Mon Jul 14 03:52:54 2008 UTC ()
Update to openssl-0.9.8h. Changes from 0.9.8g:

Two crashes discovered using the Codenomicon TLS test suite, as reported
in CVE-2008-0891 and CVE-2008-1672, were fixed. The root CA certificates
of commercial CAs were removed from the distribution. Functions were added
to implement RFC3394 compatible AES key wrapping. Utility functions to
handle ASN1 structures were added. The certificate status request TLS
extension, as defined in RFC3546, was implemented. Several other bugfixes
and enhancements were made.


(tnn)
diff -r1.133 -r1.134 pkgsrc/security/openssl/Makefile
diff -r1.61 -r1.62 pkgsrc/security/openssl/distinfo
diff -r1.12 -r0 pkgsrc/security/openssl/patches/patch-ab
diff -r1.8 -r0 pkgsrc/security/openssl/patches/patch-ah
cvs diff -r1.133 -r1.134 pkgsrc/security/openssl/Makefile (expand / switch to unified diff)

--- pkgsrc/security/openssl/Makefile 2008/06/16 20:18:20 1.133
+++ pkgsrc/security/openssl/Makefile 2008/07/14 03:52:54 1.134
@@ -1,19 +1,18 @@ @@ -1,19 +1,18 @@
1# $NetBSD: Makefile,v 1.133 2008/06/16 20:18:20 tonnerre Exp $ 1# $NetBSD: Makefile,v 1.134 2008/07/14 03:52:54 tnn Exp $
2 2
3OPENSSL_SNAPSHOT?= # empty 3OPENSSL_SNAPSHOT?= # empty
4OPENSSL_STABLE?= # empty 4OPENSSL_STABLE?= # empty
5OPENSSL_VERS?= 0.9.8g 5OPENSSL_VERS?= 0.9.8h
6PKGREVISION= 2 
7 6
8.if empty(OPENSSL_SNAPSHOT) 7.if empty(OPENSSL_SNAPSHOT)
9DISTNAME= openssl-${OPENSSL_VERS} 8DISTNAME= openssl-${OPENSSL_VERS}
10MASTER_SITES= http://mirrors.isc.org/pub/openssl/source/ \ 9MASTER_SITES= http://mirrors.isc.org/pub/openssl/source/ \
11 http://www.mirrors.wiretapped.net/security/cryptography/libraries/tls/openssl/ \ 10 http://www.mirrors.wiretapped.net/security/cryptography/libraries/tls/openssl/ \
12 http://sunsite.rediris.es/pub/mirror/OpenSSL/ \ 11 http://sunsite.rediris.es/pub/mirror/OpenSSL/ \
13 http://ftp.wayne.edu/pub/openssl/source/ \ 12 http://ftp.wayne.edu/pub/openssl/source/ \
14 http://www.binarycode.org/openssl/source/ \ 13 http://www.binarycode.org/openssl/source/ \
15 ftp://ftp.openssl.org/source/ 14 ftp://ftp.openssl.org/source/
16.else 15.else
17. if !empty(OPENSSL_STABLE:M[yY][eE][sS]) 16. if !empty(OPENSSL_STABLE:M[yY][eE][sS])
18DISTNAME= openssl-${OPENSSL_VERS:C/[a-z]$//}-stable-SNAP-${OPENSSL_SNAPSHOT} 17DISTNAME= openssl-${OPENSSL_VERS:C/[a-z]$//}-stable-SNAP-${OPENSSL_SNAPSHOT}
19PKGNAME= openssl-${OPENSSL_VERS}beta${OPENSSL_SNAPSHOT} 18PKGNAME= openssl-${OPENSSL_VERS}beta${OPENSSL_SNAPSHOT}
cvs diff -r1.61 -r1.62 pkgsrc/security/openssl/distinfo (expand / switch to unified diff)

--- pkgsrc/security/openssl/distinfo 2008/06/16 20:18:20 1.61
+++ pkgsrc/security/openssl/distinfo 2008/07/14 03:52:54 1.62
@@ -1,15 +1,15 @@ @@ -1,15 +1,15 @@
1$NetBSD: distinfo,v 1.61 2008/06/16 20:18:20 tonnerre Exp $ 1$NetBSD: distinfo,v 1.62 2008/07/14 03:52:54 tnn Exp $
2 2
3SHA1 (openssl-0.9.8g.tar.gz) = 4e9c5ced466715d18fd924de79bde5c15da80fa1 3SHA1 (openssl-0.9.8h.tar.gz) = ced4f2da24a202e01ea22bef30ebc8aee274de86
4RMD160 (openssl-0.9.8g.tar.gz) = f080a32da9becdc8b98c38744d62c6fd8664f603 4RMD160 (openssl-0.9.8h.tar.gz) = 676337da20c3fc3fc4001a79c6d28589cba719cd
5Size (openssl-0.9.8g.tar.gz) = 3354792 bytes 5Size (openssl-0.9.8h.tar.gz) = 3439981 bytes
6SHA1 (patch-aa) = b28ec662bf0586e31d59cab45e3a28b91b10dac1 6SHA1 (patch-aa) = b28ec662bf0586e31d59cab45e3a28b91b10dac1
7SHA1 (patch-ab) = b09beb8db8046293cd63d3f37e0c1ae5001eb5a1 7SHA1 (patch-ab) = b09beb8db8046293cd63d3f37e0c1ae5001eb5a1
8SHA1 (patch-ac) = a766699f2d007b70689bbad538ede07ded7b34ff 8SHA1 (patch-ac) = a766699f2d007b70689bbad538ede07ded7b34ff
9SHA1 (patch-ad) = bb86ac463fc4ab8b485df5f1a4fb9c13c1fc41c3 9SHA1 (patch-ad) = bb86ac463fc4ab8b485df5f1a4fb9c13c1fc41c3
10SHA1 (patch-ae) = 7a58f1765a3761321dcc8dafc5fe2e33207be480 10SHA1 (patch-ae) = 7a58f1765a3761321dcc8dafc5fe2e33207be480
11SHA1 (patch-af) = 3c1a88329b1a1c54bdd4624ceaf723af3749ec32 11SHA1 (patch-af) = 3c1a88329b1a1c54bdd4624ceaf723af3749ec32
12SHA1 (patch-ag) = 5f12c72b85e4b6c6a79dfcf87055e9e029fbd8c8 12SHA1 (patch-ag) = 5f12c72b85e4b6c6a79dfcf87055e9e029fbd8c8
13SHA1 (patch-ah) = c961d75984a7a94c0584df8e8aa24e1f61158787 13SHA1 (patch-ah) = c961d75984a7a94c0584df8e8aa24e1f61158787
14SHA1 (patch-ak) = 049250b9bd42e6f155145703135dab39a7ec17e0 14SHA1 (patch-ak) = 049250b9bd42e6f155145703135dab39a7ec17e0
15SHA1 (patch-al) = 076a606352bdeaeea1cc64f16be2ac1325882302 15SHA1 (patch-al) = 076a606352bdeaeea1cc64f16be2ac1325882302
File Deleted: pkgsrc/security/openssl/patches/Attic/patch-ab
File Deleted: pkgsrc/security/openssl/patches/Attic/patch-ah