LibHTP is a security-aware parser for the HTTP protocol and the related bits
and pieces. The goals of the project, in the order of importance, are as
follows:
1. Completeness of coverage; LibHTP must be able to parse virtually all
traffic that is found in practice.
2. Permissive parsing; LibHTP must never fail to parse a stream that would
be parsed by some other web server.
3. Awareness of evasion techniques; LibHTP must be able to detect and
effectively deal with various evasion techniques, producing, where
practical, identical or practically identical results as the web
server processing the same traffic stream.
4. Performance; The performance must be adequate for the desired tasks.
Completeness and security are often detremental to performance. Our
idea of handling the conflicting requirements is to put the library
user in control, allowing him to choose the most desired library
characteristic.
devel/libtextstyle, devel/gettext*: Update to 0.26
Recent versions of gettext no longer install m4 files in
PREFIX/share/aclocal. They have to be installed in the work
directory by autopoint for aclocal to find them.
Patch devel/autoconf so autoreconf runs autopoint when gettext related
macros are used in configure.ac (e.g. AM_ICONV). Previously it only
ran autopoint when AM_GNU_GETTEXT_(REQUIRE_)VERSION was used.
The following ports now require autopoint (i.e. USES=gettext-tools):
benchmarks/sysbench, devel/libhtp, editors/fxite, filesystems/rar2fs,
graphics/gd, net/ucarp, news/fidogate, sysutils/cdrdao
Other fixes:
(Only the first 15 lines of the commit message are shown above )
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
Use USES=pathfix where applicable.
PR: 213195
Submitted by: mat
Exp-run by: antoine
Sponsored by: Absolight
Differential Revision: https://reviews.freebsd.org/D8093
devel/libhtp: tweak recent iconv:translit change to fix on some compilers
When USES=iconv is changed to USES=iconv:translit, it can add libiconv
dependency from ports along with the addition of -liconv to LDFLAGS.
Most compilers (with FreeBSD's base compilers being notable exceptions)
will not look in /usr/local/lib by default, so this adds a -L argument
to LDFLAGS to help the linker find libiconv.so and unbreak the port on
affected platforms.
devel/libhtp, security/suricata: Use iconv:translit
Use translit for USES=iconv, fixing a build error on specific (10-STABLE r???)
versions of FreeBSD that dont contain a libiconv implementation with certain
features [1] in base.
PR: 196720 [1]
Reported by: <trond.endrestol ximalas info>
devel/libhtp: Update to 0.5.15, correctly link to libiconv
- Update to 0.5.15
- Wrangle autoconf/make on linking libiconv with a workaround [1]
- pkg-descr: Remove Author:
[1] https://github.com/ironbee/libhtp/issues/76
www/libhtp-suricata: Copy from devel/libhtp, Update (downgrade) to 0.2.14
Prepare to switch security/suricata to the version of libhtp recommended
by upstream. This also frees devel/libhtp up for an update, which can be
used for the Suricata 2.x branch and onward.
www/libhtp-suricata:
- Update (downgrade) to 0.2.14
- Use the correct and supported libhtp repo from Suricata
- Enable STAGE support
- Update pkg-plist
- Take maintainership
- Remove unnecessary patch (htp_util.c)
- qa: Add CONFLICTS
- qa: Use our AUTOTOOLS framework completely to prepare the build
- qa: Patch htp.pc.in file for proper pkg-config versioning
devel/libhtp:
- Take maintainership
- qa: Add CONFLICTS
Reviewed by: wxs, mva, Johannes Meixner
Approved by: wxs (maintainer)
Introduce ICONV_CONFIGURE_ARG variable defined at Uses/iconv.mk.
It's value is "--with-libiconv-prefix=/usr/local" for systems
before 100043 with ports libiconv and to use at systems post
100043 with base iconv it's value is "" (NULL).
Co-authors: bapt, madpilot and bsam (me)
- Make ports use the libc provided iconv implementation on 10-CURRENT
after r254273
- Fix a bunch of ports to properly work after this
- Mark converters/libiconv as IGNORE for systems with iconv in libc
Reviewed by: bapt
Approved by: portmgr (bapt)
Discussed with: bapt, bsam (who both contributed ideas and code)
Remove the header for ports I created.
For dns/openresolv give proper attribution. This was a copy/paste
mistake the submitter made, which incorrectly gave me attribution
for that file. I did not create it.
LibHTP is a security-aware parser for the HTTP protocol and the related bits
and pieces. The goals of the project, in the order of importance, are as
follows:
1. Completeness of coverage; LibHTP must be able to parse virtually all
traffic that is found in practice.
2. Permissive parsing; LibHTP must never fail to parse a stream that would
be parsed by some other web server.
3. Awareness of evasion techniques; LibHTP must be able to detect and
effectively deal with various evasion techniques, producing, where
practical, identical or practically identical results as the web
server processing the same traffic stream.
4. Performance; The performance must be adequate for the desired tasks.
Completeness and security are often detremental to performance. Our
idea of handling the conflicting requirements is to put the library
user in control, allowing him to choose the most desired library
characteristic.
Author: Ivan Ristic <ivanr@webkreator.com>
WWW: http://www.libhtp.org
