commands kill all connections.
- Separate keygen part and create keygen command.
- Bump PORTREVISION
PR: 93228 [1]
Reported by: DanGer on #bsdports [2]
rather ambiguous. The original author of the tripwire software had
coded the distribution contrib/install.sh file not to clobber the local
and site key files only whereas CLOBBER=false should also include not
clobbering the installed copies of the twcfg.txt and twpol.txt files.
PR: 85155
Change some URLs from author dirs to dist dirs.
The example in the porter's handbook didn't have the trailing slash;
mea culpa for not having caught that when it went in.
We have not checked for this KEYWORD for a long time now, so this
is a complete noop, and thus no PORTREVISION bump. Removing it at
this point is mostly for pedantic reasons, and partly to avoid
perpetuating this anachronism by copy and paste to future scripts.
- Reorganize Makefile
- Use PLIST_FILES and PORTDOCS
- Remove dependency of perl. Use REINPLACE_CMD
- Bump PORTREVISION
PR: 93593
Reported by: Andrew Pantyukhin <infofarmer@gmail.com>
being unfetchable. The author's domain name (libtomcrypt.org) expired
and was picked up by a cybersquatter, and the distfiles haven't been
mirrored by ftp.freebsd.org yet.
If anyone has a copy of the distfiles for any of these ports, please
send them to me so that I can host them and unbreak these ports.
Approved by: flz
Discussed with: maintainer
- Move the generation of the host key (if not present) from the package/
port installation to the startup script in order to be in line with
what the base OpenSSH and the OpenSSH-portable port do.
- Flush stdout when updating the transfer progress bar of sftp2 and scp2
so the info displayed is up to date. [1]
- Remove obsolete USE_REINPLACE, remove trailing white space in Makefile.
PR: 91262 [1]
Approved by: netchild
Approved by: tobez (implicit)
2.17 Mon Jan 9 18:22:51 EST 2006
-IMPORTANT NOTE: Versions of this module prior to 2.17 were incorrectly
using 8 byte IVs when generating the old-style RandomIV style header
(as opposed to the new-style random salt header). This affects data
encrypted using the Rijndael algorithm, which has a 16 byte blocksize,
and is a significant security issue.
The bug has been corrected in versions 2.17 and higher by making it
impossible to use 16-byte block ciphers with RandomIV headers. You may
still read legacy encrypted data by explicitly passing the
-insecure_legacy_decrypt option to Crypt::CBC->new().
-The salt, iv and key are now reset before each complete encryption
cycle. This avoids inadvertent reuse of the same salt.
-A new -header option has been added that allows you to select
among the various types of headers, and avoids the ambiguity
of having multiple interacting options.
-A new random_bytes() method provides access to /dev/urandom on
suitably-equipped hardware.
2.16 Tue Dec 6 14:17:45 EST 2005
- Added two new options to new():
-keysize => <bytes> Force the keysize -- useful for Blowfish
-blocksize => <bytes> Force the blocksize -- not known to be useful
("-keysize=>16" is necessary to decrypt OpenSSL messages encrypted with Blowfish)
- Add WITH_LOCAL_CLAMAV[_DEVEL] to run-depend on security/clamav[-devel];
default LOCAL_CLAMAV on to restore the way port behaved until last update.
Depend on installed package rather that clamd to register depends correctly.
- If one of the clam options is on, make rc.d script to REQUIRE: clamd
Actually use clamsmtp_debug var.
Also make rc.d script to look more like the example in PH.
- Install example script in EXAMPLESDIR rather that DOCSDIR;
- Moved: pkg-message --> files/pkg-message.in
- Drop USE_REINPLACE while here.
PR: 93157
Submitted by: Ion-Mihai Tetcu <itetcu AT people dot tecnik93 dot com>
According to the official announcement:
This release fixes a security issue that allows an attacker to perform
injection attacks against the underlying storage containers. Upgrading
is strongly recommended!
See changelog at <http://pear.php.net/package/Auth/download/1.2.4>.
PR: 93406
Submitted by: /me
Approved by: maintainer
Security: see changelog.
Also, document the rename of files/twpol.txt to files/twpol.m4 through
a repocopy. M4 is now used to conditionally build the initial copy of the
Tripwire policy file based on the version of FreeBSD this port is being
installed on.