20:30 Rene Ladan (rene) 

security/ktls_isa-l_crypto-kmod: Remove expired port, only for FreeBSD 13

    2baccbb

16:53 Rene Ladan (rene) 

security/openssl111: Remove expired port

2026-04-30 security/openssl111: End-of-life since 2023-09-11, see
https://www.openssl.org/blog/blog/2023/09/11/eol-111/  port will be removed when
FreeBSD 13 is EoL

    e6564f6

09:28 Jochen Neumeister (joneum) 

security/py-biscuit-auth: Add new Port

Python bindings for biscuit-auth, a decentralized authorization token
system.

Sponsored by:	Netzkommune GmbH

    e4490ac

16:54 Jesús Daniel Colmenares Oviedo (dtxdf) 

security/rbw: New port: Unofficial bitwarden cli

rbw is an unofficial command line client for Bitwarden. Although
Bitwarden does come with its own command line client, it is limited
by being stateless - to use it, you're required to manually lock
and unlock the client, and pass the temporary keys around in
environment variables, which makes it very difficult to use. rbw
avoids this problem by maintaining a background process which is
able to hold the keys in memory, similar to the way that ssh-agent
or gpg-agent work. This allows the client to be used in a much
simpler way, with the background agent taking care of maintaining
the necessary state.

WWW: https://github.com/doy/rbw/

    4db0587

21:53 Jesús Daniel Colmenares Oviedo (dtxdf) 

security/py-himitsu-keyring: New port: GTK4-based prompter implementation for
Himitsu

Keyring is a graphical frontend for managing a Himitsu key store.

WWW: https://himitsustore.org

    3a1bf43

21:53 Jesús Daniel Colmenares Oviedo (dtxdf) 

security/hiprompt-gtk: New port: GTK4-based prompter implementation for Himitsu

hiprompt-gtk is a GTK4-based prompter implementation for Himitsu.

WWW: https://himitsustore.org

    01b9663

06:56 Yuri Victorovich (yuri) 

security/py-shodan: Revert "security/py-shodan: New port: Python library and
command-line utility for Shodan"

This reverts commit 98f2446834b21a4f645c889016ac5f08fe68f899.

Reported by:	Antoine Brodin <antoine@freebsd.org>

    2abf6b3

05:22 Yuri Victorovich (yuri) 

security/py-iam-expand: New port: Python package to expand and deobfuscate IAM
policies

    145735c

05:20 Yuri Victorovich (yuri) 

security/py-iamdata: New port: IAM data for AWS actions, resources, and
conditions

    58ac811

04:32 Yuri Victorovich (yuri) 

security/py-policyuniverse: New port: Parse and Process AWS IAM Policies,
Statements, ARNs, and wildcards

    6d9f95f

04:29 Yuri Victorovich (yuri) 

security/py-shodan: New port: Python library and command-line utility for Shodan

    98f2446

19:08 Rene Ladan (rene) 

security/openssl33: Remove expired port

2026-03-31 security/openssl33: Please use security/openssl35 (LTS)

    4a8f5ab

19:07 Rene Ladan (rene) 

security/openssl33-quictls: Remove expired port

security/openssl33-quictls: Upstream project has been archived, use
security/quictls

    049c73e5

16:14 Rene Ladan (rene) 

security/snortsam: Remove expired port

2026-03-31 security/snortsam: dead upstream, broken on FreeBSD 15

    95c1a47

21:04 Torsten Zuehlsdorff (tz) 

security/cdxgen: New port

  cdxgen generates CycloneDX SBOMs for multiple programming
  languages and ecosystems.

  It supports scanning source code, containers, and binaries
  to produce Software Bill of Materials outputs.

  Project page:
  https://github.com/CycloneDX/cdxgen

Sponsored by:	OTTRIA

    e1e9bd0

15:29 Max Brazhnikov (makc) 

security/keepsecret: Add new port

KeepSecret is a Password manager for a Secret Service compatible provider.

WWW: https://invent.kde.org/utilities/keepsecret/

    14bfd9c

21:51 Torsten Zuehlsdorff (tz) 

security/syft: New port

  Syft is a CLI tool and library for generating a Software Bill of Materials
  (SBOM) from container images and filesystems.

  It supports multiple SBOM formats including CycloneDX and SPDX and can scan
  containers, directories, and archives to identify installed packages.

  Syft is developed by Anchore and is commonly used in software supply-chain
  security workflows.

Sponsored by:	OTTRIA

    498cc5a

15:48 Yuri Victorovich (yuri) 

security/py-blake3: New port: Python bindings for the BLAKE3 cryptographic hash
function

    8a3afc3

15:18 Yuri Victorovich (yuri) 

security/susshi: New port: Terminal-based SSH connection manager

    c6e2142

21:30 Bernard Spil (brnrd) 

security/openssl-pkcs11provider: Add new port

    c8809a8

14:15 Po-Chuan Hsieh (sunpoet) 

*/Makefile: Sort SUBDIRs

    44a7856

11:56 Bernard Spil (brnrd) 

security/openssl40: Add new OpenSSL ECH capable port

* This is ALPHA level software, for testing only
* Adds Encrypted Client Hello feature
* Removes SSLv3

    cd349d8

04:30 Xin LI (delphij) 

security/rubygem-doorkeeper-i18n{,-rails72}: Add new port.

Internationalization files for Doorkeeper OAuth2 provider

While I'm there, also add a variant of rubygem-doorkeeper for use
with rails72.

    ac174ab

16:36 Vladimir Druzenko (vvd)  Author: Paavo-Einari Kaipila

security/mbedtls4: New port 4.0.0

Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-4.0.0

PR:	293527

    0f99c33

21:56 Vladimir Druzenko (vvd) 

security/clamtk: Resurect port: Revert "security/clamtk: Remove expired port"

This reverts commit 8ee1e427d19133777036384a3b1415f470304227.

    06330a9

14:21 Rene Ladan (rene) 

security/owasp-dependency-check: Remove expired port

2026-02-28 security/owasp-dependency-check: This port is 9 major versions and
almost 8 years behind on upstream. No maintainer. No users in the ports tree.
Does not compile with jdk11+.

    3c3d0f3

05:08 Jesús Daniel Colmenares Oviedo (dtxdf) 

security/py-unicode-show: New port: Detect and annotate suspicious Unicode
characters in text or files

unicode-show is a utility that reads text input (from standard input
or files) and highlights suspicious Unicode characters, such as
those outside the safe ASCII range. This tool is useful for identifying
potentially malicious or misleading Unicode characters in source
code, logs, or user input.

WWW: https://www.kicksecure.com/wiki/Unicode-show

    47aaf92

16:13 Vladimir Druzenko (vvd)  Author: Herbert J. Skuhra

security/gnupg25: Connect to build

PR:		291995
Approved by:	portmgr (blanket - fix port)
Fixes:		d58f02417501 (new port 2.5.17, latest upstream)

    77dd550

13:14 Emanuel Haupt (ehaupt) 

security/Makefile: Connect security/py-shamir-mnemonic, security/py-slip10

    962b811

14:30 Rene Ladan (rene) 

security/openssl-quictls: Remove expired port

2025-12-31 security/openssl-quictls: Upstream project has been archived, use
security/quictls

    76f3516

21:38 Jesús Daniel Colmenares Oviedo (dtxdf) 

security/py-serpico: New port: Security scanner for FreeBSD packages and
releases

serpico is a security scanner for FreeBSD packages and releases
that compares the versions against a list of versions marked as
vulnerable, then displays vulnerability information in a JSON-compact
format for easy analysis by other security tools.

WWW: https://github.com/DtxdF/serpico

    9733a5b

23:51 Robert Clausecker (fuz)  Author: para

security/himitsu: create new port

Himitsu is a secure secret storage system for Unix-like systems. It provides an
arbitrary key/value store (where values may be secret) and a query language for
manipulating the key store.

WWW: https://himitsustore.org

PR:		292475

    8a7d9cd

07:38 Eugene Grosbein (eugen) 

security/p5-Digest-SipHash: new port

Perl XS interface to the SipHash algorithm.

This module does only one thing - calculates the SipHash value
of the given string.

    fd4bc7e

11:16 Baptiste Daroussin (bapt) 

security/pam_worker: new port

PAM-modules is a collection of useful PAM modules and command line
utilities for checking PAM authentication and other management groups.

    228c7fb

08:47 Michael Osipov (michaelo)  Author: Siva Mahadevan

[NEW PORT] security/py-k5test: Library for setting up self-contained Kerberos 5
environments

Co-authored-by:	Michael Osipov <michaelo@FreeBSD.org>
PR:		278820

    d1bd9b06

05:40 Charlie Li (vishwin) 

security/voa: add

    7c7aae9

14:48 Muhammad Moinur Rahman (bofh) 

*/*php81*: Sunset

    95b3559

12:13 Rene Ladan (rene) 

security/nextcloud-passman: Remove expired port

2025-12-31 security/nextcloud-passman: Upstream unmaintained

    6067166

12:03 Rene Ladan (rene) 

security/rkhunter: Remove expired port

2025-12-31 security/rkhunter: Project abandoned in 2009

    2e041d71

11:54 Rene Ladan (rene) 

security/krb5-120: Remove expired port

2025-12-31 security/krb5-120: Now that MIT KRB5 1.22 is GA 1.20 is EOL

    cd548f9

11:38 Rene Ladan (rene) 

security/tls-check: Remove expired port

2025-12-31 security/tls-check: Obsolete tool and relies on deprecated libraries

    0732518

10:36 Rene Ladan (rene) 

security/clamtk: Remove expired port

2025-12-30 security/clamtk: Maintainer has retired

    8ee1e42

02:52 Li-Wen Hsu (lwhsu)  Author: Hiroo Ono

Add security/keepass-diff: CLI-tool to diff two Keepass (.kdbx) files

PR:		291900

    9e54167

11:10 Po-Chuan Hsieh (sunpoet) 

security/rubygem-openssl3: Add rubygem-openssl3 3.3.2 (copied from
rubygem-openssl)

- Add PORTSCOUT

    a3ccd66

18:46 Fernando Apesteguía (fernape) 

java/autofirma: [new port]. Digital signature application

Autofirma is a java application used to sign digital documents.
It is the official application of the Spanish Government and as such it is
required to perform many online tasks with the Administration.

Reviewed by:		michaelo@
Differential Revision:	https://reviews.freebsd.org/D53807

    548c97a

19:10 Dave Cottlehuber (dch)  Author: Sébastien Santoro

security/vault-medusa: New Port: Medusa: export secrets from Vault or OpenBao

PR:		281865

    5c5745b

14:58 Gleb Popov (arrowd) 

security/radamsa: Ressurect the port and update to 0.7

    c4c689f

00:24 Jesús Daniel Colmenares Oviedo (dtxdf) 

security/opkssh: New port: Tool which enables SSH to be used with OpenID Connect

opkssh is a tool which enables ssh to be used with OpenID Connect
allowing SSH access to be managed via identities like alice@example.com
instead of long-lived SSH keys. It does not replace SSH, but instead
generates SSH public keys containing PK Tokens and configures sshd
to verify them. These PK Tokens contain standard OpenID Connect ID
Tokens. This protocol builds on the OpenPubkey which adds user
public keys to OpenID Connect without breaking compatibility with
existing OpenID Provider.

    db1d18b

16:39 Matthias Fechner (mfechner) 

security/gitlab-analyzers-secrets: added gitlab secret detection scanner

    61889173

20:42 Po-Chuan Hsieh (sunpoet) 

security/py-pyopenssl: Move security/py-openssl to security/py-pyopenssl

- Update WWW
- Convert to USE_PYTHON=pep517
- Clean up Makefile
- Bump PORTREVISION for package change
- Bump PORTREVISION of dependent ports for dependency change

    aafe9a2

11:11 Rene Ladan (rene) 

security/rhonabwy: Remove expired port

2025-10-31 security/rhonabwy: Upstream repository has been archived on Nov 11,
2024

    a99ac36

03:17 Hiroki Tagato (tagattie)  Author: Tomohiro Hosaka

security/p5-Crypt-URandom-Token: New port: Generate secure strings for
passwords, secrets and similar

This module provides a secure way to generate a random token
for passwords and similar using Crypt::URandom
as the source of random bits.

WWW: https://metacpan.org/dist/Crypt-URandom-Token

PR:		290569
Reported by:	Tomohiro Hosaka <bokutin@bokut.in> (new maintainer)

    ea8f2a1

07:17 Matthias Fechner (mfechner) 

www/gitlab: fix regression from 5028178941fc081cd43354ea03ceda365a12f73d

this fixes a depedency conflict with rubygem-logger which was added into
package security/rubygem-omniauth which conflicts with rubygem-logger-gitlab

    5c25978

07:36 Hiroki Tagato (tagattie) 

security/py-google-cloud-kms: Add port: Python client for Google Cloud Key
Management Service

Google Cloud Key Management Service: a cloud-hosted key management
service that lets you manage cryptographic keys for your cloud
services the same way you do on-premises. You can generate, use,
rotate, and destroy AES256, RSA 2048, RSA 3072, RSA 4096, EC P256, and
EC P384 cryptographic keys. Cloud KMS is integrated with Cloud IAM and
Cloud Audit Logging so that you can manage permissions on individual
keys and monitor how these are used. Use Cloud KMS to protect secrets
and other sensitive data that you need to store in Google Cloud
Platform.

WWW: https://pypi.org/project/google-cloud-kms/

    5fc04210

18:59 Rene Ladan (rene) 

security/iddawc: Remove expired port

2025-10-13 security/iddawc: Upstream repo archived on Nov 11, 2024

    353c809

08:19 Yuri Victorovich (yuri) 

security/py-cart: New port: CaRT Neutering format

    bc5a904

08:25 Yuri Victorovich (yuri) 

security/py-guardpost: New port: Framework to handle authentication and
authorization

    e30addd

09:27 Yuri Victorovich (yuri) 

security/py-certipy: New port: Utility to create and sign CAs and certificates

    afc80b1

12:03 Matthias Andree (mandree) 

security/openssl32: Remove expired port

2025-09-30 security/openssl32: Please use security/openssl35 (LTS)

There are no users of this port any more.

    b520c46

12:01 Matthias Andree (mandree) 

security/openssl32: Revert "Remove expired port"

This reverts commit 38010f8c963447fe75bb7965f62e61e8f0e37c87.

I am removing the patch because it contains unapproved changes to Mk/
while the approval for the following is pending:
PR:		289938

    f261c43

11:54 Matthias Andree (mandree) 

security/botan2: Remove expired port

2025-03-31 security/botan2: End of life 2024-12-31 upstream, consider migrating
to security/botan3

With keepass286 moved to botan3 and softhsm2 using OpenSSL by default,
we can strip softhsm2's botan2 non-default option and remove botan2 from
the tree.

    d697305

09:58 Matthias Andree (mandree) 

security/openssl32: Remove expired port

2025-09-30 security/openssl32: Please use security/openssl35 (LTS)

At the same time, update Mk/ infrastructure to remove traces of
openssl31 (forgotten at the time when we removed it) and openssl32,
and fill in openssl34 openssl35 openssl36 instead.

    38010f8

09:11 Robert Clausecker (fuz) 

security/p5-openxpki-clca: hook into the build

I keep forgetting to do that with 3rd party patches.

Reported by:	antoine
Event:		EuroBSDcon 2025

    bc7a576

07:57 Bernhard Froehlich (decke)  Author: Yusuf Yaman

security/py-python-nmap: Add new port

PR:		289288
Event:		EuroBSDCon 2025

    bb7385d

10:32 Danilo Egea Gondolfo (danilo) 

security/interactsh: New port, interactsh 1.2.4

Interactsh is a tool designed to detect vulnerabilities that cause external
interactions.

https://github.com/projectdiscovery/interactsh

    e394840

23:03 Po-Chuan Hsieh (sunpoet) 

security/py-signxml: Add py-signxml 4.2.0

SignXML is an implementation of the W3C XML Signature standard in Python. This
standard (also known as "XMLDSig") is used to provide payload security in SAML
2.0, XAdES, EBICS, and WS-Security, among other uses. The standard is defined in
the W3C Recommendation XML Signature Syntax and Processing Version 1.1. SignXML
implements all of the required components of the Version 1.1 standard, and most
recommended ones. Its features are:
- Use of a libxml2-based XML parser configured to defend against common XML
  attacks when verifying signatures
- Extensions to allow signing with and verifying X.509 certificate chains,
  including hostname/CN validation
- Extensions to sign and verify XAdES signatures
- Support for exclusive XML canonicalization with inclusive prefixes
  (InclusiveNamespaces PrefixList, required to verify signatures generated by
  some SAML implementations)
- Modern Python compatibility (3.9-3.13+ and PyPy)
- Well-supported, portable, reliable dependencies: lxml and cryptography
- Comprehensive testing (including the XMLDSig interoperability suite) and
  continuous integration
- Simple interface with useful, ergonomic, and secure defaults (no network
  calls, XSLT or XPath transforms)
- Compactness, readability, and extensibility

    8dd2e56

17:14 Rene Ladan (rene) 

Revert: "security/yubioath-desktop: Remove expired port"

This reverts commit c33d916020276f1442482674cb93575201975256.

security/py-yubikey-manager no longer depends on security/libu2f-host
since commit 0708111995957ebffe65a018c997be9b7d3d681c

    95a0392

17:14 Rene Ladan (rene) 

Revert: "security/yubikey-manager-qt: Remove expired port"

This reverts commit 5aaae75d74b38beb1391200f9b29d00904b240df.

security/py-yubikey-manager no longer depends on security/libu2f-host
since commit 0708111995957ebffe65a018c997be9b7d3d681c

Reported by:	Jan Henrik Sylvester <me@janh.de>

    34df2ab

19:28 Bernard Spil (brnrd) 

security/openssl36: Add new OpenSSL 3.6 ALPHA

* Not for production use

    7f24a4a

20:05 Rene Ladan (rene) 

security/libu2f-host: Remove expired port

2025-05-31 security/libu2f-host: This project is deprecated and is no longer
being maintained. libfido2 is a new project with support for U2F and FIDO2. Use
security/libfido2 instead

    bfd293b

20:04 Rene Ladan (rene) 

security/p5-Data-Entropy: Remove expired port

2025-05-31 security/p5-Data-Entropy: The maintainer of this distribution has
indicated that it is deprecated and no longer suitable for use

    64d859a

20:02 Rene Ladan (rene) 

security/p5-Dancer2-Plugin-Passphrase: Remove expired port

2025-09-01 security/p5-Dancer2-Plugin-Passphrase: Depends on expired
security/p5-Data-Entropy

    7e9af6c

20:00 Rene Ladan (rene) 

security/p5-Dancer-Plugin-Passphrase: Remove expired port

2025-09-01 security/p5-Dancer-Plugin-Passphrase: Depends on expired
security/p5-Data-Entropy

    6cc33a2

19:42 Rene Ladan (rene) 

security/yubioath-desktop: Remove expired port

2025-09-01 security/yubioath-desktop: Depends on expired security/libu2f-host
via security/py-yubikey-manager

    c33d916

19:39 Rene Ladan (rene) 

security/yubikey-manager-qt: Remove expired port

2025-09-01 security/yubikey-manager-qt: Depends on expired security/libu2f-host
via security/py-yubikey-manager

    5aaae75

19:38 Rene Ladan (rene) 

security/py-onlykey: Remove expired port

2025-09-01 security/py-onlykey: Depends on expired security/libu2f-host

    9d82fb6

19:38 Rene Ladan (rene) 

security/p5-Dancer-Plugin-Auth-Extensible-Provider-Usergroup: Remove expired
port

2025-09-01 security/p5-Dancer-Plugin-Auth-Extensible-Provider-Usergroup: Depends
on expired security/p5-Data-Entropy via security/p5-Dancer-Plugin-Passphrase

    77eed15

19:36 Rene Ladan (rene) 

security/p5-Dancer2-Plugin-Auth-Extensible-Provider-Usergroup: Remove expired
port

2025-09-01 security/p5-Dancer2-Plugin-Auth-Extensible-Provider-Usergroup:
Depends on expired security/p5-Data-Entropy via
security/p5-Dancer2-Plugin-Passphrase

    a71b1a6

19:13 Vladimir Druzenko (vvd)  Author: Thibault Payet

security/py-nitrokey: New port: Python SDK for Nitrokey devices

The Nitrokey Python SDK can be used to use and configure Nitrokey devices.

The SDK supports these devices and features:
 * Nitrokey 3
   - device and bootloader management (nitrokey.nk3)
   - admin app (nitrokey.trussed.admin_app)
   - provisioner app (nitrokey.trussed.provisioner_app)
   - secrets app (nitrokey.nk3.secrets_app)
 * Nitrokey Passkey
   - device and bootloader management (nitrokey.nkpk)
   - admin app (nitrokey.trussed.admin_app)
   - provisioner app (nitrokey.trussed.provisioner_app)

https://github.com/Nitrokey/nitrokey-sdk-py/
https://pypi.org/project/nitrokey/

PR:	288823

    65de4bf

07:32 Cy Schubert (cy) 

security/krb5-122: Add new port

MIT KRB5 1.22 was just released. Import it into ports. It now becomes
the default KRB5.

    a7490b1

12:05 Rene Ladan (rene) 

security/openssl31: Remove expired port

2025-03-14 security/openssl31

    ae35d18

12:02 Rene Ladan (rene) 

security/openssl31-quictls: Remove expired port

2025-03-14 security/openssl31-quictls: End-of-Life, please switch to
security/quictls or OpenSSL 3.5

    7bc0e01

15:51 Daniel Engberg (diizzy) 

security/openiked-portable: Sunset port

Moved to security/openiked

PR:		287724

    9678923

03:12 Santhosh Raju (fox) 

security/pdfrip: New port: Multi-threaded PDF password cracking utility in Rust

A multi-threaded PDF password cracking utility equipped with
commonly encountered password format builders and dictionary
attacks.

WWW: https://github.com/mufeedvh/pdfrip

    9f33965

20:33 Cy Schubert (cy) 

security/keepassxc276: Repocopy from security/keepassxc

Keepassxc > 2.7.6 removed support for Yubikey and other dongles.
Repocopy security/keepassxc to keepassxc276 in order to facilitate
updating keepassxc while allowing users to continue to use keepassxc 2.7.6
with Yubikey, using the opportunity to look for alternatives.

Suggested by:	madpilot
PR:		279879
Approved by:	lwhsu (MAINTAINER)

    56c07fb

14:53 Muhammad Moinur Rahman (bofh)  Author: Tuukka Pasanen

security/py-distro2sbom: New port

The DISTRO2SBOM generates a SBOM (Software Bill of Materials) for either an
installed application or a complete system installation in a number of
formats including SPDX and CycloneDX.

WWW: https://github.com/anthonyharrison/distro2sbom
PR:		286645
Sponsored by:	The FreeBSD Foundation

    7842c7b

14:53 Muhammad Moinur Rahman (bofh)  Author: Tuukka Pasanen

security/py-lib4sbom: New port

Lib4SBOM is a library to parse and generate Software Bill of Materials
(SBOMs).  It supports SBOMs created in both SPDX and CycloneDX formats.

WWW: https://github.com/anthonyharrison/lib4sbom
PR:		286644
Sponsored by:	The FreeBSD Foundation

    b5444da

06:38 Jimmy Olgeni (olgeni) 

security/pwdsafety: New port

Command-line tool that checks password strength through entropy calculation
and provides safety scoring without storing any password information.

    52e263c

09:58 Jimmy Olgeni (olgeni) 

security/ssl-checker: Add new port

ssl-checker is a fast and beautiful command-line tool designed to check SSL
certificates for HTTPS endpoints.

    67d7cfe

20:11 Bernard Spil (brnrd) 

security/openssl33-quictls: New port

Upstream archived their openssl repo and switched to
a quictls repo.

    2d1ee56

16:29 Muhammad Moinur Rahman (bofh) 

*/*php85*: Sunrise

Please DO NOT use this version in production, it is an early test
version.

For upgrade notes please visit:
https://github.com/php/php-src/blob/php-8.5.0alpha1/UPGRADING

Changelog: https://github.com/php/php-src/blob/php-8.5.0alpha1/NEWS

    c0b9892

11:21 Rene Ladan (rene) 

security/libsectok: Remove expired port

2025-06-30 security/libsectok: Last upstream release in 2003 and no longer
maintained

    b00a410

11:21 Rene Ladan (rene) 

security/sectok: Remove expired port

2025-06-30 security/sectok: Last upstream release in 2003 and no longer
maintained

    de1ffc2

11:03 Rene Ladan (rene) 

security/libcryptui: Remove expired port

2025-06-30 security/libcryptui: abandoned project

    d1ad7be

11:45 Po-Chuan Hsieh (sunpoet) 

security/py-pyhanko-cli: Add py-pyhanko-cli 0.1.2

The lack of open-source CLI tooling to handle digitally signing and stamping PDF
files was bothering me, so I went ahead and rolled my own.

    d88d4f5

16:59 Lexi Winter (ivy) 

net-mgmt, security: add missing SUBDIRs

net-mgmt/prometheus-bird-exporter and security/lfacme were missing
SUBDIR entries in their categories.

Reported by: Antoine Brodin <antoine@freebsd.org>
Reviewed by:	arrowd, kevans
Approved by:	arrowd (ports), kevans (mentor)
Differential Revision:	https://reviews.freebsd.org/D50976

    8da1245

13:09 Jason E. Hale (jhale) 

security/gpgme: Update to 2.0.0

Upstream has split most of the bindings out into separate projects with
this release, so the child ports that were previously providing various
bindings are now autonomous and have new origins. The python bindings
should have been called py-gpg for many years now, since 'gpg' is the
actual module name, so this also corrects that issue.

security/gpgme-cpp -> security/gpgmepp
security/gpgme-qt -> security/qgpgme
security/py-gpgme -> security/py-gpg

gpgmepp and qgpgme have been converted to CMake. py-gpg is now a "fun"
autotools and FreeBSD ports system hybrid. Gpgme, itself, still uses
autotools, but with much less parenting (patching) to do for its
emancipated children.

Adjust several ports to fix API incompatibility with upstream patches
and with some of my own. Adjust all consumers to use the new port
origins of the former child ports.

https://dev.gnupg.org/T7673

    217815b

19:33 Chris Rees (crees) 

security/certmonger: New port

Certmonger is primarily concerned with getting you or your system
enrolled with a certificate authority (CA) and keeping you enrolled.

To do this, the certmonger daemon runs in the background, taking guidance from
client tools (via a D-Bus API, a command-line tool is provided which uses it).

The daemon:

    can generate key pairs if you don't already have one
    can use a key pair to generate a certificate signing request
    can submit the signing request to a CA
    can wait for the CA to decide whether or not to issue the certificate
    can store an issued certificate in a specified location
    can monitor the certificate to see if it's about to expire
    can warn you or simply log that a certificate is about to expire
    can attempt to get a new certificate when a certificate is about to expire

The goal is to have certmonger do what you need it to do based on what you've
told it you need.  If you already have a certificate, it will be happy to just
check on it periodically and warn you when it's about to expire. If you tell it
where the private key is, and where the CA is, it can go ahead and try to
re-enroll if you like.

Keys and certificates can be stored and read in any of these formats:

    PEM-formatted files
    NSS database (dbm or sql)

    9dedd05

12:40 Philippe Audeoud (jadawin) 

security/py-nvdlib: Add new port

A simple NIST NVD API wrapper library

Sponsored by:	OVHCloud

    dd25524

15:24 Charlie Li (vishwin) 

security/sequoia-chameleon-gnupg: hook to build

Reported by: antoine

    68f345f