security/openssl: Security update for CVE-2024-9143

Security:	c6f4177c-8e29-11ef-98e7-84a93843eb75
MFH:		2024Q4

security/openssl: Security update to 3.0.15

Security:	21f505f4-6a1c-11ef-b611-84a93843eb75
MFH:		2024Q3

security/openssl*: Fix PORSTCOUT

security/openssl: Update to 3.0.14

security/openssl: Security update for CVE-2024-4741

Security:	73a697d7-1d0f-11ef-a490-84a93843eb75
MFH:		2024Q2

security/openssl: Security update for CVE-2024-4603

Security:	b88aa380-1442-11ef-a490-84a93843eb75
MFH:		2024Q2

security/openssl: Security update for CVE-2024-2511

Security:	7c217849-f7d7-11ee-a490-84a93843eb75
MFH:		2024Q2

security/openssl: Fix for POSIX_VERSION 200809L

 * See https://github.com/openssl/openssl/pull/23885

PR:		273869
Reported by:	imp
Submitted by:	vvd

security/openssl: Chase addition of openssl33 in conflicts

 * While here use proper tag for openssl31-quictls

security/openssl: Move man pages to share/man

Approved by:	portmgr (blanket)

security/openssl: Security update to 3.0.13

 * Note that this is a security rollup of four previously reported CVEs

Security:	10dee731-c069-11ee-9190-84a93843eb75
Security:	8337251b-b07b-11ee-b0d7-84a93843eb75
Security:       a5956603-7e4f-11ee-9df6-84a93843eb75
MFH:		2024Q1

security/openssl: Security fix for POLY1305 on ppc

Security:	8337251b-b07b-11ee-b0d7-84a93843eb75
MFH:		2024Q1

*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree

- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
  ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
  Also move conditional flags for non sparc64/arm ARCH to fixed flags.

Reviewed by:	brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068

security/openssl: Set portscout limits

security/openssl: Security fix for CVE-2023-5678

Security:	a5956603-7e4f-11ee-9df6-84a93843eb75
MFH:		2023Q4

security/openssl: Security update to 3.0.12

Security:	4a4712ae-7299-11ee-85eb-84a93843eb75
MFH:		2023Q4

security/openssl: Fix EXPIRATION_DATE

 * While here, chase in 3.x ports and use the actual date

security/openssl: Major version update to 3.0

 * OpenSSL 1.1.1 is EoL, update to new LTS version
 * Aligns with upcoming OpenSSL version in 14.0

security/openssl: Update to 1.1.1w

 * Final version of OpenSSL 1.1.1, this port will upgrade to
   3.0 (LTS) with a next commit.
 * Note the recent vuln was Windows only

security/openssl: Update to 1.1.1v

 * MFH this version as this is a roll-up of multiple vulnerability fixes

MFH:		2023Q3

security/openssl: Security update for CVE-2023-3817 (Low)

Security:	bad6588e-2fe0-11ee-a0d1-84a93843eb75

security/openssl: Security update to 1.1.1u

Security:	eb9a3c57-ff9e-11ed-a0d1-84a93843eb75
MFH:		2023Q2

security/openssl: Security update for CVE-2023-0465 & 0466

Security:	425b9538-ce5f-11ed-ade3-d4c9ef517024

security/openssl: Security update for CVE-2023-0464

Security:	1ba034fb-ca38-11ed-b242-d4c9ef517024

security/openssl30: Chase rename in ports CONFLICTS*

Reported by:	cperciva, junchoon

security/openssl: Security update to 1.1.1t

Security:	648a432c-a71f-11ed-86e9-d4c9ef517024
MFH:		2023Q1

security/openssl: Update to 1.1.1s

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

security: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  <ports@c0decafe.net>
  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Adam Weinberger <adamw@FreeBSD.org>
  *  Ade Lovett <ade@FreeBSD.org>
  *  Aldis Berjoza <aldis@bsdroot.lv>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Kapranoff <kappa@rambler-co.ru>
  *  Alex Samorukov <samm@freebsd.org>
  *  Alexander Botero-Lowry <alex@foxybanana.com>
  *  Alexander Kriventsov <avk@vl.ru>
  *  Alexander Leidinger <netchild@FreeBSD.org>

security/openssl: Security update to 1.1.1q

 * Fixes vuln in AES OCB

Security:	a28e8b7e-fc70-11ec-856e-d4c9ef517024
MFH:		2022Q3

security/openssl: Security update to 1.1.1p

Security:	4eeb93bf-f204-11ec-8fbd-d4c9ef517024

security/vuxml: Document OpenSSL vulnerability

 * Pet `make validate`
 * Fix spacing for 482456fb-e9af-11ec-93b6-318d1419ea39
 * Add discovery date for 482456fb-e9af-11ec-93b6-318d1419ea39
   using tor wiki page update date.

security/openssl: Update KTLS patches

 * Add support for TLS 1.3 receive

Reported by:	jhb
Differential Revision:	https://reviews.freebsd.org/D35189

security/openssl: Update to 1.1.1o

Security:	fceb2b08-cb76-11ec-a06f-d4c9ef517024
MFH:		2022Q2

security/openssl: Security update to 1.1.1n

Security:	ea05c456-a4fd-11ec-90de-1c697aa5a594
MFH:		2022Q1

security/openssl: Update KTLS patch

Reported by:	jhb
Differential Revision:	https://reviews.freebsd.org/D34136

security/openssl: add boringssl to CONFLICTS_INSTALL

Approved by:	portmgr (implicit)

Fix CONFLICTS entries of multiple ports

There have been lots of missing CONFLICTS_INSTALL entries, either
because conflicting ports were added without updating existing ports,
due to name changes of generated packages, due to mis-understanding
the format and semantics of the conflicts entries, or just due to
typoes in package names.

This patch is the result of a comparison of all files contained in
the official packages with each other. This comparison was based on
packages built with default options and may therefore have missed
further conflicts with optionally installed files.

Where possible, version numbers in conflicts entries have been
generalized, some times taking advantage of the fact that a port

security/openssl: Fix build on aarch64

 * Upstream only partly merged changes

PR:		259937, 260572
Reported by:	allanjude, "Naram Qashat" <cyberbotx cyberbotx com>

security/openssl: Update to 1.1.1m

*/*: Remove redundant '-[0-9]*' from CONFLICTS_INSTALL

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Approved by: portmgr (blanket)

www/openssl: Fix detection of ARM CPU features

Upstream:
 * https://github.com/openssl/openssl/pull/17082
 * https://github.com/openssl/openssl/pull/17085

PR:		259937
Submitted by: 	allanjude
Differential Revision:	https://reviews.freebsd.org/D33061

security/openssl: Auto-generate MAN3 plist

security/openssl: Security update to 1.1.1l

Security:	96811d4a-04ec-11ec-9b84-d4c9ef517024
MFH:		2021Q3

security/openssl: Update KTLS patches for Chacha20-Poly1305

This pulls in several upstream KTLS patches from OpenSSL master:

 * A fix to the return values of BIO_get_ktls_*().
 * Support for Chacha20-Poly1305.
 * Replacing the SSL_MODE_NO_KTLS_* modes which opted-out of KTLS with
   an opt-in SSL_OP_ENABLE_KTLS. Note that this means that KTLS is not
   enabled by default. Users can enable KTLS via a custom OpenSSL config
   file that enables the KTLS option.

Reported by:	jhb
Sponsored by:	Netflix
Differential Revision:	https://reviews.freebsd.org/D31430

Remove # $FreeBSD$ from Makefiles.

security/openssl: Fix /dev/crypto issue with 1.1.1k

PR:		254643
Reported by:	<cryx-freebsd h3q com>
Reviewed by:	wollman

security/openssl: Security update to 1.1.1k

PR:		254551
Submitted by:	Pascal Christen <pascal christen hostpoint ch>
MFH:		2021Q1
Security:	5a668ab3-8d86-11eb-b8d6-d4c9ef517024

Remove redundant option descriptions that match the default ones

(ignoring case)

Reported by:	danfe (for net/mosquitto), portscan

security/openssl: Update KTLS patch

PR:		251969
Submitted by:	gonzo, jhb
Obtained
from:	https://github.com/openssl/openssl/commit/dfcfd17f2818cf520ce6381aed9ec3d2fc12170d
Differential Revision:	https://reviews.freebsd.org/D28763

security/openssl: Security update to 1.1.1j

PR:		253561
Reported by:	Michael Glaus <michael glaus hostpoint ch>
MFH:		2021Q1
Security:	96a21236-707b-11eb-96d8-d4c9ef517024

security/openssl: Update KTLS patch

Differential Revision:	https://reviews.freebsd.org/D27423

security/vuxml: Security update to 1.1.1i

MFH:		2020Q4
Security:	1d56cfc5-3970-11eb-929d-d4c9ef517024

Expand support for TLS protocols supported by KTLS.

Backport additional patches merged into OpenSSL's master
branch to support KTLS RX for TLS 1.1 and 1.2 as well as
support for KTLS TX for TLS 1.3.

Reviewed by:	brnrd (maintainer)
Sponsored by:	Chelsio Communications, Netflix
Differential Revision:	https://reviews.freebsd.org/D26261

security/openssl: Update to 1.1.1g

security/openssl: Add kernel TLS option

Submitted by:	jhb@freebsd.org
Differential Revision:	https://reviews.freebsd.org/D24274

security/openssl-devel: Resurrect OpenSSL devel port

security/openssl: Security update to 1.1.1g

PR:		245795
Reported by:	Dani <i dani at outlook com>
MFH:		2020Q2
Security:	012809ce-83f3-11ea-92ab-00163e433440

security/openssl: Bug-fix update to 1.1.1f

PR:		245154
MFH:		2020Q1

security/openssl: Fix EOF bug

See https://github.com/openssl/openssl/pull/11400

PR:		245154
Reported by:	koobs
MFH:		2020Q1

security/openssl: Add missing description

Reported by:	adamw

security/openssl: Update to 1.1.1e

 - SM2/SM3 not a cipher [1]
 - Add weak-ciphers option [2]

PR:		237056 [1]
Reported by:	dewayne heuristicsystems com.au> [1], mat [2]

security/openssl: Remove self-conflict

PR:		243049
Submitted by:	Franco Fichtner
MFH:		2020Q1

security/openssl111: Rename to openssl

 - Honoring promise from DEPRECATED message
 - Unbreak people's builds

PR:		243014
MFH:		2020Q1

Remove expired ports:

2019-12-31 accessibility/linux-c6-atk: Superseded by CentOS 7
2019-12-31 audio/exaile-devel: this port is older than audio/exaile
2019-12-31 audio/linux-c6-alsa-lib: Superseded by CentOS 7
2019-12-31 audio/linux-c6-alsa-plugins-oss: Superseded by CentOS 7
2019-12-31 audio/linux-c6-alsa-plugins-pulseaudio: Superseded by CentOS 7
2019-12-31 audio/linux-c6-alsa-utils: Superseded by CentOS 7
2019-12-31 audio/linux-c6-flac: Superseded by CentOS 7
2019-12-31 audio/linux-c6-libaudiofile: Superseded by CentOS 7
2019-12-31 audio/linux-c6-libogg: Superseded by CentOS 7
2019-12-31 audio/linux-c6-libsndfile: Superseded by CentOS 7
2019-12-31 audio/linux-c6-libvorbis: Superseded by CentOS 7
2019-12-31 audio/linux-c6-mikmod: Superseded by CentOS 7
2019-12-31 audio/linux-c6-nas-libs: Superseded by CentOS 7

security/openssl: Security update to 1.0.2u

MFH:		2019Q4
Security:	d778ddb0-2338-11ea-a1c7-b499baebfeaf

security/openssl: Notify users of upcoming 1.1.1

security/openssl: Security update to 1.0.2t

MFH:		2019Q3
Security:	9e0c6f7a-d46d-11e9-a1c7-b499baebfeaf

Convert to UCL & cleanup pkg-message (categories s)

security/openssl: Security hardening update to 1.0.2s

MFH:		2019Q2

security/openssl: Security update to 1.0.2r

MFH:		2019Q1
Security:	7700061f-34f7-11e9-b95c-b499baebfeaf

security/openssl: Fix build with lld on i386

PR:		231459
Submitted by:	Nathan <ndowens@yahoo.com>
Reported by:	emaste

security/openssl: Update to 1.0.2q

security/openssl: Security update for CVE-2018-5407

MFH:		2018Q4
Security:	6f170cf2-e6b7-11e8-a9a8-b499baebfeaf

- Update WWW

Approved by:	portmgr blanket

Chase CONFLICTS after addition of security/openssl111

 - While here mark OpenSSL 1.1.0 deprecated
   see: https://www.openssl.org/policies/releasestrat.html

security/openssl: Fix padlock patches url prefix

Fix PORTREVISION

security/openssl: Add engines patches to distinfo

 - Undo clobbering distinfo

Reported by:	mat

security/openssl: Update to 1.0.2p

 - Includes vulnerability fixes that were already
   added to the port as patches

Fix a common grammar error: "can not" means the opposite of "cannot."

"Can not" means "it is possible not to," and "cannot" means "it is impossible
to."

- Switch to new test framework

Approved by:	portmgr blanket

security/openssl: Actually add patch file

MFH:		2018Q2
Security:	c82ecac5-6e3f-11e8-8777-b499baebfeaf

security/openssl: Security update

 - Upstream update for CVE-2018-0732

MFH:		2018Q2
Security:	c82ecac5-6e3f-11e8-8777-b499baebfeaf

security/openssl: Add CVE-2018-0737 patch

 - Bump portrev too

MFH:		2018Q2
Security:	8f353420-4197-11e8-8777-b499baebfeaf

security/openssl: Security update

MFH:		2018Q2
Security:	8f353420-4197-11e8-8777-b499baebfeaf

security/openssl: Fix distinfo for patches

Reported by:	joneum

securit/openssl: Security update to 1.0.2o

MFH:		2018Q1
Security:	b7cff5a9-31cc-11e8-8f07-b499baebfeaf

security/openssl: Cleanup

 - Remove EXPCIPHERS option (use security/openssl-unsafe) [1]
 - Move port variables not dependent on bsd.port.pre.mk up
 - Deleting man3 .pod files is redundant
 - bss_dgram.c modification is a no-op
 - Let openssl's Makefile install libs
 - Simplify stripping

PR: 		195270 [1]

security/openssl: Update to 1.0.2m

 - Remove patch now included upstream
 - Include post-release patch for clang build error

MFH:		2017Q4
Security:	3bb451fc-db64-11e7-ac58-b499baebfeaf

security/openssl: Unbreak build with No-SSLv3

 - Importing patch from upstream

PR:		223388
Submitted by:	tijl
Reported by:	Laurence Parry <greenreaper@hotmail.com>

security/openssl: Security update to 1.0.2m

 - Adds additional manpages too

MFH:		2017Q4
Security:	f40f07aa-c00f-11e7-ac58-b499baebfeaf

security/openssl: Fix build on MIPS

 - gcc 4.2.1 on MIPS fails on -Werror

PR:		221620
Submitted by:	Fukang Chen <loader@FreeBSD.org>
MFH:		2017Q3

security/openssl: Fix MASTER_SITE_SUBDIR

 - DISTVERSIONFULL is not expanded before assignment

PR:		219929
Submitted by:	Fukang Chen <loader@FreeBSD.org>

Begin deorbit burn of ia64.  We have not attempted to build packages for
it for many years.

While here, alphabetize ARCHs, pet portlint, and modernize usages.

Approved by:	portmgr (tier-2 blanket)

security/openssl: Fix xmpp STARTTLS

 - Add (refactored) patch from master branch

PR:		219805
Submitted by:	Alexey <fbsd98816551@avksrv.org>

security/openssl: Fix distinfo after DIST_SUBDIR update

 - Chase DIST_SUBDIR update in distinfo

Reported by:	Cybil Courraud

security/openssl: Update to 1.0.2l

 - Bugfix update to 1.0.2l
 - Fix PADLOCK option
   - Build failure -Wunused-function
   - Properly disable with configure
 - Strip patch-version from DIST_SUBDIR, reduce dirs
 - Remove unneeded testssl patch, dtls tests are OK
 - Add new WITHOUT_SSL3 testssl extra-patch
 - Remove md5 patch (inconsistent output)
 - Remove openbsd_hw.c patch (not compiled)
 - Remove srtp patch (upstream fixed)
 - Fix plist

security/openssl: Enable ASM by default

  - Enable ASM option
    * By extension this enables AES-NI [1]
  - Order OPTIONS_DEFAULT alphabetically
  - Switch to using @sample [2]
  - Bump PORTREVISION

PR:		216559 [2]
Reported by:	dtestke [1]
Submitted by:	Franco Fichtner <franco@opnsense.org> [2]

Approved by:	asomers, allanjude