pkgsrc/security/mbedtls1/Makefile
fhajny 0d336a4850 Update security/mbedtls1 to 1.3.17
Security
- Fixed missing padding length check required by PKCS1 v2.2 in
  mbedtls_rsa_rsaes_pkcs1_v15_decrypt(). (considered low impact)
- Fixed potential integer overflow to buffer overflow in
  mbedtls_rsa_rsaes_pkcs1_v15_encrypt() and
  mbedtls_rsa_rsaes_oaep_encrypt(). (not triggerable remotely in
  (D)TLS).
- Fixed potential integer underflow to buffer overread in
  mbedtls_rsa_rsaes_oaep_decrypt(). It is not triggerable remotely
in SSL/TLS.

Bugfix
- Fixed bug in mbedtls_mpi_add_mpi() that caused wrong results
  when the three arguments were the same (in-place doubling). #309
- Fixed issue in Makefile that prevented building using armar.
  #386
- Fixed issue that caused a hang when generating RSA keys of odd
  bitlength.
- Fixed bug in mbedtls_rsa_rsaes_pkcs1_v15_encrypt() that made
  null pointer dereference possible.
- Fixed issue that caused a crash if invalid curves were passed to
  mbedtls_ssl_conf_curves(). #373

Changes
- On ARM platforms, when compiling with -O0 with GCC, Clang or
  armcc5, don't use the optimized assembly for bignum
  multiplication. This removes the need to pass -fomit-frame-pointer
  to avoid a build error with -O0.
- Disabled SSLv3 in the default configuration.
2016-09-15 10:48:01 +00:00

38 lines
936 B
Makefile

# $NetBSD: Makefile,v 1.3 2016/09/15 10:48:01 fhajny Exp $
#
DISTNAME= mbedtls-1.3.17-gpl
PKGNAME= ${DISTNAME:-gpl=}
CATEGORIES= security devel
MASTER_SITES= https://tls.mbed.org/download/
EXTRACT_SUFX= .tgz
MAINTAINER= pkgsrc-users@NetBSD.org
HOMEPAGE= https://tls.mbed.org/
COMMENT= Lightweight, modular cryptographic and SSL/TLS library
LICENSE= gnu-gpl-v2
CONFLICTS+= polarssl-[0-9]*
SUPERSEDES+= polarssl-[0-9]*
WRKSRC= ${WRKDIR}/${PKGNAME_NOREV}
USE_CMAKE= yes
USE_LANGUAGES= c
USE_TOOLS+= gmake perl pkg-config
GCC_REQD+= 4.4
REPLACE_PERL= tests/scripts/*.pl
.include "options.mk"
CMAKE_ARGS+= -DUSE_SHARED_MBEDTLS_LIBRARY=ON
MAKE_ENV+= RANLIB=${RANLIB:Q}
LDFLAGS.SunOS+= -lsocket
post-install:
${CHMOD} -x ${DESTDIR}${PREFIX}/lib/libmbedtls.a
${SETENV} ${SH} ${WRKSRC}/scripts/polarssl_symlinks.sh ${DESTDIR}${PREFIX}/lib
.include "../../mk/pthread.buildlink3.mk"
.include "../../mk/bsd.pkg.mk"