freebsd/ports
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

net/krill: update to 0.15.0

Browse Source 
Changelog: https://nlnetlabs.nl/news/2025/Aug/12/krill-0.15.0-released/

Breaking Changes
  * Refactored command line options processing for all binaries. As a result, options for both krillc and krillta have slightly changed. For
    krillc, the --server, --token, --format, and --api options are now before the first subcommand (since they affect all commands). For krillta,
    those options are now after krillta proxy but before the next subcommand, while --format is now after krillta signer. (#1228)
  * Removed support for RTA in krillc. Support is currently still present in the Krill server, though behind a (non-default) feature flag. (#1228)
  * Changed how authorization works with OpenID Connect and configuration files. Custom profiles have been replaced with a straightforward mapping
    from access permission to roles and assigning roles to users. For configuration file-based authentication, the file format has slightly changed
    but the current format is still accepted. If you are using OpenID Connect, you will have to update your configuration. Please, see the manual
    for details. (#1232)
  * Replaced downloading of RISwhois file for ROA analysis with calls to the Roto API. This can be controlled via new configuration settings
    bgp_api_enabled, bgp_api_uri, and bgp_api_cache_seconds. (#1233, #1266)

New
  * Added a command to re-initialize the trust anchor signer with different timing values or TAL URLs. (#1255)
  * Disables the protection against early re-issuance for CA certificates that have the full resource set, typically TA certificates. (#1281)

Bug Fixes
  * Fixed a potential infinite recursion in PKCS11 error handling. (#1215)
  * Open ID connect: Re-initialize the connection after 60s to pick up configuration changes at the provider. (#1226)
  * Fixed the naming of the trust anchor timing configuration. It was expected to be timing_config for the config used by Krill and ta_timing if
    used by the Krill TA signer. It is now ta_timing in both cases while timing_config is accepted as an alias in both cases. (#1241)
  * Improve performance by using buffered reading and writing in the store. (#1300, #1301)

Other changes
  * Refactored Prometheus metrics generation which resulted in a slightly different formatting but should still be syntactically correct. (#1249)
  * Upgraded the bundled Krill UI to release 0.9.0. (#1295)
  * Added packaging support for Ubuntu Noble, RHEL 10, Debian Trixie; removed packaging support for Ubuntu Xenial and Bionic, and Debian Stretch.
    (#1239, #1297, #1308)
  * The minimum supported Rust version is now 1.85. (#1288)

PR:		288837
Reported by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
This commit is contained in:
Jaap Akkerhuis
2025-08-12 15:17:42 +02:00
committed by Hiroki Tagato
parent eb7cd51ba9
commit 333c57ca78
4 changed files with 616 additions and 595 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
net/krill/Makefile
View File

@@ -1,7 +1,6 @@
PORTNAME= krill
DISTVERSIONPREFIX= v
DISTVERSION= 0.14.6
PORTREVISION= 2
DISTVERSION= 0.15.0
CATEGORIES= net
MAINTAINER= jaap@NLnetLabs.nl

395
net/krill/Makefile.crates
View File

@@ -1,230 +1,241 @@
CARGO_CRATES= addr2line-0.24.2 \
adler2-2.0.0 \
adler32-1.2.0 \
adler2-2.0.1 \
aho-corasick-1.1.3 \
android-tzdata-0.1.1 \
android_system_properties-0.1.5 \
ansi_term-0.12.1 \
anstream-0.6.19 \
anstyle-1.0.11 \
anstyle-parse-0.2.7 \
anstyle-query-1.1.3 \
anstyle-wincon-3.0.9 \
ascii-canvas-3.0.0 \
async-trait-0.1.88 \
atty-0.2.14 \
autocfg-1.4.0 \
atomic-waker-1.1.2 \
autocfg-1.5.0 \
backoff-0.4.0 \
backtrace-0.3.74 \
backtrace-0.3.75 \
base16ct-0.2.0 \
base64-0.13.1 \
base64-0.21.7 \
base64-0.22.1 \
base64ct-1.8.0 \
basic-cookies-0.1.5 \
bcder-0.7.5 \
bit-set-0.5.3 \
bit-vec-0.6.3 \
bitflags-1.3.2 \
bitflags-2.9.0 \
block-buffer-0.9.0 \
bitflags-2.9.1 \
block-buffer-0.10.4 \
bumpalo-3.17.0 \
bumpalo-3.19.0 \
byteorder-1.5.0 \
bytes-1.10.1 \
cc-1.2.17 \
cfg-if-1.0.0 \
chrono-0.4.40 \
cipher-0.2.5 \
clap-2.34.0 \
cc-1.2.31 \
cfg-if-1.0.1 \
chrono-0.4.41 \
cipher-0.4.4 \
clap-4.5.42 \
clap_builder-4.5.42 \
clap_derive-4.5.41 \
clap_lex-0.7.5 \
colorchoice-1.0.4 \
const-oid-0.9.6 \
core-foundation-0.9.4 \
core-foundation-sys-0.8.7 \
cpufeatures-0.2.17 \
crc32fast-1.4.2 \
crunchy-0.2.3 \
crunchy-0.2.4 \
crypto-bigint-0.5.5 \
crypto-common-0.1.6 \
crypto-mac-0.10.1 \
cryptoki-0.3.0 \
cryptoki-sys-0.1.4 \
darling-0.13.4 \
darling_core-0.13.4 \
darling_macro-0.13.4 \
derivative-2.2.0 \
deunicode-1.6.1 \
diff-0.1.13 \
digest-0.9.0 \
cryptoki-0.10.0 \
cryptoki-sys-0.4.0 \
curve25519-dalek-4.1.3 \
curve25519-dalek-derive-0.1.1 \
darling-0.20.11 \
darling_core-0.20.11 \
darling_macro-0.20.11 \
der-0.7.10 \
deranged-0.4.0 \
digest-0.10.7 \
dirs-next-2.0.0 \
dirs-sys-next-0.1.2 \
displaydoc-0.2.5 \
dyn-clone-1.0.20 \
ecdsa-0.16.9 \
ed25519-2.2.3 \
ed25519-dalek-2.2.0 \
either-1.15.0 \
elliptic-curve-0.13.8 \
ena-0.14.3 \
encoding_rs-0.8.35 \
enum-display-derive-0.1.1 \
enum-flags-0.1.8 \
equivalent-1.0.2 \
errno-0.3.10 \
error-chain-0.11.0 \
fallible-iterator-0.2.0 \
errno-0.3.13 \
fastrand-2.3.0 \
fd-lock-4.0.4 \
fern-0.5.9 \
fern-0.7.1 \
ff-0.13.1 \
fiat-crypto-0.2.9 \
filetime-0.2.25 \
fixedbitset-0.4.2 \
fnv-1.0.7 \
foreign-types-0.3.2 \
foreign-types-shared-0.1.1 \
form_urlencoded-1.2.1 \
fslock-0.2.1 \
futures-0.3.31 \
futures-channel-0.3.31 \
futures-core-0.3.31 \
futures-executor-0.3.31 \
futures-io-0.3.31 \
futures-macro-0.3.31 \
futures-sink-0.3.31 \
futures-task-0.3.31 \
futures-util-0.3.31 \
generic-array-0.14.7 \
getrandom-0.2.15 \
getrandom-0.3.2 \
getrandom-0.2.16 \
getrandom-0.3.3 \
gimli-0.31.1 \
h2-0.3.26 \
hashbrown-0.15.2 \
group-0.13.0 \
h2-0.4.11 \
hashbrown-0.12.3 \
hashbrown-0.15.4 \
heck-0.5.0 \
hermit-abi-0.1.19 \
hermit-abi-0.5.0 \
hermit-abi-0.5.2 \
hex-0.4.3 \
hmac-0.10.1 \
hkdf-0.12.4 \
hmac-0.12.1 \
hostname-0.4.1 \
http-0.2.12 \
http-body-0.4.6 \
http-1.3.1 \
http-body-1.0.1 \
http-body-util-0.1.3 \
httparse-1.10.1 \
httpdate-1.0.3 \
hyper-0.14.32 \
hyper-tls-0.5.0 \
iana-time-zone-0.1.62 \
hyper-1.6.0 \
hyper-rustls-0.27.7 \
hyper-tls-0.6.0 \
hyper-util-0.1.16 \
iana-time-zone-0.1.63 \
iana-time-zone-haiku-0.1.2 \
icu_collections-1.5.0 \
icu_locid-1.5.0 \
icu_locid_transform-1.5.0 \
icu_locid_transform_data-1.5.0 \
icu_normalizer-1.5.0 \
icu_normalizer_data-1.5.0 \
icu_properties-1.5.1 \
icu_properties_data-1.5.0 \
icu_provider-1.5.0 \
icu_provider_macros-1.5.0 \
icu_collections-2.0.0 \
icu_locale_core-2.0.0 \
icu_normalizer-2.0.0 \
icu_normalizer_data-2.0.0 \
icu_properties-2.0.1 \
icu_properties_data-2.0.1 \
icu_provider-2.0.0 \
ident_case-1.0.1 \
idna-1.0.3 \
idna_adapter-1.2.0 \
impl-trait-for-tuples-0.2.3 \
indexmap-2.8.0 \
idna_adapter-1.2.1 \
indexmap-1.9.3 \
indexmap-2.10.0 \
inout-0.1.4 \
instant-0.1.13 \
intervaltree-0.2.7 \
io-uring-0.7.9 \
ipnet-2.11.0 \
iri-string-0.7.8 \
is-terminal-0.4.16 \
is_terminal_polyfill-1.70.1 \
itertools-0.10.5 \
itertools-0.11.0 \
itoa-1.0.15 \
jmespatch-0.3.0 \
js-sys-0.3.77 \
kmip-protocol-0.4.3 \
kmip-ttlv-0.3.5 \
kvx-0.9.3 \
kvx_macros-0.9.3 \
kvx_types-0.9.3 \
lalrpop-0.19.12 \
lalrpop-0.20.2 \
lalrpop-util-0.19.12 \
lalrpop-util-0.20.2 \
lazy_static-1.5.0 \
libc-0.2.171 \
libflate-1.4.0 \
libflate_lz77-1.2.0 \
libloading-0.7.4 \
libredox-0.1.3 \
linux-raw-sys-0.9.3 \
litemap-0.7.5 \
lock_api-0.4.12 \
libc-0.2.174 \
libloading-0.8.8 \
libm-0.2.15 \
libredox-0.1.9 \
linux-raw-sys-0.9.4 \
litemap-0.8.0 \
lock_api-0.4.13 \
log-0.4.27 \
maplit-1.0.2 \
matchers-0.0.1 \
maybe-async-0.2.10 \
md-5-0.10.6 \
memchr-2.7.4 \
memchr-2.7.5 \
mime-0.3.17 \
miniz_oxide-0.8.5 \
mio-1.0.3 \
miniz_oxide-0.8.9 \
mio-1.0.4 \
native-tls-0.2.14 \
new_debug_unreachable-1.0.6 \
num-bigint-0.4.6 \
num-bigint-dig-0.8.4 \
num-conv-0.1.0 \
num-integer-0.1.46 \
num-iter-0.1.45 \
num-traits-0.2.19 \
num_threads-0.1.7 \
oauth2-4.4.2 \
object-0.36.7 \
once_cell-1.21.1 \
opaque-debug-0.3.1 \
openidconnect-2.5.1 \
openssl-0.10.71 \
once_cell-1.21.3 \
once_cell_polyfill-1.70.1 \
openidconnect-3.5.0 \
openssl-0.10.73 \
openssl-macros-0.1.1 \
openssl-probe-0.1.6 \
openssl-src-300.4.2+3.4.1 \
openssl-sys-0.9.106 \
openssl-sys-0.9.109 \
ordered-float-2.10.1 \
oso-0.12.4 \
parking_lot-0.12.3 \
parking_lot_core-0.9.10 \
pbkdf2-0.7.5 \
p256-0.13.2 \
p384-0.13.1 \
parking_lot-0.12.4 \
parking_lot_core-0.9.11 \
paste-1.0.15 \
pbkdf2-0.12.2 \
pem-rfc7468-0.7.0 \
percent-encoding-2.3.1 \
petgraph-0.6.5 \
phf-0.11.3 \
phf_shared-0.11.3 \
pico-args-0.5.0 \
pin-project-lite-0.2.16 \
pin-utils-0.1.0 \
pkcs1-0.7.5 \
pkcs8-0.10.2 \
pkg-config-0.3.32 \
polar-core-0.12.4 \
postgres-0.19.10 \
postgres-derive-0.4.6 \
postgres-protocol-0.6.8 \
postgres-types-0.2.9 \
potential_utf-0.1.2 \
powerfmt-0.2.0 \
ppv-lite86-0.2.21 \
precomputed-hash-0.1.1 \
proc-macro-error-1.0.4 \
proc-macro-error-attr-1.0.4 \
proc-macro2-1.0.94 \
primeorder-0.13.6 \
proc-macro2-1.0.95 \
quick-xml-0.31.0 \
quote-1.0.40 \
r-efi-5.2.0 \
r-efi-5.3.0 \
r2d2-0.8.10 \
r2d2_postgres-0.18.2 \
rand-0.8.5 \
rand-0.9.0 \
rand-0.9.2 \
rand_chacha-0.3.1 \
rand_chacha-0.9.0 \
rand_core-0.6.4 \
rand_core-0.9.3 \
redox_syscall-0.5.10 \
redox_syscall-0.5.17 \
redox_users-0.4.6 \
ref-cast-1.0.24 \
ref-cast-impl-1.0.24 \
regex-1.11.1 \
regex-automata-0.1.10 \
regex-automata-0.4.9 \
regex-syntax-0.6.29 \
regex-syntax-0.8.5 \
reqwest-0.11.27 \
ring-0.16.20 \
reqwest-0.12.22 \
rfc6979-0.4.0 \
ring-0.17.14 \
rle-decode-fast-1.0.3 \
rpassword-5.0.1 \
rpki-0.18.5 \
rustc-demangle-0.1.24 \
rpassword-7.4.0 \
rpki-0.18.6 \
rsa-0.9.8 \
rtoolbox-0.0.3 \
rustc-demangle-0.1.26 \
rustc_version-0.4.1 \
rustix-1.0.3 \
rustls-0.21.12 \
rustls-pemfile-1.0.4 \
rustls-webpki-0.101.7 \
rustversion-1.0.20 \
rustix-1.0.8 \
rustls-0.23.31 \
rustls-pemfile-2.2.0 \
rustls-pki-types-1.12.0 \
rustls-webpki-0.103.4 \
rustversion-1.0.21 \
ryu-1.0.20 \
salsa20-0.7.2 \
salsa20-0.10.2 \
same-file-1.0.6 \
schannel-0.1.27 \
scheduled-thread-pool-0.2.7 \
schemars-0.9.0 \
schemars-1.0.4 \
scopeguard-1.2.0 \
scrypt-0.6.5 \
sct-0.7.1 \
scrypt-0.11.0 \
sec1-0.7.3 \
secrecy-0.8.0 \
security-framework-2.11.1 \
security-framework-sys-2.14.0 \
semver-1.0.26 \
@@ -232,88 +243,83 @@ CARGO_CRATES= addr2line-0.24.2 \
serde-value-0.7.0 \
serde_bytes-0.11.17 \
serde_derive-1.0.219 \
serde_json-1.0.140 \
serde_json-1.0.142 \
serde_path_to_error-0.1.17 \
serde_plain-1.0.2 \
serde_spanned-0.6.9 \
serde_urlencoded-0.7.1 \
serde_with-1.14.0 \
serde_with_macros-1.5.2 \
sha2-0.9.9 \
sha2-0.10.8 \
sharded-slab-0.1.7 \
serde_with-3.14.0 \
serde_with_macros-3.14.0 \
sha2-0.10.9 \
shlex-1.3.0 \
signal-hook-registry-1.4.2 \
signal-hook-registry-1.4.6 \
signature-2.2.0 \
siphasher-1.0.1 \
slab-0.4.9 \
slug-0.1.6 \
smallvec-1.14.0 \
socket2-0.5.8 \
spin-0.5.2 \
slab-0.4.10 \
smallvec-1.15.1 \
socket2-0.6.0 \
spin-0.9.8 \
spki-0.7.3 \
stable_deref_trait-1.2.0 \
string_cache-0.8.8 \
stringprep-0.1.5 \
strsim-0.8.0 \
strsim-0.10.0 \
subtle-2.4.1 \
stderrlog-0.6.0 \
string_cache-0.8.9 \
strsim-0.11.1 \
subtle-2.6.1 \
syn-1.0.109 \
syn-2.0.100 \
sync_wrapper-0.1.2 \
synstructure-0.13.1 \
syslog-4.0.1 \
system-configuration-0.5.1 \
system-configuration-sys-0.5.0 \
target-lexicon-0.12.16 \
tempfile-3.19.1 \
syn-2.0.104 \
sync_wrapper-1.0.2 \
synstructure-0.13.2 \
syslog-7.0.0 \
system-configuration-0.6.1 \
system-configuration-sys-0.6.0 \
tar-0.4.44 \
tempfile-3.20.0 \
term-0.7.0 \
textwrap-0.11.0 \
termcolor-1.1.3 \
terminal_size-0.4.2 \
thiserror-1.0.69 \
thiserror-impl-1.0.69 \
thread_local-1.1.8 \
time-0.1.45 \
thread_local-1.1.9 \
time-0.3.41 \
time-core-0.1.4 \
time-macros-0.2.22 \
tiny-keccak-2.0.2 \
tinystr-0.7.6 \
tinystr-0.8.1 \
tinyvec-1.9.0 \
tinyvec_macros-0.1.1 \
tokio-1.44.1 \
tokio-1.47.1 \
tokio-macros-2.5.0 \
tokio-native-tls-0.3.1 \
tokio-postgres-0.7.13 \
tokio-rustls-0.24.1 \
tokio-util-0.7.14 \
toml-0.5.11 \
tokio-rustls-0.26.2 \
tokio-util-0.7.16 \
toml-0.8.23 \
toml_datetime-0.6.11 \
toml_edit-0.22.27 \
toml_write-0.1.2 \
tower-0.5.2 \
tower-http-0.6.6 \
tower-layer-0.3.3 \
tower-service-0.3.3 \
tracing-0.1.41 \
tracing-attributes-0.1.28 \
tracing-core-0.1.33 \
tracing-log-0.1.4 \
tracing-serde-0.1.3 \
tracing-subscriber-0.2.25 \
tracing-core-0.1.34 \
trait-set-0.2.0 \
try-lock-0.2.5 \
typenum-1.18.0 \
unicode-bidi-0.3.18 \
unicode-ident-1.0.18 \
unicode-normalization-0.1.24 \
unicode-properties-0.1.3 \
unicode-width-0.1.14 \
unicode-xid-0.2.6 \
untrusted-0.7.1 \
untrusted-0.9.0 \
url-2.5.4 \
urlparse-0.7.3 \
utf16_iter-1.0.5 \
utf8_iter-1.0.4 \
uuid-1.16.0 \
valuable-0.1.1 \
utf8parse-0.2.2 \
uuid-1.17.0 \
vcpkg-0.2.15 \
vec_map-0.8.2 \
version_check-0.9.5 \
walkdir-2.5.0 \
want-0.3.1 \
wasi-0.10.0+wasi-snapshot-preview1 \
wasi-0.11.0+wasi-snapshot-preview1 \
wasi-0.11.1+wasi-snapshot-preview1 \
wasi-0.14.2+wasi-0.2.4 \
wasite-0.1.0 \
wasm-bindgen-0.2.100 \
wasm-bindgen-backend-0.2.100 \
wasm-bindgen-futures-0.4.50 \
@@ -321,42 +327,49 @@ CARGO_CRATES= addr2line-0.24.2 \
wasm-bindgen-macro-support-0.2.100 \
wasm-bindgen-shared-0.2.100 \
web-sys-0.3.77 \
whoami-1.6.0 \
winapi-0.3.9 \
winapi-i686-pc-windows-gnu-0.4.0 \
winapi-util-0.1.9 \
winapi-x86_64-pc-windows-gnu-0.4.0 \
windows-core-0.52.0 \
windows-link-0.1.1 \
windows-sys-0.48.0 \
windows-core-0.61.2 \
windows-implement-0.60.0 \
windows-interface-0.59.1 \
windows-link-0.1.3 \
windows-registry-0.5.3 \
windows-result-0.3.4 \
windows-strings-0.4.2 \
windows-sys-0.52.0 \
windows-sys-0.59.0 \
windows-targets-0.48.5 \
windows-sys-0.60.2 \
windows-targets-0.52.6 \
windows_aarch64_gnullvm-0.48.5 \
windows-targets-0.53.3 \
windows_aarch64_gnullvm-0.52.6 \
windows_aarch64_msvc-0.48.5 \
windows_aarch64_gnullvm-0.53.0 \
windows_aarch64_msvc-0.52.6 \
windows_i686_gnu-0.48.5 \
windows_aarch64_msvc-0.53.0 \
windows_i686_gnu-0.52.6 \
windows_i686_gnu-0.53.0 \
windows_i686_gnullvm-0.52.6 \
windows_i686_msvc-0.48.5 \
windows_i686_gnullvm-0.53.0 \
windows_i686_msvc-0.52.6 \
windows_x86_64_gnu-0.48.5 \
windows_i686_msvc-0.53.0 \
windows_x86_64_gnu-0.52.6 \
windows_x86_64_gnullvm-0.48.5 \
windows_x86_64_gnu-0.53.0 \
windows_x86_64_gnullvm-0.52.6 \
windows_x86_64_msvc-0.48.5 \
windows_x86_64_gnullvm-0.53.0 \
windows_x86_64_msvc-0.52.6 \
winreg-0.50.0 \
windows_x86_64_msvc-0.53.0 \
winnow-0.7.12 \
wit-bindgen-rt-0.39.0 \
write16-1.0.0 \
writeable-0.5.5 \
yoke-0.7.5 \
yoke-derive-0.7.5 \
zerocopy-0.8.24 \
zerocopy-derive-0.8.24 \
writeable-0.6.1 \
xattr-1.5.1 \
yoke-0.8.0 \
yoke-derive-0.8.0 \
zerocopy-0.8.26 \
zerocopy-derive-0.8.26 \
zerofrom-0.1.6 \
zerofrom-derive-0.1.6 \
zerovec-0.10.4 \
zerovec-derive-0.10.3
zeroize-1.8.1 \
zerotrie-0.2.2 \
zerovec-0.11.3 \
zerovec-derive-0.11.1

796
net/krill/distinfo
View File

File diff suppressed because it is too large Load Diff

17
net/krill/files/patch-Cargo.toml
View File

@@ -1,17 +0,0 @@
--- Cargo.toml.orig 2023-11-09 10:16:19 UTC
+++ Cargo.toml
@@ -101,13 +101,12 @@ multi-user = [
"unicode-normalization",
"urlparse",
]
-static-openssl = ["openssl/vendored"]
# Preview features - not ready for production use
rta = []
# Internal features - not for external use
-all = ["multi-user", "rta", "static-openssl"]
+all = ["multi-user", "rta"]
hsm-tests-kmip = ["hsm"]
hsm-tests-pkcs11 = ["hsm"]