Commit Graph

46 Commits

Author SHA1 Message Date
bluhm
e03e3c0a12 update botan2 to 2.19.3
CVE-2022-43705: A malicious OCSP responder could forge OCSP responses.
2022-11-22 19:27:08 +00:00
sthen
716f142842 bump for MODPY_DEFAULT_VERSION_3 change 2022-11-13 15:29:09 +00:00
bluhm
5b5aa12a5a Update Botan 2 to 2.19.2. The OpenSSL provider was incompatible
with OpenSSL 3.0.  It has been removed.
2022-06-29 11:12:26 +00:00
naddy
9d3da5d0b7 security/botan2: enable support for aarch64 crypto instructions
This now builds fine and the regression tests succeed.

ok bluhm@
2022-04-04 12:46:35 +00:00
naddy
8c0294c2fa drop RCS Ids 2022-03-11 19:53:16 +00:00
tb
d7f28c2847 security/botan2: enable debug packages.
ok bluhm
2022-03-08 22:56:49 +00:00
bluhm
b46e60e4ef update botan2 to 2.19.1
removed patch has been commited upstream
2022-02-02 18:21:43 +00:00
bluhm
a58d6439ad On OpenBSD i386 Botan dies with illegal instruction when using AVX2
extensions.  Our kernel does not set the OSXSAVE flag, so Botan
must not use them.  Cherry-pick fix from upstream.
2022-01-13 17:16:58 +00:00
bluhm
87301d575c update botan2 to 2.18.2 2021-11-12 22:02:50 +00:00
sthen
29389da44c bump REVISION for switch from Python 3.8 -> 3.9 2021-11-02 00:02:15 +00:00
tb
edf0e9666d security/botan2: Use ISRG Root X1 instead of DST Root CA X3. Fixes
regress failures after DST Root CA X3 was removed fom cert.pem.

noted and tested by anton
ok bluhm
2021-10-05 05:32:30 +00:00
bluhm
053725764b update botan2 to 2.18.1 2021-05-15 20:12:27 +00:00
bluhm
46662e0f3c update botan2 to 2.18.0 2021-04-24 11:05:48 +00:00
sthen
3cbe1c2f30 Reverse the polarity of MODPY_VERSION; default is now 3.x,
if a port needs 2.x then set MODPY_VERSION=${MODPY_DEFAULT_VERSION_2}.

This commit doesn't change any versions currently used; it may be that
some ports have MODPY_DEFAULT_VERSION_2 but don't require it, those
should be cleaned up in the course of updating ports where possible.

Python module ports providing py3-* packages should still use
FLAVOR=python3 so that we don't have a mixture of dependencies some
using ${MODPY_FLAVOR} and others not.
2021-02-23 19:39:08 +00:00
sthen
248932be74 switch MODPY_BIN_SUFFIX to -2 for py2 and (blank) for py3
switch ports using command-line tools from py-sphinx that don't need a
py2 version of it to py3-sphinx
2021-02-19 23:13:00 +00:00
bluhm
48d6f41428 update botan2 to 2.17.3 2020-12-26 20:48:53 +00:00
bluhm
b4fb12b73b update botan2 to 2.17.2 2020-12-12 20:31:00 +00:00
cwen
2eede5f97d botan2: unbreak on !x86 archs
The latest botan2 version provides a new processor_rng feature, but the
feature is unavailable on most archs, breaking the packaging at least on
aarch64, macppc and sparc64 due to a missing header. Add that header to the
x86 PFRAG.

OK kmos@ (who tested on sparc64), bluhm@ (maintainer)
2020-08-27 23:12:20 +00:00
bluhm
6ed302ec63 update botan2 to 2.15.0 2020-08-21 23:29:18 +00:00
sthen
22f39b485e bump; plist changed but no forced python dep 2020-07-04 09:59:56 +00:00
landry
0f14e68bb9 Update to botan2 2.14.0.
ok bluhm@ (MAINTAINER) tb@
2020-05-18 13:17:42 +00:00
sthen
48b0b9660c replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes 2019-07-12 20:48:23 +00:00
bluhm
cfab020cc6 update botan2 to 2.10.0
Disable upstream pledge for now as it is broken.
2019-07-04 18:16:52 +00:00
bluhm
29e2f36f6b update botan2 to 2.9.0 2019-01-16 12:53:23 +00:00
naddy
d6682042c6 Always add ${LOCALBASE} to the path since ports-gcc no longer looks
there by default.  Also, with the COMPILER infrastructure, CHOSEN_COMPILER
is the correct variable to check for the compiler type.  ok bluhm@
2018-12-21 21:22:53 +00:00
bluhm
ad1c2e686a update botan2 to 2.8.0 2018-10-22 21:28:52 +00:00
bluhm
5e7a0038b8 Update botan2 to 2.7.0. Patches have been commited upstream.
Fixes CVE-2018-12435 ECDSA side channel.
2018-07-06 00:18:39 +00:00
phessler
ae93d94684 fix build on aarch64
from Markus Hennecke
2018-05-26 20:55:55 +00:00
bluhm
0ef2362d87 Update botan2 to 2.6.0. Botan tests create temporary files in /tmp
to allow ports privsep.  Do not create symlinks for shared library,
they confuse our tool chain.
2018-04-12 09:53:54 +00:00
bluhm
b94e7fa7cb update botan2 to 2.5.0 2018-04-05 20:12:58 +00:00
bluhm
68c0bc8718 Regenerate patch file to avoid offset warning.
requested by sthen@
2018-01-18 18:12:31 +00:00
bluhm
4573f0bde5 Botan honors the CXX, CXXFLAGS, AR, and LDFLAGS enviroment now.
So there is no need to patch the compiler type.
suggested by upstream developer Jack Lloyd

Add py-docutils as build dependency to create man pages.
package failure reported by ajacoutot@

Explicitly set the compiler type to gcc on non clang archs.
2018-01-16 18:49:40 +00:00
rsadowski
858a4c11f1 Remove pthread from WANTLIB
"pthread is included in COMPILER_LIBCXX in all cases." spotted by sthen@
2018-01-14 20:56:23 +00:00
rsadowski
b789b35d7e Update botan2 to 2.4.0
Tweaks and input from bluhm@ and sthen@. Manual page hint by kn

OK bluhm@ (maintainer)
2018-01-14 20:40:18 +00:00
naddy
11e3dd67b3 switch COMPILER from the old, confusing shortcuts to the more explicit format 2017-11-16 23:20:37 +00:00
bluhm
03799861b8 Update botan2 to 2.3.0
Major library bump to libbotan-2.so.3.0
Remove patch applied upstream
Patch it to compile with clang
Fix CVE-2017-14737
2017-10-09 20:05:07 +00:00
bluhm
64d92e520c Enable the --with-openssl configure switch in botan2. This allows
to use LibreSSL as backend for the Botan API.  Include the Botan
test program and samples in the package.  So we can test LibreSSL
using their tests scripts with botan-test --provider=openssl.
Currently only a fraction of the tests actually use the OpenSSL
provider, but that can be improved later.
OK doug@
2017-08-13 14:40:18 +00:00
bluhm
ee4fc515d2 update botan2 to 2.2.0 2017-08-11 22:30:38 +00:00
sthen
9b473d3fe0 add COMPILER_LIBCXX to WANTLIB and bump 2017-07-27 10:05:20 +00:00
espie
cc5bc426ed switch everything to new COMPILER idiom, even stuff that won't build with clang
yet, but at least that part is done.
2017-05-31 08:08:15 +00:00
espie
0ab0c09554 first batch of WANT_CXX 2017-05-13 09:49:50 +00:00
espie
13ff626be5 buggy configure, add support for -L, as clang will not link with /usr/local
by default.

(patch sent to upstream)
2017-05-12 23:47:57 +00:00
bluhm
c700a6e2a5 update botan2 to version 2.1.0
fix CVE-2017-7252 CVE-2017-2801
major library bump, forgotten upstream, use LIBbotan-2_VERSION
keep patches local that are needed by port system
build patches have been accepted upstream
support for getentropy(2) and arc4random(3) accepted upstream
botan CLI has been renamed to botan2 upstream
rename doc dir to botan-2
OK sthen@
2017-04-10 11:10:33 +00:00
jca
746f15c2e9 Fix packaging on !(x86)
rdrand_rng.h is arch-specific.  ok bluhm@ (maintainer)
2017-04-03 10:08:17 +00:00
bluhm
6a2ce8cec7 patches have been commited upstream, put git log into comment
makefile beautification
2017-03-16 12:32:16 +00:00
bluhm
7e91f52bca import botan2 2.0.1
input and OK jca@

Comment:
crypto and TLS for C++11

Description:
Botan (Japanese for peony) is a cryptography library written in
C++11 and released under the permissive Simplified BSD license.
Botan's goal is to be the best option for cryptography in new C++
code by offering the tools necessary to implement a range of practical
systems, such as TLS/DTLS, PKIX certificate handling, PKCS#11 and
TPM hardware support, password hashing, and post quantum crypto
schemes.  In addition to the C++, botan has a C89 API specifically
designed to be easy to call from other languages.  A Python binding
using ctypes calling the C89 API is included.
2017-03-13 15:00:39 +00:00