7557 Commits

Author SHA1 Message Date
tb
d5a9b0daee Update to OpenSSL 3.0.5
The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation
for X86_64 CPUs supporting the AVX512IFMA instructions.

https://www.openssl.org/news/secadv/20220705.txt
2022-07-05 10:57:27 +00:00
tb
f2cc771bb0 Bump after OpenSSL update (static linking) 2022-07-05 10:51:02 +00:00
tb
cf31dfb8f6 Update to OpenSSL 1.1.1q
Fixed AES OCB failure to encrypt some bytes on 32-bit x86 platforms
https://www.openssl.org/news/vulnerabilities.html
2022-07-05 10:49:23 +00:00
sthen
92f69a452c ykpers (yubikey-personalization): backport upstream patches (fix with newer
json-c, and pick up some memory cleaning diffs while there)
2022-07-04 12:30:26 +00:00
sthen
b5c13562bd update to sslscan-2.0.15 2022-07-04 09:58:15 +00:00
kmos
51254d3297 Fix build of security/encfs on sparc64. Switch to base-clang ports-gcc
by taking out ports-clang
2022-07-03 22:31:00 +00:00
danj
9bb446488d Update to lego-4.8.0
From Horia Racoviceanu (maintainer)
2022-07-02 13:08:13 +00:00
jca
5dc15deb46 Teach portroach to ignore gnupg-2.3.* 2022-07-01 09:19:44 +00:00
sthen
560ac6bc97 update to py3-cryptodome-test-vectors-1.0.10 2022-06-30 13:29:23 +00:00
sthen
0e86b6eb74 update to py3-pyscard-2.0.3 2022-06-30 13:19:58 +00:00
tb
5a2faad56e openssl-ruby-tests: add workaround for stricter RFC 5280 enforcement. 2022-06-30 08:56:01 +00:00
bluhm
5b5aa12a5a Update Botan 2 to 2.19.2. The OpenSSL provider was incompatible
with OpenSSL 3.0.  It has been removed.
2022-06-29 11:12:26 +00:00
sthen
4283e1c22b patch opensc to avoid mlock, tweaked from an earlier diff by kn 2022-06-28 10:13:51 +00:00
sthen
7412d928a8 tweak comments (noop) 2022-06-28 10:09:24 +00:00
sthen
c559076ca3 add some comments to security/openssl Makefile.inc requesting that porters
1) don't use openssl unless really needed (either a port requires something
which is particularly openssl-specific, or there is some other special reason),
and 2) add some comments to the port explaining why libressl isn't used.

in the normal case ports should use libressl. don't just use openssl to avoid
a few patches because of stupid version detection ifdefs.
2022-06-26 14:06:51 +00:00
sthen
0125c21742 Add notes about why these ports use security/openssl 2022-06-26 13:40:59 +00:00
sthen
f2d54b8266 update to sslscan-2.0.14 2022-06-25 18:45:37 +00:00
landry
43513be50b security/nss: upgrade to 3.80
release notes will be at
https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_80.html
2022-06-24 08:05:50 +00:00
sthen
f9eb4fd22a postfix now uses this (static-linked) so add a reminder to bump postfix revision if updating 2022-06-23 13:22:48 +00:00
sthen
215e6a1cb0 update to p5-Net-SSL-ExpireDate-1.24 2022-06-23 10:17:13 +00:00
tb
259c19026e Update tlsfuzzer to 20220622 2022-06-22 21:51:57 +00:00
pvk
39642e0f15 Update vault 1.10.4 -> 1.11.0
Changelog: https://github.com/hashicorp/vault/blob/main/CHANGELOG.md#1110
2022-06-22 21:13:12 +00:00
tb
48eae20f25 Bump after OpenSSL update (static linking) 2022-06-21 14:48:14 +00:00
tb
283eba41b1 Update to OpenSSL 3.0.4
c_rehash needed more fixing:
https://www.openssl.org/news/secadv/20220621.txt
2022-06-21 14:47:13 +00:00
tb
34a9bdb049 Update to OpenSSL 1.1.1p
c_rehash needed more fixing:
https://www.openssl.org/news/secadv/20220621.txt
2022-06-21 14:46:14 +00:00
sthen
f7a4d76f62 update to pcsc-lite-1.9.7 2022-06-16 07:14:27 +00:00
naddy
61e89e8ea8 security/libnettle: drop GNU m4 dependency, enable powerpc64 asm
Import upstream fixes that remove the need for GNU m4.

Stop disabling the assembly code on powerpc64.  The original problem
has been fixed in 3.8.  Alas, the optimized assembly code will not
be used at runtime since we lack an API to query instruction set
extensions on powerpc64.

ok ajacoutot@
2022-06-14 21:15:38 +00:00
sthen
9a2cda8860 update to py3-scrypt-0.8.20, from George Rosamond (plus I tweaked tests) 2022-06-13 09:05:37 +00:00
pvk
631caba9c8 Update vault 1.10.2 -> 1.10.4
Changelog: https://github.com/hashicorp/vault/blob/main/CHANGELOG.md#1104
2022-06-12 23:13:47 +00:00
millert
32084bb5f9 Update to 1.9.11p2 2022-06-12 21:11:31 +00:00
naddy
fe3fe114f6 security/libnettle: enable aarch64 hardware crypto support
* Add support to fat-arm64.c to detect crypto instruction set
  extensions on OpenBSD.

* Require GNU m4 for the build since the aarch64 assembly is
  pre-processed by m4 macros that take 16 arguments and refer to
  arguments beyond $9 directly, e.g. $10 and so on, which is a GNU
  extension and incompatible with POSIX.

ok ajacoutot@
2022-06-12 13:25:53 +00:00
kn
a148f42779 Use "gnu" configure style
Input OK sthen
2022-06-12 05:18:30 +00:00
danj
5a8e8f3511 Update to lego-4.7.0
While there, add some missing indentation in DESCR.

From Horia Racoviceanu (maintainer).
2022-06-11 18:29:18 +00:00
kn
9c258d5cff Avoid picking up coreutils in configure
- checking for a race-free mkdir -p... /usr/local/bin/gmkdir -p
+ checking for a race-free mkdir -p... (cached) /bin/mkdir -p

Build failure with coreutils junked during build found by tb@, thanks.
2022-06-10 19:12:49 +00:00
tb
944dee46e5 Update to tlsfuzzer 20220610 2022-06-10 17:56:23 +00:00
sthen
9ffdb76ee1 remove bogus TEST_DEPENDS in NO_TEST py2-only port 2022-06-10 07:47:45 +00:00
sthen
c19db8ae3a update to py3-gnupg-0.4.9 2022-06-10 06:43:11 +00:00
sthen
927ecad95c update to py3-keyring-23.6.0 2022-06-10 05:48:58 +00:00
stu
4d4448e8be Update to 1.7.22.
Take maintainer with permission.

OK sebastia@, sthen@.
2022-06-08 20:08:06 +00:00
millert
9f32c334f5 Update to 1.9.11p1 2022-06-08 17:08:58 +00:00
sthen
c15fcebae3 update to easy-rsa-3.1.0, from George Rosamond 2022-06-08 16:13:14 +00:00
sebastia
15d4054169 simple update: 3.8.21 -> 3.8.22 2022-06-08 08:47:42 +00:00
sebastia
e36d28317e simple update: 0.13.7 -> 0.13.8 2022-06-08 08:47:15 +00:00
sthen
743de35ae0 update to certbot/py-acme 1.28.0 2022-06-08 07:44:36 +00:00
sthen
9f7bd00b61 update to certbot/py-acme 1.27.0 2022-06-07 12:21:01 +00:00
sebastia
7abc81a048 update to 2022-06-04 2022-06-07 11:04:32 +00:00
sebastia
9c67696f08 simple update 6.2.5 -> 6.2.7 2022-06-07 10:57:04 +00:00
ajacoutot
3786c84575 --disable-assembler on arm & aarch64 until we figure out the breakage
(probably due to GNU m4 extension according to naddy)
2022-06-07 06:19:03 +00:00
gonzalo
7d49ec1100 Update for Lynis to 3.0.8
OK benoit@ rsadowski@
2022-06-04 13:48:19 +00:00
ajacoutot
2a603db52d Update to libnettle-3.8. 2022-06-04 12:14:18 +00:00