pkgsrc/security/openssl, branch pkgsrc_2008Q2[no description]https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2008Q22008-06-16T20:18:20ZFix shared library build on various architectures. This basically fiddles2008-06-16T20:18:20Ztonnerretonnerre2008-06-16T20:18:20Zurn:sha1:084fc8f41917387f4d18aaa137fd593c992343af
with the number of colons between the fields.
Fix two Denial of Service vulnerabilities in OpenSSL 0.9.8g:2008-06-03T21:39:40Ztonnerretonnerre2008-06-03T21:39:40Zurn:sha1:065f22d3edfa8da8ca0f992e3bfe900156a2225e
- Fix flaw if 'Server Key exchange message' is omitted from a TLS handshake
which could lead to a silent crash.
- Fix double free in TLS server name extensions which could lead to a remote
crash.
Patches from upstream.
Fix build of OpenSSL on NetBSD/amd64 (4.0 and current tested)2008-05-08T14:04:25Ztonnerretonnerre2008-05-08T14:04:25Zurn:sha1:aaf32707079f74fd8143defd0ea0c198b1ae2078Fix detection of openssl configuration directory on NetBSD so it's2008-04-25T20:06:15Zjlamjlam2008-04-25T20:06:15Zurn:sha1:b2bc0bc18c0c94c92a1c0592853d4ef96234b803
/etc/openssl only if USE_BUILTIN.openssl is "yes".
Convert to use PLIST_VARS instead of manually passing "@comment "2008-04-12T22:42:57Zjlamjlam2008-04-12T22:42:57Zurn:sha1:84db467ec7c8386066718011f8d47775d5608811
through PLIST_SUBST to the plist module.
Link shared libraries with -rpath on IRIX to prevent check-shlibs errors.2008-02-20T01:10:20Ztnntnn2008-02-20T01:10:20Zurn:sha1:3b03ddd84ed1234b1b51ec5165c94e5a65a2578eUpdate to openssl-0.9.8g. Provided by Jukka Salmi in pkgsrc-wip.2008-01-17T06:42:47Ztnntnn2008-01-17T06:42:47Zurn:sha1:5a0788bf77c7ece384aa656a182d450810622c81
pkgsrc notes:
o Tested on NetBSD/i386 (Jukka Salmi), Mac OSX 10.5 (Adrian Portelli),
Linux (Jeremy C. Reed), Tru64 5.1b (tnn), HP-UX 11i (tnn).
Because the Makefile system has been rewamped, other
platforms may require fixes. Please test if you can.
o OpenSSL can now be built with installation to DESTDIR.
Overview of important changes since 0.9.7i:
o Add gcc 4.2 support.
o DTLS improvements.
o RFC4507bis support.
o TLS Extensions support.
o RFC3779 support.
o New cipher Camellia
o Updated ECC cipher suite support.
o New functions EVP_CIPHER_CTX_new() and EVP_CIPHER_CTX_free().
o Zlib compression usage fixes.
o Major work on the BIGNUM library for higher efficiency and to
make operations more streamlined and less contradictory. This
is the result of a major audit of the BIGNUM library.
o Addition of BIGNUM functions for fields GF(2^m) and NIST
curves, to support the Elliptic Crypto functions.
o Major work on Elliptic Crypto; ECDH and ECDSA added, including
the use through EVP, X509 and ENGINE.
o New ASN.1 mini-compiler that's usable through the OpenSSL
configuration file.
o Added support for ASN.1 indefinite length constructed encoding.
o New PKCS#12 'medium level' API to manipulate PKCS#12 files.
o Complete rework of shared library construction and linking
programs with shared or static libraries, through a separate
Makefile.shared.
o Rework of the passing of parameters from one Makefile to another.
o Changed ENGINE framework to load dynamic engine modules
automatically from specifically given directories.
o New structure and ASN.1 functions for CertificatePair.
o Changed the key-generation and primality testing "progress"
mechanism to take a structure that contains the ticker
function and an argument.
o New engine module: GMP (performs private key exponentiation).
o New engine module: VIA PadLOck ACE extension in VIA C3
Nehemiah processors.
o Added support for IPv6 addresses in certificate extensions.
See RFC 1884, section 2.2.
o Added support for certificate policy mappings, policy
constraints and name constraints.
o Added support for multi-valued AVAs in the OpenSSL
configuration file.
o Added support for multiple certificates with the same subject
in the 'openssl ca' index file.
o Make it possible to create self-signed certificates using
'openssl ca -selfsign'.
o Make it possible to generate a serial number file with
'openssl ca -create_serial'.
o New binary search functions with extended functionality.
o New BUF functions.
o New STORE structure and library to provide an interface to all
sorts of data repositories. Supports storage of public and
private keys, certificates, CRLs, numbers and arbitrary blobs.
This library is unfortunately unfinished and unused withing
OpenSSL.
o New control functions for the error stack.
o Changed the PKCS#7 library to support one-pass S/MIME
processing.
o New FIPS 180-2 algorithms (SHA-224, -256, -384 and -512).
o New X509_VERIFY_PARAM structure to support parametrisation
of X.509 path validation.
o Change the default digest in 'openssl' commands from MD5 to
SHA-1.
o Added support for DTLS.
o New BIGNUM blinding.
o Added support for the RSA-PSS encryption scheme
o Added support for the RSA X.931 padding.
o Added support for files larger than 2GB.
o Added alternate pkg-config files.
Fix builtin.mk logic for thread feature if no native OpenSSL exists.2008-01-07T15:51:08Zjoergjoerg2008-01-07T15:51:08Zurn:sha1:94d074aba58112aea3b354b779717ad24900f670
Fixes PR pkg/37699 from Aleksey Cheusov.
Fixed a few pkglint warnings.2008-01-05T20:41:25Zrilligrillig2008-01-05T20:41:25Zurn:sha1:a065e4ca0e44f196bb01aa18c4840fa54d729e05Removed the special-case handling of PKG_SYSCONFDIR for NetBSD. Now the2008-01-04T22:08:09Zrilligrillig2008-01-04T22:08:09Zurn:sha1:25aeeb0028522875d8eb0a5d004bbea2dc0015ae
configuration files are installed in the usual pkgsrc place, not in
/etc. PKGREVISION++
Ok'ed by jlam@.