mirror of
https://github.com/macports/macports-ports.git
synced 2026-07-12 18:20:25 -07:00
60 lines
2.2 KiB
Plaintext
60 lines
2.2 KiB
Plaintext
PortSystem 1.0
|
|
PortGroup conflicts_build 1.0
|
|
|
|
name fwknop-client
|
|
version 2.6.10
|
|
revision 2
|
|
conflicts fwknop
|
|
categories net security
|
|
license GPL-2+
|
|
maintainers {blair @blair} openmaintainer
|
|
description 'FireWall KNock OPerator': a port knocker to Linux servers
|
|
homepage http://www.cipherdyne.org/fwknop/
|
|
platforms darwin
|
|
|
|
long_description \
|
|
fwknop stands for the 'FireWall KNock OPerator', and implements an \
|
|
authorization scheme called Single Packet Authorization (SPA) that \
|
|
is based around Netfilter and libpcap. SPA requires only a single \
|
|
encrypted packet in order to communicate various pieces of \
|
|
information including desired access through a Netfilter policy \
|
|
and/or complete commands to execute on the target system. By \
|
|
using Netfilter to maintain a 'default drop' stance, the main \
|
|
application of this program is to protect services such as OpenSSH \
|
|
with an additional layer of security in order to make the \
|
|
exploitation of vulnerabilities (both 0-day and unpatched code) \
|
|
much more difficult. The authorization server passively monitors \
|
|
authorization packets via libcap and hence there is no 'server' to \
|
|
which to connect in the traditional sense. Access to a protected \
|
|
service is only granted after a valid encrypted and non-replayed \
|
|
packet is monitored. This port installs the client side script \
|
|
that you run to gain access to a Linux box.
|
|
|
|
master_sites ${homepage}download
|
|
|
|
distname fwknop-${version}
|
|
use_bzip2 yes
|
|
checksums md5 47a9c7c214c40dceb5dc2aa8832e4f32 \
|
|
rmd160 6537a0e10f0a7c4b9e9f34483fc06f22d46b3891 \
|
|
sha256 f6c09bec97ed8e474a98ae14f9f53e1bcdda33393f20667b6af3fb6bb894ca77 \
|
|
size 1787914
|
|
|
|
depends_lib-append path:bin/gpg:gnupg2 \
|
|
port:gpgme \
|
|
port:wget
|
|
|
|
conflicts_build ${name}
|
|
|
|
patchfiles-append patch-configure.ac.diff
|
|
|
|
use_autoreconf yes
|
|
|
|
configure.args-append --disable-server
|
|
|
|
test.run yes
|
|
test.target check
|
|
|
|
livecheck.type regex
|
|
livecheck.url [lindex ${master_sites} 0]
|
|
livecheck.regex fwknop-(\[\\d.\]+)${extract.suffix}
|