22:51 Muhammad Moinur Rahman (bofh) 

security/py-ssh-audit: Sanitize MANPREFIX

Approved by:    portmgr (blanket)

    149c91b

22:01 Piotr Kubaj (pkubaj) 

security/py-ssh-audit: update to 3.1.0

Changelog:	https://github.com/jtesta/ssh-audit/releases/tag/v3.1.0

    2a93e8e

08:39 Piotr Kubaj (pkubaj) 

security/py-ssh-audit: add manpage

PR:	274842
Reported by:	dclarke@blastwave.org

    bd9b8f1

13:41 Piotr Kubaj (pkubaj) 

security/py-ssh-audit: update to 3.0.0

Changelog:	https://github.com/jtesta/ssh-audit/releases/tag/v3.0.0

    17be6f8

19:34 Rene Ladan (rene) 

all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++
-DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable
-Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong
-fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi
-Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings
-Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x
-MT _quickfix_la-QuickfixPython.lo -MD -MP -MF
.deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o
.libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean
'-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>

    3d9a815

19:54 Piotr Kubaj (pkubaj) 

security/py-ssh-audit: fix build

py-setuptools was missing.

    31bd188

09:09 Piotr Kubaj (pkubaj) 

security/py-ssh-audit: switch to USE_PYTHON=pep517

    805ba67

09:15 Piotr Kubaj (pkubaj) 

security/py-ssh-audit: update to 2.9.0

Changelog:	https://github.com/jtesta/ssh-audit/releases/tag/v2.9.0

    b7aa703

21:10 Stefan Eßer (se) 

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)

    b7f0544

15:00 Piotr Kubaj (pkubaj) 

security/py-ssh-audit: update to 2.5.0

Changelog:
* Fixed crash when running host key tests.
* Handles server connection failures more gracefully.
* Now prints JSON with indents when -jj is used (useful for debugging).
* Added MD5 fingerprints to verbose output.
* Added -d/--debug option for getting debugging output; credit Adam Russell.
* Updated JSON output to include MD5 fingerprints. Note that this results in a
breaking change in the 'fingerprints' dictionary format.
* Updated OpenSSH 8.1 (and earlier) policies to include rsa-sha2-512 and
rsa-sha2-256.
* Added OpenSSH v8.6 & v8.7 policies.
* Added 3 new key exchanges: gss-gex-sha1-eipGX3TCiQSrx573bT1o1Q==,
gss-group1-sha1-eipGX3TCiQSrx573bT1o1Q==, and
gss-group14-sha1-eipGX3TCiQSrx573bT1o1Q==.
* Added 3 new MACs: hmac-ripemd160-96, AEAD_AES_128_GCM, and AEAD_AES_256_GCM.

    edc1905

08:09 Mathieu Arnold (mat) 

One more small cleanup, forgotten yesterday.
Reported by:	lwhsu

    cf118cc

14:31 Mathieu Arnold (mat) 

Remove # $FreeBSD$ from Makefiles.

    305f148

02:34 pkubaj 

security/py-ssh-audit: update to 2.4.0

Changelog:
 - Added multi-threaded scanning support.
 - Added built-in Windows manual page (see `-m`/`--manual`); credit [Adam
Russell](https://github.com/thecliguy).
 - Added version check for OpenSSH user enumeration (CVE-2018-15473).
 - Added deprecation note to host key types based on SHA-1.
 - Added extra warnings for SSHv1.
 - Added built-in hardened OpenSSH v8.5 policy.
 - Upgraded warnings to failures for host key types based on SHA-1.
 - Fixed crash when receiving unexpected response during host key test.
 - Fixed hang against older Cisco devices during host key test & gex test.
 - Fixed improper termination while scanning multiple targets when one target
returns an error.
 - Dropped support for Python 3.5 (which reached EOL in Sept. 2020).
 - Added 1 new key exchange: `sntrup761x25519-sha512@openssh.com`.

 

23:02 antoine 

Drop python 2.7 support from a few ports

With hat:	portmgr

 

14:18 pkubaj 

security/py-ssh-audit: more fixes

 

13:48 pkubaj 

security/py-ssh-audit: fix run-time

Traceback (most recent call last):
  File "/usr/local/bin/ssh-audit", line 10, in <module>
    from ssh_audit.ssh_audit import main  # noqa: E402
ModuleNotFoundError: No module named 'ssh_audit'

 

11:56 pkubaj 

security/py-ssh-audit: update to 2.3.1

Changelog:
- Now parses public key sizes for rsa-sha2-256-cert-v01@openssh.com and
rsa-sha2-512-cert-v01@openssh.com host key types.
- Flag ssh-rsa-cert-v01@openssh.com as a failure due to SHA-1 hash.
- Fixed bug in recommendation output which suppressed some algorithms
inappropriately.
- Built-in policies now include CA key requirements (if certificates are in
use).
- Lookup function (--lookup) now performs case-insensitive lookups of similar
algorithms; credit Adam Russell.
- Migrated pre-made policies from external files to internal database.
- Split single 3,500 line script into many files (by class).
- Added setup.py support; credit Ganden Schaffner.
- Added 1 new cipher: des-cbc@ssh.com.

 

22:02 pkubaj 

security/py-ssh-audit: update to 2.3.0

Changelog:
https://github.com/jtesta/ssh-audit/releases/tag/v2.3.0

 

08:39 pkubaj 

security/py-ssh-audit: update to 2.2.0

 

12:49 pkubaj 

security/py-ssh-audit: while here, update maintainer to my @FreeBSD.org address

 

12:49 pkubaj 

security/py-ssh-audit: update to 2.1.1, switch to a fork

The original author went MIA, there are many improvements in the fork.

PR:		242408
Submitted by:	ehaupt

 

21:32 yuri 

New port: security/py-ssh-audit: SSH server auditing

PR:		223810
Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl>
Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D13207