kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/oath-toolkit/Makefile

30 lines
772 B
Makefile
Raw Normal View History

Bump PKGREVISION for security/openssl ABI bump.
2016-03-05 12:27:40 +01:00
# $NetBSD: Makefile,v 1.15 2016/03/05 11:29:22 jperkin Exp $
The OATH Toolkit contains a shared library, command line tool and a PAM module that makes it possible to build one-time password authentication systems. Supported technologies include the event-based HOTP algorithm and the time-based TOTP algorithm. OATH is the Open AuTHentication organization which specify the algorithms.
2011-12-05 10:51:20 +01:00
Version 2.4.1 (released 2014-02-12) * liboath: Fix usersfile bug that caused it to update the wrong line. When an usersfile contain multiple lines for the same user but with an unparseable token type (e.g., HOTP vs TOTP), the code would update the wrong line of the file. Since the then updated line could be a commented out line, this can lead to the same OTP being accepted multiple times which is a security vulnerability. CVE-2013-7322 CVs: ----------------------------------------------------------------------
2014-03-10 01:58:51 +01:00
DISTNAME= oath-toolkit-2.4.1
Bump PKGREVISION for security/openssl ABI bump.
2016-03-05 12:27:40 +01:00
PKGREVISION= 2
The OATH Toolkit contains a shared library, command line tool and a PAM module that makes it possible to build one-time password authentication systems. Supported technologies include the event-based HOTP algorithm and the time-based TOTP algorithm. OATH is the Open AuTHentication organization which specify the algorithms.
2011-12-05 10:51:20 +01:00
CATEGORIES= security
MASTER_SITES= http://download.savannah.gnu.org/releases/oath-toolkit/
MAINTAINER= pettai@NetBSD.org
HOMEPAGE= http://www.nongnu.org/oath-toolkit/
COMMENT= OATH (Open AuTHentication) Toolkit
LICENSE= gnu-lgpl-v2.1 AND gnu-gpl-v3
GNU_CONFIGURE= yes
USE_TOOLS+= pkg-config
USE_LIBTOOL= yes
Run autoreconf to avoid issues with automake version number mismatches. Fixes build after automake-1.14.1 update. Make automake a build dependency. Bump PKGREVISION.
2014-01-05 22:41:37 +01:00
USE_TOOLS+= autoconf automake m4 autoreconf
Version 2.4.0 (released 2013-07-21) * liboath: Add new API methods for validating TOTP OTPs The new methods (oath_totp_validate3 and oath_totp_validate3_callback) introduce a new parameter *otp_counter, which is set to the actual counter used to calculate the OTP (unless it is a NULL pointer). This allows for easier OTP replay detection in applications using liboath. Patch from Fabian Grünbichler <fabian.gruenbichler@tuwien.ac.at>. Version 2.2.0 (released 2013-07-07) * libpskc: Add functions for setting PSKC data. The new functions are pskc_add_keypackage and all pskc_set_* functions (see libpskc/include/pskc/keypackage.h). This allow you to write programs that generate new PSKC structures. * liboath: Permit different passwords for different tokens for the same user. Thanks to Christian Hesse <list@eworm.de>. * build: Improve building from git with most recent automake and gengetopt. Thanks to Christian Hesse <list@eworm.de>. * build: Valgrind is not enabled by default. It causes too much false positives. For developers who want, use --enable-valgrind-tests. It is still enabled by default when building from the version controlled sources (see cfg.mk). Thanks to Christian Hesse <list@eworm.de>. * liboath: Make header file usable from C++ (extern "C" guard). Reported by Alan Markus <alan.markus@gmail.com>.
2013-09-14 09:46:33 +02:00
Run autoreconf to avoid issues with automake version number mismatches. Fixes build after automake-1.14.1 update. Make automake a build dependency. Bump PKGREVISION.
2014-01-05 22:41:37 +01:00
BUILD_DEPENDS+= automake>=1.14:../../devel/automake
Version 2.4.0 (released 2013-07-21) * liboath: Add new API methods for validating TOTP OTPs The new methods (oath_totp_validate3 and oath_totp_validate3_callback) introduce a new parameter *otp_counter, which is set to the actual counter used to calculate the OTP (unless it is a NULL pointer). This allows for easier OTP replay detection in applications using liboath. Patch from Fabian Grünbichler <fabian.gruenbichler@tuwien.ac.at>. Version 2.2.0 (released 2013-07-07) * libpskc: Add functions for setting PSKC data. The new functions are pskc_add_keypackage and all pskc_set_* functions (see libpskc/include/pskc/keypackage.h). This allow you to write programs that generate new PSKC structures. * liboath: Permit different passwords for different tokens for the same user. Thanks to Christian Hesse <list@eworm.de>. * build: Improve building from git with most recent automake and gengetopt. Thanks to Christian Hesse <list@eworm.de>. * build: Valgrind is not enabled by default. It causes too much false positives. For developers who want, use --enable-valgrind-tests. It is still enabled by default when building from the version controlled sources (see cfg.mk). Thanks to Christian Hesse <list@eworm.de>. * liboath: Make header file usable from C++ (extern "C" guard). Reported by Alan Markus <alan.markus@gmail.com>.
2013-09-14 09:46:33 +02:00
The OATH Toolkit contains a shared library, command line tool and a PAM module that makes it possible to build one-time password authentication systems. Supported technologies include the event-based HOTP algorithm and the time-based TOTP algorithm. OATH is the Open AuTHentication organization which specify the algorithms.
2011-12-05 10:51:20 +01:00
PKGCONFIG_OVERRIDE+= liboath/liboath.pc.in
Run autoreconf to avoid issues with automake version number mismatches. Fixes build after automake-1.14.1 update. Make automake a build dependency. Bump PKGREVISION.
2014-01-05 22:41:37 +01:00
pre-configure:
cd ${WRKSRC} && autoreconf -fi
Version 2.0.2 (released 2013-01-08) * oathtool: Base32 decoding of keys are now more liberal in what accepts. It can now accept keys on the "gr6d 5br7 25s6 vnck v4vl hlao re" format, i.e., base32 data delimited using SPC and without padding. The old proper base32 format is still supported. * liboath: oath_base32_decode now ignores SPC and adds pad characters. * liboath: If password in usersfile is + then ignore supplied password. This enables the pam_oath module to be used with external password verification. Based on patch from Ilkka Virta <itvirta@iki.fi>. * tests: Fixed expiry date of some certificates used in the test suite. The last release would only complete 'make check' during a 30 day window. * API and ABI is backwards compatible with the previous version. Version 2.0.1 (released 2012-10-24) * libpskc, pskctool: Support sign and verify of PSKC data using XML DigSig. * libpskc: XML Schema validation modified. The entire PSKC schema is now supported (before the XML Digital Signatures and Encryption parts were removed). The code now assumes that the schema is available in the local XML catalog. Thanks to Liam Quin for hints about XML catalogs. * pskctool: the --check (-c) parameter was renamed to --info (-i). * API and ABI is backwards compatible with the previous version. Version 2.0.0 (released 2012-10-10) * libpskc, pskctool: New components. The OATH Toolkit now supports the Portable Symmetric Key Container (PSKC) data format specified in RFC 6030 for dealing with key provisioning. There is a new low-level library libpskc for managing PSKC data for application developers and a new command line tool pskctool for interacting with PSKC data for users. The PSKC functionality depends on Libxml2 <http://xmlsoft.org/>. It can be disabled unconditionally using the ./configure-parameter --disable-pskc. * liboath: Add manpages for library API. * API and ABI is backwards compatible with the previous version.
2013-03-16 21:52:38 +01:00
.include "../../textproc/libxml2/buildlink3.mk"
.include "../../security/xmlsec1/buildlink3.mk"
Add missing pam.bl3.mk
2012-04-08 00:34:13 +02:00
.include "../../mk/pam.buildlink3.mk"
The OATH Toolkit contains a shared library, command line tool and a PAM module that makes it possible to build one-time password authentication systems. Supported technologies include the event-based HOTP algorithm and the time-based TOTP algorithm. OATH is the Open AuTHentication organization which specify the algorithms.
2011-12-05 10:51:20 +01:00
.include "../../mk/bsd.pkg.mk"
Reference in a new issue Copy permalink