From nobody Sun Apr 7 07:53:28 2024 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4VC4Gc265Qz5GTrf; Sun, 7 Apr 2024 07:53:28 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4VC4Gc1FYFz4bmP; Sun, 7 Apr 2024 07:53:28 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1712476408; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=STGbrBPuAmi+E2a58YehKNlabWLAVWXUEXTqAbNODuw=; b=f8w3Rq1m5imVR+tPFiWMeOzx/pne75oNqvtXnDv+XZAntAgrm8h/WKYZz6ViNnUTscefFn LUK/fE8JqAQboje0R3LOiCMzQkxUfa1PlD8cnKOywM/t9K9FKYoNxfSclHEgdpSTzKgOhY j0+5tiztkeyJTbjNiXJn12JKluob7pTQ9+tmUkCTh2bAqGBVOf0S7Ky9KInkFMLp/s750g d0GvP6U5T4VdMLiLBEf2i+sK6vZnoiLfNY6vkNIMmkdL2xfHTjv2nT9s1sxYVAkVDP779e 4IfBaJnGU3KB8NZUIwkmfnXZ7kAHQfyW9pNyAOmHqybVTl5+RXcvRb+vo0y8wA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1712476408; a=rsa-sha256; cv=none; b=iOZRPCTDzO1PiqndYjuvFL0smkcLfWSoMH/5jyskOpMxZnJ6jiW3cQugdeizZniKnSv3Ut WCxLoDtH0ypV7iyzkCEEy+pK7jlk+EaiZJJ1WUuTs9OROzjB3g8f4+IM6JbTc+RcpGSBTs BavXppQ2dUecJqHAQOfMC/zAPxLuuhuKxjigU8d+qC5blpgqJlxiF98RrpkSq0HDq0SDsG m9rB0AkhzamKG3+0X5OT1ZV3Ozh0O/GyPPO6YUPdgpjXo7unqQdyUOScsi8xklC/eJlimo TZt9rB1gwGYX8Io/7P45h+zvSDKE2T9FeNm503GaYP8G4k0Y+xYZXJtbIxtUkQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1712476408; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=STGbrBPuAmi+E2a58YehKNlabWLAVWXUEXTqAbNODuw=; b=UxMELWnNEYQ2XNTE82a9zX7uEGWBFTAGSricQlr/M59GPTvO3Hi0ohDbVlr+rHxvC9Rh3g 4QqGueMn8z3kfCI4cW1pPKPlrkB/GwEdbOOFNT2Kk6vaO2+kdyGw79oF/7MVx7npEE6aYa T5LYZvIyooC6/UNBWidXIvQo1SLW34xcHLCU7mbmzXdxKXHlKFls2mG5MDTBojmQpzTe8N IiWWLoL963CVtykCr4bmzGVGPZvC/S0U/QDGj9DrFjyBfDAY+syOLZ656PHvVF1exJgw7R L71QqxrJDUcCjcSALY365k+nt3XxR76nh6GJWCCIonrzwymEpu0fhNdN7/gj+g== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4VC4Gc0s04zJf8; Sun, 7 Apr 2024 07:53:28 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.17.1/8.17.1) with ESMTP id 4377rS9G011921; Sun, 7 Apr 2024 07:53:28 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.17.1/8.17.1/Submit) id 4377rSA7011917; Sun, 7 Apr 2024 07:53:28 GMT (envelope-from git) Date: Sun, 7 Apr 2024 07:53:28 GMT Message-Id: <202404070753.4377rSA7011917@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Tijl Coosemans Subject: git: 5bf0d42cf369 - main - security/gnutls: Update to 3.8.5 List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-all@freebsd.org X-BeenThere: dev-commits-ports-all@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: tijl X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 5bf0d42cf369cb276f1cf285438f97fd981de05d Auto-Submitted: auto-generated The branch main has been updated by tijl: URL: https://cgit.FreeBSD.org/ports/commit/?id=5bf0d42cf369cb276f1cf285438f97fd981de05d commit 5bf0d42cf369cb276f1cf285438f97fd981de05d Author: Tijl Coosemans AuthorDate: 2024-04-03 12:01:28 +0000 Commit: Tijl Coosemans CommitDate: 2024-04-07 07:48:39 +0000 security/gnutls: Update to 3.8.5 Add SRP option. Upstream disabled it by default in 3.8.0 "because the SRP authentication in TLS is not up to date with the latest TLS standards and its ciphersuites are based on the CBC mode and SHA-1." --- security/gnutls/Makefile | 11 ++--- security/gnutls/distinfo | 6 +-- security/gnutls/pkg-plist | 116 +++++++++++++++++++++++----------------------- 3 files changed, 67 insertions(+), 66 deletions(-) diff --git a/security/gnutls/Makefile b/security/gnutls/Makefile index c8f289e86ada..f72a03894fb0 100644 --- a/security/gnutls/Makefile +++ b/security/gnutls/Makefile @@ -1,6 +1,5 @@ PORTNAME= gnutls -DISTVERSION= 3.8.4 -PORTREVISION= 2 +DISTVERSION= 3.8.5 CATEGORIES= security net MASTER_SITES= GNUPG/${PORTNAME}/v${DISTVERSION:R} @@ -42,7 +41,7 @@ CONFIGURE_ARGS= --disable-rpath \ --without-tpm2 \ --enable-ld-version-script -OPTIONS_DEFINE= DANE EXAMPLES IDN KTLS MAN3 NLS P11KIT +OPTIONS_DEFINE= DANE EXAMPLES IDN KTLS MAN3 NLS P11KIT SRP OPTIONS_DEFAULT= IDN KTLS MAN3 P11KIT OPTIONS_SUB= yes @@ -50,6 +49,7 @@ DANE_DESC= Certificate verification via DNSSEC KTLS_DESC= Enable support for in-kernel TLS MAN3_DESC= Install API manpages (section 3) P11KIT_DESC= PKCS\#11 and p11-kit support +SRP_DESC= Secure Remote Password support DANE_LIB_DEPENDS= libunbound.so:dns/unbound DANE_CONFIGURE_ENABLE= libdane @@ -67,6 +67,8 @@ P11KIT_LIB_DEPENDS= libp11-kit.so:security/p11-kit P11KIT_CONFIGURE_WITH= p11-kit P11KIT_CONFIGURE_ON= --with-default-trust-store-pkcs11="pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit" +SRP_CONFIGURE_ENABLE= srp-authentication + post-patch: @${RM} ${WRKSRC}/doc/*.info* @${REINPLACE_CMD} 's,/usr/share,${PREFIX}/share,' \ @@ -96,9 +98,6 @@ post-patch: ${WRKSRC}/doc/invoke-p11tool.texi \ ${WRKSRC}/doc/manpages/p11tool.1 \ ${WRKSRC}/src/p11tool-options.c -# Bug 260078 - @${REINPLACE_CMD} 's/-Wa,-march=all//' \ - ${WRKSRC}/lib/accelerated/aarch64/Makefile.in # Prevent regeneration. The order is important. @${TOUCH} ${WRKSRC}/doc/enums.texi \ ${WRKSRC}/doc/invoke-gnutls-cli.texi \ diff --git a/security/gnutls/distinfo b/security/gnutls/distinfo index 410bdf24c448..21d0e88f36df 100644 --- a/security/gnutls/distinfo +++ b/security/gnutls/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1711523019 -SHA256 (gnutls-3.8.4.tar.xz) = 2bea4e154794f3f00180fa2a5c51fe8b005ac7a31cd58bd44cdfa7f36ebc3a9b -SIZE (gnutls-3.8.4.tar.xz) = 6487520 +TIMESTAMP = 1712473891 +SHA256 (gnutls-3.8.5.tar.xz) = 66269a2cfe0e1c2dabec87bdbbd8ab656f396edd9a40dd006978e003cfa52bfc +SIZE (gnutls-3.8.5.tar.xz) = 6491504 diff --git a/security/gnutls/pkg-plist b/security/gnutls/pkg-plist index c16d1f46f491..7cad44a657fb 100644 --- a/security/gnutls/pkg-plist +++ b/security/gnutls/pkg-plist @@ -6,6 +6,7 @@ bin/gnutls-serv bin/ocsptool %%P11KIT%%bin/p11tool bin/psktool +%%SRP%%bin/srptool include/gnutls/abstract.h include/gnutls/compat.h include/gnutls/crypto.h @@ -30,12 +31,68 @@ include/gnutls/x509.h %%DANE%%lib/libgnutls-dane.so.0.4.1 lib/libgnutls.so lib/libgnutls.so.30 -lib/libgnutls.so.30.38.0 +lib/libgnutls.so.30.39.0 lib/libgnutlsxx.so lib/libgnutlsxx.so.30 lib/libgnutlsxx.so.30.0.0 libdata/pkgconfig/gnutls.pc %%DANE%%libdata/pkgconfig/gnutls-dane.pc +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-alert.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-cert-select-pkcs11.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-cert-select.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-client-anon.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-client-dtls.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-client-psk.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-client-resume.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-client-srp.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-client-x509-3.1.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-client-x509.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-crq.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-ocsp-client.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-pkcs11-list.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-pkcs12.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-serv-anon.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-serv-dtls.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-serv-psk.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-serv-srp.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-serv-x509.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-session-info.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-verify-ssh.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-verify.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-x509-info.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/examples.h +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/print-ciphersuites.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/tcp.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/udp.c +%%PORTEXAMPLES%%%%EXAMPLESDIR%%/verify.c +share/info/gnutls-client-server-use-case.png +share/info/gnutls-crypto-layers.png +share/info/gnutls-handshake-sequence.png +share/info/gnutls-handshake-state.png +share/info/gnutls-internals.png +share/info/gnutls-layers.png +share/info/gnutls-logo.png +share/info/gnutls-modauth.png +share/info/gnutls-x509.png +share/info/pkcs11-vision.png +%%NLS%%share/locale/cs/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/de/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/eo/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/es/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/fi/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/fr/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/it/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/ka/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/ms/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/nl/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/pl/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/pt_BR/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/ro/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/sr/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/sv/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/uk/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/vi/LC_MESSAGES/gnutls.mo +%%NLS%%share/locale/zh_CN/LC_MESSAGES/gnutls.mo share/man/man1/certtool.1.gz %%DANE%%share/man/man1/danetool.1.gz share/man/man1/gnutls-cli-debug.1.gz @@ -44,6 +101,7 @@ share/man/man1/gnutls-serv.1.gz share/man/man1/ocsptool.1.gz share/man/man1/p11tool.1.gz share/man/man1/psktool.1.gz +%%SRP%%share/man/man1/srptool.1.gz share/man/man1/tpmtool.1.gz %%MAN3%%share/man/man3/dane_cert_type_name.3.gz %%MAN3%%share/man/man3/dane_cert_usage_name.3.gz @@ -1240,59 +1298,3 @@ share/man/man1/tpmtool.1.gz %%MAN3%%share/man/man3/gnutls_x509_trust_list_verify_crt.3.gz %%MAN3%%share/man/man3/gnutls_x509_trust_list_verify_crt2.3.gz %%MAN3%%share/man/man3/gnutls_x509_trust_list_verify_named_crt.3.gz -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-alert.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-cert-select-pkcs11.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-cert-select.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-client-anon.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-client-dtls.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-client-psk.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-client-resume.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-client-srp.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-client-x509-3.1.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-client-x509.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-crq.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-ocsp-client.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-pkcs11-list.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-pkcs12.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-serv-anon.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-serv-dtls.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-serv-psk.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-serv-srp.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-serv-x509.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-session-info.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-verify-ssh.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-verify.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/ex-x509-info.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/examples.h -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/print-ciphersuites.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/tcp.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/udp.c -%%PORTEXAMPLES%%%%EXAMPLESDIR%%/verify.c -share/info/gnutls-client-server-use-case.png -share/info/gnutls-crypto-layers.png -share/info/gnutls-handshake-sequence.png -share/info/gnutls-handshake-state.png -share/info/gnutls-internals.png -share/info/gnutls-layers.png -share/info/gnutls-logo.png -share/info/gnutls-modauth.png -share/info/gnutls-x509.png -share/info/pkcs11-vision.png -%%NLS%%share/locale/cs/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/de/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/eo/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/es/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/fi/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/fr/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/it/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/ka/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/ms/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/nl/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/pl/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/pt_BR/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/ro/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/sr/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/sv/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/uk/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/vi/LC_MESSAGES/gnutls.mo -%%NLS%%share/locale/zh_CN/LC_MESSAGES/gnutls.mo