summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2002-10-02Drop unneeded patch, and unneeded automake dependency.wiz3-28/+3
2002-10-02get rid of autoconf build dependency by patching configuredillo3-6/+16
2002-10-02Convert comments to use automake.mk.wiz1-7/+11
2002-10-01Belated bump to nb2, following fixes to dlsym return checks to work properly ↵chris1-2/+2
against -current.
2002-09-30fixup dlsym error checks. An error is indicated by dlsym returning NULL notchris2-1/+24
dlerror returning something valid.
2002-09-30Update ratas to 2.1taca3-8/+9
Here is quote from 2.0's release announce but changes from 2.0 to 2.1 are unknown. New in this version of RATS: RATS can now descend through directories recursively, analyzing any supported source code it finds. Ability to output results as HTML or XML. Result output can contain the line of code that caused each problem to be reported, along with the column number in the source file the problem was detected at. RATS will now report various statistics at the end of the reporting phase, including total time spend on the analysis, and number of source lines analyzed. Various database additions. A new database file, rats-openssl, which aids in analyzing any code that utilizes the OpenSSL C API. (Thanks to Ben Laurie for contributing this database)
2002-09-27Updated to p5-SSLeay-0.45shell2-18/+15
Changes : + PKCS12 certificate support, patch submitted by Beni Takahashi, author of patch Daisuke Kuroda + Fixing compile warnings on Solaris 8/Sparc with Forte 7.0 about implicit conversions and implicit declarations. Thanks to Marek Rouchal for bug report. - Removed unused dependency on URI::URL, thanks to Ric Steinberger for pointing out this problem under perl 5.8.0 - fixed Makefile.PL use of dirname() which could error for perl 5.8.x Thanks to Chip Turner of RedHat for patch. - Fixed a runtime error with Net::SSL->proxy for running under perl warnings with no proxy defined, which t/net_ssl.t test case revealed. + Added t/net_ssl.t test for initializing a Net::SSL object + Added build auto-detect for 0.9.6+ and only then use OPENSSL_free instead of free() since older OpenSSL like 0.9.4 did not have it. + Added ./net_ssl_test -CAfile documentation, and root CA file from mod_ssl distribution at certs/ca-bundle.crt that can be used for general root CA peer certificate verification. + Plus many bugs fixed and improvement... see CHANGES for more
2002-09-27Updated to p5-IO-Socket-SSL-0.91shell2-10/+7
Two recent changes : v0.91 - Added support for SSL_peek and SSL_pending (peek() and pending()). Updated documentation, tests, etc. to reflect this. v0.901 2002.08.19 - Fixed the warning that happens when sockets are not explicitly closed() before the program terminates. For full log, please see Changes
2002-09-27Updated to p5-Net-SSLeay-1.20shell2-12/+8
Changes : - Additional SSL_peek patch to ssl_read_until from Peter Behroozi <peter@@fhpwireless_.com> --Sampo pkgsrc changes : - buildlink -> buildlink2 - perl5 module
2002-09-26* Use buildlink2.jlam7-46/+112
* Use bsd.pkg.install.mk and install the example xdm config files. * Rename the rc.d script to "xdm_krb4.sh" and make it use /etc/rc.subr. * Remove redundant MESSAGE; the INSTALL script says all the right things.
2002-09-24Update msudir to 0.12:abs2-5/+5
Fix compilation error on Linux
2002-09-24Sort.wiz1-2/+2
2002-09-24Complete standardization of messages according to latest pkglint.wiz10-31/+32
2002-09-24buildlink1 -> buildlink2jlam1-6/+8
2002-09-23buildlink1 -> buildlink2jlam7-54/+105
2002-09-23Convert to buildlink2.wiz1-3/+3
2002-09-23Update to 1.21:wiz2-5/+5
* Improved the default output so it creates multiple formatted lines instead of single very long lines for each hit. Use the new "--singleline" (-S) option to get the original "long line" format. * Removed duplicate "getpass" entry in the ruleset; this didn't hurt anything, but was unnecessary. Thanks to the user who gave me that feedback, wish I'd kept your email address so I could credit you properly :-). * Added a short tutorial to man page. * Fixed initial upper/lower case on many entries in the ruleset. * Allow "--input" as a synonym for "--inputs".
2002-09-23Update msudir to 0.11:abs2-5/+5
Allow fromgroup and rootdir to be unset in the config file.
2002-09-23Unused.jlam1-38/+0
2002-09-23buildlink1 -> buildlink2jlam1-4/+6
2002-09-23Instead of using BUILDLINK_TRANSFORM.<pkg> to change the location ofjlam1-3/+5
headers in ${BUILDLINK_DIR}, simply create BUILDLINK_CPPFLAGS.<pkg> variables whose values are appended to CPPFLAGS, which are automatically passed to the configure and build processes. BUILDLINK_TRANSFORM.<pkg> has little use in buildlink2 since packages are now told that the software may be found where it really is installed, not in ${BUILDLINK_DIR} as was the case with buildlink1. Eventually, these variables will be declared unsupported by buildlink2.
2002-09-21Strip the ".buildlink" from the names of the python application andjlam5-11/+11
extension Makefile fragments, because they really don't have anything to do with the buildlink[12] frameworks. Change all the Makefiles that use application.buildlink.mk and extension.buildlink.mk to use application.mk and extension.mk instead.
2002-09-21buildlink1 -> buildlink2jlam1-3/+3
2002-09-20Make these scripts more portable by taking advantage of automatic rc.dgrant6-12/+12
script handling and using @RCD_SCRIPTS_SHELL@. as discussed with jlam.
2002-09-19Take advantage of the auto-generation and installation of rc.d scripts.jlam5-38/+5
2002-09-18When using bsd.pkg.install.mk, if a DEINSTALL or INSTALL file alreadyjlam3-8/+3
exists, then use it as the default value of DEINSTALL_EXTRA_TMPL or INSTALL_EXTRA_TMPL.
2002-09-09The shared libraries are installed on Solaris now.markd1-1/+7
2002-09-09Fix IPv6 detection on Darwin. Patch supplied by itojun in private e-mail.jlam3-17/+85
2002-09-07Remove dependency on autoconf/automake and finish buildlink2 conversion.jlam7-25/+306
2002-09-07Use buildlink2 and pass an extra flag to the configure script so that ifjlam1-3/+4
RSAref is used, then the library may be found.
2002-09-05We don't need to symlink bin/openssl since we want the one in ${SSLBASE}.jlam1-3/+2
2002-09-05update HOMEPAGE for www.monkey.org -> monkey.org moveitojun1-2/+2
2002-09-05www.monkey.org moved to monkey.org. pilot <pilot@monkey.org>itojun4-10/+10
2002-09-01Fix whitespace in PLIST. Closes pkg/18137 by Katsuhiko Fujii.wiz1-2/+2
2002-08-31Add variables for openssh privilege separation to bsd.pkg.defaults.mk:grant2-15/+13
OPENSSH_USER OPENSSH_UID OPENSSH_GROUP OPENSSH_GID OPENSSH_CHROOT Use these to automatically create user/group if they do not already exist. Assists platforms which do not have an 'sshd' user by default, while adding flexibility for NetBSD systems. Checked by Stoned Elipot <seb@netbsd.org>.
2002-08-30Update ruby-openssl pacakge to 0.1.2.1(0.1.2a).taca2-8/+6
It should be fixed in error of bulk build, too. $Id: ChangeLog,v 1.43 2002/07/24 14:46:52 gotoyuzo Exp $ 'OpenSSL for Ruby' project Copyright (C) 2001 Michal Rokos <m.rokos@sh.cvut.cz> All rights reserved. $Log: ChangeLog,v $ Revision 1.43 2002/07/24 14:46:52 gotoyuzo * lib/openssl/buffering.rb: typo fixed. (Thakns NaHi) Revision 1.42 2002/07/24 12:31:31 gotoyuzo * ossl.c: should include <sys/time.h> if it exists. (Thanks Knu) Revision 1.41 2002/07/24 09:56:17 gotoyuzo * ossl-0.1.2 released Revision 1.40 2002/07/23 20:23:30 gotoyuzo * lib/net/https.rb: follow net/http.rb Rev: 1.41.2.18 (ruby_1_6) Revision 1.39 2002/07/23 10:49:19 gotoyuzo * ossl_ssl.c: should raise exception while SSL_write returns 0. Revision 1.38 2002/07/23 10:45:25 gotoyuzo * ossl.h: include <openssl/e_os.h> * ossl.c: workaround to convert into UTC time. * lib/openssl.rb: fix string embeded expression. Revision 1.37 2002/04/07 16:35:32 majkl * Macros fixups * X509ExtFactory cleanup * fixed strptime warning on Linux * X509::Certificate#version has been changed! !!! WARNING !!! x509.version = 2 -> defines X509v3, (0 for v1, 1 for v2, ...) p x509.version -> 2, means that it is X509v3 !!! WARNING !!! Revision 1.36 2002/03/11 21:35:39 majkl * Cipher IV fixup Revision 1.35 2002/03/11 17:20:22 majkl * Big internal cleanup (all structs with only 1 member rearranged) * improved getting time_t from cTime Revision 1.34 2002/03/06 08:05:05 majkl * build fix-ups Revision 1.33 2002/03/05 15:05:57 majkl * WARNING! All to_str methods are not used any longer (use to_text instead) * made an aliases to_pem as to_s * more relaxed params checking - everywhere where string was needed it is OK that obj implements to_s method Revision 1.32 2002/02/23 07:28:00 majkl * More benevolent checks (Check_SafeStr(x) -> Check_Type(x, T_STRING) (where we don't care) Revision 1.31 2002/02/20 08:43:54 majkl * Fixed some memory leaks Revision 1.30 2002/02/13 13:09:49 majkl * transition from rb_raise to OSSL_Raise (where possible) * some mem checks * preliminary DH key support
2002-08-30ssh-rand-helper is also installed when /dev/urandom does not exist.grant1-1/+2
Checked by Stoned Elipot <seb@netbsd.org>.
2002-08-30Updated isakmpd to 20020830martti2-5/+5
* OpenBSD 3.1 SA 010: Receiving IKE payloads out of sequence can cause isakmpd(8) to crash. * A rewrite of the CRL support code, also from <Thomas.Walpuski@gmx.net>. Some style mods, and checks added for OpenSSL version 0.9.7 or later. Currently CRLs are not supported for earlier versions. Manual pages updated. * Handle configuration lines that end in whitespace or ^M. Also avoid a potential memory leak. * Start for support of IKECFG in SET/ACK mode. Server side only so far. * Fix keyed HMAC where the key was longer than the blocksize
2002-08-28Support building with S/Key support on Darwin, and move the check forjlam4-54/+142
libcrypt-before-libcrypto into a section that is protected by something we can set in the configure script (check_for_libcrypt_before). This should fix the latter part of pkg/18091 by grant beattie.
2002-08-28We actually use the openssl buildlink2.mk file.jlam1-2/+2
2002-08-28It's 0.9.6f, not 0.9.5f, and move things around so that IGNORE is set tojlam1-12/+13
the proper message.
2002-08-28Support building tcp_wrappers on Darwin, from pkg/18090 from grant beattie.jlam1-3/+11
2002-08-28Allow this to build on Darwin. Also use the new USE_PERL5 semantics.jlam1-5/+3
This fixes the first part of pkg/18091 by grant.
2002-08-28Add a buildlink2.mk file based on the zlib/buildlink2.mk file as skeyjlam1-0/+48
support may already reside in the base system.
2002-08-27Updated msudir to 0.10:abs2-5/+5
Allow options to be targetted to specific directories by using [dirname] tags in the config file. Requested by <norm at sandbox.org.uk>.
2002-08-27Added msudir-0.09abs1-1/+2
msudir allows enabled users to easily manage 'setuid' scripts and binaries. A directory containing scripts or other executables is created inside the basedir for each destination user. Any user is then able to invoke the script 'bar' in the directory 'fu' via 'msudir fu/bar'. The script will be run under the uid and primary gid of the destination user. Some effort is taken to sanitise the arguments and environment, but msudir should not be used without an understanding of the security implication.
2002-08-27Import msudir-0.09abs4-0/+29
msudir allows enabled users to easily manage 'setuid' scripts and binaries. A directory containing scripts or other executables is created inside the basedir for each destination user. Any user is then able to invoke the script 'bar' in the directory 'fu' via 'msudir fu/bar'. The script will be run under the uid and primary gid of the destination user. Some effort is taken to sanitise the arguments and environment, but msudir should not be used without an understanding of the security implication.
2002-08-26Update to 0.3.9mjl5-22/+50
* An experimental interface to GnuPG's --edit-key functionality is introduced, see gpgme_op_edit. * The new gpgme_import_ext function provides a convenient access to the number of processed keys. * It is possible to use an outside event loop for the I/O to the crypto engine by setting the I/O callbacks with gpgme_set_io_cbs. * GPGME_ATTR_OTRUST is implemented now. * A first step toward thread safeness has been achieved, see the documentation for details. Supported thread libraries are pthread and Pth. * All error output of the gpgsm backend is send to the bit bucket. * The signature verification functions are extended. Instead of always returning GPGME_SIG_STATUS_GOOD, the functions new codes for expired signatures. * The current passphrase callback and progress meter callback can be retrieved with the new functions gpgme_get_passphrase_cb and gpgme_get_progress_cb respectively. * gpgme_op_encrypt can be called with RECIPIENTS being 0. In this case, symmetric encryption is performed. Note that this requires a passphrase from the user. * More information is returned for X.509 certificates. * Interface changes relative to the 0.3.4 release: * gpgme_op_encrypt does now fail with GPGME_Invalid_Recipients if some recipients have been invalid, whereas earlier versions succeeded in this case. * gpgme_op_verify now allows to pass an uninitialized data object as its plaintext argument to check for normal and cleartext signatures. The plaintext is then returned in the data object. * New interfaces gpgme_set_include_certs and gpgme_get_include_certs to set and get the number of certifications to include in S/MIME signed messages. * New interfaces gpgme_op_encrypt_sign and gpgme_op_encrypt_sign_start to encrypt and sign a message in a combined operation. * New interface gpgme_op_keylist_ext_start to search for multiple patterns. * gpgme_key_get_ulong_attr supports the GPGME_ATTR_EXPIRE attribute. * Interface changes relative to the 0.3.3 release: * Fix the Makefile in jnlib. * Fix the test suite (hopefully). It should clean up all its state with `make check' now. * Remove erroneous dependency on libgcrypt in jnlib. * There is a Texinfo manual documenting the API. * The gpgme_set_keylist_mode function returns an error, and changed its meaning. It is no longer usable to select between normal and fast mode (newer versions of GnuPG will always be fast), but selects between local keyring, remote keyserver, or both. For this, two new macros are defined, GPGME_KEYLIST_MODE_LOCAL and GPGME_KEYLIST_MODE_EXTERN. To make it possible to modify the current setting, a fucntion gpgme_get_keylist_mode was added to retrieve the current mode. * gpgme_wait accepts a new argument STATUS to return the error status of the operation on the context. Its definition is closer to waitpid() now than before. * The LENGTH argument to gpgme_data_new_from_filepart changed its type from off_t to the unsigned size_t. * The R_HD argument to the GpgmePassphraseCb type changed its type from void* to void**. * New interface gpgme_op_trustlist_end() to match gpgme_op_keylist_end(). * The CryptPlug modules have been renamed to gpgme-openpgp and gpgme-smime, and they are installed in pkglibdir by `make install'. * An idle function can be registered with gpgme_register_idle(). * The GpgSM backend supports key generation with gpgme_op_genkey().
2002-08-25Merge packages from the buildlink2 branch back into the main trunk thatjlam21-58/+64
have been converted to USE_BUILDLINK2.
2002-08-25Merge changes in packages from the buildlink2 branch that havejlam22-18/+186
buildlink2.mk files back into the main trunk.
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-17 17:15:55 +0000