SoftHSM is an implementation of a cryptographic store accessible
through a PKCS #11 interface. You can use it to explore PKCS #11
without having a Hardware Security Module. It is being developed
as a part of the OpenDNSSEC project. SoftHSM Version 2 is using
openssl for its cryptographic operations.
===> The following configuration options are available for softhsm2-2.7.0:
MIGRATE=on: Build the migration tool
SQLITE=on: Build with object store backend DB support (SQLITE3)
===> Use 'make config' to modify these settings
security/softhsm2: strip botan2 option
and unconditionally build with OpenSSL, which has been default
already. botan-2 has been EOL for many months; the original softhsm2
software doesn't support botan-3 and botan-2 has been EOL, upstream
issues about botan-3 haven't been tended to in three years.
softhsm2 is the last user of botan2 in our tree does not require it.
While here, simplify and rearrange Makefile to use canonical
item order. portclippy and portlint -C come up clean now.
I did not run portfmt which would damage indentation.
I've attempted to get the test suite running, and it's as simple
as TEST_TARGET=check, but the cryptotest fails on desKey(56) related
matter (probably harmless to patch out) and p11tests also fail for
reasons I haven't investigated, so I'm not adding this.
Approved by: portmgr@ (blanket)
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Aldis Berjoza <aldis@bsdroot.lv>
* Alex Dupre <ale@FreeBSD.org>
* Alex Kapranoff <kappa@rambler-co.ru>
* Alex Samorukov <samm@freebsd.org>
* Alexander Botero-Lowry <alex@foxybanana.com>
* Alexander Kriventsov <avk@vl.ru>
* Alexander Leidinger <netchild@FreeBSD.org>
(Only the first 15 lines of the commit message are shown above )
Chase security/p11-kit update
After switch to meson libp11-kit.so no longer has symbols
in the LIBP11_KIT_1.0 namespace. As a workaround, bump
PORTREVISION of consumers to get those rebuilt.
See more details in the comments of the linked PR.
PR: 248819
Reported by: John Hein
- Remove inclusion of bsd.default-versions.mk from ftp/curl/Makefile so
bsd.default-versions.mk can rely on ARCH being defined.
- In bsd.port.mk move inclusion of bsd.default-versions.mk from the
pre-makefile section to the options section so the variables can be used
earlier. Also put the bit of code sitting between the options section and
the pre-makefile section into the options section.
- Remove last few cases where ports set WITH_OPENSSL_PORT. This variable is
handled in bsd.default-versions.mk and some ports were setting it after
including bsd.port.options.mk. After FreeBSD 9 EoL all but a few ports,
and then only when setting non-default options, work without setting that
variable.
PR: 215996
Exp-run by: antoine
Approved by: portmgr (antoine)
Fix usage of WITH_OPENSSL_BASE, WITH_OPENSSL_PORT and OPENSSL_PORT.
WITH_OPENSSL_* can't be set after bsd.port.pre.mk.
Fold all other usage into using SSL_DEFAULT == foo
PR: 210149
Submitted by: mat
Exp-run by: antoine
Sponsored by: The FreeBSD Foundation, Absolight
Differential Revision: https://reviews.freebsd.org/D6577
Version 2.0.0 of SoftHSM has been released. More updates and bug fixes can be
found in the alpha and beta release notes.
SoftHSM 2.0.0 - 2015-07-17
- SOFTHSM-121: Test cases for C_DecryptUpdate/C_DecryptFinal.
- Support C_DecryptUpdate/C_DecryptFinal for symmetric algorithms.
(Patch from Thomas Calderon)\
Bugfixes:
- SOFTHSM-120: Segfault after renaming variables.
PR: 201900
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Sponsored by: DK Hostmaster A/S
Update to 2.0.0b3
SOFTHSM-113: Support for Botan 1.11.15
SOFTHSM-119: softhsm2-util: Support ECDSA key import
SUPPORT-139: Support deriving generic secrets, DES, DES2, DES3, and AES.
Using DH, ECDH or symmetric encryption.
Various Bug Fxes, see <https://www.opendnssec.org/2015/04/18/softhsm-2-0-0b3/>
for details.
LibreSSL support, see also
<https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=199008> for details.
PR: 200056
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
- Display a stage-qa warning when ports use PREFIX/var instead of /var
- Add --localstatedir=/var to _LATE_CONFIGURE_ARGS (like --mandir) but not
when CONFIGURE_ARGS already sets it. (GNU configure scripts set it to
PREFIX/var when PREFIX != /usr.)
- Add --localstatedir="${PREFIX}/var" to CONFIGURE_ARGS in some ports so
they aren't affected by this change (for now at least). This commit is
meant to ensure that new ports don't make the same mistake.
- games/acm: the configure script in this port is very old; instead of
patching it more, just replace GNU_CONFIGURE with HAS_CONFIGURE.
- irc/charybdis: it already used /var but adding --localstatedir=/var
changed the behaviour of the configure script; adjust the port to this.
PR: 199506
Exp-run by: antoine
Approved by: portmgr (antoine)
