summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2011-05-31Add protection against ECDSA timing attacks as mentioned in the papertez3-3/+31
by Billy Bob Brumley and Nicola Tuveri, see: http://eprint.iacr.org/2011/232.pdf [Billy Bob Brumley and Nicola Tuveri] (patch confirmed in upstream cvs)
2011-05-28DESCR_SRC now contains full paths to DESCR filescheusov1-2/+2
2011-05-28add heirloom-su, oked by sponsorscheusov1-1/+2
2011-05-28heirloom partcheusov3-0/+21
2011-05-27Bump PKGREVISION for dependency removal.wiz1-2/+2
2011-05-27libgnome-keyring 2.32.0 does not depend on eggdbus anymore, according tohans2-4/+2
http://mail.gnome.org/archives/gnome-announce-list/2010-September/msg00101.html
2011-05-27Added support for new 2048 bit FINEID cards.kivinen4-3/+72
2011-05-26* LICENSE=gnu-gpl-v2 # or laterobache3-12/+15
* honor PKGMANDIR * add user-destdir installation support * use ${PERL5} as shebang, not /usr/bin/env. Bump PKGREVISION.
2011-05-25add patch from upstream to make network connections (to fetch CRLs)drochner3-3/+87
non-blocking. Blocking can be considered a DOS problem because other requests are not served in that time. (SA44680, no CVE entry) bump PKGREV
2011-05-20Changes 0.12:adam2-9/+8
* OpenSSL/crypto/x509.c: Add get_extension_count and get_extension to the X509 type, allowing read access to certificate extensions. * OpenSSL/crypto/x509ext.c: Add get_short_name and get_data to the X509Extension type, allowing read access to the contents of an extension. * OpenSSL/ssl/ssl.c: Expose a number of symbolic constants for values passed to the connection "info" callback. * OpenSSL/ssl/connection.py: Add support for new-style buffers (primarily memoryviews) to Connection.send and Connection.sendall.
2011-05-19make this build again on NetBSD-currentdrochner10-19/+150
2011-05-18update to 1.2.18drochner2-7/+6
change: fixes a serious crasher
2011-05-18this pkg only installs binaries -- no need to propagate librarydrochner1-6/+1
dependencies
2011-05-17Don't always try to create ecdsa key which depends on OpenSSL's version.taca2-4/+19
Bump PKGREVISION.
2011-05-16Maintenance of openssh pacakge:taca2-4/+21
1. Add support for check and create ECDSA host key for SSH protocol version 2. 2. Disable use of strnvis(3) on NetBSD. NetBSD current after 2011/03/12 has strnvis(3), but it has different argument from OpenBSD (and other system). Bump PKGREVISION.
2011-05-15Update security/ruby-net-ssh-gateway to version 1.1.0gls2-6/+6
Upstream changes: 1.1.0 / 30 Apr 2011 * Fix for sporadicly stalled SSH connections in Ruby 1.9 [Mat Trudel] * Decrease wait time within Net::SSH session loop [Grant Hutchins, Michael Schubert]
2011-05-15Update security/ruby-net-ssh to version 2.1.4.gls2-6/+6
Upstream changes: 2.1.4 / 3 Apr 2011 * Add ConnectionTimeout exception class. [Joel Watson] See: https://github.com/net-ssh/net-ssh-multi/pull/1 2.1.3 / 2 Mar 2011 * Call to transport.closed should be transport.close [Woon Jung] 2.1.2 / 1 Mar 2011 * Fix for Net::SSH Continues to attempt authentication when notified it is not allowed [Eric Hodel] (see: http://net-ssh.lighthouseapp.com/projects/36253-net-ssh/tickets/26) * Fix for transport won't be closed if authentication fails [Patrick Marchi] 2.1 / 19 Jan 2011 * Support "IdentitiesOnly" directive (LH-24) [Musy Bite, Edmund Haselwanter] * Speeding up the Loggable module (LH-23) [robbebob] 2.0.24 / 14 Jan 2011 * Fix for process code to correctly wait until remote_id is set before sending any output, including eof. [Daniel Pittman, Markus Roberts] * Fix circular require warning in Ruby 1.9.2 [Gavin Brock]
2011-05-15Finish move of tarsnap from security to sysutils.wiz5-47/+1
2011-05-15Update openssh package to 5.8.2 (5.8p2).taca2-7/+7
20110403 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] [contrib/suse/openssh.spec] Prepare for 5.8p2 release. - (djm) [version.h] crank version - Release 5.8p2 20110329 - (djm) [entropy.c] closefrom() before running ssh-rand-helper; leftover fds noticed by tmraz AT redhat.com 20110221 - (dtucker) [contrib/cygwin/ssh-host-config] From Corinna: revamp of the Cygwin-specific service installer script ssh-host-config. The actual functionality is the same, the revisited version is just more exact when it comes to check for problems which disallow to run certain aspects of the script. So, part of this script and the also rearranged service helper script library "csih" is to check if all the tools required to run the script are available on the system. The new script also is more thorough to inform the user why the script failed. Patch from vinschen at redhat com. 20110206 - (dtucker) [openbsd-compat/port-linux.c] Bug #1851: fix syntax error in selinux code. Patch from Leonardo Chiquitto - (dtucker) [contrib/cygwin/ssh-{host,user}-config] Add ECDSA key generation and simplify. Patch from Corinna Vinschen.
2011-05-12Fix building on systems, where ulong is not defined.adam2-3/+14
2011-05-10Remove the REPLACE_PYTHON. It pointed to unused "perl" file.reed1-2/+1
It is not needed since python is ran directly.
2011-05-07Update ruby-simple_oauth to 0.1.5.obache3-10/+11
* Rakefiles are executables, and rake loads rake, not rakefile code * Replace rcov with simplecov * Convert README to Markdown * Convert LICENSE to Markdown * Replace rdoc with yard * Add turn in development for more verbose test output * Trust the load path * Remove vestigial VERSION file * Add Travis configuration file * Bundle setup before running tests * Require rubygems * Add bundler as a development dependency * Apparently, Object#tap was added in 1.8.7, not 1.9 * Add jruby-openssl dependency * Add link to Travis CI * Remove vestigial rdoc options from gem specification * Bump version to 0.1.5
2011-05-06pass --libdir to ./configure to fix lib64 vs lib confusion on linuxalnsn1-1/+2
2011-05-05Fix buildling with Clangadam5-25/+22
2011-05-04SoftHSM 1.2.1 - 2011-05-03pettai3-22/+6
* Backport mutex handling from v2 for increased multithreaded performance. * Remove signature verification used for debugging purposes. (was enabled with ./configure --enable-sigver) * Added an index to the attribute table in the database. * Optimization of the database handling.
2011-05-03Update liboauth from 0.8.9 to 0.9.4.agc2-7/+6
Changes since previous version: version 0.9.4 - fixed possible memory corrution in oauth_curl_get thanks to Bruce Rosen for reporting this issue version 0.9.3 - yet more build-system fixes: - allow to override HASH_LIBS and CURL_LIBS using envoronment variables - include them in .pc and tests/Makefile.am version 0.9.2 - fixed typo in build-system (LDFLAGS, -Wl,--as-needed detection) version 0.9.1 - fixed typo in API: oauth_time_indepenent_equals[_n] is now deprecated in favor of oauth_time_independent_equals[_n] - added check for 'Wl,--as-needed' linker flag. version 0.9.0 - fixed typo in pkg-config file. With thanks to Brad Harder for the nudge.
2011-05-02Fix building with Clangadam2-1/+17
2011-05-02Add a patch for lack of posix standard AF_LOCAL, fall back to AF_UNIX.obache2-1/+19
for PR#44924.
2011-05-01Add archivers and sysutils to CATEGORIES, per gdt.wiz1-2/+2
2011-04-30+ tarsnap.wiz1-1/+2
2011-04-30Initial import of tarsnap-1.0.29:wiz4-0/+45
Tarsnap is a secure online backup service for BSD, Linux, OS X, Solaris, Cygwin, and can probably be compiled on many other UNIX-like operating systems. The Tarsnap client code provides a flexible and powerful command-line interface which can be used directly or via shell scripts.
2011-04-29More replace interpreter.taca1-2/+2
2011-04-28Changes 1.08:adam4-18/+16
* Do not attempt to logout if uninitialized. * Use OpenSSL engine's rsa_priv_enc instead of rsa_sign. Changes 1.07: * Minor Win64 fixup.
2011-04-27"pkg-config --cflags gnutls" failed with:tnn3-2/+24
Package zlib was not found in the pkg-config search path. ... there is no zlib.pc, so comment out the part of the configure script that adds that to the pkg-config file. Bump PKGREVISION.
2011-04-27need to buildlink with security/nettle.obache1-1/+2
fixes PR#44909.
2011-04-26Changes 2.12.3:adam9-192/+118
* libgnutls: Several minor bugfixes. * libgnutls: Restored HMAC-MD5 for compatibility. Although considered weak, several sites require it for connection. It is enabled for "NORMAL" and "PERFORMANCE" priority strings. * libgnutls: depend on libdl. * libgnutls: gnutls_transport_set_global_errno() was deprecated. Use your system's errno fascility or gnutls_transport_set_errno(). * gnutls-cli: Correction with usage of select to check for pending data in gnutls sessions. It now uses gnutls_record_check_pending(). * tests: More fixes and updates for win32. Patches by LRN. * libgnutls: Several files unnecessarily included <gcrypt.h>; this has been fixed. ** API and ABI modifications: gnutls_transport_set_global_errno: DEPRECATED Changes 2.12.2: * libgnutls: Several updates and fixes for win32. Patches by LRN. * libgnutls: Several bug and memory leak fixes. * srptool: Accepts the -d option to enable debugging. * libgnutls: Corrected bug in gnutls_srp_verifier() that prevented the allocation of a verifier. Reported by Andrew Wiseman. Changes 2.12.1: * certtool: Generated certificate request with stricter permissions. * libgnutls: Bug fixes in opencdk code. Reported by Vitaly Kruglikov. * libgnutls: Corrected windows system_errno() function prototype. * libgnutls: C++ compatibility fix for compat.h. Reported by Mark Brand. * libgnutls: Fix size of gnutls_openpgp_keyid_t by using the GNUTLS_OPENPGP_KEYID_SIZE definition. Reported by Andreas Metzler.
2011-04-26buildlink3.mk depends on gmp, even when includes are needed; use MAJOR/MINOR ↵adam3-9/+13
for linking libraries
2011-04-26Actually, prefer gm4adam1-2/+2
2011-04-26Added security/nettle version 2.1adam1-1/+2
2011-04-26Nettle is a cryptographic library that is designed to fit easily in moreadam9-0/+260
or less any context: In crypto toolkits for object-oriented languages (C++, Python, Pike, ...), in applications like LSH or GNUPG, or even in kernel space. In most contexts, you need more than the basic cryptographic algorithms, you also need some way to keep track of available algorithms, their properties and variants. You often have some algorithm selection process, often dictated by a protocol you want to implement. And as the requirements of applications differ in subtle and not so subtle ways, an API that fits one application well can be a pain to use in a different context. And that is why there are so many different cryptographic libraries around. Nettle tries to avoid this problem by doing one thing, the low-level crypto stuff, and providing a simple but general interface to it. In particular, Nettle doesn't do algorithm selection. It doesn't do memory allocation. It doesn't do any I/O. The idea is that one can build several application and context specific interfaces on top of Nettle, and share the code, test cases, benchmarks, documentation, etc. Examples are the Nettle module for the Pike language, and LSH, which both use an object-oriented abstraction on top of the library.
2011-04-23Make sure <langinfo.h> actually provides CODESET before using it,hauke2-1/+18
for the sake of old NetBSD releases.
2011-04-22recursive bump from gettext-lib shlib bump.obache5-8/+10
2011-04-22recursive bump from gettext-lib shlib bump.obache104-174/+209
2011-04-18note "used by..." commentsobache1-1/+4
2011-04-15Dependency doesn't support Python 2.4joerg1-1/+2
2011-04-14fix MITKRB5-SA-2011-004 (CVE-2011-0285) DOS in kadmindtez2-4/+7
2011-04-14+py-keyringdrochner1-1/+2
2011-04-14add py-keyring-0.5.1, from Kamel Derouiche per pkgsrc-wipdrochner4-0/+63
2011-04-13update to 2.32.1drochner7-77/+107
This switches to the gnome-2.32 release branch.
2011-04-13Bump PKGREVISION for abs' PLIST fix.wiz1-3/+4
While here, set COMMENT (!) and HOMEPAGE.
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-01 23:22:31 +0000