1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-11 02:50:24 +00:00
Commit Graph

226 Commits

Author SHA1 Message Date
Cy Schubert
c675356816 This is the second part of two commits, the first being r403749.
Adopt the same port structure as used by the cfengine family of ports:

security/krb5 is renamed to security/krb5-114.

A brand new security/krb5 now becomes a master port for the family of
security/krb5-* ports. The default installs krb5-1.14. There is no
functional change to the port build nor does the name of the latest krb5
port and package change. Users can continue to install security/krb5
to track the latest major version of security/krb5.

Users wishing to install a specific version branch of krb5 can continue
to install any of the security/krb5-* ports or by setting KRB5_VERSION
in make.conf make.conf or including the branch on the make command line
during build:

	make KRB5_VERSIN=NNN

make -V VERSIONS lists available versions.

security/krb5-appl has been updated to support this change (also fixing
a typo in the krb5-appl/Makefile).

Inspired by:            sysutils/cfengine
2015-12-15 05:02:21 +00:00
Cy Schubert
05fc46624d Move security/krb5 to security/krb5-114 in preparation for restructuring
of the krb5 faimily of ports.

Inspired by:	the cfengine family of ports
2015-12-15 04:57:48 +00:00
Cy Schubert
a23b98b01a Introduce the new krb5 1.14:
- move (copy) krb5 (krb5 1.13.2) to krb5-113 (new, added)
- update krb5 1.13.2 --> 1.14
- update CONFLICTS in krb5, krb5-112 and krb5-113.
- update krb5-appl to allow optional dependency on krb5-113.
- update security/Makefile with copied krb5-113.
- deprecate and expire krb5-112 (krb5-1.12) on November 20, 2016, as it
  will EOL twelve months after the release of krb5-1.14.
2015-11-21 08:47:13 +00:00
Cy Schubert
fa0fbc575d Add sonames and minor versioned library names.
PR:             203882
2015-10-21 06:59:10 +00:00
Cy Schubert
ba44c33bf8 Bump PORTREVISION. 2015-10-19 07:29:08 +00:00
Cy Schubert
86da5965d8 Fix READLINE option.
Add support for libedit (LIBEDIT option).
Both command line editing options now supported by RADIO button.
2015-10-19 07:13:33 +00:00
Cy Schubert
98aeeda5c9 Remove configuration argument used during testing. 2015-08-31 13:01:52 +00:00
Cy Schubert
d12bdd828a Fix build under 11-CURRENT. r378417 introduced a libreadline link
workaround due to libtool not working with 11-CURRENT at the time.
The workaround now causes grief under 11-CURRENT and needs to be
removed.

PR:		202782
2015-08-31 07:18:23 +00:00
Cy Schubert
9c8a8cdb81 MIT KRB5 ports build unusable binaries due to incorrect linking
when build under poudriere. This commit fixes that.
2015-06-06 20:27:21 +00:00
Cy Schubert
3ca2da65de Fix armv5 build.
PR:		200100
Submitted by:	mikael.urankar@gmail.com
2015-05-10 15:16:07 +00:00
Cy Schubert
af16292e0f Update 1.13.1 --> 1.13.2 2015-05-09 13:12:58 +00:00
Tijl Coosemans
68edbeeaae - Display a stage-qa warning when ports use PREFIX/var instead of /var
- Add --localstatedir=/var to _LATE_CONFIGURE_ARGS (like --mandir) but not
  when CONFIGURE_ARGS already sets it.  (GNU configure scripts set it to
  PREFIX/var when PREFIX != /usr.)
- Add --localstatedir="${PREFIX}/var" to CONFIGURE_ARGS in some ports so
  they aren't affected by this change (for now at least).  This commit is
  meant to ensure that new ports don't make the same mistake.

- games/acm: the configure script in this port is very old; instead of
  patching it more, just replace GNU_CONFIGURE with HAS_CONFIGURE.
- irc/charybdis: it already used /var but adding --localstatedir=/var
  changed the behaviour of the configure script; adjust the port to this.

PR:		199506
Exp-run by:	antoine
Approved by:	portmgr (antoine)
2015-04-20 19:06:29 +00:00
Cy Schubert
ab12785698 dvertise CPE data for Kerberos.
PR:		197465
2015-03-05 18:49:28 +00:00
Cy Schubert
fd26b4ca89 Fix broken rpath.
Submitted by:	hrs
2015-02-20 20:59:08 +00:00
Cy Schubert
dd34b776d1 Update 1.13 --> 1.13.1, incorporates MITKRB5-SA-2015-001 (committed in
r378417).
2015-02-13 01:27:17 +00:00
Cy Schubert
640b0b330c Fix gcc5 build for DragonFly BSD.
PR:		197561
Submitted by:	marino
2015-02-12 21:15:15 +00:00
Cy Schubert
b896d782dd Correct various packaging issues:
- Libraries are not installed stripped;
 - pkgconfig files should be installed to libdata;
 - Use of deprecated @dirrm[try]

PR:		PR/197338
Submitted by:	delphij
2015-02-05 03:39:14 +00:00
Cy Schubert
a0e8af7e0f Address: krb5 -- Vulnerabilities in kadmind, libgssrpc,
gss_process_context_token VU#540092

CVE-2014-5352: gss_process_context_token() incorrectly frees context

CVE-2014-9421: kadmind doubly frees partial deserialization results

CVE-2014-9422: kadmind incorrectly validates server principal name

CVE-2014-9423: libgssrpc server applications leak uninitialized bytes

Security:	VUXML: 24ce5597-acab-11e4-a847-206a8a720317
Security:	MIT KRB5: VU#540092
Security:	CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423
2015-02-04 20:47:04 +00:00
Antoine Brodin
9cb1f86730 - Remove support for EXTRACT_PRESERVE_OWNERSHIP
- Update a few comments related to extract

Differential Revision:	https://reviews.freebsd.org/D1189
With hat:	portmgr
2014-12-14 11:44:24 +00:00
Cy Schubert
632d308662 Fix LATEST_LINK. 2014-10-18 17:05:55 +00:00
Cy Schubert
a28880acce MIT Kerberos released 1.13; 1.12 becomes a maintenance release,
1.11 remains a maintenance release.

- Update security/krb5 1.12.2 --> 1.13
- Copy the old security/krb5 1.12.2 to security/krb5-112
  (now a maintenance release supported by MIT)
- Move the old krb5-maint (1.11.5: old maintenance release) to
  security/krb5-111 (the old maintenance release still supported by MIT)
2014-10-16 19:44:22 +00:00
Cy Schubert
5b227e8cf8 Update 1.12.1 --> 1.12.2.
Add readline non-default option.
2014-08-13 18:32:02 +00:00
Adam Weinberger
1c30911ff0 Rename security/ patches to reflect the files they modify. 2014-07-29 14:30:10 +00:00
Tijl Coosemans
37f54e0f66 net/openldap24-*:
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD

databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip

databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample

databases/libgdamm:
- Drop :keepla
- USES=tar:bzip2
- Use INSTALL_TARGET=install-strip

databases/libgdamm5:
- Add INSTALL_TARGET=install-strip
- Drop --enable-static (inherited from old repocopy)

devel/anjuta x11-toolkits/py-gnome-extras:
- Drop :keepla

dns/powerdns dns/powerdns-devel:
- Convert to USES=libtool
- Add INSTALL_TARGET=install-strip
- Disable static modules
- Stop creating library symlinks with .0 suffix, not needed for dynamically
  opened modules

mail/dovecot2:
- Add USES=libtool

mail/dovecot2-pigeonhole:
- Drop CONFIGURE_TARGET (incorrect for Dragonfly)
- Add USES=libtool and INSTALL_TARGET=install-strip

math/gnumeric:
- USES=libtool tar:xz

Approved by:	portmgr (implicit, bump unstaged ports)
2014-07-24 18:34:16 +00:00
Cy Schubert
8e4681c7b4 Fix build when KRB5_HOME != LOCALBASE.
Submitted by:	hrs
2014-05-27 19:59:41 +00:00
Cy Schubert
c6ba72e6a0 Allow package build (make stage/make package) for non-root user.
Submitted by:	John Hein <john.hein@microsemi.com>
2014-05-06 04:04:30 +00:00
Cy Schubert
8c83d17a73 Finely tune KRB5_HOME test when using LIB_DEPENDS. in the case when
KRB5_HOME is set to LOCALBASE.
2014-04-24 03:53:30 +00:00
Cy Schubert
e39f034c5a Remove extraneious MAN assignments. 2014-04-23 02:55:24 +00:00
Brad Davis
1b1f758c54 - Add a startup script for kpropd
PR:		183502
Submitted by:	brd@
Approved by:	bdrewery@
2014-04-21 15:55:07 +00:00
Cy Schubert
e68317caf2 Fix new patch.
Point hat to:	self
2014-04-19 03:45:40 +00:00
Cy Schubert
c09eb9c5cd KRB5_HOME no longer works with LIB_DEPENDS. Mark broken when set. 2014-04-18 02:21:57 +00:00
Cy Schubert
6149f653b7 1. Fix build when using clang 3.4.
2. RTM_OLDADD and RTM_OLDDEL were removed from -stable. Thanks alfred@ for
   this patch.
3. Stagify.

Submitted by:	alfred (#2)
2014-04-17 20:06:32 +00:00
Cy Schubert
f9e42e587b Update 1.12 --> 1.12.1 2014-01-16 13:49:42 +00:00
Cy Schubert
da068efd24 Update krb5 to 1.12. Security/krb5 tracks MIT KRB5 current release.
Adjust the newly created krb5-maint with a new portname and conflicts.
Krb5-maint is a maintenance release for those who wish to use the previous
release of krb5. krb5-maint remains at 1.11.3.

Adjust CONFLICTS in security/heimdal and security/srp to account for the
newly repocopied krb5-maint.

Adjust security/Makefile to include krb5-maint.
2013-12-12 05:19:57 +00:00
Cy Schubert
8250beb020 pkg-plist fixup. 2013-12-11 20:50:17 +00:00
Cy Schubert
a8a9c98a14 Add LDAP support.
PR:		184557
Submitted by:	Erick Turnquist <jhujhiti@adjectivism.org>
2013-12-11 03:45:23 +00:00
Baptiste Daroussin
a65ed2e51b Add NO_STAGE all over the place in preparation for the staging support (cat: security) 2013-09-20 22:55:24 +00:00
Baptiste Daroussin
f56f112403 Convert to new perl framework
Convert USE_GMAKE to USES=gmake
2013-09-16 16:58:41 +00:00
Antoine Brodin
45ab3998d9 Add an empty directory created by the port to pkg-plist
Approved by:	portmgr (miwi)
2013-06-21 16:40:56 +00:00
Cy Schubert
fd0bfa7a6d Update krb5 1.11.2 --> 1.11.3.
This is a bugfix release.

* Fix a UDP ping-pong vulnerability in the kpasswd (password changing)
  service.  [CVE-2002-2443]

* Improve interoperability with some Windows native PKINIT clients.

Security:	CVE-2002-2443
2013-06-04 04:45:22 +00:00
Alex Kozlov
e159824929 - Convert USE_GETTEXT to USES (part 3)
Approved by:	portmgr (bapt)
2013-04-24 18:10:30 +00:00
Cy Schubert
9a7f529315 Update 1.11.1 --> 1.11.2
Major changes in 1.11.2 (2013-04-12)
====================================

This is a bugfix release.

* Incremental propagation could erroneously act as if a slave's
  database were current after the slave received a full dump that
  failed to load.

* gss_import_sec_context incorrectly set internal state that
  identifies whether an imported context is from an interposer
  mechanism or from the underlying mechanism.

Feature safe:	yes
2013-04-17 00:41:37 +00:00
Carlo Strub
f87124df63 - Remove A/An in COMMENT
- Trim Header where applicable
2013-03-29 19:33:41 +00:00
Cy Schubert
c886643ab6 Reset ulog if database load failed.
Avoids a slave reporting it is current when a full resync fails.

Obtained from:	https://github.com/rbasch/krb5/commit/2ef5ae0607d1c317a936e439b4be7a6f5184dc
2013-03-05 16:10:39 +00:00
Cy Schubert
2dcaa3f892 Update 1.11 --> 1.11.1.
Security:	Fix a null pointer dereference in the KDC PKINIT code [CVE-2013-1415].
2013-02-22 20:03:17 +00:00
Cy Schubert
ace0474fa7 Fix verto.h missing build error on some systems.
The following contributed by mandree@:
	- Header standardization.

	- Make use of OptionsNG.

	- Make portlint happy.
2013-01-24 14:15:26 +00:00
Cy Schubert
734550f60d Update 1.10.3 --> 1.11 2013-01-22 04:03:17 +00:00
Cy Schubert
823cac2328 Fix plist.
Feature safe:	yes
2012-11-04 02:10:49 +00:00
Cy Schubert
132c8dd868 Update krb5 1.9.2 --> 1.10.3
Feature safe:	yes
2012-11-03 18:59:37 +00:00
Cy Schubert
dac3936a56 Fix build of security/krb5 with clang.
PR:		169740
Submitted by:		Niclas Zeising <zeising@daemonic.se>
2012-07-09 19:20:09 +00:00