Import of pkgsrc-2013Q2

security/sshfp/DESCR

@@ -0,0 +1,6 @@
+sshfp is a small utility that generates RFC4255 SSHFP DNS records
+based on the public keys stored in a known_hosts file or obtained by
+using ssh-keyscan.  If the nameserver of the domain allows zone
+tranfers (AXFR), an entire domain can be processed for all its A
+records.  These can then be easily added to a zone, and then secured
+by DNSSEC.

security/sshfp/Makefile

@@ -0,0 +1,21 @@
+# $NetBSD: Makefile,v 1.7 2012/10/23 18:16:59 asau Exp $
+
+DISTNAME=	sshfp-1.1.3
+PKGREVISION=	3
+CATEGORIES=	security net
+MASTER_SITES=	http://www.xelerance.com/software/sshfp/
+
+MAINTAINER=	agc@NetBSD.org
+HOMEPAGE=	http://www.xelerance.com/software/sshfp/
+COMMENT=	Print ssh host key fingerprint resource records
+LICENSE=	gnu-gpl-v2
+
+DEPENDS+=	 ${PYPKGPREFIX}-dns>=1.6.0:../../net/py-dns
+
+MANCOMPRESSED=			yes
+NO_BUILD=			yes
+PYTHON_PATCH_SCRIPTS=		sshfp
+
+.include "../../lang/python/application.mk"
+
+.include "../../mk/bsd.pkg.mk"

security/sshfp/PLIST

@@ -0,0 +1,3 @@
+@comment $NetBSD: PLIST,v 1.1.1.1 2008/07/31 10:21:21 agc Exp $
+bin/sshfp
+${PKGMANDIR}/man1/sshfp.1.gz

security/sshfp/distinfo

@@ -0,0 +1,7 @@
+$NetBSD: distinfo,v 1.2 2009/11/17 12:23:01 tron Exp $
+
+SHA1 (sshfp-1.1.3.tar.gz) = bf42c956a992ac9442e9bbaa4af8f5599f321c2b
+RMD160 (sshfp-1.1.3.tar.gz) = 9b325ed30e75e0f485eea11676a420932f5c9b1e
+Size (sshfp-1.1.3.tar.gz) = 15477 bytes
+SHA1 (patch-aa) = c6a00eb486790e9d489a4f476785986209a1c11e
+SHA1 (patch-ab) = b91c5a45302960c39f00e82b945eaac0e7304cf0

security/sshfp/patches/patch-aa

@@ -0,0 +1,15 @@
+$NetBSD: patch-aa,v 1.2 2009/11/17 12:23:01 tron Exp $
+
+--- Makefile	2008/07/31 09:38:52	1.1
++++ Makefile	2008/07/31 09:37:43
+@@ -4,8 +4,8 @@
+ #
+ #
+ 
+-BIN     = $(DESTDIR)/usr/bin
+-MAN     = $(DESTDIR)/usr/share/man/man1
++BIN     = $(DESTDIR)${PREFIX}/bin
++MAN     = $(DESTDIR)${PREFIX}/${PKGMANDIR}/man1
+ 
+ all: man-page
+ 	

security/sshfp/patches/patch-ab

@@ -0,0 +1,49 @@
+$NetBSD: patch-ab,v 1.1 2009/11/17 12:23:01 tron Exp $
+
+Fix deprecation warnings under Python 2.6.
+
+--- sshfp.orig	2007-05-15 22:10:26.000000000 +0100
++++ sshfp	2009-11-17 11:54:50.000000000 +0000
+@@ -8,9 +8,17 @@
+ import sys
+ import getopt
+ import base64
+-import sha
++
++try:
++    import hashlib
++    SHA1_CLASS = hashlib.sha1
++except ImportError:
++    import sha
++    SHA1_CLASS = sha.sha
++
+ import commands
+ import time
++import subprocess
+ # www.dnspython.org
+ try:
+ 	import dns.resolver
+@@ -58,7 +66,9 @@
+ 	except TypeError:
+ 		print "FAILED on hostname "+hostname+" with keyblob "+keyblob
+ 		return "ERROR"
+-	fpsha1 = sha.new(rawkey).hexdigest()
++        sha1 = SHA1_CLASS()
++        sha1.update(rawkey)
++        fpsha1 = sha1.hexdigest()
+ 	# check for Reverse entries
+ 	reverse = 1
+ 	parts = hostname.split(".",3)
+@@ -183,7 +193,11 @@
+ 	cmd = "ssh-keyscan -p %s -T %s -t %s %s" % (port, timeout, algo, hosts)
+ 	if quiet:
+ 		cmd = cmd + " 2>/dev/null"
+-	tochild, fromchild, childerror = os.popen3(cmd, 'r')
++        cmd_pipe = subprocess.Popen(cmd, shell = True, stdin = subprocess.PIPE,
++          stdout = subprocess.PIPE, stderr = subprocess.PIPE, close_fds = True)
++        tochild = cmd_pipe.stdin
++        fromchild = cmd_pipe.stdout
++        childerror = cmd_pipe.stderr
+         err = childerror.readlines()
+         khdns = "\n".join(fromchild.readlines())
+         for e in err: