FreshPorts -- security/openssl-devel: TLSv1.3 capable SSL and crypto library

openssl-devel
ABI	latest	quarterly
FreeBSD:11:aarch64	1.1.0i	3.0.0.a4
FreeBSD:11:amd64	3.0.0.a10	3.0.0.a9_1
FreeBSD:11:armv6	1.1.0.p5	3.0.0.a4
FreeBSD:11:i386	-	3.0.0.a9_1
FreeBSD:11:mips	1.1.0.p5	3.0.0.a4
FreeBSD:11:mips64	1.1.0.p5	3.0.0.a4
FreeBSD:12:aarch64	1.1.0i	3.0.0.a9_1
FreeBSD:12:amd64	3.0.0.a10	3.0.0.a9_1
FreeBSD:12:armv6	1.1.0i	3.0.0.a6
FreeBSD:12:armv7	1.1.0i	3.0.0.a6
FreeBSD:12:i386	-	3.0.0.a9_1
FreeBSD:12:mips	1.1.0i	3.0.0.a4
FreeBSD:12:mips64	1.1.0i	3.0.0.a4
FreeBSD:12:powerpc64	-	3.0.0.a6
FreeBSD:13:aarch64	3.0.0.a10	-
FreeBSD:13:amd64	3.0.0.a10	-
FreeBSD:13:armv6	3.0.0.a10	-
FreeBSD:13:armv7	3.0.0.a10	-
FreeBSD:13:i386	-	-
FreeBSD:13:mips	-	-
FreeBSD:13:mips64	3.0.0.a10	-
FreeBSD:13:powerpc64	3.0.0.a9_1	-

Reason: The shared library versions of OpenSSL have been bumped to avoid issues with ports' and base's OpenSSL not being binary compatible. Please rebuild all ports that depend on OpenSSL if you use OpenSSL from ports. If you use portmaster: portmaster -r openssl If you use portupgrade: portupgrade -fr security/openssl

Reason: Previously, to tell the ports tree, you needed to set: WITH_OPENSSL_PORT=yes And if you wanted a port that was not security/openssl, you needed to add, for example: OPENSSL_PORT= security/libressl Now, all you need to do is: DEFAULT_VERSIONS+= ssl=libressl Valid values are base, openssl, openssl-devel, libressl, and libressl-devel.

security/openssl-devel: Security update to 1.1.0h - Update to 1.1.0h - Fix PREFIX [1] - Add DH option (default enabled) - Set EC default regardless (no-op if no EC option) - Upstream properly creates the symlinks, simplify strip PR: 226967 [1] Reported by: demon [1] MFH: 2018Q1 Security: b7cff5a9-31cc-11e8-8f07-b499baebfeaf

security/openssl-devel: adjust conflicts like r422717 and r424947 This permits bundling when DEPENDS_TARGET != install e.g., BUILD_DEPENDS += ${NONEXISTENT}:security/openssl-devel:stage CPPFLAGS+= -I${WRKDIR}/openssl-devel/include LDFLAGS+= -L${WRKDIR}/openssl-devel/lib pre-configure: @(cd `${MAKE} -V STAGEDIR -C ${PORTSDIR}/security/openssl-devel`${LOCALBASE} \ && ${COPYTREE_SHARE} . ${WRKDIR}/openssl-devel "! -name *.so*") PR: 213889 Approved by: portmgr blanket

security/openssl: Bump shared library version - Bump shlib version for security/openssl - Bump shlib version for security/openssl-devel - Add instructions to UPDATING PR: 209582 Reported by: Matthew D. Fuller <fullermd@over-yonder.net> MFH: 2016Q4

security/openssl-devel: Update to 1.1.0b - Update to 1.1.0b - Fixes CRITICAL Use After Free for large message sizes (CVE-2016-6309) - Make zlib and ssl3 options work - Remove jpake header (jpake removed completely) MFH: 2016Q3 Security: 91a337d8-83ed-11e6-bf52-b499baebfeaf

security/openssl-devel: Update to 1.1.0a - Update to 1.1.0a fixing vulnerabilities - Sort OPTIONS_DEFINE alphabetically - Enable MD4 RC2 RC4 by default MFH: 2016Q3 Security: 43eaa656-80bc-11e6-bf52-b499baebfeaf Security: CVE-2016-6304 Security: CVE-2016-6305 Security: CVE-2016-6307 Security: CVE-2016-6308 Sponsored by: EuroBSDCon 2016 DevSummit

security/openssl-devel: Fix EC option on DragonflyBSD - Allow Dragonfly to transform amd64 to x86_64 Submitted by: John Marino <freebsd.contact@marino.st> Reported by: John Marino <freebsd.contact@marino.st>

security/openssl-devel: Configure, Build fixes - Do not pass asm to configure (upstream default ON), fixes configure - Disable EC optimizations on i386, fixes build - Split options activation into upstream-default-enabled and -disabled - Rework EC option handling - Align order of Makefile with security/openssl - Use improved patching from security/openssl - Improve options descriptions - Remove old PRECIOUSMAKEVARS - Add pkg-message

security/openssl-devel: Update to 1.1.0-release - Update to 1.1.0 RELEASE - OPTIONS-ify NIST EC curves architectures - Remove dasync dynamic engine (as per upstream) - Fix man-page plist issues

security/openssl-devel: Update to 1.1.0-pre6 - Update to 1.1.0-pre6 first BETA - Remove defunct post-patch target - pkg-message.in is now pkg-message - Replace ALPHA with BETA - Fix pkg-plist

Add DEFAULT_VERSIONS=ssl=XXX Move the openssl detection routine to bsd.default-version.mk. Add warnings telling people to not use WITH_OPENSSL_PORT or WITH_OPENSSL_BASE. To ease maintainability, change the way the different ssl libraries version numbers are checked. PR: 210149 Submitted by: mat Exp-run by: antoine Sponsored by: The FreeBSD Foundation, Absolight Differential Revision: https://reviews.freebsd.org/D6577

security/openssl-devel: Update to 1.1 BETA2 (1.1.0-pre5) - Update to first BETA of OpenSSL 1.1 - Bump SHLIB_VERSION for 1.1 to 9 - Add missing libressl-devel conflict - Mark jobs-safe - Add upstream clang fix (Issue 888) - Fix renamed shared engines (remove 'lib' prefix) - Remove "overwrite base" check - Do not install html docs Reviewed by: feld (mentor), koobs (mentor) Approved by: feld (mentor) Differential Revision: D5900

security/openssl-devel: Create OpenSSL 1.1.0 Alpha port - Repo-copy of security/openssl - Remove unneeded USE_OPENSSL check - Add and normalize CONFLICTS - Put OPTIONS into GROUPS for ciphers, hashes, protocols and optimizations - Add more configurable ciphers, hashes and protocols - Sort <OPT>_DESC alphabetically - Reword <OPT>_DESC after grouping, add (comment) - Rewrite ${PORT_OPTIONS:M<OPT>} to <OPT>_<FEATURE>_* where possible - Rewrite ${PORT_OPTIONS:M<OPT>} to target-<OPT>-on where possible - Rewrite do-configure target to HAS_CONFIGURE/CONFIGURE_SCRIPT - Rewrite (regression-)test target to TEST_TARGET - Add NPN support patch from [1] - Remove 1.0.2 specific patches (Padlock and EVP_MD_CTX_FLAG_ONESHOT) - Disable obsolete, broken and obscure features [1] https://github.com/openssl/openssl/pull/757 Reviewed by: koobs (mentor) Approved by: koobs (mentor) Differential Revision: D5484

Current status