368 Commits

Author SHA1 Message Date
Bernard Spil
d3e894d926 security/openssl: Update to 1.0.2q 2018-11-20 17:53:09 +00:00
Bernard Spil
01c1770aa4 security/openssl: Security update for CVE-2018-5407
MFH:		2018Q4
Security:	6f170cf2-e6b7-11e8-a9a8-b499baebfeaf
2018-11-12 20:19:23 +00:00
Dmitry Marakasov
67cc57bf4d - Update WWW
Approved by:	portmgr blanket
2018-10-18 09:30:09 +00:00
Bernard Spil
e2fe7cdea3 Chase CONFLICTS after addition of security/openssl111
- While here mark OpenSSL 1.1.0 deprecated
   see: https://www.openssl.org/policies/releasestrat.html
2018-09-12 11:36:17 +00:00
Bernard Spil
477098f3e1 security/openssl: Fix padlock patches url prefix 2018-08-29 16:03:37 +00:00
Jochen Neumeister
1b85ef7259 Fix PORTREVISION 2018-08-14 15:12:32 +00:00
Bernard Spil
47ac20cf7c security/openssl: Add engines patches to distinfo
- Undo clobbering distinfo

Reported by:	mat
2018-08-14 15:04:04 +00:00
Bernard Spil
de269f48f9 security/openssl: Update to 1.0.2p
- Includes vulnerability fixes that were already
   added to the port as patches
2018-08-14 14:12:53 +00:00
Adam Weinberger
0c926073ff Fix a common grammar error: "can not" means the opposite of "cannot."
"Can not" means "it is possible not to," and "cannot" means "it is impossible to."
2018-08-01 16:33:11 +00:00
Dmitry Marakasov
a5fd095395 - Switch to new test framework
Approved by:	portmgr blanket
2018-07-11 08:37:43 +00:00
Bernard Spil
c456ea5664 security/openssl: Actually add patch file
MFH:		2018Q2
Security:	c82ecac5-6e3f-11e8-8777-b499baebfeaf
2018-06-12 13:43:28 +00:00
Bernard Spil
7cb11fade7 security/openssl: Security update
- Upstream update for CVE-2018-0732

MFH:		2018Q2
Security:	c82ecac5-6e3f-11e8-8777-b499baebfeaf
2018-06-12 13:17:25 +00:00
Bernard Spil
23b3e26b1e security/openssl: Add CVE-2018-0737 patch
- Bump portrev too

MFH:		2018Q2
Security:	8f353420-4197-11e8-8777-b499baebfeaf
2018-04-16 17:47:16 +00:00
Bernard Spil
2c76d37052 security/openssl: Security update
MFH:		2018Q2
Security:	8f353420-4197-11e8-8777-b499baebfeaf
2018-04-16 17:24:35 +00:00
Bernard Spil
75b3e9837c security/openssl: Fix distinfo for patches
Reported by:	joneum
2018-03-27 15:27:06 +00:00
Bernard Spil
7e46d11ac9 securit/openssl: Security update to 1.0.2o
MFH:		2018Q1
Security:	b7cff5a9-31cc-11e8-8f07-b499baebfeaf
2018-03-27 14:53:51 +00:00
Bernard Spil
9feff3cab5 security/openssl: Cleanup
- Remove EXPCIPHERS option (use security/openssl-unsafe) [1]
 - Move port variables not dependent on bsd.port.pre.mk up
 - Deleting man3 .pod files is redundant
 - bss_dgram.c modification is a no-op
 - Let openssl's Makefile install libs
 - Simplify stripping

PR: 		195270 [1]
2018-03-10 10:53:36 +00:00
Bernard Spil
b65724d659 security/openssl: Update to 1.0.2m
- Remove patch now included upstream
 - Include post-release patch for clang build error

MFH:		2017Q4
Security:	3bb451fc-db64-11e7-ac58-b499baebfeaf
2017-12-07 15:48:57 +00:00
Bernard Spil
7c215b26f8 security/openssl: Unbreak build with No-SSLv3
- Importing patch from upstream

PR:		223388
Submitted by:	tijl
Reported by:	Laurence Parry <greenreaper@hotmail.com>
2017-11-03 15:51:10 +00:00
Bernard Spil
149be67400 security/openssl: Security update to 1.0.2m
- Adds additional manpages too

MFH:		2017Q4
Security:	f40f07aa-c00f-11e7-ac58-b499baebfeaf
2017-11-02 21:32:33 +00:00
Bernard Spil
79bf652143 security/openssl: Fix build on MIPS
- gcc 4.2.1 on MIPS fails on -Werror

PR:		221620
Submitted by:	Fukang Chen <loader@FreeBSD.org>
MFH:		2017Q3
2017-08-19 15:11:03 +00:00
Bernard Spil
a8d3eadf08 security/openssl: Fix MASTER_SITE_SUBDIR
- DISTVERSIONFULL is not expanded before assignment

PR:		219929
Submitted by:	Fukang Chen <loader@FreeBSD.org>
2017-07-24 17:51:15 +00:00
Mark Linimon
45cb752a04 Begin deorbit burn of ia64. We have not attempted to build packages for
it for many years.

While here, alphabetize ARCHs, pet portlint, and modernize usages.

Approved by:	portmgr (tier-2 blanket)
2017-06-25 00:29:09 +00:00
Bernard Spil
47f81ad26b security/openssl: Fix xmpp STARTTLS
- Add (refactored) patch from master branch

PR:		219805
Submitted by:	Alexey <fbsd98816551@avksrv.org>
2017-06-10 13:24:10 +00:00
Bernard Spil
d4b6a3f241 security/openssl: Fix distinfo after DIST_SUBDIR update
- Chase DIST_SUBDIR update in distinfo

Reported by:	Cybil Courraud
2017-05-25 21:20:13 +00:00
Bernard Spil
edbc45bca3 security/openssl: Update to 1.0.2l
- Bugfix update to 1.0.2l
 - Fix PADLOCK option
   - Build failure -Wunused-function
   - Properly disable with configure
 - Strip patch-version from DIST_SUBDIR, reduce dirs
 - Remove unneeded testssl patch, dtls tests are OK
 - Add new WITHOUT_SSL3 testssl extra-patch
 - Remove md5 patch (inconsistent output)
 - Remove openbsd_hw.c patch (not compiled)
 - Remove srtp patch (upstream fixed)
 - Fix plist
2017-05-25 18:53:09 +00:00
Bernard Spil
e6a6b1491a security/openssl: Enable ASM by default
- Enable ASM option
    * By extension this enables AES-NI [1]
  - Order OPTIONS_DEFAULT alphabetically
  - Switch to using @sample [2]
  - Bump PORTREVISION

PR:		216559 [2]
Reported by:	dtestke [1]
Submitted by:	Franco Fichtner <franco@opnsense.org> [2]

Approved by:	asomers, allanjude
2017-02-08 20:16:31 +00:00
Bernard Spil
7dcd040664 security/openssl: Update to 1.0.2k
MFH:		2017Q1
Security:	CVE-2016-7055
Security:	CVE-2017-3731
Security:	CVE-2017-3732
2017-01-26 14:26:46 +00:00
Bernard Spil
feeeae7262 security/openssl: Bump PORTREVISION
- Make sure ports get rebuilt

PR:		209582
Reported by:	mat
2016-10-28 20:05:48 +00:00
Bernard Spil
613e0f8f9b security/openssl: Bump shared library version
- Bump shlib version for security/openssl
  - Bump shlib version for security/openssl-devel
  - Add instructions to UPDATING

PR:		209582
Reported by:	Matthew D. Fuller <fullermd@over-yonder.net>
MFH:		2016Q4
2016-10-28 19:49:18 +00:00
Mathieu Arnold
eabbfd75e3 ${RM} already has -f.
PR:		213570
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
2016-10-21 12:51:40 +00:00
Bernard Spil
2851c7e1e1 security/openssl: Fix ldconfig issue
- OPT_USE= feature does not behave as expected

Reported by:	dinoex
Differential Revision:	D8166
2016-10-06 19:38:48 +00:00
Bernard Spil
85eef693ce security/openssl: Mark MAKE_JOBS_UNSAFE
- Revert removal of MAKE_JOBS_UNSAFE in r423112

Reported by:	D. Randolph
2016-10-04 18:35:00 +00:00
Bernard Spil
d164220a7a security/openssl: Modernize port
- Group options
  - Migrate to <OPT>_CONFIGURE helpers
  - Use CONFIGURE_ARGS not EXTRACONFIGURE
  - Remove make-jobs unsafe (introduced 2009 / 0.9.8)
  - Remove base SHLIBVER_BASE check (introduced 2006)
  - Revert to default CPE_VERSION
  - Rework MAN3 option
  - Fix plist when SHARED disabled

Reviewed by:	mat
Differential Revision:	D8025
2016-10-02 11:51:00 +00:00
Bernard Spil
1f046c504c security/openssl: Update to 1.0.2j
- Update to 1.0.2j
  - Fixes Missing CRL sanity check (CVE-2016-7052)

Security:	337d8-83ed-11e6-bf52-b499baebfeaf
2016-09-26 13:47:20 +00:00
Olli Hauer
b0d2ecc4de - add missing man pages to pkg-plist (fix package building)
from poudriere log:
 ===> Parsing plist
 ===> Checking for items in STAGEDIR missing from pkg-plist
 Error: Orphaned: man/man3/d2i_AutoPrivateKey.3.gz
 Error: Orphaned: man/man3/d2i_PrivateKey.3.gz
 Error: Orphaned: man/man3/d2i_Private_key.3.gz
 Error: Orphaned: man/man3/i2d_PrivateKey.3.gz
 ===> Error: Plist issues found.
 *** Error code 1
 ====>> Error: check-plist failures detected
 !!! build failure encountered !!!

Approved by:	blanket
2016-09-25 06:06:59 +00:00
Bernard Spil
ceb800ecb2 security/openssl: Take maintainership 2016-09-24 20:23:53 +00:00
John Marino
57c91679cf devel/openssl: change CONFLICTS to CONFLICTS_INSTALL
THere's no problem building openssl with other ports SSL libraries
installed, the conflict comes when it's time to install it.
2016-09-24 13:15:47 +00:00
Dirk Meyer
b9a60559fe - add option ASM for OPNsense
- drop MAINTAINERSHIP caused of version naming change
2016-09-24 06:43:04 +00:00
Bernard Spil
202c1c7c2e security/openssl: Update to 1.0.2i
- Update to 1.0.2i
  - Move from PORTREVISION to PORTVERSION updates
  - Remove patches that are included upstream

Reviewed by:	mat, delphij
MFH:		2016Q3
Sponsored by:	EuroBSDcon 2016 DevSummit
Differential Revision:	D8006
2016-09-23 12:54:20 +00:00
Mathieu Arnold
084b55c630 ftp.openssl.org is being taken out.
https://mta.openssl.org/pipermail/openssl-announce/2016-September/000075.html

Sponsored by:	Absolight
2016-09-15 22:05:45 +00:00
Dirk Meyer
6bfcc0daf2 - unroll for loop
Submitted by:	John Marino
2016-09-12 18:10:41 +00:00
Dirk Meyer
72945b9812 - remove options ASM and GMP 2016-08-28 16:19:16 +00:00
Mathieu Arnold
bcdc68f820 Revert the OpenSSL 1.1.0 update, it was not tested.
With hat:	portmgr
Sponsored by:	Absolight
2016-08-27 11:00:44 +00:00
Dirk Meyer
4ed1f37abd - update to 1.1.0
- bump SHLIBVERSION
2016-08-27 09:59:48 +00:00
Dirk Meyer
4b76807c5d - cleanup options 2016-08-14 20:46:55 +00:00
Mathieu Arnold
e50dc2a336 Cleanup $() variables in ports Makefiles.
Mostly replace with ${}, but sometime, replace with $$() because it is
what was intended in the first place. (I think.)

Sponsored by:	Absolight
2016-07-20 15:33:20 +00:00
Dirk Meyer
e7994cc754 - fix possible integer overflow and application crash
Security: CVE-2016-2177
MFH:		2016Q2
2016-06-20 19:16:43 +00:00
Dirk Meyer
d930fec2e7 - update warning message for new macros 2016-06-16 18:15:08 +00:00
Mathieu Arnold
769a9f1570 Add DEFAULT_VERSIONS=ssl=XXX
Move the openssl detection routine to bsd.default-version.mk.
Add warnings telling people to not use WITH_OPENSSL_PORT or
WITH_OPENSSL_BASE.

To ease maintainability, change the way the different ssl libraries
version numbers are checked.

PR:		210149
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	The FreeBSD Foundation, Absolight
Differential Revision:	https://reviews.freebsd.org/D6577
2016-06-16 13:22:58 +00:00