Fill the description. * g10/armor.c, g10/cipher.c, g10/compress-bz2.c, g10/compress.c, g10/encode.c, g10/encr-data.c, g10/mdfilter.c, g10/pipemode.c, g10/progress.c, g10/textfilter.c: Likewise. 2016-01-15 Werner Koch <wk@gnupg.org> Fix possible AIX problem with sysconf in rndunix. * cipher/rndunix.c [HAVE_STDINT_H]: Include stdint.h. (start_gatherer): Detect misbehaving sysconf. 2016-01-13 NIIBE Yutaka <gniibe@fsij.org> Fix to support git worktree. * Makefile.am: Use -e for testing .git. 2015-12-21 NIIBE Yutaka <gniibe@fsij.org> po: Update Japanese translation.
2016-08-17Recursive revbump from multimedia/libvpx uppdateryoon2-4/+4
2016-08-15Add p5-Netpgp-Verify version 20160814 to the Packages Collection.agc4-1/+30
These are the perl5 bindings for libnetpgpverify. These bindings allow OpenPGP (RFC 4880), including PGP and GPG, and SSH signatures on files and data to be verified.
2016-08-12Update security/erlang-fast_tls to 1.0.7.fhajny3-11/+11
Version 1.0.7 - Use p1_utils 1.0.5 - Do not log warning on sha1 nif reload attempt Version 1.0.6 - Fix compilation on rebar3 Version 1.0.5 - OpenSSL 1.1.0 compliance - Use p1_utils 1.0.4 Version 1.0.4 - Better compliance with R17 and R18
2016-08-11update to pcsc-lite-1.8.18richard2-10/+10
extracted from Changelog: 1.8.18: Ludovic Rousseau 10 August 2016 - SCardDisconnect(): much faster with SCARD_UNPOWER_CARD - SCardConnect(): Fix a possible duplicated hCard context - Fix compilation on FreeBSD - Fix compilation on Solaris - Some other minor improvements 1.8.17: Ludovic Rousseau 29 May 2016 - Fix SCardEndTransaction() issue with a SCARD_SHARE_EXCLUSIVE connection - Fix an issue when used with systemd (problem in signal handler) - SCardGetAttrib(): set pcbAttrLen when buffer is too small - Doxygen: SCardGetAttrib() pbAttr can be NULL - Doxygen: SCardGetAttrib() *pcbAttrLen contains the buffer size - fix compilation warnings and link errors on SunOS - Some other minor improvements 1.8.16: Ludovic Rousseau 20 March 2016 - SCardCancel() was not correctly handled When a SCardGetStatusChange() was cancelled then a next PC/SC call after the SCardGetStatusChange() may fail with a strange error code if the event waited in SCardGetStatusChange() occurs. - Doxygen: fix different documentation issues - SCARD_SCOPE_GLOBAL is now defined in a public header (even if never used) - Enable Trace and Profile features using compiler flags and without modifying the source code - Some other minor improvements and bug corrections 1.8.15: Ludovic Rousseau 25 December 2015 - Add support of remove and/or customize PC/SC reader names using PCSCLITE_FILTER_IGNORE_READER_NAMES and PCSCLITE_FILTER_EXTEND_READER_NAMES See http://ludovicrousseau.blogspot.fr/2015/12/remove-andor-customize-pcsc-reader-names.html - Some other minor improvements and bug corrections
2016-08-09Update to 0.05wen2-8/+7
Upstream changes: 0.05 2015-11-14 NEILB - Updated github repo URL after changing my github username - Added [MetaJSON] to dist.ini so META.json is included in releases - Doc: changed usage of "local $^W" to "no warnings 'redefine'" - Fixed a couple of typos in the doc - Dropped usage of "use vars" - Module didn't have the required final "1;" or equivalent. Was only by luck it had been.
2016-08-08Updated security/p5-IO-Socket-SSL to 2.034mef2-7/+7
------------------------------------------ 2.034 2016/08/08 - move handling of global SSL arguments into creation of context, so that these get also applied when creating a context only.
2016-08-07email style fixnros1-2/+2
2016-08-07email style fixnros1-2/+2
2016-08-06Updated security/p5-Module-Signature to 0.80mef2-8/+7
-------------------------------------------- ChangeLog unknown for this version
2016-08-06Updated security/p5-Net-OpenSSH to 0.73mef2-8/+7
-------------------------------------- 0.73 Jun 10, 2016 - Some old perl versions doesn't like Errno constant subs being called without parents. Add them. 0.72 Jun 9, 2016 - Rerelease as stable. 0.71_03 Mar 16, 2016 - Improve shell detection code. - Use a timeout to kill external commands not returning control. - improve ksh version checking in tests (bug report by jtzako via PerlMonks) 0.71_02 Mar 11, 2016 - Lighten master socket checks in async mode in order to avoid blocking and setting custom signal handlers which can interfere with event-programming frameworks (bug report by Doug Hoyte). 0.71_01 Jan 20, 2016 - Add entry on the documentation about how to integrate the module with event-oriented programming frameworks (bug report by Doug Hoyte, #gh17) - Use an adaptative delaying algorithm while waiting for the multiplexing socket to pop up (bug report by Doug Hoyte, #gh17). - Improve SIGCHLD handling and interoperability with other modules setting custom handlers (bug report by Doug Hoyte, #gh16).
2016-08-05(pkgsrc)mef3-36/+7
- Drop patch-Makefile.PL, see below at 1.01 Feature item. (Upsteam) - Updated devel/p5-Net-DNS-SEC 0.22 to 1.02 ----------------------------------------- **** 1.02 September 16, 2015 Fix: Bug in t/10-keyset.t raises exception in Net::DNS **** 1.01 August 3, 2015 Feature The RRs previously implemented in Net::DNS::SEC are now integrated with Net::DNS. Fix: rt.cpan.org #105808 Version test for Pod::Test is broken Fix: rt.cpan.org #105698 Net-DNS 1.01 conflicts with Net-DNS-SEC 0.22
2016-08-05Updated security/p5-Digest-SHA to 5.96mef2-8/+7
-------------------------------------- 5.96 Wed Jul 27 20:04:34 MST 2016 - prevented shasum from possibly running malicious code -- remove '.' from @INC before module loading -- ref. rt.cpan.org #116513 - namespace cleanup (ref. rt.cpan.org #105371 and #105372) - minor code and documentation tweaks
2016-08-04Explicitly pass path to krb5 implementation to be used.wiz1-1/+2
Fixes case where heimdal is default, but mit-krb5 is also installed.
2016-08-04Recursive revbump from audio/pulseaudioryoon2-3/+4
2016-08-04Updated security/opensc to 0.16.0mef7-44/+28
-------------------------------- New in 0.16.0; 2016-05-15 * build link OpenSSL in static option: enable PKCS11 thread locking * configuration use one configuration file for all systems * tools: package revision as version ** pkcs11-tool keygen mechanism in pkcs11 tools write GOST public key fix CKA_SENSITIVE attribute of public keys ** opensc-explorer: added command find_tags allow ASN.1 decoding if the file seems incomplete ** pkcs15-tool: handle record-based files when doing file caching option to prine raw data ** sc-hsm-tool: status info support for SmartCard-HSM V2.0 ** doc: some missing options are documented, added documentation for gid tool * minidriver: support for ECC Windows x509 enrollment first implementation of CardDeleteContainer MD logs controlled by register and environment variable * reader-pcsc fixed unreleased locks with pcsc-lite honour PC/SC pt 10 dwMaxAPDUDataSize added call back for getting vendor/product id restrict access to card handles after fork SCardGetAttrib is used to initialize reader's metadata by default only short APDUs supported * pkcs11 no slot reserved for hot plug no more slot created 'per-applications' atomic operation (TODO: expand) export all C_* symbols metadata initialized from package info fix registering pkcs11 mechanisms multiple times sloppy initialization for C_GetSlotInfo * pkcs15 cache of on-card files extended to application paths configuration option to enable/disable application make file cache dir configurable in key info data type introduced 'auxiliary data' -- container for the non-pkc15 data. * OpenPGP support for Gnuk -- USB cryptographic token for GNU Privacy Guard build without OpenSSL implemented 'erase card' additional manufacturers * MyEID support for 521 bit ECC keys ATRs for the new cards * sc-hsm read/write support in minidriver * rtecp delete keys * GemSafeV1 support for European Patent Office smart card sign with SHA256 * Gids first support for Gids smart card * dnie * Feitian PKI card new ATRs * IsoApplet (fixes) * starcos initial support for STARCOS 3.4 (German D-Trust cards) * macosx install tokend to /Library/Security/ instead /System/Library/Security/ fixed locking issue in pcsc reader * PIV allow using of cards where default application in not PIV support for the Yubikey NEO * italian-CNS italian-cns reg file for minidriver
2016-08-03Revbump after graphics/gd updateadam17-30/+34
2016-08-03Updated p5-Net-SSLeay to 1.77.wiz2-7/+7
1.77 2016-08-01 Fixed incorrect size to memset in tlsext_ticket_key_cb_invoke. 1.76 2016-07-31 Replaced bzero with memset. Bzero not present on windows.
2016-08-01Updated p5-Net-SSLeay to 1.75.wiz2-8/+7
1.75 2016-07-31 Compatibility with OpenSSL 1.1, tested with openssl-1.1.0-pre5: - Conditionally remove threading locking code, not needed in 1.1 - Rewrite code that accesses inside X509_ATTRIBUTE struct. - SSL_CTX_need_tmp_RSA, SSL_CTX_set_tmp_rsa, SSL_CTX_set_tmp_rsa_callback, SSL_set_tmp_rsa_callback support not available in 1.1. - SSL_session_reused is now native - SSL_get_keyblock_size modifed to use new API - OCSP functions modified to use new API under 1.1 - SSL_set_state removed with 1.1 - SSL_get_state and SSL_state are now equivalent and available in all versions - SSL_CTX_v2_new removed - SESSION_set_master_key removed with 1.1. Code that previously used SESSION_set_master_key must now set $secret in the session_secret callback set with SSL_set_session_secret_cb - With 1.1, $secret in the session_secret callback set with SSL_set_session_secret_cb can be changed to alter the master key (required by EAP-FAST). Added a function EC_KEY_generate_key similar to RSA_generate_key and a function EVP_PKEY_assign_EC_KEY similar to EVP_PKEY_assign_RSA. Using these functions it is easy to create and use EC keys in the same way as RSA keys. Patch provided by Steffen Ullrich. Thanks Steffen. Testing with LibreSSL 2.4.1, with compatibility patch from Steffen Ullrich. Thanks Steffen. Patch from Steffen Ulrich provides support for cross context (and cross process) session sharing using the stateless TLS session tickets. It uses the SSL_CTX_set_tlsext_ticket_key_cb function to manage the encryption and decryption of the tickets but provides a more simplified interface. Includes new function CTX_set_tlsext_ticket_getkey_cb. To not conflict with the OpenSSL name in case the more complex interface will be implemented ever the current simplified interface is called slightly different: CTX_set_tlsext_ticket_*get*key_cb. Added documentation about downloading latest version from SVN. Added missing Module/install files to SVN.
2016-07-30Update to 1.1wen3-31/+7
Upstream changes: 1.1 Wed Jul 22 12:32:34 CEST 2015 - d'oh, forgot perlmulticore.h - improved portability. 1.0 Tue Jul 21 07:10:25 CEST 2015 - perlmulticore support. - use better random number generator. - added stability canary support.
2016-07-29Update to 0.25wen2-8/+7
Upstream changes: 0.25 Wed Jul 27 20:04:40 MST 2016 - prevented sha3sum from possibly running malicious code -- remove '.' from @INC before module loading -- ref. rt.cpan.org #116513 - namespace cleanup (ref. rt.cpan.org #105371 and #105372) - minor code and documentation tweaks
2016-07-26Fix PKGSRC_MKPIE=yes build. Add LICENSE.alnsn3-2/+19
2016-07-26Fix BUILDLINK_PASSTHRU_DIRS arguments.wiz1-3/+3
2016-07-24Use pypi distfile.wiz2-10/+13
Make more ready for python-3.x, but mark it as not-ready-yet.
2016-07-24Use recommended dependency glob patternagc1-4/+4
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-10 02:04:34 +0000