pam_pkcs11 is a login module allowing a X.509 certificate
based user login. The certificate and its dedicated private
key are thereby accessed by means of an appropriate PKCS#11
module. For the verification of the users' certificates,
locally stored CA certificates as well as either online or
locally accessible CRLs are used.
PAM-PKCS#11 package provides:
A PAM module able to:
Use certificates to get user credentials
Deduce a login based on provided certificate
Several tools:
Standalone cert-to-login finder tool
Certificate contents viewer
Card Event status monitor, to trigger actions on card insert/removal
===> The following configuration options are available for pam_pkcs11-0.6.12_1:
CURL=off: Data transfer support via cURL
DEBUG=off: Build with debugging support
DOCS=on: Build and/or install documentation
LDAP=off: LDAP protocol support
NLS=on: Native Language Support
NSS=off: Enable Mozilla's NSS support
PCSC=on: Enable PC/SC support
SSL=on: SSL protocol support
===> Use 'make config' to modify these settings
devel/libtextstyle, devel/gettext*: Update to 0.26
Recent versions of gettext no longer install m4 files in
PREFIX/share/aclocal. They have to be installed in the work
directory by autopoint for aclocal to find them.
Patch devel/autoconf so autoreconf runs autopoint when gettext related
macros are used in configure.ac (e.g. AM_ICONV). Previously it only
ran autopoint when AM_GNU_GETTEXT_(REQUIRE_)VERSION was used.
The following ports now require autopoint (i.e. USES=gettext-tools):
benchmarks/sysbench, devel/libhtp, editors/fxite, filesystems/rar2fs,
graphics/gd, net/ucarp, news/fidogate, sysutils/cdrdao
Other fixes:
(Only the first 15 lines of the commit message are shown above )
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D38233
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Aldis Berjoza <aldis@bsdroot.lv>
* Alex Dupre <ale@FreeBSD.org>
* Alex Kapranoff <kappa@rambler-co.ru>
* Alex Samorukov <samm@freebsd.org>
* Alexander Botero-Lowry <alex@foxybanana.com>
* Alexander Kriventsov <avk@vl.ru>
* Alexander Leidinger <netchild@FreeBSD.org>
(Only the first 15 lines of the commit message are shown above )
Add security/pam_pkcs11, PAM module using crypto tokens for auth
Submitted by: Ka Ho Ng <khng300@gmail.com>
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D26419
