svn commit: r425235 - in head/security: . bearssl

[Mark Felder]

Author: feld
Date: Thu Nov  3 15:55:46 2016
New Revision: 425235
URL: https://svnweb.freebsd.org/changeset/ports/425235

Log:
  BearSSL is an implementation of the SSL/TLS protocol (RFC 5246) written
  in C. It aims at offering the following features:
  
  - Be correct and secure. In particular, insecure protocol versions and
  choices of algorithms are not supported, by design; cryptographic
  algorithm implementations are constant-time by default.
  
  - Be small, both in RAM and code footprint. For instance, a minimal server
  implementation may fit in about 20 kilobytes of compiled code and 25
  kilobytes of RAM.
  
  - Be highly portable. BearSSL targets not only "big" operating systems
  like Linux and Windows, but also small embedded systems and even special
  contexts like bootstrap code.
  
  - Be feature-rich and extensible. SSL/TLS has many defined cipher suites
  and extensions; BearSSL should implement most of them, and allow extra
  algorithm implementations to be added afterwards, possibly from third
  parties.
  
  WWW: https://bearssl.org/

Added:
  head/security/bearssl/
  head/security/bearssl/Makefile   (contents, props changed)
  head/security/bearssl/distinfo   (contents, props changed)
  head/security/bearssl/pkg-descr   (contents, props changed)
  head/security/bearssl/pkg-plist   (contents, props changed)
Modified:
  head/security/Makefile

Modified: head/security/Makefile
==============================================================================
--- head/security/Makefile	Thu Nov  3 15:54:40 2016	(r425234)
+++ head/security/Makefile	Thu Nov  3 15:55:46 2016	(r425235)
@@ -36,6 +36,7 @@
     SUBDIR += bcrypt
     SUBDIR += bcwipe
     SUBDIR += bdc
+    SUBDIR += bearssl
     SUBDIR += beecrypt
     SUBDIR += belier
     SUBDIR += bfbtester

Added: head/security/bearssl/Makefile
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/security/bearssl/Makefile	Thu Nov  3 15:55:46 2016	(r425235)
@@ -0,0 +1,22 @@
+# Created by: Mark Felder <feld at FreeBSD.org>
+# $FreeBSD$
+
+PORTNAME=	bearssl
+PORTVERSION=	0.1
+CATEGORIES=	security devel
+MASTER_SITES=	https://bearssl.org/
+
+MAINTAINER=	feld at FreeBSD.org
+COMMENT=	Implementation of TLS/SSL in C
+
+LICENSE=	MIT
+
+post-patch:
+	${REINPLACE_CMD} 's|CC = gcc|CC ?= gcc|' ${WRKSRC}/Makefile
+
+do-install:
+	${INSTALL_PROGRAM} ${WRKSRC}/brssl ${STAGEDIR}${LOCALBASE}/bin/
+	(cd ${WRKSRC}/inc && ${COPYTREE_SHARE} \* ${STAGEDIR}${LOCALBASE}/include/)
+	${INSTALL_LIB} ${WRKSRC}/libbearssl.a ${STAGEDIR}${LOCALBASE}/lib/
+
+.include <bsd.port.mk>

Added: head/security/bearssl/distinfo
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/security/bearssl/distinfo	Thu Nov  3 15:55:46 2016	(r425235)
@@ -0,0 +1,3 @@
+TIMESTAMP = 1478187624
+SHA256 (bearssl-0.1.tar.gz) = be33f84a6304dacffdfa99c5539cfde5681153a7e916a1b0cf2c5c2a4f623bbe
+SIZE (bearssl-0.1.tar.gz) = 439562

Added: head/security/bearssl/pkg-descr
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/security/bearssl/pkg-descr	Thu Nov  3 15:55:46 2016	(r425235)
@@ -0,0 +1,21 @@
+BearSSL is an implementation of the SSL/TLS protocol (RFC 5246) written
+in C. It aims at offering the following features:
+
+- Be correct and secure. In particular, insecure protocol versions and
+choices of algorithms are not supported, by design; cryptographic
+algorithm implementations are constant-time by default.
+
+- Be small, both in RAM and code footprint. For instance, a minimal server
+implementation may fit in about 20 kilobytes of compiled code and 25
+kilobytes of RAM.
+
+- Be highly portable. BearSSL targets not only "big" operating systems
+like Linux and Windows, but also small embedded systems and even special
+contexts like bootstrap code.
+
+- Be feature-rich and extensible. SSL/TLS has many defined cipher suites
+and extensions; BearSSL should implement most of them, and allow extra
+algorithm implementations to be added afterwards, possibly from third
+parties.
+
+WWW: https://bearssl.org/

Added: head/security/bearssl/pkg-plist
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/security/bearssl/pkg-plist	Thu Nov  3 15:55:46 2016	(r425235)
@@ -0,0 +1,13 @@
+bin/brssl
+include/bearssl_ssl.h
+include/bearssl_rand.h
+include/bearssl_hmac.h
+include/bearssl_ec.h
+include/bearssl.h
+include/bearssl_hash.h
+include/bearssl_x509.h
+include/bearssl_rsa.h
+include/bearssl_prf.h
+include/bearssl_pem.h
+include/bearssl_block.h
+lib/libbearssl.a