summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2004-02-19If we're using the LDAP authentication backend, we pull in <sasl/sasl.h>,jlam1-1/+2
so include cyrus-sasl2/buildlink3.mk to get it.
2004-02-19Add and enable py-OpenSSL.minskim1-1/+2
2004-02-19Import py-OpenSSL from pkgsrc-wip. Packaged by mjasm at users dotminskim4-0/+38
sourceforge dot net, cleaned by cjep@, and modified by me. pyOpenSSL is a Python module that is a rather think wrapper around (a subset of) the OpenSSL library. A lot of the object methods do nothing more than call a corresponding function in the OpenSSL library.
2004-02-18Convert to buildlink3.heinz2-7/+9
Update to version 0.21. Changes since 0.19: 0.21 Sun Feb 15 2004 21:13:45 - Include t/format.t in the MANIFEST file, so that it is actually included in the distribution. 0.20 Sun Feb 15 2004 15:21:40 - Finally add support for the public key format produced by "openssl rsa -pubout". - Add comment in readme about locating kerberos files on redhat systems
2004-02-18Reorder some lines so that BUILDLINK_USE_BUILTIN.<pkg> set in thejlam3-48/+54
environment overrides all other settings.
2004-02-17Add and enable chkrootkit.minskim1-1/+2
2004-02-17Import chkrootkit from pkgsrc-wip. Packaged by Adrian Portelli andminskim5-0/+88
modified by me. chkrootkit is a tool to locally check for signs of a rootkit. It contains: * chkrootkit: a shell script that checks system binaries for rootkit modification. * ifpromisc.c: checks if the network interface is in promiscuous mode. * chklastlog.c: checks for lastlog deletions. * chkwtmp.c: checks for wtmp deletions. * check_wtmpx.c: checks for wtmpx deletions. (Solaris only) * chkproc.c: checks for signs of LKM trojans. * chkdirs.c: checks for signs of LKM trojans. * strings.c: quick and dirty strings replacement.
2004-02-17Don't use sysctl to determine the machine arch when ${MACHINE_ARCH} alreadyjlam3-5/+6
has the correct value. Fixes build on NetBSD-1.5.3/sparc, which doesn't understand "sysctl hw.machine_arch", reported in PR 24448.
2004-02-17We no longer need to set GNU_MISSING_OVERRIDE after the changes in revisionjlam1-3/+1
1.27 of tools.mk to hide the auto* tools between pre-configure and do-configure.
2004-02-17Update gpgme to 0.3.16.chris3-12/+7
Only minor changes since last release: 2003-11-19 Werner Koch <wk@gnupg.org> Released 0.3.16. * configure.ac: Bump LT revision to C9/A3/R7. 2003-11-18 Werner Koch <wk@gnupg.org> * configure.ac: Check for timegm.
2004-02-16Updated stunnel to 4.05martti5-23/+25
* New feature sponsored by SURFnet http://www.surfnet.nl/ - Support for CIFS aka SMB protocol SSL negotiation. * New features - CRL support with new CApath and CAfile global options. - New 'taskbar' option on WIN32 (thx to Ken Mattsen <ken.Mattsen@roxio.com>). - New -fd command line parameter to read configuration from a specified file descriptor instead of a file. - accept is reported as error with [section] defined (in stunnel 4.04 it was silently ignored causing problems for lusers that did not read the fine manual). - Use fcntl() instead of ioctlsocket() to set socket nonblocking when it is supported. - Basic support for hardware engines with OpenSSL >= 0.9.7. - French manual by Bernard Choppy <choppy@imaginet.fr>. - Thread stack size reduced to 64KB for maximum scalability. - Added optional code to debug thread stack usage. - Support for nsr-tandem-nsk (thx to Tom Bates <tom.bates@hp.com>). * Bugfixes - TCP wrappers code moved to CRIT_NTOA critical section since it uses static inet_ntoa() result buffer. - SSL_ERROR_SYSCALL handling problems fixed. - added code to retry nonblocking SSL_shutdown() calls. - Use FD_SETSIZE instead of 16 file descriptors in inetd mode. - fdscanf groks lowercase protocol negotiation commands. - WIN32 taskbar GDI objects leak fixed. - Libwrap detection bug in ./configure script fixed. - grp.h header detection fixed for NetBSD and possibly other systems. - Some other minor updates.
2004-02-14USE_GNU_TOOLS should be appended to with +=grant1-2/+2
2004-02-14bl3ifyminskim2-3/+23
2004-02-14PKGCONFIG_OVERRIDE is relative to WRKSRC.jmmv2-4/+4
2004-02-14LIBTOOL_OVERRIDE and SHLIBTOOL_OVERRIDE are now lists of shell globsjlam17-46/+23
relative to ${WRKSRC}. Remove redundant LIBTOOL_OVERRIDE settings that are automatically handled by the default setting in bsd.pkg.mk.
2004-02-14USE_GMAKE=yes -> USE_GNU_TOOLS=makeuebayasi1-2/+2
2004-02-14This package needs python>=2.3.minskim1-2/+2
2004-02-14Add a note to cyrus-sasl2/Makefile.common about which package Makefilesjlam3-5/+11
include it. This is a reminder to anyone who updates cyrus-sasl2 to also touch the other packages. Update the cy2-*/PLIST files to have the correct module version numbers.
2004-02-14Update to 1.24:wiz2-5/+5
2003-10-29 David A. Wheeler * Fixed an incredibly obscure parsing error that caused some false positives. If a constant C string, after the closing double-quote, is followed by a \ and newline (instead of a comma), the string might not be recognized as a constant string (thus triggering warnings about non-constant values in some cases). This kind of formatting is quite ugly and rare. My thanks to Sascha Nitsch (sascha, at spsn.ath.cx) for pointing this bug out and giving me a test case to work with. * Added a warning for readlink. The implementation and warning are mine, but the idea of warning about readlink came from Stefan Kost (kost, at imn.htwk-leipzig.de). Thanks!! 2003-09-27 David A. Wheeler * Released version 1.23. Minor bugfixes. 2003-09-27 David A. Wheeler * Fixed subtle bug - in some circumstances single character constants wouldn't be parsed correctly. My thanks to Scott Renfro <scottdonotspam, at renfro.org> for notifying me about this bug. Scott Renfro also sent me a patch; I didn't use it (the patch didn't handle other cases), but I'm grateful since it illustrated the problem. * Fixed documentation bug in man page. The option "--minlevel=X" must be preceded by two dashes, as are all GNU-style long options. The man page accidentally only had one dash in the summary (it was correct elsewhere); it now correctly shows both dashes. * Modified man page to list filename extensions that are interpreted as C/C++. * Removed index.html from distribution - it's really only for the website.
2004-02-14CONFIG_STATUS_OVERRIDE is the default in bsd.pkg.mk, so no need for thesejlam1-3/+1
definitions here.
2004-02-14Remove unused patch.jlam1-198/+0
2004-02-14Don't try to link GSSAPI module staticly if we're using shared libs.jlam7-15/+92
Fixes undefined symbols on linking other software against libsasl2. Bump PKGREVISION.
2004-02-14Update security/cyrus-sasl2 to 2.1.17. Changes from version 2.1.15 include:jlam16-267/+92
* Now correctly do authorizaton callback in sasl_checkpass() * Writable auxprop support * Significantly improved documentation
2004-02-14remove unneeded CONFIG_{GUESS,SUB}_OVERRIDE, as bsd.pkg.mk does thisgrant1-4/+1
automatically now.
2004-02-13Yet another mipseb config.guess/config.sub override.sekiya1-1/+4
2004-02-12PKGSHLIBTOOL has been removed from pkgsrc; we're supposed to usejlam2-4/+4
${SHLIBTOOL} instead.
2004-02-12Remove hidden dependency on autoconf by using GNU_MISSING_OVERRIDE. Also,jlam2-3/+5
PKGSHLIBTOOL has been removed from pkgsrc and we're supposed to use ${SHLIBTOOL} instead.
2004-02-12We only conflict with cyrus-sasl<2.1.15nb2, which was the first versionjlam1-2/+2
of cyrus-sasl2 after spliiting out the saslauthd into a separate package.
2004-02-12s/_BUILTIN_OPENSSL/BUILDLINK_IS_BUILTIN.openssl/gjlam1-3/+3
2004-02-12Create a new variable PREFER_NATIVE that has the opposite semanticsjlam5-15/+65
as PREFER_PKGSRC. Preferences are determined by the most specific instance of the package in either PREFER_PKGSRC or PREFER_NATIVE. If a package is specified in neither or in both variables, then PREFER_PKGSRC has precedence over PREFER_NATIVE.
2004-02-12Reorganize code so that any dependencies are checked as part of decidingjlam5-94/+97
whether the software is built-in or not. This facilitates implementing the forthcoming PKGSRC_NATIVE variable.
2004-02-11bl3ifyxtraeme2-4/+28
2004-02-10Add and enable py-gnutls.minskim1-1/+2
2004-02-10Import py-gnutls from pkgsrc-wip.minskim4-0/+34
Python bindings for GNUTLS. GnuTLS is a project that aims to develop a library which provides a secure layer, over a reliable transport layer. Currently the GnuTLS library implements the proposed standards by the IETF's TLS working group.
2004-02-10Update fprot-workstation-bin to version 4.3.3.ben2-6/+6
2004-02-10buildlink3.mk files for libidn and libksba.jlam1-0/+19
2004-02-10include <sys/types.h> before <sys/socket.h>, allowing this to buildgrant2-1/+14
on IRIX 5.3. fixes second part of PR pkg/24375 from Georg Schwarz.
2004-02-10fix build on IRIX by using the right Makefile target, which containsgrant1-2/+4
only the major part of OS_VERSION. fixes part of PR pkg/24375 from Georg Schwarz.
2004-02-10Add missing gettext-lib/buildlink2.mk.minskim1-3/+3
2004-02-10buildlink3.mk file for security/gnutls (used by mail/dovecot).jlam1-0/+23
2004-02-10bl3ifyjlam6-21/+53
2004-02-10bl3ify, and bump the PKGREVISION due to gss dependency update.jlam2-10/+31
2004-02-10Bump DEPENDS after PKGREVISION update due to header file change.jlam2-4/+4
2004-02-10bl3ify and bump the PKGREVISION after removing <gss/krb5.h> (which isn'tjlam4-5/+34
installed) from the gss.h header.
2004-02-10bl3ify and remove libiconv and gettext-lib buildlink files. This packagejlam2-9/+26
really only needs gettext-lib through libgpg-error, and doesn't need libiconv at all unless it uses the pkgsrc gettext-lib. The gettext-lib buildlink3.mk file combined with the buildlink3 framework is considerably better at detecting this than the buildlink2.mk, which broke in a lot of instances.
2004-02-09BUILDLINK_DEPENDS.<pkg> lines should _always_ use += to _append_ to thejlam1-2/+2
existing value. This is critical to set the correct list of dependencies for a package.
2004-02-09bl3ifyjlam2-3/+21
2004-02-09Bump PKGREVISION due to gnome-vfs2 update (fam readded as a dependancy).jmmv1-2/+2
2004-02-09Pull in value of KRB4_PREFIX_CMDS from KERBEROS_PREFIX_CMDS.wennmach1-6/+7
This provides both, simple and fine-grained control over the Kerberos prefix. If not specified, KRB4_PREFIX_CMDS will default to the value of KERBEROS_PREFIX_CMDS. If specified, it overrides KERBEROS_PREFIX_CMDS.
2004-02-09Do not install bin/ftp (this will overwrite the ftp installed as partwennmach2-31/+45
of bootstrap-pkgsrc). ftp is now always installed as bin/k4ftp. In addition, if the variable KRB4_PREFIX_CMDS is set to YES, rcp, rlogin, rsh, su, and telnet will be installed with a "k4" prefix. This has been achieved by stealing the transform code from security/heimdal and by tayloring it a bit. Closes PR pkg/24354 by Tracy Di Marco White.
generated by cgit v1.2.3 (git 2.39.1) at 2025-03-04 10:40:45 +0000