search

BrentonEarl / w3af-sbo

Build w3af on Slackware-current
http://w3af.org/
MIT License
0 stars 0 forks source link

Tracking of dependencies for w3af version 1.6.49 #1

Open BrentonEarl opened 8 years ago

BrentonEarl commented 8 years ago
Dependencies

If it is checked off it is in the repo, up to date, and working with w3af.

BrentonEarl commented 8 years ago

All packages are building with w3af 1.6.49 using slackrepo. A small modification of w3af.SlackBuild is needed for it to build with slackrepo. Change line 44 from this:

tar xvf $CWD/$VERSION.tar.gz -C $PKG/opt # Install to /opt

to this:

tar xvf $CWD/$PRGNAM-$VERSION.tar.gz -C $PKG/opt # Install to /opt

I believe this is a bug in how slackrepo downloads and renames source files for consistency. Manually building w3af works with the original string.

Next step is to test w3af once all dependencies are committed to SBo and available for download

BrentonEarl commented 8 years ago

Here is the slackrepo configuration file to use this git repository with slackrepo for testing purposes. Rename it to slackrepo_w3af-sbo.conf and put it in /etc/slackrepo. Download it here: slackrepo_w3af-sbo.conf.txt

For hint files, just copy /etc/slackrepo/SBo to w3af-sbo/.

cp -R /etc/slackrepo/SBo /etc/slackrepo/w3af-sbo/
BrentonEarl commented 8 years ago

Be sure to update this ticket: https://github.com/andresriancho/w3af/issues/13037 after testing w3af with newer library versions.

BrentonEarl commented 8 years ago

Looks like it will be another week before I can update w3af to 1.6.49 in official SBo. Have some testing to do for mitmproxy because I will need to add mitmproxy + deps to SBO first.

Tracking mitmproxy in my main personal SBo repository here: https://github.com/BrentonEarl/es1-slackware-stuff/issues/5

BrentonEarl commented 8 years ago

Issue is blocked until netlib dependency cryptography is updated. netlib is a dependency of mitmproxy.

See: https://github.com/BrentonEarl/es1-slackware-stuff/issues/6

cryptography updated to 1.1.1 in SBo.

BrentonEarl commented 8 years ago

Awaiting approval for netlib, pyperclip, python-pillow. After that it's on to testing mitmproxy and w3af.

BrentonEarl commented 8 years ago

May need to update https://github.com/BrentonEarl/es1-slackware-stuff/issues/3 once all testing in complete.

BrentonEarl commented 8 years ago

mitmproxy and all deps are uploaded to SBo. Will test mitmproxy this week and next week.

urwid, dep to mitmproxy, already exists in Slackware 14.1 at version 1.0.1. In Slackware-current, urwid is at version 1.3.0.

w3af 1.6.49 will not be updated until Slackware 14.2. Testing will continue on my -current installation until this time.

BrentonEarl commented 8 years ago

urwid has been downgraded to version 1.0.3 in Slackware 14.2 RC2. According to the change logs:

Sat Mar 26 23:20:34 UTC 2016 [snip] l/urwid-1.0.3-x86_64-1.txz: Upgraded. Switch to version 1.0.3, since wicd has problems with newer versions.

Since mitmproxy requires newer versions of urwid, I would have to revert to an older version of mitmproxy that is compatible with an older than 1.6.49 w3af release. I am not sure what the point is in running mitmproxy and w3af on outdated releases.

Updating w3af looks to be stalled until the day comes that urwid is updated to a higher version (urwid > 1.3.0). Anything other than that introduces too many regressions in w3af dependencies in SBo.

Attached is the most recent ChangeLog.txt (from mirrors.slackware.com/slackware/slackware64-current) for completeness.

ChangeLog.txt

BrentonEarl commented 8 years ago

Bug that blocks an update to urwid 1.3.1+ in Slackware base. https://bugs.launchpad.net/wicd/+bug/1429253