From owner-svn-ports-all@freebsd.org Thu Apr 9 12:02:37 2020 Return-Path: Delivered-To: svn-ports-all@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id B5ED72B885F; Thu, 9 Apr 2020 12:02:37 +0000 (UTC) (envelope-from brnrd@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 48yfsT4NPZz4Wcp; Thu, 9 Apr 2020 12:02:37 +0000 (UTC) (envelope-from brnrd@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 91A90C7BA; Thu, 9 Apr 2020 12:02:37 +0000 (UTC) (envelope-from brnrd@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id 039C2b6u050330; Thu, 9 Apr 2020 12:02:37 GMT (envelope-from brnrd@FreeBSD.org) Received: (from brnrd@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id 039C2avm050325; Thu, 9 Apr 2020 12:02:36 GMT (envelope-from brnrd@FreeBSD.org) Message-Id: <202004091202.039C2avm050325@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: brnrd set sender to brnrd@FreeBSD.org using -f From: Bernard Spil Date: Thu, 9 Apr 2020 12:02:36 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r531202 - head/security/libressl-devel X-SVN-Group: ports-head X-SVN-Commit-Author: brnrd X-SVN-Commit-Paths: head/security/libressl-devel X-SVN-Commit-Revision: 531202 X-SVN-Commit-Repository: ports MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2020 12:02:37 -0000 Author: brnrd Date: Thu Apr 9 12:02:36 2020 New Revision: 531202 URL: https://svnweb.freebsd.org/changeset/ports/531202 Log: security/libressl-devel: Update to 3.1.0 - TLSv1.3 no longer optional and enabled in client by default Modified: head/security/libressl-devel/Makefile head/security/libressl-devel/distinfo head/security/libressl-devel/pkg-plist head/security/libressl-devel/version.mk Modified: head/security/libressl-devel/Makefile ============================================================================== --- head/security/libressl-devel/Makefile Thu Apr 9 11:07:11 2020 (r531201) +++ head/security/libressl-devel/Makefile Thu Apr 9 12:02:36 2020 (r531202) @@ -2,7 +2,7 @@ # $FreeBSD$ PORTNAME= libressl -PORTVERSION= 3.0.2 +PORTVERSION= 3.1.0 CATEGORIES= security devel MASTER_SITES= OPENBSD/LibreSSL PKGNAMESUFFIX= -devel @@ -15,7 +15,7 @@ LICENSE_FILE= ${WRKSRC}/COPYING CPE_VENDOR= openbsd -OPTIONS_DEFINE= MAN3 NC TLS1_3 +OPTIONS_DEFINE= MAN3 NC OPTIONS_DEFAULT= MAN3 NC MAN3_DESC= Install API manpages (section 3) NC_DESC= Install TLS-enabled netcat @@ -40,10 +40,6 @@ post-patch-MAN3-off: ${REINPLACE_CMD} -e '/^install-man:/s/install-man3//' \ -e '/$$(MAKE) $$(AM_MAKEFLAGS) install-data-hook/d' \ ${WRKSRC}/man/Makefile.in - -post-patch-TLS1_3-on: - ${REINPLACE_CMD} 's|/\* \(#define LIBRESSL_HAS_TLS1_3\) \*/|\1|' \ - ${WRKSRC}/include/openssl/opensslfeatures.h post-install: ${RM} -r ${STAGEDIR}/${PREFIX}/etc/ssl/cert.pem Modified: head/security/libressl-devel/distinfo ============================================================================== --- head/security/libressl-devel/distinfo Thu Apr 9 11:07:11 2020 (r531201) +++ head/security/libressl-devel/distinfo Thu Apr 9 12:02:36 2020 (r531202) @@ -1,3 +1,3 @@ -TIMESTAMP = 1571486504 -SHA256 (libressl-3.0.2.tar.gz) = df7b172bf79b957dd27ef36dcaa1fb162562c0e8999e194aa8c1a3df2f15398e -SIZE (libressl-3.0.2.tar.gz) = 3669468 +TIMESTAMP = 1586419921 +SHA256 (libressl-3.1.0.tar.gz) = f91aad0c8fb9cbc67c910ad6dcffb401a819b4fd122007ea7f978638db044cf6 +SIZE (libressl-3.1.0.tar.gz) = 3758950 Modified: head/security/libressl-devel/pkg-plist ============================================================================== --- head/security/libressl-devel/pkg-plist Thu Apr 9 11:07:11 2020 (r531201) +++ head/security/libressl-devel/pkg-plist Thu Apr 9 12:02:36 2020 (r531202) @@ -78,16 +78,16 @@ include/openssl/x509v3.h include/tls.h lib/libcrypto.a lib/libcrypto.so -lib/libcrypto.so.45 -lib/libcrypto.so.45.0.5 +lib/libcrypto.so.46 +lib/libcrypto.so.46.0.1 lib/libssl.a lib/libssl.so -lib/libssl.so.47 -lib/libssl.so.47.0.6 +lib/libssl.so.48 +lib/libssl.so.48.0.1 lib/libtls.a lib/libtls.so -lib/libtls.so.19 -lib/libtls.so.19.0.7 +lib/libtls.so.20 +lib/libtls.so.20.0.1 libdata/pkgconfig/libcrypto.pc libdata/pkgconfig/libssl.pc libdata/pkgconfig/libtls.pc @@ -1139,25 +1139,46 @@ man/man1/openssl.1.gz %%MAN3%%man/man3/EVP_PKEY_CTX_ctrl_str.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_dup.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_free.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_get0_ecdh_kdf_ukm.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_get0_rsa_oaep_label.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_get1_id.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_get1_id_len.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_get_app_data.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_get_cb.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_get_ecdh_cofactor_mode.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_get_ecdh_kdf_md.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_get_ecdh_kdf_outlen.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_get_ecdh_kdf_type.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_get_keygen_info.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_get_rsa_mgf1_md.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_get_rsa_oaep_md.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_get_rsa_padding.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_get_rsa_pss_saltlen.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_get_signature_md.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_new.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_new_id.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_set0_ecdh_kdf_ukm.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_set0_rsa_oaep_label.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_set1_id.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_set_app_data.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_set_cb.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_set_dh_paramgen_generator.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_set_dh_paramgen_prime_len.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_set_dsa_paramgen_bits.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_set_ec_param_enc.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_set_ec_paramgen_curve_nid.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_set_ecdh_cofactor_mode.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_set_ecdh_kdf_md.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_set_ecdh_kdf_outlen.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_set_ecdh_kdf_type.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_keygen_bits.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_keygen_pubexp.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_mgf1_md.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_oaep_md.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_padding.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_pss_keygen_md.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_pss_keygen_mgf1_md.3.gz +%%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_pss_keygen_saltlen.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_pss_saltlen.3.gz %%MAN3%%man/man3/EVP_PKEY_CTX_set_signature_md.3.gz %%MAN3%%man/man3/EVP_PKEY_asn1_add0.3.gz @@ -1549,6 +1570,7 @@ man/man1/openssl.1.gz %%MAN3%%man/man3/PEM_do_header.3.gz %%MAN3%%man/man3/PEM_get_EVP_CIPHER_INFO.3.gz %%MAN3%%man/man3/PEM_read.3.gz +%%MAN3%%man/man3/PEM_read_CMS.3.gz %%MAN3%%man/man3/PEM_read_DHparams.3.gz %%MAN3%%man/man3/PEM_read_DSAPrivateKey.3.gz %%MAN3%%man/man3/PEM_read_DSA_PUBKEY.3.gz @@ -1571,6 +1593,7 @@ man/man1/openssl.1.gz %%MAN3%%man/man3/PEM_read_X509_CRL.3.gz %%MAN3%%man/man3/PEM_read_X509_REQ.3.gz %%MAN3%%man/man3/PEM_read_bio.3.gz +%%MAN3%%man/man3/PEM_read_bio_CMS.3.gz %%MAN3%%man/man3/PEM_read_bio_DHparams.3.gz %%MAN3%%man/man3/PEM_read_bio_DSAPrivateKey.3.gz %%MAN3%%man/man3/PEM_read_bio_DSA_PUBKEY.3.gz @@ -1593,6 +1616,7 @@ man/man1/openssl.1.gz %%MAN3%%man/man3/PEM_read_bio_X509_CRL.3.gz %%MAN3%%man/man3/PEM_read_bio_X509_REQ.3.gz %%MAN3%%man/man3/PEM_write.3.gz +%%MAN3%%man/man3/PEM_write_CMS.3.gz %%MAN3%%man/man3/PEM_write_DHparams.3.gz %%MAN3%%man/man3/PEM_write_DSAPrivateKey.3.gz %%MAN3%%man/man3/PEM_write_DSA_PUBKEY.3.gz @@ -1618,6 +1642,7 @@ man/man1/openssl.1.gz %%MAN3%%man/man3/PEM_write_X509_REQ.3.gz %%MAN3%%man/man3/PEM_write_X509_REQ_NEW.3.gz %%MAN3%%man/man3/PEM_write_bio.3.gz +%%MAN3%%man/man3/PEM_write_bio_CMS.3.gz %%MAN3%%man/man3/PEM_write_bio_CMS_stream.3.gz %%MAN3%%man/man3/PEM_write_bio_DHparams.3.gz %%MAN3%%man/man3/PEM_write_bio_DSAPrivateKey.3.gz @@ -1781,6 +1806,7 @@ man/man1/openssl.1.gz %%MAN3%%man/man3/RSA_padding_check_PKCS1_type_1.3.gz %%MAN3%%man/man3/RSA_padding_check_PKCS1_type_2.3.gz %%MAN3%%man/man3/RSA_padding_check_none.3.gz +%%MAN3%%man/man3/RSA_pkey_ctx_ctrl.3.gz %%MAN3%%man/man3/RSA_print.3.gz %%MAN3%%man/man3/RSA_print_fp.3.gz %%MAN3%%man/man3/RSA_private_decrypt.3.gz @@ -1864,6 +1890,7 @@ man/man1/openssl.1.gz %%MAN3%%man/man3/SSL_CTX_get_ex_data.3.gz %%MAN3%%man/man3/SSL_CTX_get_ex_new_index.3.gz %%MAN3%%man/man3/SSL_CTX_get_extra_chain_certs.3.gz +%%MAN3%%man/man3/SSL_CTX_get_extra_chain_certs_only.3.gz %%MAN3%%man/man3/SSL_CTX_get_info_callback.3.gz %%MAN3%%man/man3/SSL_CTX_get_max_cert_list.3.gz %%MAN3%%man/man3/SSL_CTX_get_max_proto_version.3.gz @@ -2432,6 +2459,7 @@ man/man1/openssl.1.gz %%MAN3%%man/man3/X509_STORE_CTX_set_cert.3.gz %%MAN3%%man/man3/X509_STORE_CTX_set_chain.3.gz %%MAN3%%man/man3/X509_STORE_CTX_set_default.3.gz +%%MAN3%%man/man3/X509_STORE_CTX_set_flags.3.gz %%MAN3%%man/man3/X509_STORE_CTX_set_error.3.gz %%MAN3%%man/man3/X509_STORE_CTX_set_ex_data.3.gz %%MAN3%%man/man3/X509_STORE_CTX_set_verify_cb.3.gz @@ -3055,6 +3083,7 @@ man/man1/openssl.1.gz %%MAN3%%man/man3/tls_configure.3.gz %%MAN3%%man/man3/tls_conn_alpn_selected.3.gz %%MAN3%%man/man3/tls_conn_cipher.3.gz +%%MAN3%%man/man3/tls_conn_cipher_strength.3.gz %%MAN3%%man/man3/tls_conn_servername.3.gz %%MAN3%%man/man3/tls_conn_session_resumed.3.gz %%MAN3%%man/man3/tls_conn_version.3.gz @@ -3094,5 +3123,6 @@ man/man1/openssl.1.gz %%MAN3%%man/man3/verify_callback.3.gz man/man5/openssl.cnf.5.gz man/man5/x509v3.cnf.5.gz +man/man8/ocspcheck.8.gz @dir etc/ssl/certs @dir include/openssl Modified: head/security/libressl-devel/version.mk ============================================================================== --- head/security/libressl-devel/version.mk Thu Apr 9 11:07:11 2020 (r531201) +++ head/security/libressl-devel/version.mk Thu Apr 9 12:02:36 2020 (r531202) @@ -1 +1 @@ -OPENSSL_SHLIBVER?= 45 +OPENSSL_SHLIBVER?= 46