Commit graph

2482 commits

Author SHA1 Message Date
snj
24d928e694 Update flawfinder to 1.26. Don't set PY_PATCHPLIST, as it is useless.
Don't include python/extension.mk, as it is also useless.  Don't set
NO_CONFIGURE, because it makes PYTHON_PATCH_SCRIPTS useless.  Don't set
MAKEFILE, as we don't actually use the included makefile for anything.

Changes since 1.24:
* Added more support for Microsoft's approach to internationalization.
* Added two new rules for GLib functions, "g_get_home_dir" and
  g_get_tmp_dir".
* Added curl_getenv().
* Added several rules for input functions (for -I) -
  recv, recvfrom, recvmsg, fread, and readv.
* Tightened the false positive test slightly; if a name is
  followed by = or - or + it's unlikely to be a function call,
  so it'll be quietly discarded.
* Modified the summary report format slightly.
* Modified the getpass text to remove an extraneous character.
* Added rules for cuserid, getlogin, getpass, mkstemp, getpw, memalign,
  as well as the obsolete functions gsignal, ssignal, ulimit, usleep.
* Modified text for strncat to clarify it.
* Fixed error in --columns format, so that the output is simply
  "filename:linenumber:columnnumber" when --columns (-C) is used.
* Eliminated "Number of" phrase in the footer report
* Added more statistical information to the footer report.
* Added shortcut single-letter commands (-D for --dataonly,
  -Q for --quiet, -C for --columns), so that invoking from
  editors is easier.
* Tries to autoremove some false positives.  In particular, a function
  name followed immediately by "=" (ignoring whitespace)
  is automatically considered to be a variable and NOT a function,
  and thus doesn't register as a hit.  There are exotic cases
  where this won't be correct, but they're pretty unlikely in
  real code.
* Added a "--falsepositive" (-F) option, which tries to remove
  many more likely false positives.
2004-06-23 16:19:41 +00:00
drochner
b8ae38c3a0 update to 0.42
Many fixes and feature additions since 0.38. Too many to list here.
2004-06-21 18:27:47 +00:00
jmmv
fccea2f44b Update to 0.4.4:
This is mainly a bugfix release.  Sometimes EOF was not properly detected
while reading the password file.  This would result in an 'Line too long'
error message (and some wierd behavour).  Also, the current password file
is now backed up before each write.
2004-06-21 07:29:13 +00:00
itojun
c4a3b55800 upgrade to 20040617a. includes important certificate mangement change. 2004-06-17 03:36:18 +00:00
kristerw
b4e5dc1e43 Add and enable openssh+gssapi. 2004-06-15 18:46:27 +00:00
kristerw
e33e13d60b Resurrect openssh+gssapi per request of jwise@. 2004-06-15 18:44:57 +00:00
uebayasi
208c6f1b98 Update priv to 1.0beta2nb1.
* Make sure ${PKG_SYSCONFDIR} is passed to configure.
* Care ${PRIV_CONF_DIR} as an obsoleted variable.

Pointed out by Matt Green.
2004-06-14 03:16:42 +00:00
jmmv
fec33c7153 Convert to subst.mk. 2004-06-10 21:16:35 +00:00
jmmv
05c93204df Fix build (SSL not found during configuration, causing missing includes).
Problem probably introduced during the conversion to buildlink3.
Exposed by latest kristerw@'s bulk build in NetBSD 2.0_BETA/i386.
2004-06-10 21:11:08 +00:00
cjep
f6887a97b1 Add USE_INET6 to BUILD_DEFS as these packages use it. Part of PR#25743 from
Georg Schwarz.
2004-06-08 12:23:59 +00:00
schmonz
15ce0d6eda Add simple rc.d script. Bump PKGREVISION. 2004-06-06 14:19:04 +00:00
agc
defa9a1be3 Update audit-packages to 1.32, with fixes for the problems mentioned
in PR 25654 from Hauke Fath.

Take any non-standard values from audit-packages.conf file in
audit-packages as well as download-vulnerability-list.

Fix the pre-formatted documentation so that filenames to be
substituted are not formatted with the bold or underline "overstrikes"
on ttys, so that the correct sed substitutions take place at package
install time.
2004-06-06 08:28:54 +00:00
kristerw
1b0ace13d4 Remove obsolete packages, per discussion on tech-pkg. 2004-06-01 21:50:37 +00:00
jschauma
b8981cbdfa Since we set ALL_TARGET to irix6 (under, IRIX 6.x), we don't need to patch
the irix6.5 target into the Makefile.
2004-06-01 15:34:16 +00:00
kristerw
7510202d93 Depend on security/openssh instead of security/ssh for machines that
do not have /usr/bin/ssh.
2004-05-31 22:13:16 +00:00
kivinen
bf01247c07 Fixed bug, which only appeared in the NetBSD 2.0 systems where the
write can return 0 even when the select has indicated that socket
is writable. Do not consider this error, but call select again.
2004-05-28 12:00:10 +00:00
wiz
c0859358d8 Use versioned distfile. 2004-05-27 01:22:55 +00:00
reed
5cdf9aa4fd The libopencdk.so.8.0 used libgcrypt.so.11.
libgcrypt was recently upgraded. So when using binary packages
it is possible for new libgcrypt (libgcrypt.so.12.1) to be installed
with old opencdk-0.5.4 package.

So bump PKGREVISION and BUILDLINK_DEPENDS (to force a new package
to be required).
2004-05-27 00:51:39 +00:00
wiz
d2c65848f0 Make chklastlog useful on NetBSD; from Makoto Fujiwara in PR 25701.
Bump PKGREVISION.
2004-05-26 15:04:32 +00:00
wiz
19b27aaa2b PKGREVISION bump because of libidn shlib major bump. 2004-05-26 14:55:46 +00:00
sekiya
5cb9931c01 Add tacshell. 2004-05-26 12:05:10 +00:00
sekiya
435c70f240 tacshell-0.91: RSA ACE/Server sdshell workalike, using TACACS+ 2004-05-26 12:04:27 +00:00
adam
59fee122d5 buildlink3 now requires libgcrypt 1.2.0 or higher 2004-05-26 07:44:58 +00:00
tron
f869e3de69 Remove me as maintainer of this package. 2004-05-26 05:42:28 +00:00
uebayasi
988501a185 ${PKG_SYSCONFDIR} is created by INSTALL scripts via OWN_DIRS. No need to
run @exec mkdir/rmdir here.
2004-05-24 11:27:22 +00:00
kristerw
b075252528 Make this package compile when using gcc 3.3. 2004-05-23 23:03:40 +00:00
snj
784ea8c189 Fix MASTER_SITES. From Robert Elz in PR pkg/25681. 2004-05-23 04:07:41 +00:00
adam
616c770a63 Shared library major version change, so buildlink3.mk has to be updated, right? 2004-05-22 10:17:47 +00:00
adam
177071660e Changes 1.0.13:
- Some complilation fixes.
- Added the --xml parameter to the certtool utility.

Changes 1.0.12:
- Corrected bug in OpenPGP key loading using a callback.
- Renamed gnutls-srpcrypt to srptool
- Allow handshake requests by the client.
* Things backported from the development branch:
- Added support for authority key identifier and the extended key usage
  X.509 extension fields. The certtoool was updated to support them.
- Added batch support to certtool. Now it can use templates.
- The RC2 cipher is no more included. The one in libgcrypt is now used.

Changes 1.0.11:
- Added gnutls_sign_algorithm_get_name() and gnutls_pk_algorithm_get_name()
- Corrected bug in TLS renegotiation.

Changes 1.0.10:
- Corrected bug in RSA parameters handling which could cause
  unexpected crashes.
- Corrected bug in SSL 3.0 authentication.
2004-05-22 10:09:53 +00:00
adam
5fcb1873eb Changes 1.2.0
* First stable release.

Changes 1.1.94
 * The support for multi-threaded users goes into its third
   incarnation.  We removed compile time support for thread libraries.
   To support the thread library of your choice, you have to set up
   callback handlers at initialization time.  New data structures, a
   new control command, and default initializers are provided for this
   purpose.

 * Interface changes relative to the 1.1.93 release:
libgcrypt-config --thread       OBSOLETE
libgcrypt-pth.la                REMOVED
libgcrypt-pthread.la            REMOVED
GCRYCTL_SET_THREAD_CBS          NEW
struct gcrypt_thread_cbs        NEW
enum gcry_thread_option         NEW
GCRY_THREAD_OPTION_PTH_IMPL     NEW
GCRY_THREAD_OPTION_PTHREAD_IMPL NEW

Changes 1.1.93
 * The automatic thread library detection has finally been removed.
   From now on, only linking explicitely to libgcrypt, libgcrypt-pth
   or libgcrypt-pthread is supported.
2004-05-22 10:07:48 +00:00
adam
b50fe994c1 Changes 0.2.10
- Added scripts to assist in libtasn1 version detection
  from configure scripts.
- Corrected a DER decoding bug which was reported
  by Max Vozeler <max@hinterhof.net>.

Changes 0.2.9
- Accept negative numbers as range in INTEGER declarations

Changes 0.2.8
- Add asn1_delete_element function
2004-05-22 07:30:03 +00:00
reed
a6877657cc Only use the NetBSD-specific MESSAGE.urandom for NetBSD.
It says to use "pseudo-device   rnd" kernel configuration.

TODO: if the above instructions are fine for other
operating systems with /dev/urandom then add.
2004-05-21 23:00:23 +00:00
reed
ec087dd4e3 The makefile had a comment saying PAM authentication causes memory
faults, and haven't tracked down why yet.

No allow PAM authentication if Linux (and USE_PAM is defined).

This will close my 20846 PR from March 2003.

Also, install the contrib/sshd.pam.generic file as the example
sshd.pam instead of the FreeBSD version, but this okay since
it was commented out in the first place.

TODO: test the PAM support on other platforms and allow
if USE_PAM is defined.
2004-05-21 22:54:43 +00:00
tron
f9bf086fdc Require at least version 2.0.10 of the "nessus-libraries" package because
"nessus-core" won't build otherwise.
2004-05-20 12:49:09 +00:00
kim
aecc988438 Use -lcrypto with Heimdahl if it exists.
Fixes PR pkg/25623
2004-05-19 19:26:38 +00:00
adam
07df3126c4 Changes 2.0.10a:
* Fixed MacOS X portability issues
* Non-intrusive OS-fingerprinting (based on xprobe's techniques)
* DNS fingerprinting
* killall -1 nessusd does not restart the bpf server on BSD systems
* longer connect() timeout for TCP sockets
* Fixed hydra.nes
* WWW fingerprinting
* IP addresses are now sorted in EVERY reports
* Automagically rewrite banners to handle distributions which do
  backporting of security fixes (ie: Debian)
2004-05-19 16:22:58 +00:00
adam
4934300fe2 /usr/adam/nessus.txt 2004-05-19 16:22:28 +00:00
jlam
607a14a4c9 There is no ${PREFIX}/include/kerberosIV directory as part of this package. 2004-05-18 01:03:18 +00:00
seb
00cc0486ea Garbage collect BUILDLINK_PKGBASE.<pkg> from buildlink3: it is not anymore
used since revision 1.139 of mk/buildlink3/bsd.buildlink3.mk.
2004-05-17 21:32:33 +00:00
reed
d76aeb8d58 Add explanation of -v switch to man page. (Okay'd by agc@.)
audit-packages version is now 1.31.
2004-05-17 19:28:19 +00:00
danw
a21b0411de add USE_GNU_TOOLS+=make so that libsasldb.a gets built correctly.
(Nothing in the build actually uses the static version of the library,
and it doesn't get installed either, so this has no effect beyond
making the build not bomb out on Darwin, pkg/25575).
2004-05-16 17:07:22 +00:00
xtraeme
504cabc879 Fix HOMEPAGE. 2004-05-16 00:10:23 +00:00
wiz
e14492c1d1 Grammar fixes. 2004-05-16 00:07:48 +00:00
xtraeme
a15e419a49 Added sign-1.0.4. 2004-05-16 00:02:11 +00:00
xtraeme
230fe11d67 Initial import of sign-1.0.4.
sign is a file signing and signature verification utility.

It's main purpose is to be a simple and convenient extension to a tar/gz/bzip2
line of tools that performs file integrity and authenticity checks. It's small
and simple, it does just one thing and hopenfully does it well.

It is distributed under the BSD license.
2004-05-16 00:00:28 +00:00
jmmv
37e8e2efe0 Update to 0.2.1: new and updated translations. 2004-05-15 11:33:28 +00:00
ben
3579498808 General package cleanup. Points of interest:
* change ${PREFIX}/lib to ${PREFIX}/libexec (like uvscan)
* change ${PREFIX}/share/doc/html to ${PREFIX}/share/doc
* change ${SED} to SUBST framework
* add DIST_SUBDIR because distfile changed without name change
* add SUPPORT_FILES from PKGINSTALL framework
* add patch-aa to deal with NetBSD mkdir() behavior, specifically the new
	directory argument may not have a trailing backslash.
2004-05-13 18:48:32 +00:00
xtraeme
2f623fc19d Sort. 2004-05-13 04:53:03 +00:00
wiz
e6e122be55 Unused. 2004-05-12 08:22:06 +00:00
wiz
e1c0bff613 Unused. 2004-05-11 21:01:05 +00:00