ports/security/libgcrypt, branch mainFreeBSD ports treehttps://cgit-dev.freebsd.org/ports/atom?h=main2026-02-13T21:57:38Zsecurity/libgcrypt: Fix Curve25519 key validation2026-02-13T21:57:38ZJoseph Mingronejrm@FreeBSD.org2026-02-13T18:06:40Zurn:sha1:be18d9f77a4439703553e6d64304f5dbef2086b6
Starting with version 1.12.0, libgcrypt was failing to validate
Curve25519 secret keys on FreeBSD-main. This resulted in failures such
as in the example below. Incorporate the patch from
https://dev.gnupg.org/T8094 to fix the problem.
% TEMP_GPG=$(mktemp -d)
% GNUPGHOME=$TEMP_GPG gpg --batch --import < ./test/openpgp4-secret-key.asc
gpg: keybox '/tmp/tmp.gkqFaMAlVu/pubring.kbx' created
gpg: /tmp/tmp.gkqFaMAlVu/trustdb.gpg: trustdb created
gpg: key 7E6ABE924645CC60: public key "Notmuch Test Suite (INSECURE!) <test_suite@notmuchmail.org>" imported
gpg: key 7E6ABE924645CC60: secret key imported
gpg: Total number processed: 1
gpg: imported: 1
gpg: secret keys read: 1
gpg: secret keys imported: 1
% GNUPGHOME=$TEMP_GPG gpg --decrypt ./test/corpora/crypto/basic-encrypted.eml
gpg: encrypted with cv25519 key, ID 1D71CFF38F6B48AF, created 2022-09-07
"Notmuch Test Suite (INSECURE!) <test_suite@notmuchmail.org>"
gpg: public key decryption failed: Bad secret key
gpg: decryption failed: Bad secret key
Approved by: cy (maintainer)
Obtained from: https://dev.gnupg.org/T8094
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55280
security/libgcrypt: Update to 1.12.02026-01-31T05:04:34ZCy Schubertcy@FreeBSD.org2026-01-31T05:04:34Zurn:sha1:d2c9fa52618036a9a38405b45291b4e065183e64security/libgcrypt: Update to 1.11.22025-08-10T05:38:02ZCy Schubertcy@FreeBSD.org2025-08-10T05:35:27Zurn:sha1:5d7ee97a3a5cdf49e569e9f8597899fc9b1f96c6
PR: 288262
Suggested by: fuz
MFH: 2025Q3
security/libgcrypt: Update to 1.11.12025-05-09T14:36:18ZCy Schubertcy@FreeBSD.org2025-05-09T14:35:47Zurn:sha1:62781476fa55db74c5c8ce16049095db3c933853security/libgcrypt: Fix regression2024-07-13T04:45:27ZDaniel Engbergdiizzy@FreeBSD.org2024-07-13T04:35:25Zurn:sha1:518e0275a6603c913816be0f6cb4efab3ba56815
In order to harvest the best entropy jitterentropy-base.c requires
that the compiler not optimize out any of its code. To ensure this
the cipher and randmom makefiles remove optmization options. This
will work in cases where the user has specified, for instance,
CFLAGS=-O3 but will not work when CFLAGS+=-O3 is specified. These
makefiles will only remove the first occurrence of the optimization
flag, resulting in a build failure. This patch alters the "munging"
sed command to remove all optimization options.
PR: 280081
MFH: 2024Q3
security/libgcrypt: Remove GNU_CONFIGURE_MANPREFIX2024-07-01T03:30:44ZCy Schubertcy@FreeBSD.org2024-07-01T03:30:44Zurn:sha1:c49e178f6ec54f504d1831d7320299f91d16d0d8
Now that manprefix has been moved we no longer need
GNU_CONFIGURE_MANPREFIX. Remove it.
PR: 279904
Submitted by: dizzy (part of a larger patch)
security/libgcrypt: Improve legibility2024-07-01T03:27:46ZCy Schubertcy@FreeBSD.org2024-07-01T03:27:46Zurn:sha1:013f956ddb6837deb4948d1ab474183c371677b9
PR: 279904
Submitted by: dizzy (part of a larger patch)
security/libgcrypt: Remove redundant USE_CSTD2024-07-01T03:24:16ZCy Schubertcy@FreeBSD.org2024-07-01T03:24:16Zurn:sha1:be69018e3841fad2d6001b8a4c878676253550af
USE=CSTD=gnu89 has not been needed for a while. Let's remove it.
PR: 279904
Submitted by: dizzy (part of a larger patch)
security/libgcrypt: Use pathfix2024-07-01T03:17:45ZCy Schubertcy@FreeBSD.org2024-07-01T03:17:45Zurn:sha1:4ea1376d3c7b9dd5d9a3e189b0e1869bb33ca5b6
Lookup WRKSRC and fix common path. (NOOP for this port.)
PR: 279904
Submitted by: dizzy (part of a larger patch)
security/libgcrypt: Update to 1.11.02024-07-01T03:13:03ZCy Schubertcy@FreeBSD.org2024-07-01T03:13:03Zurn:sha1:0f1758093444df122a9ec355f077bb6c99f9cde9
PR: 279904
Submitted by: dizzy (first part of a larger patch)