- astro/libkgeomap has been removed as there are no consumers left
- deskutils/kdepim-apps-libs has been reintegrated into other ports
There are a handful of new ports available:
- astro/kosmindoormap: Library and QML component for rendering multi-level OSM indoor maps
- deskutils/itinerary: KDE Itinerary is a digital travel assistant
- devel/kpublictransport: Access realtime public transport data
- graphics/kontrast: Color contrast checker
- textproc/markdownpart: KPart for rendering Markdown content
Update port to 2020-W49 development snapshot.
1387f526 Fix port-share option with TLS-Crypt v2
4d307ed4 tls-crypt-v2: also preload tls-crypt-v2 keys (if --persist-key)
fb169c3b tls-crypt-v2: fix server memory leak
dfd624b5 Remove auth_user_pass.wait_for_push variable
fb789947 Fix auth-token not being updated if auth-nocache is set
88dc4276 Make any auth failure tls_authentication_status return auth failed
55d5eaa3 Send AUTH_FAILED message to clients on renegotiation failures
3ac8e592 Rename DECRYPT_KEY_ENABLED to TLS_AUTHENTICATED
f9d3fbf9 Clean up tls_authentication_status and document it
f1f0f074 Improve keys out of sync message
8292102b Add more documentation about our internal TLS functions
cc5a7163 Replace key_scan array of static pointers with inline function
fc25ca3a build: Fix missing install of man page in certain environments
0d4069e4 Change travis build scripts to use https when fetching prerequisites.
PR: 251761
Submitted by: Eric F. Crist (maintainer)
A high level, "more Pythonic" interface to the PKCS#11 (Cryptoki) standard to
support HSM and Smartcard devices in Python.
The interface is designed to follow the logical structure of a HSM, with useful
defaults for obscurely documented parameters. Many APIs will optionally accept
iterables and act as generators, allowing you to stream large data blocks for
symmetric encryption.
python-pkcs11 also includes numerous utility functions to convert between PKCS
#11 data structures and common interchange formats including PKCS #1 and X.509.
python-pkcs11 is fully documented and has a full integration test suite for all
features, with continuous integration against multiple HSM platforms including:
- Thales nCipher
- Opencryptoki TPM
- OpenSC/Smartcard-HSM/Nitrokey HSM
WWW: https://github.com/danni/python-pkcs11
As noted in FreeBSD-SA-20:33.openssl, this vulnerability is also known
to affect OpenSSL versions included in FreeBSD 11.4. However, the
OpenSSL project is only giving patches for that version to premium
support contract holders. The FreeBSD project does not have access to
these patches and recommends FreeBSD 11.4 users to either upgrade to
FreeBSD 12.x or leverage up to date versions of OpenSSL in the ports/pkg
system. The FreeBSD Project may update this advisory to include FreeBSD
11.4 should patches become publicly available.
gss-genr.c: In function 'ssh_gssapi_kex_mechs':
gss-genr.c:175:9: error: 'strncpy' specified bound depends on the length of the source argument [-Werror=stringop-overflow=]
175 | cp = strncpy(s, kex, strlen(kex));
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
cc1: all warnings being treated as errors
- Remove patch-PR4855, upstreamed [1]
- Remove asn1crypto, no longer an install_requires (RUN_DEPENDS) [1]
- Add workaround for OpenSSL 1.0.2u/t when building for FreeBSD
11.3-STABLE and 11.4-RELEASE/STABLE. [2]
Changelog:
https://github.com/pyca/cryptography/blob/2.9.2/CHANGELOG.rst
HUGE thank you to Kai for running through extensive QA and producing the
final changeset.
PR: 245929
Submitted by: Daniel <daniel.engberg.lists pyret.net> [1]
Submitted by: kai [2]
MFH: No (backward incompatiblities, substantial dependents count)
Tobias C. Berner
Matthias Andree
Jan Beich
Antoine Brodin
Bernard Spil
Dima Panov
Sunpoet Po-Chuan Hsieh
Kurt Jaeger
Philip Paeps
Dan Langille
Piotr Kubaj
Gleb Popov
Yuri Victorovich
Rainer Hurling
Matthias Fechner
Renato Botelho
Luca Pizzamiglio
Steve Wills
Mark Linimon
Danilo G. Baio
Rene Ladan
Dmitry Marakasov
Ryan Steinmetz
Adam Weinberger
Kubilay Kocak
Pietro Cerutti
Ben Woods
Wen Heping