RNP is a set of OpenPGP (RFC4880) tools that works on Linux, macOS,
Windows and *BSD built with C++.
rnpkeys allow to generate, import, export, and list keys.
rnp is used to perform encryption, decryption, signing and signature
checks.
librnp is the library used by RNP for all OpenPGP functions, useful
for developers to build against, different from GPGME.
===> The following configuration options are available for rnp-0.18.1_1:
MANPAGES=on: Build and/or install manual pages
===> Use 'make config' to modify these settings
security/rnp: update to version 0.18.1
This update fixes critical issue where PKESK (public-key encrypted)
session keys were generated as all-zero, allowing trivial decryption
of messages encrypted with public keys only (CVE-2025-13470,
CVE-2025-13402, https://bugzilla.redhat.com/show_bug.cgi?id=2415863).
Security: CVE-2025-13470
Security: CVE-2025-13402
security/rnp: upgrade to version 0.18.0
The default length of RSA keys has been changed to 3072 bits.
See the release notes for the complete list of changes:
https://github.com/rnpgp/rnp/releases/tag/v0.18.0
security/rnp: fix build using c++19 include files
The build failed with:
libcxx: error: implicit instantiation of undefined template
'std::char_traits<unsigned char>
This was caused by a restriction of char_traits to a subset of the
integer types that used to be supported (e.g. char, wchar_t), which
no longer includes the type unsigned char.
There has been no new release, yet, but upstream fixed this issue
in commit 20419f7.
PR: 282348
Reported by: jkim
Obtained from: https://github.com/rnpgp/rnp/commit/20419f7
security/rnp: do not install lib/libsexp.a
The static library libsexp.a conflicts with the library of the same
name installed by the devel/sfsexp port. It is only used to build the
rnp and rnpkeys binaries, but not needed for any other port.
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
Add compiler:c++11-lang to USES to fix build on GCC-based architectures:
Target "cmTC_f3032" requires the language dialect "CXX11" , but CMake does
not know the compile flags to use to enable it.
Approved by: portmgr (tier-2 blanket)
Fix build in poudriere
Fetching a cmake helper file was (rightfully) blocked when building with
poudriere, leding to an abort in the configure phase.
Instead of fetching the cmake helper as an additional distfile, provide
the relevant functionality in a local version that uses port system
information instead of trying to obtain the version number from the
sources.
Reported by: kai
Mark as broken due to pkg-fallout messages indicating a cmake abort
I cannot reproduce the issue due to poudriere failures, which need to be
resolved before I can perform local test builds again.
(Poudriere error: cannot rollback '<zfs file system>': dataset is busy)
