20041207_3securityΣ=9 20041207_3Version of this port present on the latest quarterly branch.
DEPRECATED: 15+ years old and broken on multiple versions This port expired on: 2022-03-31 IGNORE: is marked as broken on FreeBSD 12.2: variable has incomplete type 'X509_STORE_CTX' (aka 'struct x509_store_ctx_st')
There is no maintainer for this port.
Any concerns regarding this port should be directed to the FreeBSD Ports mailing list via ports@FreeBSD.org
This is isakmpd, a BSD-licensed ISAKMP/Oakley (a.k.a. IKE)
implementation. It's written by Niklas Hallqvist and Niels Provos,
funded by Ericsson Radio Systems AB.
WWW: http://www.openbsd.org/
cleanup: Remove expired ports:
2022-03-31 security/revealrk: Deprecate, marked BROKEN on 12+ in 2018
2022-03-31 devel/apache-commons-modeler: Abandoned upstream, last release in
2013
2022-03-31 security/afl: Abandoned upstream, no new release since 2017. Please
consider using security/afl++ instead
2022-03-31 www/mod_line_edit: Abandoned upstream, last release in 2006, Apache
includes mod_sed
2022-03-31 www/myfaces: Unsupported by upstream, released in 2005
2022-03-31 www/mod_backtrace: Abandoned upstream in 2012 (version 2.0)
2022-03-31 security/base: Broken with PHP 7+, forked here
https://github.com/NathanGibbs3/BASE/
2022-03-31 security/find-zlib: Deprecated, no longer relevant
2022-03-31 security/razorback-clamavNugget: Abandonware, last release in 2012
and listed as alpha quality by upstream
2022-03-31 security/shimmer: Abandonware, last release in 2008
2022-03-31 security/kripp: Abandonware, upstream returns 404 and last release
was back in 2007
2022-03-31 security/ipfilter2dshield: Abandonware, no word of it on upstream web
site
2022-03-31 security/sha: Obsolete, we have tools in base
(Only the first 15 lines of the commit message are shown above )
security/*: Deprecate and mark ports BROKEN that are dead upstream and/or
abandonware
security/afl - Migrate to security/afl++
security/amap - Abandoned upstream, last release 10+ years ago
security/amavis-stats - Upstream is dead and last release was back in 2005
security/arirang - Abandoned (website also refers to Ruby 1.9) and a 9+ year
old webserver security scanner isn't useful today
security/axTLS - Very outdated and abandoned, current version in tree was
released in 2013 and last by upstream in 2019
security/base - Broken with PHP 7+, forked here
https://github.com/NathanGibbs3/BASE/
security/bruteforceblocker - Abandonware, please consider using
security/sshguard
security/cfs - Deprecated upstream, reference:
https://www.bayofrum.net/cgi-bin/fossil/cfs/index
security/cisco-torch - Unfetchable, dead upstream
security/cp2fwb - Used with deprecated software Firewall Builder
security/dcetest - Targets deprecated protocol by Microsoft in favour of .NET
security/doscan - Abandonware, last release in 2014. Please consider using
security/masscan or sysutils/pnscan
security/find-zlib - Deprecated, no longer relevant
(Only the first 15 lines of the commit message are shown above )
The output of tools like awk, date, sort, tr,... depends on the current
locale set by the user. Add LANG=C and LC_ALL=C at the beginning of
bsd.port.mk and export them so all commands are executed with the C locale.
LC_ALL=C overrides all other LC_* variables. LANG is used by setlocale(3)
as default value for LC_* variables, so normally it isn't used when LC_ALL
is set, but there's code out there that looks at LANG directly so it's safer
to set it as well. The only commands not captured by this are !=
assignments before any inclusion of bsd.port.*mk.
Introduce USE_LOCALE=<locale> that adds LANG=<locale> and LC_ALL=<locale> to
CONFIGURE_ENV and MAKE_ENV so upstream build systems can be executed with a
different locale (e.g. USE_LOCALE=en_US.UTF-8).
PR: 215882
Exp-run by: antoine
Approved by: portmgr (antoine)
Fix problem introduced in r302141. The directory for the unpacked source
files is unversioned, so it conflicts with the name of the rc.d script in
WRKDIR after SUB_FILES is applied.
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
- Fix build with newer openssl (>= 0.9.8b)
- Fix build after FAST_IPSEC removal on 7.x and 8.x
PR: ports/111430
Submitted by: Dan Lukes <dan at obluda.cz>
- Make it work on 64-bit systems.
- Avoid the build failing when OpenSSL is installed as a port too.
PR: ports/94921
Submitted by: Mats Palmgren <mats.palmgren@bredband.net>
Return this port to the pool.
I don't use isakmpd enough to care enough about maintaining this port
properly. It really should be upgraded to a new snapshot, unfortunatly
this is non-trivial work since the compat code was removed upstream.
- Install an isakmpd rc.d startup script based on the ike startup script
in the base system. [1]
- Do not quote BROKEN.
- Remove USE_REINPLACE, when I'm here anyway.
Postponed for way to long by: simon [1]
Force C locale during build, since the isakmpd build system is not
locale safe.
This should fix the build for locales like German and Hungarian where
the tr(1) misuse "tr '[a-z]' '[A-Z]'" does not work.
Add SHA256 checksum when I'm modifying the port anyway.
Reported by: Harald Schmalzbauer, Zahemszky Gabor
Should have been fixed long ago by: simon
Forced commit to note that the new isakmpd snapshot is of course from
the OpenBSD 3.6 branch and not the OpenBSD 2.6 branch as I accidently
stated in the last commit.
Noticed by: remko
- Update to a new snapshot from the OpenBSD 2.6 branch dated 20041207
which, among many other things, fixes the know security
vulnerabilities.
- Remove some notes about tracking NetBSD, since the port does not do
that anymore.
- Remove out-of-date information from pkg-descr.
- Take maintainership.
Approved by: nectar
- Fix the "duplicate script for target <...> ignored" warnings on -current
caused by ${WRKSRC}/Makefile.
- Fix the "extra tokens at end of #else directive" warnings in
${WRKSRC}/sysdep/freebsd/sysdep-os.h on -current.
- Fix some format strings in ${WRKSRC}/conf.c and ${WRKSRC}/sa.c for 64 bit
systems (obtained from NetBSD).
- Move the delta patching ${WRKSRC}/Makefile from patch-ab (priviously
patching ${WRKSRC}/samples/Makefile and ${WRKSRC}/Makefile) to patch-aa
(patching ${WRKSRC}/Makefile).
- Build and install certpatch(8), a quite usefull tool to add subjectAltName
identities to X.509 certificates.
Submitted by: Marius Strobl <marius@alchemy.franken.de>
isakmpd pcap support is broken
The isakmpd port comes with a pcap.h that is not compatible
with the FreeBSD pcap.h. As a result, the pcap file written
by isakmpd has an incorrect 'linktype' in the header. Thus,
if one tries to use the pcap file with a FreeBSD tool like
tcpdump, the packets are incorrectly (read: not at all)
decoded.
PR: ports/55940
Submitted by: James E. Flemer <jflemer@alum.rpi.edu>
