New port: security/fizz: C++14 implementation of the TLS-1.3 standard

4 files changed, 176 insertions, 0 deletions

diff --git a/security/fizz/Makefile b/security/fizz/Makefile
new file mode 100644
index 000000000000..1f035b79fef4
--- /dev/null
+++ b/security/fizz/Makefile
@@ -0,0 +1,31 @@
+# $FreeBSD$
+
+PORTNAME=	fizz
+DISTVERSIONPREFIX=	v
+DISTVERSION=	2020.05.25.00
+CATEGORIES=	security
+
+MAINTAINER=	yuri@FreeBSD.org
+COMMENT=	C++14 implementation of the TLS-1.3 standard
+
+LICENSE=	BSD3CLAUSE
+LICENSE_FILE=	${WRKSRC}/../LICENSE
+
+LIB_DEPENDS=	libdouble-conversion.so:devel/double-conversion \
+		libfmt.so:devel/libfmt \
+		libfolly.so:devel/folly \
+		libgflags.so:devel/gflags \
+		libglog.so:devel/glog \
+		libsodium.so:security/libsodium
+
+USES=		cmake compiler:c++14-lang ssl
+USE_GITHUB=	yes
+GH_ACCOUNT=	facebookincubator
+USE_LDCONFIG=	yes
+
+WRKSRC_SUBDIR=	${PORTNAME}
+
+CMAKE_ON=	BUILD_SHARED_LIBS
+CMAKE_OFF=	BUILD_TESTS BUILD_EXAMPLES
+
+.include <bsd.port.mk>
diff --git a/security/fizz/distinfo b/security/fizz/distinfo
new file mode 100644
index 000000000000..4b21ff167d3d
--- /dev/null
+++ b/security/fizz/distinfo
@@ -0,0 +1,3 @@
+TIMESTAMP = 1590721422
+SHA256 (facebookincubator-fizz-v2020.05.25.00_GH0.tar.gz) = 519a824a6b100870f11b67f48c34b23fb1fbffccb2bc4d80a7b86859cffc4273
+SIZE (facebookincubator-fizz-v2020.05.25.00_GH0.tar.gz) = 454484
diff --git a/security/fizz/pkg-descr b/security/fizz/pkg-descr
new file mode 100644
index 000000000000..7ee3b5142853
--- /dev/null
+++ b/security/fizz/pkg-descr
@@ -0,0 +1,7 @@
+Fizz is a TLS 1.3 implementation.
+
+Fizz currently supports TLS 1.3 drafts 28, 26 (both wire-compatible with the
+final specification), and 23. All major handshake modes are supported, including
+PSK resumption, early data, client authentication, and HelloRetryRequest.
+
+WWW: https://github.com/facebookincubator/fizz
diff --git a/security/fizz/pkg-plist b/security/fizz/pkg-plist
new file mode 100644
index 000000000000..30386932cabd
--- /dev/null
+++ b/security/fizz/pkg-plist
@@ -0,0 +1,135 @@
+include/fizz/client/Actions.h
+include/fizz/client/AsyncFizzClient-inl.h
+include/fizz/client/AsyncFizzClient.h
+include/fizz/client/ClientExtensions.h
+include/fizz/client/ClientProtocol.h
+include/fizz/client/EarlyDataRejectionPolicy.h
+include/fizz/client/FizzClient-inl.h
+include/fizz/client/FizzClient.h
+include/fizz/client/FizzClientContext.h
+include/fizz/client/MultiClientExtensions.h
+include/fizz/client/PskCache.h
+include/fizz/client/PskSerializationUtils.h
+include/fizz/client/State.h
+include/fizz/client/SynchronizedLruPskCache.h
+include/fizz/crypto/ECCurve.h
+include/fizz/crypto/Hkdf.h
+include/fizz/crypto/KeyDerivation.h
+include/fizz/crypto/RandomGenerator.h
+include/fizz/crypto/Sha-inl.h
+include/fizz/crypto/Sha.h
+include/fizz/crypto/Sha256.h
+include/fizz/crypto/Sha384.h
+include/fizz/crypto/Utils.h
+include/fizz/crypto/aead/AESGCM128.h
+include/fizz/crypto/aead/AESGCM256.h
+include/fizz/crypto/aead/AESOCB128.h
+include/fizz/crypto/aead/Aead.h
+include/fizz/crypto/aead/ChaCha20Poly1305.h
+include/fizz/crypto/aead/IOBufUtil.h
+include/fizz/crypto/aead/OpenSSLEVPCipher-inl.h
+include/fizz/crypto/aead/OpenSSLEVPCipher.h
+include/fizz/crypto/exchange/ECCurveKeyExchange.h
+include/fizz/crypto/exchange/KeyExchange.h
+include/fizz/crypto/exchange/OpenSSLKeyExchange-inl.h
+include/fizz/crypto/exchange/OpenSSLKeyExchange.h
+include/fizz/crypto/exchange/X25519.h
+include/fizz/crypto/openssl/OpenSSL.h
+include/fizz/crypto/openssl/OpenSSLKeyUtils.h
+include/fizz/crypto/signature/Signature-inl.h
+include/fizz/crypto/signature/Signature.h
+include/fizz/extensions/delegatedcred/DelegatedCredentialCertManager.h
+include/fizz/extensions/delegatedcred/DelegatedCredentialClientExtension.h
+include/fizz/extensions/delegatedcred/DelegatedCredentialFactory.h
+include/fizz/extensions/delegatedcred/DelegatedCredentialUtils.h
+include/fizz/extensions/delegatedcred/PeerDelegatedCredential-inl.h
+include/fizz/extensions/delegatedcred/PeerDelegatedCredential.h
+include/fizz/extensions/delegatedcred/SelfDelegatedCredential-inl.h
+include/fizz/extensions/delegatedcred/SelfDelegatedCredential.h
+include/fizz/extensions/delegatedcred/Types.h
+include/fizz/extensions/exportedauth/ExportedAuthenticator.h
+include/fizz/extensions/exportedauth/Util.h
+include/fizz/extensions/tokenbinding/TokenBindingClientExtension.h
+include/fizz/extensions/tokenbinding/TokenBindingConstructor.h
+include/fizz/extensions/tokenbinding/TokenBindingContext.h
+include/fizz/extensions/tokenbinding/TokenBindingServerExtension.h
+include/fizz/extensions/tokenbinding/Types.h
+include/fizz/extensions/tokenbinding/Utils.h
+include/fizz/extensions/tokenbinding/Validator.h
+include/fizz/protocol/Actions.h
+include/fizz/protocol/AsyncFizzBase.h
+include/fizz/protocol/BrotliCertificateCompressor.h
+include/fizz/protocol/BrotliCertificateDecompressor.h
+include/fizz/protocol/CertDecompressionManager.h
+include/fizz/protocol/Certificate-inl.h
+include/fizz/protocol/Certificate.h
+include/fizz/protocol/CertificateCompressor.h
+include/fizz/protocol/CertificateVerifier.h
+include/fizz/protocol/DefaultCertificateVerifier.h
+include/fizz/protocol/Events.h
+include/fizz/protocol/Exporter.h
+include/fizz/protocol/Factory.h
+include/fizz/protocol/FizzBase-inl.h
+include/fizz/protocol/FizzBase.h
+include/fizz/protocol/HandshakeContext-inl.h
+include/fizz/protocol/HandshakeContext.h
+include/fizz/protocol/KeyScheduler.h
+include/fizz/protocol/OpenSSLFactory.h
+include/fizz/protocol/Params.h
+include/fizz/protocol/Protocol.h
+include/fizz/protocol/StateMachine-inl.h
+include/fizz/protocol/StateMachine.h
+include/fizz/protocol/Types.h
+include/fizz/protocol/ZlibCertificateCompressor.h
+include/fizz/protocol/ZlibCertificateDecompressor.h
+include/fizz/protocol/ZstdCertificateCompressor.h
+include/fizz/protocol/ZstdCertificateDecompressor.h
+include/fizz/protocol/clock/Clock.h
+include/fizz/protocol/clock/SystemClock.h
+include/fizz/record/EncryptedRecordLayer.h
+include/fizz/record/Extensions-inl.h
+include/fizz/record/Extensions.h
+include/fizz/record/PlaintextRecordLayer.h
+include/fizz/record/RecordLayer.h
+include/fizz/record/Types-inl.h
+include/fizz/record/Types.h
+include/fizz/server/Actions.h
+include/fizz/server/AeadCookieCipher.h
+include/fizz/server/AeadTicketCipher.h
+include/fizz/server/AeadTokenCipher.h
+include/fizz/server/AsyncFizzServer-inl.h
+include/fizz/server/AsyncFizzServer.h
+include/fizz/server/AsyncSelfCert.h
+include/fizz/server/CertManager.h
+include/fizz/server/CookieCipher.h
+include/fizz/server/CookieTypes.h
+include/fizz/server/DualTicketCipher.h
+include/fizz/server/FizzServer-inl.h
+include/fizz/server/FizzServer.h
+include/fizz/server/FizzServerContext.h
+include/fizz/server/MultiServerExtensions.h
+include/fizz/server/Negotiator.h
+include/fizz/server/ReplayCache.h
+include/fizz/server/ResumptionState.h
+include/fizz/server/ServerExtensions.h
+include/fizz/server/ServerProtocol.h
+include/fizz/server/SlidingBloomReplayCache.h
+include/fizz/server/State.h
+include/fizz/server/TicketCipher.h
+include/fizz/server/TicketCodec-inl.h
+include/fizz/server/TicketCodec.h
+include/fizz/server/TicketPolicy.h
+include/fizz/server/TicketTypes.h
+include/fizz/tool/Commands.h
+include/fizz/tool/FizzCommandCommon.h
+include/fizz/util/FizzUtil.h
+include/fizz/util/Parse-inl.h
+include/fizz/util/Parse.h
+include/fizz/util/Variant.h
+include/fizz/util/Workarounds.h
+lib/cmake/fizz/fizz-config.cmake
+lib/cmake/fizz/fizz-targets-%%CMAKE_BUILD_TYPE%%.cmake
+lib/cmake/fizz/fizz-targets.cmake
+lib/libfizz.so
+lib/libfizz.so.1
+lib/libfizz.so.1.0.0