07:48 Tijl Coosemans (tijl) 

security/gnutls: Update to 3.8.5

Add SRP option.  Upstream disabled it by default in 3.8.0
"because the SRP authentication in TLS is not up to date with
the latest TLS standards and its ciphersuites are based on
the CBC mode and SHA-1."

    5bf0d42

00:40 Yasuhiro Kimura (yasu) 

security/gnutls: Update to 3.8.4

ChangeLog:	https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html
PR:		277984
Approved by:	tijl (maintainer)
Exp-run by:	antoine

    afe09db

16:26 Muhammad Moinur Rahman (bofh) 

security/gnutls: Moved man to share/man

Approved by:    portmgr (blanket)

    24916a6

09:52 Tijl Coosemans (tijl) 

security/gnutls: Update to 3.7.10

    ad37eb3

13:29 Tijl Coosemans (tijl) 

security/gnutls: Update to 3.7.9

Security:	https://gnutls.org/security-new.html#GNUTLS-SA-2020-07-14

    56cb8eb

10:06 Yasuhiro Kimura (yasu) 

security/gnutls: Update to 3.7.8

ChangeLog:	https://lists.gnupg.org/pipermail/gnutls-help/2022-September/004765.html
PR:		266746
Approved by:	tijl (maintainer)

    1039d10

09:07 Yasuhiro Kimura (yasu) 

security/gnutls: Update to 3.7.7

ChangeLog:	https://lists.gnupg.org/pipermail/gnutls-help/2022-July/004746.html
PR:		265726
Approved by:	tijl (maintainer)
MFH:		2022Q3
Security:	CVE-2022-2509

    5b45bb0

16:58 Tijl Coosemans (tijl) 

security/gnutls: update to 3.7.6

    b286f39

21:41 Tijl Coosemans (tijl) 

security/gnutls: update to 3.7.5

    7701f7d

12:11 Tijl Coosemans (tijl) 

security/gnutls: update to 3.7.4

Switch from security/ca_root_nss to base system certificate store.
Disable obsolete TPM 1.2 support.

PR:		257995, 260723, 263107, 263131
Exp-run by:	antoine

    a67a3f9

16:24 Tijl Coosemans (tijl) 

security/gnutls: update to 3.6.16

    5aab394

10:25 tijl 

Update to 3.6.15.

MFH:		2020Q3
Security:	https://gnutls.org/security-new.html#GNUTLS-SA-2020-09-04

 

12:08 adamw 

security/gnutls: Add MAN3 option

There are over 1,000 man3 pages. This adds a MAN3 option to
control their installation, similar to the openssl and libressl
ports.

PR:		248841
Approved by:	maintainer (tijl)

 

12:12 tijl 

Update to 3.6.14.

MFH:		2020Q2
Security:	https://gnutls.org/security-new.html#GNUTLS-SA-2020-06-03

 

15:46 tijl 

Update to 3.6.13.

Security:	https://gnutls.org/security-new.html#GNUTLS-SA-2020-03-31

 

11:54 tijl 

Update to 3.6.12.

 

16:28 tijl 

Update to 3.6.11.1, white space fix, and https WWW.

 

09:16 tijl 

Update to 3.6.10.

Also revert r508194 (-Wl,-z,notext on i386).  The problem has been fixed
upstream.

 

09:55 tijl 

Update to 3.6.9.

 

10:42 tijl 

Update to 3.6.8.

 

14:32 tijl 

Update to 3.6.7.

MFH:		2019Q2
Security:	https://www.gnutls.org/security-new.html#GNUTLS-SA-2019-03-27

 

15:22 tijl 

- Let gnutls look for its configuration files in PREFIX/etc instead of /etc.
- Use --with-default-trust-store-file to set the location of the root
  certificates so configure doesn't have to autodetect this and the
  build dependency can be removed.
- Define TEST_TARGET.
- Remove DOCSDIR.  The files are also in PREFIX/share/info.
- Use p11-kit-trust as the default PKCS#11 trust store.

PR:		235703
Reported by:	mi

 

11:48 tijl 

Update to 3.6.6.

 

09:32 tijl 

Update to 3.6.5.

PR:		234012
Exp-run by:	antoine

 

18:12 bapt 

Install texinfo files (GNU info) into ${PREFIX}/share/info

After a discussion on the mailing list on moving manpages to
${PREFIX}/share/man for consistency with base where it is
installed in usr/share/man, it appeared the same should happen
to GNU info files which were installed under share in base and
not in ports.

Now texinfo is not in base on any of the supported version of FreeBSD
it is possible to proceed to this move and it is easier to do than
the manpage change.

Other benefit than consistency are less patching: all build tools but
cmake are expecting info files to be under share/info and cmake (patched here)
was having an exception for BSD so the patch makes FreeBSD case less
specific for them

Bump revision of all impacted ports

PR:		232907
exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D17816

 

14:55 tijl 

Update to 3.5.19.

 

12:42 tijl 

Update to 3.5.18.

 

10:48 tijl 

Update to 3.5.17.

 

13:53 tijl 

Update to 3.5.16.

 

12:19 tijl 

Update to 3.5.15.

 

10:46 tijl 

Update to 3.5.13.

MFH:		2017Q2
Security:	https://gnutls.org/security.html#GNUTLS-SA-2017-4

 

16:46 tijl 

Update to 3.5.12.

 

14:50 tijl 

Update to 3.5.11.

 

14:34 tijl 

Update to 3.5.9.  Disable use of libidn2 for now because it does not provide
a pkgconfig file.

PR:		217073
Exp-run by:	antoine

 

22:27 tijl 

Update to 3.5.8.

PR:		215909
Submitted by:	brnrd
Exp-run by:	antoine
MFH:		2017Q1
Security:	0c5369fc-d671-11e6-a9a5-b499baebfeaf

 

10:26 tijl 

Update to 3.4.17 and pass the right dlopen path for libtspi to configure.

 

18:25 tijl 

Update to 3.4.16.

 

13:22 tijl 

Update to 3.4.15.

MFH:		2016Q3
Security:	https://gnutls.org/security.html#GNUTLS-SA-2016-3

 

15:36 tijl 

Update to 3.4.14.

 

16:26 tijl 

Update to 3.4.13.

 

18:55 tijl 

Update to 3.4.12.

libpkcs11mock1.so is commented out in pkg-plist because it is part of the
testsuite and shouldn't be installed.  This has been fixed upstream.

 

10:18 tijl 

Update to 3.4.11.

 

14:58 tijl 

- Update security/gnutls to 3.4.10.
- Rename the LIBDANE option DANE because that's the name of the protocol
  supported by libgnutls-dane and gnutls-cli.  Also clarify the option
  description.
- Add an IDN option.
- libgnutls-openssl has been removed in 3.4.  Some ports used this library
  in their LIB_DEPENDS but no port actually required it.
- Some old API functions have been removed.  Ports that used these have been
  updated or patched to use the new API.
- Add a patch to print/cups to prevent overlinking of libgnutls.so.
- Bump PORTREVISION on dependent ports.

net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.

www/hydra: Mark BROKEN.  This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.

PR:		207768
Exp-run by:	antoine
Approved by:	portmgr (antoine)

 

16:39 feld 

- Update to 3.3.17.1

MFH:		2015Q3
Relnotes:	http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/8268
Security:	ec6a2a1e-429d-11e5-9daa-14dae9d210b8

 

18:59 bdrewery 

- Update to 3.3.16

Changes: http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/8235

 

16:16 delphij 

Fix plist when LIBDANE is defined (PORTREVISION not bumped
because package wouldn't be successful in the case).

Pointy hat to:	delphij
Reported by:	sunpoet
MFH:		2015Q2

 

15:46 delphij 

Update to 3.3.15.

PR:		198875
Approved by:	maintainer

 

12:39 tijl 

Update gnutls to 3.2.21

PR:		196400
Approved by:	bdrewery (maintainer)

 

01:13 amdmi3 

- Fix plist for LIBDANE option

Approved by:	portmgr blanket

 

15:38 bdrewery 

- Update to 3.2.19

 

18:40 bdrewery 

Update to 3.2.18

 

09:14 koobs 

security/gnutls: Support OPTIONal library dependencies

Factor out libidn, libp11-kit and libtspi into OPTIONal library
dependencies, with the CRYWRAP, P11KIT and TPM options respectively, as per
the upstream documentation [1].

Make ZLIB an OPTION because we can, and the choice to customise
compression support in security software (especially lately) may be
very useful for some consumers.

Add CRYWRAP, P11KIT, TPM and ZLIB to OPTIONS_DEFAULT to retain current
default functionality.

[1] http://gnutls.org/manual/html_node/Downloading-and-installing.html

Inspired by:	Recent gnutls 2 -> 3 change, fan of minimal dependencies

PR:		192090
Submitted by:	koobs
Approved by:	maintainer

 

20:38 bdrewery 

- Fix plist

Reported by:	many

 

09:54 tijl 

- Replace security/gnutls with security/gnutls3 and update to 3.2.15
- Bump PORTREVISION on all ports that depend on security/gnutls and
  adjust all ports that depend on security/gnutls3
- Update mail/anubis to version 4.2 which supports gnutls 3.x
- Update mail/libvmime to a development snapshot (recommended by upstream
  developers)

PR:		191274
Exp-run by:	antoine
Approved by:	portmgr (antoine)

 

18:20 tijl 

- New LIB_DEPENDS syntax.
- USES=libtool:keepla tar:bzip2.
- Remove -fPIC flag.  Leftover from an old version.

 

23:40 bapt 

Fix properties on pkg-plist

 

11:18 novel 

- Fix possbile DoS in TLS record decoding [1]
- Fix installation without NLS [2]
- Require gmake and perl for build because in some
  occasions it will rebuild the documentation that
  works in a proper way with gmake only and needs perl
- Bump PORTREVISION

Security:	CVE-2013-2116
Reported by:	mat [2]

 

10:59 novel 

- Support stagedir
- Add LICENSE
- Fix pkg-descr formatting

PR:		185409
Submitted by:	Takefu <takefu@airport.fm>

 

16:14 novel 

Update to 2.12.23.

Security:	http://www.gnutls.org/security.html#GNUTLS-SA-2013-1

 

11:06 novel 

Respect NOPORTEXAMPLES.

PR:             166693
Submitted by:   scheidell, crees

18:34 novel 

Update to 2.12.6.1.

18:36 novel 

Update to 2.8.6.

18:01 novel 

Update to 2.8.3.

17:55 novel 

- Update to 2.6.3
- Remove WITH_OPENCDK knob since it's not relevant anymore
- Add WITH_LZO knob

PR:             127330 (partially)
Submitted by:   Yarema <yds@CoolRat.org>

16:50 novel 

Update to 2.4.0.

Unlike previous major version bumps, this time ABI hasn't changed, so
the shared libraries' versions stayed the same. Therefore, this update
doesn't requite any special handling.

11:52 novel 

Update to 2.2.2.

16:34 novel 

Update to 2.0.2.

08:54 novel 

- Update to 1.6.3
- Use ltverhack to avoid unnecessary shared library version changes
  in future

14:39 novel 

Update to 1.6.2.

08:52 novel 

Update to 1.6.1.

16:54 novel 

- Update to 1.4.1
- Remove --with-included-libtasn1 from CONFIGURE_ARGS (should have
  been done that earlier actually)

17:40 novel 

Update to 1.4.0.

10:40 ade 

Conversion to a single libtool environment.

Approved by:    portmgr (kris)

16:33 novel 

Update to 1.2.9.

11:23 novel 

- Revive CONFLICTS with gnutls-devel [1]
- Do not build static libraries [2]

Requested by:   kris [1]
                vs [2]

08:19 sergei 

- Update to 1.0.24 [1]
- Install pkg-config files into a proper directory

PR:             ports/76905 [1]
Submitted by:   Roman Bogorodskiy <bogorodskiy@inbox.ru> [1]

08:15 sergei 

- Update to 1.0.20, fixing GnuTLS certificate chain verification DoS
  vulnerability (portaudit ID: 84ab58cf-e4ac-11d8-9b0a-000347a4fa7d),
  described in the following advisories:
  - http://www.hornik.sk/SA/SA-20040802.txt
  - http://secunia.com/advisories/12156

PR:             ports/71502
Submitted by:   Koop Mast <kwm@rainbow-runner.nl>
Approved by:    portmgr (eik, marcus)

21:52 sergei 

- Update to 1.0.13 (latest stable version) [1]
- Switch to libtool-1.5
- NOTE: shlib version was downgraded from 13 to 12

PR:             ports/66331 [1]
Submitted by:   Brian Candler <B.Candler@pobox.com>

23:43 sergei 

- Update to 1.0.8
- Always depend on libtasn1 and opencdk
- Add libgcrypt-devel and libgpg-error dependencies
- Add explicit USE_ICONV and USE_GETTEXT to properly register
  shared library dependencies
- Add CONFLICTS to prevent installation over gnutls-devel

14:38 krion 

- Make security/opencdk and security/libtasn1 dependencies
  optional, enabled by WITH_OPENCDK and WITH_LIBTASN1 knobs,
  respectively.  NOTE: several people reported that using
  external libtasn1 breaks (at least some) GnuTLS functionality,
  so using WITH_LIBTASN1 is NOT recommended for now.
- Remove patch-configure as it breaks proper shared library build
- Build include lzo library by default (noticed by KATO Tsuguru)
- Re-sort pkg-plist

PR:             57346
Submitted by:   Sergei Kolobov <sergei@kolobov.com> (maintainer)

09:06 krion 

- Update to 0.8.10

PR:             57140
Submitted by:   maintainer

20:52 naddy 

- Update to 0.8.1
- Remove WITH_OPENCDK knob - require security/opencdk by default
- Use DOCSDIR and EXAMPLESDIR in pkg-plist

PR:             48706
Submitted by:   Sergei Kolobov <sergei@kolobov.com>

04:11 kris 

Add missing directory

22:12 nork 

- Add a knob for OpenCDK support (WITH_OPENCDK=yes), disabled by default
- Bump PORTREVISION - although there are no changes with the default options,
  hint users to upgrade to take advantage of OpenCDK support
- Re-sort MASTER_SITES (ftp.gnutls.org is temporarily unavailable)
- Allow user to specify their own CPPFLAGS and LDFLAGS
- Remove useless .la files
- Re-sort pkg-plist

PR:             ports/47525
Submitted by:   Sergei Kolobov <sergei@kolobov.com> (maintainer)

21:14 arved 

Update to 0.6.0

PR:             47102
Submitted by:   Sergei Kolobov <sergei@kolobov.com>

14:02 edwin 

GnuTLS is a portable ANSI C based library which implements the TLS 1.0 and
SSL 3.0 protocols. The library does not include any patented algorithms and
is available under the GNU Lesser GPL license.

Important features of the GnuTLS library include:
- Thread safety
- Support for both TLS 1.0 and SSL 3.0 protocols
- Support for both X.509 and OpenPGP certificates
- Support for basic parsing and verification of certificates
- Support for SRP for TLS authentication
- Support for TLS Extension mechanism
- Support for TLS Compression Methods

Additionaly GnuTLS provides an emulation API for the widely used
OpenSSL library, to ease integration with existing applications.

WWW:    http://www.gnutls.org/

PR:             ports/45348
Submitted by:   Sergei Kolobov <sergei@kolobov.com>