Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 18 Mar 2018 09:02:42 +0000 (UTC)
From:      Tobias Kortkamp <tobik@FreeBSD.org>
To:        ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org
Subject:   svn commit: r464885 - in head/security/testssl.sh: . files
Message-ID:  <201803180902.w2I92gSZ035280@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: tobik
Date: Sun Mar 18 09:02:41 2018
New Revision: 464885
URL: https://svnweb.freebsd.org/changeset/ports/464885

Log:
  security/testssl.sh: Fix certificate expiration check
  
  Upstream commit af6ca18933ffc5bb02d2ced46342b8d7a6275acd dropped the
  TZ offset from the certificate enddate but the FreeBSD date format was
  not updated accordingly.  Remove the unnecessary %z from the format
  string.
  
  - While here add NO_ARCH
  
  PR:		226676
  Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl>

Modified:
  head/security/testssl.sh/Makefile
  head/security/testssl.sh/files/patch-testssl.sh

Modified: head/security/testssl.sh/Makefile
==============================================================================
--- head/security/testssl.sh/Makefile	Sun Mar 18 08:33:22 2018	(r464884)
+++ head/security/testssl.sh/Makefile	Sun Mar 18 09:02:41 2018	(r464885)
@@ -3,6 +3,7 @@
 PORTNAME=	testssl.sh
 DISTVERSIONPREFIX=	v
 DISTVERSION=	2.9.5-2
+PORTREVISION=	1
 CATEGORIES=	security
 
 MAINTAINER=	tobik@FreeBSD.org
@@ -18,6 +19,7 @@ USES=		shebangfix
 USE_GITHUB=	yes
 GH_ACCOUNT=	drwetter
 
+NO_ARCH=	yes
 NO_BUILD=	yes
 
 SHEBANG_FILES=	testssl.sh utils/*

Modified: head/security/testssl.sh/files/patch-testssl.sh
==============================================================================
--- head/security/testssl.sh/files/patch-testssl.sh	Sun Mar 18 08:33:22 2018	(r464884)
+++ head/security/testssl.sh/files/patch-testssl.sh	Sun Mar 18 09:02:41 2018	(r464885)
@@ -1,6 +1,6 @@
---- testssl.sh.orig	2017-11-05 21:50:58 UTC
+--- testssl.sh.orig	2018-03-17 15:02:25 UTC
 +++ testssl.sh
-@@ -164,6 +164,9 @@ TERM_CURRPOS=0                          
+@@ -175,6 +175,9 @@ TERM_CURRPOS=0                          
  ## CONFIGURATION PART ##
  # following variables make use of $ENV, e.g. OPENSSL=<myprivate_path_to_openssl> ./testssl.sh <host>
  # 0 means (normally) true here. Some of the variables are also accessible with a command line switch, see --help
@@ -10,3 +10,12 @@
  declare -x OPENSSL OPENSSL_TIMEOUT
  FAST_SOCKET=${FAST_SOCKET:-false}       # EXPERIMENTAL feature to accelerate sockets -- DO NOT USE it for production
  COLOR=${COLOR:-2}                       # 2: Full color, 1: b/w+positioning, 0: no ESC at all
+@@ -6221,7 +6224,7 @@ certificate_info() {
+           # best we are able to do under OpenBSD
+           days2expire=""
+      else
+-          days2expire=$(( $(parse_date "$enddate" "+%s" "%F %H:%M %z") - $(LC_ALL=C date "+%s") ))    # in seconds
++          days2expire=$(( $(parse_date "$enddate" "+%s" "%F %H:%M") - $(LC_ALL=C date "+%s") ))    # in seconds
+           days2expire=$((days2expire  / 3600 / 24 ))
+ 
+           if grep -q "^Let's Encrypt Authority" <<< "$issuer_CN"; then          # we take the half of the thresholds for LE certificates



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201803180902.w2I92gSZ035280>