summaryrefslogtreecommitdiff
path: root/security/openssl
AgeCommit message (Collapse)AuthorFilesLines
2005-02-24Add RMD160 digests.agc1-1/+2
2005-02-20when linking shared libssl on Solaris, make sure the rpath isgrant2-6/+14
included so it can find libcrypto.
2005-02-02Modify openssl/Makefile so that it's easier to test the -STABLE andjlam1-6/+22
-SNAP OpenSSL snapshots.
2005-01-18when building with SunPro on x86, do not use -fast argument to cc(1)grant2-4/+13
because: - its behaviour changes between releases - it uses build-host specific instructions where possible, specifically on >= Solaris 9 update 6 and Sun Studio 9 (sse, sse2) this breaks using the binary pkg when installed on systems with a less capable processor. instead, just use -xO5 so the binary pkg will work everywhere.
2005-01-13Bump PKGREVISION to 1 as a result of fixing the run-time behavior ofjlam1-1/+2
openssl on sparc64 and amd64 in the previous commit.
2005-01-13Optimize the NetBSD/amd64 config a bit to improve RC4 performance, andjlam2-5/+5
fix the NetBSD/sparc64 config by adding -DMD32_REG_T=int to the flags. Tested by martin (at) NetBSD.org. This should fix PR pkg/28858.
2005-01-11Fix build on NetBSD/sparc64 by marking the system as ``ULTRASPARC''jlam2-19/+19
so that the appropriate OpenSSL sources are built. Also, explicitly mark the endianness of each supported NetBSD platform to avoid potential endianness issues when doing the crypto arithmetic.
2005-01-11Fix compilation on Interix. Reported in PR pkg/28938tv2-4/+4
by HIRAMATSU Yoshifumi <hiramatu@boreas.dti.ne.jp>.
2004-12-31Fix a bug in the OpenSSL makefiles that installed a libfips.so symlinkjlam2-6/+20
that pointed to nothing. There is no such thing as "libfips".
2004-12-27Fix compilation on FreeBSD/x86 by ensuring that the FIPS assembly codejlam2-4/+15
isn't used when fips isn't requested during configuration.
2004-12-27Fix build on non-x86 platforms (PR pkg/28787).jlam2-14/+14
2004-12-25Alter patches to make them more likely to be accepted back by thejlam4-15/+36
OpenSSL project. Also use the sparcv9 MD5 assembly routines on NetBSD/sparc64.
2004-12-25Use the correct assembly routines on NetBSD/i386 depending on whetherjlam3-13/+22
it's a.out or ELF.
2004-12-24Update security/openssl to 0.9.7e. Changes from openssl-0.9.6m arejlam18-395/+961
too numerous to be listed here, but include adding a new DES API (support for the old one is still present). Changes to the pkgsrc structure include: * Install the shared libraries with a version number that matches the OpenSSL version number * Move some of the less often-used c_* utilities back into the examples directory. * Drop support for using the RSAREF library and always use the built-in RSA code instead.
2004-12-19ick: openssl builds PIC static libraries and then later uses them togrant2-6/+23
build shared libraries. on Darwin with xlc, this fails because of the way xlc invokes Darwin's in-base libtool to create shared libraries, meaning that the -all_load argument cannot be used to import all symbols. work around this the same way as UnixWare does it, by listing the archive library contents and linking the object files into the shared library individually. also remove some other assumed gcc'isms to make this build on Darwin with xlc. XXX maybe this pkg should be libtool'ized?
2004-12-18minor whitespace nit.jlam1-2/+2
2004-12-18Fix a typo that caused us not to check the correct header for the presencejlam1-2/+2
of "des_cblock". This fixes PR pkg/28703.
2004-12-17Update to 0.9.6mnb2: Don't install (deprecated) der_chop examplewiz4-8/+16
script, since it has insecure temp file handling.
2004-12-14Change the way that openssl/builtin.mk handles the USE_OLD_DES_API flag.jlam1-28/+54
The idea is to prevent needing to patch source files for packages that use OpenSSL for DES support by ensuring that including <openssl/des.h> will always present the old DES API. (1) If des_old.h exists, then we're using OpenSSL>=0.9.7, and <openssl/des.h> already does the right thing. (2) If des_old.h doesn't exist, then one of two things is happening: (a) If <openssl/des.h> is old and (only) supports the old DES API, then <openssl/des.h> does the right thing. (b) If it's NetBSD's Special(TM) one that stripped out the old DES support into a separate library and header (-ldes, <des.h>), then we create a new header <openssl/des.h> that includes the system one and <des.h>. Also modify existing packages that set USE_OLD_DES_API to simply include <openssl/des.h> instead of either <des.h> or <openssl/des_old.h> (This step is mostly just removing unnecessary patches). This should fix building packages that use OpenSSL's old DES API support on non-NetBSD systems where the built-in OpenSSL is at least 0.9.7.
2004-12-11Provide an SSLKEYS variable that points to the location where OpenSSLjlam1-2/+6
private keys are likely to be installed. Patch directly from PR pkg/28477 by Jason Thorpe.
2004-12-03Attempt to deal with the differing DES APIs between OpenSSL 0.9.6 (injlam1-1/+56
pkgsrc and in NetBSD-1.6.x) and OpenSSL 0.9.7 (in NetBSD-2.0), by creating a new yes/no variable USE_OLD_DES_API that flags whether the package wants to use the old DES API. If USE_OLD_DES_API is "yes", then: * For OpenSSL 0.9.6, symlink ${BUILDLINK_DIR}/include/openssl/des_old.h to ${SSLBASE}/include/openssl/des.h. * For NetBSD 2.0's "special" installation of OpenSSL 0.9.7, symlink ${BUILDLINK_DIR}/include/openssl/des_old.h to /usr/include/des.h, and transform "-lcrypto" into "-ldes -lcrypto". This makes it behave like stock OpenSSL 0.9.7 where the old DES functions are part of libcrypto. Software that wants to use the old DES API should be taught to do it in a way that works with a stock installation of OpenSSL 0.9.7 -- by including <openssl/des_old.h> and linking against "-lcrypto". Software that wants to use the new DES API should simply depend on openssl>=0.9.7. This change has no impact on existing packages as the new code is active only when USE_OLD_DES_API == "yes".
2004-12-03reorder: commands are specified using WRAPPER_REORDER_CMDS, notjlam1-2/+2
BUILDLINK_TRANSFORM.
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv1-1/+2
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
2004-08-28Back out previous... unintended commit.jlam1-3/+3
2004-08-28Use the new BUILDLINK_TRANSFORM commands to more precisely state thejlam1-3/+3
intended transformation: use "rm" to remove an option, "rmdir" to remove all options containing a path starting with a given directory name, and "rename" to rename options to something else.
2004-08-22Change the way that legacy USE_* and FOO_USE_* options are convertedjlam1-7/+3
into the bsd.options.mk framework. Instead of appending to ${PKG_OPTIONS_VAR}, it appends to PKG_DEFAULT_OPTIONS. This causes the default options to be the union of PKG_DEFAULT_OPTIONS and any old USE_* and FOO_USE_* settings. This fixes PR pkg/26590.
2004-08-05Convert to use bsd.options.mk.jlam1-2/+4
2004-08-05Document the "rsaref" build option.jlam1-1/+5
2004-07-30Convert to use bsd.options.mk. The relevant options variable to setjlam1-2/+15
for each package can be determined by invoking: make show-var VARNAME=PKG_OPTIONS_VAR The old options are still supported unless the variable named in PKG_OPTIONS_VAR is set within make(1) (usually via /etc/mk.conf).
2004-07-06Unused.wiz1-178/+0
2004-04-25Make compile on Interix. No-op change for other platforms, so no PKGREVISIONtv4-13/+36
bump. (Main MI change: -soname -> -h, as some GNU ld(1) wants --soname instead of -soname, but -h works on all GNU ld(1) versions.)
2004-04-07If the native OpenSSL contains the security fixes pulled up to thetron1-6/+6
netbsd-1-6 branch on 2004-04-01, then pretend it's openssl-0.9.6m.
2004-04-02Grammar fix.wiz1-3/+3
2004-04-02If the native OpenSSL contains the security fixes pulled up to thejlam1-9/+19
netbsd-1-6 branch on 2004-04-01, then pretend it's openssl-0.9.6m.
2004-03-29Fix build on NetBSD sparc64 with perl 5.8.seb2-1/+24
usage of perl's int() causes trouble with perl 5.8.3 (5.8*?) on at least NetBSD sparc64/1.6.2. The perl script openssl-0.9.6m/crypto/bn/bn_prime.pl uses the perl function int() to truncate the return of sqrt() function. On the above mentioned platform this leads to execution error: ... /usr/pkg/bin/perl bn_prime.pl >bn_prime.h Illegal modulus zero at bn_prime.pl line 16. Tracing the problem I've found that this int() usage may be the key of the problem. Please note the following: $ uname -srm; perl -v | grep 'This is perl'; perl -e 'print int(sqrt(3)),"\n"' NetBSD 1.6.2 sparc64 This is perl, v5.8.3 built for sparc64-netbsd 2 And... $ uname -srm; perl -v | grep 'This is perl'; perl -e 'print int(sqrt(3)),"\n"' NetBSD 1.6.2 sparc64 This is perl, v5.6.1 built for sparc64-netbsd 1 Also note that perlfunc(3) warns about int() used for rounding and recommends to use sprintf, printf, POSIX::floor or POSIX::ceil when applicable. My workaround is to use POSIX::floor() instead of int().
2004-03-26Consolidate all of the PLIST.* files that duplicated each other into ajlam7-38/+10
single file PLIST.shlib. Only have PLIST.${LOWER_OPSYS} if it differs from PLIST.shlib.
2004-03-26Don't rebuild openssl again as part of installing it.jlam2-5/+10
2004-03-26Allow the rehash of the certs database to not error out during the buildjlam3-14/+23
due to libssl.so.300 not being found by correctly setting LD_LIBRARY_PATH.
2004-03-26We can't use ${PKGBASE} on the left-hand side of an assignment since it'sjlam1-2/+2
not defined yet until bsd.pkg.mk. Explicitly use "openssl" instead. This correctly forces NetBSD installations of openssl to use /etc/openssl as the configuration file directory as originally intended.
2004-03-26Add some mirror sites since the main OpenSSL site seems to be dead at thejlam1-2/+7
moment.
2004-03-26Update to 0.9.6m:wiz9-39/+38
Changes between 0.9.6l and 0.9.6m [17 Mar 2004] *) Fix null-pointer assignment in do_change_cipher_spec() revealed by using the Codenomicon TLS Test Tool (CAN-2004-0079) [Joe Orton, Steve Henson]
2004-03-18Fix serious bug where BUILDLINK_PACKAGES wasn't being ordered properlyjlam1-3/+2
by moving the inclusion of buildlink3.mk files outside of the protected region. This bug would be seen by users that have set PREFER_PKGSRC or PREFER_NATIVE to non-default values. BUILDLINK_PACKAGES should be ordered so that for any package in the list, that package doesn't depend on any packages to the left of it in the list. This ordering property is used to check for builtin packages in the correct order. The problem was that including a buildlink3.mk file for <pkg> correctly ensured that <pkg> was removed from BUILDLINK_PACKAGES and appended to the end. However, since the inclusion of any other buildlink3.mk files within that buildlink3.mk was in a region that was protected against multiple inclusion, those dependencies weren't also moved to the end of BUILDLINK_PACKAGES.
2004-03-10Split out the code that deals with checking whether the software isjlam2-175/+146
built-in or not into a separate builtin.mk file. The code to deal checking for built-in software is much simpler to deal with in pkgsrc. The buildlink3.mk file for a package will be of the usual format regardless of the package, which makes it simpler for packagers to update a package. The builtin.mk file for a package must define a single yes/no variable USE_BUILTIN.<pkg> that is used by bsd.buildlink3.mk to decide whether to use the built-in software or to use the pkgsrc software.
2004-03-09Don't build and install openssl with IDEA, MDC2, or RC5 support.reed2-8/+5
According to README, "RSA Security holds software patents on the RC5 algorithm. If you intend to use this cipher, you must contact RSA Security for licensing conditions." And "The IDEA algorithm is patented by Ascom ... They should be contacted if that algorithm is to be used." The openssl FAQ says "For patent reasons, support for IDEA, RC5 and MDC2 is disabled in this [Red Hat Linux] version." The FAQ lists patent numbers and expiry dates of US patents: MDC-2: 4,908,861 13/03/2007 IDEA: 5,214,703 25/05/2010 RC5: 5,724,428 03/03/2015 Now fee-based-commercial-use ACCEPTABLE_LICENSES is not needed.
2004-02-29include mk/compiler.mk before testing ${CC}grant1-1/+2
2004-02-18Reorder some lines so that BUILDLINK_USE_BUILTIN.<pkg> set in thejlam1-16/+18
environment overrides all other settings.
2004-02-17Don't use sysctl to determine the machine arch when ${MACHINE_ARCH} alreadyjlam3-5/+6
has the correct value. Fixes build on NetBSD-1.5.3/sparc, which doesn't understand "sysctl hw.machine_arch", reported in PR 24448.
2004-02-12s/_BUILTIN_OPENSSL/BUILDLINK_IS_BUILTIN.openssl/gjlam1-3/+3
2004-02-12Create a new variable PREFER_NATIVE that has the opposite semanticsjlam2-6/+26
as PREFER_PKGSRC. Preferences are determined by the most specific instance of the package in either PREFER_PKGSRC or PREFER_NATIVE. If a package is specified in neither or in both variables, then PREFER_PKGSRC has precedence over PREFER_NATIVE.
2004-02-12Reorganize code so that any dependencies are checked as part of decidingjlam2-48/+48
whether the software is built-in or not. This facilitates implementing the forthcoming PKGSRC_NATIVE variable.
generated by cgit v1.2.3 (git 2.39.1) at 2024-06-30 03:34:52 +0000