From nobody Mon Jun 8 15:03:29 2026 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gYwKL3jr2z6gC0M for ; Mon, 08 Jun 2026 15:03:34 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4gYwKL0sc6z4J0j for ; Mon, 08 Jun 2026 15:03:34 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1780931014; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=1TiUJQvF+pypneqTW50E05Y6v3f18708CPbV7WgYQQI=; b=T6G/lnfz3HATPNmtjHxnUAkUOE8K2qsS7yuoOf77OLSGcj7V2QSSetcha9GJrkedSS08B6 fisaE8p/g9GnmaiAO3Lt3lHJ8U5cdTHW8OPHlLfFenyi6pjpS5gAQeO15i0KcrxOfIWxnG sdBh2Pi1Csinj/bSF0HEgT4xWOMJEV8yuQnK6f4HdUZ35H8Pn/FEQaUJa3VWv+yw5F51T3 jw6t1Fi5tKrdsQH2bEmVha8tXPHlnVbuDX1G3HKuUQC6mfCLkubqjYTHUJjERRHycJ6Iwq MEDX7c09WxD4qCTdiGbbHUjQBxHeA1YYS64++BfgfxYbD+faoKeYFcZ4nuSHZg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1780931014; a=rsa-sha256; cv=none; b=QcaOk9jgNM/ELMeh+LpiLa+mXEYaZ4O/cRb8gOW791ETCMAEYfuCZHc9zjXE9T9qXgFor2 zLaTCHEq2jUeJG7GUOyn7ZmcTuFUelyi5qqaRHACj62L5xL4GJkQK4Daqt7TJQs/fDNHZD SDEEKGeoForo0TSSkfkjNqW3Ns9OGpIPBnz3AwNAH2REyBPAnMyo6umOZq8pTvcYT79aHo x/65jThbXPE6TR4CJ6ZtSgJwqVOu04h2X6qZm/Dph1NJaIq0Ob6JUjsn7TxL+86Gmgr3id 9CVzksdQNLd03noToOLCYnsX+pJE4b2LyAKUw0wc4RorvpaqSOZBDV73Lp7oNg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1780931014; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=1TiUJQvF+pypneqTW50E05Y6v3f18708CPbV7WgYQQI=; b=DoQy3zfoo7JQ9iIu2T64usMvzYoPCzqZcEnvKGcA6/MXfOGDEXb5vS10/Rt9DL2Ck4Z9cg b/sJtlKM4niwy1kkmhOlbxwV4+EhncPZPHywYOsx6LytYLq1nBL334CLaxxk0qow/Y0f+E +AcqImBmDzx7ZY7D7iZYHSVwL3m4dI2u2QRGd/yIRfZhtugqrgy3k7za5IxVUpkp9FT+nX wKA1FjyJBDuPjilByAW23YQ0RkjBMLctIK7w6PFiFxsfxsQeFfHyT5JFH1fuUSb+FYyeA4 jjvgI29Nj56v948zRjBZt4H3G2jNgwUifXlwBf7s6/FWY3vhuS5n9ZCEM6dYSA== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4gYwKL0SpVztRQ for ; Mon, 08 Jun 2026 15:03:34 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 46ef7 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Mon, 08 Jun 2026 15:03:29 +0000 To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-branches@FreeBSD.org From: Cy Schubert Subject: git: 10ddd3777d86 - 2026Q2 - security/krb5-devel: update to the latest MIT/KRB5 github commit List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-all@freebsd.org Sender: owner-dev-commits-ports-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: cy X-Git-Repository: ports X-Git-Refname: refs/heads/2026Q2 X-Git-Reftype: branch X-Git-Commit: 10ddd3777d86996780a27b5bdf131d600a845806 Auto-Submitted: auto-generated Date: Mon, 08 Jun 2026 15:03:29 +0000 Message-Id: <6a26d9c1.46ef7.29b9331d@gitrepo.freebsd.org> The branch 2026Q2 has been updated by cy: URL: https://cgit.FreeBSD.org/ports/commit/?id=10ddd3777d86996780a27b5bdf131d600a845806 commit 10ddd3777d86996780a27b5bdf131d600a845806 Author: Cy Schubert AuthorDate: 2026-04-28 15:02:39 +0000 Commit: Cy Schubert CommitDate: 2026-06-08 15:03:18 +0000 security/krb5-devel: update to the latest MIT/KRB5 github commit Support for OpenSSL 1.1.1 has been removed by upstream in this update. (cherry picked from commit 1f29b1929b8217b102eeb2d2ce3ca836801622d4) --- security/krb5-devel/Makefile | 4 +-- security/krb5-devel/distinfo | 6 ++--- ...lugins_preauth_pkinit_pkinit__crypto__openssl.c | 30 ++++++++-------------- 3 files changed, 16 insertions(+), 24 deletions(-) diff --git a/security/krb5-devel/Makefile b/security/krb5-devel/Makefile index 2f646b746585..3c2377b09eb5 100644 --- a/security/krb5-devel/Makefile +++ b/security/krb5-devel/Makefile @@ -8,8 +8,8 @@ PKGNAME_X= -${FLAVOR:S/default//} .endif PKGNAMESUFFIX= ${PKGNAME_X:S/--/-/:C/-$//} -HASH= f8a0bee0a -MIT_COMMIT_DATE= 2026.03.23 +HASH= 0138cbef6 +MIT_COMMIT_DATE= 2026.04.23 PATCH_SITES= http://web.mit.edu/kerberos/advisories/ PATCH_DIST_STRIP= -p2 diff --git a/security/krb5-devel/distinfo b/security/krb5-devel/distinfo index 9995bc93bef9..04b3817650dc 100644 --- a/security/krb5-devel/distinfo +++ b/security/krb5-devel/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1774455077 -SHA256 (krb5-krb5-1.23.2026.03.23-f8a0bee0a_GH0.tar.gz) = 48005a52e92099f588737782ece32092e5197ba4bee4cc67bf2d312cfb7361ad -SIZE (krb5-krb5-1.23.2026.03.23-f8a0bee0a_GH0.tar.gz) = 4678952 +TIMESTAMP = 1777387626 +SHA256 (krb5-krb5-1.23.2026.04.23-0138cbef6_GH0.tar.gz) = 7543ad7544514c562089c68b1d16abeab98236fe7b8cb73f6ab8c30ee70a84ea +SIZE (krb5-krb5-1.23.2026.04.23-0138cbef6_GH0.tar.gz) = 4677660 diff --git a/security/krb5-devel/files/patch-plugins_preauth_pkinit_pkinit__crypto__openssl.c b/security/krb5-devel/files/patch-plugins_preauth_pkinit_pkinit__crypto__openssl.c index a26d295ebf75..65f7fc262601 100644 --- a/security/krb5-devel/files/patch-plugins_preauth_pkinit_pkinit__crypto__openssl.c +++ b/security/krb5-devel/files/patch-plugins_preauth_pkinit_pkinit__crypto__openssl.c @@ -1,23 +1,15 @@ ---- plugins/preauth/pkinit/pkinit_crypto_openssl.c.orig 2021-11-05 16:24:07.000000000 -0700 -+++ plugins/preauth/pkinit/pkinit_crypto_openssl.c 2021-11-08 10:10:45.431325000 -0800 -@@ -178,7 +178,8 @@ - (*_x509_pp) = PKCS7_cert_from_signer_info(_p7,_si) - #endif - --#if OPENSSL_VERSION_NUMBER < 0x10100000L -+#if (defined(OPENSSL_VERSION_NUMBER) && OPENSSL_VERSION_NUMBER < 0x10100000L) || \ -+ defined(LIBRESSL_VERSION_NUMBER) - - /* 1.1 standardizes constructor and destructor names, renaming - * EVP_MD_CTX_{create,destroy} and deprecating ASN1_STRING_data. */ -@@ -722,6 +723,10 @@ - DH_free(dh); - return pkey; +diff --git plugins/preauth/pkinit/pkinit_crypto_openssl.c.orig plugins/preauth/pkinit/pkinit_crypto_openssl.c +index 11c570f..cba4515 100644 +--- plugins/preauth/pkinit/pkinit_crypto_openssl.c.orig ++++ plugins/preauth/pkinit/pkinit_crypto_openssl.c +@@ -787,6 +787,10 @@ oerr(krb5_context context, krb5_error_code code, const char *fmt, ...) + return code; } -+ + +#if defined(LIBRESSL_VERSION_NUMBER) && !defined(static_ASN1_SEQUENCE_END_name) +#define static_ASN1_SEQUENCE_END_name ASN1_SEQUENCE_END_name +#endif - - static struct pkcs11_errstrings { - short code; ++ + /* + * Set an appropriate error string containing msg for a certificate + * verification failure from certctx. Write the message and all pending