These daemons are required to implement NFS mounts using TLS,
as described in the Internet Draft "Towards Remote Procedure
Call Encryption By Default", which should soon become an RFC.
These daemons require OpenSSL libraries patched to support Kernel TLS (KTLS).
The OPENSSL port found in security/openssl-devel satisfies this requirement.
These daemons also require a FreeBSD system running a kernel built from a
kernel configuration file with "options KERNEL_TLS" specified in it.
sysutils/nfs-over-tls: deprecate
All supported releases of FreeBSD include this in base.
Depends on security/openssl which is EOL soon.
Approved by: rmacklem (maintainer, by private email)
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
nfs-over-tls: Update to version 1.2
The nfs-over-tls utilities have been patched to work
with newer versions of OpenSSL, which requires that
the KTLS be enabled via a library call.
This patch updates the port to version 1.2, which
has the patched utilities. It also adds an IGNORE
check for the case where the system already has the
daemons and fixes a typo in an IGNORE message.
Reviewed by: yasu
Approved by: yasu (ports)
sysutils/nfs-over-tls: Fix build with OpenSSL without KTLS patches
The NFS over TLS daemons have been updated so that they will build
with versions of OpenSSL not patched for KTLS and all arches.
They also check for KTLS being enabled and just errx() if not.
The Makefile with the sources was also modified to not specify
root/wheel during install so that the build step works as any user.
The source version has been bumped to 1.1 to reflect the source
and Makefile changes.
Reviewed by: lwhsu, loader, koobs
Approved by: lwhsu (ports), koobs (ports)
MFH: No (Port does not exist in quarterly)
Differential Revision: https://reviews.freebsd.org/D28572
