head	1.23;
access;
symbols
	pkgsrc-2026Q1:1.23.0.2
	pkgsrc-2026Q1-base:1.23
	pkgsrc-2025Q4:1.22.0.42
	pkgsrc-2025Q4-base:1.22
	pkgsrc-2025Q3:1.22.0.40
	pkgsrc-2025Q3-base:1.22
	pkgsrc-2025Q2:1.22.0.38
	pkgsrc-2025Q2-base:1.22
	pkgsrc-2025Q1:1.22.0.36
	pkgsrc-2025Q1-base:1.22
	pkgsrc-2024Q4:1.22.0.34
	pkgsrc-2024Q4-base:1.22
	pkgsrc-2024Q3:1.22.0.32
	pkgsrc-2024Q3-base:1.22
	pkgsrc-2024Q2:1.22.0.30
	pkgsrc-2024Q2-base:1.22
	pkgsrc-2024Q1:1.22.0.28
	pkgsrc-2024Q1-base:1.22
	pkgsrc-2023Q4:1.22.0.26
	pkgsrc-2023Q4-base:1.22
	pkgsrc-2023Q3:1.22.0.24
	pkgsrc-2023Q3-base:1.22
	pkgsrc-2023Q2:1.22.0.22
	pkgsrc-2023Q2-base:1.22
	pkgsrc-2023Q1:1.22.0.20
	pkgsrc-2023Q1-base:1.22
	pkgsrc-2022Q4:1.22.0.18
	pkgsrc-2022Q4-base:1.22
	pkgsrc-2022Q3:1.22.0.16
	pkgsrc-2022Q3-base:1.22
	pkgsrc-2022Q2:1.22.0.14
	pkgsrc-2022Q2-base:1.22
	pkgsrc-2022Q1:1.22.0.12
	pkgsrc-2022Q1-base:1.22
	pkgsrc-2021Q4:1.22.0.10
	pkgsrc-2021Q4-base:1.22
	pkgsrc-2021Q3:1.22.0.8
	pkgsrc-2021Q3-base:1.22
	pkgsrc-2021Q2:1.22.0.6
	pkgsrc-2021Q2-base:1.22
	pkgsrc-2021Q1:1.22.0.4
	pkgsrc-2021Q1-base:1.22
	pkgsrc-2020Q4:1.22.0.2
	pkgsrc-2020Q4-base:1.22
	pkgsrc-2020Q3:1.21.0.6
	pkgsrc-2020Q3-base:1.21
	pkgsrc-2020Q2:1.21.0.4
	pkgsrc-2020Q2-base:1.21
	pkgsrc-2020Q1:1.21.0.2
	pkgsrc-2020Q1-base:1.21
	pkgsrc-2019Q4:1.20.0.36
	pkgsrc-2019Q4-base:1.20
	pkgsrc-2019Q3:1.20.0.32
	pkgsrc-2019Q3-base:1.20
	pkgsrc-2019Q2:1.20.0.30
	pkgsrc-2019Q2-base:1.20
	pkgsrc-2019Q1:1.20.0.28
	pkgsrc-2019Q1-base:1.20
	pkgsrc-2018Q4:1.20.0.26
	pkgsrc-2018Q4-base:1.20
	pkgsrc-2018Q3:1.20.0.24
	pkgsrc-2018Q3-base:1.20
	pkgsrc-2018Q2:1.20.0.22
	pkgsrc-2018Q2-base:1.20
	pkgsrc-2018Q1:1.20.0.20
	pkgsrc-2018Q1-base:1.20
	pkgsrc-2017Q4:1.20.0.18
	pkgsrc-2017Q4-base:1.20
	pkgsrc-2017Q3:1.20.0.16
	pkgsrc-2017Q3-base:1.20
	pkgsrc-2017Q2:1.20.0.12
	pkgsrc-2017Q2-base:1.20
	pkgsrc-2017Q1:1.20.0.10
	pkgsrc-2017Q1-base:1.20
	pkgsrc-2016Q4:1.20.0.8
	pkgsrc-2016Q4-base:1.20
	pkgsrc-2016Q3:1.20.0.6
	pkgsrc-2016Q3-base:1.20
	pkgsrc-2016Q2:1.20.0.4
	pkgsrc-2016Q2-base:1.20
	pkgsrc-2016Q1:1.20.0.2
	pkgsrc-2016Q1-base:1.20
	pkgsrc-2015Q4:1.19.0.2
	pkgsrc-2015Q4-base:1.19
	pkgsrc-2015Q3:1.16.0.2
	pkgsrc-2015Q3-base:1.16
	pkgsrc-2015Q2:1.13.0.4
	pkgsrc-2015Q2-base:1.13
	pkgsrc-2015Q1:1.13.0.2
	pkgsrc-2015Q1-base:1.13
	pkgsrc-2014Q4:1.10.0.2
	pkgsrc-2014Q4-base:1.10
	pkgsrc-2014Q3:1.8.0.2
	pkgsrc-2014Q3-base:1.8
	pkgsrc-2014Q2:1.7.0.4
	pkgsrc-2014Q2-base:1.7
	pkgsrc-2014Q1:1.7.0.2
	pkgsrc-2014Q1-base:1.7
	pkgsrc-2013Q4:1.4.0.2
	pkgsrc-2013Q4-base:1.4
	pkgsrc-2013Q3:1.3.0.4
	pkgsrc-2013Q3-base:1.3
	pkgsrc-2013Q2:1.3.0.2
	pkgsrc-2013Q2-base:1.3
	pkgsrc-2013Q1:1.2.0.2
	pkgsrc-2013Q1-base:1.2
	pkgsrc-base:1.1.1.1
	TNF:1.1.1;
locks; strict;
comment	@# @;


1.23
date	2026.01.04.06.19.39;	author riastradh;	state Exp;
branches;
next	1.22;
commitid	OJdA6VbLBr2rx2pG;

1.22
date	2020.11.01.11.28.35;	author wiz;	state Exp;
branches
	1.22.42.1;
next	1.21;
commitid	j7QZShpSe49RZauC;

1.21
date	2020.01.18.23.35.10;	author rillig;	state Exp;
branches;
next	1.20;
commitid	shGUwZfkr7sleeTB;

1.20
date	2016.02.19.22.41.50;	author agc;	state Exp;
branches;
next	1.19;
commitid	DTjqj2mZuvmzUzVy;

1.19
date	2015.11.03.16.50.32;	author agc;	state Exp;
branches;
next	1.18;
commitid	PlRfe6NDczeDqFHy;

1.18
date	2015.10.01.01.14.07;	author agc;	state Exp;
branches;
next	1.17;
commitid	EY4N7iEaOSoZjlDy;

1.17
date	2015.09.25.15.46.58;	author agc;	state Exp;
branches;
next	1.16;
commitid	fL0oZOP61LxHkECy;

1.16
date	2015.09.12.02.19.06;	author agc;	state Exp;
branches
	1.16.2.1;
next	1.15;
commitid	jUDOWWHlE58whUAy;

1.15
date	2015.09.01.19.38.42;	author agc;	state Exp;
branches;
next	1.14;
commitid	eRCKz9cNQkYeoAzy;

1.14
date	2015.08.17.11.37.55;	author jperkin;	state Exp;
branches;
next	1.13;
commitid	eWl9UW9BwcTbdCxy;

1.13
date	2015.02.05.00.21.57;	author agc;	state Exp;
branches;
next	1.12;
commitid	ElUADrlljB46GK8y;

1.12
date	2015.02.03.21.34.57;	author agc;	state Exp;
branches;
next	1.11;
commitid	6qTclEbv7hmZMB8y;

1.11
date	2015.01.30.18.47.50;	author agc;	state Exp;
branches;
next	1.10;
commitid	biq7Cj6gTaMiZ48y;

1.10
date	2014.12.04.20.08.47;	author agc;	state Exp;
branches;
next	1.9;
commitid	09yGLNmVkNW7hL0y;

1.9
date	2014.11.29.20.19.46;	author agc;	state Exp;
branches;
next	1.8;
commitid	18ny75hPfT5Pu70y;

1.8
date	2014.07.12.15.45.52;	author agc;	state Exp;
branches;
next	1.7;
commitid	wKsq78mzoWvmt6Ix;

1.7
date	2014.03.05.04.51.37;	author agc;	state Exp;
branches;
next	1.6;
commitid	0ssKmacmAxPv0trx;

1.6
date	2014.02.16.17.21.15;	author agc;	state Exp;
branches;
next	1.5;
commitid	MB9TB4xhULnrHlpx;

1.5
date	2014.02.04.02.11.18;	author agc;	state Exp;
branches;
next	1.4;
commitid	SpOD9YP8ywNG2Jnx;

1.4
date	2013.12.20.17.16.48;	author agc;	state Exp;
branches;
next	1.3;
commitid	KlEUo8XVf8fewThx;

1.3
date	2013.04.26.23.24.55;	author agc;	state Exp;
branches;
next	1.2;

1.2
date	2013.03.16.07.32.34;	author agc;	state Exp;
branches;
next	1.1;

1.1
date	2013.02.23.21.11.56;	author agc;	state Exp;
branches
	1.1.1.1;
next	;

1.22.42.1
date	2026.01.24.03.06.28;	author maya;	state Exp;
branches;
next	;
commitid	nubNusgIn6kmPArG;

1.16.2.1
date	2015.09.26.06.04.13;	author ryoon;	state Exp;
branches;
next	;
commitid	ZY3DlDHRNSDn5JCy;

1.1.1.1
date	2013.02.23.21.11.56;	author agc;	state Exp;
branches;
next	;


desc
@@


1.23
log
@security/netpgpverify: Handle issuer fingerprint subpackets.

This is an extremely dodgy stop-gap measure to verify signatures
produced by gpg2.  It does nothing to address pervasive problems in
netpgpverify, like PR security/57449 or PR bin/59823, or even more
narrowly scoped problems with using keyids instead of fingerprints.
I'm a little reluctant to even commit this stop-gap because the
problems are so bad, and a band-aid won't fix a spurting carotid.

The symptom is:

> ./netpgpverify -k keypubring.gpg2 gpg2test.gpg2
> Ignoring unusual/reserved signature subpacket 34
> Signature did not match contents -- Signature key id 38fa6a2833ed1efa does not match onepass keyid

Test case generated by:

mkdir -m 0700 gpghome
gpg2 --homedir gpghome --batch --passphrase '' \
    --quick-gen-key user@@example.com rsa2048 sign never
echo hello world >gpg2test
gpg2 --homedir gpghome --batch --no-comments --no-emit-version \
    --output gpg2test.gpg2 --sign gpg2test
gpg2 --homedir gpghome --batch --no-comments --no-emit-version \
    --export-secret-keys >keysecring.gpg2
gpg2 --homedir gpghome --batch --no-comments --no-emit-version \
    --export >keypubring.gpg2
@
text
@# $NetBSD: Makefile,v 1.22 2020/11/01 11:28:35 wiz Exp $

DISTNAME=		netpgpverify-${VERSION}
PKGREVISION=		1
CATEGORIES=		security
MASTER_SITES=		# empty
DISTFILES=		# empty

MAINTAINER=		agc@@NetBSD.org
HOMEPAGE=		https://www.NetBSD.org/
COMMENT=		Standalone PGP and ssh signature verification utility
LICENSE=		modified-bsd

AUTO_MKDIRS=		yes
GNU_CONFIGURE=		yes

TEST_TARGET=		tst

.include "../../mk/bsd.prefs.mk"

VERSION!=	${AWK} '/\#define.*NETPGP_VERIFY_H_/ {print $$3}' ${FILESDIR}/verify.h

do-extract:
	${CP} -R ${FILESDIR} ${WRKSRC}

.include "../../mk/bsd.pkg.mk"
@


1.22
log
@netpgpverify: update to 20201101

Merge:
absorb issuer fingerprint (RFC4880bis 5.2.3.28) in libverify.c
from jhigh from src/

While here, fix build with RELRO and a pkglint warning.

Bump version to 20201101.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.21 2020/01/18 23:35:10 rillig Exp $
d4 1
@


1.22.42.1
log
@Pullup ticket #7047 - requested by wiz
security/netpgpverify: Bug fix

Revisions pulled up:
- security/netpgpverify/Makefile                                1.23
- security/netpgpverify/files/Makefile.in                       1.10
- security/netpgpverify/files/gpg2test                          1.1
- security/netpgpverify/files/gpg2test.gpg2                     1.1
- security/netpgpverify/files/keypubring.gpg2                   1.1
- security/netpgpverify/files/keysecring.gpg2                   1.1
- security/netpgpverify/files/libverify.c                       1.32

---
   Module Name:	pkgsrc
   Committed By:	riastradh
   Date:		Sun Jan  4 06:19:40 UTC 2026

   Modified Files:
   	pkgsrc/security/netpgpverify: Makefile
   	pkgsrc/security/netpgpverify/files: Makefile.in libverify.c
   Added Files:
   	pkgsrc/security/netpgpverify/files: gpg2test gpg2test.gpg2
   	    keypubring.gpg2 keysecring.gpg2

   Log Message:
   security/netpgpverify: Handle issuer fingerprint subpackets.

   This is an extremely dodgy stop-gap measure to verify signatures
   produced by gpg2.  It does nothing to address pervasive problems in
   netpgpverify, like PR security/57449 or PR bin/59823, or even more
   narrowly scoped problems with using keyids instead of fingerprints.
   I'm a little reluctant to even commit this stop-gap because the
   problems are so bad, and a band-aid won't fix a spurting carotid.

   The symptom is:

   > ./netpgpverify -k keypubring.gpg2 gpg2test.gpg2
   > Ignoring unusual/reserved signature subpacket 34
   > Signature did not match contents -- Signature key id 38fa6a2833ed1efa does not match onepass keyid

   Test case generated by:

   mkdir -m 0700 gpghome
   gpg2 --homedir gpghome --batch --passphrase '' \
       --quick-gen-key user@@example.com rsa2048 sign never
   echo hello world >gpg2test
   gpg2 --homedir gpghome --batch --no-comments --no-emit-version \
       --output gpg2test.gpg2 --sign gpg2test
   gpg2 --homedir gpghome --batch --no-comments --no-emit-version \
       --export-secret-keys >keysecring.gpg2
   gpg2 --homedir gpghome --batch --no-comments --no-emit-version \
       --export >keypubring.gpg2
@
text
@d1 1
a1 1
# $NetBSD$
a3 1
PKGREVISION=		1
@


1.21
log
@all: migrate several HOMEPAGEs to https

pkglint --only "https instead of http" -r -F

With manual adjustments afterwards since pkglint 19.4.4 fixed a few
indentations in unrelated lines.

This mainly affects projects hosted at SourceForce, as well as
freedesktop.org, CTAN and GNU.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.20 2016/02/19 22:41:50 agc Exp $
d23 1
a23 1
	@@${CP} -R ${FILESDIR} ${WRKSRC}
@


1.20
log
@Remove an item from the netpgpverify/libnetpgpverify TODO list:

+ get rid of calls to snprintf which simply add the returned value to
the number of characters used so far. This practice is unsafe. Instead,
use a dynamic buffer and grow its size to accommodate the contents.

+ add USE_ARG definition to some files which use it but don't check to
see that it's been defined

pkgsrc changes:

+ Bump version number to 20160214

+ Use the same method as libnetpgpverify for finding the version number
from the sources.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.19 2015/11/03 16:50:32 agc Exp $
d9 1
a9 1
HOMEPAGE=		http://www.NetBSD.org/
@


1.19
log
@Update netpgpverify to 20151103

Changes since previous version:

+ fix a bug where SHA512 case was missed in the digest_get_prefix()
  function. Bug and fix from Felix Lange.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.18 2015/10/01 01:14:07 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20151103
d18 4
@


1.18
log
@Update netpgpverify to 20150930.

Changes since 20150919:

+ fixed minor bug in BN_rand() function - used field wasn't set

+ added BN_gcd() function

+ added translation layer in header file, so that library
can be called as a BIGNUM/BN_* replacement if USE_BN_INTERFACE
is defined at compile-time
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.17 2015/09/25 15:46:58 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20150930
@


1.17
log
@Update netpgpverify, and libnetpgpverify, from version 20150911 to
version 20150919

Changes:

+ get rid of unnecessary header inclusion (sys/syslog.h), which gives
problems on HP/UX and is unused

from Tobias Nygren
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.16 2015/09/12 02:19:06 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20150919
@


1.16
log
@Update netpgpverify to version 20150911.

Changes since previous version (20150901)

+ Apparently, OS X 10.4 does not have an implementation of le32dec().
Instead, unroll the inline function.

Bug report from Sevan - thanks!
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.15 2015/09/01 19:38:42 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20150911
@


1.16.2.1
log
@Pullup ticket #4816 - requested by agc
security/netpgpverify: bug fix patch
security/libnetpgpverify: bug fix patch

Revisions pulled up:
- pkgsrc/security/netpgpverify: Makefile		1.17
- pkgsrc/security/netpgpverify/files/digest.c		1.4
- pkgsrc/security/netpgpverify/files/misc.c		1.4
- pkgsrc/security/netpgpverify/files/rsa.c		1.4
- pkgsrc/security/netpgpverify/files/verify.h		1.16

---
   Module Name:    pkgsrc
   Committed By:   agc
   Date:           Fri Sep 25 15:46:58 UTC 2015

   Modified Files:
           pkgsrc/security/netpgpverify: Makefile
           pkgsrc/security/netpgpverify/files: digest.c misc.c rsa.c verify.h

   Log Message:
   Update netpgpverify, and libnetpgpverify, from version 20150911 to
   version 20150919

   Changes:

   + get rid of unnecessary header inclusion (sys/syslog.h), which gives
   problems on HP/UX and is unused

   from Tobias Nygren
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.17 2015/09/25 15:46:58 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20150919
@


1.15
log
@Update netpgpverify to 20150901

+ rename all the symbols I could fine which could conflict with those
  in libcrypto.  requested by joerg
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.14 2015/08/17 11:37:55 jperkin Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20150901
@


1.14
log
@Portability fixes.  Add a test target and additional tests.

Reviewed by agc.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.13 2015/02/05 00:21:57 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20150205
@


1.13
log
@Update netpgpverify (and libnetpgpverify) to version 20150205

+ recognise signatures made by subkeys as well as by primary keys

+ print out the relevant key which signed the file, even if it's
a subkey and not the primary key itself.

+ keep the same API as before

with many thanks to Jonathan Perkin
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.12 2015/02/03 21:34:57 agc Exp $
d16 2
@


1.12
log
@Update netpgpverify, and libnetpgpverify, to 20150204

+ dump the huge output in testing script to /dev/null so that we can
see what's happening with the other tests in testit.sh

+ fix from jperkin@@, don't try to be clever when selecting the only
key id in a keyring

+ add a test for single key (non-ssh) pubring
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.11 2015/01/30 18:47:50 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20150204
@


1.11
log
@Update to version 20150115.

This version includes support for the '-c dump' command, which dumps
the contents of all PGP packets to stdout.  Note that since we're
verifying, no private keys are involved.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.10 2014/12/04 20:08:47 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20150115
@


1.10
log
@Update netpgpverify to version 20141204

Changes since 20141129:

+ bring over lint changes from src/crypto version of this utility
+ add a helper function to get an element from a cursor
+ added a small compile and test script, which uses BSD makefiles
+ change WARNS level in BSD Makefile from 6 to 5 - changes to make
  WARNS=6 compile are way too intrusive and distracting to be useful
+ bump version to 20141204
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.9 2014/11/29 20:19:46 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20141204
@


1.9
log
@Update netpgpverify to version 20141129

+ enhancement to tiger.c (from apb, IIRC) to use the union rather than
dubious and probably unportable casts.

+ bump version number
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.8 2014/07/12 15:45:52 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20141129
@


1.8
log
@Update netpgpverify package to 20140712

+ bring the bignum implementation up to the latest version

	+ radix conversion routines added
	+ bitwise operations added
	+ whitespace cleanups
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.7 2014/03/05 04:51:37 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20140712
@


1.7
log
@netpgpverify-20140304:
+ Check the correct field in the struct is not NULL in sig_verify_dsa()
+ Move to using our own byte-swapping routines - portability
+ Check for errors in bzlib
+ Bump version number to 20140304
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.6 2014/02/16 17:21:15 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20140304
@


1.6
log
@Update security/netpgpverify to 20140210

minor lint fix
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.5 2014/02/04 02:11:18 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20140210
@


1.5
log
@Update security/netpgpverify to version 20140202

Changes from previous version:

Add the ability for netpgpverify to verify ssh-pub-key-based signatures.

It is much more likely for ssh (rather than pgp) keys to be available,
and used, as a source of authentication data.  These changes add the
ability for netpgpverify(1) -- the standalone, zero-prereq utility -
to verify signatures made by netpgp when using ssh keys.

Running the regression tests in WRKDIR gives the following output:

	% mk -f *.bsd tst
	./netpgpverify -k pubring.gpg NetBSD-6.0_RC1_hashes.asc
	Good signature for NetBSD-6.0_RC1_hashes.asc made Thu Aug 23 11:47:50 2012
	signature     4096/RSA (Encrypt or Sign) 064973ac4c4a706e 2009-06-23
	fingerprint   ddee 2bdb 9c98 a0d1 d4fb dbf7 0649 73ac 4c4a 706e
	uid           NetBSD Security Officer <security-officer@@NetBSD.org>

	./netpgpverify -k pubring.gpg NetBSD-6.0_RC1_hashes.gpg
	Good signature for NetBSD-6.0_RC1_hashes.gpg made Thu Mar 14 13:32:59 2013
	signature     4096/RSA (Encrypt or Sign) 064973ac4c4a706e 2009-06-23
	fingerprint   ddee 2bdb 9c98 a0d1 d4fb dbf7 0649 73ac 4c4a 706e
	uid           NetBSD Security Officer <security-officer@@NetBSD.org>

	./netpgpverify -v
	netpgpverify portable 20140202
	./netpgpverify -S sshtest-20140202.pub data.gpg
	Good signature for data.gpg made Mon Feb  3 17:54:21 2014
	signature     4096/RSA (Encrypt or Sign) 4d129225945bbb8f 1970-01-01
	fingerprint   874b 75de d6a3 341f 2d5a 2219 4d12 9225 945b bb8f
	uid           netbsd-001.cupertino.alistaircrooks.com (sshtest-20140202.pub) <agc@@netbsd-001.cupertino.alistaircrooks.com>

	./netpgpverify -S sshtest-20140202.pub data.sig
	Good signature for data.sig made Sun Feb  2 21:45:05 2014
	signature     4096/RSA (Encrypt or Sign) 4d129225945bbb8f 1970-01-01
	fingerprint   874b 75de d6a3 341f 2d5a 2219 4d12 9225 945b bb8f
	uid           netbsd-001.cupertino.alistaircrooks.com (sshtest-20140202.pub) <agc@@netbsd-001.cupertino.alistaircrooks.com>

	expected failure, to check bad signatures fail to verify
	sed -e 's|A|B|' data.gpg | ./netpgpverify -S sshtest-20140202.pub
	Signature did not match contents -- Signature on data did not match
	*** Error code 1 (ignored)
	%

A new HOWTO file is provided in the sources (files/HOWTO) to show how
to sign data using ssh keys and netpgp(1).
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.4 2013/12/20 17:16:48 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20140202
@


1.4
log
@Update netpgpverify and libnetpgpverify to version 20131219

Fix a call to mp_radix_size to use a pointer to the BIGNUM, not the
address of the pointer, when accessing.  Fixes a problem observed in
other software when using the same code.  The problem was obscured
from the compiler because of the use of __UNCONST().  This makes the
BN_dec2bn() and BN_hex2bn() functions (in libnetpgpverify) work
properly.

OK: wiz
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.3 2013/04/26 23:24:55 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20131219
d10 1
a10 1
COMMENT=		Standalone PGP signature verification utility
@


1.3
log
@Update security/netpgpverify to version 20130426

Change from previous version:

+ don't assume that output of a "cat" command (where output is sent to
stdout if the signature is verified) is able to be written with stdio.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.2 2013/03/16 07:32:34 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20130426
@


1.2
log
@Update netpgpverify, the standalone PGP signature verification utility, to
latest 20130316 sources.

Changes since previous version:

+ this version is completely standalone, and relies on no external
libraries (other than libc)

+ updated man page to reflect reality

+ minor configure script added
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.1.1.1 2013/02/23 21:11:56 agc Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20130316
@


1.1
log
@Initial revision
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.16 2012/10/23 18:16:37 asau Exp $
d3 1
a3 1
DISTNAME=		netpgpverify-20120928
d10 1
a10 1
COMMENT=		PGP signature verification library
a12 1
USE_LIBTOOL=		yes
d14 1
a18 8
do-install:
	libtool --mode=install ${INSTALL_PROGRAM} ${WRKSRC}/netpgpverify ${DESTDIR}${PREFIX}/bin
	${INSTALL_DATA} ${WRKSRC}/src/netpgpverify/netpgpverify.1 ${DESTDIR}${PREFIX}/${PKGMANDIR}/man1

.include "../../archivers/bzip2/buildlink3.mk"
.include "../../devel/zlib/buildlink3.mk"
.include "../../security/libnetpgpverify/buildlink3.mk"

@


1.1.1.1
log
@Initial import of netpgpverify-20120928 into the Packages Collection

	netpgpverify is a standalone program to verify a PGP signature
	on a file or document. Both RSA and DSA signatures are supported,
	as are binary and document signatures.

	netpgpverify is compliant with RFC 4880.

netpgpverify is a small frontend for libnetpgpverify, to allow PGP digital
signatures to be verified from the command line.
@
text
@@
