Commit graph

2034 commits

Author SHA1 Message Date
Tijl Coosemans
b7887f3ffd Update Belgian eID middleware to 4.4.5. Enable the viewer application
and the Firefox extension.  Rename the port from security/libbeid to
security/beid now that it's more than just a library.
2018-08-12 14:02:45 +00:00
Yuri Victorovich
2525f234bd New port: security/vanguards-tor: Tor add-on to protect against guard discovery and related attacks
Reported by:	Tor upstream notification
2018-08-08 23:47:31 +00:00
Mathieu Arnold
c65d3bebfd Regular sorting of categories Makefiles.
Sponsored by:	Absolight
2018-08-08 12:26:27 +00:00
Palle Girgensohn
a42dc34f6b Update Shibboleth to 3.0.2
Also update the toolchain to latest versions. This includes a security fix for
apache-xml-security-c.

Releaseinfo:    https://wiki.shibboleth.net/confluence/display/SP3/ReleaseNotes
Security:       5786185a-9a43-11e8-b34b-6cc21735f730
Security:       https://shibboleth.net/community/advisories/secadv_20180803.txt
2018-08-07 13:24:36 +00:00
Matthias Fechner
a067a9851e Delete security/rubygem-omniauth-shibboleth12, obsolete by gitlab-ce 11.1 update. 2018-08-04 15:05:34 +00:00
Danilo Egea Gondolfo
0dafa5a0db - New port: security/aws-iam-authenticator
A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster.
2018-08-03 17:13:49 +00:00
Matthias Fechner
03022a0252 Copied port security/rubygem-doorkeeper and fix it to version 4.3.x which is required by gitlab.
PR:		230306
Approved by:	mentors (implicit)
2018-08-03 15:48:55 +00:00
Rene Ladan
57f28ffd24 Remove expired ports:
2018-07-31 databases/rubygem-redis-namespace15: Obsoleted by update of www/gitlab-ce. Please use databases/rubygem-redis-namespace instead.
2018-08-01 security/py-python-social-auth: Upstream Deprecated
2018-08-01 www/py-django-social-auth: no support for new django
2018-08-02 12:12:40 +00:00
Rene Ladan
3f09c8cde1 Remove expired ports:
2018-07-31 net/rubygem-gitaly-proto096: Obsoleted by update of www/gitlab-ce. Please use net/rubygem-gitaly-proto instead.
2018-07-31 security/tripwire12: unfetchable
2018-07-31 security/rubygem-rbnacl4: Obsoleted by update of www/gitlab-ce. Please use security/rubygem-rbnacl instead.
2018-07-31 www/rubygem-gon61: Obsoleted by update of www/gitlab-ce. Please use www/rubygem-gon instead.
2018-07-31 databases/pgpool-II-33: Will be deprecated by upstream, please switch to newer pgpool versions
2018-07-31 devel/rubygem-grape-entity060: Obsoleted by update of www/gitlab-ce. Please use devel/rubygem-grape-entity instead.
2018-07-31 net/rubygem-gitaly-proto099: Obsoleted by update of www/gitlab-ce. Please use net/rubygem-gitaly-proto instead.
2018-07-31 net/rubygem-gitaly-proto095: Obsoleted by update of www/gitlab-ce. Please use net/rubygem-gitaly-proto instead.
2018-07-31 net/rubygem-omniauth-github11: Obsoleted by update of www/gitlab-ce. Please use net/rubygem-omniauth-github instead.
2018-07-31 net/rubygem-asset_sync220: Obsoleted by update of www/gitlab-ce. Please use net/rubygem-asset_sync instead.
2018-07-31 www/rubygem-gollum-lib-gitlab: Obsoleted by update of www/gitlab-ce. Please use www/rubygem-gitlab-gollum-lib instead.
2018-08-01 www/py-django-threaded-multihost: Project development unmaintained
2018-08-01 www/py-django-keyedcache: Project development abandoned
2018-08-01 www/py-django-signals-ahoy: Project development unmaintained
2018-08-02 11:54:36 +00:00
Kurt Jaeger
41c545cf12 New port: security/kc24
Console based password storing application using an encrypted XML
document as its database.

WWW: https://github.com/levaidaniel/kc

Please read the UPDATING note!

PR:		222376
Submitted by:	Vidar Karlsen <vidar@karlsen.tech>, Daniel <leva@ecentrum.hu> (maintainer and upstream-author)
Relnotes:	35656e47a3/Changelog
2018-07-28 10:41:55 +00:00
Martin Wilke
0c52343153 This is the OVH DNS Authenticator plugin for Certbot.
WWW: https://github.com/certbot/certbot

PR:		229746
Submitted by:	tremere@cainites.net
Sponsored by:	iXsystems Inc.
2018-07-28 02:54:19 +00:00
Martin Wilke
4c1d4a4909 This is the Sakura Cloud DNS Authenticator plugin for Certbot.
WWW: https://github.com/certbot/certbot

PR:		229746
Submitted by:	tremere@cainites.net
Sponsored by:	iXsystems Inc.
2018-07-28 02:53:30 +00:00
Martin Wilke
c6e9689ec1 This is the Gehirn Infrastructure Service DNS Authenticator plugin for Certbot.
WWW: https://github.com/certbot/certbot

PR:		229746
Submitted by:	tremere@cainites.net
Sponsored by:	iXsystems Inc.
2018-07-28 02:52:54 +00:00
Martin Wilke
3cee8bca71 This is the Linode DNS Authenticator plugin for Certbot.
WWW: https://github.com/certbot/certbot

PR:		229746
Submitted by:	tremere@cainites.net
Sponsored by:	iXsystems Inc.
2018-07-28 02:51:53 +00:00
Dan Langille
7b0f696caa A JOSE implementation in Python
The JavaScript Object Signing and Encryption (JOSE) technologies - JSON Web
Signature (JWS), JSON Web Encryption (JWE), JSON Web Key (JWK), and JSON Web
Algorithms (JWA) - collectively can be used to encrypt and/or sign content
using a variety of algorithms. While the full set of permutations is extremely
large, and might be daunting to some, it is expected that most applications
will only use a small set of algorithms to meet their needs.
2018-07-26 16:51:18 +00:00
Yuri Victorovich
c675e5cb45 New port: security/klee: Symbolic virtual machine built on top of the LLVM
PR:		219150
Submitted by:	larca <itbot@list.ru>
2018-07-23 03:19:26 +00:00
Renato Botelho
bdc3a0ce30 New port: security/py-fteproxy
fteproxy provides transport-layer protection to resist keyword filtering,
censorship and discriminatory routing policies.

Its job is to relay datastreams, such as web browsing traffic,
by encoding streams as messages that match a user-specified regular expression.

WWW: https://fteproxy.org/

Submitted by:	Vinícius Zavam <egypcio@googlemail.com>
Differential Revision:	https://reviews.freebsd.org/D16244
2018-07-13 13:26:54 +00:00
Rene Ladan
17e2146aa1 Remove expired ports:
2018-06-30 net/rubygem-omniauth-twitter12: Obsoleted by update of www/gitlab. Please use net/rubygem-omniauth-twitter instead.
2018-06-30 net/rubygem-gitaly-proto088: Obsoleted by update of www/gitlab. Please use net/rubygem-gitaly-proto instead.
2018-06-30 net/rubygem-octokit46: Obsoleted by update of www/gitlab. Please use net/rubygem-octokit instead.
2018-06-30 net/rubygem-fog-google0: Obsoleted by update of www/gitlab. Please use net/rubygem-fog-google instead.
2018-06-30 net/rubygem-fog-aws1: Obsoleted by update of www/gitlab. Please use net/rubygem-fog-aws instead.
2018-06-30 textproc/rubygem-asciidoctor-plantuml007: Obsoleted by update of www/gitlab. Please use textproc/rubygem-asciidoctor-plantuml instead.
2018-03-19 graphics/mitsuba: Broken for more than 6 months
2018-05-31 mail/p5-Net-SMTP-SSL: Deprecated by upstream, use Net::SMTP instead
2018-06-30 www/rubygem-kubeclient22: Obsoleted by update of www/gitlab. Please use www/rubygem-kubeclient instead.
2018-06-30 security/rubygem-doorkeeper42: Obsoleted by update of www/gitlab. Please use security/rubygem-doorkeeper instead.
2018-06-30 security/rubygem-net-ssh41: Obsoleted by update of www/gitlab. Please use security/rubygem-net-ssh instead.
2018-06-30 security/rubygem-omniauth-saml17: Obsoleted by update of www/gitlab. Please use security/rubygem-omniauth-saml instead.
2018-06-30 security/rubygem-doorkeeper-openid_connect12: Obsoleted by update of www/gitlab. Please use security/rubygem-doorkeeper-openid_connect instead.
2018-06-30 security/rubygem-attr_encrypted30: Obsoleted by update of www/gitlab. Please use security/rubygem-attr_encrypted instead.
2018-06-30 security/rubygem-omniauth14: Obsoleted by update of www/gitlab. Please use security/rubygem-omniauth instead.
2018-06-30 devel/rubygem-flipper011: Obsoleted by update of www/gitlab. Please use devel/rubygem-flipper instead.
2018-06-30 devel/rubygem-ruby-prof016: Obsoleted by update of www/gitlab. Please use devel/rubygem-ruby-prof instead.
2018-06-30 devel/rubygem-recursive-open-struct10: Obsoleted by update of www/rubygem-kubeclient. Please use devel/rubygem-recursive-open-struct instead
2018-06-30 devel/rubygem-flipper-active_support_cache_store011: Obsoleted by update of www/gitlab. Please use devel/rubygem-flipper-active_support_cache_store instead.
2018-06-30 devel/rubygem-gettext_i18n_rails_js12: Obsoleted by update of www/gitlab. Please use devel/rubygem-gettext_i18n_rails_js instead.
2018-02-02 devel/phpunit: No longer maintained upstream
2018-06-30 devel/rubygem-recursive-open-struct100: Obsoleted by update of www/gitlab. Please use devel/rubygem-recursive-open-struct instead.
2018-06-30 databases/rubygem-flipper-active_record011: Obsoleted by update of www/gitlab. Please use databases/rubygem-flipper-active_record instead.
2018-06-06 databases/mongodb34-rocks: Broken for more than 6 months
2018-07-01 math/freemat: Complex, unmaintained software with obsolete dependencies
2018-07-03 15:20:13 +00:00
Martin Wilke
b78a2a5941 Python-GSSAPI provides both low-level and high level wrappers around
the GSSAPI C libraries. While it focuses on the Kerberos mechanism, it
should also be usable with other GSSAPI mechanisms.

WWW: https://github.com/pythongssapi/python-gssapi

PR:		228523
Submitted by:	john@saltant.com
2018-06-20 01:38:58 +00:00
Yuri Victorovich
2a36d47d3b New port: security/py-pycryptodomex: Slave port of security/py-pycryptodome
It installs the same package as security/py-pycryptodome but in a different
name space, Cryptodome instead of Crypto, and therefore can be installed
together with security/py-pycrypto if desired.

PR:		225217
Submitted by:	John W. O'Brien <john@saltant.com>
2018-06-17 01:33:49 +00:00
William Grzybowski
42a966f541 security/py-fido2
Provides library functionality for communicating with a FIDO device over USB
as well as verifying attestation and assertion signatures.

WWW: https://github.com/Yubico/python-fido2
2018-06-15 12:21:31 +00:00
Antoine Brodin
4f703a397f New port: security/py-certstream
Certstream-python is a library for interacting with the certstream network to
monitor an aggregated feed from a collection of Certificate Transparency Lists.

WWW: https://github.com/CaliDog/certstream-python
2018-06-13 11:14:11 +00:00
Sunpoet Po-Chuan Hsieh
ac40912803 Add rubygem-net-ssh4 4.2.0 (copied from rubygem-net-ssh)
- Add PORTSCOUT
2018-06-02 22:25:32 +00:00
Sunpoet Po-Chuan Hsieh
8fbf65d618 Add rubygem-ed25519 1.2.4
ed25519.rb is a Ruby binding to the Ed25519 elliptic curve public-key signature
system described in RFC 8032.

Two implementations are provided: a MRI C extension which uses the "ref10"
implementation from the SUPERCOP benchmark suite, and a pure Java version based
on str4d/ed25519-java.

Ed25519 is one of two notable algorithms implemented atop the Curve25519
elliptic curve. The x25519 gem is a related project of this one, and implements
the X25519 Diffie-Hellman key exchange algorithm on the Montgomery form of
Curve25519.

WWW: https://github.com/crypto-rb/ed25519
2018-06-02 22:24:47 +00:00
Tobias C. Berner
fff1aa535b Update lang/ghc 8.4.2 and the hs-* ports the newer versions
* Update lang/ghc to 8.4.2
* Update the boostrap compiler to 8.4.1
* Update the many hs-* ports
* Bump the rest

Thanks a lot to arrowd for doing all the heavy lifting :)

PR:		227968
Exp-run by:	antoine
Submitted by:	arrowd
Differential Revision:	https://reviews.freebsd.org/D15005
2018-05-25 21:44:12 +00:00
Antoine Brodin
9e4b89019e New port: security/py-rekall_lib
Support libraries for the Rekall framework.

WWW: http://www.rekall-forensic.com/
2018-05-24 17:20:22 +00:00
Martin Wilke
c737c8bcd8 Flask-SAML is an extension for the Flask web application micro framework
that implements Security Association Markup Language (SAML) authentication.

WWW: https://bitbucket.org/asecurityteam/flask_saml

PR:		225202
Submitted by:	John W. O'Brien <john@saltant.com>
Sponsored by:	iXsystems Inc.
2018-05-20 18:06:16 +00:00
Koichiro Iwao
a8dc76510c net-im/rubygem-earthquake: Remove port
This port has been broken for years and no longer maintained by upstream.

Also, remove security/rubygem-jugyo_twtter_oauth. It is a fork of
twitter_oauth[1] and required only by net-im/rubygem-earthquake.

[1] https://rubygems.org/gems/twitter_oauth

Approved by:	hrs (mentor)
Differential Revision:	https://reviews.freebsd.org/D15441
2018-05-15 08:39:39 +00:00
Martin Wilke
1e39bd615f GSSAPI Negotiate HTTP authentication for Flask routes.
WWW: https://github.com/mkomitee/flask-kerberos

PR:		225199
Submitted by:	John W. O'Brien <john@saltant.com>
Sponsored by:	iXsystems Inc.
2018-05-14 15:59:03 +00:00
Antoine Brodin
4e8119bc42 - pywinrm is named pywinrm, not winrm
- pywinrm is not python3 ready

Reported by:	pkg-fallout
2018-05-11 20:49:56 +00:00
Kurt Jaeger
8a5315bde2 New port: security/py-winrm
Python library for Windows Remote Management (WinRM)

WWW: https://github.com/diyan/pywinrm

PR:		226450
Submitted by:	rozhuk.im@gmail.com
2018-05-11 18:55:38 +00:00
Kurt Jaeger
d26d2e35fd New port: security/py-requests-credssp
An authentication handler for using CredSSP with Python Requests.

WWW: https://github.com/jborean93/requests-credssp

PR:		226448
Submitted by:	rozhuk.im@gmail.com
2018-05-11 18:32:15 +00:00
Kurt Jaeger
95326bc646 New port: security/p5-Crypt-Perl
Cryptography in pure perl, needs no non-core XS dependencies.

WWW: http://search.cpan.org/dist/Crypt-Perl/
2018-05-11 12:38:52 +00:00
Kurt Jaeger
46d2484139 New port: security/p5-Bytes-Random-Secure-Tiny
A tiny Perl extension to generate cryptographically-secure random bytes.

It provides random bytes from a cryptographically secure random
number generator (ISAAC), seeded from strong entropy sources on a
wide variety of platforms. It does so without external dependencies
(except on Windows), and has a minimal but useful user interface
patterned after the module Bytes::Random::Secure.

WWW: http://search.cpan.org/dist/Bytes-Random-Secure-Tiny/
2018-05-11 10:57:38 +00:00
Kurt Jaeger
fd766124b3 New port: security/p5-Crypt-X509-CRL
Crypt::X509::CRL is an object oriented X.509 certificate
revocation list parser with numerous methods for directly
extracting information from certificate revocation lists

WWW: http://search.cpan.org/dist/Crypt-X509-CRL/

PR:		228074
Submitted by:	Sergei Vyshenski <svysh.fbsd@gmail.com>
2018-05-09 20:20:21 +00:00
Yuri Victorovich
bb61ffd5e5 New port: openvpn-auth-script/Makefile: Generic script-based deferred auth plugin for OpenVPN
PR:		226492
Submitted by:	Phil DeMonaco <pdemon@gmail.com>
2018-05-06 06:24:17 +00:00
Rene Ladan
4524f8ef76 Remove expired ports:
2018-04-30 databases/rubygem-seed-fu236: Obsoleted by update of www/gitlab. Please use databases/rubygem-seed-fu
2018-04-30 security/polarssl13: has reached end of life
2018-05-01 19:06:09 +00:00
Kirill Ponomarev
3fe6015283 gopass is a rewrite of the pass password manager in Go with the aim
of making it cross-platform and adding additional features.

PR:		227845
Submitted by:	Sascha Holzleiter <sascha@root-login.org>
2018-05-01 17:15:42 +00:00
Tobias C. Berner
ef944cd353 Import the KDE Plasma5 ports
This is an import of the Plasma5 ports that we have had in the development
repository for quite some time now.

Please note:
 * Plasma5 cannot be installed at the same time as KDE SC4.
 * Qt5 assumes /etc/localtime to be a symlink to a tz file, not a regular file.
 * To start plasma5, it is recommended to use something like
       exec ck-launch-session startkde
 * Powermanagement and such is not working :-)

I would like to thank all the people that have helped test it in the past years.

Reviewed by:	adridg
Differential Revision:	https://reviews.freebsd.org/D15096
2018-04-27 20:29:36 +00:00
Sean Chittenden
1dacbd7b18 Add new port: security/teleport
Gravitational Teleport ("Teleport") is a modern SSH server for remotely
accessing clusters of FreeBSD or Linux servers via SSH or HTTPS. It is
intended to be used instead of sshd. Teleport enables teams to easily
adopt the best SSH practices like:

- Integrated SSH credentials with your organization Google Apps identities or
  other OAuth identitiy providers.
- Teleport uses certificate-based access with automatic expiration time
- Enforcement of 2nd factor authentication
- Cluster introspection: every Teleport node becomes a part of a cluster
  and is visible on the Web UI
- Record and replay SSH sessions for knowledge sharing and auditing purposes
- Collaboratively troubleshoot issues through session sharing
- Connect to clusters located behind firewalls without direct Internet
  access via SSH bastions

Teleport is built on top of the high-quality Golang SSH implementation
and it is compatible with OpenSSH.

Initially submitted by:	staticwizard@hotmail.com in ports/219332

PR:		ports/219332
Approved by:	swills (mentor)
Reviewed by:	yuri, swills, pi
Differential Revision:	https://reviews.freebsd.org/D14576
2018-04-26 17:32:28 +00:00
Sunpoet Po-Chuan Hsieh
964ea15958 Add p5-Crypt-OpenSSL-Guess 0.01
Crypt::OpenSSL::Guess provides helpers to guess OpenSSL include path on any
platforms.

Often MacOS's homebrew OpenSSL cause a problem on installation due to include
path is not added. Some CPAN module provides to modify include path with
configure-args, but Carton or Module::CPANfile is not supported to pass
configure-args to each modules. Crypt::OpenSSL::* modules should use it on your
Makefile.PL.

This module resolves the include path by Net::SSLeay's workaround. Original code
is taken from inc/Module/Install/PRIVATE/Net/SSLeay.pm by Net::SSLeay.

WWW: http://search.cpan.org/dist/Crypt-OpenSSL-Guess/
2018-04-14 23:58:13 +00:00
Jan Beich
b1b02c73fb security/py-zxcvbn-python: update to 4.4.25 and rename
Changes:	https://github.com/dwolfhub/zxcvbn-python/compare/v4.4.23...v4.4.25
2018-04-13 20:56:28 +00:00
Tobias C. Berner
45db092d75 New ports: security/kgpg, security/kleopatra, security/kwalletmanager
This is the current version of KDE Applications <foo>.
Note that users of KDE SC4 should stick with <foo>-kde4.
2018-04-10 19:39:14 +00:00
Tobias C. Berner
39fa5f95a7 New ports: KDE Applications net/ and dependencies
* deskutils/grantleetheme
* deskutils/kdepim
* deskutils/kdepim-apps-libs
* deskutils/libkdepim
* net/akonadi-calendar
* net/akonadi-contacts
* net/akonadi-mime
* net/akonadi-notes
* net/akonadi-search
* net/calendarsupport
* net/eventviews
* net/incidenceeditor
* net/kalarmcal
* net/kblog
* net/kcalcore
* net/kcalutils
* net/kcontacts
* net/kdav
* net/kdenetwork-filesharing
* net/kget
* net/kidentitymanagement
* net/kimap
* net/kldap
* net/kmailtransport
* net/kmbox
* net/kmime
* net/kontactinterface
* net/kpimtextedit
* net/krdc
* net/krfb
* net/ksmtp
* net/ktnef
* net/libgravatar
* net/libkgapi
* net/libksieve
* net/mailcommon
* net/mailimporter
* net/messagelib
* net/pimcommon
* net/zeroconf-ioslave
* security/libkleo

This is the current version of KDE Applications <foo>.
Note that users of KDE SC4 should stick with <foo>-kde4.

This adds a slew of KDE Pim related ports and some of their dependencies.
Note, that KDE Pim has a history of working poorly on FreeBSD.
2018-04-10 19:09:05 +00:00
Sunpoet Po-Chuan Hsieh
d810c2cdf6 Add rubygem-omniauth-jwt 0.0.2
JSON Web Token (JWT) is a simple way to send verified information between two
parties online. This can be useful as a mechanism for providing Single Sign-On
(SSO) to an application by allowing an authentication server to send a validated
claim and log the user in. This is how Zendesk does SSO, for example.

OmniAuth::JWT provides a clean, simple wrapper on top of JWT so that you can
easily implement this kind of SSO either between your own applications or allow
third parties to delegate authentication.

WWW: https://github.com/mbleigh/omniauth-jwt
2018-04-08 18:29:21 +00:00
Yuri Victorovich
77f0ad5b32 New port: security/py-netmiko: Multi-vendor library to simplify SSH connections to network devices
PR:		227088
Submitted by:	Kai <freebsd_ports@k-worx.org>
2018-04-05 04:52:49 +00:00
Yuri Victorovich
3476a93d19 New port: security/py-scp: Scp module for paramiko
PR:		224423
Submitted by:	Sergey Akhmatov <sergey@akhmatov.ru>
2018-04-05 03:32:06 +00:00
Matthias Andree
7ed8c3e354 Reinstate support for GTK2 (rather than GTK3) as an OPTION.
While here, add a putty-gtk2 slave port and update _CONFLICTS.

Since the default package does not change, and pkg would handle conflicts
around attempted installation of the new -gtk2 package, omit the
PORTREVISION bump from Miroslav's original patch.

PR:		227200
Submitted by:	Miroslav Lachman
2018-04-02 21:29:16 +00:00
Kurt Jaeger
6037d37956 security/owasp-dependency-check: add missing security/Makefile entry
PR:		226206
Reported by:	antoine
2018-04-01 15:13:48 +00:00
Sunpoet Po-Chuan Hsieh
b06fa828fa Remove expired security/rubygem-rpam2-3 2018-03-31 15:38:02 +00:00
Mark Felder
acf68e36e0 kr enables SSH to authenticate with a key stored in a Krypton (iOS or
Android) mobile app. kr runs as an SSH agent, called krd. When a Krypton
private key operation is needed for authentication, krd routes this
request to the paired mobile phone, where the user decides whether to
allow the operation or not. The private key never leaves the phone.

WWW: https://krypt.co
2018-03-30 14:19:23 +00:00
Danilo G. Baio
9c8f68ff16 Add security/setaudit: Tool to specify audit configurations on a process
With setaudit it is possible to specify audit configurations on a process
directly at the runtime.

All audit events are redirected to the auditd(8), an audit log management
daemon.

Example of enabling all exe related audit events performed by a command and its
child processes:

  # setaudit -m ex command

WWW: https://github.com/csjayp/setaudit

PR:		226627
Submitted by:	Mateusz Piotrowski <0mp@FreeBSD.org>
2018-03-27 23:20:33 +00:00
Torsten Zuehlsdorff
18499b68ec Resurrect security/rubygem-doorkeeper as security/rubygem-doorkeeper42
www/gitlab depends on the 4.2.x version and is currently broken without it
2018-03-27 08:57:47 +00:00
Matthias Fechner
3d94199ffd New ports required for gitlab update to 10.5.x.
Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D14840
2018-03-26 15:10:49 +00:00
Joseph Mingrone
1e3425ba87 Copy security/rubygem-rpam2 to security/rubygem-rpam2-3 to fix
security/rubygem-devise_pam_authenticatable2 build breakage

The only port requiring security/rubygem-rpam2,
security/rubygem-devise_pam_authenticatable2, requires rpam2 ~> 3.0 [1].
The prematre update of security/rubygem-rpam2 to version 4.0.0 broke the
build of security/rubygem-devise_pam_authenticatable2 [2].

[1] https://rubygems.org/gems/devise_pam_authenticatable2/versions/9.0.0
[2] http://pkg.awarnach.mathstat.dal.ca/data/11amd64-default/2018-03-22_12h03m21s/logs/errors/rubygem-devise_pam_authenticatable2-9.0.0.log

Pointy-hat: sunpoet
2018-03-22 15:18:36 +00:00
Baptiste Daroussin
3fbc9ca4dc Python library and command line tool for configuring any YubiKey over all USB
transports.

WWW: https://developers.yubico.com/yubikey-manager/
2018-03-13 13:13:27 +00:00
Joseph Mingrone
15a0ee75ee Add new Ruby Gem dependency ports for upcoming Mastodon v2.3.1
multimedia/rubygem-streamio-ffmpeg
WWW: http://github.com/streamio/streamio-ffmpeg

security/rubygem-devise_pam_authenticatable2
WWW: http://github.com/devkral/devise_pam_authenticatable2

security/rubygem-omniauth-cas
WWW: https://github.com/dlindahl/omniauth-cas

security/rubygem-rpam2
WWW: http://github.com/devkral/rpam2
2018-03-13 00:57:09 +00:00
Tobias C. Berner
b9f7905439 Move security/qtkeychain-qt[45] to security/qtkeychain and create flavors
Reviewed by:	Gleb Popov <6yearold_gmail.com>
Approved by:	portmgr (mat)
2018-03-12 18:21:09 +00:00
Yuri Victorovich
b98d5524b5 New port: security/py-ntlm-auth: Create NTLM authentication structures
Approved by:	tcberner (mentor, implicit)
2018-03-10 08:39:50 +00:00
Jason E. Hale
f84111b8aa New port: security/py-python-nss
python-nss is a Python binding for NSS (Network Security Services)
and NSPR (Netscape Portable Runtime). NSS provides cryptography
services supporting SSL, TLS, PKI, PKIX, X509, PKCS*, etc. NSS is
an alternative to OpenSSL and used extensively by major software
projects. NSS is FIPS-140 certified.

NSS is built upon NSPR because NSPR provides an abstraction of
common operating system services, particularly in the areas of
networking and process management. Python also provides an abstraction
of common operating system services but because NSS and NSPR are
tightly bound, python-nss exposes elements of NSPR.

WWW: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Python_binding_for_NSS
2018-03-06 15:56:03 +00:00
Yuri Victorovich
b7a986c3e2 security/obfsproxy: Unbreak; Rename to security/py-obfsproxy-tor
Port changes:
* Unbreak: removed unnecessary lines in setup.py that were failing
* Changed MASTER_SITES to CHEESESHOP
* Added PKGNAMEPREFIX as every python port should have
* Added PKGNAMESUFFIX=-tor to easily identify as being for Tor
* Added LICENSE_FILE
* Deleted pkg-plist
* Added USE_PYTHON=autoplist instead of pkg-plist
* Added USE_PYTHON=noflavors (an app)
* Added NO_ARCH
* Updated WWW

Approved by:	tcberner (mentor, implicit)
Approved by:	portmgr (port compliance, infrastructure)
2018-03-02 07:35:25 +00:00
Sunpoet Po-Chuan Hsieh
79c3bca24a Add rubygem-aes_key_wrap 1.0.1
AESKeyWrap is a Ruby implementation of AES Key Wrap (RFC 3394, a.k.a. NIST Key
Wrap).

WWW: https://github.com/tomdalling/aes_key_wrap
2018-02-27 15:04:47 +00:00
William Grzybowski
bb9092702e security/py-asyncssh: Python asnycio SSH protocol library
AsyncSSH is a Python package which provides an asynchronous client
and server implementation of the SSHv2 protocol on top of
the Python asyncio framework. It requires Python 3.4 or later
and the Python cryptography library for some cryptographic functions.

WWW: https://github.com/ronf/asyncssh

Submitted by:	Bartosz Prokop
2018-02-23 13:01:43 +00:00
Tobias C. Berner
a4a7daf069 Give the KDE SC4 applications ports a -kde4 suffix
In order to make room for the up-to-date version of the KDE Desktop and its
applications move the KDE Application ports based on Qt4.

PR:		225992
Exp-run by:	antoine
Reviewed by:	rakuco, adridg
Differential Revision:	https://reviews.freebsd.org/D14413
2018-02-22 19:03:17 +00:00
Mathieu Arnold
ebd6a05b89 Add py-certbot-dns-route53, Route53 DNS Authenticator for py-certbot.
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D14262
2018-02-22 14:31:10 +00:00
Mathieu Arnold
ccf461f014 Add py-certbot-dns-rfc2136, RFC 2136 DNS Authenticator for py-certbot.
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D14262
2018-02-22 14:30:51 +00:00
Mathieu Arnold
19e80dba7b Add py-certbot-dns-nsone, NS1 DNS Authenticator for py-certbot.
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D14262
2018-02-22 14:30:46 +00:00
Mathieu Arnold
44c2106113 Add py-certbot-dns-luadns, LuaDNS Authenticator plugin for py-certbot.
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D14262
2018-02-22 14:30:42 +00:00
Mathieu Arnold
6bf5ebd923 Add py-certbot-dns-google, Google Cloud DNS Authenticator for py-certbot
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D14262
2018-02-22 14:30:38 +00:00
Mathieu Arnold
8177758fa3 Add py-certbot-dns-dnsmadeeasy, DNS Made Easy DNS Authenticator for py-certbot
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D14262
2018-02-22 14:30:34 +00:00
Mathieu Arnold
31501d9bc6 Add py-certbot-dns-dnsimple, DNSimple DNS Authenticator for py-certbot.
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D14262
2018-02-22 14:30:30 +00:00
Mathieu Arnold
fb8168fbeb Add py-certbot-dns-digitalocean, DigitalOcean DNS Authenticator plugin for py-cerbot.
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D14262
2018-02-22 14:30:26 +00:00
Mathieu Arnold
47343cbbd8 Add py-certbot-dns-cloudxns, CloudXNS DNS Authenticator plugin for py-certbot.
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D14262
2018-02-22 14:30:22 +00:00
Mathieu Arnold
80288e8d2d Add py-certbot-dns-cloudflare, Cloudflare DNS Authenticator plugin for Certbot
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D14262
2018-02-22 14:30:18 +00:00
Mathieu Arnold
9c818d51b7 Add py-certbot-nginx, the nginx plugin for py-certbot.
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D14262
2018-02-22 14:29:36 +00:00
Mathieu Arnold
46e3f6187b Add py-certbot-apache, the Apache plugin for py-certbot.
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D14262
2018-02-22 14:29:29 +00:00
Torsten Zuehlsdorff
ef096f2adb security/rubygem-attr_encrypted30: Resurrect port in version 3.0.3
This prepares the update of www/gitlab to 10.4 update
which requires this specific version

Submitted by: Matthias Fechner <idefix@fechner.net>
Reviewed by:  swills, tz
2018-02-20 15:19:25 +00:00
Torsten Zuehlsdorff
b12b860da4 Hook rubygem-omniauth-shibboleth12
Reported by: antoine
2018-02-16 08:35:07 +00:00
Torsten Zuehlsdorff
20abeb6774 Bring back dependencies needed to prepare the update of www/gitlab to 10.4
Submitted by: Matthias Fechner <idefix@fechner.net>
Reviewed by:  swills, tz
2018-02-15 16:59:19 +00:00
Sunpoet Po-Chuan Hsieh
a4dc7b6013 Add py-python3-openid 3.1.0
This is a set of Python packages to support use of the OpenID decentralized
identity system in your application, update to Python 3. Want to enable single
sign-on for your web site? Use the openid.consumer package. Want to run your own
OpenID server? Check out openid.server. Includes example code and support for a
variety of storage back-ends.

WWW: https://pypi.python.org/pypi/python3-openid
WWW: https://github.com/necaris/python3-openid
2018-02-10 19:58:36 +00:00
Sunpoet Po-Chuan Hsieh
0365b4edba Remove security/rubygem-openssl20 2018-01-31 16:42:07 +00:00
Yuri Victorovich
164ee0ed7b New port: security/sops: Editor of encrypted files that supports YAML, JSON and BINARY formats
PR:		225267
Submitted by:	Dmitri Goutnik <dg@syrec.org>
Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D14111
2018-01-31 04:19:02 +00:00
Cy Schubert
d6fae8d266 Add the plog an IP Filter log parse utility that summarizes ipmon
output into a tablular form.

I have been using this tool in various forms on my IP Filter firewalls
for almost twenty years. Maybe someone else might find it useful too.

Description from http://www.antibozo.net/ogata/webtools/:

plog is a parser for the logged output of the ipmon utility that is part
of the excellent IP-Filter packet-filtering and NAT package written and
maintained by Darren Reed. plog translates the somewhat garbled output
from ipmon into a report that aids analysis of your firewall traffic.
The current version number is 0.10.
2018-01-28 04:04:42 +00:00
Rene Ladan
0c387f0d99 Remove expired ports:
2018-01-27 emulators/raine: Broken for more than 6 months
2018-01-27 mail/libmapi: Broken for more than 6 months
2018-01-27 www/lessc: Broken for more than 6 months
2018-01-27 www/uglifyjs: Broken for more than 6 months
2018-01-27 www/py-octoprint: Broken for more than 6 months
2018-01-27 www/xpi-noscript: Broken for more than 6 months
2018-01-27 www/npm-less-plugin-clean-css: Broken for more than 6 months
2018-01-27 www/caudium14: Depends on expiring lang/pike78
2018-01-27 www/hinventory-client: Broken for more than 6 months
2018-01-27 security/tclgpg: Broken for more than 6 months
2018-01-27 security/pond: Broken for more than 6 months
2018-01-27 security/mdcrack: Broken for more than 6 months
2018-01-27 devel/npm-commander: Broken for more than 6 months
2018-01-27 devel/py-protocols-devel: Broken for more than 6 months
2018-01-27 devel/py-InlineEgg: Broken for more than 6 months
2018-01-27 devel/npm-amdefine: Broken for more than 6 months
2018-01-27 devel/npm-source-map: Broken for more than 6 months
2018-01-27 devel/libical-glib: Broken for more than 6 months
2018-01-27 devel/npm-graceful-readlink: Broken for more than 6 months
2018-01-27 devel/npm-clean-css: Broken for more than 6 months
2018-01-27 devel/py-ruledispatch: Depends on expiring devel/py-protocols-devel
2018-01-27 games/balazarbrothers: Broken for more than 6 months
2018-01-27 games/libretro-cores: Broken for more than 6 months
2018-01-27 games/gish-demo: Broken for more than 6 months
2018-01-27 games/cheech: Broken for more than 6 months
2018-01-27 audio/mbrolavox: Broken for more than 6 months
2018-01-27 audio/linux-mbrola: Depends on expiring audio/mbrolavox
2018-01-27 audio/gigedit: Broken for more than 6 months
2018-01-27 audio/gnomoradio: Broken for more than 6 months
2018-01-27 math/asir2000: Broken for more than 6 months
2018-01-27 multimedia/librespot: Broken for more than 6 months
2018-01-27 multimedia/bombono: Broken for more than 6 months
2018-01-27 lang/gcl: Broken for more than 6 months
2018-01-27 lang/pike78: Broken for more than 6 months
2018-01-27 shells/ambit: Broken for more than 6 months
2018-01-28 01:39:12 +00:00
Bernard Spil
86521c9e67 security/nextcloud-passman: Add Nextcloud Passman app 2018-01-27 09:49:17 +00:00
Ben Woods
a74bfa455f Add new port security/keepass-plugin-keepassrpc
KeePassRPC is a KeePass plugin that allows applications to transfer passwords to
and from KeePass.

One such application is the Kee plugin for Firefox, which adds free, secure and
easy to use password management features to your web browser which save you time
and keep your private data more secure.

WWW: https://www.kee.pm/
2018-01-23 10:34:21 +00:00
Carlos J. Puga Medina
b479b6b7b9 security/py-josepy: JOSE protocol implementation in Python
JOSE (Javascript Object Signing and Encryption) is a Python implementation
of the standards developed by IETF Javascript Object Signing and Encryption
(Active WG), in particular the following RFCs:

- JSON Web Algorithms (JWA)
- JSON Web Key (JWK)
- JSON Web Signature (JWS)

Originally developed as part of the ACME protocol implementation.

WWW: https://josepy.readthedocs.io/en/latest/

Differential Revision:	https://reviews.freebsd.org/D14013
2018-01-22 15:40:11 +00:00
Antoine Brodin
873908ed29 New port: security/py-pyblake2
pyblake2 is an extension module for Python implementing BLAKE2 hash function.

WWW: https://github.com/dchest/pyblake2
2018-01-21 13:20:31 +00:00
Jason E. Hale
87c4e43124 Update security/pinentry* to 1.1.0 [1]
Add security/pinentry-fltk, fltk frontend [2]

PR:		225190 [1], 225191 [2]
Submitted by:	Dmitri Goutnik <dg@syrec.org>
2018-01-21 00:38:29 +00:00
Mark Felder
4078d77ab6 Minisign is a dead simple tool to sign files and verify signatures.
It is portable, lightweight, and uses the highly secure Ed25519
public-key signature system.

WWW: https://github.com/jedisct1/minisign
2018-01-18 15:43:54 +00:00
Alex Dupre
21c95ce266 trezord (short for TREZOR Daemon), or TREZOR Bridge, is a small piece of
software, used for websites, to talk with TREZOR devices.

WWW: https://github.com/trezor/trezord
2018-01-10 17:12:45 +00:00
Luca Pizzamiglio
afde71aeec security/pecl-mcrypt: Add port
This PHP extension works only with PHP 7.2
It provides an extension deprecated in the last version of PHP

Sponsored by:	trivago N.V.
2018-01-09 16:54:30 +00:00
Kirill Ponomarev
14be0111ee Add security/libdecaf
Implementation of elliptic curve cryptography using the Montgomery
and Edwards curves Curve25519, Ed25519, Ed448-Goldilocks and
Curve448, using the Decaf / Ristretto encoding.

Approved by:	mat (mentor)
2018-01-08 17:11:27 +00:00
Mark Felder
2645043bdf A small, self-contained API server written in Ruby and Sinatra to
provide a private backend for the open-source Bitwarden apps.

WWW: https://github.com/jcs/bitwarden-ruby
2018-01-08 17:00:31 +00:00
Mark Felder
43666ff0f3 A Ruby implementation of the Password-Based Key-Derivation Function v2
WWW: https://github.com/emerose/pbkdf2-ruby
2018-01-08 16:51:12 +00:00
Sunpoet Po-Chuan Hsieh
7541ae37f0 Sort SUBDIRs 2018-01-07 15:53:22 +00:00
Steve Wills
f8d2de3f86 security/rubygem-rbnacl4: create port
4.x version required by gitlab

PR:		224931
Submitted by:	Matthias Fechner <idefix@fechner.net> (maintainer)
2018-01-05 13:22:23 +00:00
Rene Ladan
9088acc2a4 Remove expired ports:
2017-12-31 security/gnupg20: Will reach EOL upstream on 2017-12-31
2018-01-01 dns/dualserver: Please migrate to dns/dnsmasq. Over the years dualserver becomes unmaintenaible.
2018-01-01 devel/p5-Parse-Pidl44: yes
2018-01-01 sysutils/DTraceToolkit: Now maintained as part of the base system
2018-01-01 11:41:37 +00:00
Yuri Victorovich
d1dcd7daf3 New port: security/titan: Command line password manager and file encryption program
Submitted by:	myself
Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D13629
2017-12-26 18:26:08 +00:00
Jochen Neumeister
e3f0c03466 New port: security/snuffleupagus
Snuffleupagus is a PHP7+ module designed to drastically raise the cost
of attacks against websites.  This is achieved by killing entire bug
classes and providing a powerful virtual-patching system, allowing the
administrator to fix specific vulnerabilities without having to touch
the PHP code.

WWW: https://snuffleupagus.readthedocs.io/

PR:		224545
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)
Approved by:	rene (mentor)
Differential Revision:	https://reviews.freebsd.org/D13606
2017-12-24 13:11:41 +00:00