Commit graph

336 commits

Author SHA1 Message Date
Bernard Spil
b4beeee693 security/openssl: Update KTLS patch
Reported by:	jhb
Differential Revision:	https://reviews.freebsd.org/D34136
2022-02-19 15:12:25 +00:00
Stefan Eßer
5600b7995f security/openssl: add boringssl to CONFLICTS_INSTALL
Approved by:	portmgr (implicit)
2022-01-11 00:19:35 +01:00
Stefan Eßer
bcaf25a8c8 Fix CONFLICTS entries of multiple ports
There have been lots of missing CONFLICTS_INSTALL entries, either
because conflicting ports were added without updating existing ports,
due to name changes of generated packages, due to mis-understanding
the format and semantics of the conflicts entries, or just due to
typoes in package names.

This patch is the result of a comparison of all files contained in
the official packages with each other. This comparison was based on
packages built with default options and may therefore have missed
further conflicts with optionally installed files.

Where possible, version numbers in conflicts entries have been
generalized, some times taking advantage of the fact that a port
cannot conflict with itself (due to logic in bsd.port.mk that
supresses the pattern match result in that case).

A few ports that set the conflicts variables depending on complex
conditions (e.g. port options), have been left unmodified, despite
probably containing outdated package names.

These changes should only affect the installation of locally built
ports, not the package building with poudriere. They should give an
early indication of the install conflict in cases where currently
the pkg command aborts an installation when it detects that an
existing file would be overwritten,

Approved by:	portmgr (implicit)
2022-01-10 16:15:39 +01:00
Bernard Spil
f64391dd01 security/openssl: Fix build on aarch64
* Upstream only partly merged changes

PR:		259937, 260572
Reported by:	allanjude, "Naram Qashat" <cyberbotx cyberbotx com>
2021-12-20 18:03:30 +00:00
Bernard Spil
00935ff28f security/openssl: Update to 1.1.1m 2021-12-14 19:13:32 +00:00
Stefan Eßer
5933ac0b09 */*: Remove redundant '-[0-9]*' from CONFLICTS_INSTALL
The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Approved by: portmgr (blanket)
2021-11-23 23:11:40 +01:00
Bernard Spil
e2d67bee9e www/openssl: Fix detection of ARM CPU features
Upstream:
 * https://github.com/openssl/openssl/pull/17082
 * https://github.com/openssl/openssl/pull/17085

PR:		259937
Submitted by: 	allanjude
Differential Revision:	https://reviews.freebsd.org/D33061
2021-11-23 18:44:13 +00:00
Bernard Spil
dcc0bde25b security/openssl: Auto-generate MAN3 plist 2021-08-29 12:40:50 +00:00
Bernard Spil
d3011e20b1 security/openssl: Security update to 1.1.1l
Security:	96811d4a-04ec-11ec-9b84-d4c9ef517024
MFH:		2021Q3
2021-08-24 17:54:49 +00:00
Bernard Spil
214d5852d4 security/openssl: Update KTLS patches for Chacha20-Poly1305
This pulls in several upstream KTLS patches from OpenSSL master:

 * A fix to the return values of BIO_get_ktls_*().
 * Support for Chacha20-Poly1305.
 * Replacing the SSL_MODE_NO_KTLS_* modes which opted-out of KTLS with
   an opt-in SSL_OP_ENABLE_KTLS. Note that this means that KTLS is not
   enabled by default. Users can enable KTLS via a custom OpenSSL config
   file that enables the KTLS option.

Reported by:	jhb
Sponsored by:	Netflix
Differential Revision:	https://reviews.freebsd.org/D31430
2021-08-19 14:01:53 +00:00
Mathieu Arnold
305f148f48
Remove # $FreeBSD$ from Makefiles. 2021-04-06 16:31:07 +02:00
Bernard Spil
64d9416565 security/openssl: Fix /dev/crypto issue with 1.1.1k
PR:		254643
Reported by:	<cryx-freebsd h3q com>
Reviewed by:	wollman
2021-04-06 10:45:45 +00:00
Bernard Spil
a6068203f4 security/openssl: Security update to 1.1.1k
PR:		254551
Submitted by:	Pascal Christen <pascal christen hostpoint ch>
MFH:		2021Q1
Security:	5a668ab3-8d86-11eb-b8d6-d4c9ef517024
2021-03-26 08:13:03 +00:00
Tobias Kortkamp
f2499eec5a Remove redundant option descriptions that match the default ones
(ignoring case)

Reported by:	danfe (for net/mosquitto), portscan
2021-03-07 16:45:48 +00:00
Bernard Spil
40fde18dcc security/openssl: Update KTLS patch
PR:		251969
Submitted by:	gonzo, jhb
Obtained from:	dfcfd17f28
Differential Revision:	https://reviews.freebsd.org/D28763
2021-02-18 09:22:42 +00:00
Bernard Spil
9da9812b4e security/openssl: Security update to 1.1.1j
PR:		253561
Reported by:	Michael Glaus <michael glaus hostpoint ch>
MFH:		2021Q1
Security:	96a21236-707b-11eb-96d8-d4c9ef517024
2021-02-17 13:57:03 +00:00
Bernard Spil
133b4ef1a4 security/openssl: Update KTLS patch
Differential Revision:	https://reviews.freebsd.org/D27423
2021-01-31 17:35:48 +00:00
Bernard Spil
937500a1f4 security/vuxml: Security update to 1.1.1i
MFH:		2020Q4
Security:	1d56cfc5-3970-11eb-929d-d4c9ef517024
2020-12-08 16:26:33 +00:00
John Baldwin
9aaeea7b6e Expand support for TLS protocols supported by KTLS.
Backport additional patches merged into OpenSSL's master
branch to support KTLS RX for TLS 1.1 and 1.2 as well as
support for KTLS TX for TLS 1.3.

Reviewed by:	brnrd (maintainer)
Sponsored by:	Chelsio Communications, Netflix
Differential Revision:	https://reviews.freebsd.org/D26261
2020-10-05 20:07:25 +00:00
Bernard Spil
147bfafae8 security/openssl: Update to 1.1.1g 2020-09-23 19:55:41 +00:00
Bernard Spil
7d2920a886 security/openssl: Add kernel TLS option
Submitted by:	jhb@freebsd.org
Differential Revision:	https://reviews.freebsd.org/D24274
2020-05-23 19:35:43 +00:00
Bernard Spil
af7d3b3565 security/openssl-devel: Resurrect OpenSSL devel port 2020-04-27 13:10:14 +00:00
Bernard Spil
b0992b6e2c security/openssl: Security update to 1.1.1g
PR:		245795
Reported by:	Dani <i dani at outlook com>
MFH:		2020Q2
Security:	012809ce-83f3-11ea-92ab-00163e433440
2020-04-22 09:35:38 +00:00
Bernard Spil
1ecee154e2 security/openssl: Bug-fix update to 1.1.1f
PR:		245154
MFH:		2020Q1
2020-03-31 14:37:18 +00:00
Bernard Spil
f591b7f7b7 security/openssl: Fix EOF bug
See https://github.com/openssl/openssl/pull/11400

PR:		245154
Reported by:	koobs
MFH:		2020Q1
2020-03-29 16:00:40 +00:00
Bernard Spil
d3638b3d57 security/openssl: Add missing description
Reported by:	adamw
2020-03-20 20:05:25 +00:00
Bernard Spil
38cd6142af security/openssl: Update to 1.1.1e
- SM2/SM3 not a cipher [1]
 - Add weak-ciphers option [2]

PR:		237056 [1]
Reported by:	dewayne heuristicsystems com.au> [1], mat [2]
2020-03-17 20:02:38 +00:00
Bernard Spil
3ffcbbd398 security/openssl: Remove self-conflict
PR:		243049
Submitted by:	Franco Fichtner
MFH:		2020Q1
2020-01-03 12:19:05 +00:00
Bernard Spil
ec9d22cc64 security/openssl111: Rename to openssl
- Honoring promise from DEPRECATED message
 - Unbreak people's builds

PR:		243014
MFH:		2020Q1
2020-01-01 16:42:44 +00:00
Rene Ladan
87d7b8db4a Remove expired ports:
2019-12-31 accessibility/linux-c6-atk: Superseded by CentOS 7
2019-12-31 audio/exaile-devel: this port is older than audio/exaile
2019-12-31 audio/linux-c6-alsa-lib: Superseded by CentOS 7
2019-12-31 audio/linux-c6-alsa-plugins-oss: Superseded by CentOS 7
2019-12-31 audio/linux-c6-alsa-plugins-pulseaudio: Superseded by CentOS 7
2019-12-31 audio/linux-c6-alsa-utils: Superseded by CentOS 7
2019-12-31 audio/linux-c6-flac: Superseded by CentOS 7
2019-12-31 audio/linux-c6-libaudiofile: Superseded by CentOS 7
2019-12-31 audio/linux-c6-libogg: Superseded by CentOS 7
2019-12-31 audio/linux-c6-libsndfile: Superseded by CentOS 7
2019-12-31 audio/linux-c6-libvorbis: Superseded by CentOS 7
2019-12-31 audio/linux-c6-mikmod: Superseded by CentOS 7
2019-12-31 audio/linux-c6-nas-libs: Superseded by CentOS 7
2019-12-31 audio/linux-c6-openal-soft: Superseded by CentOS 7
2019-12-31 audio/linux-c6-pulseaudio-libs: Superseded by CentOS 7
2019-12-31 audio/linux-c6-pulseaudio-utils: Superseded by CentOS 7
2019-12-31 audio/linux-c6-sdl_mixer: Superseded by CentOS 7
2019-12-31 databases/linux-c6-sqlite3: Superseded by CentOS 7
2019-12-31 databases/linux-oracle-instantclient-sqlplus: Depends on deprecated Centos 6 framework
2019-12-31 devel/linux-c6-dbus-glib: Superseded by CentOS 7
2019-12-31 devel/linux-c6-dbus-libs: Superseded by CentOS 7
2019-12-31 devel/linux-c6-devtools: Superseded by CentOS 7
2019-12-31 devel/linux-c6-elfutils-libelf: Superseded by CentOS 7
2019-12-31 devel/linux-c6-icu: Superseded by CentOS 7
2019-12-31 devel/linux-c6-libgfortran: Superseded by CentOS 7
2019-12-31 devel/linux-c6-libglade2: Superseded by CentOS 7
2019-12-31 devel/linux-c6-libpciaccess: Superseded by CentOS 7
2019-12-31 devel/linux-c6-libsigc++20: Superseded by CentOS 7
2019-12-31 devel/linux-c6-libsoup: Superseded by CentOS 7
2019-12-31 devel/linux-c6-libthai: Superseded by CentOS 7
2019-12-31 devel/linux-c6-libunwind: Superseded by CentOS 7
2019-12-31 devel/linux-c6-nspr: Superseded by CentOS 7
2019-12-31 devel/linux-c6-qt47: Superseded by CentOS 7
2019-12-31 devel/linux-c6-sdl12: Superseded by CentOS 7
2019-12-31 dns/linux-c6-libasyncns: Superseded by CentOS 7
2019-12-31 emulators/linux_base-c6: Superseded by CentOS 7
2019-12-31 ftp/linux-c6-curl: Superseded by CentOS 7
2019-12-31 graphics/cptutils: depends on expired textproc/xml2
2019-12-31 graphics/linux-c6-cairo: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-dri: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-gdk-pixbuf2: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-glx-utils: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-jasper: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-jpeg: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-png: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-sdl_image: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-sdl_ttf: Superseded by CentOS 7
2019-12-31 graphics/linux-c6-tiff: Superseded by CentOS 7
2019-12-31 lang/linux-c6-tcl85: Superseded by CentOS 7
2019-12-31 math/blazeiterative: Depends on expiring devel/openmp
2019-12-31 multimedia/linux-c6-libtheora: Superseded by CentOS 7
2019-12-31 multimedia/linux-c6-libv4l: Superseded by CentOS 7
2019-12-31 net/linux-c6-avahi-libs: Superseded by CentOS 7
2019-12-31 net/linux-c6-openldap: Superseded by CentOS 7
2019-12-31 net/linux-c6-tcp_wrappers-libs: Superseded by CentOS 7
2019-12-31 net/py-soappy: Please consider using net/py-zeep as upstream development is stalled  and recommends using another stalled library stud
2019-12-31 print/linux-c6-cups-libs: Superseded by CentOS 7
2019-12-31 science/openmx: Depends on expiring devel/openmp
2019-12-31 science/py-PyFR: Depends on expiring devel/openmp
2019-12-31 science/py-phono3py: Depends on expiring devel/openmp
2019-12-31 security/linux-c6-audit-libs: Superseded by CentOS 7
2019-12-31 security/linux-c6-cyrus-sasl2: Superseded by CentOS 7
2019-12-31 security/linux-c6-gnutls: Superseded by CentOS 7
2019-12-31 security/linux-c6-libgcrypt: Superseded by CentOS 7
2019-12-31 security/linux-c6-libgpg-error: Superseded by CentOS 7
2019-12-31 security/linux-c6-libssh2: Superseded by CentOS 7
2019-12-31 security/linux-c6-libtasn1: Superseded by CentOS 7
2019-12-31 security/linux-c6-nss: Superseded by CentOS 7
2019-12-31 security/linux-c6-openssl: Superseded by CentOS 7
2019-12-31 security/linux-c6-pam: Superseded by CentOS 7
2019-12-31 security/openssl: OpenSSL 1.0.2 is End-of-Life 2019-12-31 at which  time this port will update to 1.1.1 branch
2019-12-31 sysutils/eventlog: No longer supported by Balabit
2019-12-31 sysutils/linux-c6-lttng-ust: Superseded by CentOS 7
2019-12-31 sysutils/linux-c6-userspace-rcu: Superseded by CentOS 7
2019-12-31 sysutils/mkdesktop: defunct, will be deleted soon
2019-12-31 sysutils/syslog-ng311: No longer supported by Balabit
2019-12-31 sysutils/syslog-ng315: No longer supported by Balabit
2019-12-31 sysutils/syslog-ng317: No longer supported by Balabit
2019-12-31 sysutils/syslog-ng318: No longer supported by Balabit
2019-12-31 sysutils/syslog-ng319: No longer supported by Balabit
2019-12-31 textproc/linux-c6-aspell: Superseded by CentOS 7
2019-12-31 textproc/linux-c6-expat: Superseded by CentOS 7
2019-12-31 textproc/linux-c6-libxml2: Superseded by CentOS 7
2019-10-16 textproc/xml2: Unfetchable, unmaintained
2019-12-31 www/linux-c6-qt47-webkit: Superseded by CentOS 7
2019-12-31 x11/linux-c6-pixman: Superseded by CentOS 7
2019-12-31 x11/linux-c6-xorg-libs: Superseded by CentOS 7
2019-12-31 x11-fonts/linux-c6-fontconfig: Superseded by CentOS 7
2019-12-31 x11-toolkits/linux-c6-gtk2: Superseded by CentOS 7
2019-12-31 x11-toolkits/linux-c6-openmotif: Superseded by CentOS 7
2019-12-31 x11-toolkits/linux-c6-pango: Superseded by CentOS 7
2019-12-31 x11-toolkits/linux-c6-qt47-x11: Superseded by CentOS 7
2019-12-31 x11-toolkits/linux-c6-tk85: Superseded by CentOS 7
2019-12-31 17:00:29 +00:00
Bernard Spil
28b1501064 security/openssl: Security update to 1.0.2u
MFH:		2019Q4
Security:	d778ddb0-2338-11ea-a1c7-b499baebfeaf
2019-12-20 15:06:52 +00:00
Bernard Spil
e2f95db0b4 security/openssl: Notify users of upcoming 1.1.1 2019-10-27 11:19:52 +00:00
Bernard Spil
39135ddb56 security/openssl: Security update to 1.0.2t
MFH:		2019Q3
Security:	9e0c6f7a-d46d-11e9-a1c7-b499baebfeaf
2019-09-11 20:04:28 +00:00
Bernard Spil
cf8bce38ab security/openssl: Security hardening update to 1.0.2s
MFH:		2019Q2
2019-05-28 20:22:25 +00:00
Bernard Spil
d7631b3603 security/openssl: Security update to 1.0.2r
MFH:		2019Q1
Security:	7700061f-34f7-11e9-b95c-b499baebfeaf
2019-02-27 08:06:02 +00:00
Bernard Spil
fe559881f6 security/openssl: Fix build with lld on i386
PR:		231459
Submitted by:	Nathan <ndowens@yahoo.com>
Reported by:	emaste
2019-02-17 19:09:55 +00:00
Bernard Spil
d3e894d926 security/openssl: Update to 1.0.2q 2018-11-20 17:53:09 +00:00
Bernard Spil
01c1770aa4 security/openssl: Security update for CVE-2018-5407
MFH:		2018Q4
Security:	6f170cf2-e6b7-11e8-a9a8-b499baebfeaf
2018-11-12 20:19:23 +00:00
Bernard Spil
e2fe7cdea3 Chase CONFLICTS after addition of security/openssl111
- While here mark OpenSSL 1.1.0 deprecated
   see: https://www.openssl.org/policies/releasestrat.html
2018-09-12 11:36:17 +00:00
Bernard Spil
477098f3e1 security/openssl: Fix padlock patches url prefix 2018-08-29 16:03:37 +00:00
Jochen Neumeister
1b85ef7259 Fix PORTREVISION 2018-08-14 15:12:32 +00:00
Bernard Spil
47ac20cf7c security/openssl: Add engines patches to distinfo
- Undo clobbering distinfo

Reported by:	mat
2018-08-14 15:04:04 +00:00
Bernard Spil
de269f48f9 security/openssl: Update to 1.0.2p
- Includes vulnerability fixes that were already
   added to the port as patches
2018-08-14 14:12:53 +00:00
Adam Weinberger
0c926073ff Fix a common grammar error: "can not" means the opposite of "cannot."
"Can not" means "it is possible not to," and "cannot" means "it is impossible to."
2018-08-01 16:33:11 +00:00
Dmitry Marakasov
a5fd095395 - Switch to new test framework
Approved by:	portmgr blanket
2018-07-11 08:37:43 +00:00
Bernard Spil
c456ea5664 security/openssl: Actually add patch file
MFH:		2018Q2
Security:	c82ecac5-6e3f-11e8-8777-b499baebfeaf
2018-06-12 13:43:28 +00:00
Bernard Spil
7cb11fade7 security/openssl: Security update
- Upstream update for CVE-2018-0732

MFH:		2018Q2
Security:	c82ecac5-6e3f-11e8-8777-b499baebfeaf
2018-06-12 13:17:25 +00:00
Bernard Spil
23b3e26b1e security/openssl: Add CVE-2018-0737 patch
- Bump portrev too

MFH:		2018Q2
Security:	8f353420-4197-11e8-8777-b499baebfeaf
2018-04-16 17:47:16 +00:00
Bernard Spil
2c76d37052 security/openssl: Security update
MFH:		2018Q2
Security:	8f353420-4197-11e8-8777-b499baebfeaf
2018-04-16 17:24:35 +00:00
Bernard Spil
7e46d11ac9 securit/openssl: Security update to 1.0.2o
MFH:		2018Q1
Security:	b7cff5a9-31cc-11e8-8f07-b499baebfeaf
2018-03-27 14:53:51 +00:00