summary refs log tree commit diff
path: root/security/libretls/Makefile
blob: 0307a06f985f3cc0bcf91c29fd5d20a3011f76b0 (plain) (blame) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

# $FreeBSD$

PORTNAME=	libretls
PORTVERSION=	3.3.0
CATEGORIES=	security devel
MASTER_SITES=	https://causal.agency/libretls/

MAINTAINER=	june@causal.agency
COMMENT=	Port of libtls for OpenSSL

LICENSE=	ISCL

BROKEN_SSL=			libressl
BROKEN_SSL_REASON_libressl=	libtls is provided by LibreSSL

USES=		libtool pathfix pkgconfig ssl
USE_LDCONFIG=	yes
GNU_CONFIGURE=	yes
CONFIGURE_ARGS+=	--with-openssl=${OPENSSLBASE}
CFLAGS+=	-fpic -DPIC -Wl,-rpath,${PREFIX}/lib -Wl,--as-needed
LDFLAGS+=	-pthread

CONFLICTS_INSTALL=	libressl-[0-9]* \
			libressl-devel-[0-9]*

INSTALL_TARGET=		install-strip

.include <bsd.port.mk>
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-11-22 03:10:59 +0000
/tr> 2021-09-02OpenBSD: pledge(2) the genCert code pathJune McEnroe 2021-09-02OpenBSD: pledge(2) the hashPass code pathJune McEnroe 2021-09-02OpenBSD: pledge(2) printCert code path separatelyJune McEnroe Ported from catgirl. 2021-09-02Call serverConfig() with NULLs for -oJune McEnroe Always use insecure, and trust, clientCert, clientPriv are irrelevant for printing the remote certificate. 2021-09-02Read from /dev/urandom instead of using getentropy(3)June McEnroe getentropy(3) is kind of an awkward function. May as well be generic as possible and read some random bytes from /dev/urandom, since for -x we don't really need to worry about being in some execution environment where that's unavailable. I'm also happy to remove that special-case include for macOS since its crypt(3) isn't even usable anyway. 2021-08-31Separate stateSync intro messagesJune McEnroe So each message can be logged with its prefix. All other calls to clientFormat and serverFormat write one message at a time. 2021-08-30Correct handling of colons in SASL PLAINJune McEnroe Only the first colon should be replaced with a null byte. 2021-08-28Declare producer staticJune McEnroe 2021-08-28Use CapBits as length of FiltersJune McEnroe This should hopefully prevent accidentally using CapSomething rather than CapSomethingBit as an index in the future. 2021-08-21Don't create new tls_server(3), just reconfigureJune McEnroe 2021-08-21Zero local-key memory before freeing itJune McEnroe 2021-08-21Avoid overwriting manual AWAY messagesJune McEnroe Setting an AWAY message then disconnecting will no longer replace the AWAY message with the default one. Reconnecting continues to always clear AWAY. 2021-08-20Replace verbose colors with two types of arrowsJune McEnroe While the colors were easy to identify in blocks, the meaning of arrows is easier to remember, and survive logs being pasted for debugging. 2021-08-20Explicitly clear TLS secrets after handshakeJune McEnroe Ported from catgirl ae64d277b8204c156a30d2e8b6a958e5a31f2a7f. 2021-08-20Handle TLS_WANT_POLL{IN,OUT} from tls_handshake(3) with serverJune McEnroe 2021-08-20Use "secure" libtls ciphersJune McEnroe Ported from catgirl: commit 585039fb6e5097cfd16bc083c6d1c9356b237882 Author: Klemens Nanni <klemens@posteo.de> Date: Sun Jun 20 14:42:10 2021 +0000 Use "secure" libtls ciphers d3e90b6 'Use libtls "compat" ciphers' from 2018 fell back to "compat" ciphers to support irc.mozilla.org which now yields NXDOMAIN. All modern networks (should) support secure ciphers, so drop the hopefully unneeded list of less secure ciphers by avoiding tls_config_set_ciphers(3) and therefore sticking to the "secure" aka. "default" set of ciphers in libtls. A quick check shows that almost all of the big/known IRC networks support TLS1.3 already; those who do not at least comply with SSL_CTX_set_cipher_list(3)'s "HIGH" set as can be tested like this: echo \ irc.hackint.org \ irc.tilde.chat \ irc.libera.chat \ irc.efnet.nl \ irc.oftc.net | xargs -tn1 \ openssl s_client -quiet -cipher HIGH -no_ign_eof -port 6697 -host 2021-07-08Use seprintf to build final 005June McEnroe Rather than causing a tls_write(3) for each remaining token. 2021-06-19Fix LDADD.crypt on DarwinJune McEnroe 2021-06-18Add -m mode option to set user modesJune McEnroe 2021-06-18Document channel keys in join optionJune McEnroe 2021-06-18Use | to separate flags from config optionsJune McEnroe This lets mandoc generate tags for the option names as well, so you can ":t away" in less(1), for example, and anchor links in HTML output. The added No's prevent the equals signs from being part of the anchor links. 2021-06-18Stop referring to server-time as IRCv3.2June McEnroe IRCv3 has moved away from grouping specs together into versions like this. SASL is still referred to as IRCv3.2 because there are two different versions of that spec. 2021-06-17Add mailing list archive to READMEJune McEnroe 2021-06-10Stop accumulating ISUPPORT tokens once MOTD startsJune McEnroe This avoids duplicating tokens when a client sends VERSION and the server responds with its 005s again. 2021-06-09Use seprintf for snip, removing strlcpynJune McEnroe 2021-06-09Use seprintf for reserializeJune McEnroe 2021-06-09Use seprintf for capListJune McEnroe 2021-06-09Add seprintfJune McEnroe Based on seprint(2) from Plan 9. I'm not sure if my return value exactly matches Plan 9's in the case of truncation. seprint(2) is described only as returning a pointer to the terminating '\0', but if it does so even in the case of truncation, it is awkward for the caller to detect. This implementation returns end in the truncation case, so that (ptr == end) indicates truncation. 2021-05-27Add pounce-notify to README 2.4June McEnroe 2021-05-27Fix ENVIRONMENT formatting in pounce-notify(1)June McEnroe 2021-05-27Add note about Libera.Chat SASL-only rangesJune McEnroe 2021-05-25Add QUIRKS fileJune McEnroe 2021-05-19Replace freenode with tilde.chatJune McEnroe 2021-05-04notify: Reword pounce-notify manualJune McEnroe 2021-05-02Clean up Makefiles, configure scriptsJune McEnroe Default MANDIR to ${PREFIX}/man since it turns out man-db includes /usr/local/man by default. Add support for BINDIR. Separate libs out into LDADD variables. 2021-04-30palaver: Exit on getopt failureJune McEnroe Oops. 2021-04-30notify: Implement pounce-notifyJune McEnroe