Date: Tue, 28 Apr 2026 16:58:35 +0000 From: Cy Schubert <cy@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 1f29b1929b82 - main - security/krb5-devel: update to the latest MIT/KRB5 github commit Message-ID: <69f0e73b.19403.1ece0ee7@gitrepo.freebsd.org>
index | next in thread | raw e-mail
The branch main has been updated by cy: URL: https://cgit.FreeBSD.org/ports/commit/?id=1f29b1929b8217b102eeb2d2ce3ca836801622d4 commit 1f29b1929b8217b102eeb2d2ce3ca836801622d4 Author: Cy Schubert <cy@FreeBSD.org> AuthorDate: 2026-04-28 15:02:39 +0000 Commit: Cy Schubert <cy@FreeBSD.org> CommitDate: 2026-04-28 16:58:23 +0000 security/krb5-devel: update to the latest MIT/KRB5 github commit Support for OpenSSL 1.1.1 has been removed by upstream in this update. --- security/krb5-devel/Makefile | 4 +-- security/krb5-devel/distinfo | 6 ++--- ...lugins_preauth_pkinit_pkinit__crypto__openssl.c | 30 ++++++++-------------- 3 files changed, 16 insertions(+), 24 deletions(-) diff --git a/security/krb5-devel/Makefile b/security/krb5-devel/Makefile index 2f646b746585..3c2377b09eb5 100644 --- a/security/krb5-devel/Makefile +++ b/security/krb5-devel/Makefile @@ -8,8 +8,8 @@ PKGNAME_X= -${FLAVOR:S/default//} .endif PKGNAMESUFFIX= ${PKGNAME_X:S/--/-/:C/-$//} -HASH= f8a0bee0a -MIT_COMMIT_DATE= 2026.03.23 +HASH= 0138cbef6 +MIT_COMMIT_DATE= 2026.04.23 PATCH_SITES= http://web.mit.edu/kerberos/advisories/ PATCH_DIST_STRIP= -p2 diff --git a/security/krb5-devel/distinfo b/security/krb5-devel/distinfo index 9995bc93bef9..04b3817650dc 100644 --- a/security/krb5-devel/distinfo +++ b/security/krb5-devel/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1774455077 -SHA256 (krb5-krb5-1.23.2026.03.23-f8a0bee0a_GH0.tar.gz) = 48005a52e92099f588737782ece32092e5197ba4bee4cc67bf2d312cfb7361ad -SIZE (krb5-krb5-1.23.2026.03.23-f8a0bee0a_GH0.tar.gz) = 4678952 +TIMESTAMP = 1777387626 +SHA256 (krb5-krb5-1.23.2026.04.23-0138cbef6_GH0.tar.gz) = 7543ad7544514c562089c68b1d16abeab98236fe7b8cb73f6ab8c30ee70a84ea +SIZE (krb5-krb5-1.23.2026.04.23-0138cbef6_GH0.tar.gz) = 4677660 diff --git a/security/krb5-devel/files/patch-plugins_preauth_pkinit_pkinit__crypto__openssl.c b/security/krb5-devel/files/patch-plugins_preauth_pkinit_pkinit__crypto__openssl.c index a26d295ebf75..65f7fc262601 100644 --- a/security/krb5-devel/files/patch-plugins_preauth_pkinit_pkinit__crypto__openssl.c +++ b/security/krb5-devel/files/patch-plugins_preauth_pkinit_pkinit__crypto__openssl.c @@ -1,23 +1,15 @@ ---- plugins/preauth/pkinit/pkinit_crypto_openssl.c.orig 2021-11-05 16:24:07.000000000 -0700 -+++ plugins/preauth/pkinit/pkinit_crypto_openssl.c 2021-11-08 10:10:45.431325000 -0800 -@@ -178,7 +178,8 @@ - (*_x509_pp) = PKCS7_cert_from_signer_info(_p7,_si) - #endif - --#if OPENSSL_VERSION_NUMBER < 0x10100000L -+#if (defined(OPENSSL_VERSION_NUMBER) && OPENSSL_VERSION_NUMBER < 0x10100000L) || \ -+ defined(LIBRESSL_VERSION_NUMBER) - - /* 1.1 standardizes constructor and destructor names, renaming - * EVP_MD_CTX_{create,destroy} and deprecating ASN1_STRING_data. */ -@@ -722,6 +723,10 @@ - DH_free(dh); - return pkey; +diff --git plugins/preauth/pkinit/pkinit_crypto_openssl.c.orig plugins/preauth/pkinit/pkinit_crypto_openssl.c +index 11c570f..cba4515 100644 +--- plugins/preauth/pkinit/pkinit_crypto_openssl.c.orig ++++ plugins/preauth/pkinit/pkinit_crypto_openssl.c +@@ -787,6 +787,10 @@ oerr(krb5_context context, krb5_error_code code, const char *fmt, ...) + return code; } -+ + +#if defined(LIBRESSL_VERSION_NUMBER) && !defined(static_ASN1_SEQUENCE_END_name) +#define static_ASN1_SEQUENCE_END_name ASN1_SEQUENCE_END_name +#endif - - static struct pkcs11_errstrings { - short code; ++ + /* + * Set an appropriate error string containing msg for a certificate + * verification failure from certctx. Write the message and all pendinghome | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?69f0e73b.19403.1ece0ee7>