Received: by mail.netbsd.org (Postfix, from userid 605) id C3CAE84D8F; Wed, 7 Feb 2018 11:52:57 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 4F26784D50 for ; Wed, 7 Feb 2018 11:52:57 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id 68U_aY9LeHOI for ; Wed, 7 Feb 2018 11:52:56 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id B804884CED for ; Wed, 7 Feb 2018 11:52:56 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id AE7BEFB40; Wed, 7 Feb 2018 11:52:56 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1518004376168680" MIME-Version: 1.0 Date: Wed, 7 Feb 2018 11:52:56 +0000 From: "Maya Rashish" Subject: CVS commit: pkgsrc/security/bearssl To: pkgsrc-changes@NetBSD.org Reply-To: maya@netbsd.org X-Mailer: log_accum Message-Id: <20180207115256.AE7BEFB40@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1518004376168680 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: maya Date: Wed Feb 7 11:52:56 UTC 2018 Modified Files: pkgsrc/security/bearssl: Makefile PLIST distinfo Log Message: bearssl: update to 0.5. From Charlotte Koch. Added support for the BoarSSL / Twrch test framework. Header files now include the ritual mantras that make them compatible with C++. Better Makefile behaviour with Clang (FreeBSD compatibility). Worked around a bug of GCC 4.8 and 4.9 in 32-bit x86 mode. Incoming application data after initiating closure is now properly ignored. Some instances of (critical) Certificate Policies extensions are now ignored (when it is safe to do so). Fixed some behavioural bugs with regards to renegotiation (all were failing safe). Added encoded OID for hash functions in the public API, to help with using RSA signatures in non-SSL contexts. Fixed bug in AES/CBC decryption on x86 with AES-NI opcode (this was breaking decryption with AES/CBC cipher suites and TLS 1.0 only). Added an explicit stack buffer initialisation (some provably harmless accesses to uninitialised data were performed, Valgrind was not happy). Fixed bug in the search tree for the cache of SSL sessions (occasional lock-ups). Fixed bug in modular reduction in the special field for P-256 (this was infrequently breaking ECDSA signatures). Added support for exporting keying material (RFC 5705). Added new general-purpose API for AEAD implementations (in non-SSL contexts) and an AES/GCM implementation that follows that API. Added a function to forget saved session parameter in the LRU cache. Added a new ChaCha20 implementation that uses SSE2 on x86 architectures (both 32-bit and 64-bit). To generate a diff of this commit: cvs rdiff -u -r1.4 -r1.5 pkgsrc/security/bearssl/Makefile cvs rdiff -u -r1.1 -r1.2 pkgsrc/security/bearssl/PLIST cvs rdiff -u -r1.3 -r1.4 pkgsrc/security/bearssl/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1518004376168680 Content-Disposition: inline Content-Length: 2149 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/security/bearssl/Makefile diff -u pkgsrc/security/bearssl/Makefile:1.4 pkgsrc/security/bearssl/Makefile:1.5 --- pkgsrc/security/bearssl/Makefile:1.4 Fri Sep 22 22:00:57 2017 +++ pkgsrc/security/bearssl/Makefile Wed Feb 7 11:52:56 2018 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.4 2017/09/22 22:00:57 wiedi Exp $ +# $NetBSD: Makefile,v 1.5 2018/02/07 11:52:56 maya Exp $ -DISTNAME= bearssl-0.4 +DISTNAME= bearssl-0.5 CATEGORIES= security MASTER_SITES= https://bearssl.org/ Index: pkgsrc/security/bearssl/PLIST diff -u pkgsrc/security/bearssl/PLIST:1.1 pkgsrc/security/bearssl/PLIST:1.2 --- pkgsrc/security/bearssl/PLIST:1.1 Sat Apr 1 17:01:51 2017 +++ pkgsrc/security/bearssl/PLIST Wed Feb 7 11:52:56 2018 @@ -1,6 +1,7 @@ -@comment $NetBSD: PLIST,v 1.1 2017/04/01 17:01:51 wiz Exp $ +@comment $NetBSD: PLIST,v 1.2 2018/02/07 11:52:56 maya Exp $ bin/brssl include/bearssl.h +include/bearssl_aead.h include/bearssl_block.h include/bearssl_ec.h include/bearssl_hash.h Index: pkgsrc/security/bearssl/distinfo diff -u pkgsrc/security/bearssl/distinfo:1.3 pkgsrc/security/bearssl/distinfo:1.4 --- pkgsrc/security/bearssl/distinfo:1.3 Fri Sep 22 22:00:57 2017 +++ pkgsrc/security/bearssl/distinfo Wed Feb 7 11:52:56 2018 @@ -1,7 +1,7 @@ -$NetBSD: distinfo,v 1.3 2017/09/22 22:00:57 wiedi Exp $ +$NetBSD: distinfo,v 1.4 2018/02/07 11:52:56 maya Exp $ -SHA1 (bearssl-0.4.tar.gz) = 3246db6d5949a86b1889c1921ae9496d7b962c47 -RMD160 (bearssl-0.4.tar.gz) = e0f40ea16bfa3fc729407ddb3e176fa4ea8c259e -SHA512 (bearssl-0.4.tar.gz) = ff197c36a9e1a3e6b2e5b29c880f408518600ddc2a106522d097d6f4c824f3c5206c320194d8cfcc658eebb9a14e8175387e71d8a1d428562e028caa38c717ef -Size (bearssl-0.4.tar.gz) = 633401 bytes +SHA1 (bearssl-0.5.tar.gz) = c2c202803454c35a4a271d9f5e518295b8d76e01 +RMD160 (bearssl-0.5.tar.gz) = 5974baced77d83aace5a5eea31a3810d93a26e28 +SHA512 (bearssl-0.5.tar.gz) = 1bd510f62f36620cda5317509e72bd0c6f3538c30aca2695e80c26d1ea7270d174ed3fbb6d690b3ced5d51ce3f6bfc776d78a196492900296a452bc4c8185e45 +Size (bearssl-0.5.tar.gz) = 666905 bytes SHA1 (patch-conf_Unix.mk) = 452629d96619ddd63a726b2ae933610187d31a68 --_----------=_1518004376168680--