10:08 Bernard Spil (brnrd) 

security/openssl41: New OpenSSL non-LTS version

This is ALPHA stage software, use for testing
not for production.

    f81f83b

05:34 Xin LI (delphij) 

security/rubygem-doorkeeper-i18n-rails81: add port

Doorkeeper i18n translations for Rails 8.1.

    2132257

05:34 Xin LI (delphij) 

security/rubygem-doorkeeper-rails81: add port

Doorkeeper OAuth 2 provider for Rails 8.1.

    93bef89

13:50 Jimmy Olgeni (olgeni) 

security/vulnx: New port: CLI for exploring vulnerability data

    f02f739

19:34 Nuno Teixeira (eduardo)  Author: Einar Bjarni Halldórsson

security/py-nettacker: New port: Automated penetration testing and
information-gathering framework

- Submitter becomes maintainer

OWASP Nettacker is an open-source, Python-based automated penetration testing
and information-gathering framework designed to help cyber security
professionals and ethical hackers perform reconnaissance, vulnerability
assessments, and network security audits efficiently.

Nettacker automates tasks like port scanning, service detection, subdomain
enumeration, network mapping, vulnerability scanning, credential brute-force
testing making it a powerful tool for identifying weaknesses in networks, web
applications, IoT devices and APIs.

WWW:		https://owasp.org/nettacker
PR:		297892

    7fdb824

06:59 Rene Ladan (rene) 

security/globalprotect-openconnect: Remove expired port

2026-08-31 security/globalprotect-openconnect: This version has a vulnerability
(CVE-2021-45810)

    eaa51b2

05:14 Po-Chuan Hsieh (sunpoet) 

*/Makefile: Sort SUBDIRs

    52b41f3

21:04 Hiroki Tagato (tagattie) 

security/pass-cli: Add port: Command-line interface for Proton Pass

The Proton Pass CLI allows you to manage your Proton Pass vaults and
items directly from the command line, bringing the power of secure
secret management to your terminal workflow. With the CLI, you can
create, list, view, and delete vaults and items seamlessly, making it
an great tool for developers and system administrators who prefer
working in the command line.

Beyond basic vault management, the CLI allows you to inject secrets
into your applications through environment variables or template
files, enabling easy integration with your deployment workflows. The
tool also provides comprehensive SSH integration, allowing you to use
your SSH keys stored in Proton Pass with your existing SSH workflows.

WWW: https://protonpass.github.io/pass-cli/
WWW: https://github.com/protonpass/pass-cli

    e274300

22:29 Jimmy Olgeni (olgeni) 

security/y509: New port: TUI tool for viewing and analyzing X.509 certificate
chains

    5ca7b4b

07:29 Michael Osipov (michaelo) 

security/py-biscuit-auth: Convert build to use PEP 517 and rename to PyPI name

* Rename port to PyPI name according to Python policy
* Move build completely to PEP 517
* Bump consumers: www/bunkerweb/Makefile
* Simplify Python discovery; the build frontend will pass the interpreter

New name: security/py-biscuit-python

Co-authored-by:	Jochen Neumeister <joneum@FreeBSD.org>
PR:		297823
Approved by:	joneum (maintainer)
Differential Revision:	https://reviews.freebsd.org/D59133

    154d8c3

20:33 Rene Ladan (rene) 

security/please: Remove expired port

2026-08-26 security/please: Upstream project has been archived, use doas or sudo
or sudo-rs instead

    ba3ae99

19:34 Michael Osipov (michaelo)  Author: Einar Bjarni Halldórsson

[NEW PORT] security/open-vulnerability-cli: CLI to query various online
vulnerability sources

The open-vulnerability-cli is a command line utility that can be
used to query various online vulnerability sources such as the NVD
or GHSA. The CLI and docker images can be used to mirror the NVD.

Note that the CLI is called vulnz because open-vulnerability-cli
is cumbersome. vulnz is a spring-boot command line utility built
with picocli.

Co-authored-by:	Michael Osipov <michaelo@FreeBSD.org>
PR:		296276

    4e315bd

04:16 Matthias Fechner (mfechner) 

www/gitlab: new ports required for 19.3.0

    8bfcaa8

13:04 Michael Gmelin (grembo) 

security/periodic-filter-vuxml: New port

    2efbc33

11:54 Kenneth Raplee (kenrap)  Author: Hywel Andrews

security/mkcert: New port

A simple tool for making locally-trusted development certificates. It
requires no configuration.

PR:		297301
Co-authored-by:	Kenneth Raplee <kenrap@FreeBSD.org>
Approved by:	arrowd (co-mentor)

    b48efd1

10:47 Matthew Seaman (matthew) 

ssecurity/pam_ssh_agent: New port

pam_ssh_agent is a PAM module for authenticating using ssh-agent.

A PAM authentication module determining the identity of a user based
on a signature request and response sent via the ssh-agent protocol to
a potentially remote ssh-agent.

This project is a re-implementation of the pam_ssh_agent_auth module
but does not share any code with that project. We are pretty close to
covering all the features of the original implementation, along with
some additional features such as authentication using SSH
Certificates.

See also: security/pam_rssh security/pam_ssh_agent_auth

    27006a0

20:36 Rene Ladan (rene) 

security/libprelude: Remove expired port

2026-07-31 security/libprelude: Upstream project is dead

    6f9b432

20:15 Rene Ladan (rene) 

security/proxycheck: Remove expired port

2026-07-31 security/proxycheck: dnsbl.org has been shut down

    ce14ef0

20:04 Rene Ladan (rene) 

security/libpreludedb: Remove expired port

2026-07-30 security/libpreludedb: Upstream project is dead

    efb8c46

07:16 Kai Knoblich (kai) 

security/py-social-auth-core4: New port

This is the core component of the python-social-auth ecosystem, it
implements the common interface to define new authentication backends
to third parties services, implement integrations with web frameworks
and storage solutions.

PR:		297152

    f30b305

19:57 Muhammad Moinur Rahman (bofh) 

security/py-pyxmpp2_scram:  New port

SCRAM implementation from PyXMPP2.

This project contains pyxmpp2.sasl.scram from PyXMPP2, packaged as a
standalone library.

WWW: https://github.com/ProgVal/pyxmpp2-scram/

    eab4e35

10:34 Jimmy Olgeni (olgeni) 

security/keyward: New port: Terminal UI for managing SSH keys and config

    e12562d

22:48 Jochen Neumeister (joneum) 

security/dogtag-jss: Add new Port

Java Security Services provides a Java interface to Mozilla NSS.
It includes a Java security provider and native JNI libraries for
cryptographic operations, certificate handling, and symmetric-key
operations used by Dogtag PKI.

WWW: https://github.com/dogtagpki/jss

Sponsored by:	Netzkommune GmbH

Required for: FreeIPA server port

    72c1306

22:48 Jochen Neumeister (joneum) 

security/gssproxy: Add new Port

GSS Proxy allows processes to perform GSSAPI operations, such as
Kerberos authentication, through a privileged daemon. This separates
credential handling from the application and lets services access
keytabs and credential caches without holding the privileges directly.

WWW: https://github.com/gssapi/gssproxy

Sponsored by:	Netzkommune GmbH

Required for: FreeIPA server port

    9a5411f

13:30 Po-Chuan Hsieh (sunpoet) 

security/py-utls: Add py-utls 2026.5.30

Drop-in replacement for the ssl stdlib with a Fingerprint API for Chrome
impersonation. Built on stock BoringSSL through boring-sys - no vendored
patches, no curl-impersonate, no Go runtime at import time. Use it with any
known Python http client you like or used to.

    aa04365

13:30 Po-Chuan Hsieh (sunpoet) 

security/py-rtls: Add py-rtls 2026.5.30

Ever dreamed of getting rid of OpenSSL within CPython without creating a custom
build of CPython for this? Tired of waiting half a decade for a solid and
up-to-date TLS experience, shipping Post-quantum, and ECH support by default?

Then rtls is made for you.

It's a drop-in replacement for the ssl stdlib! Support CPython 3.7 onward.
Including freethreaded.

    20131e7

16:51 Jochen Neumeister (joneum) 

security/py-kdcproxy: Add new Port

kdcproxy is a WSGI module for proxying Kerberos KDC requests over
HTTP and HTTPS. It is required by the upcoming FreeIPA server port.

WWW: https://github.com/latchset/kdcproxy

Sponsored by:	Netzkommune GmbH

    8006801

20:08 Jochen Neumeister (joneum) 

security/dogtag-pki: Add new Port

Dogtag PKI is an enterprise-class open source certificate system
providing Certificate Authority, Key Recovery Authority, OCSP,
and other PKI services.

This port installs the Dogtag PKI Python client and server modules.
It is required by the upcoming net/freeipa-server port.

WWW: https://www.dogtagpki.org/

Sponsored by:	Netzkommune GmbH

    89302dc

18:17 Muhammad Moinur Rahman (bofh) 

*/*php86*: Sunrise

Please DO NOT use this version in production, it is an early test version.

For upgrade notes please visit:
https://github.com/php/php-src/blob/php-8.6.0alpha1/UPGRADING

Changelog: https://github.com/php/php-src/blob/php-8.6.0alpha1/NEWS

    63b6120

21:43 Rene Ladan (rene) 

security/steghide: Remove expired port

2026-06-30 security/steghide: This version is over 22 years old and has
vulnerability

    a12d8ff

21:42 Rene Ladan (rene) 

security/mcrypt: Remove expired port

2026-06-30 security/mcrypt: Abandoned, it has multiple vulnerabilities

    71b135b

21:36 Rene Ladan (rene) 

security/gnupg25: Remove expired port

2026-06-30 security/gnupg25: Will roll up into security/gnupg

    942aeae

20:32 Rene Ladan (rene) 

security/krb5-121: Remove expired port

2026-06-30 security/krb5-121: Unpatched vulnerabilities, no longer supported by
MIT

    4a93fbd

22:08 Muhammad Moinur Rahman (bofh)  Author: Benjamin Jacobs

security/ocaml-digestif: New port

Digestif is a hashing library for OCaml supporting the following
algorithm: BLAKE2B, BLAKE2S, Keccak-256, MD5, RIPEMD160, SHA1, SHA224,
SHA256, SHA3, SHA384, SHA512 and WHIRLPOOL.

This library permits to link against one of the two provided
implementations: the pure OCaml implementation ("digestif.ocaml"), or
one written in the C language ("digestif.c").

WWW: https://github.com/mirage/digestif

    9cd57c7

20:42 Po-Chuan Hsieh (sunpoet) 

security/p5-Crypt-SysRandom-XS: Add p5-Crypt-SysRandom-XS 0.011

Crypt::SysRandom::XS uses whatever C interface is available to procure
cryptographically random data from the system.

    c1c6c59

09:49 Matthias Fechner (mfechner) 

www/gitlab: added new ports required for 19.1.0

    ea0d540

20:20 Nuno Teixeira (eduardo) 

security/cryptopp-modern: New port: C++ class library of cryptographic
algorithms and schemes

- Add CONFLICTS_INSTALL to security/cryptopp

Actively maintained fork of Crypto++ library which features multiple
algorithms and schemes such as:
ChaCha20-Poly1305, AES, Camellia, Blowfish, Threefish, Triple-DES, block
mode chipers, BLAKE2s, BLAKE3, GMAC, HMAC, SHA*, RSA, DSA, DH, ed25519,
x25519, Argon2, ML-KEM ML-DSA to name a few.

It acts as a drop-in API/ABI compatible replacement for the original
Crypto++ library

WWW:		https://github.com/cryptopp-modern/cryptopp-modern
Reviewed by:	diizzy

    2c95ca1

12:19 Mikael Urankar (mikael)  Author: Dan Mahoney

security/p5-Auth-GoogleAuth: Add new port

Auth::GoogleAuth is a Perl module providing an abstraction for the TOTP
(Time-based One-Time Password) algorithm as used by Google Authenticator
and compatible applications (RFC 6238).

It supports generating and verifying TOTP codes, producing otpauth:// URIs,
and generating QR code URLs suitable for enrollment in authenticator apps.

PR:		295883

    a6fd470

08:24 Alex Dupre (ale) 

security/infisical-cli: add new port for the official Infisical CLI

The Infisical CLI is a powerful command-line tool for secret management
that allows you to:

- Inject secrets into applications and development workflows
- Scan for secret leaks in your codebase and git history
- Export secrets to various formats (dotenv, JSON, YAML)
- Authenticate with Infisical Cloud or self-hosted instances
- Integrate with CI/CD pipelines and Docker containers

    afdd7af

12:35 Max Brazhnikov (makc)  Author: Alastair Hogge

security/c-siphash: Add new port

Streaming-capable SipHash Implementation

WWW: https://c-util.github.io/c-siphash

PR:		294569
Co-authored-by:	Max Brazhnikov <makc@FreeBSD.org>

    4d9790a

12:35 Max Brazhnikov (makc)  Author: Alastair Hogge

security/py-siphash24: Add new port

Streaming-capable SipHash-1-3 and SipHash-2-4 Implementation

WWW: https://pypi.org/project/siphash24/

PR:		294570
Co-authored-by:	Max Brazhnikov <makc@FreeBSD.org>

    3e8d16f

17:47 Jesús Daniel Colmenares Oviedo (dtxdf) 

security/py-privleap: New port: Limited Privilege Escalation Framework

privleap is a privilege escalation framework similar in purpose to
sudo and doas, but very different conceptually. It is designed to
allow user-level applications to run very specific operations as
root without allowing full root control of the machine. Unlike
directly executable privilege escalation frameworks like sudo,
privleap runs as a background service that listens for signals from
other applications. Each signal can request a particular, pre-configured
action to be taken. Signals are authenticated, and each action is
taken only if the signal passes authentication. Any console output
from the action is then returned to the caller. This system allows
privleap to function without being SUID-root, and avoids a lot of
the potential pitfalls of sudo, doas, run0, etc.

WWW: https://www.kicksecure.com/wiki/Privleap

    23c19ba

17:47 Jesús Daniel Colmenares Oviedo (dtxdf) 

security/py-PAM: new port: Python interface to the PAM library

This module makes the PAM (Pluggable Authentication Modules) functions
available in Python 3. With this module you can write Python 3
applications that implement authentication services using PAM.

WWW: https://packages.debian.org/sid/python3-pam

    d310b41

03:59 Xavier Beaudouin (kiwi) 

security/bumblebee: new port

Read-only supply-chain exposure scanner for developer endpoints

    214a20a

14:45 Po-Chuan Hsieh (sunpoet) 

security/rubygem-auth-sanitizer: Add rubygem-auth-sanitizer 0.1.2

auth-sanitizer provides small, dependency-light helpers for keeping OAuth and
authentication secrets out of object inspection and log output.

The gem is intentionally narrow in scope. It does not change HTTP requests,
token objects, persistence, or application configuration for you. Instead, it
gives host gems and applications two reusable redaction surfaces:
- Auth::Sanitizer::FilteredAttributes redacts selected instance variables from
  #inspect.
- Auth::Sanitizer::SanitizedLogger wraps an existing logger and redacts
  sensitive values from string log messages.

    4bbca23

20:30 Rene Ladan (rene) 

security/ktls_isa-l_crypto-kmod: Remove expired port, only for FreeBSD 13

    2baccbb

16:53 Rene Ladan (rene) 

security/openssl111: Remove expired port

2026-04-30 security/openssl111: End-of-life since 2023-09-11, see
https://www.openssl.org/blog/blog/2023/09/11/eol-111/  port will be removed when
FreeBSD 13 is EoL

    e6564f6

09:28 Jochen Neumeister (joneum) 

security/py-biscuit-auth: Add new Port

Python bindings for biscuit-auth, a decentralized authorization token
system.

Sponsored by:	Netzkommune GmbH

    e4490ac

16:54 Jesús Daniel Colmenares Oviedo (dtxdf) 

security/rbw: New port: Unofficial bitwarden cli

rbw is an unofficial command line client for Bitwarden. Although
Bitwarden does come with its own command line client, it is limited
by being stateless - to use it, you're required to manually lock
and unlock the client, and pass the temporary keys around in
environment variables, which makes it very difficult to use. rbw
avoids this problem by maintaining a background process which is
able to hold the keys in memory, similar to the way that ssh-agent
or gpg-agent work. This allows the client to be used in a much
simpler way, with the background agent taking care of maintaining
the necessary state.

WWW: https://github.com/doy/rbw/

    4db0587

21:53 Jesús Daniel Colmenares Oviedo (dtxdf) 

security/py-himitsu-keyring: New port: GTK4-based prompter implementation for
Himitsu

Keyring is a graphical frontend for managing a Himitsu key store.

WWW: https://himitsustore.org

    3a1bf43

21:53 Jesús Daniel Colmenares Oviedo (dtxdf) 

security/hiprompt-gtk: New port: GTK4-based prompter implementation for Himitsu

hiprompt-gtk is a GTK4-based prompter implementation for Himitsu.

WWW: https://himitsustore.org

    01b9663

06:56 Yuri Victorovich (yuri) 

security/py-shodan: Revert "security/py-shodan: New port: Python library and
command-line utility for Shodan"

This reverts commit 98f2446834b21a4f645c889016ac5f08fe68f899.

Reported by:	Antoine Brodin <antoine@freebsd.org>

    2abf6b3

05:22 Yuri Victorovich (yuri) 

security/py-iam-expand: New port: Python package to expand and deobfuscate IAM
policies

    145735c

05:20 Yuri Victorovich (yuri) 

security/py-iamdata: New port: IAM data for AWS actions, resources, and
conditions

    58ac811

04:32 Yuri Victorovich (yuri) 

security/py-policyuniverse: New port: Parse and Process AWS IAM Policies,
Statements, ARNs, and wildcards

    6d9f95f

04:29 Yuri Victorovich (yuri) 

security/py-shodan: New port: Python library and command-line utility for Shodan

    98f2446

19:08 Rene Ladan (rene) 

security/openssl33: Remove expired port

2026-03-31 security/openssl33: Please use security/openssl35 (LTS)

    4a8f5ab

19:07 Rene Ladan (rene) 

security/openssl33-quictls: Remove expired port

security/openssl33-quictls: Upstream project has been archived, use
security/quictls

    049c73e5

16:14 Rene Ladan (rene) 

security/snortsam: Remove expired port

2026-03-31 security/snortsam: dead upstream, broken on FreeBSD 15

    95c1a47

21:04 Torsten Zuehlsdorff (tz) 

security/cdxgen: New port

  cdxgen generates CycloneDX SBOMs for multiple programming
  languages and ecosystems.

  It supports scanning source code, containers, and binaries
  to produce Software Bill of Materials outputs.

  Project page:
  https://github.com/CycloneDX/cdxgen

Sponsored by:	OTTRIA

    e1e9bd0

15:29 Max Brazhnikov (makc) 

security/keepsecret: Add new port

KeepSecret is a Password manager for a Secret Service compatible provider.

WWW: https://invent.kde.org/utilities/keepsecret/

    14bfd9c

21:51 Torsten Zuehlsdorff (tz) 

security/syft: New port

  Syft is a CLI tool and library for generating a Software Bill of Materials
  (SBOM) from container images and filesystems.

  It supports multiple SBOM formats including CycloneDX and SPDX and can scan
  containers, directories, and archives to identify installed packages.

  Syft is developed by Anchore and is commonly used in software supply-chain
  security workflows.

Sponsored by:	OTTRIA

    498cc5a

15:48 Yuri Victorovich (yuri) 

security/py-blake3: New port: Python bindings for the BLAKE3 cryptographic hash
function

    8a3afc3

15:18 Yuri Victorovich (yuri) 

security/susshi: New port: Terminal-based SSH connection manager

    c6e2142

21:30 Bernard Spil (brnrd) 

security/openssl-pkcs11provider: Add new port

    c8809a8

14:15 Po-Chuan Hsieh (sunpoet) 

*/Makefile: Sort SUBDIRs

    44a7856

11:56 Bernard Spil (brnrd) 

security/openssl40: Add new OpenSSL ECH capable port

* This is ALPHA level software, for testing only
* Adds Encrypted Client Hello feature
* Removes SSLv3

    cd349d8

04:30 Xin LI (delphij) 

security/rubygem-doorkeeper-i18n{,-rails72}: Add new port.

Internationalization files for Doorkeeper OAuth2 provider

While I'm there, also add a variant of rubygem-doorkeeper for use
with rails72.

    ac174ab

16:36 Vladimir Druzenko (vvd)  Author: Paavo-Einari Kaipila

security/mbedtls4: New port 4.0.0

Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-4.0.0

PR:	293527

    0f99c33

21:56 Vladimir Druzenko (vvd) 

security/clamtk: Resurect port: Revert "security/clamtk: Remove expired port"

This reverts commit 8ee1e427d19133777036384a3b1415f470304227.

    06330a9

14:21 Rene Ladan (rene) 

security/owasp-dependency-check: Remove expired port

2026-02-28 security/owasp-dependency-check: This port is 9 major versions and
almost 8 years behind on upstream. No maintainer. No users in the ports tree.
Does not compile with jdk11+.

    3c3d0f3

05:08 Jesús Daniel Colmenares Oviedo (dtxdf) 

security/py-unicode-show: New port: Detect and annotate suspicious Unicode
characters in text or files

unicode-show is a utility that reads text input (from standard input
or files) and highlights suspicious Unicode characters, such as
those outside the safe ASCII range. This tool is useful for identifying
potentially malicious or misleading Unicode characters in source
code, logs, or user input.

WWW: https://www.kicksecure.com/wiki/Unicode-show

    47aaf92

16:13 Vladimir Druzenko (vvd)  Author: Herbert J. Skuhra

security/gnupg25: Connect to build

PR:		291995
Approved by:	portmgr (blanket - fix port)
Fixes:		d58f02417501 (new port 2.5.17, latest upstream)

    77dd550

13:14 Emanuel Haupt (ehaupt) 

security/Makefile: Connect security/py-shamir-mnemonic, security/py-slip10

    962b811

14:30 Rene Ladan (rene) 

security/openssl-quictls: Remove expired port

2025-12-31 security/openssl-quictls: Upstream project has been archived, use
security/quictls

    76f3516

21:38 Jesús Daniel Colmenares Oviedo (dtxdf) 

security/py-serpico: New port: Security scanner for FreeBSD packages and
releases

serpico is a security scanner for FreeBSD packages and releases
that compares the versions against a list of versions marked as
vulnerable, then displays vulnerability information in a JSON-compact
format for easy analysis by other security tools.

WWW: https://github.com/DtxdF/serpico

    9733a5b

23:51 Robert Clausecker (fuz)  Author: para

security/himitsu: create new port

Himitsu is a secure secret storage system for Unix-like systems. It provides an
arbitrary key/value store (where values may be secret) and a query language for
manipulating the key store.

WWW: https://himitsustore.org

PR:		292475

    8a7d9cd

07:38 Eugene Grosbein (eugen) 

security/p5-Digest-SipHash: new port

Perl XS interface to the SipHash algorithm.

This module does only one thing - calculates the SipHash value
of the given string.

    fd4bc7e

11:16 Baptiste Daroussin (bapt) 

security/pam_worker: new port

PAM-modules is a collection of useful PAM modules and command line
utilities for checking PAM authentication and other management groups.

    228c7fb

08:47 Michael Osipov (michaelo)  Author: Siva Mahadevan

[NEW PORT] security/py-k5test: Library for setting up self-contained Kerberos 5
environments

Co-authored-by:	Michael Osipov <michaelo@FreeBSD.org>
PR:		278820

    d1bd9b06

05:40 Charlie Li (vishwin) 

security/voa: add

    7c7aae9

14:48 Muhammad Moinur Rahman (bofh) 

*/*php81*: Sunset

    95b3559

12:13 Rene Ladan (rene) 

security/nextcloud-passman: Remove expired port

2025-12-31 security/nextcloud-passman: Upstream unmaintained

    6067166

12:03 Rene Ladan (rene) 

security/rkhunter: Remove expired port

2025-12-31 security/rkhunter: Project abandoned in 2009

    2e041d71

11:54 Rene Ladan (rene) 

security/krb5-120: Remove expired port

2025-12-31 security/krb5-120: Now that MIT KRB5 1.22 is GA 1.20 is EOL

    cd548f9

11:38 Rene Ladan (rene) 

security/tls-check: Remove expired port

2025-12-31 security/tls-check: Obsolete tool and relies on deprecated libraries

    0732518

10:36 Rene Ladan (rene) 

security/clamtk: Remove expired port

2025-12-30 security/clamtk: Maintainer has retired

    8ee1e42

02:52 Li-Wen Hsu (lwhsu)  Author: Hiroo Ono

Add security/keepass-diff: CLI-tool to diff two Keepass (.kdbx) files

PR:		291900

    9e54167

11:10 Po-Chuan Hsieh (sunpoet) 

security/rubygem-openssl3: Add rubygem-openssl3 3.3.2 (copied from
rubygem-openssl)

- Add PORTSCOUT

    a3ccd66

18:46 Fernando Apesteguía (fernape) 

java/autofirma: [new port]. Digital signature application

Autofirma is a java application used to sign digital documents.
It is the official application of the Spanish Government and as such it is
required to perform many online tasks with the Administration.

Reviewed by:		michaelo@
Differential Revision:	https://reviews.freebsd.org/D53807

    548c97a

19:10 Dave Cottlehuber (dch)  Author: Sébastien Santoro

security/vault-medusa: New Port: Medusa: export secrets from Vault or OpenBao

PR:		281865

    5c5745b

14:58 Gleb Popov (arrowd) 

security/radamsa: Ressurect the port and update to 0.7

    c4c689f

00:24 Jesús Daniel Colmenares Oviedo (dtxdf) 

security/opkssh: New port: Tool which enables SSH to be used with OpenID Connect

opkssh is a tool which enables ssh to be used with OpenID Connect
allowing SSH access to be managed via identities like alice@example.com
instead of long-lived SSH keys. It does not replace SSH, but instead
generates SSH public keys containing PK Tokens and configures sshd
to verify them. These PK Tokens contain standard OpenID Connect ID
Tokens. This protocol builds on the OpenPubkey which adds user
public keys to OpenID Connect without breaking compatibility with
existing OpenID Provider.

    db1d18b

16:39 Matthias Fechner (mfechner) 

security/gitlab-analyzers-secrets: added gitlab secret detection scanner

    61889173

20:42 Po-Chuan Hsieh (sunpoet) 

security/py-pyopenssl: Move security/py-openssl to security/py-pyopenssl

- Update WWW
- Convert to USE_PYTHON=pep517
- Clean up Makefile
- Bump PORTREVISION for package change
- Bump PORTREVISION of dependent ports for dependency change

    aafe9a2

11:11 Rene Ladan (rene) 

security/rhonabwy: Remove expired port

2025-10-31 security/rhonabwy: Upstream repository has been archived on Nov 11,
2024

    a99ac36

03:17 Hiroki Tagato (tagattie)  Author: Tomohiro Hosaka

security/p5-Crypt-URandom-Token: New port: Generate secure strings for
passwords, secrets and similar

This module provides a secure way to generate a random token
for passwords and similar using Crypt::URandom
as the source of random bits.

WWW: https://metacpan.org/dist/Crypt-URandom-Token

PR:		290569
Reported by:	Tomohiro Hosaka <bokutin@bokut.in> (new maintainer)

    ea8f2a1

07:17 Matthias Fechner (mfechner) 

www/gitlab: fix regression from 5028178941fc081cd43354ea03ceda365a12f73d

this fixes a depedency conflict with rubygem-logger which was added into
package security/rubygem-omniauth which conflicts with rubygem-logger-gitlab

    5c25978

07:36 Hiroki Tagato (tagattie) 

security/py-google-cloud-kms: Add port: Python client for Google Cloud Key
Management Service

Google Cloud Key Management Service: a cloud-hosted key management
service that lets you manage cryptographic keys for your cloud
services the same way you do on-premises. You can generate, use,
rotate, and destroy AES256, RSA 2048, RSA 3072, RSA 4096, EC P256, and
EC P384 cryptographic keys. Cloud KMS is integrated with Cloud IAM and
Cloud Audit Logging so that you can manage permissions on individual
keys and monitor how these are used. Use Cloud KMS to protect secrets
and other sensitive data that you need to store in Google Cloud
Platform.

WWW: https://pypi.org/project/google-cloud-kms/

    5fc04210

18:59 Rene Ladan (rene) 

security/iddawc: Remove expired port

2025-10-13 security/iddawc: Upstream repo archived on Nov 11, 2024

    353c809