Commit Graph

185 Commits

Author SHA1 Message Date
ajacoutot
0cccc7bb80 Update to gnutls-3.7.8. 2022-10-03 22:28:31 +00:00
ajacoutot
5459442f1b SECURITY update to gnutls-3.7.7.
CVE-2022-2509
2022-07-29 08:20:42 +00:00
ajacoutot
608315d6cd Update to gnutls-3.7.6. 2022-05-28 07:07:41 +00:00
ajacoutot
5b40f975c7 Update to gnutls-3.7.5. 2022-05-13 23:34:48 +00:00
naddy
110d7e8e18 security/gnutls: enable aarch64 hardware crypto support
ok ajacoutot@
2022-04-03 11:33:31 +00:00
naddy
d78430a52d security/gnutls: fix regression test build (on aarch64)
ok ajacoutot@
2022-04-02 23:43:23 +00:00
ajacoutot
4a078a2a22 Update to gnutls-3.7.4. 2022-03-18 23:22:23 +00:00
naddy
8c0294c2fa drop RCS Ids 2022-03-11 19:53:16 +00:00
ajacoutot
7faab3f459 SECURITY update to gnutls-3.7.3. 2022-01-19 12:23:35 +00:00
jca
6dc5ffc195 Unbreak on aarch64: don't use -Wa,-march=all
-march=all isn't supported by clang, and it now crashes with llvm 13.
Fix snatched from the FreeBSD bugtracker.

Tested by phessler@, ok phessler@ ajacoutot@ (maintainer)
2021-12-27 19:22:48 +00:00
ajacoutot
59b78eed1c Update to gnutls-3.7.2. 2021-05-29 22:43:09 +00:00
ajacoutot
fb493049c5 SECURITY update to gnutls-3.7.1. 2021-05-26 05:56:49 +00:00
ajacoutot
a8f8e6785e Add LDEP on devel/gettext,-runtime after recent p11-kit changes. 2020-12-14 08:00:03 +00:00
ajacoutot
0d9e443d62 SECURITY update to gnutls-3.6.15.
CVE-2020-24659
2020-09-05 10:20:28 +00:00
ajacoutot
ba9ac0c8ed SECURITY update to gnutls-3.6.14. 2020-06-04 09:08:22 +00:00
ajacoutot
2622248db0 Handle AddTrust External Root CA certificate expiration; from upstream. 2020-06-01 14:38:18 +00:00
ajacoutot
4f150e0d1c SECURITY update to gnutls-3.6.13 (GNUTLS-SA-2020-03-31):
Fix a DTLS-protocol regression (caused by TLS1.3 support).
The DTLS client would not contribute any randomness to the DTLS negotiation,
breaking the security guarantees of the DTLS protocol.
2020-04-01 07:40:53 +00:00
ajacoutot
a066690fa7 Update to gnutls-3.6.12. 2020-02-08 12:06:58 +00:00
ajacoutot
fc0e79ed5b Update to gnutls-3.6.11.1. 2019-12-09 07:56:20 +00:00
ajacoutot
5f2c5dc774 Update to gnutls-3.6.10. 2019-09-30 16:05:52 +00:00
sthen
e9533aee74 changes to asm code in gnutls-3.6.9 result in the following error
on i386; link with -Wl,-z,notext for now (this knocks out a large chunk
of the ports tree). ok aja@

ld: error: can't create dynamic relocation R_386_32 against symbol: _gnutls_x86_cpuid_s in readonly segment; recompile object files with -fPIC or pass '-Wl,-z,notext' to allow text relocations in the output
2019-07-30 11:38:48 +00:00
ajacoutot
3a2cb87d7f Update to gnutls-3.6.9. 2019-07-27 09:55:17 +00:00
sthen
48b0b9660c replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes 2019-07-12 20:48:23 +00:00
ajacoutot
2d302032f9 Don't pick up autogen, it breaks the build.
reported by naddy@ and sthen@
2019-06-30 08:34:10 +00:00
ajacoutot
72e79db8d4 Update to gnutls-3.6.8. 2019-05-31 05:54:14 +00:00
naddy
4ee133fc66 drop workaround for gcc4.9 that is no longer needed for gcc8
ok cwen@ ajacoutot@
2019-04-29 14:28:57 +00:00
ajacoutot
aeeb278943 SECURITY update to gnutls-3.6.7.
https://www.gnutls.org/security-new.html
- CVE-2019-3836, CVE-2019-3829
2019-03-28 14:53:10 +00:00
ajacoutot
d1d8e9adc2 Update to gnutls-3.6.6. 2019-01-28 06:33:34 +00:00
ajacoutot
d94ad34311 Enable libdane now that with have libunbound.
Survived a bulk.
2018-12-19 08:35:54 +00:00
ajacoutot
d66328dc56 Major update to gnutls-3.6.5.
This is the new stable branch.
Survived a bulk.
2018-12-15 09:00:26 +00:00
naddy
74ac1bc33b When building with ports gcc, compile the C parts with -std=gnu11
to match the visibility of max_align_t between C and C++.

GCC 4.9 defaults to C89 and does not accept the "restrict" keyword
by default.  This causes a configure check to add -std=gnu99 to the
compiler flags.  Since max_align_t is from C11, the -std=gnu99 flag
removes it from visibility and gnutls's copy of gnulib then provides
its own replacement definition of max_align_t.  When gnutls builds
its C++ library, the C++ visibility rules are different.  The
max_align_t from stddef.h reappears and collides with the gnulib
replacement.
2018-11-05 21:29:50 +00:00
naddy
0f3a8bd688 We no longer need to handle the case that the system compiler is
not clang on amd64.  Also add COMPILER_LIBCXX to WANTLIB on all
archs.
ok sthen@ ajacoutot@
2018-11-05 14:57:09 +00:00
sthen
25f0e460f2 Add COMPILER lines to c++ ports which currently use the default. Adjust
some existing COMPILER lines with arch restrictions etc. In the usual
case this is now using "COMPILER = base-clang ports-gcc base-gcc" on
ports with c++ libraries in WANTLIB.

This is basically intended to be a noop on architectures using clang
as the system compiler, but help with other architectures where we
currently have many ports knocked out due to building with an unsuitable
compiler -

- some ports require c++11/newer so the GCC version in base that is used
on these archirtectures is too old.

- some ports have conflicts where an executable is built with one compiler
(e.g. gcc from base) but a library dependency is built with a different
one (e.g. gcc from ports), resulted in mixing incompatible libraries in the
same address space.

devel/gmp is intentionally skipped as it's on the path to building gcc -
the c++ library there is unused in ports (and not built by default upstream)
so intending to disable building gmpcxx in a future commit.
2018-10-24 14:27:57 +00:00
ajacoutot
31763f125a Update to gnutls-3.5.19. 2018-07-17 08:01:01 +00:00
ajacoutot
af49c75c24 Update to gnutls-3.5.18. 2018-02-17 12:25:30 +00:00
ajacoutot
d27e31625f Update to gnutls-3.5.17. 2018-01-20 11:16:16 +00:00
ajacoutot
e9775091a0 Update to gnutls-3.5.16. 2017-10-22 07:43:17 +00:00
tj
f586485c58 prioritize https over http/ftp for distfiles.
ok aja jasper for gnome, aja for gnutls, giovanni for gimp, sthen for the rest
2017-08-22 18:03:51 +00:00
ajacoutot
a8b0d63c50 Update to gnutls-3.5.15. 2017-08-22 08:33:43 +00:00
sthen
5e964ab0df bump LIBCXX/LIBECXX/COMPILER_LIBCXX ports. 2017-07-26 22:45:14 +00:00
espie
8ac47fd9c6 use COMPILER_LIBCXX where applicable 2017-07-16 19:18:47 +00:00
ajacoutot
4e28ae2d96 Update to gnutls-3.5.14. 2017-07-05 06:45:27 +00:00
ajacoutot
afa1ee15fa SECURITY update to gnutls-3.5.13.
GNUTLS-SA-2017-4: decoding a status response TLS extension with valid contents could lead to a crash due to a null pointer dereference
2017-06-08 07:33:37 +00:00
espie
4ccac7a843 use lang/clang if amd64 and system compiler is not clang 2017-05-13 09:54:48 +00:00
ajacoutot
44316aca80 Update to gnutls-3.5.12. 2017-05-13 08:54:53 +00:00
sthen
073d25a37c use LIBCXX 2017-04-10 11:46:32 +00:00
ajacoutot
600d0d4e1e Update to gnutls-3.5.11. 2017-04-09 09:13:37 +00:00
ajacoutot
8f5ccdb6a9 Update to gnutls-3.5.10. 2017-03-08 08:11:48 +00:00
ajacoutot
a981852b13 Move to libidn2. 2017-02-18 17:31:59 +00:00
ajacoutot
89afdfb9eb Proper indent; no change. 2017-02-13 10:23:50 +00:00