summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2003-09-14hange extension.mk to also install optimized files for distutils packages.recht4-4/+74
Inspired by FreeBSD "ports". Fix the PLISTs accordingly. Also, while at it, remove now obsolete compileall.py calls in post-install targets and insure that extension.mk is in included before builinlinks of other Python modules. Discussed with/ok'ed by drochner@.
2003-09-13Use SHLIBTOOL to install the plugins since we used it to build them.jlam2-4/+6
2003-09-13* Use LIBTOOL_OVERRIDE instead of LTCONFIG_OVERRIDE.jlam7-16/+22
* Use ${SHLIBTOOL} to build the shared plugins so we don't get the useless lib<plugin>.a file.
2003-09-13Updated security/p5-IO-Socket-SSL to 0.95. Changes version version 0.93jlam2-5/+5
include: - Better opened() behavior when sockets close unexpectedly. - Added support for WeakRef and Scalar::Util to allow IO::Socket::SSL objects to auto-destroy themselves when they go out of scope. - Added croak()ing for unimplemented send() and recv() methods so they are not accidentally used to transmit unencrypted data. The Perl builtin functions cannot be reliably trapped and are still dangerous, a fact that the POD now reflects - Changed accept() to use inherited accept() instead of IO::Socket::accept, so that IPv6 inheritance is possible. - Added options to import() so that a user could specify IPv6 or IPv4 mode of operation.
2003-09-13Update security/p5-Net-SSLeay to 1.25. Changes from version 1.23 include:jlam2-5/+5
- new features: http and raw tcp support - fixed apparent STDIO vs. sysread bug in proxy connect - added tcpecho.pl and tcpcat.pl to MANIFEST - fixed some further bugs with TCP read all, etc. - fixed some const char pointer warnings
2003-09-13Remove redundant TEST_TARGET definition that matches the default one injlam1-2/+1
perl5/module.mk.
2003-09-12Update security/p5-Digest-MD5 to 2.27. Changes from version 2.24 include:jlam2-5/+5
Don't assume PerlIO_read() works like fread() even though it was documented like that for perl 5.6. It returns negative on read failure. The $md5->addfile method now croaks if it discovers errors on the handle after reading from it. This should make it more difficult to end up with the wrong digest just because you are to lazy to check the error status on your file handles after reading from them. Improved documentation.
2003-09-12Update security/p5-Digest-SHA1 to 2.04. Changes from version 2.02 include:jlam2-5/+5
Don't assume PerlIO_read() works like fread() even though it was documented like that for perl 5.6. It returns negative on read failure. Implemented sha1_transform, required to implement NIST FIPS 186-2. Make it build on 64-bit platforms with 32-bit longs. Sync up with the Digest::MD5 implementation: - added clone method - addfile croaks if it can't read - the sha1*() functions warn if called as method or with reference arguments.
2003-09-12kill all references to gcc.buildlink2.mk and compiler.mk, and definegrant1-2/+3
USE_GCC2 or USE_GCC3 where appropriate. the functionality of the old gcc.buildlink2.mk has been rolled into compiler.mk now, which is automatically used. more changes to come later...
2003-09-12Update to version 1.21.seb1-2/+4
download-vulnerability-list(8) now needs digest(1). Hence put digest package as a runtime dependency of audit-packages package.
2003-09-11Change USE_OPENSSL_VERSION into equivalent BUILDLINK_DEPENDS.openssl.jlam1-4/+5
2003-09-11Garbage-collect USE_OPENSSL_VERSION now that openssl/buildlink2.mk supportsjlam4-13/+4
just setting BUILDLINK_DEPENDS.openssl. USE_OPENSSL_VERSION wasn't actually needed here anyway since the minimum version allowed by openssl/buildlink2.mk exceeded the version requested here.
2003-09-11Rewrite this file so that we can specify the version of OpenSSL that wejlam1-94/+112
need by simply setting BUILDLINK_DEPENDS.openssl. This buildlink2.mk file now functions just like any other typical buildlink2.mk file.
2003-09-10Note version numbers for 0.9.6[hij].jlam1-1/+4
2003-09-10Only check if we need to add the rsaref dependency if we need the pkgsrcjlam1-3/+5
openssl.
2003-09-10Use the built-in HAS_CONFIGURE and TEST_TARGET infrastructure to do thejlam1-44/+37
configure and test phases.
2003-09-10Honor CFLAGS/LDFLAGS from the environment.jlam3-7/+18
2003-09-10Back out the make -> @MAKE@ -> ${MAKE} changes since we workaround thejlam8-86/+12
bare "make" problem using tools.mk.
2003-09-09Update audit-packages to 1.20.agc2-4/+11
Support wget and curl as FETCH_CMDs, as discussed in PR 19103.
2003-09-09Whitespace.salo1-7/+9
2003-09-09Remove reference to wip. (hi xtraeme!)salo1-9/+11
Style nits, while here.
2003-09-08use PKG_SYSCONFDIRitojun1-2/+2
2003-09-06upgrade to 2.0.1.itojun3-19/+19
from webpage: >v2 is a significantly more accurate, precise and faster brother of the original >proof-of-concept tool I released in 2000. P0f v1 is largely obsolete...
2003-09-05Remove "/pub" from pathnames on "ftp.fu-berlin.de" because such a directorytron1-2/+2
doesn't exist. It's apparently only mapped in the FTP server configuration.
2003-09-04Add and enable p5-Authen-SASL and p5-Authen-SASL-Cyrusxtraeme1-1/+3
2003-09-04Initial import of p5-Authen-SASL-Cyrus, version 0.07.xtraeme5-0/+47
SASL is a generic mechanism for authentication used by several network protocols. Authen::SASL provides an implementation framework that all protocols should be able to share. The XS framework makes calls into the existing libsasl.so shared library to perform SASL client connection functionality, including loading existing shared library mechanisms. Authen::SASL::Cyrus implements XS SASL Authentication. Packages provided by Quentin Garnier via pkgsrc-wip.
2003-09-04Initial import of p5-Authen-SASL, version 2.04.xtraeme4-0/+28
SASL is a generic mechanism for authentication used by several network protocols. Authen::SASL provides an implementation framework that all protocols should be able to share. The included plugin Authen::SASL::Perl implements several of these protocols (DIGEST-MD5, CRAM-MD5, ANONYMOUS, EXTERNAL, LOGIN and PLAIN). Package provided by Quentin Garnier via pkgsrc-wip.
2003-09-03Fix inconsistent filename for "pkg-vulnerabilities" file intron2-4/+4
"audit-packages" script. Bump package version again.
2003-09-02Nuke definition for INSTALL_EXTRA_TMPL here since INSTALL doesn't exist.jmc1-2/+1
2003-09-02Update audit-packages to 1.18.agc4-37/+75
Changes from previous version: + rely on an embedded sha1 digest to tell whether the vulnerabilities file has been damaged in transit or received successfully, rather than trusting that the file will not grow smaller + use the new filename "pkg-vulnerabilities" + use definitions from defs.${OPSYS}.mk in the download-vulnerability-list script + at installation time, don't rely on "ln -sf" to DTRT - explicitly call "rm -f" before attempting the symbolc link With thanks to seb@ for testing.
2003-09-02Update libnasl, nessus{-core,-libraries,-plugins} to 2.0.7.frueauf14-35/+170
Based on pr pkg/22356 by Adrian Portelli. Changes since 2.0.6a: . changes by Renaud Deraison (deraison@cvs.nessus.org) - Fixed bad performances issues when pinging dead hosts - Fixed a bug which would prevent to store items larger than 2kb in the KB - NFS and SMB file-related functions completed (open, read and cwd are implemented) - Plugins support for Windows 2003 - Network IPs can now be evenly sliced instead of being scanned sequentially - User-definable source-IP(s) for the checks (nessusd -S) - Fixed a possible message corruption problem if a plugin was to send a too long message back to nessusd - Fixed a possible plugin corruption problem when the client overwrites existing plugins - Fixed various false positives and wording issues in several plugins
2003-09-01Added php4-openssl 4.3.3 - PHP4 extension module for access to OpenSSLjdolecek1-1/+2
library
2003-09-01add PHP4 OpenSSL extension modulejdolecek2-0/+17
adresses openssl part of PR pkg/22654 by Adrian Portelli
2003-09-01appears the CONFIGURE_ENV+= MCRYPT_DIR=... isn't necessary anymore - itjdolecek1-4/+2
compiles fine without
2003-09-01whitespace fixescjep1-3/+4
2003-08-31Update PHP to final 4.3.3jdolecek4-24/+2
Some highlights of changes since 4.2.3: * PCRE updated to 4.3, GD to 2.0.15 * improved Apache2 support * much improved stream & URL wrapper support, output compression support * added CLI (Command Line Interface) SAPI * debug_backtrace() backported from ZendEngine2 * faster build system * huge number of other bug fixes and improvements Packaging changes: * 'pcre', 'xml', and 'session' modules folded back into main package - 'pcre' and 'xml' is required by PEAR, and 'session' is just too essential to be separate * 'gd' module now uses bundled PHP GD library, which is better integrated * PHP modules use shared distinfo when possible to ease future PHP updates * ${PREFIX}/bin/php is now CLI version, ${PREFIX}/libexec/cgi-big/php remains CGI version
2003-08-30Add definitions for DEINSTALL_EXTRA_TMPL and INSTALL_EXTRA_TMPL ifjlam5-5/+17
USE_PKGINSTALL is "YES". bsd.pkg.install.mk will no longer automatically pick up a INSTALL/DEINSTALL script in the package directory and assume that you want it for the corresponding *_EXTRA_TMPL variable.
2003-08-30correct HOMEPAGE=dan1-2/+2
2003-08-30Prepare for pkgviews by making sure that passing VIEW-INSTALL orjlam2-32/+32
VIEW-DEINSTALL to the INSTALL/DEINSTALL scripts don't cause errors.
2003-08-30"It's" stands for "it is" (or "it has"). The apostrophe is not usedreed1-1/+1
for a possessive (like her, his, whose, their, and its). Note that I didn't check for proper use of "its" (when it should be "it is" or "it has" instead). I also saw over 15 other grammar or punctuation problems, but not fixed in this commit.
2003-08-29No necessity to depend on latest libmcrypt -- back out previous.wiz1-2/+2
2003-08-29update to 2.5.7dan4-9/+9
from Adrian Portelli in PR/22628
2003-08-29doh. cruft.dan1-14/+0
2003-08-29bitstir monitors rnd(4) for low entropy and uses find(1) to solicit more.dan7-1/+63
program and pkg from Peter Hendrickson <pdh@wiredyne.com>
2003-08-28Change my email address to the NetBSD one, ok'ed by wiz@xtraeme1-2/+2
2003-08-26upgrade to 20030826. corrects keylen miscomputation.itojun6-117/+13
2003-08-25upgrade to 1.2.3.itojun6-44/+22
* New "--gnupg" option (set by default) that disables --openpgp, and the various --pgpX emulation options. This replaces --no-openpgp, and --no-pgpX, and also means that GnuPG has finally grown a --gnupg option to make GnuPG act like GnuPG. * A number of portability changes to make building GnuPG on less-common platforms easier. * Romanian translation. * Two new %-expandos for use in notation and policy URLs. "%g" expands to the fingerprint of the key making the signature (which might be a subkey), and "%p" expands to the fingerprint of the primary key that owns the key making the signature. * New "tru" record in --with-colons --list-keys listings. It shows the status of the trust database that was used to calculate the key validity in the listings. See doc/DETAILS for the specifics of this. * New REVKEYSIG status tag for --status-fd. It indicates a valid signature that was issued by a revoked key. See doc/DETAILS for the specifics of this.
2003-08-25Several of the Makefile used in this package call 'make' directly. Ifjschauma8-25/+102
an operating system does not have a 'make' (ie only bmake), or if the OS supplied 'make' is sufficiently broken (Irix), this will cause the build to fail (interestingly enough apparently only if build as a dependency, not if build from this directory). Patch Makefiles to use @MAKE@, which then, after patching, is substituted with the actual ${MAKE} (can't use "MAKE= ${MAKE} -f Makefile.ssl"). While here, tweak Irix configure a bit.
2003-08-24Update ruby-tcpwrap package to 0.6.taca2-6/+6
No documentation is given for changes. - improved portability; proper checking for libwrap. - add hosts_allow, hosts_deny and hosts_ctl methods. It should fix macppc bulk build problem. This packge was broken since ruby-tcpwrap-0.3's distfile's contet was changed.
2003-08-23Default to build dependency, since the package onlywiz1-1/+2
contains a static library. Patch from Todd Vierling.