Commit graph

1039 commits

Author SHA1 Message Date
Boris Samorodov
c11516af7b Here are new Linux Fedora 10 infrastructure ports.
Those ports are intended to be used with 8-CURRENT at least
with SVN r192206.

If you want to switch to linux-f10 ports, please define at /etc/make.conf:
  OVERRIDE_LINUX_BASE_PORT=f10
  OVERRIDE_LINUX_NONBASE_PORTS=f10

An upgrading procedure is shown at /usr/ports/UPDATING, entries 20090401
and 20070327.

For the first time all tested linux ports work as expected(!):
. acroread8;
. google-earth;
. skype;
. seamonkey.

Many thanks for kernel folks who really did the main work
(and I wrote only some lines of ports).

There is a good chance that those ports may become a default
for 8.0-RELEASE. Please, test and report back to emulation@ ML.
2009-06-01 17:26:31 +00:00
Martin Wilke
e741fcf7f9 The scrypt key derivation function was originally developed for use in
the Tarsnap online backup system and is designed to be far more secure
against hardware brute-force attacks than alternative functions such as
PBKDF2 or bcrypt.

WWW:   http://www.tarsnap.com/scrypt/

PR:		ports/134961
Submitted by:	Wen Heping <wenheping at gmail.com>
2009-05-29 11:56:22 +00:00
Martin Wilke
7a5515161e Prelude is a new innovative hybrid Intrusion Detection system designed
to be very modular, distributed, rock solid and fast.

Prelude-PFlogger Listens at OpenBSD PF redirect logged packet, and
send alerts to the Prelude Manager.

WWW: http://www.prelude-ids.org/

PR:		ports/134746
Submitted by:	Anders Troback <freebsd at troback.com>
2009-05-23 14:08:35 +00:00
Jose Alonso Cardenas Marquez
f27a0d866a - New port: security/gambas2-gb-crypt
The gambas crypt encription component
2009-05-09 01:34:13 +00:00
Greg Larkin
bb06397c6c This module comes with a set of methods to use with htaccess password
files. These files (and htaccess) are used to do Basic Authentication
on a web server.

The password file is a flat-file with login names and their associated
crypted password. You can use this for non-Apache files if you wish,
but it was written specifically for .htaccess style files.

WWW:    http://search.cpan.org/dist/Apache-Htpasswd/
2009-04-30 17:51:57 +00:00
Martin Wilke
aa3d4c052b It will transparently hijack HTTP traffic on a network, watch for HTTPS links
and redirects, then map those links into either look-alike HTTP links or
homograph-similar HTTPS links. It also supports modes for supplying a
favicon which looks like a lock icon, selective logging, and session denial.

WWW:	http://www.thoughtcrime.org/software/sslstrip/

PR:		ports/134021
Submitted by:	Matt Donovan <kitchetech@gmail.com>
2009-04-26 23:21:50 +00:00
Martin Wilke
2984a8ea26 py-pylibacl -- Manipulate the POSIX.1e Access Control Lists with python
WWW:	http://pylibacl.sourceforge.net/

PR:		ports/133846
Submitted by:	joris
2009-04-23 17:15:38 +00:00
Wesley Shields
8f26924f02 Download and install definition files for Clamav from the following sites:
sanesecurity.com
malware.com.br
msrbl.com
clamav.securiteinfo.com

WWW: https://sourceforge.net/projects/scamp/

PR:		ports/133248
Submitted by:	Gerard Seibert <gerard@seibercom.net>
2009-04-23 13:20:02 +00:00
Li-Wen Hsu
b9bf0908c3 Add libssh 0.2, a library implementing the SSH1 and SSH2 protocol.
PR:		ports/133657
Submitted by:	Alexander Logvinov <ports at logvinov.com>
2009-04-12 17:47:48 +00:00
Mark Linimon
0661c80219 Remove expired port security/cutlass: does not work with current version
of security/botan.
2009-04-11 20:51:13 +00:00
Boris Samorodov
d7a70652e5 Add linux-f8-nss 3.12.2, network Security Services (Linux Fedora 8). 2009-04-06 16:15:34 +00:00
Boris Samorodov
831a46c8da Add linux-f8-libssh2 0.18, the library implementing the SSH2 protocol
(Linux Fedora 8).
2009-04-06 16:09:54 +00:00
Boris Samorodov
824eda00fc Here are new Linux Fedora 8 infrastructure ports.
The recommended version of FreeBSD to use them is 8-CURRENT.
FreeBSD-7.x is not fully compatible with compat.linux.osrelease
2.6.16. Some syscalls cannot be MFCed due to native FreeBSD
ABI breakage.

Usage (and package building):
1. define compat.linux.osrelease=2.6.16;
2. add following variables to /etc/make.conf:
   . OVERRIDE_LINUX_BASE_PORT=f8;
   . OVERRIDE_LINUX_NONBASE_PORTS=f8.

Approved by:	bsam (me) ;-)
2009-04-01 15:25:39 +00:00
Martin Wilke
2d04fc9d63 Pairing-based cryptography is a relatively young area of cryptography
that revolves around a certain function with special properties.

The PBC (Pairing-Based Cryptography) library is a free C library
(released under the GNU Public License) built on the GMP library that
performs the mathematical operations underlying pairing-based
cryptosystems.

The PBC library is designed to be the backbone of implementations of
pairing-based cryptosystems, thus speed and portability are important
goals. It provides routines such as elliptic curve generation, elliptic
curve arithmetic and pairing computation. Thanks to the GMP library,
despite being written in C, pairings times are reasonable.

WWW:	http://crypto.stanford.edu/pbc/

PR:		ports/133172
Submitted by:	Wen Heping <wenheping at gmail.com>
2009-03-31 09:39:12 +00:00
Max Brazhnikov
0ec82edd28 connect qca-cyrus-sasl and qca-gnupg to build 2009-03-19 12:01:04 +00:00
Wesley Shields
e5744b10ae - Connect unhide to the build.
PR:		ports/132131
Submitted by:	Nikos Ntarmos <ntarmos@cs.uoi.gr>
2009-03-13 00:31:32 +00:00
Martin Wilke
c041c07d22 SSH key-based authentication is tried-and-true, but it lacks a true
Public Key Infrastructure for key certification, revocation and
expiration.  Monkeysphere is a framework that uses the OpenPGP web of
trust for these PKI functions.  It can be used in both directions: for
users to get validated host keys, and for hosts to authenticate users.

WWW: http://web.monkeysphere.info/

PR:		ports/128406
Submitted by:	Daniel Kahn Gillmor <dkg at fifthhorseman.net>
2009-03-10 07:45:27 +00:00
Martin Wilke
e7a6e4981b - Connect security/py-pyclamd to the build 2009-02-14 23:31:21 +00:00
Gabor Kovesdan
a6ec929c8d HotSSH is an interface to Secure Shell, for GNOME and OpenSSH. It
intends to be a better experience than simply invoking "ssh" from an
existing terminal window.

   * Fast search-based interface for new connections
   * Also display and search of local (Avahi) SSH servers
   * Tabbed display with automatic session saving (Firefox style)
   * Status bar with information like latency to server and output of
     remote uptime
   * Close integration with OpenSSH features like connection sharing
     (near-instant new tabs)
   * NetworkManager integration to easily reconnect after a network
     change, great for laptops

WWW:	http://projects.gnome.org/hotssh/

PR:		ports/131133
Submitted by:	Ashish Shukla <wahjava at gmail.com>
2009-02-13 23:36:51 +00:00
Martin Wilke
72cb71315e The OpenPGP SDK project provides an open source library, written in C,
which implements the OpenPGP specification.

WWW:	http://openpgp.nominet.org.uk/
2009-02-10 11:27:57 +00:00
Martin Wilke
feb4910a37 py-PF is a pure-Python module for managing OpenBSD's Packet Filter. It aims
to combine the flexibility of PF's C API and the power of Python, making it
easier to manage PF data and to integrate firewalling capabilities in more
complex applications.

WWW:	http://www.kernel-panic.it/software/py-pf/

PR:		ports/131463
Submitted by:	Sofian Brabez <sbrabez at gmail.com>
2009-02-09 21:25:26 +00:00
Martin Wilke
071613d170 The Nmap::Parser library provides a Ruby interface to
Nmap's scan data.  It can run Nmap and parse its XML
output directly from the scan, parse a file containing
the XML data from a separate scan, parse a String of
XML data from a scan, or parse XML data from an object
via its read() method.  This information is presented
in an easy-to-use and intuitive fashion for storage
and manipulation.

WWW: http://rubynmap.sourceforge.net/

PR:		ports/131516
Submitted by:	Daniel Roethlisberger <daniel at roe.ch>
2009-02-09 16:52:15 +00:00
Gabor Kovesdan
4ef9544c62 Crypt::Juniper - Encrypt/decrypt Juniper $9$ secrets
WWW:	http://search.cpan.org/dist/Crypt-Juniper/

PR:		ports/131126
Submitted by:	Tsung-Han Yeh <snowfly at yuntech.edu.tw>
2009-02-04 12:46:38 +00:00
Gabor Kovesdan
07099141b4 The Mcrypt modules provides and simple and inuitive perl abstraction of the
libmcrypt cryptography library.  It provide mechanisms for encoding and
decoding perl scalars.

WWW: http://search.cpan.org/dist/Mcrypt/

PR:		ports/131051
Submitted by:	Tatsuki Makino <tatsuki_makino@hotmail.com>
2009-02-04 12:45:02 +00:00
Martin Wilke
780e8a39f0 2009-01-19 games/emacs-chess: has been broken for more than 6 months
2009-02-01 devel/subversion-devel: Use devel/subversion or devel/subversion-freebsd instead of this port
2009-01-19 devel/hs-hat: has been broken for more than 6 months
2009-01-19 devel/hs-hpl: has been broken for more than 6 months
2009-01-19 databases/mysqlbigram: has been broken for more than 6 months
2009-01-19 mail/claws-mail-clamav: has been broken for more than 6 months
2009-01-19 mail/sylpheed2-devel: has been broken for more than 6 months
2009-01-19 www/pecl-mnogosearch: has been broken for more than 6 months
2009-01-31 x11-fonts/mathfonts: This port was supported by Mozilla 1.8 (including Firefox 2.0) - to be replaced by  STIX fonts for Firefox 3.x
2009-01-19 x11-wm/fluxspace: has been broken for more than 6 months
2009-01-31 x11-wm/expocity: project has been abandoned
2009-01-19 x11/bbuname: has been broken for more than 6 months
2009-01-19 security/squidclam: has been broken for more than 6 months
2009-01-19 print/virtualpaper: depends on broken, expired port
2009-01-19 print/ifhp: has been broken for more than 6 months
2009-01-19 net-p2p/peercast: has been forbidden for more than 6 months
2009-01-19 palm/pdbc: has been broken for more than 6 months
2009-01-19 net-mgmt/NeTraMet: has been broken for more than 6 months
2009-01-19 net-im/sulci: has been broken for more than 6 months
2009-01-19 multimedia/mjpegtools-yuvfilters: has been broken for more than 6 months
2009-01-19 multimedia/helixplayer: has been broken for more than 6 months
2009-01-19 lang/quack: has been broken for more than 6 months
2009-01-19 misc/pybliographer: has been broken for more than 6 months
2009-01-19 net/versuch: has been broken for more than 6 months
2009-01-19 net/py-mantissa: has been broken for more than 6 months
2009-01-19 net/libunpipc: has been broken for more than 6 months
2009-01-19 net/gnometelnet: has been broken for more than 6 months
2009-01-19 net/gacxtool: depends on expired, broken port
2009-01-19 devel/py-coro: has been broken for more than 6 months
2009-01-19 chinese/stardict2-dict-zh_TW: has been broken for more than 6 months
2009-01-19 x11-themes/gtk-industrial-theme: has been broken for more than 6 months
2009-02-03 22:38:25 +00:00
Gabor Pali
da4ace3067 This package provides efficient cryptographic hash implementations for
strict and lazy bytestrings for the functional programming language
Haskell.

WWW: http://hackage.haskell.org/cgi-bin/hackage-scripts/package/digest

Reviewed by:	gabor
Approved by:	tabthorpe
2009-01-23 23:47:58 +00:00
Cy Schubert
61cdb0d881 Add sudosh2. 2009-01-15 16:06:00 +00:00
Philip M. Gollucci
35be5a0f01 Fail2ban scans log files like /var/log/pwdfail or /var/log/apache/error_log
and bans IP that makes too many password failures. It updates
firewall rules to reject the IP address.

WWW: http://www.fail2ban.org/wiki/index.php/Main_Page
2009-01-13 18:22:19 +00:00
Joe Marcus Clarke
610ae56816 Presenting GNOME 2.24 for FreeBSD.
See http://library.gnome.org/misc/release-notes/2.24/ for the general
release notes.  On the FreeBSD front, this release introduces Fuse support
in HAL, adds multi-CPU support to libgtop, WebKit updates, and fixes some
long-standing seahorse and gnome-keyring bugs.  The documentation updates
to the website are forthcoming.

This release features commits by adamw, ahze, kwm, mezz, and myself.  It would
not have been possible without are contributors and testers:

Alexander Loginov
Craig Butler [1]
Dmitry Marakasov [6]
Eric L. Chen
Joseph S. Atkinson
Kris Moore
Lapo Luchini [7]
Nikos Ntarmos
Pawel Worach
Romain Tartiere
TAOKA Fumiyoshi [3]
Yasuda Keisuke
Zyl
aZ [4]
bf [2] [5]
Florent Thoumie
Peter Wemm
pluknet

PR:		125857 [1]
		126993 [2]
		130031 [3]
		127399 [4]
		127661 [5]
		124302 [6]
		129570 [7]
		129936
		123790
2009-01-10 05:22:13 +00:00
Dirk Meyer
63c086dc44 - disconnect openssl-beta 2009-01-09 16:35:20 +00:00
Roman Bogorodskiy
846abd3383 Re-add gnutls-devel port at version 2.7.4. 2009-01-09 07:21:29 +00:00
Dirk Meyer
eddd3eb565 - disconnect openssl-stable 2008-12-30 13:49:35 +00:00
Johan van Selst
dccef7acdf PyMe is a Python interface to GPGME library.
PyMe's development model is GPGME + Python + SWIG (just like m2crypto is
an OpenSSL + Python + SWIG) combination which means that most of the
functions and types are converted from C into Python automatically by SWIG.
In short, to be able to use PyMe you need to be familiar with GPGME.

WWW:	http://pyme.sourceforge.net/
2008-12-28 11:27:43 +00:00
Alex Dupre
796927af81 Remove pecl-filter in favour of php5-filter.
Approved by:	maintainer
2008-12-11 09:05:55 +00:00
Alex Dupre
ed406437e7 Add php5 filter extension. 2008-12-11 09:01:38 +00:00
Alex Dupre
3b214cb157 Add php5 hash extension. 2008-12-11 08:58:06 +00:00
Martin Wilke
5a15e1a9c6 - Connect security/opensaml2 2008-11-22 15:57:03 +00:00
Dmitry Marakasov
9ba5a41fe6 Lynis is an auditing tool for Unix (specialists). It scans the
system and available software, to detect security issues. Beside
security related information it will also scan for general system
information, installed packages and configuration mistakes.

This software aims in assisting automated auditing, software patch
management, vulnerability and malware scanning of Unix based systems.
It can be run without prior installation, so inclusion on read only
storage is no problem (USB stick, cd/dvd).

WWW: http://www.rootkit.nl/projects/lynis.html
Author: Michael Boelen

PR:		128909
Submitted by:	Cory McIntire <loon at noncensored dot com>
2008-11-17 00:20:32 +00:00
Cy Schubert
e6b64bdbf9 Retire fwbuilder and libfwbuilder version 2. They are no longer supported
by their developer.
2008-11-06 01:09:10 +00:00
Marcelo Araujo
ed985f6615 - libpwstor is a library implementing a password storage format
for C programmers.  This format provides a reasonable level of
security by utilizing SHA-256 in addition to a random salt to
mitigate dictionary and rainbow table attacks.

WWW: http://sourceforge.net/projects/kageki

PR:		ports/128328
Submitted by:	Matt D. Harris <mattdharris@users.sourceforge.net>
Reworked by:	myself
2008-10-24 16:08:00 +00:00
Martin Wilke
7b79f0ccb4 Tuntun is an applet for Gnome panel that manage a list of vpn connections
through the OpenVPN Management Interface.

Main features

 * Simple & lightweight just a client GUI to start/stop your OpenVPN tunnels
   and nothing more
 * Integrated with the Gnome Desktop (support for the Keyring and notification
   daemon)
 * Support for Auth and Private-Key OpenVPN authentication methods

 WWW:	http://code.google.com/p/tuntun/

PR:		ports/128097
Submitted by:	Anderson S. Ferreira <anderson at cnpm.embrapa.br>
2008-10-16 21:43:35 +00:00
Peter Pentchev
481da2d4cc Initial import of paperkey-0.8, a simple tool for extracting the truly
secret parts of a PGP secret key for backup purposes.

Obtained from:	http://www.jabberwocky.com/software/paperkey/
Author:		David Shaw <dshaw@jabberwocky.com>
2008-10-06 14:09:46 +00:00
Emanuel Haupt
99207a0b60 Add op 1.32, controlled privilege escalation tool 2008-09-30 14:03:37 +00:00
Martin Wilke
43254f4a72 HTML_Crypt provides methods to encrypt text, which can be later be decrypted
using JavaScript on the client side.

This is very useful to prevent spam robots collecting email addresses from your
site, included is a method to add mailto links to the text being generated.

WWW:	http://pear.php.net/package/HTML_Crypt
2008-09-23 08:09:18 +00:00
Martin Wilke
785015f0b9 This package allows you to encrypt and decrypt strings or long integer arrays
with the XXTEA encryption algorithm, which is secure, fast and suitable for web
development.

WWW:	http://pear.php.net/package/Crypt_XXTEA
2008-09-23 08:08:31 +00:00
Martin Wilke
5837bf2776 Provides methods needed to generate and verify MicroIDs.
WWW:	http://pear.php.net/package/Crypt_MicroID/
2008-09-23 08:07:57 +00:00
Martin Wilke
2661e4d8e2 pycryptopp is a set of Python wrappers for a few of
the best crypto algorithms from the Crypto++ library.

WWW:   http://allmydata.org/trac/pycryptopp

PR:		ports/126977
Submitted by:	Wen Heping <wenheping at gmail.com>
2008-09-05 14:23:43 +00:00
Jean Milanez Melo
21dd0fcf29 - Add entry for security/snortsam. 2008-09-03 23:03:30 +00:00
Cy Schubert
5583daec2c Welcome fwbuilder and libfwbuilder 3.0.0, replacing 2.1.19. The old version
is deprecated and scheduled for deletion as it is no longer supported by its
author.
2008-09-02 21:32:26 +00:00
Martin Wilke
991984ad31 This is a Camellia package for Ruby. Camellia engine is implemented in "C".
Supported key length : 128bit/192bit/256bit
Supported modes of operation : ECB/CFB/CBC

WWW:	http://info.isl.ntt.co.jp/crypt/eng/camellia/index.html

PR:		ports/126390
Submitted by:	Yoshisato YANAGISAWA <osho at pcc-software.org>
2008-08-13 07:26:06 +00:00