head 1.5; access; symbols pkgsrc-2023Q4:1.5.0.6 pkgsrc-2023Q4-base:1.5 pkgsrc-2023Q3:1.5.0.4 pkgsrc-2023Q3-base:1.5 pkgsrc-2023Q2:1.5.0.2 pkgsrc-2023Q2-base:1.5 pkgsrc-2023Q1:1.4.0.12 pkgsrc-2023Q1-base:1.4 pkgsrc-2022Q4:1.4.0.10 pkgsrc-2022Q4-base:1.4 pkgsrc-2022Q3:1.4.0.8 pkgsrc-2022Q3-base:1.4 pkgsrc-2022Q2:1.4.0.6 pkgsrc-2022Q2-base:1.4 pkgsrc-2022Q1:1.4.0.4 pkgsrc-2022Q1-base:1.4 pkgsrc-2021Q4:1.4.0.2 pkgsrc-2021Q4-base:1.4 pkgsrc-2021Q3:1.2.0.18 pkgsrc-2021Q3-base:1.2 pkgsrc-2021Q2:1.2.0.16 pkgsrc-2021Q2-base:1.2 pkgsrc-2021Q1:1.2.0.14 pkgsrc-2021Q1-base:1.2 pkgsrc-2020Q4:1.2.0.12 pkgsrc-2020Q4-base:1.2 pkgsrc-2020Q3:1.2.0.10 pkgsrc-2020Q3-base:1.2 pkgsrc-2020Q2:1.2.0.8 pkgsrc-2020Q2-base:1.2 pkgsrc-2020Q1:1.2.0.4 pkgsrc-2020Q1-base:1.2 pkgsrc-2019Q4:1.2.0.6 pkgsrc-2019Q4-base:1.2 pkgsrc-2019Q3:1.2.0.2 pkgsrc-2019Q3-base:1.2 pkgsrc-2019Q2:1.1.0.22 pkgsrc-2019Q2-base:1.1 pkgsrc-2019Q1:1.1.0.20 pkgsrc-2019Q1-base:1.1 pkgsrc-2018Q4:1.1.0.18 pkgsrc-2018Q4-base:1.1 pkgsrc-2018Q3:1.1.0.16 pkgsrc-2018Q3-base:1.1 pkgsrc-2018Q2:1.1.0.14 pkgsrc-2018Q2-base:1.1 pkgsrc-2018Q1:1.1.0.12 pkgsrc-2018Q1-base:1.1 pkgsrc-2017Q4:1.1.0.10 pkgsrc-2017Q4-base:1.1 pkgsrc-2017Q3:1.1.0.8 pkgsrc-2017Q3-base:1.1 pkgsrc-2017Q2:1.1.0.4 pkgsrc-2017Q2-base:1.1 pkgsrc-2017Q1:1.1.0.2 pkgsrc-2017Q1-base:1.1; locks; strict; comment @# @; 1.5 date 2023.04.23.17.45.42; author nils; state Exp; branches; next 1.4; commitid SUIwnv0fMxHC0gmE; 1.4 date 2021.10.26.11.17.03; author nia; state Exp; branches; next 1.3; commitid PNswNV9GDLZeojeD; 1.3 date 2021.10.07.14.53.46; author nia; state Exp; branches; next 1.2; commitid nfjKlj1wTplMcTbD; 1.2 date 2019.08.20.21.50.56; author nils; state Exp; branches; next 1.1; commitid nTUs83Wfw5jJwOzB; 1.1 date 2017.03.10.08.30.51; author nils; state Exp; branches; next ; commitid X458zliASIG2PYIz; desc @@ 1.5 log @Update dehydrated to version 0.7.1. Pkgsrc changes : * Project has a new home : updated distfile URL and homepage ; * Updated PLIST following the removal of a file ; * Updated checksums. Upstream changes : * version 0.7.0 : - Support for external account bindings - Special support for ZeroSSL - Support presets for some CAs instead of requiring URLs - Allow requesting preferred chain (--preferred-chain) - Added method to show CAs current terms of service (--display-terms) - Allow setting path to domains.txt using cli arguments (--domains-txt) - Added new cli command --cleanupdelete which deletes old files instead of archiving them - No more silent failures on broken hook-scripts - Better error-handling with KEEP_GOING enabled - Check actual order status instead of assuming it's valid - Don't include keyAuthorization in challenge validation (RFC compliance) - Using EC secp384r1 as default certificate type - Use JSON.sh to parse JSON - Use account URL instead of account ID (RFC compliance) - Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated - Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options - Cleanup now also removes dangling symlinks * version 0.7.1 : - --force no longer forces domain name revalidation by default, a new argument --force-validation has been added for that - Added support for EC secp521r1 algorithm (works with e.g. zerossl) - EC PARAMETERS are no longer written to privkey.pem (didn't seem necessary and was causing issues with various software) - Requests resulting in badNonce errors are now automatically retried (fixes operation with LE staging servers) - Deprecated egrep usage has been removed - Implemented EC for account keys - Domain list now also read from domains.txt.d subdirectory (behaviour might change, see docs) - Implemented RFC 8738 (validating/signing certificates for IP addresses instead of domain names) support (this will not work with most public CAs, if any!) @ text @$NetBSD: distinfo,v 1.4 2021/10/26 11:17:03 nia Exp $ BLAKE2s (dehydrated-0.7.1.tar.gz) = 1ca1089411d9f07690dc52d1ea1d7806eed9acc58f3c535ac7f4c5421795e897 SHA512 (dehydrated-0.7.1.tar.gz) = 1d584c3876cdc1ef213b2feb02e15d2b47ef2b6504e8a837ad45d9d14929a82de28bee7395a75659721ae18bd8f26f4f2759ad8eaef66c671c7085c9859f6555 Size (dehydrated-0.7.1.tar.gz) = 120575 bytes @ 1.4 log @security: Replace RMD160 checksums with BLAKE2s checksums All checksums have been double-checked against existing RMD160 and SHA512 hashes Unfetchable distfiles (fetched conditionally?): ./security/cyrus-sasl/distinfo cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.3 2021/10/07 14:53:46 nia Exp $ d3 3 a5 3 BLAKE2s (dehydrated-0.6.5.tar.gz) = 038507230c5f05984ef495082328807ce63febb2cca7f879e741ac0b79af4d71 SHA512 (dehydrated-0.6.5.tar.gz) = da8ff3ecb7ddeb25356469fa272aef4e7c3705049caf88d09656dbc4baf29e0efa135e6f154c78cec82da17a27a78f2145ee3b7bd71521a080e10550d09b8a53 Size (dehydrated-0.6.5.tar.gz) = 82274 bytes @ 1.3 log @security: Remove SHA1 hashes for distfiles @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.2 2019/08/20 21:50:56 nils Exp $ d3 1 a3 1 RMD160 (dehydrated-0.6.5.tar.gz) = 572c07749992540ddeba8382ccc265b3ac7ca1eb @ 1.2 log @Updated security/dehydrated to version 0.6.5. Some of the upstream changes since 0.4.0 : * OpenSSL binary path is now configurable * Support for ACME v02 * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support) * Use new ACME v2 endpoint by default * Initial support for tls-alpn-01 validation * OCSP refresh interval is now configurable Full changelog available here : https://github.com/lukas2511/dehydrated/blob/v0.6.5/CHANGELOG @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.1 2017/03/10 08:30:51 nils Exp $ a2 1 SHA1 (dehydrated-0.6.5.tar.gz) = 4934d1c2f24e4cbcaebf113d240be62f54ead54c @ 1.1 log @Import dehydrated-0.4.0 as security/dehydrated. This is a client for signing certificates with an ACME-server (currently only provided by letsencrypt) implemented as a relatively simple bash-script. It uses the openssl utility for everything related to actually handling keys and certificates, so you need to have that installed. Other dependencies are: curl, sed, grep, mktemp (all found on almost any system, curl being the only exception) @ text @d1 1 a1 1 $NetBSD$ d3 4 a6 4 SHA1 (dehydrated-0.4.0.tar.gz) = 58ef0848645641a70492ff0b39ddfac7b9976194 RMD160 (dehydrated-0.4.0.tar.gz) = 19032b84f379d8ef2ec9266aa51af71846cd45c2 SHA512 (dehydrated-0.4.0.tar.gz) = 3c8c0f2fab57a432b69451f8372c02666dd953985679d12a2af9f6b917335b5b10a1196699106e317660039178ce1139a4d5455d4825a152b6911596fba16738 Size (dehydrated-0.4.0.tar.gz) = 74005 bytes @