SSH key-based authentication is tried-and-true, but it lacks a true
Public Key Infrastructure for key certification, revocation and
expiration. Monkeysphere is a framework that uses the OpenPGP web of
trust for these PKI functions. It can be used in both directions: for
users to get validated host keys, and for hosts to authenticate users.
===> The following configuration options are available for monkeysphere-0.43_2:
DOCS=on: Build and/or install documentation
===> Use 'make config' to modify these settings
all: drop support for expired FreeBSD 14.0
Simplify expressions for FreeBSD 13.X
Reviewed by: many
Differential Revision: https://reviews.freebsd.org/D46601
*/*: llvm15 build fixes
llvm15 was also merged into 13.2-STABLE effective from OSVERSION
1302505. Fix the ports that failed to build with llvm15.
Approved by: portmgr (blanket)
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Aldis Berjoza <aldis@bsdroot.lv>
* Alex Dupre <ale@FreeBSD.org>
* Alex Kapranoff <kappa@rambler-co.ru>
* Alex Samorukov <samm@freebsd.org>
* Alexander Botero-Lowry <alex@foxybanana.com>
* Alexander Kriventsov <avk@vl.ru>
* Alexander Leidinger <netchild@FreeBSD.org>
(Only the first 15 lines of the commit message are shown above )
security/monkeysphere: update 0.42 to 0.43
* Depend on a modern version of GnuPG (>= 2.1.11) for --export-ssh-key
* Depend on OpenSSH's ssh-keygen directly for most SSH fingerprints
* Depend on OpenSSH >= 6.0 for ed25519 and "sshd -T"
* Use runuser instead of su
* Support Ed25519 authentication-capable subkeys for users
* Use https for all outbound links
* Clean up spelling
* Use 3072 bits for RSA keys everywhere by default
* Provide clearer error message for PEM2OPENPGP_NEWKEY
* Avoid locking out users unnecessarily
https://github.com/dkg/monkeysphere/tree/monkeysphere_0.43
security/monkeysphere: fix BROKEN and DEPRECATED flags. upstream moved to GH
* port's creator (also developer from upstream project) moved to GitHub;
* we now use USE_GITHUB and track the source from there;
* upstream is still getting updates, though not DEPRECATED;
* testport OK: 12, 13 and main (CURRENT/HEAD).
security/*: Deprecate and mark ports BROKEN that are dead upstream and/or
abandonware
security/afl - Migrate to security/afl++
security/amap - Abandoned upstream, last release 10+ years ago
security/amavis-stats - Upstream is dead and last release was back in 2005
security/arirang - Abandoned (website also refers to Ruby 1.9) and a 9+ year
old webserver security scanner isn't useful today
security/axTLS - Very outdated and abandoned, current version in tree was
released in 2013 and last by upstream in 2019
security/base - Broken with PHP 7+, forked here
https://github.com/NathanGibbs3/BASE/
security/bruteforceblocker - Abandonware, please consider using
security/sshguard
security/cfs - Deprecated upstream, reference:
https://www.bayofrum.net/cgi-bin/fossil/cfs/index
security/cisco-torch - Unfetchable, dead upstream
security/cp2fwb - Used with deprecated software Firewall Builder
security/dcetest - Targets deprecated protocol by Microsoft in favour of .NET
security/doscan - Abandonware, last release in 2014. Please consider using
security/masscan or sysutils/pnscan
security/find-zlib - Deprecated, no longer relevant
(Only the first 15 lines of the commit message are shown above )
security/monkeysphere: update 0.41 to 0.42
- Makefile
adopt the port;
pet portlint;
remove comment about 'applying patches' on the post-patch stage;
unmute post-patch.
- files/*
patch src/share/mh/revoke_keys, to use gpg2;
move patch-gpg2 (410 lines), and split it to have separated patches;
regen all patches using makepatch.
Approved by: rene (mentor)
Differential Revision: https://reviews.freebsd.org/D18871
security/monkeysphere: update to 0.4.1
- use gpg 2.* now
- add LICENSE
- use ${CC} instead of gcc (no gcc in default base after 9.x)
- fix bogus *-e files (artifact of incorrect sed -i in old patch)
PR: 215527
Submitted by: John Hein (z7dr6ut7gs@snkmail.com)
Approved by: maintainer timeout (anarcat@koumbit.org 17 days)
SSH key-based authentication is tried-and-true, but it lacks a true
Public Key Infrastructure for key certification, revocation and
expiration. Monkeysphere is a framework that uses the OpenPGP web of
trust for these PKI functions. It can be used in both directions: for
users to get validated host keys, and for hosts to authenticate users.
WWW: http://web.monkeysphere.info/
PR: ports/128406
Submitted by: Daniel Kahn Gillmor <dkg at fifthhorseman.net>
