summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2003-12-05Add and enable libgpg-error.xtraeme1-1/+2
2003-12-05Initial import of libgpg-error-0.6 from pkgsrc-wip, packaged byxtraeme5-0/+62
Min Sik Kim. libgpg-error is a library that defines common error values for all GnuPG components. Among these are GPG, GPGSM, GPGME, GPG-Agent, libgcrypt, pinentry, SmartCard Daemon and possibly more in the future.
2003-12-05Updated to 0.2.6, provided by Min Sik Kim PR pkg/23269.xtraeme3-7/+7
Changes since 0.2.4: Version 0.2.6 - ASN.1 parser accepts these kinds of integer definitions: "INTEGER (5 | 10)" and "INTEGER (5)" - Comments start at "--" and finish at the "end of line" or with another "--". Version 0.2.5 - Bug fix in ordering procedure for SET OF and SEQUENCE OF types coding. - Manage structured format (BER encoding) in asn1_der_decoding, asn1_decoding_element and asn1_der_decoding_startEnd for OCTET STRING type. - Manage SEQUENCE and SET empty structure. - Manage "indefinite length method" in asn1_der_decoding, asn1_decoding_element and asn1_der_decoding_startEnd for the following types: SEQUENCE, SEQUENCE OF, SET, and SET OF. - Bug fix in asn1_read_value with NULL parameter in case of BIT STRING
2003-12-05Add and enable nikto.xtraeme1-1/+2
2003-12-05Initial import of nikto-1.32 from pkgsrc-wip, packaged by Adrian Portelli.xtraeme7-0/+128
Nikto is a web server scanner which performs comprehensive tests against web servers for multiple items, including over 2200 potentially dangerous files/CGIs, versions on over 140 servers, and problems on over 210 servers. Scan items and plugins are frequently updated and can be automatically updated (if desired).
2003-12-05Replace all uses of mktemp() with mkstemp() and close PR 23640.ben8-10/+222
2003-12-04Add p5-Net-DNS-SECheinz1-1/+2
2003-12-04Import of p5-Net-DNS-SEC.heinz4-0/+64
This Perl module implements DNS Resource Record types that are relevant for DNSSEC operations. The implementation is based on: RFC 2535, RFC 2931 and the latest draft-ietf-dnsext-delegation-signer-0.xy.txt.
2003-12-03Change MAINTAINER to "tech-pkg" instead of the previous "packages".kristerw1-2/+2
2003-12-03Add p5-Crypt-OpenSSL-Bignum, p5-Crypt-OpenSSL-DSA, p5-Crypt-OpenSSL-Random, ↵heinz1-1/+5
p5-Crypt-OpenSSL-RSA
2003-12-03Import of p5-Crypt-OpenSSL-DSA.heinz4-0/+29
Crypt::OpenSSL::DSA implements the DSA (Digital Signature Algorithm) signature verification system. It is a thin XS wrapper to the DSA functions contained in the OpenSSL crypto library.
2003-12-03Import of p5-Crypt-OpenSSL-RSA.heinz5-0/+43
Crypt::OpenSSL::RSA is a XS Perl module designed to provide basic RSA functionality by using the RSA functions in the OpenSSL library.
2003-12-03Import of p5-Crypt-OpenSSL-Random.heinz4-0/+26
Crypt::OpenSSL::Random is a thin XS wrapper around the pseudo-random number generator functions contained in the OpenSSL crypto library.
2003-12-03Import of p5-Crypt-OpenSSL-Bignum.heinz4-0/+31
Crypt::OpenSSL::Bignum provides access to OpenSSL multi-precision integer arithmetic libraries. Presently, many though not all of the arithmetic operations that OpenSSL provides are exposed to perl. In addition, this module can be used to provide access to bignum values produced by other OpenSSL modules, such as key parameters from Crypt::OpenSSL::RSA.
2003-12-03The MASTER_SITES for security/tripwire does not have the tarball availableben2-5/+4
for download. I changed MASTER_SITES to match FreeBSD's ports/security/tripwire12. I verified that the contents of these files are identical using cmp.
2003-12-03Add p5-Digest-BubbleBabbleheinz1-1/+2
2003-12-03Import of Digest::BubbleBabble 0.1heinz4-0/+31
The Perl module Digest::BubbleBabble can be used to create a fingerprint of a MD5 or SHA-1 digest in "bubble babble" format. Bubble babble is a method of representing a message digest as a string of "real" words, to make the fingerprint easier to remember. The "words" are not necessarily real words, but they look more like words than a string of hex characters.
2003-12-03Add and enable gss, gsasl.xtraeme1-1/+3
2003-12-03Initial import gsasl-0.0.8 from pkgsrc-wip.xtraeme5-0/+181
GNU SASL is an implementation of the Simple Authentication and Security Layer framework and a few common SASL mechanisms. SASL is used by network servers (e.g., IMAP, SMTP) to request authentication from clients, and in clients to authenticate against servers. GNU SASL contains a library (`libgsasl'), a command line utility (`gsasl') to access the library from the shell, and a manual. The library includes support for the SASL framework (with authentication functions and application data privacy and integrity functions) and at least partial support for the CRAM-MD5, EXTERNAL, GSSAPI, ANONYMOUS, PLAIN, SECURID, DIGEST-MD5, LOGIN, NTLM and KERBEROS_V5 mechanisms.
2003-12-03Initial import of gss-0.0.6 from pkgsrc-wip.xtraeme5-0/+71
GSS is an implementation of the Generic Security Service Application Program Interface (GSS-API). GSS-API is used by network servers (e.g., IMAP, SMTP) to provide security security services, e.g., authenticate clients against servers. GSS consists of a library and a manual.
2003-12-03Add an empty plist for AIX.erh1-0/+1
2003-12-03Bump date for previous. Fix typo.wiz1-3/+3
2003-12-03Updated audit-packages to 1.26martti3-7/+28
Added support for audit-packages.conf. This file can be used to define environment variables (e.g. FETCH_ARGS).
2003-12-03The PLIST.linux was empty, but should be registering thereed1-1/+7
libssl.so* and libcrypto.so* files. So added this.
2003-12-01Add a patch to handle systems which have uint64_t but not the UINT64_Che2-1/+19
macro. This could happen with UNIX98-type systems, such as the code on our netbsd-1-5 branch, and would prevent this package from building on such systems. Problem also reported to the original author.
2003-11-27Add improved patch for compromised ElGamal signing keys fromheinz4-9/+83
gnupg-devel at gnupg org. The old patch didn't completely disable usage of the compromised keys. Move the old and new fix to the patches/ directory.
2003-11-27Updated p5-Digest-SHA1 to 2.06.grant2-5/+5
changes since 2.04: Release 2.06 The sha1_transform() function did not check that it was actually passed any arguments. Complete self-contained documentation included (copied from Digest::MD5), since the Digest.pm manpage is not always available. Release 2.05 Added missing cast to support C++ compilation. Patch by Jan Dubois. Document that the sha1_base64 function and the b64digest method does not pad their result.
2003-11-27Updated p5-Digest-MD5 to 2.30.grant2-5/+5
changes since 2.27: Release 2.30 Some tweaks to make the module build on perl-5.004 and perl-5.005 again. Release 2.29 Another try. Forgot to update the test checksums. Release 2.28 Fix minor documentation typo.
2003-11-27Apply security patch which disables ElGamal signature keys because theytron2-3/+9
are vulnerable. Bump package revision to reflect this change.
2003-11-27Fix OpenSSL version number parsing. Patch from PR 23532 by Michael vanjlam1-10/+24
Elst with style modifications by me.
2003-11-25If the built-in OpenSSL software is 0.9.6g, then check whether itjlam1-2/+18
contains the 0.9.6g -> 0.9.6l security fixes pulled up to netbsd-1-6 on 2003-11-07 by checking for the presence of the preprocessor symbol OPENSSL_HAS_20031107_FIX. If it does, then allow the built-in OpenSSL to satisfy dependencies for openssl>=0.9.6l.
2003-11-24Add GCC_REQD=2.95.3 (for 1.5 or older).wiz1-1/+3
2003-11-23Remove USE_PKGSRC_GCC line -- it is unneeded (compiles fine with bothwiz1-3/+1
gcc-2.95.3 and gcc-3.3.2.
2003-11-21Install the saslauthd manpage as cat8/saslauthd.0 as it should be on BSDjlam4-3/+66
systems.
2003-11-21s/root/@ROOT_USER@/ to be more generally correct.jlam1-2/+2
2003-11-19textproc/glimpse and security/openssl no longer conflict, as openssljschauma1-2/+2
does no longer install bin/cast. Noted by Bernhard Riedel.
2003-11-19OpenSSL has not had base64 for a while now, so these two no longer needjschauma1-3/+2
to conflict. Noted by Bernhard Riedel.
2003-11-18Remove harcoded CFLAGS from Makefile, pass our CFLAGS instead.xtraeme3-2/+23
Patch provided by Christian Biere in PR pkg/23461. Bump PKGREVISION.
2003-11-17Remove OPENSSL_HAS_*FIX code; corresponding check was removed inwiz1-9/+1
previous commit to this file. Noted superfluous by Todd Vierling.
2003-11-14Update to 4.24.0, since previous distfile disappeared.wiz3-12/+11
Changes unknown.
2003-11-14Fix problems seen in latest bulk-build by:jschauma3-9/+14
- using PKGNAME_NOREV as the basis for the DISTFILE - correcting/updating the MASTER_SITES and HOMEPAGE - patching instead of using -DOPENSSL="\"openssl\"", since apparently #include "openssl/""foo.h" is no good (gcc-3 issue?)
2003-11-12Convect to using buildlink2 framework which fixes dependence problemtron1-4/+3
caused by "openssl" package version bump madness.
2003-11-12Depend on latest openssl package (hi jan!).wiz1-16/+4
Remove some obsolete code. Fix rsaref reference, we do not want to include a buildlink3.mk here.
2003-11-12PKGREVISION++ after openssl update.jschauma21-25/+42
2003-11-12Update to openssl-0.9.6l:jschauma2-7/+5
*) Fix additional bug revealed by the NISCC test suite: Stop bug triggering large recursion when presented with certain ASN.1 tags (CAN-2003-0851) [Steve Henson]
2003-11-12PKGREVISION++ due to devel/popt update.salo1-2/+2
2003-11-11Update a mirror site URL; might fix bulk build.wiz1-2/+2
2003-11-08Upgrade nessus and friends to 2.0.9.xtraeme11-30/+161
This closes PR pkg/23159 by Adrian Portelli. Changes since 2.0.7: o The bpf sharing system now works fine on BSD systems, so Nessus now only requires one /dev/bpf to work correctly, no matter how many hosts are being tested o A bug in tcp_ping() would make some probes have a source port set to 0 o Minor bug fixes o Added functions in libnasl (join_multicast_group(), unixtime(), and more...) o All SSL operations now use non-blocking sockets instead of the alarm() trick to handle timeouts o Minimize the number of pixmaps that need to be created in the Nessus client by re-using them Review the Changelog file to see a complete list of changes.
2003-11-08Update PHP to 4.3.4jdolecek1-1/+8
From release announcemenet: After a lengthy QA process, PHP 4.3.4 is finally out! This is a medium size maintenance release, with a fair number of bug fixes. All users are encouraged to upgrade to 4.3.4. Bugfix release PHP 4.3.4 contains, among others, following important fixes, additions and improvements: * Fixed disk_total_space() and disk_free_space() under FreeBSD. * Fixed FastCGI support on Win32. * Fixed FastCGI being unable to bind to a specific IP. * Fixed several bugs in mail() implementation on win32. * Fixed crashes in a number of functions. * Fixed compile failure on MacOSX 10.3 Panther. * Over 60 various bug fixes! For full list of changes in PHP 4.3.4, see ChangeLog: http://www.php.net/ChangeLog-4.php#4.3.4
2003-11-05patch-ab for previous distinfo commitrtr1-0/+14