fwknop SPA implementation for Linux and FreeBSD

2.6.10_1 security =2 2.6.10Version of this port present on the latest quarterly branch.

Maintainer: sean.greven@gmail.com

Port Added: 2008-06-13 03:44:08

Last Update: 2018-11-10 18:12:58

SVN Revision: 484628

License: GPLv2

Description:

fwknop, "FireWall KNock OPerator", implements Single Packet Authorization (SPA). WWW: http://www.cipherdyne.org/fwknop/

SVNWeb : Homepage

pkg-plist: as obtained via: make generate-plist

Expand this list (16 items)

1. /usr/local/share/licenses/fwknop-2.6.10_1/catalog.mk
2. /usr/local/share/licenses/fwknop-2.6.10_1/LICENSE
3. /usr/local/share/licenses/fwknop-2.6.10_1/GPLv2
4. bin/fwknop
5. @sample etc/fwknop/access.conf.sample
6. @sample etc/fwknop/fwknopd.conf.sample
7. include/fko.h
8. lib/libfko.a
9. lib/libfko.so
10. lib/libfko.so.3
11. lib/libfko.so.3.0.0
12. man/man8/fwknop.8.gz
13. man/man8/fwknopd.8.gz
14. sbin/fwknopd
15. @postexec /usr/sbin/service ldconfig restart > /dev/null
16. @postunexec /usr/sbin/service ldconfig restart > /dev/null

Collapse this list.

Dependency lines:

• fwknop>0:security/fwknop
• libfko.so:security/fwknop

Conflicts:

CONFLICTS_BUILD:

• fwknop-2.6.8_*

Conflicts Matches:

There are no Conflicts Matches for this port. This is usually an error.

To install the port: cd /usr/ports/security/fwknop/ && make install clean

To add the package: pkg install fwknop

PKGNAME: fwknop

Flavors: there is no flavor information for this port.

distinfo:

TIMESTAMP = 1536844863 SHA256 (fwknop-2.6.10.tar.gz) = 2b15050bae92ec5210fcac944a7aa4bf9c651333a2b2960aabcd5cfc1d527cf1 SIZE (fwknop-2.6.10.tar.gz) = 1988197

Dependencies

NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.

Build dependencies:

1. wget : ftp/wget

Runtime dependencies:

1. wget : ftp/wget
2. indexinfo : print/indexinfo

Library dependencies:

1. libassuan.so : security/libassuan
2. libgpgme.so : security/gpgme
3. libgpg-error.so : security/libgpg-error

There are no ports dependent upon this port

Configuration Options

===> The following configuration options are available for fwknop-2.6.10_1: GPGME=on: Build support for gpgme ====> Firewall Backend: you have to select exactly one of them IPFW=on: Use the IPFW firewall PF=off: Use the PF firewall. ===> Use 'make config' to modify these settings

USES:

cpe libtool

Master Sites:

1. http://www.cipherdyne.org/fwknop/download/

Install texinfo files (GNU info) into ${PREFIX}/share/info

After a discussion on the mailing list on moving manpages to
${PREFIX}/share/man for consistency with base where it is
installed in usr/share/man, it appeared the same should happen
to GNU info files which were installed under share in base and
not in ports.

Now texinfo is not in base on any of the supported version of FreeBSD
it is possible to proceed to this move and it is easier to do than
the manpage change.

Other benefit than consistency are less patching: all build tools but
cmake are expecting info files to be under share/info and cmake (patched here)
was having an exception for BSD so the patch makes FreeBSD case less
specific for them

Bump revision of all impacted ports

PR:		232907
exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D17816

security/fwknop: update to 2.6.10

PR:	231343
Submitted by:	jan0sch@mykolab.com
Approved by:	tcbener (mentor, implicit) sean.greven@gmail.com (maintainer)

Resolve conflict

PR:		222382
Submitted by:	Jens Grassel <jan0sch@mykolab.com>
Approved by:	maintainer

security/fwknop: update to 2.6.9

Update to 2.6.9 [0]
While here, add missing deps [1]

PR:		222287
Submitted by:	sean.greven@gmail.com (maintainer) [0][1]
Reported by:	Jens Grassel <jan0sch@mykolab.com> [1]

Do not use post-stage.  Use post-install instead.

The only reason to use post-stage is because the port needs to do
"things" at a later time, like some plist manipulation.
While there, fold post-install in do-install targets when they are
defined.

PR:		214780
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight

Update security/gpgme-* to 1.8.0

In this version, libgpgme-pthread.so has been removed in favor of just
using libgpgme.so as the thread-safe library. PORTREVISION has been
bumped on all ports depending on security/gpgme so that any that may have
linked to -lgpgme-pthread will link to -lgpgme instead.

The Python module provided by security/py-gpgme has been renamed upstream
from pyme3 to gpg. This removes the conflict with security/py-pyme,
although security/py-gpgme is still the direct replacement of that
module.

Update to 2.6.8

PR:		209026
Submitted by:	Jens Grassel
Approved by:	maintainer

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

Allow to select pf instead of default ipfw for firewall backend

PR:		204334
Submitted by:	jan0sch@mykolab.com
Reviewed by:	sean.greven@gmail.com (maintainer)

security/fwknop: Update to 2.6.7

* Update to 2.6.7
* Update and sort pkg-plist
* Group/sort sections
* Convert to OPTIONS helpers
* Use install-strip target so binaries/libraries are stripped

PR:		203168
Submitted by:	Sean Greven <sean.greven gmail com> (maintainer)

Typos, whitespace and capitalization fixes (S-X).

By default libtool replaces -export-symbols <file> with -retain-symbols-file
<file> on ELF systems, but this doesn't really do what -export-symbols is
meant to do.  On GNU ELF systems it converts <file> to a simple version
script first and then uses -version-script instead of -retain-symbols-file.
Let USES=libtool patch libtool scripts to do this on all systems with GNU
ld(1).

Bump PORTREVISION on all ports where the build log contains -export-symbols.

audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions.  Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to.  Fix a number of other issues in the same

- Add CPE info

Approved by:	portmgr blanket

Cleanup plist

- Switch to USES=libtool, drop .la files

Approved by:	portmgr blanket

- Stage support

- Update security/gpgme to 1.4.3
- Use USE_GNOME= ltverhack to correct the library version number
  to what the author intended.  This effectively rolls the version
  number backwards, but should prevent future unneccesary version
  bumps.
- Support staging
- Use options helpers
- Use new LIB_DEPENDS syntax
- Bump PORTREVISION on dependent ports

Add NO_STAGE all over the place in preparation for the staging support (cat:
security)

security/fwknop: update to 2.5.1

- Update to 2.5.1 [1]
- Add LICENSE (GPLv2) [1]
- Convert lib depends to new format

PR:		ports/181642
Submitted by:	Kozlov Sergey <kozlov.sergey.404 gmail.com>
Approved by:	maintainer (timeout)

- Update to version 2.0.4 [1]
- Package links to gpgme, make it LIB_DEPENDS also turn off
  linking to it when GPGME=off
- Add empty line between description and WWW line,
  remove extraneous whitespace on EOL in pkg-descr

PR:		ports/174732 [1]
Submitted by:	Sean Greven <sean.greven@gmail.com> (maintainer)

Update to 2.0.3.

This new version includes a migration from Perl to C and support for
ipfw and pf.

While here, trim the Makefile headers.

PR:		ports/171951
Submitted by:	Sean Greven <sean.greven@gmail.com> (maintainer)
Feature safe:	yes

Fix typos in COMMENT

- Remove SITE_PERL from *_DEPENDS

Approved by: portmgr@ (bapt@)

At the moment 1385 ports use BUILD_DEPENDS= ${RUN_DEPENDS} and 450
ports use BUILD_DEPENDS:= ${RUN_DEPENDS}. This patch fixes ports that are
currently broken. This is a temporary measure until we organically stop using
:= or someone(s) spend a lot of time changing all the ports over.

Explicit duplication > := > = and this just moves ports one step to the left

Approved by:    portmgr

-remove MD5

- Chase security/libksba shlib version bump

Requested by:   kwm
Pointyhat to:   glarkin

Temporary fix "building" by setting IS_INTERACTIVE

New port: security/fwknop fwknop,"FireWall KNock OPerator", implements
Single Packet Authorization (SPA).

        fwknop stands for the "FireWall KNock OPerator", and
        implements an authorization scheme called Single Packet
        Authorization (SPA). This method of authorization is based
        around a default-drop packet filter (fwknop supports both
        iptables on Linux systems and ipfw on FreeBSD and Mac OS X
        systems) and libpcap.

        SPA requires only a single encrypted packet in order to
        communicate various pieces of information including desired
        access through an iptables policy and/or complete commands
        to execute on the target system. By using iptables to
        maintain a "default drop" stance, the main application of

8 vulnerabilities affecting 50 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2020-02-23 08:59:33