summaryrefslogtreecommitdiff
path: root/security/ipsec-tools (follow)
Commit message (Collapse)AuthorAgeFilesLines
* When linking a library libA with a library libB using libtool, if libB.laTijl Coosemans2014-04-231-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | exists, libtool will add all libraries libB.la refers to (dependency_libs field) to the linker command line and store them in the dependency_libs field of libA.la. So everything that subsequently links with libA will also link to these extra libraries. This causes too much overlinking. This commit modifies Mk/Uses/libtool.mk so it empties the dependency_libs field in .la libraries during staging. However, because .la libraries have very limited use when dependency_libs is empty it makes sense to completely remove them during staging. So with this commit USES=libtool is modified to remove .la libraries and a new form (USES=libtool:keepla) is introduced in case they need to be kept (dependency_libs is still emptied). PORTREVISION is bumped on all ports with USES=libtool that install .la libraries. Most ports are also changed to add :keepla because .la libraries have to be kept around as long as there are dependent ports with .la libraries that refer to them in their dependency_libs field. In most cases :keepla can be removed again as soon as all dependent ports that install .la libraries have some form of USES=libtool added to their Makefile. PR: ports/188759 Exp-run: bdrewery Approved by: portmgr (bdrewery)
* Restore vanhu as maintainer: bounce was due to mail configuration error.Mark Linimon2014-04-221-1/+1
|
* Reset vanhu@netasq.com: email bounces.Mark Linimon2014-04-221-1/+1
|
* Fix build with clang 3.4Baptiste Daroussin2014-02-171-1/+1
|
* Remove CFLAGS unsupported by ancient gcc and just remove -Werror to have the ↵Baptiste Daroussin2014-02-111-3/+3
| | | | | | code build with clang Reported by: olgeni
* Fix build with clang,Baptiste Daroussin2014-02-102-3/+9
| | | | | Convert to USES=libtool Strip binaries
* security/ipsec-tools: update to 0.8.1William Grzybowski2013-10-293-28/+16
| | | | | | | | | - Update to 0.8.1 [1] - Allow staging [1] - Remove FreeBSD < 8.x message PR: ports/182758 [1] Submitted by: Kurt Jaeger <fbsd-ports opsec.eu>
* Add NO_STAGE all over the place in preparation for the staging support (cat: ↵Baptiste Daroussin2013-09-201-0/+1
| | | | security)
* - Fix a typo in PORT_OPTIONS conversionAntoine Brodin2013-06-132-1/+3
| | | | - Create configuration directory we try to remove on uninstall
* - Convert USE_ICONV=yes to USES=iconvMarcus von Appen2013-04-271-1/+1
| | | | | - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig and USE_GETTEXT=yes to USES=gettext while here
* Convert vanhu@ ports to new options frameworkBaptiste Daroussin2013-01-091-38/+36
| | | | | | Removed optionnal dependency on the deprecated py-visual for net/scapy Approved by: maintainer (vanhu)
* Move the rc.d scripts of the form *.sh.in to *.inDoug Barton2012-08-052-1/+1
| | | | | | Where necessary add $FreeBSD$ to the file No PORTREVISION bump necessary because this is a no-op
* Apply utmp patch from ${FILESDIR} (not files) if OSVERSION < 900007Jason Helfman2012-01-251-2/+2
| | | | | Spotted by: Jason Hellenthal <jhell at DataIX.net> Approved by: crees,rene (mentors,implicit)
* In the rc.d scripts, change assignments to rcvar to use theDoug Barton2012-01-141-1/+1
| | | | | | | | | | | literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar(). In cases where I had to hand-edit unusual instances also modify formatting slightly to be more uniform (and in some cases, correct). This includes adding some $FreeBSD$ tags, and most importantly moving rcvar= to right after name= so it's clear that one is derived from the other.
* Fix the rc.d script to avoid unconditional code execution,Doug Barton2011-07-212-18/+26
| | | | and various other cleanups.
* - Fix startup script rc.d/racoon.Stephen Montgomery-Smith2011-07-192-2/+3
| | | | | | | | - Bump portrevision. PR: ports/148605 Submitted by: John Hein <jhein@symmetricom.com> Approved by: maho (mentor) and vanhu@netasq.com (maintainer)
* - update to 0.8.0Florian Smeets2011-03-234-85/+78
| | | | | PR: ports/155883 Submitted by: vanhu (maintainer)
* Sync to new bsd.autotools.mkAde Lovett2010-12-041-1/+1
|
* Begin the process of deprecating sysutils/rc_subr byDoug Barton2010-03-271-1/+1
| | | | s#. %%RC_SUBR%%#. /etc/rc.subr#
* - Mark BROKEN on HEAD: fails to build with new utmpxMartin Wilke2010-03-201-0/+4
| | | | Reported by: pointyhat
* - Update to 0.7.3Martin Wilke2009-08-262-4/+4
| | | | | PR: 137966 Submitted by: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)
* -Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.Jeremy Messenger2009-08-021-1/+1
| | | | | | | | | | | | | | | | | | -Update libtool and libltdl to 2.2.6a. -Remove devel/libtool15 and devel/libltdl15. -Fix ports build with libtool22/libltdl22. -Bump ports that depend on libltdl22 due to shared library version change. -Explain what to do update in the UPDATING. It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop and applications in the runtime. With help: marcus and kwm Pointyhat-exp: a few times by pav Tested by: pgollucci, "Romain Tartière" <romain@blogreen.org>, and a few MarcusCom CVS users. Also, I might have missed a few. Repocopy by: marcus Approved by: portmgr
* Fix a few "bad example" problems in the rc.d scripts that have beenDoug Barton2009-07-151-9/+2
| | | | | | | | | | | | | | | | | | | | propogated by copy and paste. 1. Primarily the "empty variable" default assignment, which is mostly ${name}_flags="", but fix a few others as well. 2. Where they are not already documented, add the existence of the _flags (or other deleted empties) option to the comments, and in some cases add comments from scratch. 3. Replace things that look like: prefix=%%PREFIX%% command=${prefix}/sbin/foo to just use %%PREFIX%%. In many cases the $prefix variable is only used once, and in some cases it is not used at all. 4. In a few cases remove ${name}_flags from command_args 5. Remove a long-stale comment about putting the port's rc.d script in /etc/rc.d (which is no longer necessary). No PORTREVISION bumps because all of these changes are noops.
* - Update to 0.7.2. This release fixes a remote DoS bug with IKEWesley Shields2009-04-232-4/+4
| | | | | | | fragmentation reassembly. PR: ports/133922 Submitted by: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)
* Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.Rong-En Fan2008-08-211-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases. To workaround this issue, many ports hack the CONFIGURE_TARGET variable so that it contains the ``--build='' prefix. To solve this issue, under the fact that some ports still have configure script generated by the old autoconf, we use runtime detection in the do-configure target so that the proper argument can be used. Changes to Mk/*: - Add runtime detection magic in bsd.port.mk - Remove CONFIGURE_TARGET hack in various bsd.*.mk - USE_GNOME=gnometarget is now an no-op Changes to individual ports, other than removing the CONFIGURE_TARGET hack: = pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables) - comms/gnuradio - science/abinit - science/elmer-fem - science/elmer-matc - science/elmer-meshgen2d - science/elmerfront - science/elmerpost = use x86_64 as ARCH - devel/g-wrap = other changes - print/magicfilter GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf Total # of ports modified: 1,027 Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes) PR: 126524 (obsoletes 52917) Submitted by: rafan Tested on: two pointyhat 7-amd64 exp runs (by pav) Approved by: portmgr (pav)
* Add an WITH_LDAP optionTilman Keskinoz2008-08-011-3/+11
| | | | | | | | enable hybrid, xauth and mode-cfg per default PR: 125748 Submitted by: Matthew Grooms Approved by: vanhu (maintainer)
* - Update to 0.7.1Beech Rintoul2008-07-253-44/+4
| | | | | PR: ports/125957 Submitted by: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)
* Fix build on 7.x when RC5 support is enabled.Tom McLaughlin2008-07-071-0/+40
| | | | | | PR: 103084, 122187 Submitted by: Dmitry A Grigorovich Approved by: maintainer
* - Fix: Have the racoon startup script [optionally] create its required dirs.Beech Rintoul2008-07-021-0/+5
| | | | | | PR: ports/117128 Submitted by: John Hein <jhein@timing.com> Approved by: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)
* Remove always-false/true conditions based on OSVERSION 500000Edwin Groothuis2007-10-041-4/+0
|
* Update to 0.7Tilman Keskinoz2007-09-026-60/+6
| | | | | PR: 115978 Submitted by: VANHULLEBUS Yvan <vanhu@netasq.com>
* - Remove the DESTDIR modifications from individual ports as we have a new,Gabor Kovesdan2007-08-041-1/+1
| | | | | | | fully chrooted DESTDIR, which does not need such any more. Sponsored by: Google Summer of Code 2007 Approved by: portmgr (pav)
* - Revert changes to patch-configure. It was slipped in when committingRong-En Fan2007-07-031-19/+6
| | | | | | | fix for gcc 4.x Noticed by: sat Approved by: maintainer (implicit)
* - Fix build with gcc 4.xRong-En Fan2007-07-025-11/+65
| | | | | | | | - While I'm here, remove extra empty line in distinfo PR: ports/113383 Submitted by: rafan Approved by: VANHULLEBUS Yvan <yvan.vanhullebus at netasq.com> (maintainer)
* - Version 0.6.7 of ipsec-tools is out, which fixes an easy to exploitCheng-Lung Sung2007-04-073-14/+5
| | | | | | | | Denial of Service (CVE-2007-1841). PR: ports/111319 Submitted by: maintainer (VANHULLEBUS Yvan) Security: CVE-2007-1841
* Use libtool port instead of included version to avoid objformat a.out botchKris Kennaway2007-02-011-0/+1
|
* - An option to force NATT functionalityAndrew Pantyukhin2006-12-041-3/+7
| | | | | | | | | - Sneak in master sites beautification and use_ldconfig while I'm here PR: ports/105488 Submitted by: bz Approved by: VANHULLEBUS Yvan <yvan.vanhullebus@netasq.com> (maintainer)
* - There should be only one site in the WWW line and kame is obsolete anywayAndrew Pantyukhin2006-08-161-1/+1
|
* - Add patch for people having trouble compiling OpenSSL bitsPav Lucistnik2006-06-201-0/+10
| | | | | | PR: ports/97442 Submitted by: Dmitry Andrianov <dimas@dataart.com> Approved by: VANHULLEBUS Yvan <yvan.vanhullebus@netasq.com> (maintainer)
* - Update to 0.6.6Pav Lucistnik2006-06-162-6/+5
| | | | | PR: ports/98902 Submitted by: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)
* Makefile:Renato Botelho2006-05-035-20/+221
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - introduce OPTIONS to enable/disable features - add more features to the OPTION dialog - choose reasonable defaults for OPTIONS (disabled patented stuff) - remove usesless WRKSRC line - move LDFLAGS to the place where it is necessary - extend CONFIGURE_ARGS to set the directory for the adminport socket * Note: racoonctl is useless without adminport enabled * create the socket dir in post-install - bump PORTREVISION that users notice the changes - finally: remove one item from the TODO list on top of the Makefile ;) pkg-descr: - shortened by one line to please portlint pkg-plist: - slight reorganization - add create instructions for the adminport socket dir for the "installing from package" case - add removal instructions for the adminport socket dir files/patch-configure: - add some stuff to detect libiconv when the GSSAPI OPTION is enabled - iconv is required for GSSAPI but the library is not added to LIBS in the original configure script - Why not use USE_AUTOTOOLS and patch configure.ac? * because the leads to configure running twice which is useless overhead. I found no way to avoid this so we patch configure. files/racoon.sh.in: - add the adminsocket directory to required_dirs PR: ports/96368 Submitted by: Joerg Pulz <Joerg.Pulz@frm2.tum.de> Approved by: maintainer
* Conversion to a single libtool environment.Ade Lovett2006-02-232-3/+5
| | | | Approved by: portmgr (kris)
* Remove the FreeBSD KEYWORD from all rc.d scripts where it appears.Doug Barton2006-02-201-1/+1
| | | | | | | We have not checked for this KEYWORD for a long time now, so this is a complete noop, and thus no PORTREVISION bump. Removing it at this point is mostly for pedantic reasons, and partly to avoid perpetuating this anachronism by copy and paste to future scripts.
* - Update to 0.6.5Simon Barner2006-02-063-16/+4
| | | | | Submitted by: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer) PR: ports/92838
* Change facility from daemon to security, because daemon.info goes toVasil Dimov2006-01-242-1/+13
| | | | | | | | devnull by default PR: ports/91047 Submitted by: PR: Brian Candler <B.Candler@pobox.com>, patch: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer) Approved by: garga (mentor)
* Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtryEdwin Groothuis2006-01-221-2/+2
| | | | | Approved by: krion@ PR: ports/88711 (related)
* ports/security/ipsec-tools enables itself at startupEdwin Groothuis2006-01-042-1/+2
| | | | | | | | | | | ports/security/ipsec-tools rc.d script defaults to 'enabled' It also installs its own versions of setkey and libipsec.so which seems redundant as they are part of the base system and should be used in preference. Submitted by: Vivek Khera <vivek@khera.org> PR: ports/91317
* Update to 0.6.4Marcus Alves Grando2005-12-133-7/+19
| | | | | PR: 90326 Submitted by: maintainer
* - Change the location of racoon configuration files to /usr/local/etc/racoon,Sam Lawrance2005-12-023-12/+4
| | | | | | | | | | bringing it in line with the old security/racoon port and the handbook [1] - Make use of USE_RC_SUBR instead of home-grown substitution and install - Prevent installation of some intermediate sample configuration files PR: ports/89273 [1] Submitted by: Angelo Turetta <aturetta@bestunion.it> [1] Approved by: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)
* - Update to 0.6.3. It fixes some crashes,Sergey Matveychuk2005-11-212-3/+4
| | | | | | | | including potential DoS in aggressive mode. - Add SHA256 PR: ports/89365 Submitted by: ANHULLEBUS Yvan (maintainer)
generated by cgit v1.2.3 (git 2.25.1) at 2025-12-05 06:31:36 +0000