Up to [cvs.NetBSD.org] / pkgsrc / security / lua-sec
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.16 / (download) - annotate - [select for diffs], Fri Mar 31 00:35:30 2023 UTC (5 months, 3 weeks ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2023Q2-base,
pkgsrc-2023Q2,
HEAD
Changes since 1.15: +4 -4
lines
Diff to previous 1.15 (colored)
Update to lua-sec-1.3.1 * Fix: check if PSK is available * Add :getlocalchain() + :getlocalcertificate() to mirror the peer methods (@mwild1) * Add Pre-Shared Key (PSK) support (@jclab-joseph) * Add key material export method * Backguard compat for openssl on providers, like LTS linuxes * Fix missing DANE flag * Remove unused parameter in https.lua
Revision 1.15 / (download) - annotate - [select for diffs], Fri Dec 10 13:23:56 2021 UTC (21 months, 1 week ago) by nia
Branch: MAIN
CVS Tags: pkgsrc-2023Q1-base,
pkgsrc-2023Q1,
pkgsrc-2022Q4-base,
pkgsrc-2022Q4,
pkgsrc-2022Q3-base,
pkgsrc-2022Q3,
pkgsrc-2022Q2-base,
pkgsrc-2022Q2,
pkgsrc-2022Q1-base,
pkgsrc-2022Q1,
pkgsrc-2021Q4-base,
pkgsrc-2021Q4
Changes since 1.14: +4 -4
lines
Diff to previous 1.14 (colored)
lua-sec: update to 1.0.2 LuaSec 1.0.2 --------------- This version includes: * Fix handle SSL_send SYSCALL error without errno * Fix off by one in cert:validat(notafter) * Fix meth_get_{sinagure => signature}_name function name * Fix update the Lua state reference on the selected SSL context after SNI * Fix ignore SSL_OP_BIT(n) macro and update option.c
Revision 1.14 / (download) - annotate - [select for diffs], Tue Oct 26 11:17:18 2021 UTC (22 months, 3 weeks ago) by nia
Branch: MAIN
Changes since 1.13: +2 -2
lines
Diff to previous 1.13 (colored)
security: Replace RMD160 checksums with BLAKE2s checksums All checksums have been double-checked against existing RMD160 and SHA512 hashes Unfetchable distfiles (fetched conditionally?): ./security/cyrus-sasl/distinfo cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2
Revision 1.13 / (download) - annotate - [select for diffs], Thu Oct 7 14:54:01 2021 UTC (23 months, 2 weeks ago) by nia
Branch: MAIN
Changes since 1.12: +1 -2
lines
Diff to previous 1.12 (colored)
security: Remove SHA1 hashes for distfiles
Revision 1.12 / (download) - annotate - [select for diffs], Thu May 13 10:15:47 2021 UTC (2 years, 4 months ago) by nia
Branch: MAIN
CVS Tags: pkgsrc-2021Q3-base,
pkgsrc-2021Q3,
pkgsrc-2021Q2-base,
pkgsrc-2021Q2
Changes since 1.11: +5 -5
lines
Diff to previous 1.11 (colored)
lua-sec: update to 1.0.1 LuaSec 1.0.1 --------------- This version includes: * Fix luaL_buffinit() can use the stack and broke buffer_meth_receive()
Revision 1.11 / (download) - annotate - [select for diffs], Wed Feb 10 10:20:01 2021 UTC (2 years, 7 months ago) by nia
Branch: MAIN
CVS Tags: pkgsrc-2021Q1-base,
pkgsrc-2021Q1
Changes since 1.10: +5 -5
lines
Diff to previous 1.10 (colored)
lua-sec: Update to 1.0 -------------------------------------------------------------------------------- LuaSec 1.0 --------------- This version includes: * Add cert:getsignaturename()
Revision 1.10 / (download) - annotate - [select for diffs], Fri Aug 7 02:05:07 2020 UTC (3 years, 1 month ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2020Q4-base,
pkgsrc-2020Q4,
pkgsrc-2020Q3-base,
pkgsrc-2020Q3
Changes since 1.9: +2 -1
lines
Diff to previous 1.9 (colored)
Don't use compat code for Lua 5.2+ Bump revision.
Revision 1.9 / (download) - annotate - [select for diffs], Mon Jan 6 23:55:47 2020 UTC (3 years, 8 months ago) by mef
Branch: MAIN
CVS Tags: pkgsrc-2020Q2-base,
pkgsrc-2020Q2,
pkgsrc-2020Q1-base,
pkgsrc-2020Q1
Changes since 1.8: +6 -6
lines
Diff to previous 1.8 (colored)
(security/lua-sec) Updated 0.6 to 0.9 -------------------------------------------------------------------------- LuaSec 0.9 --------------- This version includes: * Add DNS-based Authentication of Named Entities (DANE) support * Add __close() metamethod * Fix deprecation warnings with OpenSSL 1.1 * Fix special case listing of TLS 1.3 EC curves * Fix general_name leak in cert:extensions() * Fix unexported 'ssl.config' table * Replace $(LD) with $(CCLD) variable * Remove multiple definitions of 'ssl_options' variable * Use tag in git format: v0.9 -------------------------------------------------------------------------- LuaSec 0.8.2 --------------- This version includes: * Fix unexported 'ssl.config' table (backported) -------------------------------------------------------------------------- LuaSec 0.8.1 --------------- This version includes: * Fix general_name leak in cert:extensions() (backported) -------------------------------------------------------------------------- LuaSec 0.8 --------------- This version includes: * Add support to ALPN * Add support to TLS 1.3 * Add support to multiple certificates * Add timeout to https module (https.TIMEOUT) * Drop support to SSL 3.0 * Drop support to TLS 1.0 from https module * Fix invalid reference to Lua state * Fix memory leak when get certficate extensions -------------------------------------------------------------------------- LuaSec 0.7.2 --------------- This version includes: * Fix unexported 'ssl.config' table (backported) -------------------------------------------------------------------------- LuaSec 0.7.1 --------------- This version includes: * Fix general_name leak in cert:extensions() (backported) -------------------------------------------------------------------------- LuaSec 0.7 --------------- LuaSec depends on OpenSSL, and integrates with LuaSocket to make it easy to add secure connections to any Lua applications or scripts. Documentation: https://github.com/brunoos/luasec/wiki This version includes: * Add support to OpenSSL 1.1.0 * Add support to elliptic curves list * Add ssl.config that exports some OpenSSL information * Add integration with luaossl
Revision 1.8 / (download) - annotate - [select for diffs], Sat Jun 4 21:48:11 2016 UTC (7 years, 3 months ago) by alnsn
Branch: MAIN
CVS Tags: pkgsrc-2019Q4-base,
pkgsrc-2019Q4,
pkgsrc-2019Q3-base,
pkgsrc-2019Q3,
pkgsrc-2019Q2-base,
pkgsrc-2019Q2,
pkgsrc-2019Q1-base,
pkgsrc-2019Q1,
pkgsrc-2018Q4-base,
pkgsrc-2018Q4,
pkgsrc-2018Q3-base,
pkgsrc-2018Q3,
pkgsrc-2018Q2-base,
pkgsrc-2018Q2,
pkgsrc-2018Q1-base,
pkgsrc-2018Q1,
pkgsrc-2017Q4-base,
pkgsrc-2017Q4,
pkgsrc-2017Q3-base,
pkgsrc-2017Q3,
pkgsrc-2017Q2-base,
pkgsrc-2017Q2,
pkgsrc-2017Q1-base,
pkgsrc-2017Q1,
pkgsrc-2016Q4-base,
pkgsrc-2016Q4,
pkgsrc-2016Q3-base,
pkgsrc-2016Q3,
pkgsrc-2016Q2-base,
pkgsrc-2016Q2
Changes since 1.7: +7 -7
lines
Diff to previous 1.7 (colored)
Update to luasec-0.6. Switch to MASTER_SITE_GITHUB. Notable changes between 0.5 and 0.6: Options from OpenSSL 1.0.2f Use "any" protocol, but SSL. Merge pull request #20 from Zash/zash/checkissued Method for checking if one certificate issued another Merge pull request #68 from ignacio/master Enables building with LuaRocks and MS compilers Enables building with LuaRocks and MS compilers Merge pull request #56 from gleydsonsoares/Makefile-tweaks Makefile tweaks Keep 'sslv23' for compability, but deprected. (it will be removed in the next version) Merge pull request #62 from gleydsonsoares/update_protocol_samples add TLS_method / rename "sslv23" to "any" / update protocol samples. update protocol samples(bring "tlsv1_2" to clients and "any" to servers) for consistency and readability, rename "sslv23" to "any" since that it is related to {TLS, SSLv23}methods that handles all supported protocols. add TLS_method(). for now, keep SSLv23_method() for compatibility. Update samples (using 'tlsv1'). Merge pull request #55 from gleydsonsoares/ifndef-OPENSSL_NO_SSL3 guard SSLv3_method() with #ifndef OPENSSL_NO_SSL3 Add lsec_testcontext(). bump MACOSX_VERSION fix typo; s,intall,install, guard SSLv3_method() with #ifndef OPENSSL_NO_SSL3 Set flags to compile with internal inet_ntop() by default. Tag "alpha" explicit. MinGW progress. Merge pull request #53 from hishamhm/master Reuse tag in the LuaSec upstream repository. Merge pull request #26 from Tieske/master Update rockspec to fix Windows build Alternative implementation to inet_ntop() for old versions of Windows. Do not hardcode ar added batch files to generate sample certs on Windows Perform all validation before allocating structures Validate signatures too. API changes to root:issued([intermediate]*, cert) Fix inet_ntop() on Windows. Merge branch 'master' of https://github.com/brunoos/luasec Merge branch 'moteus_rock' added bindir to lib section, as mingw links against dll's to be found in bindir updated defines in rockspec Merge branch 'master' of github.com:Tieske/luasec into moteus_rock use winsock 2 Don't set globals from C. Fix unpack(). Stop using module(). Change to luaL_newlib(). Remove luaL_optint() and luaL_checkint(). BSD headers. Merge pull request #21 from Zash/zash/iPAddress-fix iPAddress encoding Stop if we don't have a string. Changed for strict compiles. Fix for LibreSSL/OPENSSL_NO_COMP Problem on Win64, since double does not represent SOCKET_INVALID exactly. - Add a parameter to server:sni(), so that we can accept an unknown name, using the initial context. - Add the method :getsniname() to retrieve the SNI hostname used. Updated (and renamed) rockspec Windows Encode iPAddress fields in human readable form Don't try to encode IP addresses as UTF-8 Return early if ASN1 string is invalid Push nil if unable to encode ASN1 string as UTF-8 Return human readable error message from cert:issued() SNI support. SNI support. Merge pull request #17 from Zash/zash/checkkey Verify that certificate and key belong together Merge pull request #19 from Zash/zash/pubkey Zash/pubkey Add cert:pubkey() to methods registry Add cert:issued(leafcert) for checking chains Check if private key matches cert only if both key and cert are set Check that certificate matches private key Add method for extracting public key, type and size from x509 objects
Revision 1.7 / (download) - annotate - [select for diffs], Wed Nov 4 01:17:50 2015 UTC (7 years, 10 months ago) by agc
Branch: MAIN
CVS Tags: pkgsrc-2016Q1-base,
pkgsrc-2016Q1,
pkgsrc-2015Q4-base,
pkgsrc-2015Q4
Changes since 1.6: +2 -1
lines
Diff to previous 1.6 (colored)
Add SHA512 digests for distfiles for security category Problems found locating distfiles: Package f-prot-antivirus6-fs-bin: missing distfile fp-NetBSD.x86.32-fs-6.2.3.tar.gz Package f-prot-antivirus6-ws-bin: missing distfile fp-NetBSD.x86.32-ws-6.2.3.tar.gz Package libidea: missing distfile libidea-0.8.2b.tar.gz Package openssh: missing distfile openssh-7.1p1-hpn-20150822.diff.bz2 Package uvscan: missing distfile vlp4510e.tar.Z Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
Revision 1.6 / (download) - annotate - [select for diffs], Wed Apr 16 14:07:50 2014 UTC (9 years, 5 months ago) by fhajny
Branch: MAIN
CVS Tags: pkgsrc-2015Q3-base,
pkgsrc-2015Q3,
pkgsrc-2015Q2-base,
pkgsrc-2015Q2,
pkgsrc-2015Q1-base,
pkgsrc-2015Q1,
pkgsrc-2014Q4-base,
pkgsrc-2014Q4,
pkgsrc-2014Q3-base,
pkgsrc-2014Q3,
pkgsrc-2014Q2-base,
pkgsrc-2014Q2
Changes since 1.5: +2 -2
lines
Diff to previous 1.5 (colored)
We link with -shared on SunOS. Fixes SunOS/x86_64. Bump PKGREVISION.
Revision 1.5 / (download) - annotate - [select for diffs], Mon Apr 7 20:14:48 2014 UTC (9 years, 5 months ago) by fhajny
Branch: MAIN
Changes since 1.4: +6 -6
lines
Diff to previous 1.4 (colored)
Update lua-sec to 0.5. * A new certificate (X509) API, which supports: - Reading the subject (identity) and issuer of the certificate. - Reading various X509 extensions, including email and dnsName. - Converting certificates to and from the standard ASCII PEM format. - Generating the fingerprint/digest of a certificate (using SHA1, SHA256 or SHA512). - Reading the certificate's expiration, serial number, and other info. * The ability to get more detailed information from OpenSSL about why a certificate failed verification, for each certificate in the chain. * Flags to force acceptance of invalid certificates, e.g. to allow the use of self-signed certificates in a Trust On First Use model. * Flags to control checking CRLs for certificate revocation status. * Support for ECDH cipher suites. * An API to get the TLS 'finished' messages used for SASL channel binding (e.g. the SCRAM PLUS mechanisms).
Revision 1.4 / (download) - annotate - [select for diffs], Sun Oct 20 17:56:02 2013 UTC (9 years, 11 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2014Q1-base,
pkgsrc-2014Q1,
pkgsrc-2013Q4-base,
pkgsrc-2013Q4
Changes since 1.3: +2 -2
lines
Diff to previous 1.3 (colored)
Pass rpath options with correct -Wl prefix.
Revision 1.3 / (download) - annotate - [select for diffs], Fri Sep 13 14:32:19 2013 UTC (10 years ago) by fhajny
Branch: MAIN
CVS Tags: pkgsrc-2013Q3-base,
pkgsrc-2013Q3
Changes since 1.2: +3 -3
lines
Diff to previous 1.2 (colored)
Fix build on SunOS. Define LUA_COMPAT_MODULE to make this work on lua-5.2.
Revision 1.2 / (download) - annotate - [select for diffs], Fri Sep 13 12:17:19 2013 UTC (10 years ago) by fhajny
Branch: MAIN
Changes since 1.1: +4 -4
lines
Diff to previous 1.1 (colored)
Update lua-sec to 0.4.1. Changes since 0.4: - SSL options updated --- based on OpenSSL 1.0.0d. - Activate SSL_MODE_RELEASE_BUFFERS by default if it is available. (thanks Prosody project)
Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Tue Sep 21 10:45:56 2010 UTC (13 years ago) by fhajny
Branch: TNF
CVS Tags: pkgsrc-base,
pkgsrc-2013Q2-base,
pkgsrc-2013Q2,
pkgsrc-2013Q1-base,
pkgsrc-2013Q1,
pkgsrc-2012Q4-base,
pkgsrc-2012Q4,
pkgsrc-2012Q3-base,
pkgsrc-2012Q3,
pkgsrc-2012Q2-base,
pkgsrc-2012Q2,
pkgsrc-2012Q1-base,
pkgsrc-2012Q1,
pkgsrc-2011Q4-base,
pkgsrc-2011Q4,
pkgsrc-2011Q3-base,
pkgsrc-2011Q3,
pkgsrc-2011Q2-base,
pkgsrc-2011Q2,
pkgsrc-2011Q1-base,
pkgsrc-2011Q1,
pkgsrc-2010Q4-base,
pkgsrc-2010Q4,
pkgsrc-2010Q3-base,
pkgsrc-2010Q3
Changes since 1.1: +0 -0
lines
Diff to previous 1.1 (colored)
Import lua-sec-0.4 as security/lua-sec. LuaSec is a binding for OpenSSL library to provide TLS/SSL communication. This version delegates to LuaSocket the TCP connection establishment between the client and server. Then LuaSec uses this connection to start a secure TLS/SSL session. (Based on wip/luasec.)
Revision 1.1 / (download) - annotate - [select for diffs], Tue Sep 21 10:45:56 2010 UTC (13 years ago) by fhajny
Branch: MAIN
Initial revision