Rosenpass implements a post-quantum-secure key exchange in the spirit of
a Noise protocol. The motivating use case is integrating with the
WireGuard VPN: In this mode, the key generated by Rosenpass is supplied
to WireGuard as its pre-shared symmetric key (PSK). This results in a
WireGuard VPN connection with hybrid post-quantum security.
While Rosenpass is designed with WireGuard in mind, it can be used as a
stand-alone tool to exchange keys. Using this mode, it can be used to
secure other protocols against attacks from quantum computers, given
that they offer using a PSK, and that a secure PSK is sufficient for
security of the protocol. To use this mode, the rosenpass binary must be
used together with the outfile <FILE> parameter. Then, Rosenpass will
write a key to the given file every two minutes, and print a message on
standard out to notify the user or the calling script that the key has
changed.
The implementation is written in Rust but uses libsodium and liboqs --
both of which are C libraries. This does not result in pretty code
everywhere, but enables some advanced security features such as using
libsodium's sodium_malloc. We use a couple of techniques to make sure
the code is secure: We use variable colouring (gating use of a secret
value through a .secret() method), and the code zeroizes all key
material.
WWW: https://rosenpass.eu
AppJail Director is a tool for running multi-jail environments on
AppJail using a simple YAML specification. A Director file is used
to define how one or more jails that make up your application are
configured. Once you have a Director file, you can create and start
your application with a single command: appjail-director up
WWW: https://github.com/DtxdF/director
PR: 273234
StrictYAML is a type-safe YAML parser that parses and validates a
restricted subset of the YAML specification.
Priorities:
* Beautiful API.
* Refusing to parse the ugly, hard to read and insecure features
of YAML like the Norway problem.
* Strict validation of markup and straightforward type casting.
* Clear, readable exceptions with code snippets and line numbers.
* Acting as a near-drop in replacement for pyyaml, ruamel.yaml or
poyo.
* Ability to read in YAML, make changes and write it out again
with comments preserved.
* Not speed, currently.
WWW: https://hitchdev.com/strictyaml
PR: 273232
TIPP10 is a free 10 finger touch typing trainer, published under the GPL.
The highlight: TIPP10 works intelligent. The dictation reacts on
individual errors of the user. Keys, which are wrongly typed often,
will be dictated more often.
Visual help, various keyboard layouts, numerous settings and the
possibility to create own exercise dictates are easing the learning
process.
Main features:
- Intelligent exercise lessons
- Free and own lessons
- Scrolling text and virtual keyboard for help
- Extensive customization
- Performance appraisal
- Support of alternate keyboard layouts
- Multi platform
WWW: https://www.tipp10.com
PR: 273321
Module allows on-the-fly repackaging of MP4 files to DASH, HDS, HLS, MSS.
It provides following working modes:
- local: serve locally accessible files (local disk/NFS mounted)
- remote: serve files accessible via HTTP using range requests
- mapped - serve files according to a specification encoded in JSON format
PR: 273462
Module parses request body storing all files being uploaded to a directory.
The files are then being stripped from body and altered request is then passed
to a location specified by upload_pass directive, thus allowing arbitrary
handling of uploaded files.
PR: 273462
Module performs both regular expression and fixed string substitutions
on response bodies. This module is quite different from the native
substitution module. It scans the output chains buffer and matches string
line by line, just like Apache's mod_substitute.
PR: 273462
Module extends the standard rewrite's directive set to provide more
functionalities like URI escaping and unescaping, JSON quoting,
Hexadecimal/MD5/SHA1/Base32/Base64 digest encoding and decoding,
random number generator, and more.
PR: 273462
Module provides HLS and MPEG-DASH live streaming capabilities for those who
want a lightweight solution based on the HTTP protocol.
The stream is published in the MPEG-TS format over HTTP.
MPEG-TS is a widely adopted, well known and well documented streaming format.
PR: 273462
Module is designed to extend the Angie core functionality in a way that can be
used as a basis of other modules. It has functions and macros to deal with
generic tasks that don't currently have generic code as part of the core
distribution.
PR: 273462
Module allows to set and clear input and output headers.
This is an enhanced version of the standard headers module because it provides
more utilities like resetting or clearing "builtin headers" like Content-Type,
Content-Length, and Server.
PR: 273462
This module captures subrequest response bodies into variables.
If you want similar (but more powerful) functionalities,
see the www/angie-module-lua instead.
PR: 273462
Module is to be used to obtain responses from a memcached server.
This module is based on the standard memcached module, with some additional
features. Base configuration is identical to the standard module.
PR: 273462
Module brings "echo", "sleep", "time", "exec" and more shell-style goodies
to config file.
It provides various utilities that help testing and debugging of other modules
by trivially emulating different kinds of faked subrequest locations.
PR: 273462
Module adds SPNEGO support to Angie.
It currently supports only Kerberos authentication via GSSAPI and
does not support NTLMSSP in Negotiate.
PR: 273462
Some notable user-facing changes:
* Text-based hash database with -y/--hash-db
* -e/--error-on-dupe flag to terminate immediately if any dupe is found
* -C/--chunk-size now uses KiB instead of bytes (BREAKING CHANGE)
Many thanks to the author for upstream changes made to help simplify the
port.
Additionally this removes the workaround for a strip(1) issue with
LOW_MEMORY builds I can no longer reproduce (bin/269568).
Changelog: https://github.com/jbruchon/jdupes/releases/tag/v1.27.3
PR: 273403
libjodycode is a library containing code shared among several of the programs
written by Jody Bruchon such as imagepile, jdupes, winregfs, and zeromerge.
WWW: https://github.com/jbruchon/libjodycode
PR: 273400
- Patch for upstream issue #532 has been refreshed to appease portlint
- MFH as update contains new pinned CA hashes
- Drop maintainership - I no longer use LastPass
Changelog: https://github.com/lastpass/lastpass-cli/releases/tag/v1.3.5
PR: 273498
MFH: 2023Q3
Restore Matreshka Project, partially, the i386 build is running out of
stack space and failing.
* port{clippy,fmt,lint} maintenance
* switch to new home https://github.com/godunko/matreshka
* update to 21.0
PR: 273241
This turns previous slave-ports net-p2p/transmission-{cli,daemon,gtk,qt,utils}
and www/transmission-web into flavours of net-p2p/transmission.
What's new in 4.0.4 (vis-a-vis 3.00)
* Resource Efficiency: code profiled and improved
* Code Modernization: standardization on C++ tools
* Support for BitTorrent v2 torrents & hybrid torrents
* New web client
* Lots of bug fixes
Changelog: https://github.com/transmission/transmission/releases/tag/4.0.4
PR: 269504
Reported by: dutchman01@quicknet.nl
Approved by: rigoletto, tcberner (maintainer timeout)
Reviewed By: fcharlier_ploup.net
Differential Revision: https://reviews.freebsd.org/D40910
In preparation of the following net-p2p/transmission update.
The library must be updated in lockstep.
PR: 269504
Reported by: dutchman01@quicknet.nl
Approved by: rigoletto, tcberner (maintainer timeout)
Reviewed By: fcharlier_ploup.net
Differential Revision: https://reviews.freebsd.org/D40910
While we are at it:
- remove BROKEN_... lines for FreeBSD versions out of support
- drop homegrown do-install in favour of USES=uidfix
- install kernel module into standard location
- attempt to fix the build on FreeBSD 13
Still doesn't work on FreeBSD 13.2. While it builds, the code now
fails at runtime, apparently when it tries to dereference vnet_entry_ifnet
in the line
IFNET_FOREACH(ifp)
in aoenet_xmitbcast.
PR: 239891
Remove
* files/pkg-deinstall.server.in
* files/pkg-install.server.in
They are not used. They duplicate the actions of the cliemt scripts.
The server requires the client.
PR: 273306
Major changes:
* OCaml 5.0 compatibility
* Some petty optimisation in text output (replace ' '+ '\n' by '\n')
* Correct bug in text mode
Full changelog: https://github.com/maranget/hevea/blob/master/CHANGES
Port changes:
* Reorder variables to make linter happy
Allow a bacula-sd node to use S3 for storage
This uses the recently added sysutils/bacula-libs3 port
While here, also add S3 to bacula13-server
PR: 260171
* Django 4.1 will reach its End-of-Life in December 2023. Deprecate its
consumers and set the expiration date accordingly.
Differential Revision: https://reviews.freebsd.org/D41666
With hat: python
* Django 4.1 will reach its End-of-Life in December 2023. Deprecate it
and set the expiration date accordingly.
Differential Revision: https://reviews.freebsd.org/D41665
With hat: python
* Introduce non-default GIT, LDAP and S3 options.
Changelog since 3.5.9
It contains many bugfixes/enhancements and the following new features:
* Relocated Admin UI Views
* Configurable Default Permissions
* User Bookmarks
* Custom Field Choice Sets
* Pre-Defined Location Choices for Custom Fields
* Restrict Tag Usage by Object Type
https://netbox.readthedocs.io/en/stable/release-notes/version-3.6/
MFH: No (feature release)
