Commit graph

107 commits

Author SHA1 Message Date
Dirk Meyer
2a562c4fbf - ### HEAD UP ### SHLIBVER has been bumped back.
- honor OPENSSH_SHLIBVER if set by user.
2003-04-16 14:44:05 +00:00
Dirk Meyer
ca0b5f5d3e - Update to 0.9.7b 2003-04-11 18:29:57 +00:00
Dirk Meyer
605d36542b - enable threads on ia64
- OPENSSL_OVERWRITE_BASE
  defaults to STABLE/CURRENT shared lib version
  This solves problems when the share lib is deinstalled.
  ports/50292
PR:		50292
2003-04-07 05:50:39 +00:00
Dirk Meyer
511ef527ff - honor CC and use PHREAD_LIBS and PTHREAD_FLAGS
Submitted by:	marius@alchemy.franken.de
2003-04-03 18:25:48 +00:00
Dirk Meyer
018fc2c474 - Security Fix:
http://www.openssl.org/news/secadv_20030319.txt
2003-03-23 04:49:53 +00:00
Dirk Meyer
1f094f8114 - switch to USE_PERL5_BUILD
- add security patch
Approved by:	kris
Obtained from:	http://www.openssl.org/news/secadv_20030317.txt
2003-03-19 06:28:03 +00:00
Dirk Meyer
4eb8d6d1fa - retire pkg-comment 2003-02-21 03:59:00 +00:00
Dirk Meyer
387f34ee24 - add COMMENT 2003-02-20 18:26:42 +00:00
Dirk Meyer
6640a69d85 - merged some patches in distribution
- added thread support on alpha, sparc64
- Update to 0.9.7a (with security fix)
- Add support for daily snaphots with OPENSSL_SNAPSHOT=yes
2003-02-19 21:12:09 +00:00
Dirk Meyer
154dd8fa77 - sync SHLIBVER for OPENSSL_OVERWRITE_BASE=yes and 5.0-CURRENT 2003-02-15 07:01:44 +00:00
Dirk Meyer
268f4e5810 - Fix spelling 2003-02-09 05:45:04 +00:00
Dirk Meyer
4686c6597f - Fix CURRENT version bump in openssl, so ports link as expected. 2003-01-31 19:54:56 +00:00
Dirk Meyer
09666e3dd5 - make portlint happier 2003-01-22 19:14:08 +00:00
Dirk Meyer
71a7a62ba2 - merge and sort manpages, reduce number of lines needed 2003-01-15 20:39:30 +00:00
Dirk Meyer
fa9faa8ae7 - use NOPRECIOUSMAKEVARS, to fix bento problem
- remove BROKEN_MLINKS
2003-01-15 18:33:07 +00:00
Dirk Meyer
2f9fb31005 add more MLINKS 2003-01-14 13:17:07 +00:00
Dirk Meyer
adba27c3f0 - cleanup patch 2003-01-13 05:55:02 +00:00
Dirk Meyer
32f0c0d8ce - add flag BROKEN_MLINKS for problems with bsd.port.mk
- sync with openssl
- verfied for ia64
2003-01-12 07:53:20 +00:00
Dirk Meyer
12d04ad4bc - Clean up FLAGS for sparc64, verfied build and regression
- Prepare entries for ia64
2003-01-11 10:55:39 +00:00
Dirk Meyer
c22367e75a fix missing : for sparc64 only 2003-01-02 19:58:40 +00:00
Dirk Meyer
c0e6e0a6f0 Update to 0.9.7 release 2003-01-02 17:36:56 +00:00
Dirk Meyer
f2b1971c32 - Update to 0.9.7-beta5
- add test target
- make build on sparc64
- fix a make problem in crypto/bf
2003-01-02 04:19:17 +00:00
Dirk Meyer
1f8692d63c - add rnd_keys.c for compatibilty with base. (patch by: jtraub@isilon.com)
- OPENSSL_OVERWRITE_BASE: fix package building
- Fix install of manpages for 3.x
2002-10-25 20:41:47 +00:00
Dirk Meyer
1d625b6381 remove pkg-plist.noshared and use PLIST_SUB 2002-10-16 18:29:36 +00:00
Dirk Meyer
d0600d1dae Install manpages in standard only if OPENSSL_OVERWRITE_BASE is not set. 2002-10-12 21:04:39 +00:00
Dirk Meyer
ed97522b83 Install openssl's man pages in standard manpath
PR:		43658
2002-10-12 20:27:59 +00:00
Dirk Meyer
31ff62035b use /etc/ssl if OPENSSL_OVERWRITE_BASE is set 2002-10-05 17:25:22 +00:00
Dirk Meyer
5d48c3b46f Update to openssl-0.9.7-beta3 after repro-copy, use at own risk. 2002-08-14 19:48:07 +00:00
Dirk Meyer
183c3e7862 Security Update to: 0.9.6g 2002-08-10 08:30:39 +00:00
Dirk Meyer
6120fd5185 Sync Bugfix from CURRENT 2002-08-06 05:46:17 +00:00
Marc Fonvieille
deef46806d Fix links to the Handbook, the FAQ and the porters-handbook.
Approved by:	portmgr
2002-08-04 09:04:12 +00:00
Dirk Meyer
05e82aa029 when build with OPENSSL_OVERWRITE_BASE
reset SHLIBVER to 2, so the existing lib is overwritten fully.
Warning: some programs track the version number internally too.
Suggested by:nectar
2002-08-01 17:31:06 +00:00
Dirk Meyer
6beb927cde Security Update to 0.9.6e 2002-07-30 17:38:18 +00:00
Dirk Meyer
0b1516b7ba Remove FORBIDDEN, oenssl-0.9.6d doesn't made in into 4.6 RELEASE 2002-06-23 21:14:58 +00:00
Dirk Meyer
9805082a11 Add an option OPENSSL_OVERWRITE_BASE=yes as we have done in OPENSHH 2002-06-16 14:04:49 +00:00
Dirk Meyer
65e2b09e20 - get rid of duplicate code in Makefiles.
- Fix USE_OPENSSL_PORT and USE_OPENSSL_BASE
- drop obsolete/broken USE_OPENSSL
2002-05-31 20:51:48 +00:00
Dirk Meyer
227e98a413 Update to: 0.9.6d
See:
http://www.openssl.org/source/exp/CHANGES

Port improvements:
proccessor type is now detected

Add option: OPENSSL_WITH_386
This set as default for package generation on bento
2002-05-13 18:54:03 +00:00
Dirk Meyer
dd32b25a29 openssl:
- some configure scripts check the version of the lib
  so we need to update SHLIBVER
- bump PORTREVISION

openssh:
- build ports with local openssl, if it exists
2002-05-04 04:38:12 +00:00
Dirk Meyer
cd87949d28 - Update to 0.9.6c
- more manpages
- shift FORBIDDEN

 Excerpt of Changes between 0.9.6b and 0.9.6c  [21 dec 2001]
  *) Fix BN_rand_range bug pointed out by Dominikus Scherkl
  *) Only add signing time to PKCS7 structures if it is not already present.
  *) Fix crypto/objects/objects.h: "ld-ce" should be "id-ce", OBJ_ld_ce
     should be OBJ_id_ce.  Also some ip-pda OIDs in crypto/objects/objects.txt
     were incorrect (cf. RFC 3039).
  *) Release CRYPTO_LOCK_DYNLOCK when CRYPTO_destroy_dynlockid()
     returns early because it has nothing to do.
  *) Fix mutex callback return values in crypto/engine/hw_ncipher.c.
  *) Change ssl/s2_clnt.c and ssl/s2_srvr.c so that received handshake
     messages are stored in a single piece (fixed-length part and
     variable-length part combined) and fix various bugs found on the way.
  *) Disable caching in BIO_gethostbyname(), directly use gethostbyname()
     instead.  BIO_gethostbyname() does not know what timeouts are
     appropriate, so entries would stay in cache even when they have
     become invalid.
  *) Change ssl23_get_client_hello (ssl/s23_srvr.c) behaviour when
     faced with a pathologically small ClientHello fragment that does
     not contain client_version: Instead of aborting with an error,
     simply choose the highest available protocol version (i.e.,
     TLS 1.0 unless it is disabled).
  *) Fix SSL handshake functions and SSL_clear() such that SSL_clear()
     never resets s->method to s->ctx->method when called from within
     one of the SSL handshake functions.
  *) In ssl3_get_client_hello (ssl/s3_srvr.c), generate a fatal alert
     (sent using the client's version number) if client_version is
     smaller than the protocol version in use.  Also change
     ssl23_get_client_hello (ssl/s23_srvr.c) to select TLS 1.0 if
     the client demanded SSL 3.0 but only TLS 1.0 is enabled; then
     the client will at least see that alert.
  *) Fix ssl3_get_message (ssl/s3_both.c) to handle message fragmentation
     correctly.
  *) Avoid infinite loop in ssl3_get_message (ssl/s3_both.c) if a
     client receives HelloRequest while in a handshake.
  *) Bugfix in ssl3_accept (ssl/s3_srvr.c): Case SSL3_ST_SW_HELLO_REQ_C
     should end in 'break', not 'goto end' which circuments various
     cleanups done in state SSL_ST_OK.   But session related stuff
     must be disabled for SSL_ST_OK in the case that we just sent a
     HelloRequest.  Also avoid some overhead by not calling
     ssl_init_wbio_buffer() before just sending a HelloRequest.
  *) Fix ssl/s3_enc.c, ssl/t1_enc.c and ssl/s3_pkt.c so that we don't
     reveal whether illegal block cipher padding was found or a MAC
     verification error occured.  (Neither SSLerr() codes nor alerts
     are directly visible to potential attackers, but the information
     may leak via logfiles.) ssl/s2_pkt.c failed to verify that the
     purported number of padding bytes is in the legal range.
  *) Improve RSA_padding_check_PKCS1_OAEP() check again to avoid
     'wristwatch attack' using huge encoding parameters (cf.
     James H. Manger's CRYPTO 2001 paper).  Note that the
     RSA_PKCS1_OAEP_PADDING case of RSA_private_decrypt() does not use
     encoding parameters and hence was not vulnerable.
  *) BN_sqr() bug fix.
  *) Rabin-Miller test analyses assume uniformly distributed witnesses,
     so use BN_pseudo_rand_range() instead of using BN_pseudo_rand()
     followed by modular reduction.
  *) Add BN_pseudo_rand_range() with obvious functionality: BN_rand_range()
     equivalent based on BN_pseudo_rand() instead of BN_rand().
  *) s3_srvr.c: allow sending of large client certificate lists (> 16 kB).
     This function was broken, as the check for a new client hello message
     to handle SGC did not allow these large messages.
  *) Add alert descriptions for TLSv1 to SSL_alert_desc_string[_long]().
  *) Fix buggy behaviour of BIO_get_num_renegotiates() and BIO_ctrl()
     for BIO_C_GET_WRITE_BUF_SIZE ("Stephen Hinton" <shinton@netopia.com>).
  *) In ssl3_get_key_exchange (ssl/s3_clnt.c), call ssl3_get_message()
     with the same message size as in ssl3_get_certificate_request().
     Otherwise, if no ServerKeyExchange message occurs, CertificateRequest
     messages might inadvertently be reject as too long.
  *) Modified SSL library such that the verify_callback that has been set
     specificly for an SSL object with SSL_set_verify() is actually being
     used. Before the change, a verify_callback set with this function was
     ignored and the verify_callback() set in the SSL_CTX at the time of
     the call was used. New function X509_STORE_CTX_set_verify_cb() introduced
     to allow the necessary settings.
  *) In OpenSSL 0.9.6a and 0.9.6b, crypto/dh/dh_key.c ignored
     dh->length and always used
          BN_rand_range(priv_key, dh->p).
     So switch back to
          BN_rand(priv_key, l, ...)
     where 'l' is dh->length if this is defined, or BN_num_bits(dh->p)-1
     otherwise.
  *) In RSA_eay_public_encrypt, RSA_eay_private_decrypt, RSA_eay_private_encrypt
     RSA_eay_public_decrypt always reject numbers >= n.
  *) In crypto/rand/md_rand.c, use a new short-time lock CRYPTO_LOCK_RAND2
     to synchronize access to 'locking_thread'.
  *) In crypto/rand/md_rand.c, set 'locking_thread' to current thread's ID
     *before* setting the 'crypto_lock_rand' flag.  The previous code had
     a race condition if 0 is a valid thread ID.
2002-04-21 13:02:08 +00:00
Dirk Meyer
2025ba84ee - make portlint happier
- use DOCSDIR or EXAMPLESDIR
- get rid of some INTERACTIVE scrips in news/ifmail
2002-01-05 23:43:13 +00:00
Patrick Li
b666502afd - PORTDOCS police
- DOCSDIR support to some
- Brush out some lint
2001-12-24 02:17:17 +00:00
Mario Sergio Fujikawa Ferreira
75ad5febcb Style police: WWW tags should either end in a file/script or TRAILING /; Fix the later case 2001-11-20 23:29:38 +00:00
Dirk Meyer
fe7b81b2eb Allow to build libcrypto.so.2 for 4.0, 4,1 and 4.2 RELEASE
so dependent ports can build correctly.
2001-09-03 18:53:44 +00:00
OKAZAKI Tetsurou
2e730301a1 Upgrade openssl to 0.9.6b. 2001-07-20 14:24:10 +00:00
OKAZAKI Tetsurou
2d0a1eee6a Make it buildable on 2.2-STABLE again. 2001-07-07 23:34:36 +00:00
Doug Barton
44e687d0d7 Upgrade openssl to 0.9.6a and bump the shlib version in the process
due to non-backwards compatible changes. The shlib bump necessitates
a corresponding bump in bsd.port.mk for the automagic openssl
dependency. Mistakes in the port are my responsibility. Approval for
the bsd.port.mk commit comes through asami -> kkenn -> me. Kris is
a little busy at the moment, so he asked me to lob it in.

Approved by:	kris
2001-05-23 02:47:02 +00:00
Maxim Sobolev
34462bb3fa 1. In addition to OSVERSION test, check for existence of /usr/lib/libssl.a
and don't mark BROKEN if it doesn't exist.
2. Provide a workaround for inability of recent gcc to link shared library
when -Wl,-whole-archive ld(1) option is used. This should make possible to
build the port on recent -stable or -current.
2001-04-22 18:42:35 +00:00
Dirk Froemberg
36ad4ecd0a Hand out maintainership to ports@FreeBSD.org.
I don't use any 3.x system any longer.
2001-02-18 13:35:14 +00:00
Alfred Perlstein
1f27b851f6 give aout machines shared libraries as well 2001-02-10 01:30:47 +00:00
Satoshi Asami
7acef1cd7a Change PKGDIR from pkg/ to . Also fix places where ${PKGDIR} is
spelled out (many of which are ${PKGDIR}/MESSAGE -> ${PKGMESSAGE} type
fixes that shouldn't have been necessary) and the string "/pkg/"
appear.
2000-10-08 10:23:48 +00:00