2015-12-31 security/polarssl: Upstream is ending support for 1.2.x

Update to 1.2.19.

Bugfix
   * Fix bug in certificate validation that caused valid chains to
     be rejected when the first intermediate certificate has
     pathLenConstraint=0. Found by Nicholas Wilson.
     Introduced in mbed TLS 1.3.15. #280
   * Removed potential leak in rsa_rsassa_pkcs1_v15_sign(), found
     by JayaraghavendranK. #372

MFH:	2016Q1

- Update polarssl/mbedtls ports
- Mark polarssl 1.2.x deprecated
- Fix sparc64 build by removing -fpic (leaving only -fPIC)

MFH:		2015Q4
Security:	https://tls.mbed.org/tech-updates/releases/mbedtls-2.2.0-2.1.3-1.3.15-and-polarssl.1.2.18-released

security/polarssl: Update to 1.2.17

Changelog:	https://tls.mbed.org/tech-updates/releases/mbedtls-2.1.2-and-1.3.14-and-polarssl-1.2.17-released

Security:	07a1a76c-734b-11e5-ae81-14dae9d210b8
Security:	CVE-2015-5291

Remove BROKEN on Tier-2 systems statements which no longer true at least
on PowerPC (verified for all of them) and some also on SPARC (whenever I
was able to test those on flame.freebsd.org) and even IA64 (which should
be OK to remove anyways, because it was never really supported system in
ports land and was officially killed in -CURRENT a while ago.

Update to 1.2.14
Includes backported security fixes

Changes:	https://tls.mbed.org/tech-updates/releases/polarssl-1.2.14-released

PR:		201603
Security:	d3216606-2b47-11e5-a668-080027ef73ec

security/polarssl: 1.2.12 -> 1.2.13

Changes:
https://tls.mbed.org/tech-updates/releases/polarssl-1.2.13-released

PR:		197780
Submitted by:	takefu@airport.fm
Approved by:	jase (maintainer timeout)

security/polarssl:
- Add upstream patch to address crafted certificates vulnerability
- Add USES cpe

MFH:		2015Q1
Security:	CVE-2015-1182
Security:	a5856eba-a015-11e4-a680-1c6f65c3c4ff

security/polarssl: Update to 1.2.12

While I am here:
- Remove fetch wrapper as it is no longer required
- Strip library shared object
- Remove @dirrm* from pkg-plist

Changes:	https://raw.github.com/polarssl/polarssl/polarssl-1.2.12/ChangeLog

Convert a bunch of EXTRACT_SUFX=... into USES=tar:...

Approved by:	portmgr (not really, but touches unstaged ports)

Remove trailing whitespaces from category security

According to the Porter's Handbook (5.12.2.3.) default options must be added to
OPTIONS_DEFINE. This policy has been implemented only recently that's why we
have many ports violating this policy.

This patch adds the default options specified in the Porter's Handbook to
OPTIONS_DEFINE where they are being used. Ports maintained by
gnome@FreeBSD.org, kde@FreeBSD.org and x11@FreeBSD.org have been excluded.

Approved by:    portmgr (bapt)

- Update to 1.2.10
- Add PORTSCOUT entry to limit checks to the 1.2 branch

Changes:	https://raw.github.com/polarssl/polarssl/polarssl-1.2.10/ChangeLog

- Update to 1.2.9
- Add vuxml entry
- Prevent install target from copying patch backup files

Changes:	https://raw.github.com/polarssl/polarssl/60ad84f43f46b0d3673eaca8b9847d7e01b83c5e/ChangeLog
Security:	ccefac3e-2aed-11e3-af10-000c29789cb5
Security:	CVE-2013-5915

- Add patch to enable HAVEGE random generator
- While I'm here: enable stage support, replace USE_GMAKE with USES=gmake

PR:		ports/182437
Submitted by:   martymac

Add NO_STAGE all over the place in preparation for the staging support (cat:
security)

Fix regression from my earlier commit r324675 which caused a
"make fetch" failure on non-POSIX-compliant SHELL:

1. Replace ${SHELL} by ${SH} so the fetchwrapper.sh gets executed with a
   POSIX-compliant shell (such as /bin/sh)

2. Just because it's meant that way, add an svn:executable=* property
   on files/fetchwrapper.sh.

PR:		ports/181252
Reported by:	Mike Harding (private email)

Update to new version 1.2.8, fixing security issues (denial of service).
Fix fetching, by bypassing splash screen (adds files/fetchwrapper.sh).

Approved by:	jase (maintainer)
Security:	72bf9e21-03df-11e3-bd8d-080027ef73ec
Security:	CVE-2013-4623

- Update to 1.2.7

Changes:	https://raw.github.com/polarssl/polarssl/polarssl-1.2.7/ChangeLog

- Update to 1.2.6

Changes:	https://raw.github.com/polarssl/polarssl/90f042d4cbdcbf398f347d5f7eef608cc11de5b5/ChangeLog

- Update to 1.2.5

Changes:	https://raw.github.com/polarssl/polarssl/c7a2da437e5174dd9487c442c6315114c2029169/ChangeLog

- Update to 1.2.4

Changes:	https://raw.github.com/polarssl/polarssl/14c56a3378683379ca1e589d7c9d78854d39707c/ChangeLog

- Update to 1.2.3
- Assume maintainership

Changes:	https://raw.github.com/polarssl/polarssl/fb1ba781b398d39f4444515381babcc9e5a8dcd2/ChangeLog

Feature safe:	yes

- drop maintainership
Feature safe: yes

- cleanup comments
Feature safe: yes

- update to 1.1.4

- update to 1.1.3
Submitted by:   osa

- Mark BROKEN: does not fetch

Reported by:    pointyhat

- update to 1.1.2

- update to 1.1.1

- update to 1.1.0

- update to 1.0.0

- update to 0.14.3
PR:             156238
Submitted by:   Takefu

- Security update to 0.14.2
Security: Fix possible "man in the middle" attack

- make portlint happy

- update to 0.14.1

- update to 0.14.0

- build shared lib too
PR:             149262
Submitted by:   Takefu

- fix excuteable bits
- do not use devel/cmake
PR:             148617
Submitted by:   Takefu

LICENSE GPLv2

Mark as broken on powerpc.

Hat:            portmgr

- update to 0.13.1

- update to 0.13.0

PolarSSL is a light-weight open source cryptographic and SSL/TLS library
written in C. PolarSSL is written with embedded systems in mind and has
been ported on a number of architectures, including ARM, PowerPC, MIPS
and Motorola 68000.

Features include:
 * Small memory footprint
 * Clean and simple API for integration
 * Loose coupling of cryptographic code.
 * Symmetric encryption algorithms: AES, Triple-DES, DES, ARC4, Camellia, XTEA
 * Hash algorithms: MD2, MD4, MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512
 * HAVEGE random number generator
 * RSA with PKCS#1 v1.5 padding
 * SSL version 3 and TLS version 1 client support
 * X.509 certificate and CRL reading from memory or disk in PEM and DER formats
 * Over 900 regression and code coverage tests
 * Example applications

LICENSE: GPL2

WWW: http://polarssl.org/