security: Add lua-ossl

A comprehensive OpenSSL module for Lua.

It includes support for certificate and key management, key generation,
signature verification, and deep bindings to the distinguished name,
alternative name, and X.509v3 extension interfaces.

It also binds OpenSSL's bignum, message digest, HMAC, cipher, and CSPRNG
interfaces. The end goal is to bind almost everything that OpenSSL supports,
but no more. It's intended as a low-level interface.

Basic bindings to OpenSSL's SSL* session and SSL_CTX* prototype objects are
available, but they cannot yet be used standalone to do SSL I/O. cqueues
supports SSL/TLS sockets internally, accepts an SSL_CTX* object from Lua
code for session configuration, and exports an SSL* object to Lua for session
introspection.

5 files changed, 82 insertions, 3 deletions

diff --git a/security/Makefile b/security/Makefile
index 45dca8a5661..e36ef629eb7 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.772 2020/07/07 23:47:40 nia Exp $
+# $NetBSD: Makefile,v 1.773 2020/07/08 12:41:12 nia Exp $
 #
 
 COMMENT=	Security tools
@@ -15,7 +15,6 @@ SUBDIR+=	PortableSigner
 SUBDIR+=	R-askpass
 SUBDIR+=	R-digest
 SUBDIR+=	R-openssl
-SUBDIR+=	TweetNaCl
 SUBDIR+=	acmesh
 SUBDIR+=	aide
 SUBDIR+=	aide06
@@ -208,6 +207,7 @@ SUBDIR+=	lsh
 SUBDIR+=	lua-arc4random
 SUBDIR+=	lua-argon2
 SUBDIR+=	lua-bcrypt
+SUBDIR+=	lua-ossl
 SUBDIR+=	lua-sec
 SUBDIR+=	lxqt-openssh-askpass
 SUBDIR+=	lxqt-policykit
@@ -231,7 +231,6 @@ SUBDIR+=	msu
 SUBDIR+=	msudir
 SUBDIR+=	multigest
 SUBDIR+=	munge
-SUBDIR+=	nacl
 SUBDIR+=	netpgp
 SUBDIR+=	netpgpverify
 SUBDIR+=	netramet
diff --git a/security/lua-ossl/DESCR b/security/lua-ossl/DESCR
new file mode 100644
index 00000000000..f2777ec0be8
--- /dev/null
+++ b/security/lua-ossl/DESCR
@@ -0,0 +1,15 @@
+A comprehensive OpenSSL module for Lua.
+
+It includes support for certificate and key management, key generation,
+signature verification, and deep bindings to the distinguished name,
+alternative name, and X.509v3 extension interfaces.
+
+It also binds OpenSSL's bignum, message digest, HMAC, cipher, and CSPRNG
+interfaces. The end goal is to bind almost everything that OpenSSL supports,
+but no more. It's intended as a low-level interface.
+
+Basic bindings to OpenSSL's SSL* session and SSL_CTX* prototype objects are
+available, but they cannot yet be used standalone to do SSL I/O. cqueues
+supports SSL/TLS sockets internally, accepts an SSL_CTX* object from Lua
+code for session configuration, and exports an SSL* object to Lua for session
+introspection.
diff --git a/security/lua-ossl/Makefile b/security/lua-ossl/Makefile
new file mode 100644
index 00000000000..69def445f69
--- /dev/null
+++ b/security/lua-ossl/Makefile
@@ -0,0 +1,32 @@
+# $NetBSD: Makefile,v 1.1 2020/07/08 12:41:12 nia Exp $
+
+DISTNAME=	luaossl-20190731
+PKGNAME=	${LUA_PKGPREFIX}-${DISTNAME:S/^lua//1}
+MASTER_SITES=	${MASTER_SITE_GITHUB:=wahern/}
+CATEGORIES=	security lua
+GITHUB_PROJECT=	luaossl
+GITHUB_TAG=	rel-${PKGVERSION_NOREV}
+
+MAINTAINER=	pkgsrc-users@NetBSD.org
+HOMEPAGE=	https://25thandclement.com/~william/projects/luaossl.html
+COMMENT=	Comprehensive OpenSSL module for Lua
+LICENSE=	mit
+
+USE_TOOLS+=	gmake
+
+MAKE_FILE=	GNUmakefile
+
+BUILD_DIRS=	src
+
+MAKE_ENV+=	prefix=${PREFIX}
+
+BUILD_TARGET=	all${_LUA_DOT_VERSION}
+INSTALL_TARGET=	install${_LUA_DOT_VERSION}
+
+MAKE_FLAGS+=	LUA_APIS=${LUA_VERSION_MAJOR}.${LUA_VERSION_MINOR}
+
+LUA_VERSIONS_ACCEPTED=	53 52 51
+
+.include "../../lang/lua/module.mk"
+.include "../../security/openssl/buildlink3.mk"
+.include "../../mk/bsd.pkg.mk"
diff --git a/security/lua-ossl/PLIST b/security/lua-ossl/PLIST
new file mode 100644
index 00000000000..a9adc822734
--- /dev/null
+++ b/security/lua-ossl/PLIST
@@ -0,0 +1,27 @@
+@comment $NetBSD: PLIST,v 1.1 2020/07/08 12:41:12 nia Exp $
+${LUA_CDIR}/_openssl.so
+${LUA_LDIR}/openssl.lua
+${LUA_LDIR}/openssl/auxlib.lua
+${LUA_LDIR}/openssl/bignum.lua
+${LUA_LDIR}/openssl/cipher.lua
+${LUA_LDIR}/openssl/des.lua
+${LUA_LDIR}/openssl/digest.lua
+${LUA_LDIR}/openssl/hmac.lua
+${LUA_LDIR}/openssl/kdf.lua
+${LUA_LDIR}/openssl/ocsp/basic.lua
+${LUA_LDIR}/openssl/ocsp/response.lua
+${LUA_LDIR}/openssl/pkcs12.lua
+${LUA_LDIR}/openssl/pkey.lua
+${LUA_LDIR}/openssl/pubkey.lua
+${LUA_LDIR}/openssl/rand.lua
+${LUA_LDIR}/openssl/ssl.lua
+${LUA_LDIR}/openssl/ssl/context.lua
+${LUA_LDIR}/openssl/x509.lua
+${LUA_LDIR}/openssl/x509/altname.lua
+${LUA_LDIR}/openssl/x509/chain.lua
+${LUA_LDIR}/openssl/x509/crl.lua
+${LUA_LDIR}/openssl/x509/csr.lua
+${LUA_LDIR}/openssl/x509/extension.lua
+${LUA_LDIR}/openssl/x509/name.lua
+${LUA_LDIR}/openssl/x509/store.lua
+${LUA_LDIR}/openssl/x509/verify_param.lua
diff --git a/security/lua-ossl/distinfo b/security/lua-ossl/distinfo
new file mode 100644
index 00000000000..af93310c969
--- /dev/null
+++ b/security/lua-ossl/distinfo
@@ -0,0 +1,6 @@
+$NetBSD: distinfo,v 1.1 2020/07/08 12:41:12 nia Exp $
+
+SHA1 (luaossl-20190731.tar.gz) = c78d5488a066bbf04ead8596c455ed33a28d8511
+RMD160 (luaossl-20190731.tar.gz) = 1bf5ca5a64d68b5a6533c0eae9f9c201bb176722
+SHA512 (luaossl-20190731.tar.gz) = 09315deb0c40b59230d80262906cb9f067660242315544179ec5df57a028b088c56a4bb0b944e5975bccf86d521901eae36006c5623ec1159cfca94d05fb6890
+Size (luaossl-20190731.tar.gz) = 350324 bytes