From nobody Sat Sep 30 00:49:13 2023 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Ry7rp0hCXz4txBR; Sat, 30 Sep 2023 00:49:14 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Ry7rn6tBNz4W18; Sat, 30 Sep 2023 00:49:13 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1696034954; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=PnsbBsS3gEwzyRfFplbja1myVPiBGvkUIP87gC8Sw94=; b=pw68eKgviqad3Cnb5X0g7BoIKpckHXVjMqZm8VQ7T6vbk7I4dRSXMiLNQek6opphnRqJRG hLAuKpG6F8LHzMKDXYrTjC9hd5fahwRYrkR9eAaOMgiqhph/1ME2aND+cXBaUigw0v0TWk ypAPyotr2hoV7HzBB+D3So0Hy+RgSzbNR48m/DcI1GQdmaUPJltGGIjFgm39JSQSl/5L9B KqFFEkuJHz0Ah3cWgHfrfGjVE+WDFAHfAuoeSb0lW8VJR1QugakacsO7h68qsyCWm6c01q 5gvVF3z7LIi9JeSicpx8+8Tr/EIMrEh+lSuxinRRLCOAXVp++DPtLTIdd356Pw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1696034954; a=rsa-sha256; cv=none; b=Jc8dnzKqo/gDOmqzXJsKMgRMbjZrPMm3Y+GG4rkF2nU6QoI/aqju3IBpsQmTIRNRa0NhWJ mu4CRoyBVLoLMD5Jox7zsSRUVEckNSJDL6/qxDhQ9ZrvqF67jK3SIdFh3RwbeKdHIGjSSi ZDtR+G6OWnEGWSIaPV+Q/+LpINgeeolCWbx5zgsi53SiIjknaQLupEKyXVsFAhz1O5CyRf vJIJEVVwZELb/XtniBjMXf8y7m6bbkfdv3vbKBEI6+XCFPmqcHekPlCaNWQgT05xVGSY/l H9MUH8sckrgqkqK2+zZCDpTKfi7e03a6nw2waJQ630YhJEWuVGs4P383pkRt/A== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1696034954; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=PnsbBsS3gEwzyRfFplbja1myVPiBGvkUIP87gC8Sw94=; b=oIyluPz6QqVlPYk/qrlsO26o2Hlj2ax3TGLSsZgM6Kp7evh5eUGwhvewItnW2sHjzMAjv2 3HAUQQmEqXeOaO1RJuQfkrjylDiEj+aBZ8EFALyXuNMp1qhHzQCOWqrhSic76I9wwDKq+r pPK9Ly9WP7MwMFrvQo4LHjtStGPaGV2uE9Ujzg6Rug4hagwxLuY2V8TxMvMpYrroYvgLvT ed8MATMItz083makRP1vcZYpdE3jhKJLtGt2WLE+ETip+WI+/4NmXX/kbrm0FkHUtNqaNb NZu0By9zFWYpMVpB0nyRcIN6rjQHbtdaF6jiHqtAsVb5iA3nXyllc3U6dDv1Gw== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Ry7rn5wxpz9ry; Sat, 30 Sep 2023 00:49:13 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.17.1/8.17.1) with ESMTP id 38U0nD9q008087; Sat, 30 Sep 2023 00:49:13 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.17.1/8.17.1/Submit) id 38U0nDRh008084; Sat, 30 Sep 2023 00:49:13 GMT (envelope-from git) Date: Sat, 30 Sep 2023 00:49:13 GMT Message-Id: <202309300049.38U0nDRh008084@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Po-Chuan Hsieh Subject: git: dd8664c0de02 - main - security/py-nassl: Update to 5.1.0 List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-main@freebsd.org X-BeenThere: dev-commits-ports-main@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: sunpoet X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: dd8664c0de022fd7201f22c7c97ff4cf80cc1349 Auto-Submitted: auto-generated The branch main has been updated by sunpoet: URL: https://cgit.FreeBSD.org/ports/commit/?id=dd8664c0de022fd7201f22c7c97ff4cf80cc1349 commit dd8664c0de022fd7201f22c7c97ff4cf80cc1349 Author: Po-Chuan Hsieh AuthorDate: 2023-09-30 00:22:46 +0000 Commit: Po-Chuan Hsieh CommitDate: 2023-09-30 00:44:38 +0000 security/py-nassl: Update to 5.1.0 Changes: https://github.com/nabla-c0d3/nassl/commits/release --- security/py-nassl/Makefile | 2 +- security/py-nassl/distinfo | 6 +++--- security/py-nassl/files/patch-openssl | 29 +++++++++++++++++------------ 3 files changed, 21 insertions(+), 16 deletions(-) diff --git a/security/py-nassl/Makefile b/security/py-nassl/Makefile index 8a6b7ad2df12..df45eb2343c6 100644 --- a/security/py-nassl/Makefile +++ b/security/py-nassl/Makefile @@ -1,5 +1,5 @@ PORTNAME= nassl -PORTVERSION= 5.0.1 +PORTVERSION= 5.1.0 CATEGORIES= security python PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} diff --git a/security/py-nassl/distinfo b/security/py-nassl/distinfo index 42765f02f677..662092bb441e 100644 --- a/security/py-nassl/distinfo +++ b/security/py-nassl/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1679498808 -SHA256 (nabla-c0d3-nassl-5.0.1_GH0.tar.gz) = 53302410923e5c1afd54c7f48051f15459eeacbd7005b719d2a5db12ede83042 -SIZE (nabla-c0d3-nassl-5.0.1_GH0.tar.gz) = 214659 +TIMESTAMP = 1696001396 +SHA256 (nabla-c0d3-nassl-5.1.0_GH0.tar.gz) = 20f1aa7be2dea3dad4b7765f830eac807ee9a514be5b8b16aeefbcceff9a6484 +SIZE (nabla-c0d3-nassl-5.1.0_GH0.tar.gz) = 212992 diff --git a/security/py-nassl/files/patch-openssl b/security/py-nassl/files/patch-openssl index 584bd6dd83be..030fccdf40cd 100644 --- a/security/py-nassl/files/patch-openssl +++ b/security/py-nassl/files/patch-openssl @@ -1,4 +1,4 @@ ---- nassl/_nassl/nassl_SSL.c.orig 2022-11-20 14:28:29 UTC +--- nassl/_nassl/nassl_SSL.c.orig 2023-09-24 06:39:12 UTC +++ nassl/_nassl/nassl_SSL.c @@ -1034,6 +1034,7 @@ static PyObject *nassl_SSL_get_dh_info(nassl_SSL_Objec return return_dict; @@ -16,7 +16,7 @@ #endif else { ---- nassl/_nassl/nassl_SSL_CTX.c.orig 2022-11-20 14:28:29 UTC +--- nassl/_nassl/nassl_SSL_CTX.c.orig 2023-09-24 06:39:12 UTC +++ nassl/_nassl/nassl_SSL_CTX.c @@ -88,8 +88,10 @@ static PyObject* nassl_SSL_CTX_new(PyTypeObject *type, // Replicate the pre-1.1.0 OpenSSL API to avoid breaking _nassl's API @@ -29,7 +29,7 @@ SSL_CTX_set_max_proto_version(sslCtx, 0); break; #endif ---- nassl/ssl_client.py.orig 2022-11-20 14:28:29 UTC +--- nassl/ssl_client.py.orig 2023-09-24 06:39:12 UTC +++ nassl/ssl_client.py @@ -429,6 +429,25 @@ class SslClient(BaseSslClient): # The default client uses the modern OpenSSL @@ -57,7 +57,7 @@ def write_early_data(self, data: bytes) -> int: """Returns the number of (encrypted) bytes sent.""" if self._is_handshake_completed: ---- setup.py.orig 2022-11-20 14:28:29 UTC +--- setup.py.orig 2023-09-24 06:39:12 UTC +++ setup.py @@ -2,29 +2,25 @@ import copy import sys @@ -95,7 +95,7 @@ "nassl.ocsp_response", "nassl.cert_chain_verifier", ], -@@ -71,58 +67,21 @@ BASE_NASSL_EXT_SETUP = { +@@ -71,63 +67,20 @@ BASE_NASSL_EXT_SETUP = { ], } @@ -115,6 +115,11 @@ -else: - BASE_NASSL_EXT_SETUP["extra_compile_args"].append("-Wall") - +- if CURRENT_PLATFORM in SupportedPlatformEnum.all_linux_platforms(): +- # Hide internal OpenSSL symbols to avoid "symbol confusion" when Python loads the system's OpenSSL libraries +- # https://github.com/nabla-c0d3/nassl/issues/95 +- BASE_NASSL_EXT_SETUP["extra_link_args"].append("-Wl,--exclude-libs=ALL") +- - if CURRENT_PLATFORM == SupportedPlatformEnum.LINUX_64: - # Explicitly disable executable stack on Linux 64 to address issues with Ubuntu on Windows - # https://github.com/nabla-c0d3/nassl/issues/28 @@ -141,7 +146,7 @@ - } -) - - # The configure the setup for modern nassl +-# The configure the setup for modern nassl -modern_openssl_config = ModernOpenSslBuildConfig(CURRENT_PLATFORM) - MODERN_NASSL_EXT_SETUP = copy.deepcopy(BASE_NASSL_EXT_SETUP) @@ -161,7 +166,7 @@ ], } ) -@@ -131,18 +90,11 @@ MODERN_NASSL_EXT_SETUP["sources"].append( +@@ -136,18 +89,11 @@ MODERN_NASSL_EXT_SETUP["sources"].append( ) # API only available in modern nassl @@ -182,7 +187,7 @@ ) ---- tests/SSL_CTX_test.py.orig 2022-11-20 14:28:29 UTC +--- tests/SSL_CTX_test.py.orig 2023-09-24 06:39:12 UTC +++ tests/SSL_CTX_test.py @@ -2,11 +2,11 @@ import tempfile @@ -198,7 +203,7 @@ class TestCommonSSL_CTX: def test_new(self, nassl_module): assert nassl_module.SSL_CTX(OpenSslVersionEnum.SSLV23.value) ---- tests/SSL_test.py.orig 2022-11-20 14:28:29 UTC +--- tests/SSL_test.py.orig 2023-09-24 06:39:12 UTC +++ tests/SSL_test.py @@ -1,11 +1,10 @@ import pytest @@ -248,7 +253,7 @@ - test_ssl.set_connect_state() - with pytest.raises(_nassl.OpenSSLError, match="ssl handshake failure"): - test_ssl.write("tests") ---- tests/X509_test.py.orig 2022-11-20 14:28:29 UTC +--- tests/X509_test.py.orig 2023-09-24 06:39:12 UTC +++ tests/X509_test.py @@ -1,10 +1,9 @@ import pytest @@ -262,7 +267,7 @@ class TestX509: def test_from_pem(self, nassl_module): # Given a PEM-formatted certificate ---- tests/ocsp_response_test.py.orig 2022-11-20 14:28:29 UTC +--- tests/ocsp_response_test.py.orig 2023-09-24 06:39:12 UTC +++ tests/ocsp_response_test.py @@ -5,7 +5,6 @@ import pytest import socket @@ -281,7 +286,7 @@ class TestCommonOcspResponseOnline: def test(self, ssl_client_cls): # Given a website that support OCSP stapling ---- tests/ssl_client_test.py.orig 2022-11-20 14:28:29 UTC +--- tests/ssl_client_test.py.orig 2023-09-24 06:39:12 UTC +++ tests/ssl_client_test.py @@ -4,7 +4,6 @@ from pathlib import Path import pytest