XML Security Library is the latest stable of a C library based on
LibXML2 and OpenSSL. The library was created with a goal to support
major XML security standards:
- XML Signature
- XML Encryption
- Canonical XML (was included in libxml2)
- Exclusive Canonical XML (was included in libxml2)
===> The following configuration options are available for xmlsec1-1.3.9:
DOCS=on: Build and/or install documentation
====> SSL protocol support: you have to choose at least one of them
GNUTLS=off: SSL/TLS support via GnuTLS
NSS=on: SSL/TLS support via NSS
OPENSSL=on: SSL/TLS support via OpenSSL
===> Use 'make config' to modify these settings
security/xmlsec1: update to v1.3.9
This unbreaks libxml 2.15, where some pointer types went "const",
and the prior FreeBSD ports version of xmlsec1 wanted to error out
instead of seeing warnings (-Werror) and broke.
ChangeLog: https://www.aleksey.com/xmlsec/news.html
required for:
PR: 291316
(This builds with extant libxml2.14 and 2.15, so let's just commit this.)
security/xmlsec1: Update to 1.2.38
* Use GitHub as primary site as it's much faster and fall back to
author's website if GitHub is unavailable
* Default to OpenSSL and NSS backend, GnuTLS is optional and
can co-exist
* Rework Makefile to more closely follow Porters Handbook
Changelog: https://github.com/lsh123/xmlsec/releases/tag/xmlsec-1_2_38
PR: 273108
Approved by: portmgr (blanket, maintainer timeout 2+ weeks)
Sponsored by: Blinkinblox
security/xmlsec1: update to 1.2.37 release (+)
This is a prerequisite for LibreOffcie 7.5 update
News:
1.2.37: Fixed two regressions from 1.2.36 release: issue #437 and issue #449.
1.2.36: Retired the XMLSec mailing list "xmlsec@aleksey.com" and the XMLSec
Online Signature Verifier.
Several other small fixes (more details).
1.3.25: Migration to OpenSSL 3.0 API (based on PR by @snargit).
The OpenSSL before 1.1.0 and LibreSSL before 2.7.0 are now deprecated and will
be removed in the future versions of XMLSec Library.
Refactored all the integer casts to ensure cast-safety. Fixed all warnings and
enabled "-Werror" and "-pedantic" flags on CI builds.
Added configure flag to use size_t for xmlSecSize (currently disabled by
default for backward compatibility).
Several other small fixes (more details).
Full Changelog: https://www.aleksey.com/xmlsec/
With hat: office
security/xmlsec1: bump PORTREVISION to ensure end-users got a latest binary (+)
At least libreoffice users cannot use some suite components due to
package built against latest patched ABI while pkg keept a previous
package on client side.
PR: 266262, 266920
With hat: ports-secteam
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
textproc/libxml2: bump all LIB_DEPENDS consumers
This is a separate commit to facilitate easier cherry-picking for
quarterly.
PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)
textproc/libxml2: bump all dependencies
This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246
Fix build with LibreSSL
Even though building worked ok, linking to the resulting library
libxmlsec1-openssl.so caused various symbol lookup errors such as:
/usr/local/lib/libxmlsec1-openssl.so: undefined reference to
`X509_OBJECT_get0_X509'
/usr/local/lib/libxmlsec1-openssl.so: undefined reference to
`ASN1_STRING_get0_data'
As the problem only appears at runtime I bumped the revision.
Approved by: ssl blanket
devel/nspr, security/nss: drop version from SONAME
No other downstream appends synthetic library version, and doing so
causes underlinking due to fragile build system (see below). Not to
mention being unable to swap out bundled libs from upstream builds.
$ cc -lplds4 -L/usr/local/lib
/usr/lib/crt1.o: In function `_start1':
crt1_c.c:(.text+0xa6): undefined reference to `main'
/usr/local/lib/libplds4.so: undefined reference to `pthread_set_name_np'
/usr/local/lib/libplds4.so: undefined reference to `pthread_create'
/usr/local/lib/libplds4.so: undefined reference to `pthread_condattr_init'
/usr/local/lib/libplds4.so: undefined reference to `pthread_setschedparam'
/usr/local/lib/libplds4.so: undefined reference to `pthread_getschedparam'
PR: 213144
Exp-run by: antoine
security/xmlsec1: unbreak on 9.x
signatures.c:36: error: expected declaration specifiers or '...' before
'ECDSA_SIG'
signatures.c: In function 'ECDSA_SIG_get0':
signatures.c:38: error: 'sig' undeclared (first use in this function)
signatures.c:38: error: (Each undeclared identifier is reported only once
signatures.c:38: error: for each function it appears in.)
Reported by: pkg-fallout
Approved by: portmgr blanket
- Update security/gnutls to 3.4.10.
- Rename the LIBDANE option DANE because that's the name of the protocol
supported by libgnutls-dane and gnutls-cli. Also clarify the option
description.
- Add an IDN option.
- libgnutls-openssl has been removed in 3.4. Some ports used this library
in their LIB_DEPENDS but no port actually required it.
- Some old API functions have been removed. Ports that used these have been
updated or patched to use the new API.
- Add a patch to print/cups to prevent overlinking of libgnutls.so.
- Bump PORTREVISION on dependent ports.
net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.
www/hydra: Mark BROKEN. This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.
PR: 207768
Exp-run by: antoine
Approved by: portmgr (antoine)
Replace USES=libtool:oldver with USES=libtool or USES=libtool:keepla in
the 32 ports that still use it. Bump PORTREVISION on their dependent
ports except the ones that depend on these:
audio/libogg
audio/libvorbis
devel/pcre
ftp/curl
graphics/jpeg
graphics/libart_lgpl
graphics/tiff
textproc/expat2
textproc/libxslt
In these cases the same trick as in the recent gettext update is used.
(Only the first 15 lines of the commit message are shown above )
Replace USE_AUTOTOOLS=libltdl with an ordinary LIB_DEPENDS in all ports.
There are only 60 such ports so there doesn't need to be a separate
keyword or USES for this.
Approved by: portmgr (bapt)
Bump PORTREVISION on more ports that depend on libgcrypt after the update
in r363436 and remove the UPDATING entry because it did not guarantee
that all ports were updated nor that they were updated in the right order.
Also remove libgcrypt.la again.
PR: 192342
Approved by: portmgr (implicit, bump unstaged ports)
- Replace security/gnutls with security/gnutls3 and update to 3.2.15
- Bump PORTREVISION on all ports that depend on security/gnutls and
adjust all ports that depend on security/gnutls3
- Update mail/anubis to version 4.2 which supports gnutls 3.x
- Update mail/libvmime to a development snapshot (recommended by upstream
developers)
PR: 191274
Exp-run by: antoine
Approved by: portmgr (antoine)
The FreeBSD x11@ and graphics team proudly presents
a zeising, kwm production, with help from dumbbell, bdrewery:
NEW XORG ON FREEBSD 9-STABLE AND 10-STABLE
This update switches over to use the new xorg stack by default on FreeBSD 9
and 10 stable, on osversions where vt(9) is available.
It is still possible to use the old stack by specifying WITHOUT_NEW_XORG in
/etc/make.conf .
FreeBSD 8-STABLE and released versions of FreeBSD still use
the old version.
A package repository with binary packages for new xorg will
be available soon.
This patch also contains updates of libxcb and related ports, pixman, as well
(Only the first 15 lines of the commit message are shown above )
new devel/pkgconf added to replace devel/pkg-config. new version of pkg-config
are no more self hosting so we are stuck with 0.25 version while pkgconf provide
the same set of features as 0.27 and a compatible frontend. A symlink to
pkg-config has been added for convenience and compatibility
This also introduces a new macro to use pkgconf in your ports:
USE_PKGCONFIG
it can take the following arguments:
- yes (meaning build only dep)
- build (meaning build only dep)
- run (meaning run only dep)
- both (meaning run and build dep)
From now USE_GNOME= pkgconfig is deprecated in favour of USE_PKGCONFIG
The old gnome macro has been modified to use pkgconf but still the sameway: run
and build dep to avoid large breakage.
While here fix some ports relying on pkg-config but not specifying it, fix some
ports broken because testing wrong .pc files, and fix ports using pkg-config
--version to determine pkg-config version instead of
pkg-config --modversion pkg-config like recommanded by pkg-config
With Hat: portmgr
Exp-runs by: bapt (pointhat-west), beat (pointyhat)
- Convert all remaining instances of BUILD_DEPENDS=${RUN_DEPENDS} or
RUN_DEPENDS=${BUILD_DEPENDS} to use := which portlint has warned
about for a while.
PR: ports/168208
Approved by: portmgr (miwi)
Remove USE_GNOME=gnometarget from ports. It has been a empty keyword since
mid 2008.
PR: ports/159624
Submitted by: Ruslan Mahmatkhanov <cvs-src@yandex.ru>
On FreeBSD, at least, the CLOCKS_PER_SEC is defined as 128.
Integer-divided by 1000 this means a sure zero, which brings up a
compiler warning -- a good thing.
The patch fixes the problem while maintaining compatibility for all.
Submitted by: mi
devel/pkgconfig -> devel/pkg-config
Rename this ports to use the real vendor package name. The advantage of this
is to allow our users' keyword search works and easier for users to file the
Bugzilla report when they use our name of ports. Debian, Gentoo, NetBSD and
other OSs have the correct package name, but not in our ports tree.
My team, FreeBSD GNOME Team, have agreed with it.
As for other ports, chase the rename.
PR: ports/97985
Repocopy by: marcus
Mass-conversion to the USE_AUTOTOOLS New World Order. The code present
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.
Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.
Preliminary documentation can be found at:
http://people.FreeBSD.org/~ade/autotools.txt
which is in the process of being SGMLized before introduction into the
Porters Handbook.
Light blue touch-paper. Run.
Whoa there, boy, that's a mighty big commit y'all have there...
Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".
For ports-in-waiting:
USE_LIBTOOL=YES -> USE_LIBTOOL_VER=13
USE_AUTOCONF=YES -> USE_AUTOCONF_VER=213
USE_AUTOMAKE=YES -> USE_AUTOMAKE_VER=14
Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.
Update: security/xmlsec1
Changes/update for myself
- Bring GNUTLS as optional flavor
Changes/update from KATO Tsuguru <tkato@prontomail.com> (thanks!)
- Do not install useless .la file
- Install .pc file to correct place
PR: ports/52769
Submitted by: Jim Geovedi <jim@corebsd.or.id>
Add xmlsec1 1.0.1 released at Apr 28 2003. This is the latest stable version
of a C library based on LibXML2 and OpenSSL. Origial PR was intended to
import 1.0.0 but we have a newer version to go now, also enable GnuTLS
support .
PR: 51102
Submitted by: Jim Geovedi <jim@corebsd.or.id>
