head 1.23; access; symbols pkgsrc-2023Q4:1.23.0.2 pkgsrc-2023Q4-base:1.23 pkgsrc-2023Q3:1.22.0.30 pkgsrc-2023Q3-base:1.22 pkgsrc-2023Q2:1.22.0.28 pkgsrc-2023Q2-base:1.22 pkgsrc-2023Q1:1.22.0.26 pkgsrc-2023Q1-base:1.22 pkgsrc-2022Q4:1.22.0.24 pkgsrc-2022Q4-base:1.22 pkgsrc-2022Q3:1.22.0.22 pkgsrc-2022Q3-base:1.22 pkgsrc-2022Q2:1.22.0.20 pkgsrc-2022Q2-base:1.22 pkgsrc-2022Q1:1.22.0.18 pkgsrc-2022Q1-base:1.22 pkgsrc-2021Q4:1.22.0.16 pkgsrc-2021Q4-base:1.22 pkgsrc-2021Q3:1.22.0.14 pkgsrc-2021Q3-base:1.22 pkgsrc-2021Q2:1.22.0.12 pkgsrc-2021Q2-base:1.22 pkgsrc-2021Q1:1.22.0.10 pkgsrc-2021Q1-base:1.22 pkgsrc-2020Q4:1.22.0.8 pkgsrc-2020Q4-base:1.22 pkgsrc-2020Q3:1.22.0.6 pkgsrc-2020Q3-base:1.22 pkgsrc-2020Q2:1.22.0.4 pkgsrc-2020Q2-base:1.22 pkgsrc-2020Q1:1.22.0.2 pkgsrc-2020Q1-base:1.22 pkgsrc-2019Q4:1.21.0.14 pkgsrc-2019Q4-base:1.21 pkgsrc-2019Q3:1.21.0.10 pkgsrc-2019Q3-base:1.21 pkgsrc-2019Q2:1.21.0.8 pkgsrc-2019Q2-base:1.21 pkgsrc-2019Q1:1.21.0.6 pkgsrc-2019Q1-base:1.21 pkgsrc-2018Q4:1.21.0.4 pkgsrc-2018Q4-base:1.21 pkgsrc-2018Q3:1.21.0.2 pkgsrc-2018Q3-base:1.21 pkgsrc-2018Q2:1.20.0.10 pkgsrc-2018Q2-base:1.20 pkgsrc-2018Q1:1.20.0.8 pkgsrc-2018Q1-base:1.20 pkgsrc-2017Q4:1.20.0.6 pkgsrc-2017Q4-base:1.20 pkgsrc-2017Q3:1.20.0.4 pkgsrc-2017Q3-base:1.20 pkgsrc-2017Q2:1.19.0.12 pkgsrc-2017Q2-base:1.19 pkgsrc-2017Q1:1.19.0.10 pkgsrc-2017Q1-base:1.19 pkgsrc-2016Q4:1.19.0.8 pkgsrc-2016Q4-base:1.19 pkgsrc-2016Q3:1.19.0.6 pkgsrc-2016Q3-base:1.19 pkgsrc-2016Q2:1.19.0.4 pkgsrc-2016Q2-base:1.19 pkgsrc-2016Q1:1.19.0.2 pkgsrc-2016Q1-base:1.19 pkgsrc-2015Q4:1.18.0.12 pkgsrc-2015Q4-base:1.18 pkgsrc-2015Q3:1.18.0.10 pkgsrc-2015Q3-base:1.18 pkgsrc-2015Q2:1.18.0.8 pkgsrc-2015Q2-base:1.18 pkgsrc-2015Q1:1.18.0.6 pkgsrc-2015Q1-base:1.18 pkgsrc-2014Q4:1.18.0.4 pkgsrc-2014Q4-base:1.18 pkgsrc-2014Q3:1.18.0.2 pkgsrc-2014Q3-base:1.18 pkgsrc-2014Q2:1.17.0.4 pkgsrc-2014Q2-base:1.17 pkgsrc-2014Q1:1.17.0.2 pkgsrc-2014Q1-base:1.17 pkgsrc-2013Q4:1.16.0.8 pkgsrc-2013Q4-base:1.16 pkgsrc-2013Q3:1.16.0.6 pkgsrc-2013Q3-base:1.16 pkgsrc-2013Q2:1.16.0.4 pkgsrc-2013Q2-base:1.16 pkgsrc-2013Q1:1.16.0.2 pkgsrc-2013Q1-base:1.16 pkgsrc-2012Q4:1.15.0.2 pkgsrc-2012Q4-base:1.15 pkgsrc-2012Q3:1.14.0.22 pkgsrc-2012Q3-base:1.14 pkgsrc-2012Q2:1.14.0.20 pkgsrc-2012Q2-base:1.14 pkgsrc-2012Q1:1.14.0.18 pkgsrc-2012Q1-base:1.14 pkgsrc-2011Q4:1.14.0.16 pkgsrc-2011Q4-base:1.14 pkgsrc-2011Q3:1.14.0.14 pkgsrc-2011Q3-base:1.14 pkgsrc-2011Q2:1.14.0.12 pkgsrc-2011Q2-base:1.14 pkgsrc-2011Q1:1.14.0.10 pkgsrc-2011Q1-base:1.14 pkgsrc-2010Q4:1.14.0.8 pkgsrc-2010Q4-base:1.14 pkgsrc-2010Q3:1.14.0.6 pkgsrc-2010Q3-base:1.14 pkgsrc-2010Q2:1.14.0.4 pkgsrc-2010Q2-base:1.14 pkgsrc-2010Q1:1.14.0.2 pkgsrc-2010Q1-base:1.14 pkgsrc-2009Q4:1.12.0.4 pkgsrc-2009Q4-base:1.12 pkgsrc-2009Q3:1.12.0.2 pkgsrc-2009Q3-base:1.12 pkgsrc-2009Q2:1.11.0.16 pkgsrc-2009Q2-base:1.11 pkgsrc-2009Q1:1.11.0.14 pkgsrc-2009Q1-base:1.11 pkgsrc-2008Q4:1.11.0.12 pkgsrc-2008Q4-base:1.11 pkgsrc-2008Q3:1.11.0.10 pkgsrc-2008Q3-base:1.11 cube-native-xorg:1.11.0.8 cube-native-xorg-base:1.11 pkgsrc-2008Q2:1.11.0.6 pkgsrc-2008Q2-base:1.11 cwrapper:1.11.0.4 pkgsrc-2008Q1:1.11.0.2 pkgsrc-2008Q1-base:1.11 pkgsrc-2007Q4:1.10.0.8 pkgsrc-2007Q4-base:1.10 pkgsrc-2007Q3:1.10.0.6 pkgsrc-2007Q3-base:1.10 pkgsrc-2007Q2:1.10.0.4 pkgsrc-2007Q2-base:1.10 pkgsrc-2007Q1:1.10.0.2 pkgsrc-2007Q1-base:1.10 pkgsrc-2006Q4:1.8.0.6 pkgsrc-2006Q4-base:1.8 pkgsrc-2006Q3:1.8.0.4 pkgsrc-2006Q3-base:1.8 pkgsrc-2006Q2:1.8.0.2 pkgsrc-2006Q2-base:1.8 pkgsrc-2006Q1:1.7.0.2 pkgsrc-2006Q1-base:1.7 pkgsrc-2005Q4:1.6.0.2 pkgsrc-2005Q4-base:1.6 pkgsrc-2005Q3:1.5.0.4 pkgsrc-2005Q3-base:1.5 pkgsrc-2005Q2:1.5.0.2 pkgsrc-2005Q2-base:1.5 pkgsrc-2005Q1:1.4.0.2 pkgsrc-2005Q1-base:1.4 pkgsrc-2004Q4:1.2.0.8 pkgsrc-2004Q4-base:1.2 pkgsrc-2004Q3:1.2.0.6 pkgsrc-2004Q3-base:1.2 pkgsrc-2004Q2:1.2.0.4 pkgsrc-2004Q2-base:1.2 pkgsrc-2004Q1:1.2.0.2 pkgsrc-2004Q1-base:1.2 pkgsrc-base:1.1.1.1 TNF:1.1.1; locks; strict; comment @# @; 1.23 date 2023.10.24.22.10.49; author wiz; state Exp; branches; next 1.22; commitid MTsrqKm6aGrQAVJE; 1.22 date 2020.01.18.21.50.39; author jperkin; state Exp; branches; next 1.21; commitid JW4hJgY8ZdoTFdTB; 1.21 date 2018.07.04.13.40.34; author jperkin; state Exp; branches; next 1.20; commitid NnIyRkdX3Lbg3PIA; 1.20 date 2017.08.16.20.45.44; author wiz; state Exp; branches; next 1.19; commitid pmDKNBksxK1CMt3A; 1.19 date 2016.03.05.11.29.21; author jperkin; state Exp; branches; next 1.18; commitid 1LoxeQftu903HrXy; 1.18 date 2014.09.25.19.09.26; author jperkin; state Exp; branches; next 1.17; commitid gIeysj4mP8hgcLRx; 1.17 date 2014.02.12.23.18.32; author tron; state Exp; branches; next 1.16; commitid dfJj7CwMMWJzNRox; 1.16 date 2013.02.06.23.23.38; author jperkin; state Exp; branches; next 1.15; 1.15 date 2012.10.23.18.16.31; author asau; state Exp; branches; next 1.14; 1.14 date 2010.01.27.22.05.28; author joerg; state Exp; branches; next 1.13; 1.13 date 2010.01.17.12.02.40; author wiz; state Exp; branches; next 1.12; 1.12 date 2009.07.17.18.00.23; author adrianp; state Exp; branches; next 1.11; 1.11 date 2008.01.18.05.09.37; author tnn; state Exp; branches; next 1.10; 1.10 date 2007.02.22.19.01.24; author wiz; state Exp; branches; next 1.9; 1.9 date 2007.01.28.01.34.42; author adrianp; state Exp; branches; next 1.8; 1.8 date 2006.04.22.09.22.14; author rillig; state Exp; branches; next 1.7; 1.7 date 2006.01.18.21.37.01; author adrianp; state Exp; branches; next 1.6; 1.6 date 2005.12.05.20.50.56; author rillig; state Exp; branches; next 1.5; 1.5 date 2005.04.11.21.47.12; author tv; state Exp; branches; next 1.4; 1.4 date 2005.02.28.16.04.28; author adam; state Exp; branches; next 1.3; 1.3 date 2005.01.14.08.36.54; author adrianp; state Exp; branches; next 1.2; 1.2 date 2004.02.28.15.29.20; author taca; state Exp; branches; next 1.1; 1.1 date 2004.02.27.22.12.51; author itojun; state Exp; branches 1.1.1.1; next ; 1.1.1.1 date 2004.02.27.22.12.51; author itojun; state Exp; branches; next ; desc @@ 1.23 log @*: bump for openssl 3 @ text @# $NetBSD: Makefile,v 1.22 2020/01/18 21:50:39 jperkin Exp $ DISTNAME= ike-scan-1.9 PKGREVISION= 7 CATEGORIES= security #MASTER_SITES= http://www.nta-monitor.com/tools/ike-scan/download/ MAINTAINER= pkgsrc-users@@NetBSD.org #HOMEPAGE= http://www.nta-monitor.com/tools/ike-scan/ COMMENT= Fingerprinting IKE implementation GNU_CONFIGURE= yes CONFIGURE_ARGS+= --with-openssl=${BUILDLINK_PREFIX.openssl} SUBST_CLASSES+= man SUBST_STAGE.man= pre-configure SUBST_FILES.man= ike-scan.1 SUBST_SED.man= -e "s|/usr/local|${PREFIX}|g" SUBST_MESSAGE.man= Fixing man pages. INSTALLATION_DIRS+= share/doc/ike-scan post-install: ${INSTALL_DATA} ${WRKSRC}/README ${DESTDIR}${PREFIX}/share/doc/ike-scan/README .include "../../security/openssl/buildlink3.mk" .include "../../mk/bsd.pkg.mk" @ 1.22 log @*: Recursive revision bump for openssl 1.1.1. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.21 2018/07/04 13:40:34 jperkin Exp $ d4 1 a4 1 PKGREVISION= 6 @ 1.21 log @*: Move SUBST_STAGE from post-patch to pre-configure Performing substitutions during post-patch breaks tools such as mkpatches, making it very difficult to regenerate correct patches after making changes, and often leading to substituted string replacements being committed. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.20 2017/08/16 20:45:44 wiz Exp $ d4 1 a4 1 PKGREVISION= 5 @ 1.20 log @Comment out dead sites. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.19 2016/03/05 11:29:21 jperkin Exp $ d16 1 a16 1 SUBST_STAGE.man= post-patch @ 1.19 log @Bump PKGREVISION for security/openssl ABI bump. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.18 2014/09/25 19:09:26 jperkin Exp $ d6 1 a6 1 MASTER_SITES= http://www.nta-monitor.com/tools/ike-scan/download/ d9 1 a9 1 HOMEPAGE= http://www.nta-monitor.com/tools/ike-scan/ @ 1.18 log @Pass correct location to OpenSSL. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.17 2014/02/12 23:18:32 tron Exp $ d4 1 a4 1 PKGREVISION= 4 @ 1.17 log @Recursive PKGREVISION bump for OpenSSL API version bump. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.16 2013/02/06 23:23:38 jperkin Exp $ d13 1 a13 1 CONFIGURE_ARGS+= --with-openssl @ 1.16 log @PKGREVISION bumps for the security/openssl 1.0.1d update. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.15 2012/10/23 18:16:31 asau Exp $ d4 1 a4 1 PKGREVISION= 3 @ 1.15 log @Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14 2010/01/27 22:05:28 joerg Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.14 log @DESTDIR support @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.13 2010/01/17 12:02:40 wiz Exp $ a11 2 PKG_DESTDIR_SUPPORT= user-destdir @ 1.13 log @Recursive PKGREVISION bump for jpeg update to 8. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.12 2009/07/17 18:00:23 adrianp Exp $ d12 2 d23 2 d26 1 a26 2 ${INSTALL_DATA_DIR} ${PREFIX}/share/doc/ike-scan ${INSTALL_DATA} ${WRKSRC}/README ${PREFIX}/share/doc/ike-scan/README @ 1.12 log @Give up MAINTAINER @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.11 2008/01/18 05:09:37 tnn Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.11 log @Per the process outlined in revbump(1), perform a recursive revbump on packages that are affected by the switch from the openssl 0.9.7 branch to the 0.9.8 branch. ok jlam@@ @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.10 2007/02/22 19:01:24 wiz Exp $ d8 1 a8 1 MAINTAINER= adrianp@@NetBSD.org @ 1.10 log @pkglint cleanup; update HOMEPAGE/MASTER_SITES. From Sergey Svishchev in private mail. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.9 2007/01/28 01:34:42 adrianp Exp $ d4 1 @ 1.9 log @Update to 1.9 a) Experimental IKEv2 support (--ikev2) b) RFC 3947 NAT traversal support (--nat-t) c) Source IP spoofing (--sourceip) - Requires raw sockets. d) Nortel proprietary pre-shared key cracking support. e) psk-crack can read dictionary files from stdin (--dictionary=-) f) Backoff patterns may contain only a single packet. g) Two new packet display options: --timestamp and --shownum h) ike-scan now uses the Mersenne twister PRNG, with new --randomseed option. i) --rcookie option allows the responder cookie to be specified in outgoing packets. j) Several new backoff patterns and vendor IDs added. k) ike-scan wiki launched: http://www.nta-monitor.com/wiki/ @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.8 2006/04/22 09:22:14 rillig Exp $ d5 1 a5 1 MASTER_SITES= http://www.nta-monitor.com/ike-scan/download/ d8 1 a8 1 HOMEPAGE= http://www.nta-monitor.com/ike-scan/ @ 1.8 log @Removed the superfluous "quotes" and 'quotes' from variables that don't need them, for example RESTRICTED and SUBST_MESSAGE.*. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.7 2006/01/18 21:37:01 adrianp Exp $ d3 1 a3 1 DISTNAME= ike-scan-1.8 @ 1.7 log @Update to 1.8 Grab maintainership From the ChangeLog (Summarised) > * ike-backoff-patterns: Added backoff patterns for Netgear ProSafe > and Netgear ADSL Firewall Router. Submitted by Paul Askew. > * ike-scan.c, ike-scan.h, configure.ac: Added new --writepkttofile > option. This option writes the output packet to the specified file > rather than sending it to the remote host. It is intended for > debugging and testing purposes, to allow the IKE packet to be > easily checked. This option is not documented, because it is > designed purely for testing. > * check-packet: New test to check IKE scan packet data. Currently > tests two sample packets: one default proposal, and one custom > proposal. > * ike-scan.c: Added --exchange option to allow the exchange field > in the ISAKMP header to be set to arbitrary values. > * ike-scan.c, isakmp.c: Added --hdrflags and --hdrmsgid options to > allow Flags and MsgID fields in the ISAKMP header to be specified. > * ike-scan.c: Added --cookie option to allow the initiator cookie in > the ISAKMP header to be set to a static value. > * ike-scan.c, isakmp.c: Add --spisize option to allow a random SPI > of the specified size to be added to the proposal payload. > * ike-vendor-ids: Added 16 new Vendor IDs, and revised some comments > on existing entries. > * ike-scan.c: Added --doi (-D) and --situation (-S) options to allow > the DOI and Situation in the SA of the outbound packets to be changed > from the default of DOI_IPSEC and SIT_IDENTITY_ONLY. > * ike-scan.c: Added --protocol (-j) and --transid (-k) options to > allow the proposal protocol and transform id of the outbound packets > to be changed from the defaults. > * ike-scan.c: Added --certreq (-C) option to add a > CertificateRequest payload to the outgoing packet. > * ike-scan.c: Added --headerlen (-L) option to allow the ISAKMP header > length to be manually specified. Normally, ike-scan will > automatically calculate the correct length; however, you can use this > option if you want to use an incorrect length value instead. > * ike-scan.c, isakmp.c: Added --mbz (-Z) option to allow the value for > the reserved (MBZ) fields to be set to non-zero values. Doing so > will make the outgoing packet non-RFC compliant. > * ike-scan.c, isakmp.c: Added --headerver (-E) option to allow the > version field in the ISAKMP header to be altered from the default of > 0x10 (v1.0). > * ike-scan.c: Added --bandwidth (-B) option to allow the outgoing > bandwidth to be specified directly instead of using --interval. > The --bandwidth option calculates the appropriate interval setting, > taking into account the size of the packet. > * ike-scan.c: Added --noncelen (-c) option to allow the length of the > nonce data to be changed. This is only applicable to aggressive > mode. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.6 2005/12/05 20:50:56 rillig Exp $ d18 1 a18 1 SUBST_MESSAGE.man= "Fixing man pages." @ 1.6 log @Fixed pkglint warnings. The warnings are mostly quoting issues, for example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 2005/04/11 21:47:12 tv Exp $ d3 1 a3 1 DISTNAME= ike-scan-1.7.1 d7 1 a7 1 MAINTAINER= tech-pkg@@NetBSD.org @ 1.5 log @Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.4 2005/02/28 16:04:28 adam Exp $ d14 1 a14 1 SUBST_CLASSES= man @ 1.4 log @Changes 1.7.1: * Fixed bug which caused hostnames containing hyphens to fail with an error. * Improved mapping of ID numbers to names in decode. This allows sparse IDs ranges (e.g. 1,2,3,65000) to be supported, which means that we can now decode XAUTH authentication method amongst other things. * Added SO_BROADCAST option to UDP socket to allow sending to broadcast addresses. Previously this gave a permission denied error. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2005/01/14 08:36:54 adrianp Exp $ a10 1 USE_BUILDLINK3= yes @ 1.3 log @- Update to 1.7 - Add bl3 and openssl support - Fix paths in man pages - Install extra documentation - Remove un-needed options from pkgsrc Makefile Lots of changes/bugfixes from 1.6 including: psk-crack.c: New program to crack Aggressive Mode Pre-Shared Keys using dictionary attack. This uses the output from "ike-scan -P" together with a dictionary. @ text @d1 1 a1 2 # $NetBSD: Makefile,v 1.2 2004/02/28 15:29:20 taca Exp $ # d3 1 a3 1 DISTNAME= ike-scan-1.7 d11 2 a12 3 GNU_CONFIGURE= YES USE_BUILDLINK3= YES @ 1.2 log @MAINTAINER should be tech-pkg@@NetBSD.org instead of packages@@netbsd.org. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1.1.1 2004/02/27 22:12:51 itojun Exp $ d4 1 a4 1 DISTNAME= ike-scan-1.6 a11 1 HAS_CONFIGURE= YES d13 1 d15 13 @ 1.1 log @Initial revision @ text @d1 1 a1 1 # $NetBSD$ d8 1 a8 1 MAINTAINER= packages@@netbsd.org @ 1.1.1.1 log @ike-scan, IKE fingerprinting tool --- ike-scan discovers IKE hosts and can also fingerprint them using the retransmission backoff pattern. ike-scan does two things: a) Discovery: Determine which hosts are running IKE. This is done by displaying those hosts which respond to the IKE requests sent by ike-scan. b) Fingerprinting: Determine which IKE implementation the hosts are using. This is done by recording the times of the IKE response packets from the target hosts and comparing the observed retransmission backoff pattern against known patterns. The retransmission backoff fingerprinting concept is discussed in more detail in the UDP backoff fingerprinting paper which should be included in the ike-scan kit as udp-backoff-fingerprinting-paper.txt. The program sends IKE main mode requests to the specified hosts and displays any responses that are received. It handles retry and retransmission with backoff to cope with packet loss. It also limits the amount of bandwidth used by the outbound IKE packets. @ text @@