summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2005-12-27Enable security/CSP.cube1-1/+2
2005-12-27Initial import of CSP, version 0.32, into the NetBSD Packages Collection. Ifcube5-0/+83
you think you might have read the openssl man pages one time too much for your own sanity, you might like this package. Certificate Service Provider is a perl wrapper around openssl that allows you to run multiple simple certificate authorities (CAs). CSP is designed to be simple (almost to a fault) and is ideally suited to small PKIs (< 1000 entities) where security is paramount. CSP is meant to be run on isolated, offline computers while still allowing CRLs and certificate repositories to be easily published. The package includes a patch that lets the program run out-of-the-box, without setting up CSPHOME and OPENSSL in the environment. Defining them is of course still permitted.
2005-12-27Remove paragraph about "MAILING LISTS".reed1-9/+0
2005-12-27Sort.reed1-2/+2
2005-12-27Lower expectations, both others' and mine: relinquish stewardshipseb5-10/+10
2005-12-26Mark packages for pkgsrc-2005Q4 that don't build on NetBSD/i386schmonz3-3/+12
3.0. If one of these is important to you, please fix it in time for pkgsrc-2006Q1, or it may be removed.
2005-12-21Add a non-conflicting definition for load_rc_config_var so thatjlam3-4/+30
platforms with older versions of /etc/rc.subr can run smbd.sh and winbindd.sh without updating /etc/rc.subr. Bump PKGREVISION to 2.
2005-12-17Change my MAINTAINER email address to the one I've been using forjlam6-12/+12
pkgsrc work.
2005-12-14Add security patch fromreed3-2/+19
http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.html Noted by waldeck of hk2.uwaterloo.ca via pkgsrc-bugs. Bump PKGREVISION. Tested build on NetBSD and Linux. Tested dropbear server on NetBSD. (This is during a freeze. Other stuff to be done later: update to latest version. Install man pages. Mention "client" in COMMENT and DESCR. Use CONF_FILES and sysconfdir. And maybe install the "scp" tool also.)
2005-12-13Reset maintainer, mail server unreachable for one week.joerg1-2/+2
2005-12-12Update fwbuilder and libfwbuilder to 2.0.10.bad10-51/+26
Bugs fixed since 2.0.9: * bug #1349326 "ulogd option does not work". There was a typo in the class iptAdvancedDialog ( 'useULOG' instead of 'use_ULOG' ) * bug #1315892: "fwbuilder crashes on missing OS template" The GUI crashed if user added new hostOS or firewall platform template under resources/os or resources/platforms, then reinstalled the package (and therefore lost their custom template files), then tried to open firewall or host OS settings dialog for the object using new template. * bug #1305933: "fwbuilder/Solaris: compilation errors". Another case of implicit type conversion QString->string which does not compile on systems with QT built w/o STL support. * bug #1304878: fwbuilder: signal.h required (Solaris). Using 'AC_CHECK_HEADERS([signal.h])' in configure.in to check for the appropriate #include. * bug #1304764: "configure script: Sun make check fails". Need to use ${MAKE-make} instead of $ac_make when checking for GNU make. * bug #1304785: "fwbuilder - Solaris has no libutil". Using better way to check whether we need to link with libutil. Bugs fixed in policy compiler for iptables since 2.0.9: * bug #1342495: "SNAT with address range". Compiler used to print warning "Adding virtual addresses for NAT is not supported for address range" even if adding virtual addresses for NAT was turned off. * bug #1313420: "OUTPUT chain is built wrong under certain conditions." Rules that have firewall in SRC and DST, while DST has negation, should be split so that the second generated rule goes into OUTPUT chain rather than FORWARD
2005-12-12First step at reworking Linux binary packages.joerg1-3/+6
Change most pkgs to depend on either emulators/suse_linux/Makefile.application (normal pkgs) or Makefile.common (suse91 and suse themselves) to filter out Operating Systems without Linux ABI support. Use CPU masks to limit the pkg to supported platforms.
2005-12-11Since I don't want to hack around with config.*, patch amap to notjoerg5-17/+61
use the bundled pcre, but devel/pcre instead.
2005-12-11Compile with the OpenSSL in NetBSD-current.salo3-3/+26
Patch from ssldump bug tracker, via <veego>.
2005-12-11Compile with the OpenSSL in NetBSD-current.salo2-4/+13
Patch from Debian bug tracker, via <veego>.
2005-12-08Add DragonFly support.joerg2-7/+16
2005-12-08Use NetBSD rules for DragonFly as well. Don't include both, net/bpf.hjoerg3-2/+20
and pcap.h, on DragonFly.
2005-12-08Fix errno.joerg2-1/+27
2005-12-08Fix errno.joerg2-1/+14
2005-12-08Fix OpenSSL test, it doesn't work out of the box on DragonFlyjoerg2-1/+14
due to missing size_t.
2005-12-08Fix errno. Don't declare sys_nerr on FreeBSD and DragonFly.joerg8-4/+86
2005-12-08Use FreeBSD config.h fragment on FreeBSD and DragonFly.joerg2-1/+30
2005-12-08Fix errno.joerg5-6/+47
2005-12-07Also check for the pfvar.h file in the subdirectory 'pf', DragonFly installspeter1-1/+2
it there.
2005-12-07Change ONLY_FOR_PLATFORM to NetBSD 2.x. NetBSD 3 has pf in base so thispeter1-2/+2
pkg is redundant on that version and on -current it doesn't even build without errors.
2005-12-06Add and enable p5-Crypt-SmbHashwiz1-1/+2
2005-12-06Import p5-Crypt-SmbHash-0.12 from pkgsrc-wip, packaged by Murray Armfield:wiz4-0/+28
This module provides functions to generate LM/NT hashes used in Samba's 'password' files, like smbpasswd.
2005-12-05Ran "pkglint --autofix", which corrected some of the quoting issues inrillig41-118/+118
CONFIGURE_ARGS.
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig82-210/+203
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-12-03Just dirrm the docs dir -- nothing should add files there.wiz1-2/+2
2005-12-03Create installation directory to fix bulk build.wiz1-1/+2
2005-12-02Add detection for pf from OpenBSD 3.8.peter1-4/+10
2005-12-01Split multipatch into multiple patches.wiz7-53/+62
2005-12-01Do not suggest rsaref (testing artifact).wiz1-2/+1
2005-12-01Convert to options framework.wiz2-39/+42
2005-11-25Bump PKGREVISION for libgsf dependencies, and BUILDLINK_DEPENDS becausewiz1-1/+2
of the libgsf shlib major bump and associated BUILDLINK_DEPENDS bump.
2005-11-23Update to 5.31:wiz2-8/+6
5.31 Mon Sep 5 00:52:42 MST 2005 - added standard tests for pod and pod-coverage checking - inserted subtest to check for failure when using unrecognized SHA algorithm 5.30 Sat Aug 20 16:46:08 MST 2005 - updated docs with recent NIST statement on SHA-1 -- advises use of larger and stronger hash functions (i.e. SHA-224/256/384/512) for new developments 5.29 Sun Aug 14 04:48:34 MST 2005 - added explicit casts in "shaload" routine (ref. "ldvals") -- thanks to E. Allen Smith for pointing out SGI compiler warnings on IPxx-irix platforms - updated docs with cautionary note about SHA-1
2005-11-23Update to 1.13:wiz2-6/+6
2005-10-18 Gisle Aas Release 1.13 Fixed documentation typo.
2005-11-22Depend on p5-Sort-Versions instead of p5-SortVersions.wiz1-3/+3
Bump PKGREVISION.
2005-11-22Update "ipsec-tools" package to version 0.6.3. Changes since 0.6.1:tron2-6/+6
- Various bug fixes - ISAKMP mode config works without Xauth This update fixes the security vulnerability reported in SA17668.
2005-11-21Update audit-packages to version 1.41agc2-4/+14
Fix PR 31957 - only report that we're using @PKG_SYSCONFDIR@/audit-packages.conf if we're in verbose mode.
2005-11-21Update fprot-workstation-bin to version 4.6.2. Changes include:ben4-50/+81
o A small bug was fixed in the check-updates.pl program where the updater wouldn't find the DEF files to update. o Bug in CHM mini-scanner which could lead to crashes was fixed o f-prot-milter wouldn't run on Solaris 10 because of library issues o Fixes an issue where the scanner would sometimes mis-identify .alr files as base64 coded executables o Fix where '-list' option to f-prot would not list the filenames of text-based archives, such as MIME containers. o Fix where certain executables would be mis-identified as UPX packed o Fix where UTF8 coded text files would not be scanned o Fix a crash issue when scanning .chm files containing strange header values o Updated error message when access is denied to files due to user permission problems o F-Prot 4.6.0 contains scanning engine version 3.16.7 which improves detection capabilities significantly and improves several scanning methods along with bugfixes.
2005-11-18Add and enable md4-collision and md5-collisionagc1-1/+3
2005-11-18Initial import of md4-collision-20051118, a program to calculate md4 collisions.agc4-0/+37
MD4 Collision Generation Faster implementation of techniques described in Cryptanalysis for Hash Functions MD4 and RIPEMD, by Xiaoyun Wang, et al. Average runtime on P4 1.6ghz - 5 seconds
2005-11-18Initial import of md5-collision-20051118, a program to calculate md5 collisions.agc4-0/+38
MD5 Collision Generation Faster implementation of techniques in How to Break MD5 and Other Hash Functions, by Xiaoyun Wang, et al. Old (Wang, et al.) average run time on IBM P690 supercomputer - 1 hour New average run time on P4 1.6ghz PC - 45 minutes
2005-11-17Update to 20050615:wiz5-84/+37
2005-06-15 04:10 nolan * src/serializers.cpp: readCBC wasn't allocating enough memory for the buffer when the string's length was a multiple of 8. This was fixed by adding one. 2005-06-15 03:32 nolan * src/serializers.cpp: Fixed a memory leak in readCBC 2005-02-07 18:04 nolan * src/: aboutdlg.ui, manualdlg.ui, newpassphrasedlg.ui, passphrasedlg.ui, preferencesdlg.ui, pwordeditdlg.ui, startupdlgbase.ui: Added accelerators 2004-12-09 01:51 nolan * release/Makefile: Removed signing from all 2004-12-09 01:49 nolan * src/safelistview.cpp: Root is no longer decorated 2004-12-09 01:48 nolan * images/help.png: Copied from Psi 2004-12-06 11:03 nolan * src/: mypasswordsafe.ui, mypasswordsafe.ui.h, safe.cpp, safelistview.cpp, safelistview.hpp: Added in place group renaming Safe emits changed() now MyPasswordSafe is connected to Safe::changed() Added savingEnabled() slot to MyPasswordSafe 2004-12-06 08:38 nolan * src/: mypasswordsafe.ui, safelistview.cpp: Added icon to passwords 2004-12-06 08:38 nolan * MyPasswordSafe.pro, images/configure.png, images/editcopy.png, images/editcopy_1.png, images/fetch_user.png, images/file_locked.png, images/folder_new.png: Added and redid some images 2004-12-06 08:14 nolan * Makefile, README: Updated README Increased minor version number 2004-12-06 08:07 nolan * src/crypto/: bfproxy.cpp, bfproxy.hpp, cryptointerface.hpp: Added copyright notice 2004-12-06 07:34 nolan * src/: safeserializer.cpp, serializers.cpp, serializers.hpp: Used #ifdef instead of #if 2004-12-06 07:32 nolan * MyPasswordSafe.pro, src/encryptedstring.cpp, src/encryptedstring.hpp, src/myutil.cpp, src/myutil.hpp, src/safe.cpp, src/safe.hpp, src/safeserializer.cpp, src/serializers.cpp, src/serializers.hpp, src/xmlserializer.cpp, src/crypto/bfproxy.cpp, src/crypto/bfproxy.hpp, src/crypto/blowfish.cpp, src/crypto/blowfish.h, src/crypto/cryptointerface.hpp, src/crypto/sha1.cpp, src/crypto/sha1.h, src/pwsafe/PW_BlowFish.cpp, src/pwsafe/PW_BlowFish.h, src/pwsafe/Util.cpp, test/bfproxytest.build, test/bfproxytest.cpp: Moved the serializers off of Password Safe's blowfish and sha1 code Created a proxy class for Blowfish Created two serializers for big endian machines to open the borked safes Made EncryptedString use a single encryption object 2004-12-06 01:16 nolan * src/startupdlgbase.ui: Changed the shadow and shape of banner 2004-12-06 01:14 nolan * release/Makefile: Added about_banner swapping Renamed 'upload' to 'release' All just compiles, no more uploading 2004-12-06 01:01 nolan * src/aboutdlg.ui: Added logo to license 2004-12-06 01:00 nolan * images/: about_banner.png, about_banner.src.png: Branded about logo Created an unbranded src logo 2004-11-30 16:26 nolan * images/edit_remove.png: Switched it to a minus sign again, but it's based off of the new plus sign 2004-11-29 22:35 nolan * uuid-1.0.0/: Makefile, config.status: [no log message] 2004-11-29 22:35 nolan * images/: button_ok.png, edit_add.png, edit_remove.png, fileclose.png: Copied better icons from Psi 2004-11-02 17:17 nolan * src/: mypasswordsafe.ui, mypasswordsafe.ui.h: Connected helpAbout 2004-11-02 17:17 nolan * MyPasswordSafe.pro: Removed some spaces 2004-11-02 16:51 nolan * images/: fileclose.png, lock.png: Added 2004-11-02 16:51 nolan * Makefile: Removed domainname 2004-11-02 16:37 nolan * src/safelistview.cpp: The username is copied to the clipboard on a drag 2004-11-02 16:28 nolan * Makefile: Inced version 2004-11-02 16:27 nolan * README: Added headers and -jN 2004-11-02 16:25 nolan * src/: aboutdlg.ui, aboutdlg.ui.h, main.cpp, mypasswordsafe.ui, mypasswordsafe.ui.h: The license gets displayed the first time MyPS is ran 2004-11-02 15:57 nolan * src/: main.cpp, mypasswordsafe.ui, mypasswordsafe.ui.h: Made locking hide the main window Locking no longer prompts on a change of virtual desktops 2004-11-02 01:38 nolan * src/mypasswordsafe.ui.h: [no log message] 2004-11-01 18:42 nolan * src/: mypasswordsafe.ui, mypasswordsafe.ui.h, startupdlgbase.ui, startupdlgbase.ui.h: The password widget gets focus after an action is selected Set the startup dialog's icon Changed a couple of the action items' text Default action sets the default safe 2004-11-01 18:23 nolan * MyPasswordSafe.pro, src/myendian.h, src/myutil.hpp, src/startupdlgbase.ui.h, src/crypto/blowfish.cpp, src/crypto/blowfish.h, src/crypto/sha1.cpp, src/crypto/sha1.h, src/pwsafe/PwsPlatform.h: Added new crypto 2004-11-01 16:54 nolan * MyPasswordSafe.pro, src/encryptedstring.cpp, src/encryptedstring.hpp, src/serializers.cpp, src/pwsafe/PW_BlowFish.cpp, src/pwsafe/PW_sha1.cpp, src/pwsafe/PW_sha1.h, src/pwsafe/Util.cpp, src/pwsafe/Util.h, src/pwsafe/sha1.cpp, src/pwsafe/sha1.h: Renamed sha1 Changed the #includes 2004-11-01 16:50 nolan * README: Removed Boost and added trademark and copyright info 2004-11-01 16:49 nolan * MyPasswordSafe.pro, README: [no log message] 2004-11-01 16:48 nolan * MyPasswordSafe.pro: Changed BlowFish to PW_BlowFish 2004-11-01 16:48 nolan * src/pwsafe/: BlowFish.cpp, BlowFish.h, PW_BlowFish.cpp, PW_BlowFish.h: Renamed 2004-11-01 16:44 nolan * COPYING: [no log message] 2004-11-01 16:34 nolan * src/: encryptedstring.cpp, encryptedstring.hpp, exception.hpp, main.cpp, mypasswordsafe.ui.h, myutil.cpp, myutil.hpp, newpassphrasedlg.ui.h, passphrasedlg.ui.h, plaintextlizer.cpp, plaintextlizer.hpp, preferencesdlg.ui.h, pwordeditdlg.ui.h, safe.cpp, safe.hpp, safedragobject.cpp, safedragobject.hpp, safelistview.cpp, safelistview.hpp, safeserializer.cpp, safeserializer.hpp, securedstring.cpp, securedstring.hpp, serializers.cpp, serializers.hpp, smartptr.cpp, smartptr.hpp, startupdlg.cpp, startupdlgbase.ui.h, uuid.cpp, uuid.hpp, xmlserializer.cpp, xmlserializer.hpp: Changed the header 2004-11-01 16:01 nolan * src/aboutdlg.ui: Changed license to GPL 2004-11-01 16:01 nolan * MyPasswordSafe.pro: [no log message] 2004-11-01 12:53 nolan * src/: mypasswordsafe.ui.h, passphrasedlg.ui.h, preferencesdlg.ui.h, pwordeditdlg.ui.h: Changed SGS to SG 2004-11-01 12:44 nolan * src/: encryptedstring.cpp, encryptedstring.hpp, main.cpp, plaintextlizer.cpp, safe.cpp, safe.hpp, safelistview.cpp, safeserializer.cpp, safeserializer.hpp, securedstring.cpp, securedstring.hpp, serializers.cpp, serializers.hpp, smartptr.cpp, smartptr.hpp, uuid.cpp, uuid.hpp, xmlserializer.hpp: Changed Semantic Gap Solutions to Semantic Gap (TM) 2004-11-01 12:39 nolan * src/: safe.cpp, safelistview.cpp, smartptr.cpp, smartptr.hpp: Replaced assert w/ Q_ASSERT Added headers to smartptr.?pp 2004-11-01 12:35 nolan * src/main.cpp: ifdefed out a print statement 2004-11-01 12:34 nolan * src/mypasswordsafe.ui.h: browseForSafe uses QFileDialog's static methods 2004-11-01 12:10 nolan * src/: aboutdlg.ui, manualdlg.ui, mypasswordsafe.ui, mypasswordsafe.ui.h, newpassphrasedlg.ui: Changed icons New safes won't ask to be saved when they're closed Changed MyPS's icon 2004-11-01 12:10 nolan * images/: button_cancel.png, button_ok.png, configure.png, contexthelp.png, edit.png, editcut.png, exit.png, fileopen.png, filesave.png, filesaveas.png, folder_new.png, help.png, redo.png, undo.png: Switched to 16x16 images 2004-11-01 12:09 nolan * MyPasswordSafe.pro: [no log message] 2004-10-31 07:32 nolan * src/pwsafe/: PwsPlatform.h, Util.h: Refactored the endian.h inclusion 2004-10-31 07:32 nolan * src/: mypasswordsafe.ui.h, safelistview.cpp: Changed the default column sizes 2004-10-31 01:38 nolan * src/: aboutdlg.ui, manualdlg.ui: Added a two contributors to credits Changed Semantic Gap (TM) Solutions to Semantic Gap (TM) 2004-10-31 01:22 nolan * release/Makefile: Added upload 2004-10-31 01:07 nolan * src/pwsafe/Util.h: Added endian.h for __APPLE__ 2004-10-30 09:41 nolan * MyPasswordSafe.pro, src/newpassphrasedlg.ui, src/passphrasedlg.ui, src/preferencesdlg.ui, src/pwordeditdlg.ui, src/startupdlgbase.ui: Added icons to buttons 2004-10-30 09:15 nolan * src/: passphrasedlg.ui, startupdlgbase.ui: Changed the dialog sizes 2004-10-30 08:58 nolan * images/keys.png: Readded 2004-10-30 08:58 nolan * MyPasswordSafe.pro, images/keys.png, src/passphrasedlg.ui, src/startupdlgbase.ui: Added keys Changed source files to use keys.png 2004-10-30 08:44 nolan * images/keys.png: new icon 2004-10-22 19:14 nolan * doc/sshots/mainwindow.jpg, src/serializers.cpp: Groupnames are converted from UTF8 2004-10-11 05:27 nolan * Makefile, src/pwsafe/PwsPlatform.h, src/pwsafe/Util.h: Applied contributed patches 2004-10-03 22:04 nolan * src/: mypasswordsafe.ui.h, safedragobject.cpp, safedragobject.hpp, safelistview.cpp, safelistview.hpp: Did some work so MyPS wouldn't segfault when dragging onto another app 2004-10-03 22:03 nolan * MyPasswordSafe.pro: Removed spaces added by Designer 2004-10-01 22:40 nolan * Makefile: Increased version number Added check for HOST 2004-10-01 22:26 nolan * src/: aboutdlg.ui, mypasswordsafe.ui, mypasswordsafe.ui.h, newpassphrasedlg.ui, passphrasedlg.ui, plaintextlizer.cpp, preferencesdlg.ui, pwordeditdlg.ui, safedragobject.cpp, safelistview.cpp, safelistview.hpp, safeserializer.cpp, xmlserializer.cpp, xmlserializer.hpp: Added some file headers Changed the button order on some dialogs Added drag and drop Finished XmlSerializer
2005-11-16regen.wiz1-45/+67
2005-11-16Improve usage. Add -K description.wiz1-4/+5
2005-11-16Various improvements:wiz1-25/+21
Describe -K. Improve -i description. Sort options in SYNOPSIS. Remove superfluous .Pp. Add EXIT STATUS section. Remove trailing whitespace. Bump date for new -i.
2005-11-16Add several new command line options so audit-packages can be used as part oferh3-19/+135
the improved ALLOW_VULNERABILITIES support. This now has the ability to: -p : Only check a single package -i : Provide a list of vulnerabilities to ignore -K : Specify an alternate pkg dbdir. Bump the version to 0.40.