mirror of
https://github.com/openbsd/ports.git
synced 2026-06-17 23:13:55 +02:00
Zap the polarssl directory now that we've switched to mbedtls
This commit is contained in:
@@ -1,43 +0,0 @@
|
||||
PORTROACH= limit:^2\.28
|
||||
|
||||
COMMENT= SSL library with an intuitive API and readable source code
|
||||
|
||||
GH_ACCOUNT= Mbed-TLS
|
||||
GH_PROJECT= mbedtls
|
||||
GH_TAGNAME= mbedtls-2.28.10
|
||||
DISTNAME= ${GH_TAGNAME}
|
||||
|
||||
# check SOVERSION
|
||||
SHARED_LIBS += mbedtls 7.1
|
||||
SHARED_LIBS += mbedcrypto 5.1
|
||||
SHARED_LIBS += mbedx509 3.3
|
||||
|
||||
CATEGORIES= security
|
||||
|
||||
HOMEPAGE= https://www.trustedfirmware.org/projects/mbed-tls/
|
||||
|
||||
# Apache v2 or GPLv2+
|
||||
PERMIT_PACKAGE= Yes
|
||||
|
||||
WANTLIB += c pthread
|
||||
|
||||
MODULES= devel/cmake \
|
||||
lang/python
|
||||
|
||||
MODPY_RUNDEP= No
|
||||
|
||||
CONFIGURE_ARGS= -DUSE_SHARED_MBEDTLS_LIBRARY=ON \
|
||||
-DLINK_WITH_PTHREAD=ON
|
||||
|
||||
MODCMAKE_POLICY_VERSION_OVERRIDE = Yes
|
||||
|
||||
post-install:
|
||||
${INSTALL_DATA_DIR} ${PREFIX}/share/doc/mbedtls
|
||||
cd ${WRKSRC}; ${INSTALL_DATA} README.md ChangeLog \
|
||||
${PREFIX}/share/doc/mbedtls
|
||||
mv ${PREFIX}/bin ${PREFIX}/share/examples/mbedtls
|
||||
(echo "These programs are useful code samples for a crypto expert, but";\
|
||||
echo "should not be relied upon by the normal end-user.") \
|
||||
> ${PREFIX}/share/examples/mbedtls/README
|
||||
|
||||
.include <bsd.port.mk>
|
||||
@@ -1,2 +0,0 @@
|
||||
SHA256 (mbedtls-2.28.10.tar.gz) = x4Xd8q1ml2q0KcNt/9SgIUkeQPBP5JPPw51u2RU7wkY=
|
||||
SIZE (mbedtls-2.28.10.tar.gz) = 4369924
|
||||
@@ -1,30 +0,0 @@
|
||||
Index: CMakeLists.txt
|
||||
--- CMakeLists.txt.orig
|
||||
+++ CMakeLists.txt
|
||||
@@ -203,8 +203,6 @@ if(CMAKE_COMPILER_IS_GNU)
|
||||
if (GCC_VERSION VERSION_GREATER 7.0 OR GCC_VERSION VERSION_EQUAL 7.0)
|
||||
set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wformat-overflow=2 -Wformat-truncation")
|
||||
endif()
|
||||
- set(CMAKE_C_FLAGS_RELEASE "-O2")
|
||||
- set(CMAKE_C_FLAGS_DEBUG "-O0 -g3")
|
||||
set(CMAKE_C_FLAGS_COVERAGE "-O0 -g3 --coverage")
|
||||
set(CMAKE_C_FLAGS_ASAN "-fsanitize=address -fno-common -fsanitize=undefined -fno-sanitize-recover=all -O3")
|
||||
set(CMAKE_C_FLAGS_ASANDBG "-fsanitize=address -fno-common -fsanitize=undefined -fno-sanitize-recover=all -O1 -g3 -fno-omit-frame-pointer -fno-optimize-sibling-calls")
|
||||
@@ -214,8 +212,6 @@ endif(CMAKE_COMPILER_IS_GNU)
|
||||
|
||||
if(CMAKE_COMPILER_IS_CLANG)
|
||||
set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wimplicit-fallthrough -Wshadow -Wvla -Wformat=2 -Wno-format-nonliteral")
|
||||
- set(CMAKE_C_FLAGS_RELEASE "-O2")
|
||||
- set(CMAKE_C_FLAGS_DEBUG "-O0 -g3")
|
||||
set(CMAKE_C_FLAGS_COVERAGE "-O0 -g3 --coverage")
|
||||
set(CMAKE_C_FLAGS_ASAN "-fsanitize=address -fno-common -fsanitize=undefined -fno-sanitize-recover=all -O3")
|
||||
set(CMAKE_C_FLAGS_ASANDBG "-fsanitize=address -fno-common -fsanitize=undefined -fno-sanitize-recover=all -O1 -g3 -fno-omit-frame-pointer -fno-optimize-sibling-calls")
|
||||
@@ -241,7 +237,7 @@ if(MBEDTLS_FATAL_WARNINGS)
|
||||
endif(CMAKE_COMPILER_IS_MSVC)
|
||||
|
||||
if(CMAKE_COMPILER_IS_CLANG OR CMAKE_COMPILER_IS_GNU)
|
||||
- set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Werror")
|
||||
+ set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS}")
|
||||
if(UNSAFE_BUILD)
|
||||
set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wno-error=cpp")
|
||||
set(CMAKE_C_FLAGS_ASAN "${CMAKE_C_FLAGS_ASAN} -Wno-error=cpp")
|
||||
@@ -1,24 +0,0 @@
|
||||
MBEDTLS_THREADING_PTHREAD and MBEDTLS_THREADING_C are required by
|
||||
www/hiawatha.
|
||||
|
||||
Index: include/mbedtls/config.h
|
||||
--- include/mbedtls/config.h.orig
|
||||
+++ include/mbedtls/config.h
|
||||
@@ -2309,7 +2309,7 @@
|
||||
*
|
||||
* Uncomment this to enable pthread mutexes.
|
||||
*/
|
||||
-//#define MBEDTLS_THREADING_PTHREAD
|
||||
+#define MBEDTLS_THREADING_PTHREAD
|
||||
|
||||
/**
|
||||
* \def MBEDTLS_USE_PSA_CRYPTO
|
||||
@@ -3692,7 +3692,7 @@
|
||||
*
|
||||
* Enable this layer to allow use of mutexes within Mbed TLS
|
||||
*/
|
||||
-//#define MBEDTLS_THREADING_C
|
||||
+#define MBEDTLS_THREADING_C
|
||||
|
||||
/**
|
||||
* \def MBEDTLS_TIMING_C
|
||||
@@ -1,29 +0,0 @@
|
||||
Use unprivileged read from %tick register to avoid SIGILL on sparc64.
|
||||
|
||||
Index: library/timing.c
|
||||
--- library/timing.c.orig
|
||||
+++ library/timing.c
|
||||
@@ -120,18 +120,19 @@ unsigned long mbedtls_timing_hardclock(void)
|
||||
#if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
|
||||
defined(__GNUC__) && defined(__sparc64__)
|
||||
|
||||
-#if defined(__OpenBSD__)
|
||||
-#warning OpenBSD does not allow access to tick register using software version instead
|
||||
-#else
|
||||
#define HAVE_HARDCLOCK
|
||||
|
||||
unsigned long mbedtls_timing_hardclock(void)
|
||||
{
|
||||
unsigned long tick;
|
||||
+#ifdef __OpenBSD__
|
||||
+ /* OpenBSD allows unprivileged reads of %tick */
|
||||
+ asm volatile ("rd %%tick, %0;" : "=&r" (tick));
|
||||
+#else
|
||||
asm volatile ("rdpr %%tick, %0;" : "=&r" (tick));
|
||||
+#endif
|
||||
return tick;
|
||||
}
|
||||
-#endif /* __OpenBSD__ */
|
||||
#endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
|
||||
__GNUC__ && __sparc64__ */
|
||||
|
||||
@@ -1,19 +0,0 @@
|
||||
PolarSSL is a fully featured and standards compliant SSL library offering
|
||||
server and client functionality (SSLv3, TLSv1.0, TLSv1.1 and TLSv1.2) with
|
||||
an intuitive API and readable source code. Dual license (GPLv2+/commercial).
|
||||
|
||||
Non-standard extensions include: SSL Session Tickets (RFC 5077), Server
|
||||
Name Indication (SNI) (RFC 6066), Truncated HMAC (RFC 6066), Max Fragment
|
||||
Length (RFC 6066), and Secure Renegotiation (RFC 5746).
|
||||
|
||||
Symmetric algorithms: AES, Blowfish, 3DES, DES, ARC4, Camellia, XTEA
|
||||
Modes: ECB, CBC, CFB, CTR, GCM
|
||||
Hashes: MD2, MD4, MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, RIPEMD-160
|
||||
|
||||
PolarSSL has its own big number library. Its RSA implementation supports both
|
||||
PKCS#1 v1.5 and PKCS#1 v2.1 padding. Its ECC implementation supports ECDHE
|
||||
and ECDSA with various NIST/Koblitz/Brainpool curves and Curve25519.
|
||||
|
||||
PolarSSL includes extensive testing (over 6600 validation, regression and
|
||||
code coverage tests) and uses a continuous integration system to check all
|
||||
committed code. Automated tests are also done against GnuTLS and OpenSSL.
|
||||
@@ -1,188 +0,0 @@
|
||||
@conflict polarssl-*
|
||||
include/everest/
|
||||
include/everest/Hacl_Curve25519.h
|
||||
include/everest/everest.h
|
||||
include/everest/kremlib/
|
||||
include/everest/kremlib.h
|
||||
include/everest/kremlib/FStar_UInt128.h
|
||||
include/everest/kremlib/FStar_UInt64_FStar_UInt32_FStar_UInt16_FStar_UInt8.h
|
||||
include/everest/kremlin/
|
||||
include/everest/kremlin/c_endianness.h
|
||||
include/everest/kremlin/internal/
|
||||
include/everest/kremlin/internal/builtin.h
|
||||
include/everest/kremlin/internal/callconv.h
|
||||
include/everest/kremlin/internal/compat.h
|
||||
include/everest/kremlin/internal/debug.h
|
||||
include/everest/kremlin/internal/target.h
|
||||
include/everest/kremlin/internal/types.h
|
||||
include/everest/kremlin/internal/wasmsupport.h
|
||||
include/everest/vs2010/
|
||||
include/everest/vs2010/Hacl_Curve25519.h
|
||||
include/everest/x25519.h
|
||||
include/mbedtls/
|
||||
include/mbedtls/aes.h
|
||||
include/mbedtls/aesni.h
|
||||
include/mbedtls/arc4.h
|
||||
include/mbedtls/aria.h
|
||||
include/mbedtls/asn1.h
|
||||
include/mbedtls/asn1write.h
|
||||
include/mbedtls/base64.h
|
||||
include/mbedtls/bignum.h
|
||||
include/mbedtls/blowfish.h
|
||||
include/mbedtls/bn_mul.h
|
||||
include/mbedtls/camellia.h
|
||||
include/mbedtls/ccm.h
|
||||
include/mbedtls/certs.h
|
||||
include/mbedtls/chacha20.h
|
||||
include/mbedtls/chachapoly.h
|
||||
include/mbedtls/check_config.h
|
||||
include/mbedtls/cipher.h
|
||||
include/mbedtls/cipher_internal.h
|
||||
include/mbedtls/cmac.h
|
||||
include/mbedtls/compat-1.3.h
|
||||
include/mbedtls/config.h
|
||||
include/mbedtls/config_psa.h
|
||||
include/mbedtls/constant_time.h
|
||||
include/mbedtls/ctr_drbg.h
|
||||
include/mbedtls/debug.h
|
||||
include/mbedtls/des.h
|
||||
include/mbedtls/dhm.h
|
||||
include/mbedtls/ecdh.h
|
||||
include/mbedtls/ecdsa.h
|
||||
include/mbedtls/ecjpake.h
|
||||
include/mbedtls/ecp.h
|
||||
include/mbedtls/ecp_internal.h
|
||||
include/mbedtls/entropy.h
|
||||
include/mbedtls/entropy_poll.h
|
||||
include/mbedtls/error.h
|
||||
include/mbedtls/gcm.h
|
||||
include/mbedtls/havege.h
|
||||
include/mbedtls/hkdf.h
|
||||
include/mbedtls/hmac_drbg.h
|
||||
include/mbedtls/md.h
|
||||
include/mbedtls/md2.h
|
||||
include/mbedtls/md4.h
|
||||
include/mbedtls/md5.h
|
||||
include/mbedtls/md_internal.h
|
||||
include/mbedtls/memory_buffer_alloc.h
|
||||
include/mbedtls/net.h
|
||||
include/mbedtls/net_sockets.h
|
||||
include/mbedtls/nist_kw.h
|
||||
include/mbedtls/oid.h
|
||||
include/mbedtls/padlock.h
|
||||
include/mbedtls/pem.h
|
||||
include/mbedtls/pk.h
|
||||
include/mbedtls/pk_internal.h
|
||||
include/mbedtls/pkcs11.h
|
||||
include/mbedtls/pkcs12.h
|
||||
include/mbedtls/pkcs5.h
|
||||
include/mbedtls/platform.h
|
||||
include/mbedtls/platform_time.h
|
||||
include/mbedtls/platform_util.h
|
||||
include/mbedtls/poly1305.h
|
||||
include/mbedtls/psa_util.h
|
||||
include/mbedtls/ripemd160.h
|
||||
include/mbedtls/rsa.h
|
||||
include/mbedtls/rsa_internal.h
|
||||
include/mbedtls/sha1.h
|
||||
include/mbedtls/sha256.h
|
||||
include/mbedtls/sha512.h
|
||||
include/mbedtls/ssl.h
|
||||
include/mbedtls/ssl_cache.h
|
||||
include/mbedtls/ssl_ciphersuites.h
|
||||
include/mbedtls/ssl_cookie.h
|
||||
include/mbedtls/ssl_internal.h
|
||||
include/mbedtls/ssl_ticket.h
|
||||
include/mbedtls/threading.h
|
||||
include/mbedtls/timing.h
|
||||
include/mbedtls/version.h
|
||||
include/mbedtls/x509.h
|
||||
include/mbedtls/x509_crl.h
|
||||
include/mbedtls/x509_crt.h
|
||||
include/mbedtls/x509_csr.h
|
||||
include/mbedtls/xtea.h
|
||||
include/psa/
|
||||
include/psa/crypto.h
|
||||
include/psa/crypto_builtin_composites.h
|
||||
include/psa/crypto_builtin_primitives.h
|
||||
include/psa/crypto_compat.h
|
||||
include/psa/crypto_config.h
|
||||
include/psa/crypto_driver_common.h
|
||||
include/psa/crypto_driver_contexts_composites.h
|
||||
include/psa/crypto_driver_contexts_primitives.h
|
||||
include/psa/crypto_extra.h
|
||||
include/psa/crypto_platform.h
|
||||
include/psa/crypto_se_driver.h
|
||||
include/psa/crypto_sizes.h
|
||||
include/psa/crypto_struct.h
|
||||
include/psa/crypto_types.h
|
||||
include/psa/crypto_values.h
|
||||
@static-lib lib/libmbedcrypto.a
|
||||
@lib lib/libmbedcrypto.so.${LIBmbedcrypto_VERSION}
|
||||
@static-lib lib/libmbedtls.a
|
||||
@lib lib/libmbedtls.so.${LIBmbedtls_VERSION}
|
||||
@static-lib lib/libmbedx509.a
|
||||
@lib lib/libmbedx509.so.${LIBmbedx509_VERSION}
|
||||
lib/pkgconfig/mbedcrypto.pc
|
||||
lib/pkgconfig/mbedtls.pc
|
||||
lib/pkgconfig/mbedx509.pc
|
||||
share/doc/mbedtls/
|
||||
share/doc/mbedtls/ChangeLog
|
||||
share/doc/mbedtls/README.md
|
||||
share/examples/mbedtls/
|
||||
share/examples/mbedtls/README
|
||||
@bin share/examples/mbedtls/benchmark
|
||||
@bin share/examples/mbedtls/cert_app
|
||||
@bin share/examples/mbedtls/cert_req
|
||||
@bin share/examples/mbedtls/cert_write
|
||||
@bin share/examples/mbedtls/crl_app
|
||||
@bin share/examples/mbedtls/crypt_and_hash
|
||||
@bin share/examples/mbedtls/crypto_examples
|
||||
@bin share/examples/mbedtls/dh_client
|
||||
@bin share/examples/mbedtls/dh_genprime
|
||||
@bin share/examples/mbedtls/dh_server
|
||||
@bin share/examples/mbedtls/dtls_client
|
||||
@bin share/examples/mbedtls/dtls_server
|
||||
@bin share/examples/mbedtls/ecdh_curve25519
|
||||
@bin share/examples/mbedtls/ecdsa
|
||||
@bin share/examples/mbedtls/gen_entropy
|
||||
@bin share/examples/mbedtls/gen_key
|
||||
@bin share/examples/mbedtls/gen_random_ctr_drbg
|
||||
@bin share/examples/mbedtls/gen_random_havege
|
||||
@bin share/examples/mbedtls/generic_sum
|
||||
@bin share/examples/mbedtls/hello
|
||||
@bin share/examples/mbedtls/key_app
|
||||
@bin share/examples/mbedtls/key_app_writer
|
||||
@bin share/examples/mbedtls/key_ladder_demo
|
||||
share/examples/mbedtls/key_ladder_demo.sh
|
||||
@bin share/examples/mbedtls/load_roots
|
||||
@bin share/examples/mbedtls/metatest
|
||||
@bin share/examples/mbedtls/mini_client
|
||||
@bin share/examples/mbedtls/mpi_demo
|
||||
@bin share/examples/mbedtls/pem2der
|
||||
@bin share/examples/mbedtls/pk_decrypt
|
||||
@bin share/examples/mbedtls/pk_encrypt
|
||||
@bin share/examples/mbedtls/pk_sign
|
||||
@bin share/examples/mbedtls/pk_verify
|
||||
@bin share/examples/mbedtls/psa_constant_names
|
||||
@bin share/examples/mbedtls/query_compile_time_config
|
||||
@bin share/examples/mbedtls/req_app
|
||||
@bin share/examples/mbedtls/rsa_decrypt
|
||||
@bin share/examples/mbedtls/rsa_encrypt
|
||||
@bin share/examples/mbedtls/rsa_genkey
|
||||
@bin share/examples/mbedtls/rsa_sign
|
||||
@bin share/examples/mbedtls/rsa_sign_pss
|
||||
@bin share/examples/mbedtls/rsa_verify
|
||||
@bin share/examples/mbedtls/rsa_verify_pss
|
||||
@bin share/examples/mbedtls/selftest
|
||||
@bin share/examples/mbedtls/ssl_client1
|
||||
@bin share/examples/mbedtls/ssl_client2
|
||||
@bin share/examples/mbedtls/ssl_context_info
|
||||
@bin share/examples/mbedtls/ssl_fork_server
|
||||
@bin share/examples/mbedtls/ssl_mail_client
|
||||
@bin share/examples/mbedtls/ssl_pthread_server
|
||||
@bin share/examples/mbedtls/ssl_server
|
||||
@bin share/examples/mbedtls/ssl_server2
|
||||
@bin share/examples/mbedtls/strerror
|
||||
@bin share/examples/mbedtls/udp_proxy
|
||||
@bin share/examples/mbedtls/zeroize
|
||||
Reference in New Issue
Block a user