[meta-security][PATCH 1/5] python3-oauth2client: add recipe

[meta-security][PATCH 1/5] python3-oauth2client: add recipe

[akuster]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 recipes-python/python/python3-oauth2client_4.1.3.bb | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 recipes-python/python/python3-oauth2client_4.1.3.bb

diff --git a/recipes-python/python/python3-oauth2client_4.1.3.bb b/recipes-python/python/python3-oauth2client_4.1.3.bb
new file mode 100644
index 0000000..b84b4ca
--- /dev/null
+++ b/recipes-python/python/python3-oauth2client_4.1.3.bb
@@ -0,0 +1,9 @@
+SUMMARY = "Add version info to file paths."
+SECTION = "devel/python"
+LICENSE = "Apache-2.0"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=038e1390e94fe637991fa5569daa62bc"
+
+PYPI_PACKAGE = "oauth2client"
+SRC_URI[sha256sum] = "d486741e451287f69568a4d26d70d9acd73a2bbfa275746c535b4209891cccc6"
+
+inherit pypi setuptools3
-- 
2.17.1

[meta-security][PATCH 2/5] python3-qrcode: add recipe

[akuster]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 recipes-python/python/python3-qrcode_6.1.bb | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 recipes-python/python/python3-qrcode_6.1.bb

diff --git a/recipes-python/python/python3-qrcode_6.1.bb b/recipes-python/python/python3-qrcode_6.1.bb
new file mode 100644
index 0000000..bd50e6f
--- /dev/null
+++ b/recipes-python/python/python3-qrcode_6.1.bb
@@ -0,0 +1,9 @@
+SUMMARY = "QR Code image generator"
+SECTION = "devel/python"
+LICENSE = "MIT"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=4b802d2a65df4626623c79757f486af9"
+
+PYPI_PACKAGE = "qrcode"
+SRC_URI[sha256sum] = "505253854f607f2abf4d16092c61d4e9d511a3b4392e60bff957a68592b04369"
+
+inherit pypi setuptools3
-- 
2.17.1

[meta-security][PATCH 3/5] python3-rsa: add recipe

[akuster]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 recipes-python/python/python3-rsa_3.4.2.bb | 44 ++++++++++++++++++++++
 1 file changed, 44 insertions(+)
 create mode 100644 recipes-python/python/python3-rsa_3.4.2.bb

diff --git a/recipes-python/python/python3-rsa_3.4.2.bb b/recipes-python/python/python3-rsa_3.4.2.bb
new file mode 100644
index 0000000..759214f
--- /dev/null
+++ b/recipes-python/python/python3-rsa_3.4.2.bb
@@ -0,0 +1,44 @@
+SUMMARY = "Pure-Python RSA implementation"
+SECTION = "devel/python"
+AUTHOR = "Sybren A. Stuvel"
+LICENSE = "Apache-2.0"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=c403f6882d4f97a9cd927df987d55634"
+
+SRC_URI[sha256sum] = "25df4e10c263fb88b5ace923dd84bf9aa7f5019687b5e55382ffcdb8bede9db5"
+
+inherit pypi setuptools3 update-alternatives
+
+ALTERNATIVE_${PN} = "\
+    pyrsa-decrypt \
+    pyrsa-decrypt-bigfile \
+    pyrsa-encrypt \
+    pyrsa-encrypt-bigfile \
+    pyrsa-keygen \
+    pyrsa-priv2pub \
+    pyrsa-sign \
+    pyrsa-verify \
+"
+
+ALTERNATIVE_LINK_NAME[pyrsa-decrypt] = "${bindir}/pyrsa-decrypt"
+ALTERNATIVE_LINK_NAME[pyrsa-decrypt-bigfile] = "${bindir}/pyrsa-decrypt-bigfile"
+ALTERNATIVE_LINK_NAME[pyrsa-encrypt] = "${bindir}/pyrsa-encrypt"
+ALTERNATIVE_LINK_NAME[pyrsa-encrypt-bigfile] = "${bindir}/pyrsa-encrypt-bigfile"
+ALTERNATIVE_LINK_NAME[pyrsa-keygen] = "${bindir}/pyrsa-keygen"
+ALTERNATIVE_LINK_NAME[pyrsa-priv2pub] = "${bindir}/pyrsa-priv2pub"
+ALTERNATIVE_LINK_NAME[pyrsa-sign] = "${bindir}/pyrsa-sign"
+ALTERNATIVE_LINK_NAME[pyrsa-verify] = "${bindir}/pyrsa-verify"
+ALTERNATIVE_PRIORITY = "30"
+
+
+RDEPENDS_${PN} += "\
+    ${PYTHON_PN}-compression \
+    ${PYTHON_PN}-crypt \
+    ${PYTHON_PN}-doctest \
+    ${PYTHON_PN}-logging \
+    ${PYTHON_PN}-math \
+    ${PYTHON_PN}-multiprocessing \
+    ${PYTHON_PN}-netclient \
+    ${PYTHON_PN}-pickle \
+"
+
+RDEPENDS_${PN} += "${PYTHON_PN}-pyasn1"
-- 
2.17.1

[meta-security][PATCH 4/5] python3-ecdsa: add recipe

[akuster]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 recipes-python/python/python3-ecdsa_0.15.bb | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 recipes-python/python/python3-ecdsa_0.15.bb

diff --git a/recipes-python/python/python3-ecdsa_0.15.bb b/recipes-python/python/python3-ecdsa_0.15.bb
new file mode 100644
index 0000000..79df4ed
--- /dev/null
+++ b/recipes-python/python/python3-ecdsa_0.15.bb
@@ -0,0 +1,10 @@
+SUMMARY = "ECDSA cryptographic signature library (pure python)"
+SECTION = "devel/python"
+LICENSE = "MIT"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=66ffc5e30f76cbb5358fe54b645e5a1d"
+
+PYPI_PACKAGE = "ecdsa"
+SRC_URI[sha256sum] = "8f12ac317f8a1318efa75757ef0a651abe12e51fc1af8838fb91079445227277"
+
+inherit pypi setuptools3
+
-- 
2.17.1

[meta-security][PATCH 5/5] python3-privacyidea: add a mfa support

[akuster]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 .../mfa/python3-privacyidea_3.3.bb            | 48 +++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 recipes-security/mfa/python3-privacyidea_3.3.bb

diff --git a/recipes-security/mfa/python3-privacyidea_3.3.bb b/recipes-security/mfa/python3-privacyidea_3.3.bb
new file mode 100644
index 0000000..8952f97
--- /dev/null
+++ b/recipes-security/mfa/python3-privacyidea_3.3.bb
@@ -0,0 +1,48 @@
+SUMMARY = "identity, multifactor authentication (OTP), authorization, audit"
+DESCRIPTION = "privacyIDEA is an open solution for strong two-factor authentication like OTP tokens, SMS, smartphones or SSH keys. Using privacyIDEA you can enhance your existing applications like local login (PAM, Windows Credential Provider), VPN, remote access, SSH connections, access to web sites or web portals with a second factor during authentication. Thus boosting the security of your existing applications."
+
+HOMEPAGE = "http://www.privacyidea.org/"
+LICENSE = "AGPL-3.0"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=c0acfa7a8a03b718abee9135bc1a1c55"
+
+PYPI_PACKAGE = "privacyIDEA"
+SRC_URI[sha256sum] = "55fbdd0fdc8957f7fc5b8900453fd9dc294860bae218e53e7fe394d93f982518"
+
+inherit pypi setuptools3
+
+#install ${D}${sysconfdir}/privacyidea
+
+do_install_append () {
+    #install ${D}/var/log/privacyidea
+
+    rm -fr ${D}${libdir}/${PYTHON_DIR}/site-packages/tests
+}
+
+# Create encryption key
+#privacyidea-create-enckey -f /opt/privacyIDEA/etc/privacyidea/privacyidea.ini
+#privacyidea-create-auditkeys -f /opt/privacyIDEA/etc/privacyidea/privacyidea.ini 
+# Create db tables
+#paster setup-app /opt/privacyIDEA/etc/privacyidea/privacyidea.ini 
+
+USERADD_PACKAGES = "${PN}"
+GROUPADD_PARAM_${PN} = "--system privacyidea"
+USERADD_PARAM_${PN} = "--system -g privacyidea -o -r -d /opt/${BPN}  \
+    --shell /bin/false privacyidea"
+
+FILES_${PN} += " ${datadir}/etc/privacyidea/* ${datadir}/lib/privacyidea/*"
+
+RDEPENDS_${PN} += " bash perl apache2 freeradius-mysql freeradius-utils"
+
+RDEPENDS_${PN} += "python3 python3-alembic python3-babel python3-backports-functools-lru-cache python3-bcrypt"
+RDEPENDS_${PN} += "python3-beautifulsoup4 python3-cbor2 python3-certifi python3-cffi python3-chardet"
+RDEPENDS_${PN} += "python3-click python3-configobj python3-croniter python3-cryptography python3-defusedxml"
+RDEPENDS_${PN} += "python3-ecdsa  python3-flask python3-flask-babel python3-flask-migrate"
+RDEPENDS_${PN} += "python3-flask-script python3-flask-sqlalchemy python3-flask-versioned"
+RDEPENDS_${PN} += "python3-future python3-httplib2 python3-huey python3-idna python3-ipaddress"
+RDEPENDS_${PN} += "python3-itsdangerous python3-jinja2 python3-ldap python3-lxml python3-mako"
+RDEPENDS_${PN} += "python3-markupsafe python3-netaddr python3-oauth2client python3-passlib python3-pillow"
+RDEPENDS_${PN} += "python3-pyasn1 python3-pyasn1-modules python3-pycparser python3-pyjwt python3-pymysql"
+RDEPENDS_${PN} += "python3-pyopenssl python3-pyrad python3-dateutil python3-editor gnupg"
+RDEPENDS_${PN} += "python3-pytz python3-pyyaml python3-qrcode python3-redis python3-requests python3-rsa"
+RDEPENDS_${PN} += "python3-six python3-smpplib python3-soupsieve python3-soupsieve "
+RDEPENDS_${PN} += "python3-sqlalchemy python3-sqlsoup python3-urllib3 python3-werkzeug"
-- 
2.17.1

Re: [yocto] [meta-security][PATCH 1/5] python3-oauth2client: add recipe

[Konrad Weihmann]

I think some RDEPENDS entries are missing, by looking at 
https://github.com/googleapis/oauth2client/blob/master/setup.py

install_requires = [
     'httplib2>=0.9.1',
     'pyasn1>=0.1.7',
     'pyasn1-modules>=0.0.5',
     'rsa>=3.1.4',
     'six>=1.6.1',
]

same applies to the other added recipes of this series

On 05.07.20 20:58, akuster wrote:
> diff --git a/recipes-python/python/python3-oauth2client_4.1.3.bb b/recipes-python/python/python3-oauth2client_4.1.3.bb
> new file mode 100644
> index 0000000..b84b4ca
> --- /dev/null
> +++ b/recipes-python/python/python3-oauth2client_4.1.3.bb
> @@ -0,0 +1,9 @@
> +SUMMARY = "Add version info to file paths."
> +SECTION = "devel/python"
> +LICENSE = "Apache-2.0"
> +LIC_FILES_CHKSUM = "file://LICENSE;md5=038e1390e94fe637991fa5569daa62bc"
> +
> +PYPI_PACKAGE = "oauth2client"
> +SRC_URI[sha256sum] = "d486741e451287f69568a4d26d70d9acd73a2bbfa275746c535b4209891cccc6"
> +
> +inherit pypi setuptools3
> 
> 
> 
> 

Re: [yocto] [meta-security][PATCH 1/5] python3-oauth2client: add recipe

[akuster]

[-- Attachment #1: Type: text/plain, Size: 1228 bytes --]



On 7/5/20 12:03 PM, Konrad Weihmann wrote:
> I think some RDEPENDS entries are missing, by looking at
> https://github.com/googleapis/oauth2client/blob/master/setup.py
>
> install_requires = [
>     'httplib2>=0.9.1',
>     'pyasn1>=0.1.7',
>     'pyasn1-modules>=0.0.5',
>     'rsa>=3.1.4',
>     'six>=1.6.1',
> ]
>
> same applies to the other added recipes of this series
hmm, OK. I did not run into issues for the main app I am after
supporting.  Thanks for the feedback.

-armin
>
> On 05.07.20 20:58, akuster wrote:
>> diff --git a/recipes-python/python/python3-oauth2client_4.1.3.bb
>> b/recipes-python/python/python3-oauth2client_4.1.3.bb
>> new file mode 100644
>> index 0000000..b84b4ca
>> --- /dev/null
>> +++ b/recipes-python/python/python3-oauth2client_4.1.3.bb
>> @@ -0,0 +1,9 @@
>> +SUMMARY = "Add version info to file paths."
>> +SECTION = "devel/python"
>> +LICENSE = "Apache-2.0"
>> +LIC_FILES_CHKSUM =
>> "file://LICENSE;md5=038e1390e94fe637991fa5569daa62bc"
>> +
>> +PYPI_PACKAGE = "oauth2client"
>> +SRC_URI[sha256sum] =
>> "d486741e451287f69568a4d26d70d9acd73a2bbfa275746c535b4209891cccc6"
>> +
>> +inherit pypi setuptools3
>>
>>
>>
>>
>
> 


[-- Attachment #2: Type: text/html, Size: 2655 bytes --]