summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2002-10-09upgrade to 1.2.0, from skrueger@europe.comitojun9-143/+89
2002-09-21 Werner Koch <wk@gnupg.org> Released 1.2.0. * configure.ac: Bumbed version number and set development version to no. 2002-09-19 David Shaw <dshaw@jabberwocky.com> * configure.ac: Try linking LDAP as just -lldap as it seems very recent OpenLDAPs (>=2.0.23) support that. 2002-09-14 David Shaw <dshaw@jabberwocky.com> * configure.ac: Try linking LDAP without -lresolv first, just in case the platform has libresolv, but doesn't actually need it to use LDAP. 2002-09-12 David Shaw <dshaw@jabberwocky.com> * NEWS: Note that the old IDEA plugin won't work with post-1.1.90 gpg. 2002-09-11 Werner Koch <wk@gnupg.org> Released 1.1.92. * configure.ac (random_modules): The default random module for system lacking a /dev/random is now auto selected at runtime. 2002-09-09 David Shaw <dshaw@jabberwocky.com> * NEWS: typo. * configure.ac: Add a link test for LDAP without -lresolv for HPUX. Remove "hstrerror" test as it is no longer needed. 2002-09-02 Werner Koch <wk@gnupg.org> * README: Removed the note about a development version so that we later don't forget this. Minor other changes. 2002-08-29 Werner Koch <wk@gnupg.org> * configure.ac (random_modules): Reworked the code to select the random module. Define USE_ALL_RANDOM_MODULES for value all. 2002-08-27 David Shaw <dshaw@jabberwocky.com> * configure.ac: Check type of mode_t. * NEWS: Clarify that --libexecdir is a configure option. * configure.ac: Check for hstrerror. 2002-08-19 David Shaw <dshaw@jabberwocky.com> * NEWS: Document new ways to enable MDC, and change in automatic compression disabling. * configure.ac: No such thing as the "none" random gather any longer. 2002-08-08 David Shaw <dshaw@jabberwocky.com> * configure.ac: Add an --enable-tiger. * NEWS: Clarify new permission checks. 2002-08-07 David Shaw <dshaw@jabberwocky.com> * configure.ac: If the static IDEA cipher is present, disable dynamic loading. Also fix backwards grammar of keyserver exec-path CHECKING message. 2002-08-05 Werner Koch <wk@gnupg.org> * configure.ac: Bumbed version number. 2002-08-04 Werner Koch <wk@gnupg.org> Released 1.1.91. * configure.ac (ALL_LINGUAS): Added Catalan. 2002-08-02 Werner Koch <wk@gnupg.org> * configure.ac: Removed all extension stuff but keep the tests for dlopen. We don't need to figure out the flags required. All stuff is now statically loaded. 2002-07-30 David Shaw <dshaw@jabberwocky.com> * README, configure.ac: --with-exec-path is now clarified into --disable-keyserver-path * NEWS: changes since 1.1.90. 2002-07-24 David Shaw <dshaw@jabberwocky.com> * configure.ac: Include a GNUPG_LIBEXECDIR in g10defs.h, as well as a SUBST for Makefiles. 2002-07-22 Timo Schulz <ts@winpt.org> * configure.ac: Replace the 'c:/' variables with 'c:\' due to the fact we already use '\' in the remaining code. 2002-07-08 David Shaw <dshaw@jabberwocky.com> * configure.ac: Add --with-mailprog to override the use of sendmail with another MTA. We can use anything that follows the "$MAILPROG -t" convention. 2002-07-04 David Shaw <dshaw@jabberwocky.com> * configure.ac: --enable-exec-path should be a 'with'. Fix 'no' cases of --with-exec-path and --with-photo-viewer. * README: Document --disable-exec, --disable-photo-viewers, --disable-keyserver-helpers, --enable-exec-path, and --with-photo-viewer. * configure.ac: Add --with-photo-viewer to lock the viewer at compile time and --disable-keyserver-helpers and --disable-photo-viewers to allow disabling one without disabling the other. 2002-07-03 David Shaw <dshaw@jabberwocky.com> * configure.ac: Allow setting USE_EXEC_PATH to lock the exec-path to a fixed value. 2002-07-01 Werner Koch <wk@gnupg.org> * configure.ac: Set version number to 1.1.91. Released 1.1.90. * INSTALL: Replaced by generic install file. * README: Marked as development version and moved most stuff of the old INSTALL file to here. 2002-06-30 Werner Koch <wk@gnupg.org> * configure.ac: Link W32 version against libwsock32. 2002-06-29 Werner Koch <wk@gnupg.org> * configure.ac (development_version): New. (HAVE_DEV_RANDOM_IOCTL): Removed test for it; it was never used. * BUGS, AUTHORS: Add a note on how to send security related bug reports. 2002-06-20 David Shaw <dshaw@jabberwocky.com> * NEWS: changes since 1.0.7. * configure.ac: Set new version number (1.1.90), and fix Solaris compiler flags for shared objects. 2002-06-11 David Shaw <dshaw@jabberwocky.com> * configure.ac: Move -lsocket and -lnsl checks before LDAP link tests so they work properly on Solaris. Noted by David Champion. Also, check for the Mozilla LDAP library if the OpenLDAP library check fails. Put -lsocket and -lnsl in NETLIBS rather than LIBS so not all programs are forced to link to them. 2002-06-05 David Shaw <dshaw@jabberwocky.com> * configure.ac: Add a switch for the experimental external HKP keyserver interface. 2002-05-22 Werner Koch <wk@gnupg.org> * configure.ac: Check for strcasecmp and strncasecmp. Removed stricmp and memicmp checks. 2002-05-08 David Shaw <dshaw@jabberwocky.com> * configure.ac: If LDAP comes up unusable, try #including <lber.h> before giving up. Old versions of OpenLDAP require that. 2002-05-03 David Shaw <dshaw@jabberwocky.com> * configure.ac: In g10defs.h, use \ for the directory separator when HAVE_DOSISH_SYSTEM is on. * configure.ac: Add --disable-exec flag to disable all remote program execution. --disable-exec implies --disable-ldap and --disable-mailto. Also look in /usr/lib for sendmail. If sendmail is not found, do not default - just fail. 2002-04-30 David Shaw <dshaw@jabberwocky.com> * configure.ac: Try and link to a sample LDAP program to check if the LDAP we're about to use is really sane. The most common problem (using a very old OpenLDAP), could be fixed with an extra #include, but this would not be very portable to other LDAP libraries.
2002-10-07Update MASTER_SITES and HOMEPAGE.wiz1-3/+5
From Jim Geovedi on tech-pkg <20021007224707.GA16634@toxic.magnesium.net>.
2002-10-07Convert to buildlink2. Use perl5/module.mk.seb1-6/+3
2002-10-07Allow this to build on Linux (the Debian flavor, at least)jschauma3-8/+17
2002-10-07Use int32_t while dealing with sasldb version not long! This fix cyrus saslseb5-7/+150
on sparc64. Bump PKGREVISION.
2002-10-06Convert to buildlink2. Use perl5/module.mk.seb9-54/+27
2002-10-06Use buildlink2. Use perl5/module.mk.seb1-4/+4
2002-10-06Add p5-Digest-Nilsimsaheinz1-1/+2
2002-10-06Import of p5-Digest-Nilsimsa, a perl5 extension module for Nilsimsaheinz4-0/+36
signatures. A Nilsimsa signature is a statistic of n-gram occurance in a piece of text. It is a 256 bit value usually represented in hex
2002-10-05Unused.wiz1-34/+0
2002-10-05Convert to buildlink2.wiz1-4/+4
2002-10-04Add and enable optcalc.wiz1-1/+2
2002-10-04Add otpCalc-0.96: OTP and S/Key calculator for Xhubertf4-0/+32
otpCalc is an RFC2289 and RFC1760 compliant one time password calculator, written to use the GTK+ library for screen I/O. Contributed by Michael Santos <mike@ethmoid.org> in PR 18527.
2002-10-02Drop unneeded patch, and unneeded automake dependency.wiz3-28/+3
2002-10-02get rid of autoconf build dependency by patching configuredillo3-6/+16
2002-10-02Convert comments to use automake.mk.wiz1-7/+11
2002-10-01Belated bump to nb2, following fixes to dlsym return checks to work properly ↵chris1-2/+2
against -current.
2002-09-30fixup dlsym error checks. An error is indicated by dlsym returning NULL notchris2-1/+24
dlerror returning something valid.
2002-09-30Update ratas to 2.1taca3-8/+9
Here is quote from 2.0's release announce but changes from 2.0 to 2.1 are unknown. New in this version of RATS: RATS can now descend through directories recursively, analyzing any supported source code it finds. Ability to output results as HTML or XML. Result output can contain the line of code that caused each problem to be reported, along with the column number in the source file the problem was detected at. RATS will now report various statistics at the end of the reporting phase, including total time spend on the analysis, and number of source lines analyzed. Various database additions. A new database file, rats-openssl, which aids in analyzing any code that utilizes the OpenSSL C API. (Thanks to Ben Laurie for contributing this database)
2002-09-27Updated to p5-SSLeay-0.45shell2-18/+15
Changes : + PKCS12 certificate support, patch submitted by Beni Takahashi, author of patch Daisuke Kuroda + Fixing compile warnings on Solaris 8/Sparc with Forte 7.0 about implicit conversions and implicit declarations. Thanks to Marek Rouchal for bug report. - Removed unused dependency on URI::URL, thanks to Ric Steinberger for pointing out this problem under perl 5.8.0 - fixed Makefile.PL use of dirname() which could error for perl 5.8.x Thanks to Chip Turner of RedHat for patch. - Fixed a runtime error with Net::SSL->proxy for running under perl warnings with no proxy defined, which t/net_ssl.t test case revealed. + Added t/net_ssl.t test for initializing a Net::SSL object + Added build auto-detect for 0.9.6+ and only then use OPENSSL_free instead of free() since older OpenSSL like 0.9.4 did not have it. + Added ./net_ssl_test -CAfile documentation, and root CA file from mod_ssl distribution at certs/ca-bundle.crt that can be used for general root CA peer certificate verification. + Plus many bugs fixed and improvement... see CHANGES for more
2002-09-27Updated to p5-IO-Socket-SSL-0.91shell2-10/+7
Two recent changes : v0.91 - Added support for SSL_peek and SSL_pending (peek() and pending()). Updated documentation, tests, etc. to reflect this. v0.901 2002.08.19 - Fixed the warning that happens when sockets are not explicitly closed() before the program terminates. For full log, please see Changes
2002-09-27Updated to p5-Net-SSLeay-1.20shell2-12/+8
Changes : - Additional SSL_peek patch to ssl_read_until from Peter Behroozi <peter@@fhpwireless_.com> --Sampo pkgsrc changes : - buildlink -> buildlink2 - perl5 module
2002-09-26* Use buildlink2.jlam7-46/+112
* Use bsd.pkg.install.mk and install the example xdm config files. * Rename the rc.d script to "xdm_krb4.sh" and make it use /etc/rc.subr. * Remove redundant MESSAGE; the INSTALL script says all the right things.
2002-09-24Update msudir to 0.12:abs2-5/+5
Fix compilation error on Linux
2002-09-24Sort.wiz1-2/+2
2002-09-24Complete standardization of messages according to latest pkglint.wiz10-31/+32
2002-09-24buildlink1 -> buildlink2jlam1-6/+8
2002-09-23buildlink1 -> buildlink2jlam7-54/+105
2002-09-23Convert to buildlink2.wiz1-3/+3
2002-09-23Update to 1.21:wiz2-5/+5
* Improved the default output so it creates multiple formatted lines instead of single very long lines for each hit. Use the new "--singleline" (-S) option to get the original "long line" format. * Removed duplicate "getpass" entry in the ruleset; this didn't hurt anything, but was unnecessary. Thanks to the user who gave me that feedback, wish I'd kept your email address so I could credit you properly :-). * Added a short tutorial to man page. * Fixed initial upper/lower case on many entries in the ruleset. * Allow "--input" as a synonym for "--inputs".
2002-09-23Update msudir to 0.11:abs2-5/+5
Allow fromgroup and rootdir to be unset in the config file.
2002-09-23Unused.jlam1-38/+0
2002-09-23buildlink1 -> buildlink2jlam1-4/+6
2002-09-23Instead of using BUILDLINK_TRANSFORM.<pkg> to change the location ofjlam1-3/+5
headers in ${BUILDLINK_DIR}, simply create BUILDLINK_CPPFLAGS.<pkg> variables whose values are appended to CPPFLAGS, which are automatically passed to the configure and build processes. BUILDLINK_TRANSFORM.<pkg> has little use in buildlink2 since packages are now told that the software may be found where it really is installed, not in ${BUILDLINK_DIR} as was the case with buildlink1. Eventually, these variables will be declared unsupported by buildlink2.
2002-09-21Strip the ".buildlink" from the names of the python application andjlam5-11/+11
extension Makefile fragments, because they really don't have anything to do with the buildlink[12] frameworks. Change all the Makefiles that use application.buildlink.mk and extension.buildlink.mk to use application.mk and extension.mk instead.
2002-09-21buildlink1 -> buildlink2jlam1-3/+3
2002-09-20Make these scripts more portable by taking advantage of automatic rc.dgrant6-12/+12
script handling and using @RCD_SCRIPTS_SHELL@. as discussed with jlam.
2002-09-19Take advantage of the auto-generation and installation of rc.d scripts.jlam5-38/+5
2002-09-18When using bsd.pkg.install.mk, if a DEINSTALL or INSTALL file alreadyjlam3-8/+3
exists, then use it as the default value of DEINSTALL_EXTRA_TMPL or INSTALL_EXTRA_TMPL.
2002-09-09The shared libraries are installed on Solaris now.markd1-1/+7
2002-09-09Fix IPv6 detection on Darwin. Patch supplied by itojun in private e-mail.jlam3-17/+85
2002-09-07Remove dependency on autoconf/automake and finish buildlink2 conversion.jlam7-25/+306
2002-09-07Use buildlink2 and pass an extra flag to the configure script so that ifjlam1-3/+4
RSAref is used, then the library may be found.
2002-09-05We don't need to symlink bin/openssl since we want the one in ${SSLBASE}.jlam1-3/+2
2002-09-05update HOMEPAGE for www.monkey.org -> monkey.org moveitojun1-2/+2
2002-09-05www.monkey.org moved to monkey.org. pilot <pilot@monkey.org>itojun4-10/+10
2002-09-01Fix whitespace in PLIST. Closes pkg/18137 by Katsuhiko Fujii.wiz1-2/+2
2002-08-31Add variables for openssh privilege separation to bsd.pkg.defaults.mk:grant2-15/+13
OPENSSH_USER OPENSSH_UID OPENSSH_GROUP OPENSSH_GID OPENSSH_CHROOT Use these to automatically create user/group if they do not already exist. Assists platforms which do not have an 'sshd' user by default, while adding flexibility for NetBSD systems. Checked by Stoned Elipot <seb@netbsd.org>.
2002-08-30Update ruby-openssl pacakge to 0.1.2.1(0.1.2a).taca2-8/+6
It should be fixed in error of bulk build, too. $Id: ChangeLog,v 1.43 2002/07/24 14:46:52 gotoyuzo Exp $ 'OpenSSL for Ruby' project Copyright (C) 2001 Michal Rokos <m.rokos@sh.cvut.cz> All rights reserved. $Log: ChangeLog,v $ Revision 1.43 2002/07/24 14:46:52 gotoyuzo * lib/openssl/buffering.rb: typo fixed. (Thakns NaHi) Revision 1.42 2002/07/24 12:31:31 gotoyuzo * ossl.c: should include <sys/time.h> if it exists. (Thanks Knu) Revision 1.41 2002/07/24 09:56:17 gotoyuzo * ossl-0.1.2 released Revision 1.40 2002/07/23 20:23:30 gotoyuzo * lib/net/https.rb: follow net/http.rb Rev: 1.41.2.18 (ruby_1_6) Revision 1.39 2002/07/23 10:49:19 gotoyuzo * ossl_ssl.c: should raise exception while SSL_write returns 0. Revision 1.38 2002/07/23 10:45:25 gotoyuzo * ossl.h: include <openssl/e_os.h> * ossl.c: workaround to convert into UTC time. * lib/openssl.rb: fix string embeded expression. Revision 1.37 2002/04/07 16:35:32 majkl * Macros fixups * X509ExtFactory cleanup * fixed strptime warning on Linux * X509::Certificate#version has been changed! !!! WARNING !!! x509.version = 2 -> defines X509v3, (0 for v1, 1 for v2, ...) p x509.version -> 2, means that it is X509v3 !!! WARNING !!! Revision 1.36 2002/03/11 21:35:39 majkl * Cipher IV fixup Revision 1.35 2002/03/11 17:20:22 majkl * Big internal cleanup (all structs with only 1 member rearranged) * improved getting time_t from cTime Revision 1.34 2002/03/06 08:05:05 majkl * build fix-ups Revision 1.33 2002/03/05 15:05:57 majkl * WARNING! All to_str methods are not used any longer (use to_text instead) * made an aliases to_pem as to_s * more relaxed params checking - everywhere where string was needed it is OK that obj implements to_s method Revision 1.32 2002/02/23 07:28:00 majkl * More benevolent checks (Check_SafeStr(x) -> Check_Type(x, T_STRING) (where we don't care) Revision 1.31 2002/02/20 08:43:54 majkl * Fixed some memory leaks Revision 1.30 2002/02/13 13:09:49 majkl * transition from rb_raise to OSSL_Raise (where possible) * some mem checks * preliminary DH key support
2002-08-30ssh-rand-helper is also installed when /dev/urandom does not exist.grant1-1/+2
Checked by Stoned Elipot <seb@netbsd.org>.