BSD Ports

security/libressl 4.3.3 MidnightBSD

Free version of the SSL/TLS protocol forked from OpenSSL

System
MidnightBSD
Repository
mports
Maintainer
[email protected]
Last update
Commit
6f6ebfbea7
License
bsd4
Categories
security, devel

Description

LibreSSL is an open-source implementation of the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. It was forked from the OpenSSL cryptographic software library in April 2014 as a response by OpenBSD developers to the Heartbleed security vulnerability in OpenSSL, with the aim of refactoring the OpenSSL code so as to provide a more secure implementation.

LibreSSL was forked from the OpenSSL library starting with the 1.0.1g branch and will follow the security guidelines used elsewhere in the OpenBSD project.

In the other systems

SystemPortVersion
MidnightBSDsecurity/libressl4.3.3
FreeBSDsecurity/libressl4.4.0
NetBSDsecurity/libressl4.1.0
HardenedBSDsecurity/libressl4.3.2
GhostBSDsecurity/libressl4.3.2

Install

Binary package:

mport install libressl

From mports:

cd /usr/mports/security/libressl && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	libressl>0:security/libressl
LIB_DEPENDS=	libcrypto.so:security/libressl

Dependencies

No port depends on this one.

Configuration

Options name: security_libressl

OptionDefaultDescription
LIBTLSoffOnly install libtls (no libcrypto/libssl)
MAN3onInstall API manpages (section 3)
NConInstall TLS-enabled netcat
USES
cpe libtool pathfix pkgconfig
Service scripts
none
Conflicts with
libressl-devel

Files

Manual pages 5
  • nc(1)
  • ocspcheck(8)
  • openssl(1)
  • openssl.cnf(5)
  • x509v3.cnf(5)
pkg-plist 97
  • bin/nc
  • bin/ocspcheck
  • bin/openssl
  • etc/ssl/certs
  • etc/ssl/openssl.cnf
  • etc/ssl/x509v3.cnf
  • include/openssl/aes.h
  • include/openssl/asn1.h
  • include/openssl/asn1t.h
  • include/openssl/bio.h
  • include/openssl/blowfish.h
  • include/openssl/bn.h
  • include/openssl/buffer.h
  • include/openssl/camellia.h
  • include/openssl/cast.h
  • include/openssl/chacha.h
  • include/openssl/cmac.h
  • include/openssl/cms.h
  • include/openssl/comp.h
  • include/openssl/conf.h
  • include/openssl/crypto.h
  • include/openssl/ct.h
  • include/openssl/curve25519.h
  • include/openssl/des.h
  • include/openssl/dh.h
  • include/openssl/dsa.h
  • include/openssl/dtls1.h
  • include/openssl/ec.h
  • include/openssl/ecdh.h
  • include/openssl/ecdsa.h
  • include/openssl/engine.h
  • include/openssl/err.h
  • include/openssl/evp.h
  • include/openssl/hkdf.h
  • include/openssl/hmac.h
  • include/openssl/idea.h
  • include/openssl/kdf.h
  • include/openssl/lhash.h
  • include/openssl/md4.h
  • include/openssl/md5.h
  • include/openssl/mlkem.h
  • include/openssl/modes.h
  • include/openssl/obj_mac.h
  • include/openssl/objects.h
  • include/openssl/ocsp.h
  • include/openssl/opensslconf.h
  • include/openssl/opensslfeatures.h
  • include/openssl/opensslv.h
  • include/openssl/ossl_typ.h
  • include/openssl/pem.h
  • include/openssl/pkcs12.h
  • include/openssl/pkcs7.h
  • include/openssl/poly1305.h
  • include/openssl/posix_time.h
  • include/openssl/rand.h
  • include/openssl/rc2.h
  • include/openssl/rc4.h
  • include/openssl/ripemd.h
  • include/openssl/rsa.h
  • include/openssl/safestack.h
  • include/openssl/sha.h
  • include/openssl/sm3.h
  • include/openssl/sm4.h
  • include/openssl/srtp.h
  • include/openssl/ssl.h
  • include/openssl/ssl3.h
  • include/openssl/stack.h
  • include/openssl/tls1.h
  • include/openssl/ts.h
  • include/openssl/txt_db.h
  • include/openssl/ui.h
  • include/openssl/x509.h
  • include/openssl/x509_vfy.h
  • include/openssl/x509v3.h
  • include/tls.h
  • lib/libcrypto.a
  • lib/libcrypto.so
  • lib/libcrypto.so.
  • lib/libcrypto.so.
  • lib/libssl.a
  • lib/libssl.so
  • lib/libssl.so.
  • lib/libssl.so.
  • lib/libtls.a
  • lib/libtls.so
  • lib/libtls.so.
  • lib/libtls.so.
  • libdata/pkgconfig/libcrypto.pc
  • libdata/pkgconfig/libssl.pc
  • libdata/pkgconfig/libtls.pc
  • libdata/pkgconfig/openssl.pc
  • share/man/man1/nc.1.gz
  • share/man/man1/openssl.1.gz
  • share/man/man5/openssl.cnf.5.gz
  • share/man/man5/x509v3.cnf.5.gz
  • share/man/man8/ocspcheck.8.gz
  • @dir include/openssl
distinfo 1
FileSizeSHA256
libressl-4.3.3.tar.gz9.306635e+06ff97c432457f349e6ba3d416ab903bc7468f1436f0f32efe5fff808de292c7b8
Master sites 1
  • OPENBSD/LibreSSL

Commit history 1

DateCommitCreditsLog message
6f6ebfbea7 Lucas Holt security/libressl: update to 4.3.3 (#1858)
Update `security/libressl` from 4.3.1 to 4.3.3. This syncs with FreeBSD ports, where the distinfo SHA256 `ff97c432…92c7b8` matches. - **version.mk fix:** `OPENSSL_SHLIBVER` was still 56, but the plist has installed `libcrypto.so.57` since 4.3.1 (bec639bbf1). As a result, `DEFAULT_VERSIONS+=ssl=libressl` made `USES=ssl` ports depend on `libcrypto.so.56`, which no package provides. It's now 57, matching FreeBSD. - **Plist:** adds the new `include/openssl/mlkem.h`. - **Not taken from FreeBSD:** they switched `NO_TEST` to `TEST_TARGET=check` and dropped `MAKE_JOBS_UNSAFE`. Both are left as they are here. Validation (amd64, 4.0.9): - `bmake makesum patch build fake package` works for both flavors: `libressl-4.3.3.mport` and `libressl-libtls-4.3.3.mport`. Fake raised no plist warnings. …