| Port details |
- openssl-devel TLSv1.3 capable SSL and crypto library
- 3.0.0.b1 security
 =2       3.0.0.b1Version of this port present on the latest quarterly branch. - Maintainer: brnrd@FreeBSD.org
- Port Added: 2016-03-04 04:14:23
- Last Update: 2021-06-19 11:15:13
- Commit Hash: c250411
- People watching this port, also watch:: nginx-devel, libressl, openssl, libressl-devel, nginx
- Also Listed In: devel
- License: APACHE20
- Description:
- The OpenSSL Project is a collaborative effort to develop a robust,
commercial-grade, full-featured, and Open Source toolkit implementing
the Secure Sockets Layer (SSL v3) and Transport Layer Security (TLS v1,
v1.1, v1.2, v1.3) protocols with full-strength cryptography world-wide.
The project is managed by a worldwide community of volunteers that use
the Internet to communicate, plan, and develop the OpenSSL tookit
and its related documentation.
OpenSSL is based on the excellent SSLeay library developed by Eric
A. Young and Tim J. Hudson. The OpenSSL toolkit is licensed under
an Apache-style licence, which basically means that you are free
to get and use it for commercial and non-commercial purposes subject
to some simple license conditions.
WWW: https://www.openssl.org/
- SVNWeb : git : Homepage
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- For RUN/BUILD depends:
- openssl-devel>0:security/openssl-devel
- For LIB depends:
- libcrypto.so:security/openssl-devel
- libssl.so:security/openssl-devel
- Conflicts:
- CONFLICTS_INSTALL:
- libressl-[0-9]*
- libressl-devel-[0-9]*
- openssl-[0-9]*
- Conflicts Matches:
-
There are no Conflicts Matches for this port. This is usually an error.
- To install the port: cd /usr/ports/security/openssl-devel/ && make install clean
- To add the package, run one of these commands:
- pkg install security/openssl-devel
- pkg install openssl-devel
- PKGNAME: openssl-devel
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1624027791
SHA256 (openssl-3.0.0-beta1.tar.gz) = 7bfedc9a1062cbd2aabc294acc93cbd5259e6e7bd5bbe38e454cc6a32564029f
SIZE (openssl-3.0.0-beta1.tar.gz) = 14878832
- Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- perl5>=5.32.r0<5.33 : lang/perl5.32
- There are no ports dependent upon this port
- Configuration Options:
- ===> The following configuration options are available for openssl-devel-3.0.0.b1:
ASYNC=on: Asynchronous mode
CRYPTODEV=off: /dev/crypto support
CT=on: Certificate Transparency Support
MAN3=on: Install API manpages (section 3, 7)
RFC3779=off: RFC3779 support (BGP)
SHARED=on: Build shared libraries
ZLIB=off: zlib compression support
====> Block Cipher Support
ARIA=off: ARIA (South Korean standard)
DES=on: (Triple) Data Encryption Standard
GOST=on: GOST (Russian standard)
IDEA=off: International Data Encryption Algorithm
SM4=off: SM4 128bit (Chinese standard)
RC2=on: RC2 (unsafe)
RC4=on: RC4 (unsafe)
RC5=off: RC5 (patented)
WEAK-SSL-CIPHERS=off: Weak cipher support (unsafe)
====> Hash Function Support
MD2=off: MD2 (obsolete) (requires LEGACY)
MD4=on: MD4 (unsafe)
MDC2=off: MDC-2 (patented, requires DES)
RMD160=on: RIPEMD-160
SM2=off: SM2 Elliptic Curve DH (Chinese standard)
SM3=off: SM3 256bit (Chinese standard)
====> Provider modules
FIPS=on: Build FIPS provider (Note: NOT yet FIPS validated)
LEGACY=off: Older algorithms
====> Optimizations
ASM=on: Assembler code
SSE2=on: Runtime SSE2 detection
THREADS=on: Threading support
EC=on: Optimize NIST elliptic curves
====> Protocol Support
NEXTPROTONEG=on: Next Protocol Negotiation (SPDY)
SCTP=on: SCTP (Stream Control Transmission)
SSL3=off: SSLv3 (unsafe)
TLS1=on: TLSv1.0 (requires TLS1_1, TLS1_2)
TLS1_1=on: TLSv1.1 (requires TLS1_2)
TLS1_2=on: TLSv1.2
===> Use 'make config' to modify these settings
- Options name:
- security_openssl-devel
- USES:
- cpe perl5
- pkg-message:
- If installing:
-
This OpenSSL version is in an ALPHA stage
Do NOT use for production!
- If upgrading
-
This OpenSSL version is in an ALPHA stage
Do NOT use for production!
- Master Sites:
|
| Commit History - (may be incomplete: see SVNWeb link above for full details) |
| Date | By | Description |
|---|
19 Jun 2021 11:15:13
  3.0.0.b1
|
brnrd |
security/openssl-devel: Upadate to 3.0.0-beta1 |
08 May 2021 11:00:35
3.0.0.a16
|
brnrd |
security/openssl-devel: Update to 3.0.0alpha16 |
27 Apr 2021 09:40:04
3.0.0.a15
|
brnrd |
security/openssl-devel: Update to 3.0.0-alpha15 |
13 Apr 2021 15:21:09
3.0.0.a14
|
brnrd |
security/openssl-devel: Build fixes
* fix CRYPTODEV issues on < 13
* fix MAN3 issues when disabled |
09 Apr 2021 11:42:19
3.0.0.a14
|
brnrd |
security/openssl-devel: Update to 3.0.0-alpha14
* and fix cryptodev on < 13
PR: 254643
Reported by: <cryx-freebsd h3q com>
Reviewed by: wollman |
06 Apr 2021 14:31:07
3.0.0.a13
|
mat |
Remove # $FreeBSD$ from Makefiles. |
12 Mar 2021 14:40:57
  3.0.0.a13
|
brnrd |
security/openssl-devel: Update to 3.0.0-alpha13 |
07 Mar 2021 16:45:49
3.0.0.a12
|
tobik |
Remove redundant option descriptions that match the default ones
(ignoring case)
Reported by: danfe (for net/mosquitto), portscan |
18 Feb 2021 18:18:41
3.0.0.a12
|
brnrd |
security/openssl-devel: Security update to 3.0.0alpha12
MFH: 2021Q1
Security: 96a21236-707b-11eb-96d8-d4c9ef517024 |
29 Jan 2021 08:49:58
3.0.0.a11
|
brnrd |
security/openssl-devel: Update to 3.0.0-alpha11 |
08 Jan 2021 18:27:40
3.0.0.a10
|
brnrd |
security/openssl-devel: Update to 3.0.0alpha10 |
04 Dec 2020 20:05:36
3.0.0.a9_1
|
brnrd |
security/openssl-devel: Enable KTLS by default
* Only for 13.x systems
* Allows testing of nfs-over-tls
Reported by: rickm |
27 Nov 2020 19:53:54
3.0.0.a9
|
brnrd |
security/openssl-devel: Update to 3.0.0 alpha 9 |
06 Nov 2020 14:21:15
3.0.0.a8
|
brnrd |
security/openssl-devel: Update to 3.0.0-alpha3 |
18 Oct 2020 13:13:51
3.0.0.a7
|
brnrd |
security/openssl-devel: Update to 3.0.0-alpha7 |
06 Aug 2020 20:50:02
3.0.0.a6
|
brnrd |
security/openssl-devel: Update to 3.0.0-alpha6
* Fix broken MAN3 option |
19 Jul 2020 08:10:52
3.0.0.a5
|
brnrd |
security/openssl-devel: Update to 3.0.0-alpha5
* target now determined in util/perl/OpenSSL/config.pm
* Stop modifying Makefile twice |
26 Jun 2020 14:54:03
3.0.0.a4
|
brnrd |
security/openssl-devel: Update to 3.0.0-alpha4 |
07 Jun 2020 13:41:12
3.0.0.a3
|
brnrd |
security/openssl-devel: Update to 3.0.0-alpha3 |
23 May 2020 19:38:10
3.0.0.a2
|
brnrd |
security/openssl-devel: Add modules options
Submitted by: gordon@freebsd.org
Differential Revision: https://reviews.freebsd.org/D24965 |
16 May 2020 08:44:03
3.0.0.a2
|
brnrd |
security/openssl-devel: Update to 3.0.0-alpha2 |
27 Apr 2020 13:10:14
3.0.0.a1
|
brnrd |
security/openssl-devel: Resurrect OpenSSL devel port |
04 Nov 2018 08:59:19
1.1.0i_1
|
brnrd |
security/openssl-devel: Remove port
- OpenSSL 1.1.1 is ABI compatible
- Aligns with FreeBSD 12
Reviewed by: bapt, rene
Differential Revision: https://reviews.freebsd.org/D17136 |
30 Oct 2018 15:06:07
1.1.0i_1
|
brnrd |
security/openssl-devel: Move patches
- Add fix from upstream [1]
1: https://github.com/openssl/openssl/commit/003f1bfd
MFH: 2018Q4 |
29 Oct 2018 18:38:56
1.1.0i
|
brnrd |
security/openssl-devel: Fix vulnerabilities
MFH: 2018Q4
Security: 238ae7de-dba2-11e8-b713-b499baebfeaf |
28 Oct 2018 14:52:35
1.1.0i
|
brnrd |
security/openssl-devel: Fix SHARED option
- Fix linking with lld on i386
- Fix ordering
PR: 231333
Reported by: lev |
12 Sep 2018 11:36:17
1.1.0i
|
brnrd |
Chase CONFLICTS after addition of security/openssl111
- While here mark OpenSSL 1.1.0 deprecated
see: https://www.openssl.org/policies/releasestrat.html |
14 Aug 2018 14:25:18
1.1.0i
|
brnrd |
security/openssl-devel: Update to 1.1.0i
- Includes vulnerability fixes that were already
added to the port as patches |
01 Aug 2018 16:33:11
1.1.0h_2
|
adamw |
Fix a common grammar error: "can not" means the opposite of "cannot."
"Can not" means "it is possible not to," and "cannot" means "it is impossible
to." |
12 Jun 2018 13:45:45
1.1.0h_2
|
brnrd |
security/openssl-devel: Security update
- Upstream update for CVE-2018-0732
MFH: 2018Q2
Security: c82ecac5-6e3f-11e8-8777-b499baebfeaf |
16 Apr 2018 17:51:40
1.1.0h_1
|
brnrd |
security/openssl-devel: Security update for CVE-2018-0737
MFH: 2018Q2
Security: 8f353420-4197-11e8-8777-b499baebfeaf |
27 Mar 2018 15:23:11
1.1.0h
|
brnrd |
security/openssl-devel: Security update to 1.1.0h
- Update to 1.1.0h
- Fix PREFIX [1]
- Add DH option (default enabled)
- Set EC default regardless (no-op if no EC option)
- Upstream properly creates the symlinks, simplify strip
PR: 226967 [1]
Reported by: demon [1]
MFH: 2018Q1
Security: b7cff5a9-31cc-11e8-8f07-b499baebfeaf |
02 Nov 2017 22:00:59
1.1.0g
|
brnrd |
security/openssl-devel: Security update to 1.1.0g
- Add Async, TLSv1 and TLSv1.1 options
- Juggle manpages
MFH: 2017Q4
Security: f40f07aa-c00f-11e7-ac58-b499baebfeaf |
25 Jun 2017 00:29:09
1.1.0f
|
linimon |
Begin deorbit burn of ia64. We have not attempted to build packages for
it for many years.
While here, alphabetize ARCHs, pet portlint, and modernize usages.
Approved by: portmgr (tier-2 blanket) |
19 Jun 2017 16:06:12
1.1.0f
|
mat |
The THREADS option is defined twice, remove one of them.
It makes poudriere think that options changed, and forces openssl to be
rebuilt at every bulk run.
Sponsored by: Absolight |
25 May 2017 19:08:57
1.1.0f
|
brnrd |
security/openssl-devel: Update to 1.1.0f
- Bugfix update to 1.1.0f
- Fix plist issues |
16 Feb 2017 13:17:20
1.1.0e
|
brnrd |
security/openssl-devel: Upgrade to 1.1.0e
- Vulnerability fix update to 1.1.0e
MFH: 2017Q1
Security: 1a802ba9-f444-11e6-9940-b499baebfeaf
Security: CVE-2017-3733 |
26 Jan 2017 19:27:00
1.1.0d
|
brnrd |
security/openssl-devel: Update to 1.1.0d
- Update to 1.1.0d
- Adjust pkg-plist
MFH: 2017Q1
Security: d455708a-e3d3-11e6-9940-b499baebfeaf |
10 Nov 2016 16:22:41
1.1.0c
|
brnrd |
security/openssl-devel: Update to 1.1.0c
- Update to 1.1.0c
- Fix EC option
- Fix added/removed man-pages
MFH: 2016Q4
Security: CVE-2016-7054
Security: CVE-2016-7053
Security: CVE-2016-7055 |
02 Nov 2016 07:15:09
1.1.0b_1
|
jbeich |
security/openssl-devel: adjust conflicts like r422717 and r424947
This permits bundling when DEPENDS_TARGET != install e.g.,
BUILD_DEPENDS += ${NONEXISTENT}:security/openssl-devel:stage
CPPFLAGS+= -I${WRKDIR}/openssl-devel/include
LDFLAGS+= -L${WRKDIR}/openssl-devel/lib
pre-configure:
@(cd `${MAKE} -V STAGEDIR -C ${PORTSDIR}/security/openssl-devel`${LOCALBASE} \
&& ${COPYTREE_SHARE} . ${WRKDIR}/openssl-devel "! -name *.so*")
PR: 213889
Approved by: portmgr blanket |
28 Oct 2016 20:05:48
1.1.0b_1
|
brnrd |
security/openssl: Bump PORTREVISION
- Make sure ports get rebuilt
PR: 209582
Reported by: mat |
28 Oct 2016 19:49:18
1.1.0b
|
brnrd |
security/openssl: Bump shared library version
- Bump shlib version for security/openssl
- Bump shlib version for security/openssl-devel
- Add instructions to UPDATING
PR: 209582
Reported by: Matthew D. Fuller <fullermd@over-yonder.net>
MFH: 2016Q4 |
02 Oct 2016 15:30:14
1.1.0b
|
brnrd |
security/openssl-devel: Align with security/openssl
- Revert to default CPE_VERSION
- Rework MAN3 option
- Remove remnants of base SHLIBVER_BASE check |
26 Sep 2016 14:28:06
1.1.0b
|
brnrd |
security/openssl-devel: Update to 1.1.0b
- Update to 1.1.0b
- Fixes CRITICAL Use After Free for large message sizes (CVE-2016-6309)
- Make zlib and ssl3 options work
- Remove jpake header (jpake removed completely)
MFH: 2016Q3
Security: 91a337d8-83ed-11e6-bf52-b499baebfeaf |
23 Sep 2016 09:17:49
1.1.0a
|
brnrd |
security/openssl-devel: Revert to PORTVERSION
- Delete DISTVERSION related variables
- Add PORTVERSION variable
MFH: 2016Q3 |
22 Sep 2016 15:06:18
1.1.0_1
|
brnrd |
security/openssl-devel: Bump portrevision
Security: 43eaa656-80bc-11e6-bf52-b499baebfeaf |
22 Sep 2016 15:02:50
1.1.0
|
brnrd |
security/openssl-devel: Update to 1.1.0a
- Update to 1.1.0a fixing vulnerabilities
- Sort OPTIONS_DEFINE alphabetically
- Enable MD4 RC2 RC4 by default
MFH: 2016Q3
Security: 43eaa656-80bc-11e6-bf52-b499baebfeaf
Security: CVE-2016-6304
Security: CVE-2016-6305
Security: CVE-2016-6307
Security: CVE-2016-6308
Sponsored by: EuroBSDCon 2016 DevSummit |
15 Sep 2016 22:05:45
1.1.0
|
mat |
ftp.openssl.org is being taken out.
https://mta.openssl.org/pipermail/openssl-announce/2016-September/000075.html
Sponsored by: Absolight |
08 Sep 2016 07:16:16
1.1.0
|
brnrd |
security/openssl-devel: Fix EC option on DragonflyBSD
- Allow Dragonfly to transform amd64 to x86_64
Submitted by: John Marino <freebsd.contact@marino.st>
Reported by: John Marino <freebsd.contact@marino.st> |
28 Aug 2016 21:10:19
1.1.0
|
brnrd |
security/openssl-devel: Fix index build failure on 9.x
- Old fmake doesn't know :U modifier |
28 Aug 2016 20:18:47
1.1.0
|
brnrd |
security/openssl-devel: Configure, Build fixes
- Do not pass asm to configure (upstream default ON), fixes configure
- Disable EC optimizations on i386, fixes build
- Split options activation into upstream-default-enabled and -disabled
- Rework EC option handling
- Align order of Makefile with security/openssl
- Use improved patching from security/openssl
- Improve options descriptions
- Remove old PRECIOUSMAKEVARS
- Add pkg-message |
25 Aug 2016 19:52:03
1.1.0
|
brnrd |
security/openssl-devel: Remove defunct pkg-message
- Now RELEASE so remove message |
25 Aug 2016 19:49:55
1.1.0
|
brnrd |
security/openssl-devel: Update to 1.1.0-release
- Update to 1.1.0 RELEASE
- OPTIONS-ify NIST EC curves architectures
- Remove dasync dynamic engine (as per upstream)
- Fix man-page plist issues |
04 Aug 2016 19:06:07
1.1.0.p6
|
brnrd |
security/openssl-devel: Update to 1.1.0-pre6
- Update to 1.1.0-pre6 first BETA
- Remove defunct post-patch target
- pkg-message.in is now pkg-message
- Replace ALPHA with BETA
- Fix pkg-plist |
20 Jul 2016 15:33:20
1.1.0.p5
|
mat |
Cleanup $() variables in ports Makefiles.
Mostly replace with ${}, but sometime, replace with $$() because it is
what was intended in the first place. (I think.)
Sponsored by: Absolight |
16 Jun 2016 13:22:59
1.1.0.p5
|
mat |
Add DEFAULT_VERSIONS=ssl=XXX
Move the openssl detection routine to bsd.default-version.mk.
Add warnings telling people to not use WITH_OPENSSL_PORT or
WITH_OPENSSL_BASE.
To ease maintainability, change the way the different ssl libraries
version numbers are checked.
PR: 210149
Submitted by: mat
Exp-run by: antoine
Sponsored by: The FreeBSD Foundation, Absolight
Differential Revision: https://reviews.freebsd.org/D6577 |
24 Apr 2016 17:44:33
1.1.0.p5
|
brnrd |
security/openssl-devel: Update to 1.1 BETA2 (1.1.0-pre5)
- Update to first BETA of OpenSSL 1.1
- Bump SHLIB_VERSION for 1.1 to 9
- Add missing libressl-devel conflict
- Mark jobs-safe
- Add upstream clang fix (Issue 888)
- Fix renamed shared engines (remove 'lib' prefix)
- Remove "overwrite base" check
- Do not install html docs
Reviewed by: feld (mentor), koobs (mentor)
Approved by: feld (mentor)
Differential Revision: D5900 |
03 Mar 2016 14:39:12
1.1.0.p3
|
brnrd |
security/openssl-devel: Create OpenSSL 1.1.0 Alpha port
- Delete files after repo-copy initial commit
Reviewed by: koobs (mentor)
Approved by: koobs (mentor)
Differential Revision: D5484 |
03 Mar 2016 14:36:51
1.1.0.p3
|
brnrd |
security/openssl-devel: Create OpenSSL 1.1.0 Alpha port
- Repo-copy of security/openssl
- Remove unneeded USE_OPENSSL check
- Add and normalize CONFLICTS
- Put OPTIONS into GROUPS for ciphers, hashes, protocols and optimizations
- Add more configurable ciphers, hashes and protocols
- Sort <OPT>_DESC alphabetically
- Reword <OPT>_DESC after grouping, add (comment)
- Rewrite ${PORT_OPTIONS:M<OPT>} to <OPT>_<FEATURE>_* where possible
- Rewrite ${PORT_OPTIONS:M<OPT>} to target-<OPT>-on where possible
- Rewrite do-configure target to HAS_CONFIGURE/CONFIGURE_SCRIPT
- Rewrite (regression-)test target to TEST_TARGET
- Add NPN support patch from [1]
- Remove 1.0.2 specific patches (Padlock and EVP_MD_CTX_FLAG_ONESHOT)
- Disable obsolete, broken and obscure features
[1] https://github.com/openssl/openssl/pull/757
Reviewed by: koobs (mentor)
Approved by: koobs (mentor)
Differential Revision: D5484 |
As an Amazon Associate I earn from qualifying purchases.