Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.netbsd.org", Issuer "Postmaster NetBSD.org" (verified OK)) by mollari.NetBSD.org (Postfix) with ESMTPS id 4EC2C7A220 for ; Sat, 1 Apr 2017 17:01:53 +0000 (UTC) Received: by mail.netbsd.org (Postfix, from userid 605) id EF4C385636; Sat, 1 Apr 2017 17:01:52 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 8089C8562E for ; Sat, 1 Apr 2017 17:01:52 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id DBp2WjENM_QF for ; Sat, 1 Apr 2017 17:01:51 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id BAF5C84CF0 for ; Sat, 1 Apr 2017 17:01:51 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id B5C9AFBE4; Sat, 1 Apr 2017 17:01:51 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_149106611189020" MIME-Version: 1.0 Date: Sat, 1 Apr 2017 17:01:51 +0000 From: "Thomas Klausner" Subject: CVS commit: pkgsrc/security/bearssl To: pkgsrc-changes@NetBSD.org Reply-To: wiz@netbsd.org X-Mailer: log_accum Message-Id: <20170401170151.B5C9AFBE4@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk This is a multi-part message in MIME format. --_----------=_149106611189020 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: wiz Date: Sat Apr 1 17:01:51 UTC 2017 Added Files: pkgsrc/security/bearssl: DESCR Makefile PLIST distinfo Log Message: Import bearssl-0.3 as security/bearssl. BearSSL is an implementation of the SSL/TLS protocol (RFC 5246) written in C. It aims at offering the following features: * Be correct and secure. In particular, insecure protocol versions and choices of algorithms are not supported, by design; cryptographic algorithm implementations are constant-time by default. * Be small, both in RAM and code footprint. For instance, a minimal server implementation may fit in about 20 kilobytes of compiled code and 25 kilobytes of RAM. * Be highly portable. BearSSL targets not only "big" operating systems like Linux and Windows, but also small embedded systems and even special contexts like bootstrap code. * Be feature-rich and extensible. SSL/TLS has many defined cipher suites and extensions; BearSSL should implement most of them, and allow extra algorithm implementations to be added afterwards, possibly from third parties. bearssl is considered alpha-quality software, which means that it runs but it probably has bugs, some of which being certainly exploitable vulnerabilities. To generate a diff of this commit: cvs rdiff -u -r0 -r1.1 pkgsrc/security/bearssl/DESCR \ pkgsrc/security/bearssl/Makefile pkgsrc/security/bearssl/PLIST \ pkgsrc/security/bearssl/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_149106611189020 Content-Disposition: inline Content-Length: 3407 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Added files: Index: pkgsrc/security/bearssl/DESCR diff -u /dev/null pkgsrc/security/bearssl/DESCR:1.1 --- /dev/null Sat Apr 1 17:01:51 2017 +++ pkgsrc/security/bearssl/DESCR Sat Apr 1 17:01:51 2017 @@ -0,0 +1,24 @@ +BearSSL is an implementation of the SSL/TLS protocol (RFC 5246) +written in C. It aims at offering the following features: + +* Be correct and secure. In particular, insecure protocol versions + and choices of algorithms are not supported, by design; + cryptographic algorithm implementations are constant-time by + default. + +* Be small, both in RAM and code footprint. For instance, a minimal + server implementation may fit in about 20 kilobytes of compiled + code and 25 kilobytes of RAM. + +* Be highly portable. BearSSL targets not only "big" operating + systems like Linux and Windows, but also small embedded systems + and even special contexts like bootstrap code. + +* Be feature-rich and extensible. SSL/TLS has many defined cipher + suites and extensions; BearSSL should implement most of them, + and allow extra algorithm implementations to be added afterwards, + possibly from third parties. + +bearssl is considered alpha-quality software, which means that it +runs but it probably has bugs, some of which being certainly +exploitable vulnerabilities. Index: pkgsrc/security/bearssl/Makefile diff -u /dev/null pkgsrc/security/bearssl/Makefile:1.1 --- /dev/null Sat Apr 1 17:01:51 2017 +++ pkgsrc/security/bearssl/Makefile Sat Apr 1 17:01:51 2017 @@ -0,0 +1,28 @@ +# $NetBSD: Makefile,v 1.1 2017/04/01 17:01:51 wiz Exp $ + +DISTNAME= bearssl-0.3 +CATEGORIES= security +MASTER_SITES= https://bearssl.org/ + +MAINTAINER= pkgsrc-users@NetBSD.org +HOMEPAGE= https://bearssl.org/ +COMMENT= Implementation of the SSL/TLS protocol (RFC 5246) +LICENSE= mit + +INSTALLATION_DIRS= bin include lib + +do-install: + cd ${WRKSRC}/build && \ + ${INSTALL_DATA} brssl ${DESTDIR}${PREFIX}/bin + cd ${WRKSRC}/inc && \ + ${INSTALL_DATA} *.h ${DESTDIR}${PREFIX}/include + cd ${WRKSRC}/build && \ + ${INSTALL_LIB} libbearssl.* ${DESTDIR}${PREFIX}/lib + +do-test: + cd ${WRKSRC} && \ + ./build/testcrypto all && \ + ./build/testspeed all && \ + ./build/testx509 + +.include "../../mk/bsd.pkg.mk" Index: pkgsrc/security/bearssl/PLIST diff -u /dev/null pkgsrc/security/bearssl/PLIST:1.1 --- /dev/null Sat Apr 1 17:01:51 2017 +++ pkgsrc/security/bearssl/PLIST Sat Apr 1 17:01:51 2017 @@ -0,0 +1,15 @@ +@comment $NetBSD: PLIST,v 1.1 2017/04/01 17:01:51 wiz Exp $ +bin/brssl +include/bearssl.h +include/bearssl_block.h +include/bearssl_ec.h +include/bearssl_hash.h +include/bearssl_hmac.h +include/bearssl_pem.h +include/bearssl_prf.h +include/bearssl_rand.h +include/bearssl_rsa.h +include/bearssl_ssl.h +include/bearssl_x509.h +lib/libbearssl.a +lib/libbearssl.so Index: pkgsrc/security/bearssl/distinfo diff -u /dev/null pkgsrc/security/bearssl/distinfo:1.1 --- /dev/null Sat Apr 1 17:01:51 2017 +++ pkgsrc/security/bearssl/distinfo Sat Apr 1 17:01:51 2017 @@ -0,0 +1,6 @@ +$NetBSD: distinfo,v 1.1 2017/04/01 17:01:51 wiz Exp $ + +SHA1 (bearssl-0.3.tar.gz) = 2f16a6b14b0e43cdacaf89aea47836a8da685f7e +RMD160 (bearssl-0.3.tar.gz) = 9c2562eecbdf8c777fd605c32b7d61ebb47c4734 +SHA512 (bearssl-0.3.tar.gz) = 137540dfed9a281e8599c9c74951662733e7e53c7b8556e4b940dea556299ef008ac49c8c499d8439884842d9a07f95de01a323229f882748c64ee9e10ebc691 +Size (bearssl-0.3.tar.gz) = 612642 bytes --_----------=_149106611189020--