summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2000-10-21remove trailing whitespacewiz1-2/+2
2000-10-21add RCS Idwiz1-0/+1
2000-10-21Add optional PAM support if USE_PAM is definedrh1-1/+6
2000-10-21Add and enable pam-ldaprh1-1/+2
2000-10-21Initial import of pam-ldap-77, a pluggable authentication module forrh8-0/+132
LDAP directories
2000-10-21Add and enable PAMrh1-1/+2
2000-10-21Initial import of PAM-0.72, a pluggable authentication module mechanismrh32-0/+1033
2000-10-21Install missing 'crack.h' header filerh3-2/+17
2000-10-21Add and enable libcrackrh1-1/+2
2000-10-21Initial import of libcrack-2.7, a password checking libraryrh9-0/+150
2000-10-20Add HOMEPAGErh1-1/+2
2000-10-19At least in 1.4Q, there was a login_cap.h, but it didn't define LOGIN_SETENV.hubertf2-6/+6
Make sure that is defined before using it!
2000-10-15add egd and p5-SHAitojun1-1/+3
2000-10-15Entrypy Gathering Daemon. depends on to security/p5-SHA.itojun5-0/+33
2000-10-15new pkgsrc: SHA1 hash function for perl.itojun7-0/+41
2000-10-15Update nessus to 1.0.5.frueauf8-19/+51
. changes by Renaud Deraison (deraison at nessus.org) : - added experimental KB saving, to prevent the audit to restart from scratch between two tests. See http://www.nessus.org/doc/kb_saving.html for details - added experimental detached scans. See http://www.nessus.org/doc/detached_scan.html for details - bug in the test of DoS attacks fixed (thanks to Christophe Grenier, Christophe.Grenier@esiea.fr) - minor changes in nessus-adduser - scripts that open a UDP socket read the result of a UDP scan first - when it receives a SIGHUP, nessusd first frees memory. It also closes and re-opens the nessusd.messages file - the plugin timeout is now user definable, in nessusd.conf - 64 bit compatible (nessusd would produce warnings when running on some 64 bit architectures). Thanks to the SuSE (http://www.suse.de) team for having given me access to an IA-64 to compile and try Nessus. . Changes by Jordan Hrycaj <jordan@mjh.teddy-net.com> - faster cipher layer . Other changes : - a GTK error would sometime be produced when the client is run in batch mode (Cyril Leclerc <cleclerc at boreal-com.fr>)
2000-10-15allow build with login.conf support enabled. PR11150.itojun2-13/+9
2000-10-15Update p5-Digest-MD5 to 2.12. Changes from version 2.09:jlam2-4/+4
Digest::MD5 will now try to fallback to the pure perl implementation of Digest::Perl::MD5 if bootstrap fails. Added a bit internal paranoia about casting the IV in the Digest::MD5 object to the MD5_CTX* pointer.
2000-10-12Update xdm-krb4 to 3.3.6.2.wennmach3-5/+6
xdm-krb4 now has an option, -nostrictkrb4, which allows it to fall back to non-Kerberos authentication if the KRB4 authentication fails. (Much wanted by sites with a mix of Kerberos and non-Kerberos users).
2000-10-11Openssl no longer conflicts with kth-krb4.wennmach1-2/+2
2000-10-11Do not install bin/des in order to avoid a conflict with thewennmach4-6/+20
openssl package (close to nobody is using this program anyways).
2000-10-11Remove a hunk from patch-ac which prevents the expansion ofwennmach2-14/+3
MOUNT_UFS and MOUNT_NFS. make makepatchsum.
2000-10-11recover DEPENDSitojun1-2/+2
2000-10-11update to 1.0.3.itojun3-6/+8
Noteworthy changes in version 1.0.3 (2000-09-18) ------------------------------------------------ * Fixed problems with piping to/from other MS-Windows software * Expiration time of the primary key can be changed again. * Revoked user IDs are now marked in the output of --list-key * New options --show-session-key and --override-session-key to help the British folks to somewhat minimize the danger of this Orwellian RIP bill. * New options --merge-only and --try-all-secrets. * New configuration option --with-egd-socket. * The --trusted-key option is back after it left us with 0.9.5 * RSA is supported. Key generation does not yet work but will come soon. * CAST5 and SHA-1 are now the default algorithms to protect the key and for symmetric-only encryption. This should solve a couple of compatibility problems because the old algorithms are optional according to RFC2440 * Twofish and MDC enhanced encryption is now used. PGP 7 supports this. Older versions of GnuPG don't support it, so they should be upgraded to at least 1.0.2
2000-10-10Only pull in the ssh depends if we're on a system with out /usr/bin/ssh indmcmahill1-1/+3
the system.
2000-10-10add LICENCE=fee-based-commercial-use, for use of IDEA/RC5 logic.itojun3-3/+12
(per discussion on packages@netbsd.org)
2000-10-10dd LICENSE (as per discussions on packages@netbsd.orgitojun1-1/+2
2000-10-10aupdate to 2000/10/10a.itojun2-14/+8
- always use random number from /dev/urandom, instead of random(3). - OpenSSL dependency is simplified - just use USE_SSL, and assume that RSA function is there. pkgsrc does not really support intermediate netbsd-current codebase. per discussion on packages@netbsd.org. approved by packages@netbsd.org
2000-10-04regen with new patchitojun1-1/+2
2000-10-04make it buildable on alpha (need string.h)itojun1-0/+7
2000-10-04upgrade to 10/4 snapshot.itojun5-70/+11
- disable idea/rc5 in phase 1 by default - use official DOI # for AES (= rijndael) - be more careful about parsing variable-length packet content - have __attribute__((__packed__)), be friendly with align-picky arch (confirmed to be working on i386, sh3 and alpha)
2000-10-02Update to 1.1 - Give a slightly more friendly error message if vulnerabilitiesabs2-2/+7
file not present.
2000-09-28openssl is broken on alpha, and openssh hangs in configure when checkinghubertf2-6/+6
for openssl libs. Disable both, and reference PR to fix it. XXX should be changed for USE_SSL.
2000-09-28Remove this package for now, until the 1.5 tag is made.agc6-67/+0
It will be re-imported after that.
2000-09-28The name of the rc.d script has changed. Update message to reflect newjlam3-6/+6
name.
2000-09-26Set USE_RSAREF2=NO by default. Hopefully, this will discourage people fromfredb4-4/+8
actually using rsaref, while we ponder the case for removing it completely.
2000-09-25Update to 2000-09-15 snapshot, to let this build on NetBSD-1.5, and removefredb5-26/+77
BROKEN variable. Unfortunately, no ChangeLog is available. Patch system dependent make goo to use 'SSLBASE', mirroring it's use in bsd.pkg.mk, rather than obsolete 'PATENTEDOPENSSLSRC'. Also, replace hard- coded "/usr/pkg", replacing it with ${LOCALBASE}. Finally, set 'LOCALBASE' and 'SSLBASE' conditionally within the package, for convenience.
2000-09-24disable admin port better (KAME session.c 1.13 -> 1.14)itojun2-1/+55
2000-09-24This pkg works fine with openssh, so allow it as dependhubertf1-2/+2
2000-09-24Fix (private) prototype of time(3), to make this compile on alpha.hubertf2-1/+15
2000-09-24Fix a few compile-time warnings.hubertf2-7/+46
Still doesn't work on Alpha.
2000-09-23upgrade to 9/23 snapshot.itojun5-16/+20
changes: lots of stabilization (made during interop tests with bunch of other implementations), certificate support improvement, security issue fix (admin tcp port, without authentication, was open previously)
2000-09-20Install rc.d control script as "foo" instead of "foo.sh" to comply withjlam3-5/+7
how NetBSD's rc.d system interprets script names. Also add appropriate REQUIRE and PROVIDE sections to allow direct use in NetBSD's rc.d system.
2000-09-20Install rc.d control script as "sshd" instead of "sshd.sh" to comply withjlam9-15/+21
how NetBSD's rc.d interprets script names. Also add REQUIRE and PROVIDE sections to control scripts so they can be used directly in NetBSD's rc.d system.
2000-09-20sslwrap, a wrapper to put around various services like pop, imap, etc.explorer6-0/+67
2000-09-19Add and enable audit-packagesagc1-1/+2
2000-09-19Initial import of a package to scan a vulnerability list, looking foragc6-0/+66
installed packages which are insecure and open to exploitation. The original idea came from Roland Dowdeswell and Bill Sommerfeld, quite independently, the unorthodox implementation by me. This package contains two scripts: (1) download-vulnerability-list, which downloads a list of vulnerable packages from the NetBSD ftp server, and (2) audit-packages, which scans all the packages installed on the local machine, looking for packages which are vulnerable.
2000-09-18Use pkgsrc libtool not internal one.skrll3-2/+21
Make nessus-config --libs output -Wl,-R...
2000-09-12upgrade to 9/13b. it fixes fatal bug in phase 1 negotiation.itojun2-4/+4
2000-09-12upgrade racoon to 2000/9/12.itojun5-52/+15
certificate improvements. bug fix in policy matching. make pfs/policy matching strictness configurable. other logs can be found at http://www.kame.net/dev/cvsweb.cgi/kame/CHANGELOG.
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-14 07:56:23 +0000