Commit graph

134 commits

Author SHA1 Message Date
Cy Schubert
c35577ebc1 security/libgcrypt: Circumvent WITH_DEBUG build failure
Register allocation exaustion results within inline assembly when
WITH_DEBUG is specified. Therefore when WITH_DEBUG is used, disable
inline assembly.

PR:		268173
Reported by:	bofh
MFH:		2022Q4
2022-12-05 11:52:37 -08:00
Stefan Eßer
fb16dfecae Remove WWW entries moved into port Makefiles
Commit b7f05445c0 has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
2022-09-07 23:58:51 +02:00
Stefan Eßer
b7f05445c0 Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
2022-09-07 23:10:59 +02:00
Piotr Kubaj
16aff2e12f security/libgcrypt: enable asm on powerpc 2022-04-27 13:18:52 +00:00
Greg V
fe14cd83da security/libgcrypt: optionalize INFO
Allow the user to optionally exclude INFO files, allowing the space
conscious user the ability to install a minimual package. The default
remains to install INOF files as before.

PR:		259552
Reported by:	Greg V <greg@unrelenting.technology>
Submitted by:	Greg V <greg@unrelenting.technology>
2022-01-26 21:08:40 -08:00
Cy Schubert
8d78b2ea79 security/libgcrypt: Update to 1.9.4 2021-08-23 14:09:59 -07:00
Cy Schubert
527821a60c security/libgcrypt: Make static an option
Static linked binaries, due to the fact that they're statically linked,
can pose a security risk should a library be updated and depending
software not be recompiled and linked. This was a hot topic on BUGTRAQ
about 25 years ago.

The default is to build static libraries so as not to alter the package
avoiding a POLA violation.

PR:		255735
Submitted by:	Daniel Engberg <daniel.engberg.lists@pyret.net> (mostly)
Reported by:	Daniel Engberg <daniel.engberg.lists@pyret.net>
Reviewed by:	cy
Tested by:	cy
MFH:		2021Q2
2021-05-22 20:41:32 -07:00
Cy Schubert
865a2a94e8 security/libgcrypt: update to 1.9.3
PR:		255735
Submitted by:	Daniel Engberg <daniel.engberg.lists@pyret.net>
Reviewed by:	cy
Tested by:	cy
MFH:		2021Q2
2021-05-22 20:41:31 -07:00
Mathieu Arnold
cf118ccf87
One more small cleanup, forgotten yesterday.
Reported by:	lwhsu
2021-04-07 10:09:01 +02:00
Mathieu Arnold
305f148f48
Remove # $FreeBSD$ from Makefiles. 2021-04-06 16:31:07 +02:00
Cy Schubert
9ccfd4541c security/libgcrypt: Fix armv7 build
Similar to armv6, armv7 fails to build jitterentropy-base.c without
optimization, falling flat on the #pragma GCC optimize statement.
Like armv6, avoid building jitterentropy-base.c altogether.

PR:		253698
2021-03-27 02:55:44 +00:00
Cy Schubert
781097c15d security/libgcrypt: Fix armv6 build
Armv6 fails to build jitterentropy-base.c without optimization,
even though #pragma GCC optimization and #pragma clang optimization
are specified. For now brute force disable building the jitter
entropy generator on armv6.

PR:		253698
Submitted by:	yani _ pi-greece.eu
Reported by:	yani _ pi-greece.eu
2021-03-17 16:11:27 +00:00
Cy Schubert
2854a1f0a1 security/libgcrypt: Fix FreeBSD 12 armv6 build.
MFH:		2021Q1
2021-03-17 16:10:21 +00:00
Cy Schubert
f74eda3cf8 security/libgcrypt: update 1.9.1 --> 1.9.2 2021-02-18 14:41:18 +00:00
Cy Schubert
1463d9153d security/libgcrypt: Update 1.8.7 --> 1.9.1
Note: 1.8.7 nor 1.9.1 are vulnerable to CVE-2021-3345. Only 1.9.0 is.
2021-02-03 23:53:44 +00:00
Cy Schubert
9dbfe60a66 Update 1.8.6 --> 1.8.7 2020-10-24 13:19:42 +00:00
Cy Schubert
dea12f43f2 Assume maintainership. 2020-10-05 17:54:59 +00:00
Cy Schubert
4d9cb69f7f Update 1.8.5 --> 1.8.6 2020-10-05 17:54:56 +00:00
Rene Ladan
4c4c6d7c27 Return cpm@'s ports to the pool after safekeeping his commit bit.
With hat:	portmgr-secretary
2020-10-05 17:34:54 +00:00
Mikael Urankar
a8357a096c security/libgcrypt: fix build on aarch64 with lld10
import upstream fix:
09c27280cc

PR:		244848
Submitted by:	Charlie Li
Approved by:	cpm (maintainer timeout), manu (mentor, implicit)
2020-03-31 07:48:00 +00:00
Carlos J. Puga Medina
6e79a94427 security/libgcrypt: Update to 1.8.5
- Pet portlint

Noteworthy changes in version 1.8.5
===================================

* Bug fixes:

  - Add mitigation against an ECDSA timing attack.
    [T4626,CVE-2019-13627]

  - Improve ECDSA unblinding.

* Other features:

  - Provide a pkg-config file for libgcrypt.

Release-info: https://dev.gnupg.org/T4683

For further details, see https://lists.gnupg.org/pipermail/gnupg-announce/2019q3/000440.html

MFH:		2019Q3
Security:	http://vuxml.freebsd.org/freebsd/c9c6c2f8-cd54-11e9-af89-080027ef1a23.html
2019-09-02 08:20:38 +00:00
Baptiste Daroussin
7990f81066 Install texinfo files (GNU info) into ${PREFIX}/share/info
After a discussion on the mailing list on moving manpages to
${PREFIX}/share/man for consistency with base where it is
installed in usr/share/man, it appeared the same should happen
to GNU info files which were installed under share in base and
not in ports.

Now texinfo is not in base on any of the supported version of FreeBSD
it is possible to proceed to this move and it is easier to do than
the manpage change.

Other benefit than consistency are less patching: all build tools but
cmake are expecting info files to be under share/info and cmake (patched here)
was having an exception for BSD so the patch makes FreeBSD case less
specific for them

Bump revision of all impacted ports

PR:		232907
exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D17816
2018-11-10 18:12:57 +00:00
Carlos J. Puga Medina
68eda17349 security/libgcrypt: Update to 1.8.4
- Update libgpg-error version required to 1.32

Changelog: https://lists.gnupg.org/pipermail/gnupg-announce/2018q4/000431.html
2018-10-28 21:15:27 +00:00
Carlos J. Puga Medina
03a62088d9 security/libgcrypt: Update to 1.8.3 (bugfix)
- Improve comment in Makefile
- Provide more elaborate port description and update WWW in pkg-descr

Noteworthy changes in version 1.8.3
===================================

   - Use blinding for ECDSA signing to mitigate a novel side-channel
     attack.  [#4011,CVE-2018-0495]

   - Fix incorrect counter overflow handling for GCM when using an IV
     size other than 96 bit.  [#3764]

   - Fix incorrect output of AES-keywrap mode for in-place encryption
     on some platforms.

   - Fix the gcry_mpi_ec_curve_point point validation function.

   - Fix rare assertion failure in gcry_prime_check.

   Release info at <https://dev.gnupg.org/T4016>.

For further details, see https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000426.html

MFH:		2018Q2
Security:	http://vuxml.freebsd.org/freebsd/9b5162de-6f39-11e8-818e-e8e0b747a45a.html
2018-06-13 18:59:05 +00:00
Carlos J. Puga Medina
4eba609e1a security/libgcrypt: Fix build for powerpc/powerpcspe
- Add the missing check for powerpcspe- and powerpc- in mpi/config.links

Submitted by:	jhibbits
Approved by:	cpm (maintainer)
Differential Revision:	https://reviews.freebsd.org/D13854
2018-01-22 12:32:04 +00:00
Carlos J. Puga Medina
1ed461b118 security/libgcrypt: update to 1.8.2
- Update libgcrypt to 1.8.2
- Bump library version in pkg-plist

Changelog: https://abi-laboratory.pro/tracker/changelog/libgcrypt/1.8.2/log.html
Binary compatibility report: https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.8.1/1.8.2/29a74/abi_compat_report.html

MFH:		2017Q4
2017-12-15 22:05:55 +00:00
Carlos J. Puga Medina
5243e160ac security/libgcrypt: update to 1.8.1
- Update libgcrypt to 1.8.1
- Bump library version in pkg-plist

Noteworthy changes in version 1.8.1

 * Bug fixes:

   - Mitigate a local side-channel attack on Curve25519 dubbed "May
     the Fourth be With You".  [CVE-2017-0379] [also in 1.7.9]

   - Add more extra bytes to the pool after reading a seed file.

   - Add the OID SHA384WithECDSA from RFC-7427 to SHA-384.

   - Fix build problems with the Jitter RNG

   - Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE).

Changes: https://abi-laboratory.pro/tracker/changelog/libgcrypt/1.8.1/log.html
Binary compatibility report: https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.8.0/1.8.1/31172/abi_compat_report.html

MFH:		2017Q3
Security:	https://vuxml.freebsd.org/freebsd/22f28bb3-8d98-11e7-8c37-e8e0b747a45a.html
2017-08-30 15:52:59 +00:00
Carlos J. Puga Medina
d9255f6228 - Fix the command line munging for jitterbase
PR:		220937
Reported by:	O. Hartmann <ohartmann@walstatt.org>
Obtained from:	https://dev.gnupg.org/rCac39522ab08fcd2483edc223334c6ab9d19e91f3
MFH:		2017Q3 (blanket)
2017-08-01 12:10:13 +00:00
Jung-uk Kim
f872930d0e Set MAKEINFO to the full path of makeinfo when USES=makeinfo is set.
PR:		221027
Reviewed by:	mat
Approved by:	portmgr (antoine)
2017-07-28 21:45:20 +00:00
Carlos J. Puga Medina
1f3a5f49dd - Remove unnecessary extra-patch-aarch64 (applied upstream)
Reported by:	Shawn Webb <shawn.webb@hardenedbsd.org> via email
MFH:		2017Q3 (blanket)
2017-07-22 01:05:15 +00:00
Carlos J. Puga Medina
ade7d59f8b security/libgcrypt: update to 1.8.0
- Update libgcrypt to 1.8.0
- Update libgpg-error version required to 1.25
- Bump library version in pkg-plist

Changes: https://lists.gnupg.org/pipermail/gnupg-announce/2017q3/000410.html
Binary compatibility report: https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.7.8/1.8.0/d9ddd/abi_compat_report.html

PR:		220858
MFH:		2017Q3
Exp-run by:	antoine
2017-07-21 10:56:16 +00:00
Carlos J. Puga Medina
090d2c758d security/libgcrypt: update to 1.7.8
- Update libgcrypt to 1.7.8
- Bump library version in pkg-plist

Noteworthy changes in version 1.7.8

 * Bug fixes:

   - Mitigate a flush+reload side-channel attack on RSA secret keys
     dubbed "Sliding right into disaster".  For details see
     <https://eprint.iacr.org/2017/627>.  [CVE-2017-7526]

Changes: https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html
Binary compatibility report: https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.7.7/1.7.8/95cc7/abi_compat_report.html

PR:		220382
MFH:		2017Q3
Exp-run by:	antoine
Security:	https://www.vuxml.org/freebsd/ed3bf433-5d92-11e7-aa14-e8e0b747a45a.html
2017-07-04 17:38:30 +00:00
Carlos J. Puga Medina
aec326658b security/libgcrypt: update to 1.7.7
- Update libgcrypt to 1.7.7
- Silence all explicitly called commands
- Update WWW in pkg-descr: use https://
- Bump library version in pkg-plist

Noteworthy changes in version 1.7.7

* Bug fixes:

  - Fix possible timing attack on EdDSA session key.
  - Fix long standing bug in secure memory implementation which could
     lead to a segv on free. [bug#3027].

PR:		219747
MFH:		2017Q2
Exp-run by:	antoine
2017-06-07 11:35:51 +00:00
Carlos J. Puga Medina
72ec346ff3 - Patch only applies to aarch64. Remove armv6 check.
Reported by:	jbeich
MFH:		2017Q1 (blanket)
2017-03-09 00:15:56 +00:00
Carlos J. Puga Medina
5415214b17 security/libgcrypt: fix build on aarch64
libtool: compile:  cc -DHAVE_CONFIG_H -I. -I.. -I../src -I../src -Wa,--noexecstack -O2 -pipe -fno-strict-aliasing -std=gnu89 -MT cipher-gcm-armv8-aarch64-ce.lo -MD -MP -MF .deps/cipher-gcm-armv8-aarch64-ce.Tpo -c cipher-gcm-armv8-aarch64-ce.S  -fPIC -DPIC -o .libs/cipher-gcm-armv8-aarch64-ce.o
cipher-gcm-armv8-aarch64-ce.S:190:3: error: instruction requires: neon
eor v31.16b, v31.16b, v31.16b
  ^

PR:		217271
Submitted by:	krion
Reported by:	Simon Rozman <simon@rozman.si>
MFH:		2017Q1 (blanket)
2017-02-28 12:21:13 +00:00
Carlos J. Puga Medina
43986ed777 security/libgcrypt: update to 1.7.6
Noteworthy changes in version 1.7.6

* Bug fixes:

  - Fix AES CTR self-check detected failure in the SSSE3 based
     implementation.
  - Remove gratuitous select before the getrandom syscall.

PR:		216305
MFH:		2017Q1
Exp-run by:	antoine
2017-01-23 12:12:13 +00:00
Carlos J. Puga Medina
9988dc2464 security/libgcrypt: Update to 1.7.5
- Update to 1.7.5
- Remove files useless to install from DOCS
- Remove patch since sparc v8 is not supported on FreeBSD
- Bump library version in pkg-plist

Changelog:
  https://lists.gnupg.org/pipermail/gnupg-announce/2016q4/000399.html

PR:		215236
Approved by:	amdmi3 (mentor)
MFH:		2016Q4
Exp-run by:	antoine
2016-12-23 15:45:00 +00:00
Mathieu Arnold
eabbfd75e3 ${RM} already has -f.
PR:		213570
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
2016-10-21 12:51:40 +00:00
Carlos J. Puga Medina
43452f5129 - Update to 1.7.3 (security fixes)
- Bump library version in pkg-plist

ref: https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html

Reviewed by:	amdmi3 (mentor)
Approved by:	amdmi3 (mentor)
MFH:	2016Q3
Differential Revision:	D7558
2016-08-18 11:24:48 +00:00
Carlos J. Puga Medina
944a4540ff - Update to 1.7.2
- Bump library version in pkg-plist

Changelog:
  https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000392.html

PR:	211153
Reviewed by:	junovitch (mentor)
Approved by:	junovitch (mentor)
MFH:		2016Q3
Exp-run:	antoine
Differential Revision:	D7221
2016-07-20 09:09:43 +00:00
Carlos J. Puga Medina
77a17abea6 - Update to 1.7.1
- Remove unneeded patch (applied upstream)
- Convert to new test framework

  https://lists.gnupg.org/pipermail/gnupg-announce/2016q2/000389.html

PR:		210328
Reviewed by:	amdmi3, junovitch (mentors)
Approved by:	amdmi3, junovitch (mentors)
MFH:		2016Q2
Exp-run:	antoine
Differential Revision:	D6865
2016-06-17 23:00:27 +00:00
Carlos J. Puga Medina
2420df6065 - Update to 1.7.0
- Remove unneeded patches (applied upstream)
- Fix inline assembler error on 9.x
- Fix pkg-plist

Changelog: https://lists.gnupg.org/pipermail/gnupg-announce/2016q2/000386.html

PR:		208907
Approved by:	junovitch (mentor)
Exp-run:	antoine
Differential Revision:	D5989
2016-04-23 10:01:20 +00:00
Mathieu Arnold
597afc47ba Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.
With hat:	portmgr
Sponsored by:	Absolight
2016-04-01 14:25:16 +00:00
Carlos J. Puga Medina
ca0a94e904 - cipher/salsa20.c (selftest): Ensure 16-byte alignment for salsa20
context structure.

- mpi/longlong.h: Fix build on sparc.

PR:		206919
Approved by:	junovitch (mentor)
2016-03-28 23:41:45 +00:00
Carlos J. Puga Medina
071a12b872 - Update libgcrypt to 1.6.5
- Change LICENSE since support has been added for "or later" variants of GNU licenses.
- Remove needless patch-cipher_salsa20.c

Changes:
  https://lists.gnupg.org/pipermail/gnupg-announce/2016q1/000384.html

PR:		207107
Approved by:	junovitch (mentor)
2016-02-16 02:52:56 +00:00
Carlos J. Puga Medina
9905a1a102 This patch fixes alignment of self-test context in salsa20 required
for amd64 implementation.

Other changes:
   - Regenerate patches to make portlint(1) happy
   - Update MAINTAINER to my @FreeBSD.org address
   - Bump PORTREVISION

PR:		206919
Approved by:	junovitch (mentor)
2016-02-08 20:54:10 +00:00
Raphael Kubo da Costa
a924b9c755 Add upstream commit to fix build errors with -pedantic.
This fixes at least devel/ccrtp's build on 9.3, which is currently broken:

  In file included from ccrtp/crypto/gcrypt/gcrypthmac.cpp:23:
  /usr/local/include/gcrypt.h:509: error: comma at end of enumerator list
  /usr/local/include/gcrypt.h:1346: error: comma at end of enumerator list
  Makefile:571: recipe for target 'gcrypthmac.lo' failed

MFH'ing this is not necessary, this bug is only present in libgcrypt 1.6.4.

PR:		205000
Approved by:	maintainer timeout (15 days)
2015-12-18 12:25:01 +00:00
Kurt Jaeger
ffb2f86e9f security/libgcrypt: Re-add missing patch
- This patch was removed when updating to 1.6.4, so the patch needs
  to be put back in order to solve the bug 204399.

PR:		204600
Submitted by:	Carlos J. Puga Medina <cpm@fbsd.es> (maintainer)
2015-11-22 17:33:05 +00:00
Sean Bruno
343a083fb9 Enable the building and installation of the .a version of the library
for static linking.  This affects emulators/qemu-user-static primarily
but will help anyone trying to statically link their applications.

Reviewed by:	tijl cpm@fbsd.es (Maintainer)
2015-10-29 14:30:24 +00:00
Sunpoet Po-Chuan Hsieh
d929b71224 - Update to 1.8.4
Changes:	http://lists.gnupg.org/pipermail/gnupg-announce/2015q3/000375.html
PR:		204003
Submitted by:	Carlos J Puga Medina <cpm@fbsd.es> (maintainer)
2015-10-27 15:54:54 +00:00