Searches without login should now work. You must get asked to click a button.
Port details
nginx-module-encrypted-sessionSources of the encrypted_session module for the NGINX ports
0.11wwwΣ=0 Package not present on quarterly.This port was created during this quarter. It will be in the next quarterly branch but not the current one.
The encrypted_session module encrypts and decrypts nginx variables with
AES-256 in MAC mode, with an expiry stamp inside the ciphertext. It is
meant for values that travel through the client, such as cookies, which the
server must be able to read back but the client must not forge.
This port only installs the module sources. The module itself is built by
the nginx ports when their ENCRYPTSESSION option is enabled.
www/nginx-module-encrypted-session: Update to 0.11
A session token is now versioned and carries a random IV and an
HMAC-SHA256 tag instead of a public MD5 prefix and a fixed CBC IV, and
header and ciphertext are authenticated before the token is decrypted.
The tag is compared with CRYPTO_memcmp, which closes a timing oracle over
an attacker controlled plaintext prefix. Tokens written by earlier
versions no longer decrypt.
Changelog:
https://github.com/openresty/encrypted-session-nginx-module/compare/v0.10...v0.11
Sponsored by: Netzkommune GmbH
www/nginx-module-encrypted-session: Update to 0.10
The MAC of a session was compared with ngx_strncmp, which stops at the
first byte that differs and so tells an attacker how much of a forged MAC
was right. The comparison is CRYPTO_memcmp now. The expiry timestamp was
read through a uint64_t cast of an unaligned pointer, which faults on
architectures that require alignment; it is copied before it is read.
Changelog:
https://github.com/openresty/encrypted-session-nginx-module/compare/7ffe4ec...v0.10
Sponsored by: Netzkommune GmbH
www/nginx-module-encrypted-session: Add New Port
Sources of the encrypted_session module for the NGINX ports. The module
encrypts and decrypts a variable with AES, which is what the session
variables of ngx_lua are built on.
Sponsored by: Netzkommune GmbH
