db2ea0bcaa
= mbed TLS 2.16.6 branch released 2020-04-14
Security
* Fix side channel in ECC code that allowed an adversary with access to
precise enough timing and memory access information (typically an
untrusted operating system attacking a secure enclave) to fully recover
an ECDSA private key. Found and reported by Alejandro Cabrera Aldaya,
Billy Brumley and Cesar Pereida Garcia. CVE-2020-10932
* Fix a potentially remotely exploitable buffer overread in a
DTLS client when parsing the Hello Verify Request message.
Bugfix
* Fix compilation failure when both MBEDTLS_SSL_PROTO_DTLS and
MBEDTLS_SSL_HW_RECORD_ACCEL are enabled.
* Fix a function name in a debug message. Contributed by Ercan Ozturk in
#3013.
37 lines
857 B
Makefile
37 lines
857 B
Makefile
# $NetBSD: Makefile,v 1.14 2020/04/18 14:21:56 nia Exp $
|
|
|
|
DISTNAME= mbedtls-2.16.6-apache
|
|
PKGNAME= ${DISTNAME:-apache=}
|
|
CATEGORIES= security devel
|
|
MASTER_SITES= https://tls.mbed.org/download/
|
|
EXTRACT_SUFX= .tgz
|
|
|
|
MAINTAINER= pkgsrc-users@NetBSD.org
|
|
HOMEPAGE= https://tls.mbed.org/
|
|
COMMENT= Lightweight, modular cryptographic and SSL/TLS library
|
|
LICENSE= apache-2.0
|
|
|
|
CONFLICTS+= polarssl-[0-9]*
|
|
SUPERSEDES+= polarssl-[0-9]*
|
|
|
|
WRKSRC= ${WRKDIR}/${PKGNAME_NOREV}
|
|
USE_CMAKE= yes
|
|
USE_LANGUAGES= c99
|
|
USE_TOOLS+= perl pkg-config
|
|
|
|
GCC_REQD+= 4.4
|
|
REPLACE_PERL= tests/scripts/*.pl
|
|
|
|
.include "options.mk"
|
|
|
|
CMAKE_ARGS+= -Wno-dev
|
|
CMAKE_ARGS+= -DUSE_SHARED_MBEDTLS_LIBRARY=ON
|
|
MAKE_ENV+= RANLIB=${RANLIB:Q}
|
|
|
|
LDFLAGS.SunOS+= -lsocket
|
|
|
|
PYTHON_FOR_BUILD_ONLY= tool
|
|
|
|
.include "../../lang/python/tool.mk"
|
|
.include "../../mk/pthread.buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|