svn commit: r494801 - in head: . security security/sslproxy security/sslproxy/files
Muhammad Moinur Rahman
bofh at FreeBSD.org
Wed Mar 6 13:56:25 UTC 2019
Author: bofh
Date: Wed Mar 6 13:56:23 2019
New Revision: 494801
URL: https://svnweb.freebsd.org/changeset/ports/494801
Log:
[NEW] security/sslproxy: Transparent and scalable SSL/TLS interception
SSLproxy is a proxy for SSL/TLS encrypted network connections. It is intended to
be used for decrypting and diverting network traffic to other programs, such as
UTM services, for deep SSL inspection.
SSLproxy is designed to transparently terminate connections that are redirected
to it using a network address translation engine. SSLproxy then terminates
SSL/TLS and initiates a new SSL/TLS connection to the original destination
address. Packets received on the client side are decrypted and sent to the
program listening on a port given in the proxy specification. SSLproxy inserts
in the first packet the address and port it is expecting to receive the packets
back from the program. Upon receiving the packets back, SSLproxy re-encrypts and
sends them to their original destination. The return traffic follows the same
path back to the client in reverse order.
WWW: https://github.com/sonertari/SSLproxy
Please note that the sslproxy deleted and sslproxy created are not the same
application.
Added:
head/security/sslproxy/
- copied from r313384, head/security/sslproxy/
head/security/sslproxy/files/patch-GNUmakefile (contents, props changed)
head/security/sslproxy/files/patch-pxyconn.h (contents, props changed)
Deleted:
head/security/sslproxy/files/patch-aa
head/security/sslproxy/files/sigchld.diff
Modified:
head/MOVED
head/security/Makefile
head/security/sslproxy/Makefile
head/security/sslproxy/distinfo
head/security/sslproxy/pkg-descr
Modified: head/MOVED
==============================================================================
--- head/MOVED Wed Mar 6 13:37:31 2019 (r494800)
+++ head/MOVED Wed Mar 6 13:56:23 2019 (r494801)
@@ -4048,7 +4048,6 @@ sysutils/sarah||2013-03-03|Has expired: No more upstre
www/igal||2013-03-03|Has expired: No more upstream, no more public distfiles, consider using www/llgal
finance/tinyerp-server||2013-03-03|Has expired: No more upstream, no more public distfiles, consider using finance/openerp-server
ports-mgmt/portcheck||2013-03-03|Has expired: No more upstream, no more public distfiles
-security/sslproxy||2013-03-03|Has expired: Abandoned upstream
x11-themes/e17-theme-darkness||2013-03-03|Has expired: No more public distfiles
x11-themes/e17-theme-cthulhain||2013-03-03|Has expired: Dead upstream since 2008
x11-servers/driglide||2013-03-03|Has expired: 3dfx is dead, fails to compile on recent versions of FreeBSD
Modified: head/security/Makefile
==============================================================================
--- head/security/Makefile Wed Mar 6 13:37:31 2019 (r494800)
+++ head/security/Makefile Wed Mar 6 13:56:23 2019 (r494801)
@@ -1277,6 +1277,7 @@
SUBDIR += sshpass
SUBDIR += ssl-admin
SUBDIR += ssllabs-scan
+ SUBDIR += sslproxy
SUBDIR += sslscan
SUBDIR += sslsniffer
SUBDIR += sslsplit
Modified: head/security/sslproxy/Makefile
==============================================================================
--- head/security/sslproxy/Makefile Sun Mar 3 22:59:34 2013 (r313384)
+++ head/security/sslproxy/Makefile Wed Mar 6 13:56:23 2019 (r494801)
@@ -1,35 +1,27 @@
-# New ports collection makefile for: sslproxy
-# Date created: 11 February 1999
-# Whom: Alex Le Heux
-#
# $FreeBSD$
-#
PORTNAME= sslproxy
-PORTVERSION= 20000129
+PORTVERSION= 0.5.9
+DISTVERSIONPREFIX= v
+PORTEPOCH= 1
CATEGORIES= security
-MASTER_SITES= http://mirror2.unixfreunde.de/ \
- http://freebsd.unixfreunde.de/sources/
-DISTNAME= sslproxy.2000_Jan_29
-MAINTAINER= alexlh at funk.org
-COMMENT= Proxies non-SSL request over an SSL connection
+MAINTAINER= bofh at FreeBSD.org
+COMMENT= Transparent and scalable SSL/TLS interception
-PORTDOCS= README.txt dummyCert.pem
+LICENSE= BSD2CLAUSE
-PLIST_FILES= bin/sslproxy
+LIB_DEPENDS= libevent.so:devel/libevent \
+ libnet.so:net/libnet
-USE_OPENSSL= YES
+USES= gmake pkgconfig uidfix ssl
+USE_GITHUB= yes
+GH_ACCOUNT= sonertari
+GH_PROJECT= SSLproxy
-DEPRECATED= Abandoned upstream
-EXPIRATION_DATE= 2013-02-28
-
-do-install:
- ${INSTALL_PROGRAM} ${WRKSRC}/sslproxy ${PREFIX}/bin/sslproxy
-.if !defined(NOPORTDOCS)
- ${MKDIR} ${PREFIX}/share/doc/sslproxy
- ${INSTALL_DATA} ${WRKSRC}/README.txt ${WRKSRC}/dummyCert.pem \
- ${PREFIX}/share/doc/sslproxy
-.endif
+MAKEFILE= GNUmakefile
+MAKE_ENV= DESTDIR=${STAGEDIR} MANDIR=man INSTALLUID=${UID} INSTALLGID=${GID}
+PLIST_FILES= bin/sslproxy man/man1/sslproxy.1.gz man/man5/sslproxy.conf.5.gz \
+ "@sample etc/sslproxy.conf.sample"
.include <bsd.port.mk>
Modified: head/security/sslproxy/distinfo
==============================================================================
--- head/security/sslproxy/distinfo Sun Mar 3 22:59:34 2013 (r313384)
+++ head/security/sslproxy/distinfo Wed Mar 6 13:56:23 2019 (r494801)
@@ -1,2 +1,3 @@
-SHA256 (sslproxy.2000_Jan_29.tar.gz) = 17a665436de17dddd21fe76e6c3b259a6f020aa36016b10426ebfce87ea3d19f
-SIZE (sslproxy.2000_Jan_29.tar.gz) = 13760
+TIMESTAMP = 1551812754
+SHA256 (sonertari-SSLproxy-v0.5.9_GH0.tar.gz) = 669cd763f83c8faa69e6fb2854e09cb724960075b088cbac5df994613423a4cb
+SIZE (sonertari-SSLproxy-v0.5.9_GH0.tar.gz) = 1777393
Added: head/security/sslproxy/files/patch-GNUmakefile
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ head/security/sslproxy/files/patch-GNUmakefile Wed Mar 6 13:56:23 2019 (r494801)
@@ -0,0 +1,50 @@
+--- GNUmakefile.orig 2018-12-11 18:58:45 UTC
++++ GNUmakefile
+@@ -178,7 +178,7 @@ endif
+
+ PREFIX?= /usr/local
+ MANDIR?= share/man
+-EXAMPLESDIR?= share/examples
++ETCDIR?= etc
+
+ INSTALLUID?= 0
+ INSTALLGID?= 0
+@@ -191,7 +191,7 @@ CNFMODE?= 0644
+ MANUID?= $(INSTALLUID)
+ MANGID?= $(INSTALLGID)
+ MANMODE?= 0644
+-EXAMPLESMODE?= 0444
++ETCMODE?= 0444
+ ifeq ($(shell id -u),0)
+ BINOWNERFLAGS?= -o $(BINUID) -g $(BINGID)
+ CNFOWNERFLAGS?= -o $(CNFUID) -g $(CNFGID)
+@@ -504,26 +504,19 @@ clean:
+ $(RM) -rf *.dSYM
+
+ install: $(TARGET)
+- test -d $(DESTDIR)$(PREFIX)/bin || $(MKDIR) -p $(DESTDIR)$(PREFIX)/bin
+- test -d $(DESTDIR)$(PREFIX)/$(MANDIR)/man1 || \
+- $(MKDIR) -p $(DESTDIR)$(PREFIX)/$(MANDIR)/man1
+- test -d $(DESTDIR)$(PREFIX)/$(MANDIR)/man5 || \
+- $(MKDIR) -p $(DESTDIR)$(PREFIX)/$(MANDIR)/man5
+- test -d $(DESTDIR)$(PREFIX)/$(EXAMPLESDIR)/$(TARGET) || \
+- $(MKDIR) -p $(DESTDIR)$(PREFIX)/$(EXAMPLESDIR)/$(TARGET)
+ $(INSTALL) $(BINOWNERFLAGS) -m $(BINMODE) \
+ $(TARGET) $(DESTDIR)$(PREFIX)/bin/
+ $(INSTALL) $(MANOWNERFLAGS) -m $(MANMODE) \
+ $(TARGET).1 $(DESTDIR)$(PREFIX)/$(MANDIR)/man1/
+ $(INSTALL) $(MANOWNERFLAGS) -m $(MANMODE) \
+ $(TARGET).conf.5 $(DESTDIR)$(PREFIX)/$(MANDIR)/man5/
+- $(INSTALL) $(MANOWNERFLAGS) -m $(EXAMPLESMODE) \
+- $(TARGET).conf $(DESTDIR)$(PREFIX)/$(EXAMPLESDIR)/$(TARGET)/
++ $(INSTALL) $(MANOWNERFLAGS) -m $(ETCMODE) \
++ $(TARGET).conf $(DESTDIR)$(PREFIX)/$(ETCDIR)/$(TARGET).conf.sample
+
+ deinstall:
+ $(RM) -f $(DESTDIR)$(PREFIX)/bin/$(TARGET) $(DESTDIR)$(PREFIX)/$(MANDIR)/man1/$(TARGET).1 \
+ $(DESTDIR)$(PREFIX)/$(MANDIR)/man5/$(TARGET).conf.5
+- $(RM) -rf $(DESTDIR)$(PREFIX)/$(EXAMPLESDIR)/$(TARGET)/
++ $(RM) -rf $(DESTDIR)$(PREFIX)/$(ETCDIR)/$(TARGET)/
+
+ ifdef GITDIR
+ lint:
Added: head/security/sslproxy/files/patch-pxyconn.h
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ head/security/sslproxy/files/patch-pxyconn.h Wed Mar 6 13:56:23 2019 (r494801)
@@ -0,0 +1,13 @@
+--- pxyconn.h.orig 2019-02-20 19:30:43 UTC
++++ pxyconn.h
+@@ -30,6 +30,10 @@
+ #ifndef PXYCONN_H
+ #define PXYCONN_H
+
++#if defined(__FreeBSD__) || defined(__DragonFly__)
++#include <netinet/in.h>
++#endif
++
+ #include "proxy.h"
+ #include "opts.h"
+ #include "attrib.h"
Modified: head/security/sslproxy/pkg-descr
==============================================================================
--- head/security/sslproxy/pkg-descr Sun Mar 3 22:59:34 2013 (r313384)
+++ head/security/sslproxy/pkg-descr Wed Mar 6 13:56:23 2019 (r494801)
@@ -1,7 +1,15 @@
-You probably know secure HTTP from secure web sites. Say, you want to operate
-a secure web server but have only a normal server. SSL Proxy can be your
-solution: It's plugged into the connection between the client and the server
-and adds Secure Socket Layer (SSL) support. Or the other way around: You have
-an ordinary telnet client but want to connect to a secure site. Just start SSL
-Proxy with the appropriate parameters and -- voila. That's what SSL Proxy can
-do for you.
+SSLproxy is a proxy for SSL/TLS encrypted network connections. It is intended to
+be used for decrypting and diverting network traffic to other programs, such as
+UTM services, for deep SSL inspection.
+
+SSLproxy is designed to transparently terminate connections that are redirected
+to it using a network address translation engine. SSLproxy then terminates
+SSL/TLS and initiates a new SSL/TLS connection to the original destination
+address. Packets received on the client side are decrypted and sent to the
+program listening on a port given in the proxy specification. SSLproxy inserts
+in the first packet the address and port it is expecting to receive the packets
+back from the program. Upon receiving the packets back, SSLproxy re-encrypts and
+sends them to their original destination. The return traffic follows the same
+path back to the client in reverse order.
+
+WWW: https://github.com/sonertari/SSLproxy
More information about the svn-ports-head
mailing list