| Commit History - (may be incomplete: see SVNWeb link above for full details) |
| Date | By | Description |
20 Nov 2018 17:53:09
  1.0.2q,1
 |
brnrd  |
security/openssl: Update to 1.0.2q |
12 Nov 2018 20:19:24
1.0.2p_2,1
|
brnrd |
security/openssl: Security update for CVE-2018-5407
MFH: 2018Q4
Security: 6f170cf2-e6b7-11e8-a9a8-b499baebfeaf |
18 Oct 2018 09:30:09
1.0.2p_1,1
|
amdmi3 |
- Update WWW
Approved by: portmgr blanket |
12 Sep 2018 11:36:17
1.0.2p_1,1
|
brnrd |
Chase CONFLICTS after addition of security/openssl111
- While here mark OpenSSL 1.1.0 deprecated
see: https://www.openssl.org/policies/releasestrat.html |
29 Aug 2018 16:03:38
1.0.2p_1,1
|
brnrd |
security/openssl: Fix padlock patches url prefix |
14 Aug 2018 15:12:32
1.0.2p_1,1
|
joneum |
Fix PORTREVISION |
14 Aug 2018 15:04:04
1.0.2p,1
|
brnrd |
security/openssl: Add engines patches to distinfo
- Undo clobbering distinfo
Reported by: mat |
14 Aug 2018 14:12:53
1.0.2p,1
|
brnrd |
security/openssl: Update to 1.0.2p
- Includes vulnerability fixes that were already
added to the port as patches |
01 Aug 2018 16:33:11
1.0.2o_4,1
|
adamw |
Fix a common grammar error: "can not" means the opposite of "cannot."
"Can not" means "it is possible not to," and "cannot" means "it is impossible
to." |
11 Jul 2018 08:37:43
1.0.2o_4,1
|
amdmi3 |
- Switch to new test framework
Approved by: portmgr blanket |
12 Jun 2018 13:43:28
1.0.2o_4,1
|
brnrd |
security/openssl: Actually add patch file
MFH: 2018Q2
Security: c82ecac5-6e3f-11e8-8777-b499baebfeaf |
12 Jun 2018 13:17:25
1.0.2o_3,1
 |
brnrd |
security/openssl: Security update
- Upstream update for CVE-2018-0732
MFH: 2018Q2
Security: c82ecac5-6e3f-11e8-8777-b499baebfeaf |
16 Apr 2018 17:47:16
1.0.2o_2,1
|
brnrd |
security/openssl: Add CVE-2018-0737 patch
- Bump portrev too
MFH: 2018Q2
Security: 8f353420-4197-11e8-8777-b499baebfeaf |
16 Apr 2018 17:24:35
1.0.2o_1,1
|
brnrd |
security/openssl: Security update
MFH: 2018Q2
Security: 8f353420-4197-11e8-8777-b499baebfeaf |
27 Mar 2018 15:27:06
1.0.2o,1
|
brnrd |
security/openssl: Fix distinfo for patches
Reported by: joneum |
27 Mar 2018 14:53:51
1.0.2o,1
|
brnrd |
securit/openssl: Security update to 1.0.2o
MFH: 2018Q1
Security: b7cff5a9-31cc-11e8-8f07-b499baebfeaf |
10 Mar 2018 10:53:36
1.0.2n,1
|
brnrd |
security/openssl: Cleanup
- Remove EXPCIPHERS option (use security/openssl-unsafe) [1]
- Move port variables not dependent on bsd.port.pre.mk up
- Deleting man3 .pod files is redundant
- bss_dgram.c modification is a no-op
- Let openssl's Makefile install libs
- Simplify stripping
PR: 195270 [1] |
07 Dec 2017 15:48:57
1.0.2n,1
|
brnrd |
security/openssl: Update to 1.0.2m
- Remove patch now included upstream
- Include post-release patch for clang build error
MFH: 2017Q4
Security: 3bb451fc-db64-11e7-ac58-b499baebfeaf |
03 Nov 2017 15:51:11
1.0.2m,1
|
brnrd |
security/openssl: Unbreak build with No-SSLv3
- Importing patch from upstream
PR: 223388
Submitted by: tijl
Reported by: Laurence Parry <greenreaper@hotmail.com> |
02 Nov 2017 21:32:34
1.0.2m,1
|
brnrd |
security/openssl: Security update to 1.0.2m
- Adds additional manpages too
MFH: 2017Q4
Security: f40f07aa-c00f-11e7-ac58-b499baebfeaf |
19 Aug 2017 15:11:03
1.0.2l,1
|
brnrd |
security/openssl: Fix build on MIPS
- gcc 4.2.1 on MIPS fails on -Werror
PR: 221620
Submitted by: Fukang Chen <loader@FreeBSD.org>
MFH: 2017Q3 |
24 Jul 2017 17:51:15
1.0.2l,1
|
brnrd |
security/openssl: Fix MASTER_SITE_SUBDIR
- DISTVERSIONFULL is not expanded before assignment
PR: 219929
Submitted by: Fukang Chen <loader@FreeBSD.org> |
25 Jun 2017 00:29:09
1.0.2l,1
|
linimon |
Begin deorbit burn of ia64. We have not attempted to build packages for
it for many years.
While here, alphabetize ARCHs, pet portlint, and modernize usages.
Approved by: portmgr (tier-2 blanket) |
10 Jun 2017 13:24:10
1.0.2l,1
|
brnrd |
security/openssl: Fix xmpp STARTTLS
- Add (refactored) patch from master branch
PR: 219805
Submitted by: Alexey <fbsd98816551@avksrv.org> |
25 May 2017 21:20:13
1.0.2l,1
|
brnrd |
security/openssl: Fix distinfo after DIST_SUBDIR update
- Chase DIST_SUBDIR update in distinfo
Reported by: Cybil Courraud |
25 May 2017 18:53:09
1.0.2l,1
|
brnrd |
security/openssl: Update to 1.0.2l
- Bugfix update to 1.0.2l
- Fix PADLOCK option
- Build failure -Wunused-function
- Properly disable with configure
- Strip patch-version from DIST_SUBDIR, reduce dirs
- Remove unneeded testssl patch, dtls tests are OK
- Add new WITHOUT_SSL3 testssl extra-patch
- Remove md5 patch (inconsistent output)
- Remove openbsd_hw.c patch (not compiled)
- Remove srtp patch (upstream fixed)
- Fix plist |
08 Feb 2017 20:16:31
1.0.2k_1,1
|
brnrd |
security/openssl: Enable ASM by default
- Enable ASM option
* By extension this enables AES-NI [1]
- Order OPTIONS_DEFAULT alphabetically
- Switch to using @sample [2]
- Bump PORTREVISION
PR: 216559 [2]
Reported by: dtestke [1]
Submitted by: Franco Fichtner <franco@opnsense.org> [2]
Approved by: asomers, allanjude |
26 Jan 2017 14:26:46
1.0.2k,1
|
brnrd |
security/openssl: Update to 1.0.2k
MFH: 2017Q1
Security: CVE-2016-7055
Security: CVE-2017-3731
Security: CVE-2017-3732 |
28 Oct 2016 20:05:48
1.0.2j_1,1
|
brnrd |
security/openssl: Bump PORTREVISION
- Make sure ports get rebuilt
PR: 209582
Reported by: mat |
28 Oct 2016 19:49:18
1.0.2j,1
|
brnrd |
security/openssl: Bump shared library version
- Bump shlib version for security/openssl
- Bump shlib version for security/openssl-devel
- Add instructions to UPDATING
PR: 209582
Reported by: Matthew D. Fuller <fullermd@over-yonder.net>
MFH: 2016Q4 |
21 Oct 2016 12:51:41
1.0.2j,1
 |
mat |
${RM} already has -f.
PR: 213570
Submitted by: mat
Exp-run by: antoine
Sponsored by: Absolight |
06 Oct 2016 19:38:48
1.0.2j,1
|
brnrd |
security/openssl: Fix ldconfig issue
- OPT_USE= feature does not behave as expected
Reported by: dinoex
Differential Revision: D8166 |
04 Oct 2016 18:35:00
1.0.2j,1
|
brnrd |
security/openssl: Mark MAKE_JOBS_UNSAFE
- Revert removal of MAKE_JOBS_UNSAFE in r423112
Reported by: D. Randolph |
02 Oct 2016 11:51:00
1.0.2j,1
|
brnrd |
security/openssl: Modernize port
- Group options
- Migrate to <OPT>_CONFIGURE helpers
- Use CONFIGURE_ARGS not EXTRACONFIGURE
- Remove make-jobs unsafe (introduced 2009 / 0.9.8)
- Remove base SHLIBVER_BASE check (introduced 2006)
- Revert to default CPE_VERSION
- Rework MAN3 option
- Fix plist when SHARED disabled
Reviewed by: mat
Differential Revision: D8025 |
26 Sep 2016 13:47:20
1.0.2j,1
|
brnrd |
security/openssl: Update to 1.0.2j
- Update to 1.0.2j
- Fixes Missing CRL sanity check (CVE-2016-7052)
Security: 337d8-83ed-11e6-bf52-b499baebfeaf |
25 Sep 2016 06:06:59
1.0.2i,1
|
ohauer |
- add missing man pages to pkg-plist (fix package building)
from poudriere log:
===> Parsing plist
===> Checking for items in STAGEDIR missing from pkg-plist
Error: Orphaned: man/man3/d2i_AutoPrivateKey.3.gz
Error: Orphaned: man/man3/d2i_PrivateKey.3.gz
Error: Orphaned: man/man3/d2i_Private_key.3.gz
Error: Orphaned: man/man3/i2d_PrivateKey.3.gz
===> Error: Plist issues found.
*** Error code 1
====>> Error: check-plist failures detected
!!! build failure encountered !!!
Approved by: blanket |
24 Sep 2016 20:23:53
1.0.2i,1
|
brnrd |
security/openssl: Take maintainership |
24 Sep 2016 13:15:48
1.0.2i,1
|
marino |
devel/openssl: change CONFLICTS to CONFLICTS_INSTALL
THere's no problem building openssl with other ports SSL libraries
installed, the conflict comes when it's time to install it. |
24 Sep 2016 06:43:04
1.0.2i,1
|
dinoex |
- add option ASM for OPNsense
- drop MAINTAINERSHIP caused of version naming change |
23 Sep 2016 12:54:20
1.0.2i,1
|
brnrd |
security/openssl: Update to 1.0.2i
- Update to 1.0.2i
- Move from PORTREVISION to PORTVERSION updates
- Remove patches that are included upstream
Reviewed by: mat, delphij
MFH: 2016Q3
Sponsored by: EuroBSDcon 2016 DevSummit
Differential Revision: D8006 |
15 Sep 2016 22:05:45
1.0.2_15,1
|
mat |
ftp.openssl.org is being taken out.
https://mta.openssl.org/pipermail/openssl-announce/2016-September/000075.html
Sponsored by: Absolight |
12 Sep 2016 18:10:41
1.0.2_15,1
|
dinoex |
- unroll for loop
Submitted by: John Marino |
28 Aug 2016 16:19:16
1.0.2_15,1
|
dinoex |
- remove options ASM and GMP |
27 Aug 2016 11:00:44
1.0.2_14,1
|
mat |
Revert the OpenSSL 1.1.0 update, it was not tested.
With hat: portmgr
Sponsored by: Absolight |
27 Aug 2016 09:59:48
1.1.0
|
dinoex |
- update to 1.1.0
- bump SHLIBVERSION |
14 Aug 2016 20:46:55
1.0.2_14
|
dinoex |
- cleanup options |
20 Jul 2016 15:33:20
1.0.2_14
|
mat |
Cleanup $() variables in ports Makefiles.
Mostly replace with ${}, but sometime, replace with $$() because it is
what was intended in the first place. (I think.)
Sponsored by: Absolight |
20 Jun 2016 19:16:43
1.0.2_14
|
dinoex |
- fix possible integer overflow and application crash
Security: CVE-2016-2177
MFH: 2016Q2 |
16 Jun 2016 18:15:09
1.0.2_13
|
dinoex |
- update warning message for new macros |
16 Jun 2016 13:22:59
1.0.2_13
|
mat |
Add DEFAULT_VERSIONS=ssl=XXX
Move the openssl detection routine to bsd.default-version.mk.
Add warnings telling people to not use WITH_OPENSSL_PORT or
WITH_OPENSSL_BASE.
To ease maintainability, change the way the different ssl libraries
version numbers are checked.
PR: 210149
Submitted by: mat
Exp-run by: antoine
Sponsored by: The FreeBSD Foundation, Absolight
Differential Revision: https://reviews.freebsd.org/D6577 |
12 Jun 2016 21:29:58
1.0.2_13
|
dinoex |
- Fix DSA, preserve BN_FLG_CONSTTIME
Security: CVE-2016-2178 |
03 May 2016 15:19:21
1.0.2_12
|
dinoex |
- Security update to 1.0.2h
Security: https://www.openssl.org/news/secadv/20160503.txt
Security: CVE-2016-2105
Security: CVE-2016-2106
Security: CVE-2016-2107
Security: CVE-2016-2108
Security: CVE-2016-2109
Security: CVE-2016-2176
MFH: 2016Q2 |
07 Apr 2016 14:39:14
1.0.2_11
|
dinoex |
- add some more manpages
PR: 208602
Submitted by: timp87@gmail.com |
04 Apr 2016 19:09:39
1.0.2_11
|
dinoex |
- remove NOPRECIOUS*
- make portlint happier |
01 Apr 2016 14:25:18
1.0.2_11
|
mat |
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.
With hat: portmgr
Sponsored by: Absolight |
06 Mar 2016 20:06:41
1.0.2_11
|
brnrd |
security/libressl*: Register conflict with security/openssl-devel
- Add conflict for security/openssl-devel
- Sort conflicts alphabetically
Reviewed by: feld (mentor), koobs (mentor)
Approved by: feld (mentor)
Differential Revision: D5539 |
03 Mar 2016 19:00:40
1.0.2_11
|
dinoex |
- extend CONFLICTS for openssl-devel |
03 Mar 2016 13:58:50
1.0.2_11
|
feld |
security/openssl: Revert disabling of SSLv2 and MD2
Disabling SSLv2 without a shared library bump has a visible impact to
some applications. It is unclear at this time if disabling MD2 could
cause the same issues, but both are being reverted at the moment to be
safe.
PR: 195796 |
02 Mar 2016 22:31:29
1.0.2_10
|
feld |
security/openssl: Disable SSLv2 and MD2
SSLv2 is being disabled due to DROWN.
MD2 is being disabled as it should not have been enabled by default.
This was disabled by upstream back in 2009.
PR: 195796
Approved by: delphij, eadler
Security: CVE-2009-2409
Security: CVE-2016-0800 |
01 Mar 2016 16:40:55
1.0.2_9
|
dinoex |
- Security update to 1.0.2g
Security: https://www.openssl.org/news/secadv/20160301.txt
Security: CVE-2016-0800
Security: CVE-2016-0705
Security: CVE-2016-0798
Security: CVE-2016-0797
Security: CVE-2016-0799
Security: CVE-2016-0702
Security: CVE-2016-0703
Security: CVE-2016-0704 |
13 Feb 2016 09:48:27
1.0.2_8
|
dinoex |
- mark options ASM broken on sparc64
PR: 204527 |
28 Jan 2016 17:35:21
1.0.2_8
|
dinoex |
- add new manpages
Submitted by: olli hauer |
28 Jan 2016 15:09:46
1.0.2_7
|
dinoex |
- Security update:
- add LICENSE_FILE
MFH: 2016Q1
Security: CVE-2015-3197
Security: CVE-2016-0701 |
13 Jan 2016 17:29:12
1.0.2_6
|
brnrd |
security/openssl: Fix No-SSLv3 option
- This change adds `no-ssl3-method` to config args
- Bump portrevision
Testing with security/openssl buillt with SSL3 option disabled [1]
revealed that the openssl binary and the libraries still support SSLv3
connections and methods. With the added no-ssl3-method argument passed
to the config script, the binary no longer supports the -ssl3 option
and ports requiring SSLv3 methods fail on undefined references to
methods.
PR: 203693 [1]
Reviewed by: koobs (mentor), feld (mentor, ports-secteam), dinoex (maintainer)
Approved by: koobs (mentor), feld (mentor, ports-secteam
MFH: 2016Q1
Differential Revision: D4924 |
05 Dec 2015 09:41:11
1.0.2_5
|
delphij |
Update to 1.0.2e.
Security: CVE-2015-3193
Security: CVE-2015-3194
Security: CVE-2015-3195
Security: CVE-2015-3196
Security: CVE-2015-1794
MFH: 2015Q4
Approved by: so |
21 Nov 2015 18:36:50
1.0.2_4
|
dinoex |
- use post-install-DOCS-on
- cleanup text in IGNORE |
05 Sep 2015 13:17:48
1.0.2_4
|
dinoex |
- new OPTION MAN3
PR: 201459 |
10 Jul 2015 13:32:27
1.0.2_4
|
dinoex |
- add more manpage links |
09 Jul 2015 20:54:37
1.0.2_4
|
dinoex |
- Security update to 1.0.2d
Security: http://openssl.org/news/secadv_20150709.txt |
12 Jun 2015 16:47:11
1.0.2_3
|
dinoex |
- update to 1.0.2c |
12 Jun 2015 14:42:23
1.0.2_2
|
dinoex |
- use portable cpu option for sparcv8 |
12 Jun 2015 14:40:28
1.0.2_2
|
dinoex |
- fix path in SIZE lines |
12 Jun 2015 14:19:49
1.0.2_2
|
zi |
- Correct patch filename for SIZE |
12 Jun 2015 14:09:08
1.0.2_2
|
zi |
- Restore missing checksum for
1001-crypto-hmac-support-EVP_MD_CTX_FLAG_ONESHOT-and-set-.patch
- Correct ordering |
12 Jun 2015 01:47:01
1.0.2_2
|
zi |
- Resolve build issue
With hat: ports-secteam |
11 Jun 2015 21:37:29
1.0.2_2
|
zi |
- Update to 1.0.2b
- Partially pacify portlint
With hat: ports-secteam
Security: 8305e215-1080-11e5-8ba2-000c2980a9f3 |
14 May 2015 10:15:09
1.0.2_1
|
mat |
MASTER_SITES cleanup.
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.
While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.
Also, replace some EXTRACT_SUFX occurences with USES=tar:*.
Checked by: make fetch-urlall-list
With hat: portmgr
Sponsored by: Absolight |
25 Apr 2015 09:36:02
1.0.2_1
|
dinoex |
- patchfiles for option PADLOCK renamed again
PR: 199444 |
12 Apr 2015 17:28:08
1.0.2_1
|
dinoex |
- disable option ASM by default
- bump PORTREVISION
PR: 196756 |
26 Mar 2015 08:38:25
1.0.2
|
marino |
security/openssl: Remove patch hunk for configuring pthreads
The patching of Configure file for pthreads is unnecessary -- the effect
of -lpthread -D_REENTRANT is the same as -pthread -D_REENTRANT, so just
remove it to make things even more simpler. |
25 Mar 2015 08:30:28
1.0.2
|
marino |
security category: Remove $PTHREAD_LIBS
approved by: PTHREAD blanket |
21 Mar 2015 10:53:14
1.0.2
|
dinoex |
- Security update to 1.0.2a
- termios.h now default
- fix patches
- fix manpage generation
- option ZLIB removed from default
- restore padlock support
- restore RFC-5705
- restore patch history
- restore build on older FreeBSD
- restore soname
Security: https://www.openssl.org/news/secadv_20150319.txt
Security: CVE-2015-0291
Security: CVE-2015-0204
Security: CVE-2015-0290
Security: CVE-2015-0207
Security: CVE-2015-0286
Security: CVE-2015-0208
Security: CVE-2015-0287
Security: CVE-2015-0289
Security: CVE-2015-0292
Security: CVE-2015-0293
Security: CVE-2015-1787
Security: CVE-2015-0285
Security: CVE-2015-0209
Security: CVE-2015-0288 |
19 Mar 2015 22:15:37
1.0.1_19
|
delphij |
Fix botched patch, this fixes build for i386.
Reported by: ohauer
Pointy hat to: delphij |
19 Mar 2015 21:55:03
1.0.1_19
|
dinoex |
- mark BROKEN options |
19 Mar 2015 20:23:37
1.0.1_19
|
delphij |
Update to 1.0.1m to fix multiple vulnerabilities.
With hat: so |
16 Jan 2015 09:17:39
1.0.1_18
|
dinoex |
- update to 1.0.1l
- fix option PADLOCK |
09 Jan 2015 00:02:31
1.0.1_17
|
delphij |
Update to 1.01k.
With hat: ports-secteam
Security: vuxml 4e536c14-9791-11e4-977d-d050992ecde8
Security: CVE-2014-3569
Security: CVE-2014-3570
Security: CVE-2014-3571
Security: CVE-2014-3572
Security: CVE-2014-8275
Security: CVE-2015-0204
Security: CVE-2015-0205
Security: CVE-2015-0206 |
23 Nov 2014 10:34:38
1.0.1_16
|
dinoex |
- new option TLSEXPCIPHERS
PR: 195270
Submitted by: yuri@rawbw.com
- options ordered by function
- extends descriptions |
15 Oct 2014 18:34:14
1.0.1_16
|
delphij |
Update to 1.01j.
With hat: ports-secteam
Security: vuxml 03175e62-5494-11e4-9cc1-bc5ff4fb5e7b
Security: CVE-2014-3513
Security: CVE-2014-3566
Security: CVE-2014-3567
Security: CVE-2014-3568 |
14 Aug 2014 16:25:12
1.0.1_15
|
dinoex |
- remove workaround for amd64 |
11 Aug 2014 04:27:53
1.0.1_14
|
dinoex |
- new options SSL2 SSL3
Suggested by: Velcro Leaf |
06 Aug 2014 23:37:50
1.0.1_14
|
delphij |
Update to 1.01i.
With hat: ports-secteam
Security: vuxml 8aff07eb-1dbd-11e4-b6ba-3c970e169bc2
Security: CVE-2014-3505
Security: CVE-2014-3506
Security: CVE-2014-3507
Security: CVE-2014-3508
Security: CVE-2014-3509
Security: CVE-2014-3510
Security: CVE-2014-3511
Security: CVE-2014-3512
Security: CVE-2014-5139 |
03 Aug 2014 15:30:04
1.0.1_13
|
dinoex |
- rename patch files |
29 Jul 2014 14:30:10
1.0.1_13
|
adamw |
Rename security/ patches to reflect the files they modify. |
15 Jul 2014 16:57:39
1.0.1_13
|
adamw |
Add DOCS to OPTIONS_DEFINE to ports that check for PORT_OPTIONS:MDOCS. |
13 Jul 2014 20:47:22
1.0.1_13
|
dinoex |
- add CONFLICTS because of libressl |
10 Jul 2014 10:27:39
1.0.1_13
|
des |
Include the final letter in the CPE version field. |
03 Jul 2014 16:49:37
1.0.1_13
|
dinoex |
- allow OPENSSLDIR be changed in /etc/make.conf or Makefile.local |
05 Jun 2014 12:54:40
1.0.1_13
|
delphij |
Update to 1.0.1h.
Approved by: so (ports-security@ blanket)
Security: 5ac53801-ec2e-11e3-9cf3-3c970e169bc2 |
04 Jun 2014 16:54:57
1.0.1_12
|
des |
Add CPE information.
With hat: ports-secteam |
If you buy from Amazon USA, please support us by using this link.
