svn commit: r499667 - in head: . security/libressl

Mon Apr 22 19:45:00 UTC 2019

Author: brnrd
Date: Mon Apr 22 19:44:57 2019
New Revision: 499667
URL: https://svnweb.freebsd.org/changeset/ports/499667

Log:
  security/libressl: Update to 2.9.1
  
   - Requires a rebuild of all dependent ports

Modified:
  head/UPDATING
  head/security/libressl/Makefile
  head/security/libressl/distinfo
  head/security/libressl/pkg-plist
  head/security/libressl/version.mk

Modified: head/UPDATING
==============================================================================

--- head/UPDATING	Mon Apr 22 19:21:16 2019	(r499666)
+++ head/UPDATING	Mon Apr 22 19:44:57 2019	(r499667)
@@ -5,6 +5,30 @@ they are unavoidable.
 You should get into the habit of checking this file for changes each time
 you update your ports collection, before attempting any port upgrades.
 
+20190422:
+  AFFECTS: users of security/libressl
+  AUTHOR: brnrd at FreeBSD.org
+
+  The port has been updated to the latest stable version 2.9 of LibreSSL.
+  The shared library versions of the libraries have been bumped.
+
+  After upgrading, manually update all packages that depend on any of the
+  libraries provided by LibreSSL (libssl, libcrypto and libtls) since the
+  versions of these libraries have changed. Normally, you can obtain the
+  list of dependent software by running the following command:
+
+  # pkg info -r libressl
+
+  Then you should rebuild all ports depending on libressl to avoid dangling
+  shared library dependencies. Poudriere and pkg handle this correctly,
+  portmaster and portupgrade users can use the following to rebuild all
+  dependent ports.
+
+  Portmaster users:
+      portmaster -r libressl
+  Portupgrade users:
+      portupgrade -fr security/libressl
+
 20190421:
   AFFECTS: users of databases/cego
   AUTHOR: pi at FreeBSD.org

Modified: head/security/libressl/Makefile
==============================================================================
--- head/security/libressl/Makefile	Mon Apr 22 19:21:16 2019	(r499666)
+++ head/security/libressl/Makefile	Mon Apr 22 19:44:57 2019	(r499667)
@@ -2,7 +2,7 @@
 # $FreeBSD$
 
 PORTNAME=	libressl
-PORTVERSION=	2.8.3
+PORTVERSION=	2.9.1
 CATEGORIES=	security devel
 MASTER_SITES=	OPENBSD/LibreSSL
 

Modified: head/security/libressl/distinfo
==============================================================================
--- head/security/libressl/distinfo	Mon Apr 22 19:21:16 2019	(r499666)
+++ head/security/libressl/distinfo	Mon Apr 22 19:44:57 2019	(r499667)
@@ -1,3 +1,3 @@
-TIMESTAMP = 1544956249
-SHA256 (libressl-2.8.3.tar.gz) = 9b640b13047182761a99ce3e4f000be9687566e0828b4a72709e9e6a3ef98477
-SIZE (libressl-2.8.3.tar.gz) = 3366196
+TIMESTAMP = 1555942276
+SHA256 (libressl-2.9.1.tar.gz) = 39e4dd856694dc10d564201e4549c46d2431601a2b10f3422507e24ccc8f62f8
+SIZE (libressl-2.9.1.tar.gz) = 3607116

Modified: head/security/libressl/pkg-plist
==============================================================================
--- head/security/libressl/pkg-plist	Mon Apr 22 19:21:16 2019	(r499666)
+++ head/security/libressl/pkg-plist	Mon Apr 22 19:44:57 2019	(r499667)
@@ -5,7 +5,6 @@ etc/ssl/openssl.cnf
 etc/ssl/x509v3.cnf
 include/openssl/aes.h
 include/openssl/asn1.h
-include/openssl/asn1_mac.h
 include/openssl/asn1t.h
 include/openssl/bio.h
 include/openssl/blowfish.h
@@ -58,6 +57,8 @@ include/openssl/ripemd.h
 include/openssl/rsa.h
 include/openssl/safestack.h
 include/openssl/sha.h
+include/openssl/sm3.h
+include/openssl/sm4.h
 include/openssl/srtp.h
 include/openssl/ssl.h
 include/openssl/ssl2.h
@@ -76,16 +77,16 @@ include/openssl/x509v3.h
 include/tls.h
 lib/libcrypto.a
 lib/libcrypto.so
-lib/libcrypto.so.44
-lib/libcrypto.so.44.0.1
+lib/libcrypto.so.45
+lib/libcrypto.so.45.0.4
 lib/libssl.a
 lib/libssl.so
-lib/libssl.so.46
-lib/libssl.so.46.0.1
+lib/libssl.so.47
+lib/libssl.so.47.0.5
 lib/libtls.a
 lib/libtls.so
-lib/libtls.so.18
-lib/libtls.so.18.0.1
+lib/libtls.so.19
+lib/libtls.so.19.0.6
 libdata/pkgconfig/libcrypto.pc
 libdata/pkgconfig/libssl.pc
 libdata/pkgconfig/libtls.pc
@@ -546,7 +547,6 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/CRYPTO_set_dynlock_destroy_callback.3.gz
 %%MAN3%%man/man3/CRYPTO_set_dynlock_lock_callback.3.gz
 %%MAN3%%man/man3/CRYPTO_set_ex_data.3.gz
-%%MAN3%%man/man3/CRYPTO_set_locking_callback.3.gz
 %%MAN3%%man/man3/CRYPTO_set_mem_functions.3.gz
 %%MAN3%%man/man3/CRYPTO_strdup.3.gz
 %%MAN3%%man/man3/CRYPTO_w_lock.3.gz
@@ -664,6 +664,9 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/DSAparams_dup.3.gz
 %%MAN3%%man/man3/DSAparams_print.3.gz
 %%MAN3%%man/man3/DSAparams_print_fp.3.gz
+%%MAN3%%man/man3/DTLS_client_method.3.gz
+%%MAN3%%man/man3/DTLS_method.3.gz
+%%MAN3%%man/man3/DTLS_server_method.3.gz
 %%MAN3%%man/man3/DTLSv1_client_method.3.gz
 %%MAN3%%man/man3/DTLSv1_listen.3.gz
 %%MAN3%%man/man3/DTLSv1_method.3.gz
@@ -967,6 +970,7 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/EVP_CIPHER_CTX_block_size.3.gz
 %%MAN3%%man/man3/EVP_CIPHER_CTX_cipher.3.gz
 %%MAN3%%man/man3/EVP_CIPHER_CTX_cleanup.3.gz
+%%MAN3%%man/man3/EVP_CIPHER_CTX_clear_flags.3.gz
 %%MAN3%%man/man3/EVP_CIPHER_CTX_ctrl.3.gz
 %%MAN3%%man/man3/EVP_CIPHER_CTX_flags.3.gz
 %%MAN3%%man/man3/EVP_CIPHER_CTX_free.3.gz
@@ -981,9 +985,11 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/EVP_CIPHER_CTX_rand_key.3.gz
 %%MAN3%%man/man3/EVP_CIPHER_CTX_reset.3.gz
 %%MAN3%%man/man3/EVP_CIPHER_CTX_set_app_data.3.gz
+%%MAN3%%man/man3/EVP_CIPHER_CTX_set_flags.3.gz
 %%MAN3%%man/man3/EVP_CIPHER_CTX_set_iv.3.gz
 %%MAN3%%man/man3/EVP_CIPHER_CTX_set_key_length.3.gz
 %%MAN3%%man/man3/EVP_CIPHER_CTX_set_padding.3.gz
+%%MAN3%%man/man3/EVP_CIPHER_CTX_test_flags.3.gz
 %%MAN3%%man/man3/EVP_CIPHER_CTX_type.3.gz
 %%MAN3%%man/man3/EVP_CIPHER_asn1_to_param.3.gz
 %%MAN3%%man/man3/EVP_CIPHER_block_size.3.gz
@@ -1019,6 +1025,8 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/EVP_DigestVerifyFinal.3.gz
 %%MAN3%%man/man3/EVP_DigestVerifyInit.3.gz
 %%MAN3%%man/man3/EVP_DigestVerifyUpdate.3.gz
+%%MAN3%%man/man3/EVP_ENCODE_CTX_free.3.gz
+%%MAN3%%man/man3/EVP_ENCODE_CTX_new.3.gz
 %%MAN3%%man/man3/EVP_EncodeBlock.3.gz
 %%MAN3%%man/man3/EVP_EncodeFinal.3.gz
 %%MAN3%%man/man3/EVP_EncodeInit.3.gz
@@ -1057,6 +1065,9 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/EVP_PKEY_CTX_get_app_data.3.gz
 %%MAN3%%man/man3/EVP_PKEY_CTX_get_cb.3.gz
 %%MAN3%%man/man3/EVP_PKEY_CTX_get_keygen_info.3.gz
+%%MAN3%%man/man3/EVP_PKEY_CTX_get_rsa_mgf1_md.3.gz
+%%MAN3%%man/man3/EVP_PKEY_CTX_get_rsa_padding.3.gz
+%%MAN3%%man/man3/EVP_PKEY_CTX_get_rsa_pss_saltlen.3.gz
 %%MAN3%%man/man3/EVP_PKEY_CTX_new.3.gz
 %%MAN3%%man/man3/EVP_PKEY_CTX_new_id.3.gz
 %%MAN3%%man/man3/EVP_PKEY_CTX_set_app_data.3.gz
@@ -1067,6 +1078,7 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/EVP_PKEY_CTX_set_ec_paramgen_curve_nid.3.gz
 %%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_keygen_bits.3.gz
 %%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_keygen_pubexp.3.gz
+%%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_mgf1_md.3.gz
 %%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_padding.3.gz
 %%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_pss_saltlen.3.gz
 %%MAN3%%man/man3/EVP_PKEY_CTX_set_signature_md.3.gz
@@ -1108,6 +1120,7 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/EVP_PKEY_get0_EC_KEY.3.gz
 %%MAN3%%man/man3/EVP_PKEY_get0_RSA.3.gz
 %%MAN3%%man/man3/EVP_PKEY_get0_asn1.3.gz
+%%MAN3%%man/man3/EVP_PKEY_get0_hmac.3.gz
 %%MAN3%%man/man3/EVP_PKEY_get1_DH.3.gz
 %%MAN3%%man/man3/EVP_PKEY_get1_DSA.3.gz
 %%MAN3%%man/man3/EVP_PKEY_get1_EC_KEY.3.gz
@@ -1138,6 +1151,7 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/EVP_PKEY_meth_set_verifyctx.3.gz
 %%MAN3%%man/man3/EVP_PKEY_missing_parameters.3.gz
 %%MAN3%%man/man3/EVP_PKEY_new.3.gz
+%%MAN3%%man/man3/EVP_PKEY_new_mac_key.3.gz
 %%MAN3%%man/man3/EVP_PKEY_paramgen.3.gz
 %%MAN3%%man/man3/EVP_PKEY_paramgen_init.3.gz
 %%MAN3%%man/man3/EVP_PKEY_print_params.3.gz
@@ -1170,30 +1184,50 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/EVP_aead_aes_128_gcm.3.gz
 %%MAN3%%man/man3/EVP_aead_aes_256_gcm.3.gz
 %%MAN3%%man/man3/EVP_aead_chacha20_poly1305.3.gz
+%%MAN3%%man/man3/EVP_aead_chacha20_poly1305.gz
+%%MAN3%%man/man3/EVP_aead_xchacha20_poly1305.3.gz
 %%MAN3%%man/man3/EVP_aes_128_cbc.3.gz
 %%MAN3%%man/man3/EVP_aes_128_cbc_hmac_sha1.3.gz
 %%MAN3%%man/man3/EVP_aes_128_ccm.3.gz
 %%MAN3%%man/man3/EVP_aes_128_cfb.3.gz
+%%MAN3%%man/man3/EVP_aes_128_cfb1.3.gz
+%%MAN3%%man/man3/EVP_aes_128_cfb128.3.gz
+%%MAN3%%man/man3/EVP_aes_128_cfb8.3.gz
+%%MAN3%%man/man3/EVP_aes_128_ctr.3.gz
 %%MAN3%%man/man3/EVP_aes_128_ecb.3.gz
 %%MAN3%%man/man3/EVP_aes_128_gcm.3.gz
 %%MAN3%%man/man3/EVP_aes_128_ofb.3.gz
+%%MAN3%%man/man3/EVP_aes_128_wrap.3.gz
+%%MAN3%%man/man3/EVP_aes_128_xts.3.gz
 %%MAN3%%man/man3/EVP_aes_192_cbc.3.gz
 %%MAN3%%man/man3/EVP_aes_192_ccm.3.gz
 %%MAN3%%man/man3/EVP_aes_192_cfb.3.gz
+%%MAN3%%man/man3/EVP_aes_192_cfb1.3.gz
+%%MAN3%%man/man3/EVP_aes_192_cfb128.3.gz
+%%MAN3%%man/man3/EVP_aes_192_cfb8.3.gz
+%%MAN3%%man/man3/EVP_aes_192_ctr.3.gz
 %%MAN3%%man/man3/EVP_aes_192_ecb.3.gz
 %%MAN3%%man/man3/EVP_aes_192_gcm.3.gz
 %%MAN3%%man/man3/EVP_aes_192_ofb.3.gz
+%%MAN3%%man/man3/EVP_aes_192_wrap.3.gz
 %%MAN3%%man/man3/EVP_aes_256_cbc.3.gz
 %%MAN3%%man/man3/EVP_aes_256_cbc_hmac_sha1.3.gz
 %%MAN3%%man/man3/EVP_aes_256_ccm.3.gz
 %%MAN3%%man/man3/EVP_aes_256_cfb.3.gz
+%%MAN3%%man/man3/EVP_aes_256_cfb1.3.gz
+%%MAN3%%man/man3/EVP_aes_256_cfb128.3.gz
+%%MAN3%%man/man3/EVP_aes_256_cfb8.3.gz
+%%MAN3%%man/man3/EVP_aes_256_ctr.3.gz
 %%MAN3%%man/man3/EVP_aes_256_ecb.3.gz
 %%MAN3%%man/man3/EVP_aes_256_gcm.3.gz
 %%MAN3%%man/man3/EVP_aes_256_ofb.3.gz
+%%MAN3%%man/man3/EVP_aes_256_wrap.3.gz
+%%MAN3%%man/man3/EVP_aes_256_xts.3.gz
 %%MAN3%%man/man3/EVP_bf_cbc.3.gz
 %%MAN3%%man/man3/EVP_bf_cfb.3.gz
 %%MAN3%%man/man3/EVP_bf_ecb.3.gz
 %%MAN3%%man/man3/EVP_bf_ofb.3.gz
+%%MAN3%%man/man3/EVP_camellia_128_cbc.3.gz
 %%MAN3%%man/man3/EVP_cast5_cbc.3.gz
 %%MAN3%%man/man3/EVP_cast5_cfb.3.gz
 %%MAN3%%man/man3/EVP_cast5_ecb.3.gz
@@ -1245,6 +1279,12 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/EVP_sha256.3.gz
 %%MAN3%%man/man3/EVP_sha384.3.gz
 %%MAN3%%man/man3/EVP_sha512.3.gz
+%%MAN3%%man/man3/EVP_sm4_cbc.3.gz
+%%MAN3%%man/man3/EVP_sm4_cfb.3.gz
+%%MAN3%%man/man3/EVP_sm4_cfb128.3.gz
+%%MAN3%%man/man3/EVP_sm4_ctr.3.gz
+%%MAN3%%man/man3/EVP_sm4_ecb.3.gz
+%%MAN3%%man/man3/EVP_sm4_ofb.3.gz
 %%MAN3%%man/man3/EXTENDED_KEY_USAGE_free.3.gz
 %%MAN3%%man/man3/EXTENDED_KEY_USAGE_new.3.gz
 %%MAN3%%man/man3/GENERAL_NAMES_free.3.gz
@@ -1338,6 +1378,7 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/OCSP_SINGLERESP_new.3.gz
 %%MAN3%%man/man3/OCSP_basic_add1_nonce.3.gz
 %%MAN3%%man/man3/OCSP_basic_sign.3.gz
+%%MAN3%%man/man3/OCSP_basic_verify.3.gz
 %%MAN3%%man/man3/OCSP_cert_id_new.3.gz
 %%MAN3%%man/man3/OCSP_cert_to_id.3.gz
 %%MAN3%%man/man3/OCSP_check_nonce.3.gz
@@ -1365,6 +1406,7 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/OCSP_single_get0_status.3.gz
 %%MAN3%%man/man3/OCSP_url_svcloc_new.3.gz
 %%MAN3%%man/man3/OPENSSL_VERSION_NUMBER.3.gz
+%%MAN3%%man/man3/OPENSSL_VERSION_TEXT.3.gz
 %%MAN3%%man/man3/OPENSSL_cleanse.3.gz
 %%MAN3%%man/man3/OPENSSL_config.3.gz
 %%MAN3%%man/man3/OPENSSL_free.3.gz
@@ -1648,6 +1690,7 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/SSL_CIPHER_is_aead.3.gz
 %%MAN3%%man/man3/SSL_COMP_add_compression_method.3.gz
 %%MAN3%%man/man3/SSL_COMP_get_compression_methods.3.gz
+%%MAN3%%man/man3/SSL_CTX_add1_chain_cert.3.gz
 %%MAN3%%man/man3/SSL_CTX_add_client_CA.3.gz
 %%MAN3%%man/man3/SSL_CTX_add_extra_chain_cert.3.gz
 %%MAN3%%man/man3/SSL_CTX_add_session.3.gz
@@ -1815,6 +1858,7 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/SSL_get0_param.3.gz
 %%MAN3%%man/man3/SSL_get0_session.3.gz
 %%MAN3%%man/man3/SSL_get1_session.3.gz
+%%MAN3%%man/man3/SSL_get1_supported_ciphers.3.gz
 %%MAN3%%man/man3/SSL_get_SSL_CTX.3.gz
 %%MAN3%%man/man3/SSL_get_certificate.3.gz
 %%MAN3%%man/man3/SSL_get_cipher.3.gz
@@ -1824,6 +1868,7 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/SSL_get_cipher_version.3.gz
 %%MAN3%%man/man3/SSL_get_ciphers.3.gz
 %%MAN3%%man/man3/SSL_get_client_CA_list.3.gz
+%%MAN3%%man/man3/SSL_get_client_ciphers.3.gz
 %%MAN3%%man/man3/SSL_get_client_random.3.gz
 %%MAN3%%man/man3/SSL_get_current_cipher.3.gz
 %%MAN3%%man/man3/SSL_get_default_timeout.3.gz
@@ -2835,6 +2880,7 @@ man/man1/openssl.1.gz
 %%MAN3%%man/man3/tls_connect_fds.3.gz
 %%MAN3%%man/man3/tls_connect_servername.3.gz
 %%MAN3%%man/man3/tls_connect_socket.3.gz
+%%MAN3%%man/man3/tls_default_ca_cert_file.3.gz
 %%MAN3%%man/man3/tls_error.3.gz
 %%MAN3%%man/man3/tls_free.3.gz
 %%MAN3%%man/man3/tls_handshake.3.gz

Modified: head/security/libressl/version.mk
==============================================================================
--- head/security/libressl/version.mk	Mon Apr 22 19:21:16 2019	(r499666)
+++ head/security/libressl/version.mk	Mon Apr 22 19:44:57 2019	(r499667)
@@ -1 +1 @@
-OPENSSL_SHLIBVER?=	44
+OPENSSL_SHLIBVER?=	45
