No description
Find a file
Santhosh Raju ba4cf682d2 security/wolfssl: Update to v5.2.0
Changes since v5.1.1:

wolfSSL Release 5.2.0 (Feb 21, 2022)

Release 5.2.0 of wolfSSL embedded TLS has bug fixes and new features including:
Vulnerabilities

  * [High] A TLS v1.3 server who requires mutual authentication can be
    bypassed. If a malicious client does not send the certificate_verify message
    a client can connect without presenting a certificate even if the server
    requires one. Thank you to Aina Toky Rasoamanana and Olivier Levillain of
    Télécom SudParis.
  * [High] A TLS v1.3 client attempting to authenticate a TLS v1.3 server can
    have its certificate check bypassed. If the sig_algo in the
    certificate_verify message is different than the certificate message checking
    may be bypassed. Thank you to Aina Toky Rasoamanana and Olivier Levillain of
    Télécom SudParis.

New Feature Additions

  *  Example applications for Renesas RX72N with FreeRTOS+IoT
  *  Renesas FSP 3.5.0 support for RA6M3
  *  For TLS 1.3, improved checks on order of received messages.
  *  Support for use of SHA-3 cryptography instructions available in ARMv8.2-A
     architecture extensions. (For Apple M1)
  *  Support for use of SHA-512 cryptography instructions available in ARMv8.2-A
     architecture extensions. (For Apple M1)
  *  Fixes for clang -Os on clang >= 12.0.0
  *  Expose Sequence Numbers so that Linux TLS (kTLS) can be configured
  *  Fix bug in TLSX_ALPN_ParseAndSet when using ALPN select callback.
  *  Allow DES3 with FIPS v5-dev.
  *  Include HMAC for deterministic ECC sign build
  *  Add --enable-chrony configure option. This sets build options needed to
     build the Chrony NTP (Network Time Protocol) service.
  *  Add support for STM32U575xx boards.
  *  Fixes for NXP’s SE050 Ed25519/Curve25519.
  *  TLS: Secure renegotiation info on by default for compatibility.
  *  Inline C code version of ARM32 assembly for cryptographic algorithms
     available and compiling for improved performance on ARM platforms
  *  Configure HMAC: define NO_HMAC to disable HMAC (default: enabled)
  *  ISO-TP transport layer support added to wolfio for TLS over CAN Bus
  *  Fix initialization bug in SiLabs AES support
  *  Domain and IP check is only performed on leaf certificates

ARM PSA Support (Platform Security Architecture) API

  * Initial support added for ARM’s Platform Security Architecture (PSA) API in
    wolfCrypt which allows support of ARM PSA enabled devices by wolfSSL,
    wolfSSH, and wolfBoot and wolfCrypt FIPS.
  * Included algorithms: ECDSA, ECDH, HKDF, AES, SHA1, SHA256, SHA224, RNG

ECICE Updates

  * Support for more encryption algorithms: AES-256-CBC, AES-128-CTR,
    AES-256-CTR
  * Support for compressed public keys in messages.

Math Improvements

  * Improved performance of X448 and Ed448 through inlining Karatsuba in square
    and multiplication operations for 128-bit implementation (64-bit platforms
    with 128-bit type support).
  * SP Math C implementation: fix for corner case in curve specific
    implementations of Montgomery Reduction (P-256, P-384).
  * SP math all: assembly snippets added for ARM Thumb. Performance improvement
    on platform.
  * SP math all: ARM64/32 sp_div_word assembly snippets added to remove
    dependency on __udiv3.
  * SP C implementation: multiplication of two signed types with overflow is
    undefined in C. Now cast to unsigned type before multiplication is
    performed.
  * SP C implementation correctly builds when using CFLAG: -m32

OpenSSL Compatibility Layer

  * Added DH_get_2048_256 to compatibility layer.
  * wolfSSLeay_version now returns the version of wolfSSL
  * Added C++ exports for API’s in wolfssl/openssl/crypto.h. This allows better
    compatibility when building with a C++ compiler.
  * Fix for OpenSSL x509_NAME_hash mismatch
  * Implement FIPS_mode and FIPS_mode_set in the compat layer.
  * Fix for certreq and certgen options with openssl compatibility
  * wolfSSL_BIO_dump() and wolfSSL_OBJ_obj2txt() rework
  * Fix IV length bug in EVP AES-GCM code.
  * Add new ASN1_INTEGER compatibility functions.
  * Fix wolfSSL_PEM_X509_INFO_read with NO_FILESYSTEM

CMake Updates

  * Check for valid override values.
  * Add KEYGEN option.
  * Cleanup help messages.
  * Add options to support wolfTPM.

VisualStudio Updates

  * Remove deprecated VS solution
  * Fix VS unreachable code warning

New Algorithms and Protocols

  * AES-SIV (RFC 5297)
  * DTLS SRTP (RFC 5764), used with WebRTC to agree on profile for new real-time
    session keys
  * SipHash MAC/PRF for hash tables. Includes inline assembly for x86_64 and
    Aarch64.

Remove Obsolete Algorithms

  * IDEA
  * Rabbit
  * HC-128
2022-02-26 07:58:42 +01:00
.hooks .hooks/prepare-commit-msg: Enhance commit-msg hook. 2021-06-04 13:57:25 +02:00
accessibility accessibility/wl-gammarelay-rs: update to 0.2.1 2022-02-12 14:02:46 +00:00
arabic Please welcome new generation release of LibreOffice suite - 7.3.0! (+) 2022-02-17 02:02:03 +03:00
archivers archivers/stormlib: take maintainership 2022-02-25 22:13:43 +03:00
astro astro/xearth: reflect my relocate 2022-02-25 16:55:18 +03:00
audio audio/din: Update to 53.1 2022-02-26 07:58:40 +01:00
base base/gcc6: Add CPE information 2021-10-14 12:41:18 +02:00
benchmarks benchmarks/clpeak: update to 1.1.2 2022-02-21 17:06:01 +00:00
biology biology/py-PySCeS: Update 1.0.0 -> 1.0.1 2022-02-25 11:35:50 -08:00
cad x11-toolkits/py-wxPython4: Update to 4.1 2022-02-25 19:10:24 +01:00
chinese chinese/php-opencc: Update version 0.0.0.20201211 2022-02-18 08:23:09 -06:00
comms x11-toolkits/py-wxPython4: Update to 4.1 2022-02-25 19:10:24 +01:00
converters converters/R-cran-jsonlite: Update to 1.8.0 2022-02-24 04:10:02 +00:00
databases databases/phpmyadmin: Update to 4.9.10 2022-02-26 07:19:13 +01:00
deskutils deskutils/remind: update to 03.04.01 2022-02-25 09:35:34 -08:00
devel devel/cargo-c: update to 0.9.8 2022-02-25 23:27:12 +00:00
dns dns/nsd: Update version 4.3.9=>4.4.0 2022-02-18 09:48:03 -06:00
editors math/ipopt: Update 3.12.13 -> 3.14.4 2022-02-24 08:21:08 -08:00
emulators emulators/yuzu: update to s20220225 2022-02-26 00:42:46 +00:00
finance finance/kmymoney: Update to 5.1.2 2022-02-24 09:28:03 -05:00
french */wordpress: Update distinfo 2022-02-17 22:35:41 +01:00
ftp ftp/py-aioftp: update 0.20.0 → 0.20.1 2022-02-22 16:46:40 +03:00
games games/wargus: add stormlib support 2022-02-25 22:12:28 +03:00
german */wordpress: Update distinfo 2022-02-17 22:35:41 +01:00
graphics databases/clickhouse: Require Perl to fix build 2022-02-25 17:04:06 -08:00
hebrew Please welcome new generation release of LibreOffice suite - 7.3.0! (+) 2022-02-17 02:02:03 +03:00
hungarian Please welcome new generation release of LibreOffice suite - 7.3.0! (+) 2022-02-17 02:02:03 +03:00
irc irc/catgirl: Update to 2.1 2022-02-25 04:48:06 -05:00
japanese tex* : Update version 20150521=>20210325 2022-02-18 20:25:00 -06:00
java java/openjdk8: Update to 8u322 GA 2022-02-11 20:30:51 -08:00
Keywords desktop-file-utils: remove the keyword it is not necessary anymore 2021-11-17 10:47:30 +01:00
korean Please welcome new generation release of LibreOffice suite - 7.3.0! (+) 2022-02-17 02:02:03 +03:00
lang lang/gcc12-devel: Update to the 20220220 snapshot of GCC 12.1.0 2022-02-25 21:59:32 +00:00
mail mail/nextcloud-mail: Update to 1.11.7 2022-02-25 18:58:26 +00:00
math math/freefem++: Update 4.6 -> 4.10 2022-02-25 13:47:22 -08:00
misc x11-toolkits/py-wxPython4: Update to 4.1 2022-02-25 19:10:24 +01:00
Mk x11-toolkits/py-wxPython4: Update to 4.1 2022-02-25 19:10:24 +01:00
multimedia multimedia/ffmpeg: backport SVTAV1 fixes after d187ef9400 2022-02-25 23:27:30 +00:00
net net/haproxy24: update to version 2.4.14. 2022-02-25 21:55:37 +00:00
net-im net-im/mtxclient: update to latest release 2022-02-25 11:44:10 +01:00
net-mgmt net-mgmt/py-pynetbox: Update to 6.6.1 2022-02-25 07:39:47 +01:00
net-p2p net-p2p/readarr: new port 2022-02-24 23:48:09 -05:00
news news/inn-current: Update to 20220219 2022-02-21 09:22:26 -07:00
polish polish/hunspell: 20211201 -> 20220206 2022-02-18 15:33:36 +03:00
ports-mgmt ports-mgmt/portlint: Update to 2.19.10 2022-02-21 14:45:11 -05:00
portuguese portuguese/hunspell: 20211125 -> 20220210 2022-02-18 15:34:32 +03:00
print print/tex-basic-engines: Fix MASTER_SITES 2022-02-24 20:35:52 -06:00
russian russian/wordpress: upstream rerolling release of 17.02.2022 2022-02-18 15:39:08 +03:00
science science/jmol: Update 14.32.24 -> 14.32.25 2022-02-25 10:30:50 -08:00
security security/wolfssl: Update to v5.2.0 2022-02-26 07:58:42 +01:00
shells shells/zsh: update to 5.8.1 2022-02-12 21:33:39 +01:00
sysutils sysutils/consul: update to 1.11.3 2022-02-25 16:54:48 -05:00
Templates Templates/BSD.local.dist: add share/icons 2021-09-27 11:33:18 +02:00
textproc textproc/markdown-mode.el: Update to 2.5 2022-02-26 10:30:22 +09:00
Tools Tools/scripts: Add port_conflicts_check.lua 2022-01-22 12:48:03 +01:00
ukrainian Please welcome new generation release of LibreOffice suite - 7.3.0! (+) 2022-02-17 02:02:03 +03:00
vietnamese Please welcome new generation release of LibreOffice suite - 7.3.0! (+) 2022-02-17 02:02:03 +03:00
www www/groupoffice: Update to 6.6.45 2022-02-26 07:02:26 +01:00
x11 x11/radare-cutter: don't use webengine where it's not available 2022-02-25 20:23:20 +00:00
x11-clocks KDE: Update KDE Gear to 21.12.2 (bug fix release) 2022-02-07 17:33:10 +01:00
x11-drivers x11-drivers/xorgxrdp: Update to 0.2.18 2022-02-08 12:55:20 +09:00
x11-fm x11-fm/doublecmd: Update to 1.0.4 2022-02-15 18:47:09 -05:00
x11-fonts x11-fonts/iansui: Update to 0.940 2022-02-24 03:45:10 +08:00
x11-servers x11-servers/xwayland-devel: update to 21.0.99.1.171 2022-02-11 13:46:52 +00:00
x11-themes KDE: Update KDE Plasma Desktop to 5.24.2 -- February Bugfix Release #2 2022-02-22 19:55:43 +01:00
x11-toolkits x11-toolkits/Makefile: attempt to unbreak INDEX 2022-02-25 19:47:17 +00:00
x11-wm x11-wm/icewm: update IceWM to version 2.9.6. 2022-02-25 06:12:18 +00:00
.arcconfig Remove history.immutable from .arcconfig 2021-04-12 17:44:02 +08:00
.gitignore Ignore Makefile.local everywhere. 2021-04-06 11:39:18 +02:00
CHANGES CHANGES: Document USES=elfctl 2022-02-18 15:06:53 -04:00
CONTRIBUTING.md CONTRIBUTING.md: Adjust link to "submitting patches" instructions. 2021-05-15 13:36:25 +02:00
COPYRIGHT COPYRIGHT: bump to 2022 2022-01-01 16:31:06 +01:00
GIDs net-p2p/readarr: new port 2022-02-24 23:48:09 -05:00
Makefile Change MASTER_SITE_INDEX to our distributed mirror 2022-01-13 16:25:20 +08:00
MOVED x11-toolkits/py-wxPython4: Update to 4.1 2022-02-25 19:10:24 +01:00
README README: Point links to the new documentation 2021-04-10 17:47:20 -03:00
UIDs net-p2p/readarr: new port 2022-02-24 23:48:09 -05:00
UPDATING x11-toolkits/py-wxPython4: Update to 4.1 2022-02-25 19:10:24 +01:00

This is the FreeBSD Ports Collection.  For an easy to use
WEB-based interface to it, please see:

	https://www.FreeBSD.org/ports

For general information on the Ports Collection, please see the
FreeBSD Handbook ports section which is available from:

	https://docs.freebsd.org/en/books/handbook/ports/
		for the latest official version
	or:
	The ports(7) manual page (man ports).

These will explain how to use ports and packages.

If you would like to search for a port, you can do so easily by
saying (in /usr/ports):

	make search name="<name>"
	or:
	make search key="<keyword>"

which will generate a list of all ports matching <name> or <keyword>.
make search also supports wildcards, such as:

	make search name="gtk*"

For information about contributing to FreeBSD ports, please see the Porter's
Handbook, available at:

	https://docs.freebsd.org/en/books/porters-handbook/

NOTE:  This tree will GROW significantly in size during normal usage!
The distribution tar files can and do accumulate in /usr/ports/distfiles,
and the individual ports will also use up lots of space in their work
subdirectories unless you remember to "make clean" after you're done
building a given port.  /usr/ports/distfiles can also be periodically
cleaned without ill-effect.