0d336a4850
Security - Fixed missing padding length check required by PKCS1 v2.2 in mbedtls_rsa_rsaes_pkcs1_v15_decrypt(). (considered low impact) - Fixed potential integer overflow to buffer overflow in mbedtls_rsa_rsaes_pkcs1_v15_encrypt() and mbedtls_rsa_rsaes_oaep_encrypt(). (not triggerable remotely in (D)TLS). - Fixed potential integer underflow to buffer overread in mbedtls_rsa_rsaes_oaep_decrypt(). It is not triggerable remotely in SSL/TLS. Bugfix - Fixed bug in mbedtls_mpi_add_mpi() that caused wrong results when the three arguments were the same (in-place doubling). #309 - Fixed issue in Makefile that prevented building using armar. #386 - Fixed issue that caused a hang when generating RSA keys of odd bitlength. - Fixed bug in mbedtls_rsa_rsaes_pkcs1_v15_encrypt() that made null pointer dereference possible. - Fixed issue that caused a crash if invalid curves were passed to mbedtls_ssl_conf_curves(). #373 Changes - On ARM platforms, when compiling with -O0 with GCC, Clang or armcc5, don't use the optimized assembly for bignum multiplication. This removes the need to pass -fomit-frame-pointer to avoid a build error with -O0. - Disabled SSLv3 in the default configuration.
38 lines
936 B
Makefile
38 lines
936 B
Makefile
# $NetBSD: Makefile,v 1.3 2016/09/15 10:48:01 fhajny Exp $
|
|
#
|
|
|
|
DISTNAME= mbedtls-1.3.17-gpl
|
|
PKGNAME= ${DISTNAME:-gpl=}
|
|
CATEGORIES= security devel
|
|
MASTER_SITES= https://tls.mbed.org/download/
|
|
EXTRACT_SUFX= .tgz
|
|
|
|
MAINTAINER= pkgsrc-users@NetBSD.org
|
|
HOMEPAGE= https://tls.mbed.org/
|
|
COMMENT= Lightweight, modular cryptographic and SSL/TLS library
|
|
LICENSE= gnu-gpl-v2
|
|
|
|
CONFLICTS+= polarssl-[0-9]*
|
|
SUPERSEDES+= polarssl-[0-9]*
|
|
|
|
WRKSRC= ${WRKDIR}/${PKGNAME_NOREV}
|
|
USE_CMAKE= yes
|
|
USE_LANGUAGES= c
|
|
USE_TOOLS+= gmake perl pkg-config
|
|
|
|
GCC_REQD+= 4.4
|
|
REPLACE_PERL= tests/scripts/*.pl
|
|
|
|
.include "options.mk"
|
|
|
|
CMAKE_ARGS+= -DUSE_SHARED_MBEDTLS_LIBRARY=ON
|
|
MAKE_ENV+= RANLIB=${RANLIB:Q}
|
|
|
|
LDFLAGS.SunOS+= -lsocket
|
|
|
|
post-install:
|
|
${CHMOD} -x ${DESTDIR}${PREFIX}/lib/libmbedtls.a
|
|
${SETENV} ${SH} ${WRKSRC}/scripts/polarssl_symlinks.sh ${DESTDIR}${PREFIX}/lib
|
|
|
|
.include "../../mk/pthread.buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|