Import boringssl into the packages collection. This is a tar file of

the sources taken at 20151230 from

	https://boringssl.googlesource.com/boringssl/

with portability fixes for NetBSD.  It installs into ${PREFIX}/bssl to
avoid conflicts with openssl.

	BoringSSL is a fork of OpenSSL that is designed to meet Google's
	needs.

	Although BoringSSL is an open source project, it is not intended for
	general use, as OpenSSL is.  We don't recommend that third parties
	depend upon it.  Doing so is likely to be frustrating because there
	are no guarantees of API or ABI stability.

	Programs ship their own copies of BoringSSL when they use it and we
	update everything as needed when deciding to make API changes.  This
	allows us to mostly avoid compromises in the name of compatibility.
	It works for us, but it may not work for you.

	BoringSSL arose because Google used OpenSSL for many years in various
	ways and, over time, built up a large number of patches that were
	maintained while tracking upstream OpenSSL.  As Google's product
	portfolio became more complex, more copies of OpenSSL sprung up and
	the effort involved in maintaining all these patches in multiple
	places was growing steadily.

10 files changed, 242 insertions, 0 deletions

diff --git a/security/boringssl/DESCR b/security/boringssl/DESCR
new file mode 100644
index 00000000000..7935d0ea0fb
--- /dev/null
+++ b/security/boringssl/DESCR
@@ -0,0 +1,19 @@
+BoringSSL is a fork of OpenSSL that is designed to meet Google's
+needs.
+
+Although BoringSSL is an open source project, it is not intended for
+general use, as OpenSSL is.  We don't recommend that third parties
+depend upon it.  Doing so is likely to be frustrating because there
+are no guarantees of API or ABI stability.
+
+Programs ship their own copies of BoringSSL when they use it and we
+update everything as needed when deciding to make API changes.  This
+allows us to mostly avoid compromises in the name of compatibility.
+It works for us, but it may not work for you.
+
+BoringSSL arose because Google used OpenSSL for many years in various
+ways and, over time, built up a large number of patches that were
+maintained while tracking upstream OpenSSL.  As Google's product
+portfolio became more complex, more copies of OpenSSL sprung up and
+the effort involved in maintaining all these patches in multiple
+places was growing steadily.
diff --git a/security/boringssl/Makefile b/security/boringssl/Makefile
new file mode 100644
index 00000000000..475a59eb97d
--- /dev/null
+++ b/security/boringssl/Makefile
@@ -0,0 +1,38 @@
+# $NetBSD: Makefile,v 1.1.1.1 2015/12/31 02:57:35 agc Exp $
+
+DISTNAME=	boringssl-20151230
+CATEGORIES=	security
+MASTER_SITES=	${MASTER_SITE_LOCAL}
+
+MAINTAINER=	pkgsrc-users@NetBSD.org
+HOMEPAGE=	https://boringssl.googlesource.com/boringssl/
+COMMENT=	Fork of OpenSSL designed to meet Google's needs
+LICENSE=	openssl
+
+WRKSRC=		${WRKDIR}/boringssl
+
+USE_TOOLS+=	cmake perl
+USE_LANGUAGES+=	c c++
+
+AUTO_MKDIRS=	yes
+
+do-build:
+	mkdir -p ${WRKSRC}/build
+	cd ${WRKSRC}/build && cmake ..
+	cd ${WRKSRC}/build && make
+
+do-install:
+	for d in bssl/bin bssl/lib bssl/include/openssl; do		\
+		mkdir -p ${DESTDIR}${PREFIX}/$$d; 			\
+	done
+	${INSTALL_LIB} ${WRKSRC}/build/crypto/libcrypto.a ${DESTDIR}${PREFIX}/bssl/lib
+	${INSTALL_LIB} ${WRKSRC}/build/ssl/libssl.a ${DESTDIR}${PREFIX}/bssl/lib
+	${INSTALL_PROGRAM} ${WRKSRC}/build/ssl/test/bssl_shim ${DESTDIR}${PREFIX}/bssl/bin/bssl_shim
+	${INSTALL_PROGRAM} ${WRKSRC}/build/ssl/ssl_test ${DESTDIR}${PREFIX}/bssl/bin/ssl_test
+	${INSTALL_PROGRAM} ${WRKSRC}/build/tool/bssl ${DESTDIR}${PREFIX}/bssl/bin/bssl
+	(cd ${WRKSRC}/include/openssl &&				\
+		for f in *.h; do					\
+			${INSTALL_DATA} $$f ${DESTDIR}${PREFIX}/bssl/include/openssl/$$f; \
+		done)
+
+.include "../../mk/bsd.pkg.mk"
diff --git a/security/boringssl/PLIST b/security/boringssl/PLIST
new file mode 100644
index 00000000000..d85db7ec62c
--- /dev/null
+++ b/security/boringssl/PLIST
@@ -0,0 +1,77 @@
+@comment $NetBSD: PLIST,v 1.1.1.1 2015/12/31 02:57:35 agc Exp $
+bssl/bin/bssl
+bssl/bin/bssl_shim
+bssl/bin/ssl_test
+bssl/include/openssl/aead.h
+bssl/include/openssl/aes.h
+bssl/include/openssl/arm_arch.h
+bssl/include/openssl/asn1.h
+bssl/include/openssl/asn1_mac.h
+bssl/include/openssl/asn1t.h
+bssl/include/openssl/base.h
+bssl/include/openssl/base64.h
+bssl/include/openssl/bio.h
+bssl/include/openssl/blowfish.h
+bssl/include/openssl/bn.h
+bssl/include/openssl/buf.h
+bssl/include/openssl/buffer.h
+bssl/include/openssl/bytestring.h
+bssl/include/openssl/cast.h
+bssl/include/openssl/chacha.h
+bssl/include/openssl/cipher.h
+bssl/include/openssl/cmac.h
+bssl/include/openssl/conf.h
+bssl/include/openssl/cpu.h
+bssl/include/openssl/crypto.h
+bssl/include/openssl/curve25519.h
+bssl/include/openssl/des.h
+bssl/include/openssl/dh.h
+bssl/include/openssl/digest.h
+bssl/include/openssl/dsa.h
+bssl/include/openssl/dtls1.h
+bssl/include/openssl/ec.h
+bssl/include/openssl/ec_key.h
+bssl/include/openssl/ecdh.h
+bssl/include/openssl/ecdsa.h
+bssl/include/openssl/engine.h
+bssl/include/openssl/err.h
+bssl/include/openssl/evp.h
+bssl/include/openssl/ex_data.h
+bssl/include/openssl/hkdf.h
+bssl/include/openssl/hmac.h
+bssl/include/openssl/lhash.h
+bssl/include/openssl/lhash_macros.h
+bssl/include/openssl/md4.h
+bssl/include/openssl/md5.h
+bssl/include/openssl/mem.h
+bssl/include/openssl/obj.h
+bssl/include/openssl/obj_mac.h
+bssl/include/openssl/objects.h
+bssl/include/openssl/opensslfeatures.h
+bssl/include/openssl/opensslv.h
+bssl/include/openssl/ossl_typ.h
+bssl/include/openssl/pem.h
+bssl/include/openssl/pkcs12.h
+bssl/include/openssl/pkcs7.h
+bssl/include/openssl/pkcs8.h
+bssl/include/openssl/poly1305.h
+bssl/include/openssl/pqueue.h
+bssl/include/openssl/rand.h
+bssl/include/openssl/rc4.h
+bssl/include/openssl/rsa.h
+bssl/include/openssl/safestack.h
+bssl/include/openssl/sha.h
+bssl/include/openssl/srtp.h
+bssl/include/openssl/ssl.h
+bssl/include/openssl/ssl3.h
+bssl/include/openssl/stack.h
+bssl/include/openssl/stack_macros.h
+bssl/include/openssl/thread.h
+bssl/include/openssl/time_support.h
+bssl/include/openssl/tls1.h
+bssl/include/openssl/type_check.h
+bssl/include/openssl/x509.h
+bssl/include/openssl/x509_vfy.h
+bssl/include/openssl/x509v3.h
+bssl/lib/libcrypto.a
+bssl/lib/libssl.a
diff --git a/security/boringssl/distinfo b/security/boringssl/distinfo
new file mode 100644
index 00000000000..ef5f3459b6b
--- /dev/null
+++ b/security/boringssl/distinfo
@@ -0,0 +1,12 @@
+$NetBSD: distinfo,v 1.1.1.1 2015/12/31 02:57:35 agc Exp $
+
+SHA1 (boringssl-20151230.tar.gz) = eb3681358044990bc54c9ab58a3ce8d951edd022
+RMD160 (boringssl-20151230.tar.gz) = cf2b15e5dc261efcba44cb493947e9c48d346c36
+SHA512 (boringssl-20151230.tar.gz) = 868e53f5cc695c115b261cae67855f95bc017278aecb86b57941a8f0bfa553cb01ebc8cef65d82c18c65cf34b36fbd33a663805b1fcde37f40a88a11c30d7b73
+Size (boringssl-20151230.tar.gz) = 21984504 bytes
+SHA1 (patch-crypto__bio__bio_test.cc) = 441f14b565c566528d175d56fec34b905c1400cf
+SHA1 (patch-crypto__bio__internal.h) = ca998dc82f208fcc46144c932154c456474a9e88
+SHA1 (patch-crypto__bio__socket_helper.c) = 6ac17f5899817522d3ba883a88d87b5d8541213e
+SHA1 (patch-crypto__lhash__lhash_test.c) = 9f411a45fcb8d861911f8ef69651f591a70211b2
+SHA1 (patch-crypto__mem.c) = 186c7f7af8b28defc80266a351456328df0976cc
+SHA1 (patch-include__openssl__thread.h) = 0faf11db8591026c10ae3271936b1ef6381d977a
diff --git a/security/boringssl/patches/patch-crypto__bio__bio_test.cc b/security/boringssl/patches/patch-crypto__bio__bio_test.cc
new file mode 100644
index 00000000000..24e5ee69dff
--- /dev/null
+++ b/security/boringssl/patches/patch-crypto__bio__bio_test.cc
@@ -0,0 +1,16 @@
+$NetBSD: patch-crypto__bio__bio_test.cc,v 1.1.1.1 2015/12/31 02:57:35 agc Exp $
+
+NetBSD portability patches
+
+--- crypto/bio/bio_test.cc.orig	2015-12-30 15:55:50.000000000 -0800
++++ crypto/bio/bio_test.cc	2015-12-30 18:06:05.000000000 -0800
+@@ -13,7 +13,9 @@
+  * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
+ 
+ #if !defined(_POSIX_C_SOURCE)
++#  if !defined(__NetBSD__)
+ #define _POSIX_C_SOURCE 201410L
++#  endif
+ #endif
+ 
+ #include <openssl/base.h>
diff --git a/security/boringssl/patches/patch-crypto__bio__internal.h b/security/boringssl/patches/patch-crypto__bio__internal.h
new file mode 100644
index 00000000000..de0fa77e10c
--- /dev/null
+++ b/security/boringssl/patches/patch-crypto__bio__internal.h
@@ -0,0 +1,15 @@
+$NetBSD: patch-crypto__bio__internal.h,v 1.1.1.1 2015/12/31 02:57:35 agc Exp $
+
+NetBSD portability patches
+
+--- crypto/bio/internal.h.orig	2015-12-30 15:55:50.000000000 -0800
++++ crypto/bio/internal.h	2015-12-30 18:06:05.000000000 -0800
+@@ -59,6 +59,8 @@
+ 
+ #include <openssl/base.h>
+ 
++#include <netdb.h>
++
+ #if !defined(OPENSSL_WINDOWS)
+ #if defined(OPENSSL_PNACL)
+ /* newlib uses u_short in socket.h without defining it. */
diff --git a/security/boringssl/patches/patch-crypto__bio__socket_helper.c b/security/boringssl/patches/patch-crypto__bio__socket_helper.c
new file mode 100644
index 00000000000..e8f3c01e3ce
--- /dev/null
+++ b/security/boringssl/patches/patch-crypto__bio__socket_helper.c
@@ -0,0 +1,17 @@
+$NetBSD: patch-crypto__bio__socket_helper.c,v 1.1.1.1 2015/12/31 02:57:35 agc Exp $
+
+NetBSD portability patches
+
+--- crypto/bio/socket_helper.c.orig	2015-12-30 15:55:50.000000000 -0800
++++ crypto/bio/socket_helper.c	2015-12-30 18:06:05.000000000 -0800
+@@ -12,8 +12,10 @@
+  * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
+  * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
+ 
++#if !defined(__NetBSD__)
+ #undef _POSIX_C_SOURCE
+ #define _POSIX_C_SOURCE 200112L
++#endif
+ 
+ #include <openssl/bio.h>
+ #include <openssl/err.h>
diff --git a/security/boringssl/patches/patch-crypto__lhash__lhash_test.c b/security/boringssl/patches/patch-crypto__lhash__lhash_test.c
new file mode 100644
index 00000000000..98f58a8b258
--- /dev/null
+++ b/security/boringssl/patches/patch-crypto__lhash__lhash_test.c
@@ -0,0 +1,16 @@
+$NetBSD: patch-crypto__lhash__lhash_test.c,v 1.1.1.1 2015/12/31 02:57:35 agc Exp $
+
+NetBSD portability patches
+
+--- crypto/lhash/lhash_test.c.orig	2015-12-30 15:55:51.000000000 -0800
++++ crypto/lhash/lhash_test.c	2015-12-30 18:06:05.000000000 -0800
+@@ -13,7 +13,9 @@
+  * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
+ 
+ #if !defined(_POSIX_C_SOURCE)
++#  if !defined(__NetBSD__)
+ #define _POSIX_C_SOURCE 201410L
++#  endif
+ #endif
+ 
+ #include <openssl/crypto.h>
diff --git a/security/boringssl/patches/patch-crypto__mem.c b/security/boringssl/patches/patch-crypto__mem.c
new file mode 100644
index 00000000000..2ca276ad3c8
--- /dev/null
+++ b/security/boringssl/patches/patch-crypto__mem.c
@@ -0,0 +1,16 @@
+$NetBSD: patch-crypto__mem.c,v 1.1.1.1 2015/12/31 02:57:35 agc Exp $
+
+NetBSD portability patches
+
+--- crypto/mem.c.orig	2015-12-30 15:55:51.000000000 -0800
++++ crypto/mem.c	2015-12-30 18:06:05.000000000 -0800
+@@ -55,7 +55,9 @@
+  * [including the GNU Public Licence.] */
+ 
+ #if !defined(_POSIX_C_SOURCE)
++#  if !defined(__NetBSD__)
+ #define _POSIX_C_SOURCE 201410L  /* needed for strdup, snprintf, vprintf etc */
++#  endif
+ #endif
+ 
+ #include <openssl/mem.h>
diff --git a/security/boringssl/patches/patch-include__openssl__thread.h b/security/boringssl/patches/patch-include__openssl__thread.h
new file mode 100644
index 00000000000..1c0ede384ca
--- /dev/null
+++ b/security/boringssl/patches/patch-include__openssl__thread.h
@@ -0,0 +1,16 @@
+$NetBSD: patch-include__openssl__thread.h,v 1.1.1.1 2015/12/31 02:57:35 agc Exp $
+
+NetBSD portability patches
+
+--- include/openssl/thread.h.orig	2015-12-30 15:55:52.000000000 -0800
++++ include/openssl/thread.h	2015-12-30 18:06:05.000000000 -0800
+@@ -87,6 +87,9 @@
+ typedef union crypto_mutex_st {
+   double alignment;
+   uint8_t padding[3*sizeof(int) + 5*sizeof(unsigned) + 16 + 8];
++#if defined(__NetBSD__)
++  uint8_t	nbpad[64 + 8];
++#endif
+ } CRYPTO_MUTEX;
+ #endif
+