notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
All times are UTC
Ukraine
non port: security/krb5-116/Makefile
SVNWeb

Number of commits found: 21

Wed, 19 Feb 2020
[ 02:42 cy search for other commits by this committer ] Original commit   Revision:526479
Welcome the new KRB5 1.18 (krb5-118)

In addition, deprecate krb5-116 to retire one year after the release
of krb5-118: Feb 12, 2021.

Major changes in 1.18 (2020-02-12)
==================================

Administrator experience:

* Remove support for single-DES encryption types.

* Change the replay cache format to be more efficient and robust.
  Replay cache filenames using the new format end with ".rcache2" by
  default.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Thu, 12 Dec 2019
[ 20:55 cy search for other commits by this committer ] Original commit   Revision:519947
Update 1.16.3 --> 1.16.4
Tue, 9 Apr 2019
[ 14:04 sunpoet search for other commits by this committer ] Original commit   Revision:498476 (Only the first 10 of 289 ports in this commit are shown above. View all ports for this commit)
Update devel/readline to 8.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://tiswww.case.edu/php/chet/readline/CHANGES
PR:		236156
Exp-run by:	antoine
Fri, 15 Feb 2019
[ 04:37 cy search for other commits by this committer ] Original commit   Revision:492968 (Only the first 10 of 12 ports in this commit are shown above. View all ports for this commit)
Provide a script from which to start krb5kdc through /etc/rc.d/kdc.
Simply add kdc_enable="YES" and kdc_program="/usr/local/sbin/kdc"
to /etc/rc.d. The script removes the Heimdal kdc --detach argument
prior to invoking krb5kdc.

The other approach that was considered was to replace getopt() in
kdc/main.c with getopt_long() however this approach was considered too
intrusive.
Sun, 13 Jan 2019
[ 15:57 cy search for other commits by this committer ] Original commit   Revision:490150
pkgconfig is used at build time, not runtime.

MFH:		2019Q1 (krb5-devel will need to have all its previous
		commits brought up to level in 2019Q1 first)
Tue, 8 Jan 2019
[ 20:29 cy search for other commits by this committer ] Original commit   Revision:489737
Welcome the new KRB5 1.17 (krb5-117).

Major changes in 1.17 (2019-01-08)
==================================

Administrator experience:

* A new Kerberos database module using the Lightning Memory-Mapped
  Database library (LMDB) has been added.  The LMDB KDB module should
  be more performant and more robust than the DB2 module, and may
  become the default module for new databases in a future release.

* "kdb5_util dump" will no longer dump policy entries when specific
  principal names are requested.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
[ 20:02 cy search for other commits by this committer ] Original commit   Revision:489735
Correct CONFLICTS.

MFH:		2019Q1
[ 01:41 cy search for other commits by this committer ] Original commit   Revision:489636
Update 1.16.2 --> 1.16.3

Major changes in 1.16.3 (2019-01-07)
====================================

This is a bug fix release.

* Fix a regression in the MEMORY credential cache type which could
  cause client programs to crash.

* MEMORY credential caches will not be listed in the global
  collection, with the exception of the default credential cache if it
  is of type MEMORY.

* Remove an incorrect assertion in the KDC which could be used to
  cause a crash [CVE-2018-20217].

MFH:		2019Q1
Fri, 2 Nov 2018
[ 15:51 cy search for other commits by this committer ] Original commit   Revision:483818
krb5-116: update 1.16.1 --> 1.16.2
Mon, 2 Jul 2018
[ 05:57 cy search for other commits by this committer ] Original commit   Revision:473706 (Only the first 10 of 12 ports in this commit are shown above. View all ports for this commit)
While working the ports fallout due to making Hemidal in base
private it was discovered that com_err.3, though distributed in
the tarball, was not installed. Install it.
Tue, 19 Jun 2018
[ 13:38 cy search for other commits by this committer ] Original commit   Revision:472784
Revert r472760 and instead use upstream git commit
beeb2828945a41d86488e391ce440bacee0ec committed to the krb5
development branch Saturday, June 16. The upstream commit
message follows:

  Author: Thomas Sondergaard <tsondergaard@vitalimages.com>
  Date:   Sat Jun 16 18:14:50 2018 +0200

     Eliminate use of the 'register' keyword

     'register' is a reserved and unused keyword in C++17 so having it
     present in the public headers presents a a compatibility issue. Also
     in C the 'register' keyword is mostly obsolete, so remove all uses of
     it.

     [ghudson@mit.edu: adjusted style of some of the affected lines]
[ 06:51 cy search for other commits by this committer ] Original commit   Revision:472760
While working on the ports fallout due to the private Heimdal in base
project, a port (www/squid-devel) was discovered to be grumpy due to
numerous errors such as below:

/usr/local/include/krb5/krb5.h:3566:19: error: 'register' storage class
specifier is deprecated and incompatible with C++17
[-Werror,-Wdeprecated-register]
                  register char **name);
                  ^~~~~~~~~

The "register" keyword is meaningless and can cause grief among ports
that build against any of the krb5 ports.
Wed, 13 Jun 2018
[ 05:55 cy search for other commits by this committer ] Original commit   Revision:472287
MIT krb5 fails to build with boringssl installed due to a missing
typedef for PKCS7 in the boringssl pkcs7.h.
[ 05:44 cy search for other commits by this committer ] Original commit   Revision:472286
Fix build with libressl and bearssl.

PR:		228970
Tue, 12 Jun 2018
[ 03:42 cy search for other commits by this committer ] Original commit   Revision:472227
Fix logic from patch supplied in PR 217027, committed in
r433966 and r433967.

PR:		228900
Fri, 4 May 2018
[ 06:18 cy search for other commits by this committer ] Original commit   Revision:469006
Update 1.16 --> 1.16.1

Major changes in 1.16.1 (2018-05-03)
====================================

This is a bug fix release.

* Fix flaws in LDAP DN checking, including a null dereference KDC
  crash which could be triggered by kadmin clients with administrative
  privileges [CVE-2018-5729, CVE-2018-5730].

* Fix a KDC PKINIT memory leak.

* Fix a small KDC memory leak on transited or authdata errors when
  processing TGS requests.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Thu, 29 Mar 2018
[ 14:53 mat search for other commits by this committer ] Original commit   Revision:465899 (Only the first 10 of 13 ports in this commit are shown above. View all ports for this commit)
Mark some ports broken with openssl-devel.

Sponsored by:	Absolight
Fri, 2 Feb 2018
[ 06:50 cy search for other commits by this committer ] Original commit   Revision:460669
Fix build when NLS option is unchecked.

Reported by:	Geraud CONTINSOUZAS <geraud.continsouzas@skazy.nc>
Thu, 11 Jan 2018
[ 16:24 danfe search for other commits by this committer ] Original commit   Revision:458754 (Only the first 10 of 20 ports in this commit are shown above. View all ports for this commit)
Remove superfluous linefeeds.
Wed, 10 Jan 2018
[ 15:08 danfe search for other commits by this committer ] Original commit   Revision:458646 (Only the first 10 of 22 ports in this commit are shown above. View all ports for this commit)
Do not abuse INSTALL_MAN when installing documentation, examples, and
other miscellaneous files which are not actually manual pages.
Wed, 6 Dec 2017
[ 04:18 cy search for other commits by this committer ] Original commit   Revision:455634
Welcome the new security/krb5-116 port. This port follows MIT's
KRB5 1.16 releases.

Major changes in 1.16 (2017-12-05)
==================================

Administrator experience:

* The KDC can match PKINIT client certificates against the
  "pkinit_cert_match" string attribute on the client principal entry,
  using the same syntax as the existing "pkinit_cert_match" profile
  option.

* The ktutil addent command supports the "-k 0" option to ignore the
  key version, and the "-s" option to use a non-default salt string.
(Only the first 15 lines of the commit message are shown above View all of this commit message)

Number of commits found: 21