Hi, I added support for SRP (including srp-setpass [so saslpasswd2 can store srp salts and verifiers in the sasl password database too, if so desired]) to the cyrus-sasl-2.1.26_12 port. Two small patch files are attached. Please consider applying them (or something very similar) so that FreeBSD's cyrus-sasl port can support SRP "out of the box." SRP is and excellent, secure authentication method, support for it has long existed in cyrus-sasl, and that support should be easily obtainable by FreeBSD's users. Help make the net a more secure place. :)
Best Regards, --Kyle P.S. I'm not on the freebsd-ports mailing list, FYI. -- CA +1-778-819-UNIX BackWatcher, Inc. US +1-425-584-UNIX Information Security Solutions SIP [email protected] www.backwatcher.com INUM +883-5100-0990-1657 / ISN UNIX*1917 / C*NET 1-731-UNIX GPG ed25519/F57091DBD60FBBB8 [ed25519/D60FBBB8] 985C 5B61 4ACE C89A 0DEE ECCD F570 91DB D60F BBB8 rsa4096/CF001165F36E1CAB [rsa4096/F36E1CAB] 6050 05B7 9FF1 CC21 3F00 CEBB CF00 1165 F36E 1CAB OTR E1A46361 9FD0D801 0132D21A FE2E96BE 39E3F069 : [email protected] 5AB3E0B8 31F6ADB4 9A7D2FC2 A8235281 5776701E : silcnet
--- Makefile.dist 2016-02-23 07:06:03.323811000 -0800 +++ Makefile 2016-02-23 07:22:56.047782000 -0800 @@ -40,13 +40,13 @@ NO_OPTIONS_SORT= yes OPTIONS_DEFINE= ALWAYSTRUE AUTHDAEMOND DOCS KEEP_DB_OPEN \ - OBSOLETE_CRAM_ATTR BDB MYSQL PGSQL + OBSOLETE_CRAM_ATTR BDB MYSQL PGSQL SRP-SETPASS OPTIONS_RADIO= SQLITE OPTIONS_RADIO_SQLITE= SQLITE2 SQLITE3 OPTIONS_GROUP= MECH -OPTIONS_GROUP_MECH= CRAM DIGEST LOGIN NTLM OTP PLAIN SCRAM +OPTIONS_GROUP_MECH= CRAM DIGEST LOGIN NTLM OTP PLAIN SCRAM SRP OPTIONS_DEFAULT= AUTHDAEMOND OBSOLETE_CRAM_ATTR CRAM DIGEST \ - LOGIN NTLM OTP PLAIN SCRAM + LOGIN NTLM OTP PLAIN SCRAM SRP SRP-SETPASS OPTIONS_SUB= yes ALWAYSTRUE_DESC= the alwaystrue password verifier ALWAYSTRUE_CONFIGURE_ENABLE=alwaystrue @@ -90,6 +90,10 @@ PLAIN_CONFIGURE_ENABLE= plain SCRAM_DESC= SCRAM authentication SCRAM_CONFIGURE_ENABLE= scram +SRP_DESC= SRP authentication +SRP_CONFIGURE_ENABLE= srp +SRP-SETPASS_DESC= enable srp-setpass +SRP-SETPASS_CONFIGURE_ENABLE= srp-setpass .include <bsd.port.pre.mk>
--- pkg-plist.dist 2016-02-23 08:01:04.584010000 -0800 +++ pkg-plist 2016-02-23 07:45:31.537829000 -0800 @@ -55,6 +55,11 @@ %%PLAIN%%lib/sasl2/libplain.so %%PLAIN%%lib/sasl2/libplain.so.3 %%PLAIN%%lib/sasl2/libplain.so.3.0.0 +%%SRP%%lib/sasl2/libsrp.a +%%SRP%%lib/sasl2/libsrp.la +%%SRP%%lib/sasl2/libsrp.so +%%SRP%%lib/sasl2/libsrp.so.3 +%%SRP%%lib/sasl2/libsrp.so.3.0.0 lib/sasl2/libsasldb.a lib/sasl2/libsasldb.la lib/sasl2/libsasldb.so
pgpa01Oaz9HnD.pgp
Description: OpenPGP digital signature
