10:46 adridg 

Update devel/qca to latest upstream release

QCA is the Qt Cryptographic Architecture - straightforward cross-
platform crypto API.  This release has:
 * Add macOS framework major version
 * qca-gcrypt: Add support for HKDF
 * Minimum Qt updated to 5.9
 * Fixed compilation with gcc 11

While updating, I have added the patch for LibreSSL compatibility (and
tried to upsteam it). The patch comes via Gentoo and OpenBSD and has
been adjusted by lbartoletti@ and tjlegg@gmail.com and myself,
so I'm filling in something generic-ish in "Obtained from" since it
is collaborative. The PR: entry is for this patch, not for the update
to the recent release.

PR:		248590
Reported by:	portscout, tjlegg@gmail.com
Obtained from:	Gentoo/OpenBSD

 

21:25 tcberner 

devel/qca: add support for libressl

PR:		245116
Submitted by:	Felix Palmen <felix@palmen-it.de>

 

08:55 fluffy 

- Fix build with LibreSSL
    Provide RSA_meth_set_{sign,verify} for LibreSSL.
    Do not redefine M_ASN1_IA5STRING_new and RSA_F_RSA_EAY_PRIVATE_DECRYPT.
    Disable HKDF.
- Add description for BOTAN option

Obtained from:	Gentoo

 

19:22 rakuco 

Replace OpenSSL 1.1.0 with upstream ones

The patches from bug 228902 and added in r481850 are not entirely compatible
with older OpenSSL versions, to the point that the qca-ossl plugin refuses to
load at all on FreeBSD 11.2, for example (see bug 232784 and its duplicates).

Fix it by replacing our patches with backports from upstream the same way
OpenSUSE does it (the OpenSSL 1.1.0 upstream patch was authored by SUSE):

* Revert an upstream commit made only to the 2.1 branch disabling a few ciphers
  in the unit tests.
* Backport a change to the master branch that never made it to the 2.1 branch
  disabling the ciphers mentioned above as well as a few other ones, so that we
  can backport the actual change adding support for OpenSSL 1.1.0 more clealy.
* Backport the actual OpenSSL 1.1.0 support commit, with a few conflicts
  resolved due to the lack of a commit adding suport for AES GCM and AES CCM in
  the 2.1 branch. The patch was actually obtained from OpenSUSE's repositories,
  since they had to resolve the same conflict as well.

The port built fine on 11.2-i386, an old 12-CURRENT snapshot on amd64 as well
as 13-CURRENT on amd64, and all unit tests are passing except for some PGP ones
that are unrelated. With the patches we have in the tree, a lot of unit tests
failed on 11.2 due to the qca-ossl plugin failing to load.

PR:		228902
PR:		232784
Reviewed by:	tcberner
Differential Revision:	https://reviews.freebsd.org/D19347

 

19:56 adridg 

Fix devel/qca with OpenSSL 1.1.1.

Contains portions extracted from upstream and portions created by
submitter. Upstream bits are marked with their git hash.

PR:		228902
Submitted by:	Nathan <ndowens@yahoo.com>
Reported by:	brnrd

 

20:36 rakuco 

Adjust the SHA0 removal patch.

The upstream fix was still returning "sha0" in all_hash_types() even when SHA0
support is not present. The fix has also been submitted upstream.

PR:		211833
Submitted by:	matthew@reztek.cz
MFH:		2016Q3

 

18:14 brnrd 

devel/qca: Fix build failure on 9.3 / OpenSSL 0.9.7

  - Re-add patch for compression to satisfy 0.9.7

PR:		210053

 

12:10 brnrd 

devel/qca: Fix building without SSLv3 and SHA-0

  - Add 2 patches from upstream project
    - Fix building when libssl does not have SSLv3
    - Fix building when libcrypto does not have SHA-0
  - Replace USE_OPENSSL with USES= ssl
  - Rework files/patch-libressl with `make makepatch`

Tested with devel/qca and devel/qca-qt5

PR:		210053
Approved by:	Maintainer time-out
Obtained from:	KDE
Differential Revision:	D6885