Commit Graph

398 Commits

Author SHA1 Message Date
Bernard Spil
dcc0bde25b security/openssl: Auto-generate MAN3 plist 2021-08-29 12:40:50 +00:00
Bernard Spil
d3011e20b1 security/openssl: Security update to 1.1.1l
Security:	96811d4a-04ec-11ec-9b84-d4c9ef517024
MFH:		2021Q3
2021-08-24 17:54:49 +00:00
Bernard Spil
214d5852d4 security/openssl: Update KTLS patches for Chacha20-Poly1305
This pulls in several upstream KTLS patches from OpenSSL master:

 * A fix to the return values of BIO_get_ktls_*().
 * Support for Chacha20-Poly1305.
 * Replacing the SSL_MODE_NO_KTLS_* modes which opted-out of KTLS with
   an opt-in SSL_OP_ENABLE_KTLS. Note that this means that KTLS is not
   enabled by default. Users can enable KTLS via a custom OpenSSL config
   file that enables the KTLS option.

Reported by:	jhb
Sponsored by:	Netflix
Differential Revision:	https://reviews.freebsd.org/D31430
2021-08-19 14:01:53 +00:00
Mathieu Arnold
305f148f48 Remove # $FreeBSD$ from Makefiles. 2021-04-06 16:31:07 +02:00
Bernard Spil
64d9416565 security/openssl: Fix /dev/crypto issue with 1.1.1k
PR:		254643
Reported by:	<cryx-freebsd h3q com>
Reviewed by:	wollman
2021-04-06 10:45:45 +00:00
Bernard Spil
a6068203f4 security/openssl: Security update to 1.1.1k
PR:		254551
Submitted by:	Pascal Christen <pascal christen hostpoint ch>
MFH:		2021Q1
Security:	5a668ab3-8d86-11eb-b8d6-d4c9ef517024
2021-03-26 08:13:03 +00:00
Tobias Kortkamp
f2499eec5a Remove redundant option descriptions that match the default ones
(ignoring case)

Reported by:	danfe (for net/mosquitto), portscan
2021-03-07 16:45:48 +00:00
Bernard Spil
40fde18dcc security/openssl: Update KTLS patch
PR:		251969
Submitted by:	gonzo, jhb
Obtained from:	dfcfd17f28
Differential Revision:	https://reviews.freebsd.org/D28763
2021-02-18 09:22:42 +00:00
Bernard Spil
9da9812b4e security/openssl: Security update to 1.1.1j
PR:		253561
Reported by:	Michael Glaus <michael glaus hostpoint ch>
MFH:		2021Q1
Security:	96a21236-707b-11eb-96d8-d4c9ef517024
2021-02-17 13:57:03 +00:00
Bernard Spil
133b4ef1a4 security/openssl: Update KTLS patch
Differential Revision:	https://reviews.freebsd.org/D27423
2021-01-31 17:35:48 +00:00
Bernard Spil
937500a1f4 security/vuxml: Security update to 1.1.1i
MFH:		2020Q4
Security:	1d56cfc5-3970-11eb-929d-d4c9ef517024
2020-12-08 16:26:33 +00:00
John Baldwin
9aaeea7b6e Expand support for TLS protocols supported by KTLS.
Backport additional patches merged into OpenSSL's master
branch to support KTLS RX for TLS 1.1 and 1.2 as well as
support for KTLS TX for TLS 1.3.

Reviewed by:	brnrd (maintainer)
Sponsored by:	Chelsio Communications, Netflix
Differential Revision:	https://reviews.freebsd.org/D26261
2020-10-05 20:07:25 +00:00
Bernard Spil
147bfafae8 security/openssl: Update to 1.1.1g 2020-09-23 19:55:41 +00:00
Bernard Spil
7d2920a886 security/openssl: Add kernel TLS option
Submitted by:	jhb@freebsd.org
Differential Revision:	https://reviews.freebsd.org/D24274
2020-05-23 19:35:43 +00:00
Bernard Spil
af7d3b3565 security/openssl-devel: Resurrect OpenSSL devel port 2020-04-27 13:10:14 +00:00
Bernard Spil
b0992b6e2c security/openssl: Security update to 1.1.1g
PR:		245795
Reported by:	Dani <i dani at outlook com>
MFH:		2020Q2
Security:	012809ce-83f3-11ea-92ab-00163e433440
2020-04-22 09:35:38 +00:00
Bernard Spil
1ecee154e2 security/openssl: Bug-fix update to 1.1.1f
PR:		245154
MFH:		2020Q1
2020-03-31 14:37:18 +00:00
Bernard Spil
f591b7f7b7 security/openssl: Fix EOF bug
See https://github.com/openssl/openssl/pull/11400

PR:		245154
Reported by:	koobs
MFH:		2020Q1
2020-03-29 16:00:40 +00:00
Bernard Spil
d3638b3d57 security/openssl: Add missing description
Reported by:	adamw
2020-03-20 20:05:25 +00:00
Bernard Spil
38cd6142af security/openssl: Update to 1.1.1e
- SM2/SM3 not a cipher [1]
 - Add weak-ciphers option [2]

PR:		237056 [1]
Reported by:	dewayne heuristicsystems com.au> [1], mat [2]
2020-03-17 20:02:38 +00:00
Bernard Spil
3ffcbbd398 security/openssl: Remove self-conflict
PR:		243049
Submitted by:	Franco Fichtner
MFH:		2020Q1
2020-01-03 12:19:05 +00:00
Bernard Spil
ec9d22cc64 security/openssl111: Rename to openssl
- Honoring promise from DEPRECATED message
 - Unbreak people's builds

PR:		243014
MFH:		2020Q1
2020-01-01 16:42:44 +00:00
Rene Ladan
87d7b8db4a Remove expired ports:
2019-12-31 accessibility/linux-c6-atk: Superseded by CentOS 7
2019-12-31 audio/exaile-devel: this port is older than audio/exaile
2019-12-31 audio/linux-c6-alsa-lib: Superseded by CentOS 7
2019-12-31 audio/linux-c6-alsa-plugins-oss: Superseded by CentOS 7
2019-12-31 audio/linux-c6-alsa-plugins-pulseaudio: Superseded by CentOS 7
2019-12-31 audio/linux-c6-alsa-utils: Superseded by CentOS 7
2019-12-31 audio/linux-c6-flac: Superseded by CentOS 7
2019-12-31 audio/linux-c6-libaudiofile: Superseded by CentOS 7
2019-12-31 audio/linux-c6-libogg: Superseded by CentOS 7
2019-12-31 audio/linux-c6-libsndfile: Superseded by CentOS 7
2019-12-31 audio/linux-c6-libvorbis: Superseded by CentOS 7
2019-12-31 audio/linux-c6-mikmod: Superseded by CentOS 7
2019-12-31 audio/linux-c6-nas-libs: Superseded by CentOS 7
2019-12-31 audio/linux-c6-openal-soft: Superseded by CentOS 7
2019-12-31 audio/linux-c6-pulseaudio-libs: Superseded by CentOS 7
2019-12-31 audio/linux-c6-pulseaudio-utils: Superseded by CentOS 7
2019-12-31 audio/linux-c6-sdl_mixer: Superseded by CentOS 7
2019-12-31 databases/linux-c6-sqlite3: Superseded by CentOS 7
2019-12-31 databases/linux-oracle-instantclient-sqlplus: Depends on deprecated Centos 6 framework
2019-12-31 devel/linux-c6-dbus-glib: Superseded by CentOS 7
2019-12-31 devel/linux-c6-dbus-libs: Superseded by CentOS 7
2019-12-31 devel/linux-c6-devtools: Superseded by CentOS 7
2019-12-31 devel/linux-c6-elfutils-libelf: Superseded by CentOS 7
2019-12-31 devel/linux-c6-icu: Superseded by CentOS 7
2019-12-31 devel/linux-c6-libgfortran: Superseded by CentOS 7
2019-12-31 devel/linux-c6-libglade2: Superseded by CentOS 7
2019-12-31 devel/linux-c6-libpciaccess: Superseded by CentOS 7
2019-12-31 devel/linux-c6-libsigc++20: Superseded by CentOS 7
2019-12-31 devel/linux-c6-libsoup: Superseded by CentOS 7
2019-12-31 devel/linux-c6-libthai: Superseded by CentOS 7
2019-12-31 devel/linux-c6-libunwind: Superseded by CentOS 7
2019-12-31 devel/linux-c6-nspr: Superseded by CentOS 7
2019-12-31 devel/linux-c6-qt47: Superseded by CentOS 7
2019-12-31 devel/linux-c6-sdl12: Superseded by CentOS 7
2019-12-31 dns/linux-c6-libasyncns: Superseded by CentOS 7
2019-12-31 emulators/linux_base-c6: Superseded by CentOS 7
2019-12-31 ftp/linux-c6-curl: Superseded by CentOS 7
2019-12-31 graphics/cptutils: depends on expired textproc/xml2
2019-12-31 graphics/linux-c6-cairo: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-dri: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-gdk-pixbuf2: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-glx-utils: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-jasper: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-jpeg: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-png: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-sdl_image: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-sdl_ttf: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-tiff: Superseded by CentOS 7
2019-12-31 lang/linux-c6-tcl85: Superseded by CentOS 7
2019-12-31 math/blazeiterative: Depends on expiring devel/openmp
2019-12-31 multimedia/linux-c6-libtheora: Superseded by CentOS 7
2019-12-31 multimedia/linux-c6-libv4l: Superseded by CentOS 7
2019-12-31 net/linux-c6-avahi-libs: Superseded by CentOS 7
2019-12-31 net/linux-c6-openldap: Superseded by CentOS 7
2019-12-31 net/linux-c6-tcp_wrappers-libs: Superseded by CentOS 7
2019-12-31 net/py-soappy: Please consider using net/py-zeep as upstream development is stalled  and recommends using another stalled library stud
2019-12-31 print/linux-c6-cups-libs: Superseded by CentOS 7
2019-12-31 science/openmx: Depends on expiring devel/openmp
2019-12-31 science/py-PyFR: Depends on expiring devel/openmp
2019-12-31 science/py-phono3py: Depends on expiring devel/openmp
2019-12-31 security/linux-c6-audit-libs: Superseded by CentOS 7
2019-12-31 security/linux-c6-cyrus-sasl2: Superseded by CentOS 7
2019-12-31 security/linux-c6-gnutls: Superseded by CentOS 7
2019-12-31 security/linux-c6-libgcrypt: Superseded by CentOS 7
2019-12-31 security/linux-c6-libgpg-error: Superseded by CentOS 7
2019-12-31 security/linux-c6-libssh2: Superseded by CentOS 7
2019-12-31 security/linux-c6-libtasn1: Superseded by CentOS 7
2019-12-31 security/linux-c6-nss: Superseded by CentOS 7
2019-12-31 security/linux-c6-openssl: Superseded by CentOS 7
2019-12-31 security/linux-c6-pam: Superseded by CentOS 7
2019-12-31 security/openssl: OpenSSL 1.0.2 is End-of-Life 2019-12-31 at which  time this port will update to 1.1.1 branch
2019-12-31 sysutils/eventlog: No longer supported by Balabit
2019-12-31 sysutils/linux-c6-lttng-ust: Superseded by CentOS 7
2019-12-31 sysutils/linux-c6-userspace-rcu: Superseded by CentOS 7
2019-12-31 sysutils/mkdesktop: defunct, will be deleted soon
2019-12-31 sysutils/syslog-ng311: No longer supported by Balabit
2019-12-31 sysutils/syslog-ng315: No longer supported by Balabit
2019-12-31 sysutils/syslog-ng317: No longer supported by Balabit
2019-12-31 sysutils/syslog-ng318: No longer supported by Balabit
2019-12-31 sysutils/syslog-ng319: No longer supported by Balabit
2019-12-31 textproc/linux-c6-aspell: Superseded by CentOS 7
2019-12-31 textproc/linux-c6-expat: Superseded by CentOS 7
2019-12-31 textproc/linux-c6-libxml2: Superseded by CentOS 7
2019-10-16 textproc/xml2: Unfetchable, unmaintained
2019-12-31 www/linux-c6-qt47-webkit: Superseded by CentOS 7
2019-12-31 x11/linux-c6-pixman: Superseded by CentOS 7
2019-12-31 x11/linux-c6-xorg-libs: Superseded by CentOS 7
2019-12-31 x11-fonts/linux-c6-fontconfig: Superseded by CentOS 7
2019-12-31 x11-toolkits/linux-c6-gtk2: Superseded by CentOS 7
2019-12-31 x11-toolkits/linux-c6-openmotif: Superseded by CentOS 7
2019-12-31 x11-toolkits/linux-c6-pango: Superseded by CentOS 7
2019-12-31 x11-toolkits/linux-c6-qt47-x11: Superseded by CentOS 7
2019-12-31 x11-toolkits/linux-c6-tk85: Superseded by CentOS 7
2019-12-31 17:00:29 +00:00
Bernard Spil
28b1501064 security/openssl: Security update to 1.0.2u
MFH:		2019Q4
Security:	d778ddb0-2338-11ea-a1c7-b499baebfeaf
2019-12-20 15:06:52 +00:00
Bernard Spil
e2f95db0b4 security/openssl: Notify users of upcoming 1.1.1 2019-10-27 11:19:52 +00:00
Bernard Spil
39135ddb56 security/openssl: Security update to 1.0.2t
MFH:		2019Q3
Security:	9e0c6f7a-d46d-11e9-a1c7-b499baebfeaf
2019-09-11 20:04:28 +00:00
Mathieu Arnold
bc89cd3d2c Convert to UCL & cleanup pkg-message (categories s) 2019-08-14 12:16:12 +00:00
Bernard Spil
cf8bce38ab security/openssl: Security hardening update to 1.0.2s
MFH:		2019Q2
2019-05-28 20:22:25 +00:00
Bernard Spil
d7631b3603 security/openssl: Security update to 1.0.2r
MFH:		2019Q1
Security:	7700061f-34f7-11e9-b95c-b499baebfeaf
2019-02-27 08:06:02 +00:00
Bernard Spil
fe559881f6 security/openssl: Fix build with lld on i386
PR:		231459
Submitted by:	Nathan <ndowens@yahoo.com>
Reported by:	emaste
2019-02-17 19:09:55 +00:00
Bernard Spil
d3e894d926 security/openssl: Update to 1.0.2q 2018-11-20 17:53:09 +00:00
Bernard Spil
01c1770aa4 security/openssl: Security update for CVE-2018-5407
MFH:		2018Q4
Security:	6f170cf2-e6b7-11e8-a9a8-b499baebfeaf
2018-11-12 20:19:23 +00:00
Dmitry Marakasov
67cc57bf4d - Update WWW
Approved by:	portmgr blanket
2018-10-18 09:30:09 +00:00
Bernard Spil
e2fe7cdea3 Chase CONFLICTS after addition of security/openssl111
- While here mark OpenSSL 1.1.0 deprecated
   see: https://www.openssl.org/policies/releasestrat.html
2018-09-12 11:36:17 +00:00
Bernard Spil
477098f3e1 security/openssl: Fix padlock patches url prefix 2018-08-29 16:03:37 +00:00
Jochen Neumeister
1b85ef7259 Fix PORTREVISION 2018-08-14 15:12:32 +00:00
Bernard Spil
47ac20cf7c security/openssl: Add engines patches to distinfo
- Undo clobbering distinfo

Reported by:	mat
2018-08-14 15:04:04 +00:00
Bernard Spil
de269f48f9 security/openssl: Update to 1.0.2p
- Includes vulnerability fixes that were already
   added to the port as patches
2018-08-14 14:12:53 +00:00
Adam Weinberger
0c926073ff Fix a common grammar error: "can not" means the opposite of "cannot."
"Can not" means "it is possible not to," and "cannot" means "it is impossible to."
2018-08-01 16:33:11 +00:00
Dmitry Marakasov
a5fd095395 - Switch to new test framework
Approved by:	portmgr blanket
2018-07-11 08:37:43 +00:00
Bernard Spil
c456ea5664 security/openssl: Actually add patch file
MFH:		2018Q2
Security:	c82ecac5-6e3f-11e8-8777-b499baebfeaf
2018-06-12 13:43:28 +00:00
Bernard Spil
7cb11fade7 security/openssl: Security update
- Upstream update for CVE-2018-0732

MFH:		2018Q2
Security:	c82ecac5-6e3f-11e8-8777-b499baebfeaf
2018-06-12 13:17:25 +00:00
Bernard Spil
23b3e26b1e security/openssl: Add CVE-2018-0737 patch
- Bump portrev too

MFH:		2018Q2
Security:	8f353420-4197-11e8-8777-b499baebfeaf
2018-04-16 17:47:16 +00:00
Bernard Spil
2c76d37052 security/openssl: Security update
MFH:		2018Q2
Security:	8f353420-4197-11e8-8777-b499baebfeaf
2018-04-16 17:24:35 +00:00
Bernard Spil
75b3e9837c security/openssl: Fix distinfo for patches
Reported by:	joneum
2018-03-27 15:27:06 +00:00
Bernard Spil
7e46d11ac9 securit/openssl: Security update to 1.0.2o
MFH:		2018Q1
Security:	b7cff5a9-31cc-11e8-8f07-b499baebfeaf
2018-03-27 14:53:51 +00:00
Bernard Spil
9feff3cab5 security/openssl: Cleanup
- Remove EXPCIPHERS option (use security/openssl-unsafe) [1]
 - Move port variables not dependent on bsd.port.pre.mk up
 - Deleting man3 .pod files is redundant
 - bss_dgram.c modification is a no-op
 - Let openssl's Makefile install libs
 - Simplify stripping

PR: 		195270 [1]
2018-03-10 10:53:36 +00:00
Bernard Spil
b65724d659 security/openssl: Update to 1.0.2m
- Remove patch now included upstream
 - Include post-release patch for clang build error

MFH:		2017Q4
Security:	3bb451fc-db64-11e7-ac58-b499baebfeaf
2017-12-07 15:48:57 +00:00
Bernard Spil
7c215b26f8 security/openssl: Unbreak build with No-SSLv3
- Importing patch from upstream

PR:		223388
Submitted by:	tijl
Reported by:	Laurence Parry <greenreaper@hotmail.com>
2017-11-03 15:51:10 +00:00
Bernard Spil
149be67400 security/openssl: Security update to 1.0.2m
- Adds additional manpages too

MFH:		2017Q4
Security:	f40f07aa-c00f-11e7-ac58-b499baebfeaf
2017-11-02 21:32:33 +00:00