summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2001-10-31Changelog for version 3.21, 2001.10.31, urgency: MEDIUM:martti3-15/+15
* Problem with errno and posix threads fixed. * It is assumed that system has getopt() if it has getopt.h header file. * SSL_CLIENT_DN and SSL_CLIENT_I_DN environment variables set in local mode (-l) process. This feature doesn't work if client mode (-c) or protocol negotiation (-n) is used. * Winsock error descriptions hardcoded (English version only). * SetConsoleCtrlHandler() used to handle CTRL+C, logoff and shutdown on Win32. * Stunnel always requests peer certificate with -v 0. * sysconf()/getrlimit() used to calculate number of clients allowed. * SSL mode changed for OpenSSL >= 0.9.6. * close-on-exec option used to avoid socket inheriting. * Buffer size increased from 8KB to 16KB. * fdscanf()/fdprintf() changes: - non-blocking socket support, - timeout after 1 minute of inactivity. * auth_user() redesigned to force 1 minute timeout. * Some source arrangement towards 4.x architecture. * No need for "goto" any more. * New Makefile "test" rule. It performs basic test of standalone/inetd, remote/local and server/client mode. * pop3 server mode support added.
2001-10-27Remove commented USE_LIBINTL definitions ... we already use thejlam1-2/+1
gettext-lib/buildlink.mk file.
2001-10-26upgrade to 20011026a. 20011016a had a serious bug in tunnel mode SAitojun2-6/+6
establishment.
2001-10-25Update pgpdump to 0.13jun2-5/+5
* Workaround for minus date. * No-libz hack. * Small fixes.
2001-10-22Make amavis conflict with amavis-perlmartti1-1/+3
2001-10-22Added amavis-perl-20010714martti1-1/+2
2001-10-22This is amavis-perl (a.k.a. amavisd), a virus scanning script written in perl.martti6-0/+222
The currently supported MTAs are exim, qmail, postfix, and sendmail. Please refer to the corresponding README.mta file for further documentation.
2001-10-22Backed out the update. I'll create a new package amavis-perl...martti6-91/+168
2001-10-22This is a new version taken from OpenBSD just before their next release.martti4-24/+67
Exact list of changes is unknown (you might take a look at OpenBSD's log entries at http://www.openbsd.org/cgi-bin/cvsweb/src/sbin/isakmpd/)
2001-10-22This version is a big change from the 0.2.x series of the software asmartti6-168/+91
the main virus scanning script has been rewritten in perl, replacing the original shell script. The currently supported MTAs are exim, qmail, postfix, and sendmail. Please refer to the corresponding README.mta file for further documentation.
2001-10-21Better defaults for which algorithms to support.wiz2-1/+24
Patch by Sen Nagata in pkg/14146.
2001-10-21Make PKGNAME dewey-correct. Addresses pkg/14243.wiz1-1/+2
2001-10-19Use @MKDIR@.veego2-10/+22
Generate ssh_host_rsa_key and use a newer syntax of ssh-keygen to create ssh_host_key and ssh_host_dsa_key.
2001-10-19Use @SSH_PID_DIR@.veego1-4/+8
Generate ssh_host_rsa_key and use a newer syntax of ssh-keygen to create ssh_host_key and ssh_host_dsa_key.
2001-10-19Create the pid file on solaris in /etc/ and not in the not existing /var/runveego1-1/+11
directory. Also change @SSH_PID_DIR@ and @MKDIR@ in sshd.sh and the INSTALL* files.
2001-10-19Update uvscan-dat to 4166 which contains updated and enhancedmartti2-5/+5
virus definition data.
2001-10-18SVR4 packages have a limit of 9 chars for a package name.veego24-24/+48
The automatic truncation in gensolpkg doesn't work for packages which have the same package name for the first 5-6 chars. e.g. amanda-server and amanda-client would be named amanda and amanda. Now, we add a SVR4_PKGNAME and use amacl for amanda-client and amase for amanda-server. All svr4 packages also have a vendor tag, so we have to reserve some chars for this tag, which is normaly 3 or 4 chars. Thats why we can only use 6 or 5 chars for SVR4_PKGNAME. I used 5 for all the packages, to give the vendor tag enough room. All p5-* packages and a few other packages have now a SVR4_PKGNAME.
2001-10-18Add conflict between "glimpse" and "openssl" package. They both installtron1-2/+3
"bin/cast" in "${LOCALBASE}".
2001-10-17correct version identification string.itojun1-2/+2
2001-10-17Link the openssl binary into the buildlink directory, too, since somejlam1-2/+3
packages look for it.
2001-10-17upgrade to 10/16 snapshot.itojun3-16/+7
- bugfixes in spd handling, scheduler leak. - make identity check more strict. - correct phase 2 proposal check.
2001-10-16Find Makefile.module in ../../www/php4.jlam1-2/+2
2001-10-16Note addition of php4-mcrypt.jlam1-1/+2
2001-10-16Update php4-mcrypt to the version from the php-4.0.6 distribution. Changesjlam3-0/+19
from version 4.0.5 include moving from the www category, and: - Fixed bug in the mcrypt extension that caused segfaults when using a key that is too large for the used algorithm, and a bug that caused mcrypt_generic() to segfault PHP (Derick)
2001-10-09Update mcrypt to 2.5.10. Changes from version 2.5.5 include:jlam3-20/+19
- Bug fixes - Updated magic file (for file(1) program) - Updated locales
2001-10-09Include libtool/buildlink.mk since libmcrypt.so is linked against libltdl.jlam1-1/+3
2001-10-09Update mhash to version 0.8.9. Changes from version 0.8.3 include:jlam3-7/+42
- Bug fixes - MD4 and MD5 now compile on big endian machines - TIGER now compiles on big endian machines. - Corrected Tiger implementation - Added MD4, TIGER128 and TIGER160 - added mhash_hmac_end_m() and mhash_end_m() functions which allow to specify the malloc function. - added mhash_cp() - Copy a context - added mhash_get_mhash_algo() - Returns the name of the algorithm of the context
2001-10-09Update libmcrypt to 2.4.17. Changes from version 2.4.7 include:jlam5-129/+107
- Bug fixes and memory leaks - Added new modes: nCFG - Due to an endianness handling problem Blowfish algorithm was not compatible with other implementations. Now it has been corrected. If you want to access the old algorithm used use the "blowfish-compat" module. - Corrected bug in rijndael-256. This makes the algorithm incompatible with previous versions.
2001-10-09Add buildlink.mk file for use by other package Makefiles.jlam1-0/+34
2001-10-07It is Size (krb4-1.0.9.tar.gz) and not Size (krb4-1.0.1.tar.gz).veego1-2/+2
Looks like the last commiter didn't use make makesum.
2001-10-04Apply patch from 14155 by Sen Nagata.wiz1-4/+4
2001-10-03Correct depends. Finally fixes PR/14137.mjl1-3/+3
2001-10-03more strict wildcard usage on dependshubertf1-4/+4
2001-10-03Be more careful about wildcards: -* => -[0-9]*hubertf5-38/+38
Noted in PR 14137 (p5-Crypt-DSA) and 14139 (p5-Crypt-RSA)
2001-10-02 p5-Convert-ASCII-Armor was checked in to textproc/mcr1-2/+2
2001-10-02 p5-Convert-PEM was checked in to textproc/mcr1-2/+2
2001-10-02Fix dep on MD5 by substituting Digest::MD5 and appropriate changes.mjl4-3/+42
Part of PR/14127 by Sen Nagata.
2001-10-02Shouldn't be here.wiz1-1/+0
2001-10-01Add 7 packages (hi Michael!), sort all.wiz1-3/+10
2001-10-01 pkg from sen_ml@eccosys.com in support of p5-Crypt-OpenPGPmcr4-0/+35
2001-10-01 pkg from sen_ml@eccosys.com in support of p5-Crypt-OpenPGPmcr4-0/+31
2001-10-01 pkg from sen_ml@eccosys.com in support of p5-Crypt-OpenPGPmcr8-0/+78
2001-10-01 pkg from sen_ml@eccosys.commcr5-0/+48
2001-09-30 pkg from sen_ml@eccosys.com in support of p5-Crypt-OpenPGPmcr8-0/+70
2001-09-27Mechanical changes to 375 files to change dependency patterns of the formjlam21-58/+58
foo-* to foo-[0-9]*. This is to cause the dependencies to match only the packages whose base package name is "foo", and not those named "foo-bar". A concrete example is p5-Net-* matching p5-Net-DNS as well as p5-Net. Also change dependency examples in Packages.txt to reflect this.
2001-09-27Update uvscan-dat to 4163. Changes are updated virus definitions and somerh3-10/+17
fixes to the update script: - correctly parse the new readme.txt files - be verbose only if -v option is given (for cron-lovers) - optional parameter to specify an alternate download location
2001-09-27Note addition of security/p5-IO-Socket-SSL.jlam1-1/+2
2001-09-27p5-IO-Socket-SSL - perl5 SSL socket interface classjlam4-0/+27
IO::Socket::SSL is a class implementing an object-oriented interface to SSL sockets. The class is a descendent of IO::Socket::INET and provides a subset of the base class's interface methods as well as SSL-specific methods. Provided in pkg/14036 by Sen Nagata <sen@eccosys.com>.
2001-09-27This package requires a relatively recent OpenSSL installation.jlam1-1/+3
2001-09-27Note addition of security/p5-Net-SSLeay.jlam1-1/+2