UPDATE: www/py-feedgenerator
Hi, ports@! Here is an update for py-feedgenerator: Index: Makefile === RCS file: /cvs/ports/www/py-feedgenerator/Makefile,v retrieving revision 1.5 diff -u -p -r1.5 Makefile --- Makefile9 Apr 2016 18:43:56 - 1.5 +++ Makefile20 Nov 2016 02:22:33 - @@ -2,7 +2,7 @@ COMMENT = standalone version of Django's feedgenerator -MODPY_EGG_VERSION =1.8 +MODPY_EGG_VERSION =1.9 DISTNAME = feedgenerator-${MODPY_EGG_VERSION} PKGNAME = py-feedgenerator-${MODPY_EGG_VERSION} Index: distinfo === RCS file: /cvs/ports/www/py-feedgenerator/distinfo,v retrieving revision 1.2 diff -u -p -r1.2 distinfo --- distinfo9 Apr 2016 18:43:56 - 1.2 +++ distinfo20 Nov 2016 02:22:33 - @@ -1,2 +1,2 @@ -SHA256 (feedgenerator-1.8.tar.gz) = wApg7lF5yZMwB49AFsOZJBVKNGd/C4TGJVa168KtcVY= -SIZE (feedgenerator-1.8.tar.gz) = 4135643 +SHA256 (feedgenerator-1.9.tar.gz) = WuBdqpz6R/pAbuR0TQt/ocigWnpH7grTKN31UyfPsQY= +SIZE (feedgenerator-1.9.tar.gz) = 4136224 -- With best regards, Vladimir D. Seleznev
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: j...@cvs.openbsd.org2016/11/19 18:47:00 Modified files: sysutils/u-boot: Makefile distinfo sysutils/u-boot/patches: patch-include_configs_omap3_beagle_h patch-include_configs_ti_omap5_common_h sysutils/u-boot/pkg: PLIST Log message: update to u-boot 2016.11 and enable new Cubieboard4 target Tested on cubox, panda and bbb.
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: j...@cvs.openbsd.org2016/11/19 17:56:44 Modified files: devel/libyaml : Makefile distinfo Removed files: devel/libyaml/patches: patch-src_scanner_c Log message: update to libyaml 0.1.7 ok rpointel@, maintainer timeout
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: st...@cvs.openbsd.org 2016/11/19 15:47:23 Modified files: security/softhsm: Makefile distinfo security/softhsm/patches: patch-configure Removed files: security/softhsm/patches: patch-src_bin_softhsm-keyconv_cpp patch-src_bin_softhsm_cpp Log message: update to softhsm-1.3.8, from Patrik Lundin
Re: security/softhsm: 1.3.8
On 2016/11/19 21:07, Patrik Lundin wrote: > On Sat, Nov 19, 2016 at 02:02:06PM +, Stuart Henderson wrote: > > > > It seems the first hunk of the configure script patch is unnecessary, > > probably since changes to pthread so that pulled in as a normal dependency. > > Can you confirm that please? > > > > Good catch, new diff below. Thanks - committed.
Re: powerpc bulk build report
llvm failure seems to be related to atomic functions being located in libatomic on powerpc. LDFLAGS=-latomic should perhaps help here. I don't have this platform myself so can someone please test? Thanks! On Sat, Nov 19, 2016 at 9:19 PM,wrote: > http://build-failures.rhaalovely.net//powerpc/2016-11-07/devel/llvm.log
UPDATE: net/lftp
Hi @ports, below is an update diff to net/lftp 4.7.4. Tested on amd64. OK, comments? Kind regards, Rafael Sadowski Index: Makefile === RCS file: /cvs/ports/net/lftp/Makefile,v retrieving revision 1.110 diff -u -p -u -p -r1.110 Makefile --- Makefile7 Aug 2016 21:40:20 - 1.110 +++ Makefile19 Nov 2016 20:31:17 - @@ -2,10 +2,10 @@ COMMENT= shell-like command line ftp and sftp client -DISTNAME= lftp-4.7.3 +DISTNAME= lftp-4.7.4 CATEGORIES=net -HOMEPAGE= https://lftp.yar.ru/ +HOMEPAGE= https://lftp.tech/ MAINTAINER=Rafael Sadowski@@ -20,6 +20,10 @@ USE_GROFF= Yes # lftp needs add_history_time() LIB_DEPENDS= devel/libidn \ devel/readline>=6.1p2 \ + +RUN_DEPENDS= devel/gettext + +BUILD_DEPENDS =devel/gettext-tools MASTER_SITES= https://lftp.yar.ru/ftp/ Index: distinfo === RCS file: /cvs/ports/net/lftp/distinfo,v retrieving revision 1.69 diff -u -p -u -p -r1.69 distinfo --- distinfo7 Aug 2016 21:40:20 - 1.69 +++ distinfo19 Nov 2016 20:31:17 - @@ -1,2 +1,2 @@ -SHA256 (lftp-4.7.3.tar.gz) = zmUZgxYDwZws8uPBC0HW3ch6FgSbmTg+e5t3+8dwchQ= -SIZE (lftp-4.7.3.tar.gz) = 2715817 +SHA256 (lftp-4.7.4.tar.gz) = j1XDfP37ziSpy0e2IcoSf0DTp95bTEn4xJ8Xv/co+zE= +SIZE (lftp-4.7.4.tar.gz) = 2766143 Index: patches/patch-configure === RCS file: /cvs/ports/net/lftp/patches/patch-configure,v retrieving revision 1.14 diff -u -p -u -p -r1.14 patch-configure --- patches/patch-configure 7 Aug 2016 21:40:20 - 1.14 +++ patches/patch-configure 19 Nov 2016 20:31:17 - @@ -2,9 +2,9 @@ $OpenBSD: patch-configure,v 1.14 2016/08 Use GNU readline as our base readline lacks add_history_time(). configure.orig Fri Jul 15 12:43:04 2016 -+++ configure Thu Jul 21 05:20:48 2016 -@@ -48435,7 +48435,7 @@ fi +--- configure.orig Wed Nov 16 14:11:30 2016 configure Thu Nov 17 18:51:19 2016 +@@ -48854,7 +48854,7 @@ fi readline_include_dir="$readline_include_dir/readline" fi readline_ld_flags="-L$readline_prefix/lib" Index: patches/patch-src_Makefile_in === RCS file: /cvs/ports/net/lftp/patches/patch-src_Makefile_in,v retrieving revision 1.12 diff -u -p -u -p -r1.12 patch-src_Makefile_in --- patches/patch-src_Makefile_in 27 May 2016 12:08:46 - 1.12 +++ patches/patch-src_Makefile_in 19 Nov 2016 20:31:17 - @@ -1,7 +1,7 @@ $OpenBSD: patch-src_Makefile_in,v 1.12 2016/05/27 12:08:46 jca Exp $ src/Makefile.in.orig Mon May 23 17:34:28 2016 -+++ src/Makefile.inMon May 23 17:35:10 2016 -@@ -235,7 +235,7 @@ am__installdirs = "$(DESTDIR)$(libdir)" "$(DESTDIR)$(p +--- src/Makefile.in.orig Wed Nov 16 14:11:29 2016 src/Makefile.inThu Nov 17 18:51:19 2016 +@@ -237,7 +237,7 @@ am__installdirs = "$(DESTDIR)$(libdir)" "$(DESTDIR)$(p "$(DESTDIR)$(bindir)" "$(DESTDIR)$(bindir)" \ "$(DESTDIR)$(pkgdatadir)" LTLIBRARIES = $(lib_LTLIBRARIES) $(pkgverlib_LTLIBRARIES) Index: patches/patch-src_Resolver_cc === RCS file: /cvs/ports/net/lftp/patches/patch-src_Resolver_cc,v retrieving revision 1.12 diff -u -p -u -p -r1.12 patch-src_Resolver_cc --- patches/patch-src_Resolver_cc 16 Sep 2014 12:35:18 - 1.12 +++ patches/patch-src_Resolver_cc 19 Nov 2016 20:31:17 - @@ -1,7 +1,7 @@ $OpenBSD: patch-src_Resolver_cc,v 1.12 2014/09/16 12:35:18 sthen Exp $ src/Resolver.cc.orig Wed Aug 27 09:34:02 2014 -+++ src/Resolver.ccTue Sep 16 13:21:48 2014 -@@ -801,8 +801,6 @@ void Resolver::LookupOne(const char *name) +--- src/Resolver.cc.orig Mon Oct 24 12:38:48 2016 src/Resolver.ccThu Nov 17 18:51:19 2016 +@@ -804,8 +804,6 @@ void Resolver::LookupOne(const char *name) # undef h_errno // it could be a macro, but we want it to be local variable. int h_errno=0; ha=getipnodebyname(name,af,0,_errno); Index: patches/patch-src_lftp_rl_c === RCS file: patches/patch-src_lftp_rl_c diff -N patches/patch-src_lftp_rl_c --- patches/patch-src_lftp_rl_c 27 May 2016 12:09:20 - 1.1 +++ /dev/null 1 Jan 1970 00:00:00 - @@ -1,14 +0,0 @@ -$OpenBSD: patch-src_lftp_rl_c,v 1.1 2016/05/27 12:09:20 jca Exp $ src/lftp_rl.c.orig Mon May 23 17:46:56 2016 -+++ src/lftp_rl.c Mon May 23 17:47:33 2016 -@@ -19,8 +19,8 @@ - - #include - #include --#include --#include -+#include -+#include - #include - #include - #include "lftp_rl.h"
powerpc bulk build report
bulk build on macppc-1.ports.openbsd.org started on Mon Nov 7 13:57:01 MST 2016 finished at Sat Nov 19 13:18:55 MST 2016 lasted 12D16h21m done with kern.version=OpenBSD 6.0-current (GENERIC.MP) #0: Sun Nov 6 18:42:23 MST 2016 built packages:7528 Nov 7:549 Nov 8:249 Nov 9:661 Nov 10:473 Nov 11:336 Nov 12:342 Nov 13:349 Nov 14:390 Nov 15:364 Nov 16:524 Nov 17:431 Nov 18:441 Nov 19:2418 build failures: 11 http://build-failures.rhaalovely.net//powerpc/2016-11-07/audio/moc.log http://build-failures.rhaalovely.net//powerpc/2016-11-07/databases/openldap23.log http://build-failures.rhaalovely.net//powerpc/2016-11-07/devel/llvm.log http://build-failures.rhaalovely.net//powerpc/2016-11-07/devel/reposurgeon.log http://build-failures.rhaalovely.net//powerpc/2016-11-07/editors/emacs21.log http://build-failures.rhaalovely.net//powerpc/2016-11-07/graphics/tesseract/tessdata,-afr.log http://build-failures.rhaalovely.net//powerpc/2016-11-07/lang/guile2.log http://build-failures.rhaalovely.net//powerpc/2016-11-07/lang/node.log http://build-failures.rhaalovely.net//powerpc/2016-11-07/news/slrn.log http://build-failures.rhaalovely.net//powerpc/2016-11-07/security/py-cryptography.log http://build-failures.rhaalovely.net//powerpc/2016-11-07/www/pear.log recurrent failures failures/audio/moc.log failures/devel/llvm.log failures/devel/reposurgeon.log failures/editors/emacs21.log failures/lang/guile2.log failures/lang/node.log new failures +++ ls-failures Sat Nov 19 13:19:21 2016 +failures/databases/openldap23.log +failures/graphics/tesseract/tessdata,-afr.log +failures/news/slrn.log +failures/security/py-cryptography.log +failures/www/pear.log resolved failures --- ../old/powerpc/last//ls-failuresMon Oct 31 07:49:39 2016 -failures/graphics/openimageio.log -failures/plan9/drawterm.log -failures/sysutils/u-boot.log -failures/www/gnash.log Base libs: curses.14.0 edit.5.2 event.4.1 expat.11.0 form.6.0 formw.6.0 fuse.1.1 iberty.12.0 menu.6.0 menuw.6.0 ncurses.14.0 ncursesw.14.0 objc.6.0 ossaudio.4.0 panel.6.0 panelw.6.0 perl.17.1 readline.4.0 rpcsvc.2.0 skey.6.0 radius.1.0 sndio.6.1 stdc++.57.0 termcap.14.0 .14.0 z.5.0 usbhid.7.0 util.12.1 pcap.8.1 pthread.23.0 c.89.2 c.89.2.a kvm.16.2 m.10.0 crypto.39.1 ssl.40.1 tls.12.1 X libs: EGL.1.0 FS.10.0 GLESv1_CM.1.0 GLU.9.0 GLw.6.0 ICE.10.0 SM.9.0 X11-xcb.2.0 X11.16.1 XRes.5.0 Xau.10.0 Xaw.15.0 Xaw7.15.0 Xcomposite.4.0 Xcursor.5.0 Xdamage.4.0 Xdmcp.11.0 Xext.13.0 Xfixes.6.0 Xfontcache.5.0 Xi.12.1 Xinerama.6.0 Xmu.11.0 Xmuu.6.0 Xpm.9.0 Xrender.6.0 Xss.6.0 Xt.11.0 Xtst.11.0 Xv.6.0 XvMC.6.0 XvMCW.2.0 Xxf86dga.6.0 dmx.2.0 Xxf86misc.6.0 Xxf86vm.6.0 fontenc.4.0 epoxy.2.0 gbm.0.0 pciaccess.2.0 pixman-1.32.6 pthread-stubs.2.0 txc_dxtn.0.0 xcb-composite.1.0 xcb-damage.1.0 xcb-dpms.1.0 xcb-dri2.1.1 xcb-dri3.0.0 xcb-ewmh.2.0 xcb-cursor.0.0 xcb-icccm.4.0 xcb-image.2.0 xcb-res.1.1 xcb-keysyms.3.0 xkbui.5.0 xcb-shm.1.1 xcb-xevie.1.0 xcb-xf86dri.2.0 xcb-util.0.0 xcb-xinerama.1.0 xcb-xtest.1.0 xcb-xvmc.1.0 xkbfile.6.0 Xrandr.7.1 XvMCr600.1.0 xcb-render-util.2.0 drm_amdgpu.1.1 drm_nouveau.3.0 drm_radeon.4.0 GL.17.0 GLESv2.1.1 OSMesa.10.0 Xfont.13.0 Xft.10.0 glapi.0.2 fontconfig.11.0 xcb-glx.1.1 xcb-randr.2.2 xcb-present.0.1 xcb-record.1.1 xcb-render.1.1 xcb-screensaver.1.1 xcb-shape.1.1 xcb-sync.1.2 xcb-xfixes.1.2 xcb-xkb.0.1 xcb-xprint.3.0 xcb-xv.1.1 xcb.4.0 drm.7.2 freetype.27.0
Re: security/softhsm: 1.3.8
On Sat, Nov 19, 2016 at 02:02:06PM +, Stuart Henderson wrote: > > It seems the first hunk of the configure script patch is unnecessary, > probably since changes to pthread so that pulled in as a normal dependency. > Can you confirm that please? > Good catch, new diff below. -- Patrik Lundin Index: Makefile === RCS file: /cvs/ports/security/softhsm/Makefile,v retrieving revision 1.6 diff -u -p -u -r1.6 Makefile --- Makefile23 Sep 2016 09:16:57 - 1.6 +++ Makefile19 Nov 2016 19:50:48 - @@ -5,9 +5,7 @@ PORTROACH_COMMENT= the 2.x version has a COMMENT= software PKCS\#11 cryptographic token -DISTNAME= softhsm-1.3.7 - -REVISION= 1 +DISTNAME= softhsm-1.3.8 CATEGORIES=security Index: distinfo === RCS file: /cvs/ports/security/softhsm/distinfo,v retrieving revision 1.1.1.1 diff -u -p -u -r1.1.1.1 distinfo --- distinfo23 Jun 2015 11:26:05 - 1.1.1.1 +++ distinfo19 Nov 2016 19:50:48 - @@ -1,2 +1,2 @@ -SHA256 (softhsm-1.3.7.tar.gz) = 0S1kVqhVYSZtnaQnVl8+43RqNd9mcNXmvnXeJTwoEKQ= -SIZE (softhsm-1.3.7.tar.gz) = 438437 +SHA256 (softhsm-1.3.8.tar.gz) = LqrjoB7DAkHay8bEar8aeNflRkPneTz4qb6Y++a1lTo= +SIZE (softhsm-1.3.8.tar.gz) = 451445 Index: patches/patch-configure === RCS file: /cvs/ports/security/softhsm/patches/patch-configure,v retrieving revision 1.1.1.1 diff -u -p -u -r1.1.1.1 patch-configure --- patches/patch-configure 23 Jun 2015 11:26:05 - 1.1.1.1 +++ patches/patch-configure 19 Nov 2016 19:50:48 - @@ -1,18 +1,7 @@ $OpenBSD: patch-configure,v 1.1.1.1 2015/06/23 11:26:05 jca Exp $ configure.orig Wed May 28 08:03:56 2014 -+++ configure Mon Jun 22 13:16:45 2015 -@@ -4351,8 +4351,8 @@ else - fi - - -- BOTAN_INCLUDES="-I$BOTAN_PATH/include/botan-1.10" -- BOTAN_LIBS="-L$BOTAN_PATH/lib -lbotan-1.10" -+ BOTAN_INCLUDES=`botan-config-1.10 --cflags` -+ BOTAN_LIBS=`botan-config-1.10 --libs` - tmp_CPPFLAGS=$CPPFLAGS - tmp_LIBS=$LIBS - CPPFLAGS="$CPPFLAGS $BOTAN_INCLUDES" -@@ -16255,7 +16255,7 @@ CFLAGS=$lt_save_CFLAGS +--- configure.orig Sat Nov 19 20:40:23 2016 configure Sat Nov 19 20:40:39 2016 +@@ -16410,7 +16410,7 @@ CFLAGS=$lt_save_CFLAGS Index: patches/patch-src_bin_softhsm-keyconv_cpp === RCS file: patches/patch-src_bin_softhsm-keyconv_cpp diff -N patches/patch-src_bin_softhsm-keyconv_cpp --- patches/patch-src_bin_softhsm-keyconv_cpp 21 Sep 2015 13:24:46 - 1.1 +++ /dev/null 1 Jan 1970 00:00:00 - @@ -1,113 +0,0 @@ -$OpenBSD: patch-src_bin_softhsm-keyconv_cpp,v 1.1 2015/09/21 13:24:46 sthen Exp $ - -From aa2d1ebb0ef31c71a4db4435f3dc056cacf87209 Mon Sep 17 00:00:00 2001 -From: Rickard Bellgrim-Date: Sun, 26 Oct 2014 08:08:43 +0100 -Subject: [PATCH 1/2] SOFTHSM-101: softhsm-keyconv creates files with sensitive - material in insecure way. Also applies to softhsm when using --export or - --optimize. - -From 285ae80336ca57e186f69bd249736ade6445b873 Mon Sep 17 00:00:00 2001 -From: Rickard Bellgrim -Date: Sun, 26 Oct 2014 08:45:11 +0100 -Subject: [PATCH 2/2] SOFTHSM-101: Include more header files - src/bin/softhsm-keyconv.cpp.orig Wed May 28 07:59:14 2014 -+++ src/bin/softhsm-keyconv.cppMon Sep 21 14:25:56 2015 -@@ -48,6 +48,10 @@ - #include - #include - #include -+#include -+#include -+#include -+#include - - void usage() { - printf("Converting between BIND .private-key format and PKCS#8 key file format.\n"); -@@ -391,6 +395,15 @@ int to_pkcs8(char *in_path, char *out_path, char *file - return 1; - } - -+ // Create and set file permissions if the file does not exist. -+ int fd = open(out_path, O_CREAT, S_IRUSR | S_IWUSR); -+ if (fd == -1) { -+fprintf(stderr, "ERROR: Could not open the output file: %s (errno %i)\n", -+out_path, errno); -+return 1; -+ } -+ close(fd); -+ - // Save the the key to the disk - switch(algorithm) { - case DNS_KEYALG_ERROR: -@@ -735,8 +748,16 @@ int save_rsa_bind(char *name, int ttl, Botan::Private_ - snprintf(priv_out, MAX_LINE, "K%s+%03i+%05i.private", name, algorithm, key_tag); - snprintf(pub_out, MAX_LINE, "K%s+%03i+%05i.key", name, algorithm, key_tag); - -- // Create the private key file -+ // Create and set file permissions if the file does not exist. -+ int fd = open(priv_out, O_CREAT, S_IRUSR | S_IWUSR); -+ if (fd == -1) { -+fprintf(stderr, "ERROR: Could not open the output file: %s (errno %i)\n", -+priv_out, errno); -+return 1; -+ } -+ close(fd); - -+ // Create the private key file - file_pointer = fopen(priv_out, "w"); - if (!file_pointer) { - fprintf(stderr, "Error: Could not open output
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: jer...@cvs.openbsd.org 2016/11/19 11:28:40 Added files: audio/aqualung/patches: patch-src_core_c Log message: Reinitialize sndio in case of an audio(4) error, as otherwise you need to restart aqualung in such cases. REVISION was just bumped in a previous commit. OK sthen@
Re: [new] mail/rmilter
On 11/19/16 11:37, Stuart Henderson wrote: > On 2016/11/19 11:13, Johan Huldtgren wrote: >> hello, >> >> rmilter is used to integrate rspamd with any milter-compatible >> MTA, this is mostly taken from openbsd-wip with all the heavy >> lifting by @sthen. I made some minor changes: >> >> - Update from 1.9.2 to a later working version >> - bumped the uid/gid as 780 which was originally in there is now taken >> - changed the configuration files to live in /etc/rmilter/* as the >> recommendation is that you make changes to a .local file and/or create >> /etc/rmilter/local.d/ for further user/local customization >> >> # cat pkg/DESCR >> Rmilter is used to integrate rspamd with any milter-compatible >> MTA, for example postfix or sendmail. Features include: >> >> - ClamAV scanning (via unix or tcp socket). >> - Rspamd scanning >> - Greylisting and rate-limiting with redis upstream >> - Auto-whitelisting (internal and via redis upstream) >> - Replies check (whitelisting replies to sent messages) >> - Passing messages and/or their headers to beanstalk servers >> >> I've been running this on my mailserver (amd64) for a few weeks >> now and it works for me. >> >> thanks, >> >> .jh > > Updated one - fix deps and use a PKGNAME that can move to a normal > release once one has been done on the 2.10 branch without an ugly v0. Thanks, agreed that's better. > I still see the problem I was getting with the previous version > though: > > 2016-11-19T16:36:32.261Z symphytum rmilter[19335]: ; mlfi_data: > cannot get queue id, set to 'NOQUEUE' > (Plus no evidence of it feeding the mail through rspamd..) I don't see that on my end: from /var/log/maillog Nov 19 09:29:41 www rmilter[2887]: <22672d052d>; mlfi_data: queue id: <829A4CB7F> Nov 19 09:29:41 www rmilter[2887]: <22672d052d>; mlfi_eom: tempfile=/tmp/msg.n6FTWSkH, size=2828 Nov 19 09:29:41 www rmilter[2887]: <22672d052d>; spamdscan: start scanning message on localhost Nov 19 09:29:41 www rmilter[2887]: <22672d052d>; spamdscan: finish scanning message on localhost Nov 19 09:29:41 www rmilter[2887]: <22672d052d>; spamdscan: scan, time: 0.188, server: localhost, metric: default: [-0.750 / 15.000], symbols: R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36], MIME_GOOD(-0.10)[text/plain], DMARC_POLICY_ALLOW(-0.25)[gmail.com], RCVD_IN_DNSWL_LOW(0.00)[], R_DKIM_ALLOW(-0.20)[gmail.com] Nov 19 09:29:41 www rmilter[2887]: <22672d052d>; clamscan: start scanning message on /tmp/clamd.sock Nov 19 09:29:41 www rmilter[2887]: <22672d052d>; clamscan: finish scanning message on /tmp/clamd.sock Nov 19 09:29:41 www rmilter[2887]: <22672d052d>; clamscan: scan 0.013669, /tmp/clamd.sock, /tmp/msg.n6FTWSkH Nov 19 09:29:41 www rmilter[2887]: <22672d052d>; msg done: queue_id: <829A4CB7F>; message id: <3d72cff0-2837-9dea-50f2-af04a1014...@gmail.com>; ip: 2607:f8b0:400d:c09::22a; from:; rcpt: (1 total); user: unauthorized; spam scan: no spam; virus scan: clean; dkim: not signed, ignored >From /var/log/rspamd/rspamd.log 2016-11-19 09:29:41 #93200(normal) <2c578b>; task; accept_socket: accepted connection from 127.0.0.1 port 38870, task ptr: 04A231124790 2016-11-19 09:29:41 #93200(normal) <2c578b>; task; rspamd_url_text_extract: got empty text part 2016-11-19 09:29:41 #93200(normal) <2c578b>; task; rspamd_message_parse: loaded message; id: <3d72cff0-2837-9dea-50f2-af04a1014...@gmail.com>; queue-id: <829A4CB7F>; size: 2828; checksum: <80cf205c674f4682ffc4789fdcbcae65> 2016-11-19 09:29:41 #93200(normal) <2c578b>; task; fuzzy_generate_commands: <3d72cff0-2837-9dea-50f2-af04a1014...@gmail.com>, part is shorter than 100 bytes (2 bytes), skip fuzzy check 2016-11-19 09:29:41 #93200(normal) <2c578b>; task; bayes_classify: skip classification as ham class has not enough learns: 0, 200 required 2016-11-19 09:29:41 #93200(normal) <2c578b>; task; rspamd_stat_check_autolearn: <3d72cff0-2837-9dea-50f2-af04a1014...@gmail.com>: autolearn ham for classifier 'bayes' as message's score is negative: -0.75 2016-11-19 09:29:41 #93200(normal) <2c578b>; task; rspamd_stat_classifiers_learn: <3d72cff0-2837-9dea-50f2-af04a1014...@gmail.com> contains less tokens than required for bayes classifier: 4 < 11 2016-11-19 09:29:41 #93200(normal) <2c578b>; task; rspamd_task_process: learn error: <3d72cff0-2837-9dea-50f2-af04a1014...@gmail.com> contains less tokens than required for bayes classifier: 4 < 11 2016-11-19 09:29:41 #93200(normal) <2c578b>; task; rspamd_task_write_log: id: <3d72cff0-2837-9dea-50f2-af04a1014...@gmail.com>, qid: <829A4CB7F>, ip: 2607:f8b0:400d:c09::22a, from: , (default: F (no action): [-0.75/15.00] [DMARC_POLICY_ALLOW(-0.25),R_DKIM_ALLOW(-0.20),R_SPF_ALLOW(-0.20),MIME_GOOD(-0.10),RCVD_IN_DNSWL_LOW(0.00)]), len: 2828, time: 187.683116ms real, 4.045855ms virtual, dns req: 21 .jh
Re: [new] mail/rmilter
On 2016/11/19 16:37, Stuart Henderson wrote: > On 2016/11/19 11:13, Johan Huldtgren wrote: > > hello, > > > > rmilter is used to integrate rspamd with any milter-compatible > > MTA, this is mostly taken from openbsd-wip with all the heavy > > lifting by @sthen. I made some minor changes: > > > > - Update from 1.9.2 to a later working version > > - bumped the uid/gid as 780 which was originally in there is now taken > > - changed the configuration files to live in /etc/rmilter/* as the > > recommendation is that you make changes to a .local file and/or create > > /etc/rmilter/local.d/ for further user/local customization > > > > # cat pkg/DESCR > > Rmilter is used to integrate rspamd with any milter-compatible > > MTA, for example postfix or sendmail. Features include: > > > > - ClamAV scanning (via unix or tcp socket). > > - Rspamd scanning > > - Greylisting and rate-limiting with redis upstream > > - Auto-whitelisting (internal and via redis upstream) > > - Replies check (whitelisting replies to sent messages) > > - Passing messages and/or their headers to beanstalk servers > > > > I've been running this on my mailserver (amd64) for a few weeks > > now and it works for me. > > > > thanks, > > > > .jh > > Updated one - fix deps and use a PKGNAME that can move to a normal > release once one has been done on the 2.10 branch without an ugly v0. > > I still see the problem I was getting with the previous version > though: > > 2016-11-19T16:36:32.261Z symphytum rmilter[19335]: ; mlfi_data: > cannot get queue id, set to 'NOQUEUE' > > (Plus no evidence of it feeding the mail through rspamd..)
Re: [new] mail/rmilter
On 2016/11/19 11:13, Johan Huldtgren wrote: > hello, > > rmilter is used to integrate rspamd with any milter-compatible > MTA, this is mostly taken from openbsd-wip with all the heavy > lifting by @sthen. I made some minor changes: > > - Update from 1.9.2 to a later working version > - bumped the uid/gid as 780 which was originally in there is now taken > - changed the configuration files to live in /etc/rmilter/* as the > recommendation is that you make changes to a .local file and/or create > /etc/rmilter/local.d/ for further user/local customization > > # cat pkg/DESCR > Rmilter is used to integrate rspamd with any milter-compatible > MTA, for example postfix or sendmail. Features include: > > - ClamAV scanning (via unix or tcp socket). > - Rspamd scanning > - Greylisting and rate-limiting with redis upstream > - Auto-whitelisting (internal and via redis upstream) > - Replies check (whitelisting replies to sent messages) > - Passing messages and/or their headers to beanstalk servers > > I've been running this on my mailserver (amd64) for a few weeks > now and it works for me. > > thanks, > > .jh Updated one - fix deps and use a PKGNAME that can move to a normal release once one has been done on the 2.10 branch without an ugly v0. I still see the problem I was getting with the previous version though: 2016-11-19T16:36:32.261Z symphytum rmilter[19335]: ; mlfi_data: cannot get queue id, set to 'NOQUEUE' rmilter.tgz Description: application/tar-gz
Re: [new] mail/opendkim
On 2016/11/19 11:12, Johan Huldtgren wrote: > hello, > > opendkim is a dependency for mail/rmilter (separate mail). This port is > taken 100% from openbsd-wip by @sthen. I've been running this on my > mail server for a few weeks now and it works in conjunction with > rmilter. OK sthen@ :-) > # cat DESCR > OpenDKIM is an implementation of DKIM (RFC 6376, Domain Keys Identified > Mail), > an email sender authentication system. It consists of a library that > implements > the DKIM service and a milter-based filter application that can plug in to > any > milter-aware MTA to provide that service to sufficiently recent sendmail > MTAs > and other MTAs that support the milter protocol. > > thanks, > > .jh
[new] mail/rmilter
hello, rmilter is used to integrate rspamd with any milter-compatible MTA, this is mostly taken from openbsd-wip with all the heavy lifting by @sthen. I made some minor changes: - Update from 1.9.2 to a later working version - bumped the uid/gid as 780 which was originally in there is now taken - changed the configuration files to live in /etc/rmilter/* as the recommendation is that you make changes to a .local file and/or create /etc/rmilter/local.d/ for further user/local customization # cat pkg/DESCR Rmilter is used to integrate rspamd with any milter-compatible MTA, for example postfix or sendmail. Features include: - ClamAV scanning (via unix or tcp socket). - Rspamd scanning - Greylisting and rate-limiting with redis upstream - Auto-whitelisting (internal and via redis upstream) - Replies check (whitelisting replies to sent messages) - Passing messages and/or their headers to beanstalk servers I've been running this on my mailserver (amd64) for a few weeks now and it works for me. thanks, .jh rmilter.tgz Description: GNU Zip compressed data
[new] mail/opendkim
hello, opendkim is a dependency for mail/rmilter (separate mail). This port is taken 100% from openbsd-wip by @sthen. I've been running this on my mail server for a few weeks now and it works in conjunction with rmilter. # cat DESCR OpenDKIM is an implementation of DKIM (RFC 6376, Domain Keys Identified Mail), an email sender authentication system. It consists of a library that implements the DKIM service and a milter-based filter application that can plug in to any milter-aware MTA to provide that service to sufficiently recent sendmail MTAs and other MTAs that support the milter protocol. thanks, .jh opendkim.tgz Description: GNU Zip compressed data
Re: UPDATE: /devel/ninja 1.7.1 -> 1.7.2
On 2016/11/19 16:53, David Coppa wrote: > On Sat, Nov 19, 2016 at 1:45 PM, Stuart Henderson> wrote: > > On 2016/11/18 19:25, Rafael Sadowski wrote: > >> > To save time for testing, which ports did you try it with? (It will > >> > need testing with at least a selection of cmake things, plus one of > >> > chromium/iridium). > >> > >> Successful chromium-54.0.2840.100 build with ninja 1.7.2. > > > > Thanks, I think this is enough. > > It works for cmake too. > > > I just noticed this though: > > > > On 2016/11/13 20:57, Rafael Sadowski wrote: > >> - add post-install to compile ninja_syntax.py > > > > I don't think this is useful, pyc files are only for things which > > are imported. > > Agreed. > > I think this update can be committed, without the post-install, as Stuart > said. > > Thanks! > David Thanks, committed.
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: st...@cvs.openbsd.org 2016/11/19 09:06:59 Modified files: devel/ninja: Makefile distinfo Log message: update to ninja-01.7.2, from Rafael Sadowski (who tested it with various ports including chromium, llvm, opencv). Small tweak by me to remove an unnecessary extra pyc file, dcoppa agrees.
Re: UPDATE: /devel/ninja 1.7.1 -> 1.7.2
On Sat, Nov 19, 2016 at 1:45 PM, Stuart Hendersonwrote: > On 2016/11/18 19:25, Rafael Sadowski wrote: >> > To save time for testing, which ports did you try it with? (It will >> > need testing with at least a selection of cmake things, plus one of >> > chromium/iridium). >> >> Successful chromium-54.0.2840.100 build with ninja 1.7.2. > > Thanks, I think this is enough. It works for cmake too. > I just noticed this though: > > On 2016/11/13 20:57, Rafael Sadowski wrote: >> - add post-install to compile ninja_syntax.py > > I don't think this is useful, pyc files are only for things which > are imported. Agreed. I think this update can be committed, without the post-install, as Stuart said. Thanks! David -- "If you try a few times and give up, you'll never get there. But if you keep at it... There's a lot of problems in the world which can really be solved by applying two or three times the persistence that other people will." -- Stewart Nelson
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2016/11/19 08:42:46 Modified files: graphics/netpbm: Makefile distinfo Removed files: graphics/netpbm/patches: patch-test_pnmquantall_test Log message: maintenance update to 10.76.00
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: st...@cvs.openbsd.org 2016/11/19 08:35:09 Modified files: net/ocserv : Makefile distinfo net/ocserv/patches: patch-doc_sample_config Added files: net/ocserv/patches: patch-src_Makefile_in patch-src_ocpasswd_Makefile_in Log message: update to ocserv-0.11.6 plus patch for autogen problem in the release from Björn Ketelaars (I added a comment to recheck autogen because it changed again since that patch)
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: st...@cvs.openbsd.org 2016/11/19 08:28:40 Modified files: sysutils/cfengine: Makefile Log message: mark cfengine as BROKEN, newer pkg_add code is unable to install it due to some problem with symlinks.
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2016/11/19 08:04:12 Modified files: multimedia/mediainfo: Makefile distinfo multimedia/mediainfo/patches: patch-ZenLib_Project_GNU_Library_configure Log message: maintenance update to 0.7.90
Re: [UPDATE] sysutils/rancid
I think this is OK. pea@, any comments? On 2016/11/16 05:20, Pavel Korovin wrote: > On 11/15, Stuart Henderson wrote: > > Except for special situations (e.g. what we have in autoconf), an @conflict > > on the same port doesn't make sense. > > > > > +@ask-update rancid-<3v0 Make sure router.db files use new fields > > > separator before upgrading > > > > I think either MESSAGE *or* @ask-update is enough. ask-update is quite > > Stuart, thank you for your comments! > I agree that MESSAGE should be enough. > > Please see the updated patch with your suggestions applied and some more > cleanups, like removal of Looking Glass configs (I don't see any reason > to keep it while corresponding scripts were removed in the first place), > relocation of misc example files from ${PREFIX}/share to > ${PREFIX}/share/examples and commenting out several man pages for which > corresponding binaries were removed. > > -- > With best regards, > Pavel Korovin > Index: Makefile > === > RCS file: /cvs/ports/sysutils/rancid/Makefile,v > retrieving revision 1.17 > diff -u -p -r1.17 Makefile > --- Makefile 15 May 2013 09:49:40 - 1.17 > +++ Makefile 16 Nov 2016 01:58:05 - > @@ -2,8 +2,9 @@ > > COMMENT =Really Awesome New Cisco confIg Differ > > -DISTNAME = rancid-2.3.8 > -REVISION = 0 > +DISTNAME = rancid-3.5.1 > +DISTPATCH = 1 > +PKGNAME =${DISTNAME}pl${DISTPATCH} > EPOCH = 0 > CATEGORIES = sysutils > > @@ -19,20 +20,19 @@ WANTLIB = c util > > MASTER_SITES = ftp://ftp.shrubbery.net/pub/rancid/ > > +PATCHFILES = ${DISTNAME}.p${DISTPATCH}.gz > + > RUN_DEPENDS =lang/expect > BUILD_DEPENDS = ${RUN_DEPENDS} > > LOCALSTATEDIR = ${BASELOCALSTATEDIR}/rancid > > -AUTOMAKE_VERSION =1.8 > -CONFIGURE_STYLE =automake > +CONFIGURE_STYLE =gnu > CONFIGURE_ARGS = --prefix=${PREFIX} \ > --disable-mk-localstatedir > > +MAKE_FLAGS = sysconfdir=${BASESYSCONFDIR}/rancid > +FAKE_FLAGS = sysconfdir=${PREFIX}/share/examples/rancid > USE_GMAKE = yes > -USE_GROFF = Yes > - > -pre-configure: > - @cp ${FILESDIR}/fnlogin.in ${WRKSRC}/bin/fnlogin.in > > .include > Index: distinfo > === > RCS file: /cvs/ports/sysutils/rancid/distinfo,v > retrieving revision 1.6 > diff -u -p -r1.6 distinfo > --- distinfo 18 Jan 2015 03:15:14 - 1.6 > +++ distinfo 16 Nov 2016 01:58:05 - > @@ -1,2 +1,4 @@ > -SHA256 (rancid-2.3.8.tar.gz) = RORMh6IpaNUinAHWCqRpYNoCOiSEbu9D+ePI1w/Vs/s= > -SIZE (rancid-2.3.8.tar.gz) = 379908 > +SHA256 (rancid-3.5.1.p1.gz) = GqbR11OkR4dA3jbeTn8Zmiio1ZZ/iAfShCHJ4yogAPQ= > +SHA256 (rancid-3.5.1.tar.gz) = 82V5MNbr+FWs2WHJrK3v+wUM2e15gJ+tXbHB917PxxE= > +SIZE (rancid-3.5.1.p1.gz) = 202 > +SIZE (rancid-3.5.1.tar.gz) = 501561 > Index: files/fnlogin.in > === > RCS file: files/fnlogin.in > diff -N files/fnlogin.in > --- files/fnlogin.in 16 Dec 2008 21:07:55 - 1.1.1.1 > +++ /dev/null 1 Jan 1970 00:00:00 - > @@ -1,544 +0,0 @@ > -#! @EXPECT_PATH@ -- > -## > -## $Id: fnlogin.in,v 1.1.1.1 2008/12/16 21:07:55 pea Exp $ > -## > -## rancid 2.3.2a7 > -## Copyright (C) 1997-2006 by Terrapin Communications, Inc. > -## All rights reserved. > -## > -## This software may be freely copied, modified and redistributed > -## without fee for non-commerical purposes provided that this license > -## remains intact and unmodified with any RANCID distribution. > -## > -## There is no warranty or other guarantee of fitness of this software. > -## It is provided solely "as is". The author(s) disclaim(s) all > -## responsibility and liability with respect to this software's usage > -## or its effect upon hardware, computer systems, other software, or > -## anything else. > -## > -## Except where noted otherwise, rancid was written by and is maintained by > -## Henry Kilmer, John Heasley, Andrew Partan, Pete Whiting, and Austin > Schutz. > -## > -# > -# The login expect scripts were based on Erik Sherk's gwtn, by permission. > -# Netscreen hacks implemented by Stephen Gill. > -# > -# nlogin - netscreen login > -# > -# Most options are intuitive for logging into a netscreen firewall. > -# > -# Misc notes > -#netscreen does not have the concept of "enable", once logged in, a > -#users permissions can not change. > - > -# Usage line > -set usage "Usage: $argv0 \[-c command\] \[-Evar=x\] \[-f cloginrc-file\] \ > -\[-p user-password\] \ > -\[-s script-file\] \[-t timeout\] \[-u username\] \ > -\[-v vty-password\] \[-x command-file\] \ > -\[-y ssh_cypher_type\] router \[router...\]\n" > - > -# env(CLOGIN) may contain: > -#x == do not set xterm banner or name > - > -# Password file > -set password_file $env(HOME)/.cloginrc > -# Default is to login to the firewall > -set do_command 0 > -set do_script 0 > -#
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: st...@cvs.openbsd.org 2016/11/19 07:39:51 Modified files: sysutils/freeipmi: Makefile distinfo sysutils/freeipmi/patches: patch-libfreeipmi_Makefile_in Log message: update to freeipmi-1.5.5
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: st...@cvs.openbsd.org 2016/11/19 07:39:04 Modified files: net/p5-Net-Twitter: Makefile distinfo Log message: update to p5-Net-Twitter-4.01030
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: st...@cvs.openbsd.org 2016/11/19 07:38:14 Modified files: security/p5-Crypt-OpenSSL-DSA: Makefile distinfo Added files: security/p5-Crypt-OpenSSL-DSA/patches: patch-DSA_xs Log message: update to p5-Crypt-OpenSSL-DSA-0.18 patch for OPENSSL_VERSION_NUMBER libressl issue (accessor functions)
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: st...@cvs.openbsd.org 2016/11/19 07:32:53 Modified files: benchmarks/speedtest-cli: Makefile distinfo benchmarks/speedtest-cli/pkg: PLIST Log message: update to speedtest_cli-1.0.0
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: st...@cvs.openbsd.org 2016/11/19 07:28:11 Modified files: graphics/openjpeg: Makefile Log message: add portroach limit; 2.x is in graphics/openjp2
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: st...@cvs.openbsd.org 2016/11/19 07:26:31 Modified files: devel/ccache : Makefile distinfo Log message: update to ccache-3.3.3
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: st...@cvs.openbsd.org 2016/11/19 07:16:02 Modified files: multimedia/get_iplayer: Makefile multimedia/get_iplayer/files: options.sample Log message: minor get_iplayer tweaks: - remove tvmode/radiomode from sample options file - add RDEP on XML::LibXML (soft dependency)
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: st...@cvs.openbsd.org 2016/11/19 07:10:20 Modified files: multimedia/get_iplayer: Makefile distinfo multimedia/get_iplayer/patches: patch-get_iplayer Log message: update to get_iplayer-2.97
Re: security/softhsm: 1.3.8
On 2016/11/19 14:44, Patrik Lundin wrote: > Hello, > > Here is an update to security/softhsm 1.3.8: > https://www.opendnssec.org/2016/11/softhsm-1-3-8/ > === > SOFTHSM-101: softhsm-keyconv creates files with sensitive material in > insecure way. Also applies to softhsm-util when using > –export or –optimize. > SOFTHSM-104: Inconsistencies between v1 and v2. > Issue #17: Use the MutexFactory wrapper functions correctly. > === > > Note that SOFTHSM-101 was already backported to the version currently in > ports. This update removes those local patches. It also regens the > patch to the configure script. It seems the first hunk of the configure script patch is unnecessary, probably since changes to pthread so that pulled in as a normal dependency. Can you confirm that please? > -- > Patrik Lundin > > Index: Makefile > === > RCS file: /cvs/ports/security/softhsm/Makefile,v > retrieving revision 1.6 > diff -u -p -u -r1.6 Makefile > --- Makefile 23 Sep 2016 09:16:57 - 1.6 > +++ Makefile 19 Nov 2016 13:41:23 - > @@ -5,9 +5,7 @@ PORTROACH_COMMENT=the 2.x version has a > > COMMENT= software PKCS\#11 cryptographic token > > -DISTNAME=softhsm-1.3.7 > - > -REVISION=1 > +DISTNAME=softhsm-1.3.8 > > CATEGORIES= security > > Index: distinfo > === > RCS file: /cvs/ports/security/softhsm/distinfo,v > retrieving revision 1.1.1.1 > diff -u -p -u -r1.1.1.1 distinfo > --- distinfo 23 Jun 2015 11:26:05 - 1.1.1.1 > +++ distinfo 19 Nov 2016 13:41:23 - > @@ -1,2 +1,2 @@ > -SHA256 (softhsm-1.3.7.tar.gz) = 0S1kVqhVYSZtnaQnVl8+43RqNd9mcNXmvnXeJTwoEKQ= > -SIZE (softhsm-1.3.7.tar.gz) = 438437 > +SHA256 (softhsm-1.3.8.tar.gz) = LqrjoB7DAkHay8bEar8aeNflRkPneTz4qb6Y++a1lTo= > +SIZE (softhsm-1.3.8.tar.gz) = 451445 > Index: patches/patch-configure > === > RCS file: /cvs/ports/security/softhsm/patches/patch-configure,v > retrieving revision 1.1.1.1 > diff -u -p -u -r1.1.1.1 patch-configure > --- patches/patch-configure 23 Jun 2015 11:26:05 - 1.1.1.1 > +++ patches/patch-configure 19 Nov 2016 13:41:23 - > @@ -1,7 +1,7 @@ > $OpenBSD: patch-configure,v 1.1.1.1 2015/06/23 11:26:05 jca Exp $ > configure.orig Wed May 28 08:03:56 2014 > -+++ configureMon Jun 22 13:16:45 2015 > -@@ -4351,8 +4351,8 @@ else > +--- configure.orig Mon Nov 14 10:37:59 2016 > configureSat Nov 19 13:26:33 2016 > +@@ -4537,8 +4537,8 @@ else > fi > > > @@ -12,7 +12,7 @@ $OpenBSD: patch-configure,v 1.1.1.1 2015 > tmp_CPPFLAGS=$CPPFLAGS > tmp_LIBS=$LIBS > CPPFLAGS="$CPPFLAGS $BOTAN_INCLUDES" > -@@ -16255,7 +16255,7 @@ CFLAGS=$lt_save_CFLAGS > +@@ -16410,7 +16410,7 @@ CFLAGS=$lt_save_CFLAGS > > > > Index: patches/patch-src_bin_softhsm-keyconv_cpp > === > RCS file: patches/patch-src_bin_softhsm-keyconv_cpp > diff -N patches/patch-src_bin_softhsm-keyconv_cpp > --- patches/patch-src_bin_softhsm-keyconv_cpp 21 Sep 2015 13:24:46 - > 1.1 > +++ /dev/null 1 Jan 1970 00:00:00 - > @@ -1,113 +0,0 @@ > -$OpenBSD: patch-src_bin_softhsm-keyconv_cpp,v 1.1 2015/09/21 13:24:46 sthen > Exp $ > - > -From aa2d1ebb0ef31c71a4db4435f3dc056cacf87209 Mon Sep 17 00:00:00 2001 > -From: Rickard Bellgrim> -Date: Sun, 26 Oct 2014 08:08:43 +0100 > -Subject: [PATCH 1/2] SOFTHSM-101: softhsm-keyconv creates files with > sensitive > - material in insecure way. Also applies to softhsm when using --export or > - --optimize. > - > -From 285ae80336ca57e186f69bd249736ade6445b873 Mon Sep 17 00:00:00 2001 > -From: Rickard Bellgrim > -Date: Sun, 26 Oct 2014 08:45:11 +0100 > -Subject: [PATCH 2/2] SOFTHSM-101: Include more header files > - > src/bin/softhsm-keyconv.cpp.orig Wed May 28 07:59:14 2014 > -+++ src/bin/softhsm-keyconv.cpp Mon Sep 21 14:25:56 2015 > -@@ -48,6 +48,10 @@ > - #include > - #include > - #include > -+#include > -+#include > -+#include > -+#include > - > - void usage() { > - printf("Converting between BIND .private-key format and PKCS#8 key file > format.\n"); > -@@ -391,6 +395,15 @@ int to_pkcs8(char *in_path, char *out_path, char *file > - return 1; > - } > - > -+ // Create and set file permissions if the file does not exist. > -+ int fd = open(out_path, O_CREAT, S_IRUSR | S_IWUSR); > -+ if (fd == -1) { > -+fprintf(stderr, "ERROR: Could not open the output file: %s (errno > %i)\n", > -+out_path, errno); > -+return 1; > -+ } > -+ close(fd); > -+ > - // Save the the key to the disk > - switch(algorithm) { > - case DNS_KEYALG_ERROR: > -@@ -735,8 +748,16 @@ int save_rsa_bind(char *name, int ttl, Botan::Private_ > - snprintf(priv_out, MAX_LINE,
security/softhsm: 1.3.8
Hello, Here is an update to security/softhsm 1.3.8: https://www.opendnssec.org/2016/11/softhsm-1-3-8/ === SOFTHSM-101: softhsm-keyconv creates files with sensitive material in insecure way. Also applies to softhsm-util when using –export or –optimize. SOFTHSM-104: Inconsistencies between v1 and v2. Issue #17: Use the MutexFactory wrapper functions correctly. === Note that SOFTHSM-101 was already backported to the version currently in ports. This update removes those local patches. It also regens the patch to the configure script. -- Patrik Lundin Index: Makefile === RCS file: /cvs/ports/security/softhsm/Makefile,v retrieving revision 1.6 diff -u -p -u -r1.6 Makefile --- Makefile23 Sep 2016 09:16:57 - 1.6 +++ Makefile19 Nov 2016 13:41:23 - @@ -5,9 +5,7 @@ PORTROACH_COMMENT= the 2.x version has a COMMENT= software PKCS\#11 cryptographic token -DISTNAME= softhsm-1.3.7 - -REVISION= 1 +DISTNAME= softhsm-1.3.8 CATEGORIES=security Index: distinfo === RCS file: /cvs/ports/security/softhsm/distinfo,v retrieving revision 1.1.1.1 diff -u -p -u -r1.1.1.1 distinfo --- distinfo23 Jun 2015 11:26:05 - 1.1.1.1 +++ distinfo19 Nov 2016 13:41:23 - @@ -1,2 +1,2 @@ -SHA256 (softhsm-1.3.7.tar.gz) = 0S1kVqhVYSZtnaQnVl8+43RqNd9mcNXmvnXeJTwoEKQ= -SIZE (softhsm-1.3.7.tar.gz) = 438437 +SHA256 (softhsm-1.3.8.tar.gz) = LqrjoB7DAkHay8bEar8aeNflRkPneTz4qb6Y++a1lTo= +SIZE (softhsm-1.3.8.tar.gz) = 451445 Index: patches/patch-configure === RCS file: /cvs/ports/security/softhsm/patches/patch-configure,v retrieving revision 1.1.1.1 diff -u -p -u -r1.1.1.1 patch-configure --- patches/patch-configure 23 Jun 2015 11:26:05 - 1.1.1.1 +++ patches/patch-configure 19 Nov 2016 13:41:23 - @@ -1,7 +1,7 @@ $OpenBSD: patch-configure,v 1.1.1.1 2015/06/23 11:26:05 jca Exp $ configure.orig Wed May 28 08:03:56 2014 -+++ configure Mon Jun 22 13:16:45 2015 -@@ -4351,8 +4351,8 @@ else +--- configure.orig Mon Nov 14 10:37:59 2016 configure Sat Nov 19 13:26:33 2016 +@@ -4537,8 +4537,8 @@ else fi @@ -12,7 +12,7 @@ $OpenBSD: patch-configure,v 1.1.1.1 2015 tmp_CPPFLAGS=$CPPFLAGS tmp_LIBS=$LIBS CPPFLAGS="$CPPFLAGS $BOTAN_INCLUDES" -@@ -16255,7 +16255,7 @@ CFLAGS=$lt_save_CFLAGS +@@ -16410,7 +16410,7 @@ CFLAGS=$lt_save_CFLAGS Index: patches/patch-src_bin_softhsm-keyconv_cpp === RCS file: patches/patch-src_bin_softhsm-keyconv_cpp diff -N patches/patch-src_bin_softhsm-keyconv_cpp --- patches/patch-src_bin_softhsm-keyconv_cpp 21 Sep 2015 13:24:46 - 1.1 +++ /dev/null 1 Jan 1970 00:00:00 - @@ -1,113 +0,0 @@ -$OpenBSD: patch-src_bin_softhsm-keyconv_cpp,v 1.1 2015/09/21 13:24:46 sthen Exp $ - -From aa2d1ebb0ef31c71a4db4435f3dc056cacf87209 Mon Sep 17 00:00:00 2001 -From: Rickard Bellgrim-Date: Sun, 26 Oct 2014 08:08:43 +0100 -Subject: [PATCH 1/2] SOFTHSM-101: softhsm-keyconv creates files with sensitive - material in insecure way. Also applies to softhsm when using --export or - --optimize. - -From 285ae80336ca57e186f69bd249736ade6445b873 Mon Sep 17 00:00:00 2001 -From: Rickard Bellgrim -Date: Sun, 26 Oct 2014 08:45:11 +0100 -Subject: [PATCH 2/2] SOFTHSM-101: Include more header files - src/bin/softhsm-keyconv.cpp.orig Wed May 28 07:59:14 2014 -+++ src/bin/softhsm-keyconv.cppMon Sep 21 14:25:56 2015 -@@ -48,6 +48,10 @@ - #include - #include - #include -+#include -+#include -+#include -+#include - - void usage() { - printf("Converting between BIND .private-key format and PKCS#8 key file format.\n"); -@@ -391,6 +395,15 @@ int to_pkcs8(char *in_path, char *out_path, char *file - return 1; - } - -+ // Create and set file permissions if the file does not exist. -+ int fd = open(out_path, O_CREAT, S_IRUSR | S_IWUSR); -+ if (fd == -1) { -+fprintf(stderr, "ERROR: Could not open the output file: %s (errno %i)\n", -+out_path, errno); -+return 1; -+ } -+ close(fd); -+ - // Save the the key to the disk - switch(algorithm) { - case DNS_KEYALG_ERROR: -@@ -735,8 +748,16 @@ int save_rsa_bind(char *name, int ttl, Botan::Private_ - snprintf(priv_out, MAX_LINE, "K%s+%03i+%05i.private", name, algorithm, key_tag); - snprintf(pub_out, MAX_LINE, "K%s+%03i+%05i.key", name, algorithm, key_tag); - -- // Create the private key file -+ // Create and set file permissions if the file does not exist. -+ int fd = open(priv_out, O_CREAT, S_IRUSR | S_IWUSR); -+ if (fd == -1) { -+fprintf(stderr, "ERROR: Could not open the output file: %s (errno %i)\n", -+priv_out, errno); -+return 1; -+ } -+ close(fd);
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: patr...@cvs.openbsd.org 2016/11/19 06:38:35 Modified files: databases : Makefile Log message: +py-odbc,python3
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: patr...@cvs.openbsd.org 2016/11/19 06:37:51 Modified files: databases/py-odbc: Makefile distinfo databases/py-odbc/patches: patch-setup_py databases/py-odbc/pkg: DESCR Added files: databases/py-odbc/patches: patch-src_pyodbc_h Log message: Update py-odbc to 3.0.10. ok danj@
Re: UPDATE: textproc/py-cssselect 1.0.0
On Fri, 11 Nov 2016 14:10:47 +0500, Alexandr Shadchinwrote: > Hi, > > This diff updates cssselect to the latest release. > Tested on amd64. Take maintainership. > > Comments ? OK ? > ok danj@
Re: UPDATE: /devel/ninja 1.7.1 -> 1.7.2
On 2016/11/18 19:25, Rafael Sadowski wrote: > > To save time for testing, which ports did you try it with? (It will > > need testing with at least a selection of cmake things, plus one of > > chromium/iridium). > > Successful chromium-54.0.2840.100 build with ninja 1.7.2. Thanks, I think this is enough. I just noticed this though: On 2016/11/13 20:57, Rafael Sadowski wrote: > - add post-install to compile ninja_syntax.py I don't think this is useful, pyc files are only for things which are imported.
Re: NEW: math/py-bottleneck 1.2.0
On Sun, 13 Nov 2016 01:03:03 +0500, Alexandr Shadchinwrote: > Hi, > > ok to import? > > DESCR: > > Bottleneck is a collection of fast NumPy array functions written in C. > ok danj@
Re: UPDATE: devel/py-backports-abc 0.5
On Mon, 14 Nov 2016 12:21:42 +0500, Alexandr Shadchinwrote: > Hi, > > This diff updates py-backports-abc to the latest release. > Tested on amd64. > > Comments ? OK ? > ok danj@
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: st...@cvs.openbsd.org 2016/11/19 05:27:32 Modified files: net/scamper: Makefile distinfo net/scamper/pkg: PLIST Added files: net/scamper/patches: patch-internal_h Log message: update to scamper-20161113
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: st...@cvs.openbsd.org 2016/11/19 05:25:27 Modified files: security/opendnssec: Makefile distinfo security/opendnssec/patches: patch-conf_conf_xml_in Added files: security/opendnssec/patches: patch-enforcer_ksm_database_access_lite_c Removed files: security/opendnssec/patches: patch-enforcer_utils_ksmutil_c patch-signer_src_signer_zone_c Log message: update to opendnssec-1.4.12, from Patrik Lundin
Re: CVS: cvs.openbsd.org: ports
On 2016/11/19 05:13, Stuart Henderson wrote: > CVSROOT: /cvs > Module name: ports > Changes by: st...@cvs.openbsd.org 2016/11/19 05:13:23 > > Modified files: > net/freeradius3: Makefile > net/freeradius3/patches: patch-raddb_certs_Makefile > Added files: > net/freeradius3/patches: patch-raddb_certs_bootstrap > > Log message: > - patch freeradius3's certs/Makefile to fix things with /usr/bin/make > - bump to 2048 bit DH params in certs/bootstrap > Problem was reported by Bruno Gruel.
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: st...@cvs.openbsd.org 2016/11/19 05:13:23 Modified files: net/freeradius3: Makefile net/freeradius3/patches: patch-raddb_certs_Makefile Added files: net/freeradius3/patches: patch-raddb_certs_bootstrap Log message: - patch freeradius3's certs/Makefile to fix things with /usr/bin/make - bump to 2048 bit DH params in certs/bootstrap
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: ajacou...@cvs.openbsd.org 2016/11/19 05:06:06 Modified files: www/w3m: Makefile Log message: Needs devel/gettext-tools.
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: ajacou...@cvs.openbsd.org 2016/11/19 05:02:37 Modified files: net/bro: Makefile distinfo net/bro/patches: patch-aux_broctl_BroControl_options_py patch-aux_broctl_bin_broctl_in patch-aux_broctl_bin_run-bro patch-configure patch-src_broxygen_Manager_cc patch-src_patricia_c net/bro/pkg: PLIST Added files: net/bro/patches: patch-src_Sessions_cc patch-src_bro_bif patch-src_iosource_Packet_cc patch-src_iosource_Packet_h Removed files: net/bro/patches: patch-aux_broccoli_src_bro_openssl_c patch-aux_broctl_bin_postprocessors_summarize-connections patch-src_ChunkedIO_cc Log message: Update to bro-2.5.
security/opendnssec: 1.4.12
Hello, This updates security/opendnssec to 1.4.12: === OPENDNSSEC-808: Crash on query with empty query section (thanks Håvard Eidnes). SUPPORT-191: Regression, Must accept notify without SOA (thanks Christos Trochalakis). OPENDNSSEC-845: memory leak occuring when responding to IXFR out when having had multiple updates. OPENDNSSEC-805: Avoid full resign due to mismatch in backup file when upgrading from 1.4.8 or later. OPENDNSSEC-828: parsing zone list could show data from next zone when zones iterated on single line. OPENDNSSEC-811,OPENDNSSEC-827,e.o.: compiler warnings and other static code analysis cleanup OPENDNSSEC-847: Broken DNS IN notifications when pkt answer section is empty. OPENDNSSEC-838: Crash in signer after having removed a zone. Update dependency to ldns to version 1.6.17 enabling the DNS HIP record. Prevent responding to queries when not fully started yet. === It removes two already applied patches, and adds a new one which has also been accepted upstream: https://github.com/opendnssec/opendnssec/pull/603 Finally it updates LIB_DEPENDS so that databases/sqlite3 is only part of the sqlite3 flavor to make portcheck happy. -- Patrik Lundin Index: Makefile === RCS file: /cvs/ports/security/opendnssec/Makefile,v retrieving revision 1.7 diff -u -p -u -r1.7 Makefile --- Makefile23 Sep 2016 09:16:57 - 1.7 +++ Makefile19 Nov 2016 11:30:09 - @@ -2,8 +2,7 @@ COMMENT= open-source turn-key solution for DNSSEC -DISTNAME= opendnssec-1.4.10 -REVISION= 0 +DISTNAME= opendnssec-1.4.12 CATEGORIES=security @@ -19,7 +18,6 @@ WANTLIB += c crypto iconv ldns lzma m pt MASTER_SITES= http://dist.opendnssec.org/source/ LIB_DEPENDS= converters/libiconv \ - databases/sqlite3 \ net/ldns/libldns \ textproc/libxml @@ -35,6 +33,7 @@ FLAVOR?= sqlite3 .if ${FLAVOR:Msqlite3} WANTLIB+= sqlite3 +LIB_DEPENDS+= databases/sqlite3 .endif .if ${FLAVOR:Mmysql} Index: distinfo === RCS file: /cvs/ports/security/opendnssec/distinfo,v retrieving revision 1.3 diff -u -p -u -r1.3 distinfo --- distinfo14 Jun 2016 11:29:46 - 1.3 +++ distinfo19 Nov 2016 11:30:09 - @@ -1,2 +1,2 @@ -SHA256 (opendnssec-1.4.10.tar.gz) = VbRMHaOmZe7wrx0bP00cV9IPUPd4WLHdPQPKbrwd98s= -SIZE (opendnssec-1.4.10.tar.gz) = 1036069 +SHA256 (opendnssec-1.4.12.tar.gz) = S6bPBvzRExwe2RPWGVndyQcm7V5PFTyQ9F7GREVSigw= +SIZE (opendnssec-1.4.12.tar.gz) = 1036392 Index: patches/patch-conf_conf_xml_in === RCS file: /cvs/ports/security/opendnssec/patches/patch-conf_conf_xml_in,v retrieving revision 1.1.1.1 diff -u -p -u -r1.1.1.1 patch-conf_conf_xml_in --- patches/patch-conf_conf_xml_in 13 Oct 2015 17:03:55 - 1.1.1.1 +++ patches/patch-conf_conf_xml_in 19 Nov 2016 11:30:09 - @@ -1,7 +1,7 @@ $OpenBSD: patch-conf_conf_xml_in,v 1.1.1.1 2015/10/13 17:03:55 jca Exp $ conf/conf.xml.in.orig Mon Jul 21 11:30:08 2014 -+++ conf/conf.xml.in Wed Aug 20 08:52:31 2014 -@@ -28,7 +28,7 @@ +--- conf/conf.xml.in.orig Mon Oct 17 14:32:58 2016 conf/conf.xml.in Mon Nov 14 18:41:45 2016 +@@ -31,7 +31,7 @@ 3 @@ -10,7 +10,7 @@ $OpenBSD: patch-conf_conf_xml_in,v 1.1.1 @OPENDNSSEC_CONFIG_DIR@/kasp.xml -@@ -36,19 +36,17 @@ +@@ -39,19 +39,17 @@ @@ -33,7 +33,7 @@ $OpenBSD: patch-conf_conf_xml_in,v 1.1.1 PT3600S -@@ -60,12 +58,10 @@ +@@ -63,12 +61,10 @@ Index: patches/patch-enforcer_ksm_database_access_lite_c === RCS file: patches/patch-enforcer_ksm_database_access_lite_c diff -N patches/patch-enforcer_ksm_database_access_lite_c --- /dev/null 1 Jan 1970 00:00:00 - +++ patches/patch-enforcer_ksm_database_access_lite_c 19 Nov 2016 11:30:09 - @@ -0,0 +1,12 @@ +$OpenBSD$ +--- enforcer/ksm/database_access_lite.c.orig Mon Nov 14 18:59:16 2016 enforcer/ksm/database_access_lite.cMon Nov 14 19:00:58 2016 +@@ -41,6 +41,8 @@ + #include + #include + ++#include ++ + #include + + #include "ksm/dbsdef.h" Index: patches/patch-enforcer_utils_ksmutil_c === RCS file: patches/patch-enforcer_utils_ksmutil_c diff -N patches/patch-enforcer_utils_ksmutil_c --- patches/patch-enforcer_utils_ksmutil_c 14 Jun 2016 11:29:46 - 1.1 +++ /dev/null 1 Jan 1970 00:00:00 - @@ -1,12 +0,0 @@ -$OpenBSD: patch-enforcer_utils_ksmutil_c,v 1.1 2016/06/14 11:29:46 jca Exp $ enforcer/utils/ksmutil.c.orig Wed May 4 21:09:00 2016 -+++ enforcer/utils/ksmutil.c Wed May
ipython build failed during sphinx run; can't find mako.ext.pygmentplugin
I'm not sure whether mako should just be a dep for ipython build, sphinx, or something else. Does anyone know how this is meant to fit together? # Sphinx version: 1.4.8 # Python version: 2.7.12 (CPython) # Docutils version: 0.12 release # Jinja2 version: 2.7.3 # Last messages: # writing output... [ 26%] api/generated/IPython.display # writing output... [ 27%] api/generated/IPython.lib.backgroundjobs # writing output... [ 27%] api/generated/IPython.lib.clipboard # writing output... [ 28%] api/generated/IPython.lib.deepreload # writing output... [ 29%] api/generated/IPython.lib.demo # writing output... [ 29%] api/generated/IPython.lib.editorhooks # writing output... [ 30%] api/generated/IPython.lib.guisupport # writing output... [ 30%] api/generated/IPython.lib.inputhook # writing output... [ 31%] api/generated/IPython.lib.latextools # writing output... [ 32%] api/generated/IPython.lib.lexers # Loaded extensions: # github (unknown version) from /usr/obj/ports/ipython-4.0.0/ipython-4.0.0/docs/sphinxext/github.py # sphinx.ext.autodoc (1.4.8) from /usr/local/lib/python2.7/site-packages/sphinx/ext/autodoc.pyc # magics (unknown version) from /usr/obj/ports/ipython-4.0.0/ipython-4.0.0/docs/sphinxext/magics.py # sphinx.ext.doctest (1.4.8) from /usr/local/lib/python2.7/site-packages/sphinx/ext/doctest.pyc # matplotlib.sphinxext.mathmpl (unknown version) from /usr/local/lib/python2.7/site-packages/matplotlib/sphinxext/mathmpl.pyc # matplotlib.sphinxext.plot_directive (unknown version) from /usr/local/lib/python2.7/site-packages/matplotlib/sphinxext/plot_directive.pyc # alabaster (0.7.9) from /usr/local/lib/python2.7/site-packages/alabaster/__init__.pyc # matplotlib.sphinxext.only_directives (unknown version) from /usr/local/lib/python2.7/site-packages/matplotlib/sphinxext/only_directives.pyc # numpydoc (unknown version) from /usr/local/lib/python2.7/site-packages/numpydoc/__init__.pyc # IPython.sphinxext.ipython_console_highlighting (unknown version) from /usr/obj/ports/ipython-4.0.0/ipython-4.0.0/IPython/sphinxext/ipython_console_highlighting.py # sphinx.ext.autosummary (1.4.8) from /usr/local/lib/python2.7/site-packages/sphinx/ext/autosummary/__init__.pyc # IPython.sphinxext.ipython_directive (unknown version) from /usr/obj/ports/ipython-4.0.0/ipython-4.0.0/IPython/sphinxext/ipython_directive.py Traceback (most recent call last): File "/usr/local/lib/python2.7/site-packages/sphinx/cmdline.py", line 244, in main app.build(opts.force_all, filenames) File "/usr/local/lib/python2.7/site-packages/sphinx/application.py", line 297, in build self.builder.build_update() File "/usr/local/lib/python2.7/site-packages/sphinx/builders/__init__.py", line 251, in build_update 'out of date' % len(to_build)) File "/usr/local/lib/python2.7/site-packages/sphinx/builders/__init__.py", line 322, in build self.write(docnames, list(updated_docnames), method) File "/usr/local/lib/python2.7/site-packages/sphinx/builders/__init__.py", line 360, in write self._write_serial(sorted(docnames), warnings) File "/usr/local/lib/python2.7/site-packages/sphinx/builders/__init__.py", line 368, in _write_serial self.write_doc(docname, doctree) File "/usr/local/lib/python2.7/site-packages/sphinx/builders/html.py", line 448, in write_doc self.docwriter.write(doctree, destination) File "/usr/local/lib/python2.7/site-packages/docutils/writers/__init__.py", line 80, in write self.translate() File "/usr/local/lib/python2.7/site-packages/sphinx/writers/html.py", line 47, in translate self.document.walkabout(visitor) File "/usr/local/lib/python2.7/site-packages/docutils/nodes.py", line 174, in walkabout if child.walkabout(visitor): File "/usr/local/lib/python2.7/site-packages/docutils/nodes.py", line 174, in walkabout if child.walkabout(visitor): File "/usr/local/lib/python2.7/site-packages/docutils/nodes.py", line 174, in walkabout if child.walkabout(visitor): File "/usr/local/lib/python2.7/site-packages/docutils/nodes.py", line 174, in walkabout if child.walkabout(visitor): File "/usr/local/lib/python2.7/site-packages/docutils/nodes.py", line 174, in walkabout if child.walkabout(visitor): File "/usr/local/lib/python2.7/site-packages/docutils/nodes.py", line 166, in walkabout visitor.dispatch_visit(self) File "/usr/local/lib/python2.7/site-packages/docutils/nodes.py", line 1882, in dispatch_visit return method(node) File "/usr/local/lib/python2.7/site-packages/sphinx/writers/html.py", line 746, in visit_literal_block HTMLTranslator.visit_literal_block(self, node) File "/usr/local/lib/python2.7/site-packages/sphinx/writers/html.py", line 337, in visit_literal_block **highlight_args) File "/usr/local/lib/python2.7/site-packages/sphinx/highlighting.py", line 138, in highlight_block hlsource = highlight(source, lexer, formatter) File
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: ajacou...@cvs.openbsd.org 2016/11/19 04:01:14 Modified files: net/py-botocore: Makefile distinfo Log message: Update to py-botocore-1.4.76.
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: ajacou...@cvs.openbsd.org 2016/11/19 04:01:35 Modified files: sysutils/awscli: Makefile distinfo sysutils/awscli/pkg: PLIST Log message: Update to awscli-1.11.19.
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: ajacou...@cvs.openbsd.org 2016/11/19 03:35:50 Modified files: x11/gtk+3 : Makefile distinfo Log message: Update to gtk+3-3.22.4.
Re: CVS: cvs.openbsd.org: ports
On Sat, Nov 19, 2016 at 01:02:37AM -0700, Antoine Jacoutot wrote: > CVSROOT: /cvs > Module name: ports > Changes by: ajacou...@cvs.openbsd.org 2016/11/19 01:02:37 > > Modified files: > multimedia/gstreamer1/core: Makefile > > Log message: > --disable-examples to prevent a hidden dependency on gtk+. Which was reported by naddy@ -- Antoine
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: ajacou...@cvs.openbsd.org 2016/11/19 01:02:37 Modified files: multimedia/gstreamer1/core: Makefile Log message: --disable-examples to prevent a hidden dependency on gtk+.