Commit Graph

68 Commits

Author SHA1 Message Date
Bernard Spil
9b3a3888b3 security/libressl: Chain-validation update to 3.1.3 2020-06-16 07:00:51 +00:00
Bernard Spil
95c6ffe6e6 security/libressl: Bugfix update to 3.1.2
* Fixes client crash

MFH:		2020Q2
2020-05-21 11:12:15 +00:00
Bernard Spil
25795a7076 security/libressl: Update to 3.1.1
* 3.1 branch now stable (OpenBSD 6.7)
2020-05-08 20:17:22 +00:00
Bernard Spil
af7d3b3565 security/openssl-devel: Resurrect OpenSSL devel port 2020-04-27 13:10:14 +00:00
Bernard Spil
6088c33ba5 Chase rename of security/openssl111
- Categories n-z

MFH:		2020Q1
2020-01-01 17:30:19 +00:00
Bernard Spil
a941079307 security/libressl: Update to 3.0.2
* no SHLIBVER bump
2019-10-19 14:23:00 +00:00
Bernard Spil
7e6553b59a security/libressl: Update to 2.9.2 2019-05-22 18:24:29 +00:00
Bernard Spil
8528cb14e0 security/libressl: Update to 2.9.1
- Requires a rebuild of all dependent ports
2019-04-22 19:44:57 +00:00
Bernard Spil
5ef1f7b276 security/libressl: Security update to 2.8.3
Security:	6f170cf2-e6b7-11e8-a9a8-b499baebfeaf
2018-12-16 11:08:55 +00:00
Bernard Spil
bb32f2bab8 security/libressl: Update to 2.8.2
- Requires rebuild of all dependent ports
2018-10-20 10:30:23 +00:00
Bernard Spil
e2fe7cdea3 Chase CONFLICTS after addition of security/openssl111
- While here mark OpenSSL 1.1.0 deprecated
   see: https://www.openssl.org/policies/releasestrat.html
2018-09-12 11:36:17 +00:00
Bernard Spil
1466bd2901 security/libressl: Security update to 2.7.4
MFH:		2018Q2
Security:	c82ecac5-6e3f-11e8-8777-b499baebfeaf
2018-06-14 17:28:54 +00:00
Bernard Spil
76d5bec4dc security/libressl: Don't stage man3 manpages if MAN3 off 2018-05-06 19:08:25 +00:00
Bernard Spil
ad1a11a6b0 security/libressl: Update to 2.7.3 2018-05-06 12:16:09 +00:00
Bernard Spil
76ddf60538 security/libressl: Use -pthread
Reported by:	jbeich, eadler
2018-04-30 08:08:49 +00:00
Bernard Spil
ed493a2a2c security/libressl: Force linking libthr
- Fixes problems with loading private ssh keys
2018-04-29 12:37:37 +00:00
Bernard Spil
8c5d7d6432 security/libressl: Add version.mk change 2018-04-28 20:09:44 +00:00
Bernard Spil
85d08c6ff0 security/libressl: Update to 2.7.2
- Most important ports are compatible, see
   https://wiki.freebsd.org/LibreSSL/2.7 for more info
2018-04-28 19:46:57 +00:00
Bernard Spil
c871b5cc98 security/libressl: Bump portrevision
- Everybody deserves AES-NI off-load

Reported by:	adamw
2018-04-27 10:16:47 +00:00
Bernard Spil
a9ccd9465b security/libressl: Fix AES-NI assembly detection
- While here, fix broken man3 option

Reported by:	Franco Fichtner <franco opnsense org>
2018-04-24 19:50:42 +00:00
Bernard Spil
c26fa42792 security/libressl: Bugfix update to 2.6.4
- Fixes (No-)TLS with broken smtp clients

MFH:		2017Q4
2017-12-21 07:07:23 +00:00
Bernard Spil
1a7dfd5fc9 security/libressl: Update to 2.6.3
- Align with security/libressl-devel
 - Switch to using new install-man5 target for MAN3 option
 - Add UPDATING entry
2017-11-07 15:30:52 +00:00
Bernard Spil
8073667e04 security/libressl: Update to 2.5.5
- Bugfix update to 2.5.5
 - nc manpage install fixed upstream
2017-07-13 10:49:16 +00:00
Bernard Spil
1fba56590e security/libressl: Update to 2.5.4
- Security update to 2.5.4
 - Remove CVE-2017-8301 patch (included in 2.5.4)

Security:	24673ed7-2bf3-11e7-b291-b499baebfeaf
2017-05-03 08:44:36 +00:00
Bernard Spil
eba1dcb344 security/libressl: Fix vulnerability
Obtained from:	OpenBSD
MFH:		2017Q2
Security:	24673ed7-2bf3-11e7-b291-b499baebfeaf
Security:	CVE-2017-8301
2017-04-29 17:10:09 +00:00
Bernard Spil
9dcbcba33f security/libressl: Update to 2.5.3
- Update to 2.5.3
 - Bump shlib versions
 - Add UPDATING entry for shlib version bumps
 - Use --enable-nc configure arg
 - Align with CFLAGS from -devel
 - Remove commented EXPLICIT_BZERO blurb
 - Update pkg-plist
   - Add x25519, drop krb5_asn header
   - Add ocspcheck binary
   - Added/removed man-pages
2017-04-11 19:01:34 +00:00
Bernard Spil
4813e216ee security/libressl: Update to 2.4.5
- Update version to 2.4.5
  - Remove patch now included
2017-02-01 09:59:34 +00:00
Bernard Spil
d791e75c17 security/libressl: Fix ECDSA P-256 timing attack vuln
- Add patch from OpenBSD

MFH:		2017Q1
Security:	7caebe30-d7f1-11e6-a9a5-b499baebfeaf
Security:	CVE-2016-7056
2017-01-11 11:42:37 +00:00
Mathieu Arnold
8b4093cba5 Do not use post-stage. Use post-install instead.
The only reason to use post-stage is because the port needs to do
"things" at a later time, like some plist manipulation.
While there, fold post-install in do-install targets when they are
defined.

PR:		214780
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
2016-12-02 11:58:21 +00:00
Bernard Spil
8d5ae3c451 security/libressl: Update to 2.4.4
- Bug-fix update to 2.4.4
  - Improve MAN3 option handling
    - add extra-patch
2016-11-15 21:51:28 +00:00
Bernard Spil
d25891b878 security/libressl: Switch to CONFLICTS_INSTALL
- There's no conflict at build time

PR:		213691
2016-10-30 14:56:57 +00:00
Mathieu Arnold
eabbfd75e3 ${RM} already has -f.
PR:		213570
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
2016-10-21 12:51:40 +00:00
Bernard Spil
4f6176749d security/libressl: Update to 2.4.3
- Update to 2.4.3
  - Only affected by CVE-2016-6304 (high)

MFH:		2016Q3
Security:	CVE-2016-6304
Security: 	43eaa656-80bc-11e6-bf52-b499baebfeaf
2016-09-27 20:50:33 +00:00
Bernard Spil
5ba5cd7eec security/libressl: Update to 2.4.2
- Update to latest stable version 2.4.2
  - Add UPDATING entry
  - Remove OPENSSL_VERSION_NUMBER patch
  - Change post-install targets to post-stage where possible
  - Bump libcrypto version in version.mk

PR:		211701
2016-08-11 20:06:03 +00:00
Bernard Spil
0830eddb56 security/libressl: Update to 2.3.7
- Bugfix update [1]

Release notes:
  - http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.3.7-relnotes.txt
2016-08-03 19:25:11 +00:00
Mathieu Arnold
769a9f1570 Add DEFAULT_VERSIONS=ssl=XXX
Move the openssl detection routine to bsd.default-version.mk.
Add warnings telling people to not use WITH_OPENSSL_PORT or
WITH_OPENSSL_BASE.

To ease maintainability, change the way the different ssl libraries
version numbers are checked.

PR:		210149
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	The FreeBSD Foundation, Absolight
Differential Revision:	https://reviews.freebsd.org/D6577
2016-06-16 13:22:58 +00:00
Bernard Spil
47038c5a14 security/libressl: Update to version 2.3.6
Security:	CVE-2016-2178
Sponsored by:	BSDCan DevSummit
2016-06-09 20:33:10 +00:00
Bernard Spil
7483da5b59 security/libressl: Update to 2.3.5
- Update to bug-fix version 2.3.5
  - `signify` verified tarball
  - Remove MAKE_JOBS_UNSAFE added in 2.3.4
2016-06-01 06:51:53 +00:00
Bernard Spil
dd0283d316 security/libressl: Update to 2.3.4
- Upstream marked the 2.3 branch as stable
  - Bump SHLIB_VERSION in bsd.openssl.mk
  - Note SHLIB_VERSION bump and SSLv3 removal in UPDATING
  - Add TLS-enabled netcat binary
  - Fix linking issues with MySQL 5.7 [1]
  - Includes vulnerability fixes [2]

PR:		208759 [1]
Security:	01d729ca-1143-11e6-b55e-b499baebfeaf [2]
Reviewed_by:	feld (mentor), koobs (mentor)
Approved by:	feld (mentor, ports-secteam)
Differential Revision:	D5902
2016-05-03 21:15:43 +00:00
Bernard Spil
8be19dc2f2 security/libressl*: Register conflict with security/openssl-devel
- Add conflict for security/openssl-devel
 - Sort conflicts alphabetically

Reviewed by:	feld (mentor), koobs (mentor)
Approved by:	feld (mentor)
Differential Revision:	D5539
2016-03-06 20:06:41 +00:00
Bernard Spil
42e5a17c26 security/libressl: Update to 2.2.6
- Update to version 2.2.6 [1]
  - Remove CA root cert that is installed by default

Changes:

  ftp://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.2.6-relnotes.txt [1]

Reviewed by:	koobs (mentor), feld (mentor)
Approved by:	(mentor)
Differential Revision:	D5115
2016-01-31 11:48:37 +00:00
Bernard Spil
6f7c7a5361 ecurity/libressl: Take MAINTAINER'ship
- As requested by current maintainer via email

Reviewed by:	koobs (mentor), vsevolod (maintainer), feld (mentor)
Approved by:	koobs (mentor), vsevolod (maintainer)
Differential Revision:	D4782
2016-01-05 19:47:13 +00:00
Bernard Spil
03de6411d3 security/libressl: Update to 2.2.5
- Version 2.2.5 addresses CVE-2015-2394
 - Refactor regression-test target to TEST_TARGET
 - Add LibreSSL < 2.2.5/2.3.1_1 vuxml entry

Reviewed by:	koobs (mentor), feld (ports-secteam), delphij (ports-secteam)
Approved by:	koobs (mentor), delphij (ports-secteam)
Security:	215e740e-9c56-11e5-90e7-b499baebfeaf
MFH:		2015Q4
Differential Revision:	https://reviews.freebsd.org/D4393
2015-12-08 10:02:19 +00:00
Bernard Spil
3dba139b7a security/libressl: Fix memory leak and buffer overflow DoS vulnerability
* Update to 2.2.4 (fixing vulnerabilities)
  * Create vuxml entry

Differential Revision: https://reviews.freebsd.org/D3916
Submitted by:	Bernard Spil <brnrd@freebsd.org>
Reviewed by:	delphij
Approved by:	delphij (secteam)
MFC after:	2015Q4
Security:	e75a96df-73ca-11e5-9b45-b499baebfeaf
Security:	CVE-2015-5333, CVE-2015-5334
2015-10-16 07:13:03 +00:00
Bernard Spil
12cf121d16 security/libressl: Fix AESNI support
PR:		200894
Approved by:	vsevolod (maintainer, mentor)
2015-09-15 19:22:46 +00:00
Bernard Spil
114f60ebf1 security/libressl: Update to 2.2.3
- Update to 2.2.3
  - Show compiler flags/invokes in build-log

Changes:

  ftp://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.2.3-relnotes.txt

Reviewed by:	koobs (mentor)
Approved by:	koobs (mentor)
Differential Revision:	https://reviews.freebsd.org/D3537
2015-08-31 12:25:43 +00:00
Bernard Spil
48337355e0 Revert pkg-plist OPENSSL_SHLIBVER addition
Reported by:	antoine
2015-08-06 19:36:46 +00:00
Bernard Spil
52c1732223 security/libressl: Update to 2.2.2
* Bump SHLIB versions of libssl/crypto/tls
  * Bump OPENSSL_SHLIBVER in bsd.openssl.mk
  * Add UPDATING entry for SHLIB version bump
  * Narrow scope of CONFLICTS (portlint)

Changes:

  ftp://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.2.2-relnotes.txt

Differential_revision:	D3278
Reviewed by:        koobs (mentor), vsevolod (maintainer, mentor)
Approved by:        koobs (mentor)
2015-08-06 19:13:18 +00:00
Bernard Spil
ac5722cc60 security/libressl: Update to 2.2.1
* Minor update from OpenBSD LibreSSL-portable
  * Bumps all SHLIB versions
  * Bumps OPENSSL_SHLIBVER in bsd.openssl.mk
  * Adds UPDATING entry for SHLIB version bump
  * MFH as 2.2.0 already closes several vulns

Changes:

  ftp://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.2.1-relnotes.txt

Differential revision:	https://reviews.freebsd.org/D2963
Reviewed by:	vsevolod (maintainer/mentor), koobs (mentor)
Approved by:	vsevolod (maintainer/mentor), koobs (mentor)
MFH:		2015Q3
2015-07-08 19:27:47 +00:00
Bernard Spil
e1cbff132c security/libressl: Update to 2.2.0
- Update to 2.2.0
  - Remove opensslfeatures.h patch (included upstream)
  - Add pkg-plist (mainly documentation)
  - Bump libcrypto SHLIB version in Mk/bsd.openssl.mk

Changes:

  http://marc.info/?l=openbsd-announce&m=143404058913441

Reviewed_by:	vsevolod, koobs
Approved by:	vsevolod (maintainer, mentor), koobs (mentor)
Security:	8305e215-1080-11e5-8ba2-000c2980a9f3
Differential revision:	D2770
MFH:		2015Q2
2015-06-14 13:28:26 +00:00