aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--UPDATING24
-rw-r--r--security/libressl/Makefile2
-rw-r--r--security/libressl/distinfo6
-rw-r--r--security/libressl/pkg-plist62
-rw-r--r--security/libressl/version.mk2
5 files changed, 83 insertions, 13 deletions
diff --git a/UPDATING b/UPDATING
index 78790214b7da..16865b2e8530 100644
--- a/UPDATING
+++ b/UPDATING
@@ -5,6 +5,30 @@ they are unavoidable.
You should get into the habit of checking this file for changes each time
you update your ports collection, before attempting any port upgrades.
+20190422:
+ AFFECTS: users of security/libressl
+ AUTHOR: brnrd@FreeBSD.org
+
+ The port has been updated to the latest stable version 2.9 of LibreSSL.
+ The shared library versions of the libraries have been bumped.
+
+ After upgrading, manually update all packages that depend on any of the
+ libraries provided by LibreSSL (libssl, libcrypto and libtls) since the
+ versions of these libraries have changed. Normally, you can obtain the
+ list of dependent software by running the following command:
+
+ # pkg info -r libressl
+
+ Then you should rebuild all ports depending on libressl to avoid dangling
+ shared library dependencies. Poudriere and pkg handle this correctly,
+ portmaster and portupgrade users can use the following to rebuild all
+ dependent ports.
+
+ Portmaster users:
+ portmaster -r libressl
+ Portupgrade users:
+ portupgrade -fr security/libressl
+
20190421:
AFFECTS: users of databases/cego
AUTHOR: pi@FreeBSD.org
diff --git a/security/libressl/Makefile b/security/libressl/Makefile
index f19711fcac8c..5b814c626d21 100644
--- a/security/libressl/Makefile
+++ b/security/libressl/Makefile
@@ -2,7 +2,7 @@
# $FreeBSD$
PORTNAME= libressl
-PORTVERSION= 2.8.3
+PORTVERSION= 2.9.1
CATEGORIES= security devel
MASTER_SITES= OPENBSD/LibreSSL
diff --git a/security/libressl/distinfo b/security/libressl/distinfo
index 92103ded2007..6e568b3897e4 100644
--- a/security/libressl/distinfo
+++ b/security/libressl/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1544956249
-SHA256 (libressl-2.8.3.tar.gz) = 9b640b13047182761a99ce3e4f000be9687566e0828b4a72709e9e6a3ef98477
-SIZE (libressl-2.8.3.tar.gz) = 3366196
+TIMESTAMP = 1555942276
+SHA256 (libressl-2.9.1.tar.gz) = 39e4dd856694dc10d564201e4549c46d2431601a2b10f3422507e24ccc8f62f8
+SIZE (libressl-2.9.1.tar.gz) = 3607116
diff --git a/security/libressl/pkg-plist b/security/libressl/pkg-plist
index 0bc9ae3c8711..c6bde6c08982 100644
--- a/security/libressl/pkg-plist
+++ b/security/libressl/pkg-plist
@@ -5,7 +5,6 @@ etc/ssl/openssl.cnf
etc/ssl/x509v3.cnf
include/openssl/aes.h
include/openssl/asn1.h
-include/openssl/asn1_mac.h
include/openssl/asn1t.h
include/openssl/bio.h
include/openssl/blowfish.h
@@ -58,6 +57,8 @@ include/openssl/ripemd.h
include/openssl/rsa.h
include/openssl/safestack.h
include/openssl/sha.h
+include/openssl/sm3.h
+include/openssl/sm4.h
include/openssl/srtp.h
include/openssl/ssl.h
include/openssl/ssl2.h
@@ -76,16 +77,16 @@ include/openssl/x509v3.h
include/tls.h
lib/libcrypto.a
lib/libcrypto.so
-lib/libcrypto.so.44
-lib/libcrypto.so.44.0.1
+lib/libcrypto.so.45
+lib/libcrypto.so.45.0.4
lib/libssl.a
lib/libssl.so
-lib/libssl.so.46
-lib/libssl.so.46.0.1
+lib/libssl.so.47
+lib/libssl.so.47.0.5
lib/libtls.a
lib/libtls.so
-lib/libtls.so.18
-lib/libtls.so.18.0.1
+lib/libtls.so.19
+lib/libtls.so.19.0.6
libdata/pkgconfig/libcrypto.pc
libdata/pkgconfig/libssl.pc
libdata/pkgconfig/libtls.pc
@@ -546,7 +547,6 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/CRYPTO_set_dynlock_destroy_callback.3.gz
%%MAN3%%man/man3/CRYPTO_set_dynlock_lock_callback.3.gz
%%MAN3%%man/man3/CRYPTO_set_ex_data.3.gz
-%%MAN3%%man/man3/CRYPTO_set_locking_callback.3.gz
%%MAN3%%man/man3/CRYPTO_set_mem_functions.3.gz
%%MAN3%%man/man3/CRYPTO_strdup.3.gz
%%MAN3%%man/man3/CRYPTO_w_lock.3.gz
@@ -664,6 +664,9 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/DSAparams_dup.3.gz
%%MAN3%%man/man3/DSAparams_print.3.gz
%%MAN3%%man/man3/DSAparams_print_fp.3.gz
+%%MAN3%%man/man3/DTLS_client_method.3.gz
+%%MAN3%%man/man3/DTLS_method.3.gz
+%%MAN3%%man/man3/DTLS_server_method.3.gz
%%MAN3%%man/man3/DTLSv1_client_method.3.gz
%%MAN3%%man/man3/DTLSv1_listen.3.gz
%%MAN3%%man/man3/DTLSv1_method.3.gz
@@ -967,6 +970,7 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/EVP_CIPHER_CTX_block_size.3.gz
%%MAN3%%man/man3/EVP_CIPHER_CTX_cipher.3.gz
%%MAN3%%man/man3/EVP_CIPHER_CTX_cleanup.3.gz
+%%MAN3%%man/man3/EVP_CIPHER_CTX_clear_flags.3.gz
%%MAN3%%man/man3/EVP_CIPHER_CTX_ctrl.3.gz
%%MAN3%%man/man3/EVP_CIPHER_CTX_flags.3.gz
%%MAN3%%man/man3/EVP_CIPHER_CTX_free.3.gz
@@ -981,9 +985,11 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/EVP_CIPHER_CTX_rand_key.3.gz
%%MAN3%%man/man3/EVP_CIPHER_CTX_reset.3.gz
%%MAN3%%man/man3/EVP_CIPHER_CTX_set_app_data.3.gz
+%%MAN3%%man/man3/EVP_CIPHER_CTX_set_flags.3.gz
%%MAN3%%man/man3/EVP_CIPHER_CTX_set_iv.3.gz
%%MAN3%%man/man3/EVP_CIPHER_CTX_set_key_length.3.gz
%%MAN3%%man/man3/EVP_CIPHER_CTX_set_padding.3.gz
+%%MAN3%%man/man3/EVP_CIPHER_CTX_test_flags.3.gz
%%MAN3%%man/man3/EVP_CIPHER_CTX_type.3.gz
%%MAN3%%man/man3/EVP_CIPHER_asn1_to_param.3.gz
%%MAN3%%man/man3/EVP_CIPHER_block_size.3.gz
@@ -1019,6 +1025,8 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/EVP_DigestVerifyFinal.3.gz
%%MAN3%%man/man3/EVP_DigestVerifyInit.3.gz
%%MAN3%%man/man3/EVP_DigestVerifyUpdate.3.gz
+%%MAN3%%man/man3/EVP_ENCODE_CTX_free.3.gz
+%%MAN3%%man/man3/EVP_ENCODE_CTX_new.3.gz
%%MAN3%%man/man3/EVP_EncodeBlock.3.gz
%%MAN3%%man/man3/EVP_EncodeFinal.3.gz
%%MAN3%%man/man3/EVP_EncodeInit.3.gz
@@ -1057,6 +1065,9 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/EVP_PKEY_CTX_get_app_data.3.gz
%%MAN3%%man/man3/EVP_PKEY_CTX_get_cb.3.gz
%%MAN3%%man/man3/EVP_PKEY_CTX_get_keygen_info.3.gz
+%%MAN3%%man/man3/EVP_PKEY_CTX_get_rsa_mgf1_md.3.gz
+%%MAN3%%man/man3/EVP_PKEY_CTX_get_rsa_padding.3.gz
+%%MAN3%%man/man3/EVP_PKEY_CTX_get_rsa_pss_saltlen.3.gz
%%MAN3%%man/man3/EVP_PKEY_CTX_new.3.gz
%%MAN3%%man/man3/EVP_PKEY_CTX_new_id.3.gz
%%MAN3%%man/man3/EVP_PKEY_CTX_set_app_data.3.gz
@@ -1067,6 +1078,7 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/EVP_PKEY_CTX_set_ec_paramgen_curve_nid.3.gz
%%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_keygen_bits.3.gz
%%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_keygen_pubexp.3.gz
+%%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_mgf1_md.3.gz
%%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_padding.3.gz
%%MAN3%%man/man3/EVP_PKEY_CTX_set_rsa_pss_saltlen.3.gz
%%MAN3%%man/man3/EVP_PKEY_CTX_set_signature_md.3.gz
@@ -1108,6 +1120,7 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/EVP_PKEY_get0_EC_KEY.3.gz
%%MAN3%%man/man3/EVP_PKEY_get0_RSA.3.gz
%%MAN3%%man/man3/EVP_PKEY_get0_asn1.3.gz
+%%MAN3%%man/man3/EVP_PKEY_get0_hmac.3.gz
%%MAN3%%man/man3/EVP_PKEY_get1_DH.3.gz
%%MAN3%%man/man3/EVP_PKEY_get1_DSA.3.gz
%%MAN3%%man/man3/EVP_PKEY_get1_EC_KEY.3.gz
@@ -1138,6 +1151,7 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/EVP_PKEY_meth_set_verifyctx.3.gz
%%MAN3%%man/man3/EVP_PKEY_missing_parameters.3.gz
%%MAN3%%man/man3/EVP_PKEY_new.3.gz
+%%MAN3%%man/man3/EVP_PKEY_new_mac_key.3.gz
%%MAN3%%man/man3/EVP_PKEY_paramgen.3.gz
%%MAN3%%man/man3/EVP_PKEY_paramgen_init.3.gz
%%MAN3%%man/man3/EVP_PKEY_print_params.3.gz
@@ -1170,30 +1184,50 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/EVP_aead_aes_128_gcm.3.gz
%%MAN3%%man/man3/EVP_aead_aes_256_gcm.3.gz
%%MAN3%%man/man3/EVP_aead_chacha20_poly1305.3.gz
+%%MAN3%%man/man3/EVP_aead_chacha20_poly1305.gz
+%%MAN3%%man/man3/EVP_aead_xchacha20_poly1305.3.gz
%%MAN3%%man/man3/EVP_aes_128_cbc.3.gz
%%MAN3%%man/man3/EVP_aes_128_cbc_hmac_sha1.3.gz
%%MAN3%%man/man3/EVP_aes_128_ccm.3.gz
%%MAN3%%man/man3/EVP_aes_128_cfb.3.gz
+%%MAN3%%man/man3/EVP_aes_128_cfb1.3.gz
+%%MAN3%%man/man3/EVP_aes_128_cfb128.3.gz
+%%MAN3%%man/man3/EVP_aes_128_cfb8.3.gz
+%%MAN3%%man/man3/EVP_aes_128_ctr.3.gz
%%MAN3%%man/man3/EVP_aes_128_ecb.3.gz
%%MAN3%%man/man3/EVP_aes_128_gcm.3.gz
%%MAN3%%man/man3/EVP_aes_128_ofb.3.gz
+%%MAN3%%man/man3/EVP_aes_128_wrap.3.gz
+%%MAN3%%man/man3/EVP_aes_128_xts.3.gz
%%MAN3%%man/man3/EVP_aes_192_cbc.3.gz
%%MAN3%%man/man3/EVP_aes_192_ccm.3.gz
%%MAN3%%man/man3/EVP_aes_192_cfb.3.gz
+%%MAN3%%man/man3/EVP_aes_192_cfb1.3.gz
+%%MAN3%%man/man3/EVP_aes_192_cfb128.3.gz
+%%MAN3%%man/man3/EVP_aes_192_cfb8.3.gz
+%%MAN3%%man/man3/EVP_aes_192_ctr.3.gz
%%MAN3%%man/man3/EVP_aes_192_ecb.3.gz
%%MAN3%%man/man3/EVP_aes_192_gcm.3.gz
%%MAN3%%man/man3/EVP_aes_192_ofb.3.gz
+%%MAN3%%man/man3/EVP_aes_192_wrap.3.gz
%%MAN3%%man/man3/EVP_aes_256_cbc.3.gz
%%MAN3%%man/man3/EVP_aes_256_cbc_hmac_sha1.3.gz
%%MAN3%%man/man3/EVP_aes_256_ccm.3.gz
%%MAN3%%man/man3/EVP_aes_256_cfb.3.gz
+%%MAN3%%man/man3/EVP_aes_256_cfb1.3.gz
+%%MAN3%%man/man3/EVP_aes_256_cfb128.3.gz
+%%MAN3%%man/man3/EVP_aes_256_cfb8.3.gz
+%%MAN3%%man/man3/EVP_aes_256_ctr.3.gz
%%MAN3%%man/man3/EVP_aes_256_ecb.3.gz
%%MAN3%%man/man3/EVP_aes_256_gcm.3.gz
%%MAN3%%man/man3/EVP_aes_256_ofb.3.gz
+%%MAN3%%man/man3/EVP_aes_256_wrap.3.gz
+%%MAN3%%man/man3/EVP_aes_256_xts.3.gz
%%MAN3%%man/man3/EVP_bf_cbc.3.gz
%%MAN3%%man/man3/EVP_bf_cfb.3.gz
%%MAN3%%man/man3/EVP_bf_ecb.3.gz
%%MAN3%%man/man3/EVP_bf_ofb.3.gz
+%%MAN3%%man/man3/EVP_camellia_128_cbc.3.gz
%%MAN3%%man/man3/EVP_cast5_cbc.3.gz
%%MAN3%%man/man3/EVP_cast5_cfb.3.gz
%%MAN3%%man/man3/EVP_cast5_ecb.3.gz
@@ -1245,6 +1279,12 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/EVP_sha256.3.gz
%%MAN3%%man/man3/EVP_sha384.3.gz
%%MAN3%%man/man3/EVP_sha512.3.gz
+%%MAN3%%man/man3/EVP_sm4_cbc.3.gz
+%%MAN3%%man/man3/EVP_sm4_cfb.3.gz
+%%MAN3%%man/man3/EVP_sm4_cfb128.3.gz
+%%MAN3%%man/man3/EVP_sm4_ctr.3.gz
+%%MAN3%%man/man3/EVP_sm4_ecb.3.gz
+%%MAN3%%man/man3/EVP_sm4_ofb.3.gz
%%MAN3%%man/man3/EXTENDED_KEY_USAGE_free.3.gz
%%MAN3%%man/man3/EXTENDED_KEY_USAGE_new.3.gz
%%MAN3%%man/man3/GENERAL_NAMES_free.3.gz
@@ -1338,6 +1378,7 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/OCSP_SINGLERESP_new.3.gz
%%MAN3%%man/man3/OCSP_basic_add1_nonce.3.gz
%%MAN3%%man/man3/OCSP_basic_sign.3.gz
+%%MAN3%%man/man3/OCSP_basic_verify.3.gz
%%MAN3%%man/man3/OCSP_cert_id_new.3.gz
%%MAN3%%man/man3/OCSP_cert_to_id.3.gz
%%MAN3%%man/man3/OCSP_check_nonce.3.gz
@@ -1365,6 +1406,7 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/OCSP_single_get0_status.3.gz
%%MAN3%%man/man3/OCSP_url_svcloc_new.3.gz
%%MAN3%%man/man3/OPENSSL_VERSION_NUMBER.3.gz
+%%MAN3%%man/man3/OPENSSL_VERSION_TEXT.3.gz
%%MAN3%%man/man3/OPENSSL_cleanse.3.gz
%%MAN3%%man/man3/OPENSSL_config.3.gz
%%MAN3%%man/man3/OPENSSL_free.3.gz
@@ -1648,6 +1690,7 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/SSL_CIPHER_is_aead.3.gz
%%MAN3%%man/man3/SSL_COMP_add_compression_method.3.gz
%%MAN3%%man/man3/SSL_COMP_get_compression_methods.3.gz
+%%MAN3%%man/man3/SSL_CTX_add1_chain_cert.3.gz
%%MAN3%%man/man3/SSL_CTX_add_client_CA.3.gz
%%MAN3%%man/man3/SSL_CTX_add_extra_chain_cert.3.gz
%%MAN3%%man/man3/SSL_CTX_add_session.3.gz
@@ -1815,6 +1858,7 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/SSL_get0_param.3.gz
%%MAN3%%man/man3/SSL_get0_session.3.gz
%%MAN3%%man/man3/SSL_get1_session.3.gz
+%%MAN3%%man/man3/SSL_get1_supported_ciphers.3.gz
%%MAN3%%man/man3/SSL_get_SSL_CTX.3.gz
%%MAN3%%man/man3/SSL_get_certificate.3.gz
%%MAN3%%man/man3/SSL_get_cipher.3.gz
@@ -1824,6 +1868,7 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/SSL_get_cipher_version.3.gz
%%MAN3%%man/man3/SSL_get_ciphers.3.gz
%%MAN3%%man/man3/SSL_get_client_CA_list.3.gz
+%%MAN3%%man/man3/SSL_get_client_ciphers.3.gz
%%MAN3%%man/man3/SSL_get_client_random.3.gz
%%MAN3%%man/man3/SSL_get_current_cipher.3.gz
%%MAN3%%man/man3/SSL_get_default_timeout.3.gz
@@ -2835,6 +2880,7 @@ man/man1/openssl.1.gz
%%MAN3%%man/man3/tls_connect_fds.3.gz
%%MAN3%%man/man3/tls_connect_servername.3.gz
%%MAN3%%man/man3/tls_connect_socket.3.gz
+%%MAN3%%man/man3/tls_default_ca_cert_file.3.gz
%%MAN3%%man/man3/tls_error.3.gz
%%MAN3%%man/man3/tls_free.3.gz
%%MAN3%%man/man3/tls_handshake.3.gz
diff --git a/security/libressl/version.mk b/security/libressl/version.mk
index 479737c0229d..db1a4efa26aa 100644
--- a/security/libressl/version.mk
+++ b/security/libressl/version.mk
@@ -1 +1 @@
-OPENSSL_SHLIBVER?= 44
+OPENSSL_SHLIBVER?= 45