Commit graph

110 commits

Author SHA1 Message Date
Carlos J. Puga Medina
4eba609e1a security/libgcrypt: Fix build for powerpc/powerpcspe
- Add the missing check for powerpcspe- and powerpc- in mpi/config.links

Submitted by:	jhibbits
Approved by:	cpm (maintainer)
Differential Revision:	https://reviews.freebsd.org/D13854
2018-01-22 12:32:04 +00:00
Carlos J. Puga Medina
1ed461b118 security/libgcrypt: update to 1.8.2
- Update libgcrypt to 1.8.2
- Bump library version in pkg-plist

Changelog: https://abi-laboratory.pro/tracker/changelog/libgcrypt/1.8.2/log.html
Binary compatibility report: https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.8.1/1.8.2/29a74/abi_compat_report.html

MFH:		2017Q4
2017-12-15 22:05:55 +00:00
Carlos J. Puga Medina
5243e160ac security/libgcrypt: update to 1.8.1
- Update libgcrypt to 1.8.1
- Bump library version in pkg-plist

Noteworthy changes in version 1.8.1

 * Bug fixes:

   - Mitigate a local side-channel attack on Curve25519 dubbed "May
     the Fourth be With You".  [CVE-2017-0379] [also in 1.7.9]

   - Add more extra bytes to the pool after reading a seed file.

   - Add the OID SHA384WithECDSA from RFC-7427 to SHA-384.

   - Fix build problems with the Jitter RNG

   - Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE).

Changes: https://abi-laboratory.pro/tracker/changelog/libgcrypt/1.8.1/log.html
Binary compatibility report: https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.8.0/1.8.1/31172/abi_compat_report.html

MFH:		2017Q3
Security:	https://vuxml.freebsd.org/freebsd/22f28bb3-8d98-11e7-8c37-e8e0b747a45a.html
2017-08-30 15:52:59 +00:00
Carlos J. Puga Medina
d9255f6228 - Fix the command line munging for jitterbase
PR:		220937
Reported by:	O. Hartmann <ohartmann@walstatt.org>
Obtained from:	https://dev.gnupg.org/rCac39522ab08fcd2483edc223334c6ab9d19e91f3
MFH:		2017Q3 (blanket)
2017-08-01 12:10:13 +00:00
Jung-uk Kim
f872930d0e Set MAKEINFO to the full path of makeinfo when USES=makeinfo is set.
PR:		221027
Reviewed by:	mat
Approved by:	portmgr (antoine)
2017-07-28 21:45:20 +00:00
Carlos J. Puga Medina
1f3a5f49dd - Remove unnecessary extra-patch-aarch64 (applied upstream)
Reported by:	Shawn Webb <shawn.webb@hardenedbsd.org> via email
MFH:		2017Q3 (blanket)
2017-07-22 01:05:15 +00:00
Carlos J. Puga Medina
ade7d59f8b security/libgcrypt: update to 1.8.0
- Update libgcrypt to 1.8.0
- Update libgpg-error version required to 1.25
- Bump library version in pkg-plist

Changes: https://lists.gnupg.org/pipermail/gnupg-announce/2017q3/000410.html
Binary compatibility report: https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.7.8/1.8.0/d9ddd/abi_compat_report.html

PR:		220858
MFH:		2017Q3
Exp-run by:	antoine
2017-07-21 10:56:16 +00:00
Carlos J. Puga Medina
090d2c758d security/libgcrypt: update to 1.7.8
- Update libgcrypt to 1.7.8
- Bump library version in pkg-plist

Noteworthy changes in version 1.7.8

 * Bug fixes:

   - Mitigate a flush+reload side-channel attack on RSA secret keys
     dubbed "Sliding right into disaster".  For details see
     <https://eprint.iacr.org/2017/627>.  [CVE-2017-7526]

Changes: https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html
Binary compatibility report: https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.7.7/1.7.8/95cc7/abi_compat_report.html

PR:		220382
MFH:		2017Q3
Exp-run by:	antoine
Security:	https://www.vuxml.org/freebsd/ed3bf433-5d92-11e7-aa14-e8e0b747a45a.html
2017-07-04 17:38:30 +00:00
Carlos J. Puga Medina
aec326658b security/libgcrypt: update to 1.7.7
- Update libgcrypt to 1.7.7
- Silence all explicitly called commands
- Update WWW in pkg-descr: use https://
- Bump library version in pkg-plist

Noteworthy changes in version 1.7.7

* Bug fixes:

  - Fix possible timing attack on EdDSA session key.
  - Fix long standing bug in secure memory implementation which could
     lead to a segv on free. [bug#3027].

PR:		219747
MFH:		2017Q2
Exp-run by:	antoine
2017-06-07 11:35:51 +00:00
Carlos J. Puga Medina
72ec346ff3 - Patch only applies to aarch64. Remove armv6 check.
Reported by:	jbeich
MFH:		2017Q1 (blanket)
2017-03-09 00:15:56 +00:00
Carlos J. Puga Medina
5415214b17 security/libgcrypt: fix build on aarch64
libtool: compile:  cc -DHAVE_CONFIG_H -I. -I.. -I../src -I../src -Wa,--noexecstack -O2 -pipe -fno-strict-aliasing -std=gnu89 -MT cipher-gcm-armv8-aarch64-ce.lo -MD -MP -MF .deps/cipher-gcm-armv8-aarch64-ce.Tpo -c cipher-gcm-armv8-aarch64-ce.S  -fPIC -DPIC -o .libs/cipher-gcm-armv8-aarch64-ce.o
cipher-gcm-armv8-aarch64-ce.S:190:3: error: instruction requires: neon
eor v31.16b, v31.16b, v31.16b
  ^

PR:		217271
Submitted by:	krion
Reported by:	Simon Rozman <simon@rozman.si>
MFH:		2017Q1 (blanket)
2017-02-28 12:21:13 +00:00
Carlos J. Puga Medina
43986ed777 security/libgcrypt: update to 1.7.6
Noteworthy changes in version 1.7.6

* Bug fixes:

  - Fix AES CTR self-check detected failure in the SSSE3 based
     implementation.
  - Remove gratuitous select before the getrandom syscall.

PR:		216305
MFH:		2017Q1
Exp-run by:	antoine
2017-01-23 12:12:13 +00:00
Carlos J. Puga Medina
9988dc2464 security/libgcrypt: Update to 1.7.5
- Update to 1.7.5
- Remove files useless to install from DOCS
- Remove patch since sparc v8 is not supported on FreeBSD
- Bump library version in pkg-plist

Changelog:
  https://lists.gnupg.org/pipermail/gnupg-announce/2016q4/000399.html

PR:		215236
Approved by:	amdmi3 (mentor)
MFH:		2016Q4
Exp-run by:	antoine
2016-12-23 15:45:00 +00:00
Mathieu Arnold
eabbfd75e3 ${RM} already has -f.
PR:		213570
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
2016-10-21 12:51:40 +00:00
Carlos J. Puga Medina
43452f5129 - Update to 1.7.3 (security fixes)
- Bump library version in pkg-plist

ref: https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html

Reviewed by:	amdmi3 (mentor)
Approved by:	amdmi3 (mentor)
MFH:	2016Q3
Differential Revision:	D7558
2016-08-18 11:24:48 +00:00
Carlos J. Puga Medina
944a4540ff - Update to 1.7.2
- Bump library version in pkg-plist

Changelog:
  https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000392.html

PR:	211153
Reviewed by:	junovitch (mentor)
Approved by:	junovitch (mentor)
MFH:		2016Q3
Exp-run:	antoine
Differential Revision:	D7221
2016-07-20 09:09:43 +00:00
Carlos J. Puga Medina
77a17abea6 - Update to 1.7.1
- Remove unneeded patch (applied upstream)
- Convert to new test framework

  https://lists.gnupg.org/pipermail/gnupg-announce/2016q2/000389.html

PR:		210328
Reviewed by:	amdmi3, junovitch (mentors)
Approved by:	amdmi3, junovitch (mentors)
MFH:		2016Q2
Exp-run:	antoine
Differential Revision:	D6865
2016-06-17 23:00:27 +00:00
Carlos J. Puga Medina
2420df6065 - Update to 1.7.0
- Remove unneeded patches (applied upstream)
- Fix inline assembler error on 9.x
- Fix pkg-plist

Changelog: https://lists.gnupg.org/pipermail/gnupg-announce/2016q2/000386.html

PR:		208907
Approved by:	junovitch (mentor)
Exp-run:	antoine
Differential Revision:	D5989
2016-04-23 10:01:20 +00:00
Mathieu Arnold
597afc47ba Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.
With hat:	portmgr
Sponsored by:	Absolight
2016-04-01 14:25:16 +00:00
Carlos J. Puga Medina
ca0a94e904 - cipher/salsa20.c (selftest): Ensure 16-byte alignment for salsa20
context structure.

- mpi/longlong.h: Fix build on sparc.

PR:		206919
Approved by:	junovitch (mentor)
2016-03-28 23:41:45 +00:00
Carlos J. Puga Medina
071a12b872 - Update libgcrypt to 1.6.5
- Change LICENSE since support has been added for "or later" variants of GNU licenses.
- Remove needless patch-cipher_salsa20.c

Changes:
  https://lists.gnupg.org/pipermail/gnupg-announce/2016q1/000384.html

PR:		207107
Approved by:	junovitch (mentor)
2016-02-16 02:52:56 +00:00
Carlos J. Puga Medina
9905a1a102 This patch fixes alignment of self-test context in salsa20 required
for amd64 implementation.

Other changes:
   - Regenerate patches to make portlint(1) happy
   - Update MAINTAINER to my @FreeBSD.org address
   - Bump PORTREVISION

PR:		206919
Approved by:	junovitch (mentor)
2016-02-08 20:54:10 +00:00
Raphael Kubo da Costa
a924b9c755 Add upstream commit to fix build errors with -pedantic.
This fixes at least devel/ccrtp's build on 9.3, which is currently broken:

  In file included from ccrtp/crypto/gcrypt/gcrypthmac.cpp:23:
  /usr/local/include/gcrypt.h:509: error: comma at end of enumerator list
  /usr/local/include/gcrypt.h:1346: error: comma at end of enumerator list
  Makefile:571: recipe for target 'gcrypthmac.lo' failed

MFH'ing this is not necessary, this bug is only present in libgcrypt 1.6.4.

PR:		205000
Approved by:	maintainer timeout (15 days)
2015-12-18 12:25:01 +00:00
Kurt Jaeger
ffb2f86e9f security/libgcrypt: Re-add missing patch
- This patch was removed when updating to 1.6.4, so the patch needs
  to be put back in order to solve the bug 204399.

PR:		204600
Submitted by:	Carlos J. Puga Medina <cpm@fbsd.es> (maintainer)
2015-11-22 17:33:05 +00:00
Sean Bruno
343a083fb9 Enable the building and installation of the .a version of the library
for static linking.  This affects emulators/qemu-user-static primarily
but will help anyone trying to statically link their applications.

Reviewed by:	tijl cpm@fbsd.es (Maintainer)
2015-10-29 14:30:24 +00:00
Sunpoet Po-Chuan Hsieh
d929b71224 - Update to 1.8.4
Changes:	http://lists.gnupg.org/pipermail/gnupg-announce/2015q3/000375.html
PR:		204003
Submitted by:	Carlos J Puga Medina <cpm@fbsd.es> (maintainer)
2015-10-27 15:54:54 +00:00
Dmitry Marakasov
6179e5ed58 - Drop 8.x support
- Switch to options helpers

Approved by:	portmgr blanket
2015-09-20 19:22:28 +00:00
Mathieu Arnold
60d1a83c2a MASTER_SITES cleanup.
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight
2015-05-14 10:15:04 +00:00
Sunpoet Po-Chuan Hsieh
fb231e1650 - Add CPE information
PR:		198985
Submitted by:	Carlos Jacobo Puga Medina <cpm@fbsd.es> (maintainer)
2015-03-28 12:42:08 +00:00
Baptiste Daroussin
3f9395d599 Remove Author from pkg-descr and white space fixes 2015-03-02 23:41:59 +00:00
Kurt Jaeger
c25d5f97ad security/libgcrypt: 1.6.2 -> 1.6.3
Changes:
http://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.html

PR:		198109
Submitted by:	Carlos Jacobo Puga Medina <cpm@fbsd.es> (maintainer)
2015-02-28 21:11:53 +00:00
Kurt Jaeger
b4bb164508 security/libgcrypt: fix some issues
- Fix crash at cipher/salsa20.c module on amd64.
- Fix strip shared object.
- Bump PORTREVISION.

PR:		197146
Submitted by:	cpm@fbsd.es (maintainer)
2015-02-07 07:25:22 +00:00
Kurt Jaeger
cba03c03e1 security/libgcrypt: 1.6.1 -> 1.6.2, bump depends
Changes:
- src/sexp.c (do_vsexp_sscan): Return error for invalid args.
- cipher/md.c (_gcry_md_info): Fix a segv in case of calling
  with wrong parameters.
- cipher/primegen.c (_gcry_generate_elg_prime): Change to return an
  error code, possible NULL deref in call to prime generator.
- cipher/dsa.c (generate): Take care of new return code.
- cipher/elgamal.c (generate): Change to return an error code.  Take
	care of _gcry_generate_elg_prime return code.
- ecc: Support the non-standard 0x40 compression flag for EdDSA.
- mpi: Extend the internal mpi_get_buffer.
- mpi: Fix regression for powerpc-apple-darwin detection.
- Fix bug inhibiting the use of the sentinel attribute in src/gcrypt.h.in
- Fix building for the x32 target without asm modules in
  mpi/generic/mpi-asm-defs.h: Use a fixed value for the x32 ABI.
- Fix ARM assembly when building __PIC__
- mpi: Fix a subtle bug setting spurious bits with in mpi_set_bit.
  * mpi/mpi-bit.c (_gcry_mpi_set_bit, _gcry_mpi_set_highbit): Clear
    allocated but not used bits before resizing.
  * tests/t-mpi-bits.c (set_bit_with_resize): New.
- Use internal malloc function in fips.c.
  * src/fips.c (check_binary_integrity): s/gcry_malloc/xtrymalloc/.
- pubkey: Re-map all deprecated RSA algo numbers.
- cipher: Fix possible NULL dereference in cipher/md.c for being NULL.
- Fix ARMv6 detection when CFLAGS modify target CPU architecture.

PR:		193264
Approved by:	cpm@fbsd.es (maintainer)
2015-01-02 18:46:33 +00:00
Kurt Jaeger
2fa1508f98 security/libgcrypt: fix build with GCC on 8.x/amd64, 2nd attempt
Thanks to tijl@ for spotting the Makefile bug.

PR:		192555
Submitted by:	Carlos Jacobo Puga Medina <cpm@fbsd.es>
Approved by:	maintainer (timeout)
2014-09-04 17:28:34 +00:00
Kurt Jaeger
04e41683da security/libgcrypt: fix build without assembler on 8.x/amd64
PR:		192555
Submitted by:	Carlos Jacobo Puga Medina <cpm@fbsd.es>
Approved by:	maintainer (timeout)
2014-09-02 20:47:43 +00:00
Tijl Coosemans
74a7f8c73c Bump PORTREVISION on more ports that depend on libgcrypt after the update
in r363436 and remove the UPDATING entry because it did not guarantee
that all ports were updated nor that they were updated in the right order.
Also remove libgcrypt.la again.

PR:		192342
Approved by:	portmgr (implicit, bump unstaged ports)
2014-08-05 22:13:29 +00:00
Kurt Jaeger
9d3ee67dde devel/security: re-add .la file
- py-gnome-extras (and others) depend on it

PR:		192342
Submitted by:	freebsd@johnlevine.com
2014-08-02 21:57:14 +00:00
Kurt Jaeger
6cd62d0b22 security/libgcrypt: avoid non-portable use of assembler instruction on amd64
PR:		191256
Submitted by:	arcade@b1t.name
2014-07-31 18:30:51 +00:00
Kurt Jaeger
b95d127471 security/libgcrypt: 1.5.3_3 -> 1.6.1
- Update to 1.6.1
- Remove some unneeded patches
- Fix pkg-plist
- report configure bug upstream
  https://bugs.g10code.com/gnupg/issue1668
- report API breakage downstream and find that MacPorts had the same issue
  https://rt.cpan.org/Ticket/Display.html?id=97201
- bump PORTREVISION for dependent ports (approx. 100 ports)
- Thanks to exp-run by antoine@ to find ports that break
- patch ports that would otherwise break
  security/shishi with PR 192164 is already committed
  [1] devel/ccrtp
  [2] editors/abiword
  [3] security/p5-Crypt-GCrypt

PR:		191256, 192162 [1], 192163 [2], 192166 [3]
Submitted by:	Carlos Jacobo Puga Medina <cjpugmed@gmail.com>
Approved by:	maintainer timeout, antoine (exp-run), portmgr (implicit)
2014-07-30 03:57:23 +00:00
Adam Weinberger
5d2373a092 Add DOCS to OPTIONS_DEFINE to ports that check for PORT_OPTIONS:MDOCS. 2014-07-15 16:57:39 +00:00
Sean Bruno
915a5e6156 Added needed ASM instructions for armv6 architecture support.
PR:	190848
Submitted by:	andrew@freebsd.org
Reviewed by:	mat@freebsd.org
2014-07-05 23:19:05 +00:00
Baptiste Daroussin
698f728a34 Fix build on system built WITHOUT_INFO
With hat:	portmgr
2014-06-25 08:58:09 +00:00
Tijl Coosemans
aad09bc5e2 When linking a library libA with a library libB using libtool, if libB.la
exists, libtool will add all libraries libB.la refers to (dependency_libs
field) to the linker command line and store them in the dependency_libs
field of libA.la.  So everything that subsequently links with libA will also
link to these extra libraries.  This causes too much overlinking.

This commit modifies Mk/Uses/libtool.mk so it empties the dependency_libs
field in .la libraries during staging.  However, because .la libraries have
very limited use when dependency_libs is empty it makes sense to completely
remove them during staging.

So with this commit USES=libtool is modified to remove .la libraries and a
new form (USES=libtool:keepla) is introduced in case they need to be kept
(dependency_libs is still emptied).

PORTREVISION is bumped on all ports with USES=libtool that install .la
libraries.  Most ports are also changed to add :keepla because .la
libraries have to be kept around as long as there are dependent ports with
.la libraries that refer to them in their dependency_libs field.  In most
cases :keepla can be removed again as soon as all dependent ports that
install .la libraries have some form of USES=libtool added to their
Makefile.

PR:		ports/188759
Exp-run:	bdrewery
Approved by:	portmgr (bdrewery)
2014-04-23 13:25:16 +00:00
Tijl Coosemans
7553bc456a - USES=libtool tar:bzip2.
- Enable asm on FreeBSD/i386 >= 10.0.
- Enable asm on FreeBSD/amd64. [1]
- Use MAKE_CMD instead of MAKE to run regression tests.

PR:		ports/187441
Submitted by:	Stoyan Dimov <pr.freebsd.org@registrations.systeem.com> [1]
Approved by:	maintainer timeout (2 weeks)
2014-04-01 13:12:28 +00:00
Gerald Pfeifer
7e339abf8a Replace USE_GCC=4.2+ by USE_GCC=any. [1]
And USE_GMAKE by USES=gmake where touching a port because of the above.

Approved by:	portmgr (bapt) [1]
2014-03-01 21:23:14 +00:00
Kubilay Kocak
2949ca87af security/libgcrypt: Remove BROKEN on powerpc
- Remove BROKEN on powerpc [1]
- Enable STAGE support

PR:		ports/183066
Submitted by:	jhibbits
Approved by:	maintainer timeout (1 month)
2013-12-14 05:06:17 +00:00
Baptiste Daroussin
a65ed2e51b Add NO_STAGE all over the place in preparation for the staging support (cat: security) 2013-09-20 22:55:24 +00:00
Rui Paulo
f7ad576cca Use GCC 4.2+ on armv6.
Reviewed by:	umq
Approved by:	umq
2013-08-20 05:31:34 +00:00
Brendan Fabeny
4ce32e9298 Update security/libgcrypt to 1.5.3 [1], and document the latest gnupg
and libgcrypt vulnerability

PR:		181231
Submitted by:	Hirohisa Yamaguchi (maintainer) [1]
Security:	http://www.vuxml.org/freebsd/689c2bf7-0701-11e3-9a25-002590860428.html
2013-08-17 07:56:12 +00:00
Emanuel Haupt
d6666c0ddc Update to 1.5.2
Changelog:
http://lists.gnupg.org/pipermail/gnupg-announce/2013q1/000324.html (1.5.1)
http://lists.gnupg.org/pipermail/gnupg-announce/2013q2/000325.html (1.5.2)

PR:             177100
Submitted by:   Hirohisa Yamaguchi <umq@ueo.co.jp> (maintainer)
2013-05-03 16:35:24 +00:00