summaryrefslogtreecommitdiff
path: root/security/bearssl
diff options
context:
space:
mode:
authormaya <maya@pkgsrc.org>2018-02-07 11:52:56 +0000
committermaya <maya@pkgsrc.org>2018-02-07 11:52:56 +0000
commitabc3be1163c28db9c7891858218faa30c848db20 (patch)
treeff21844209fa8b4be6ac07561679abebf6816a0a /security/bearssl
parentb560785d7811ee041863333f91c8c38e404cf76f (diff)
downloadpkgsrc-abc3be1163c28db9c7891858218faa30c848db20.tar.gz
bearssl: update to 0.5. From Charlotte Koch.
Added support for the BoarSSL / Twrch test framework. Header files now include the ritual mantras that make them compatible with C++. Better Makefile behaviour with Clang (FreeBSD compatibility). Worked around a bug of GCC 4.8 and 4.9 in 32-bit x86 mode. Incoming application data after initiating closure is now properly ignored. Some instances of (critical) Certificate Policies extensions are now ignored (when it is safe to do so). Fixed some behavioural bugs with regards to renegotiation (all were failing safe). Added encoded OID for hash functions in the public API, to help with using RSA signatures in non-SSL contexts. Fixed bug in AES/CBC decryption on x86 with AES-NI opcode (this was breaking decryption with AES/CBC cipher suites and TLS 1.0 only). Added an explicit stack buffer initialisation (some provably harmless accesses to uninitialised data were performed, Valgrind was not happy). Fixed bug in the search tree for the cache of SSL sessions (occasional lock-ups). Fixed bug in modular reduction in the special field for P-256 (this was infrequently breaking ECDSA signatures). Added support for exporting keying material (RFC 5705). Added new general-purpose API for AEAD implementations (in non-SSL contexts) and an AES/GCM implementation that follows that API. Added a function to forget saved session parameter in the LRU cache. Added a new ChaCha20 implementation that uses SSE2 on x86 architectures (both 32-bit and 64-bit).
Diffstat (limited to 'security/bearssl')
-rw-r--r--security/bearssl/Makefile4
-rw-r--r--security/bearssl/PLIST3
-rw-r--r--security/bearssl/distinfo10
3 files changed, 9 insertions, 8 deletions
diff --git a/security/bearssl/Makefile b/security/bearssl/Makefile
index 0e4a7920d00..63a4c2f5a07 100644
--- a/security/bearssl/Makefile
+++ b/security/bearssl/Makefile
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.4 2017/09/22 22:00:57 wiedi Exp $
+# $NetBSD: Makefile,v 1.5 2018/02/07 11:52:56 maya Exp $
-DISTNAME= bearssl-0.4
+DISTNAME= bearssl-0.5
CATEGORIES= security
MASTER_SITES= https://bearssl.org/
diff --git a/security/bearssl/PLIST b/security/bearssl/PLIST
index 69b4949d3e5..7695f905a4a 100644
--- a/security/bearssl/PLIST
+++ b/security/bearssl/PLIST
@@ -1,6 +1,7 @@
-@comment $NetBSD: PLIST,v 1.1 2017/04/01 17:01:51 wiz Exp $
+@comment $NetBSD: PLIST,v 1.2 2018/02/07 11:52:56 maya Exp $
bin/brssl
include/bearssl.h
+include/bearssl_aead.h
include/bearssl_block.h
include/bearssl_ec.h
include/bearssl_hash.h
diff --git a/security/bearssl/distinfo b/security/bearssl/distinfo
index 39e1d9a5e80..83a4fd7649d 100644
--- a/security/bearssl/distinfo
+++ b/security/bearssl/distinfo
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.3 2017/09/22 22:00:57 wiedi Exp $
+$NetBSD: distinfo,v 1.4 2018/02/07 11:52:56 maya Exp $
-SHA1 (bearssl-0.4.tar.gz) = 3246db6d5949a86b1889c1921ae9496d7b962c47
-RMD160 (bearssl-0.4.tar.gz) = e0f40ea16bfa3fc729407ddb3e176fa4ea8c259e
-SHA512 (bearssl-0.4.tar.gz) = ff197c36a9e1a3e6b2e5b29c880f408518600ddc2a106522d097d6f4c824f3c5206c320194d8cfcc658eebb9a14e8175387e71d8a1d428562e028caa38c717ef
-Size (bearssl-0.4.tar.gz) = 633401 bytes
+SHA1 (bearssl-0.5.tar.gz) = c2c202803454c35a4a271d9f5e518295b8d76e01
+RMD160 (bearssl-0.5.tar.gz) = 5974baced77d83aace5a5eea31a3810d93a26e28
+SHA512 (bearssl-0.5.tar.gz) = 1bd510f62f36620cda5317509e72bd0c6f3538c30aca2695e80c26d1ea7270d174ed3fbb6d690b3ced5d51ce3f6bfc776d78a196492900296a452bc4c8185e45
+Size (bearssl-0.5.tar.gz) = 666905 bytes
SHA1 (patch-conf_Unix.mk) = 452629d96619ddd63a726b2ae933610187d31a68