BSD Ports

security/openssl36 3.6.5 MidnightBSD

TLSv1.3 capable SSL and crypto library

System
MidnightBSD
Repository
mports
Maintainer
[email protected]
Last update
Commit
947bf18b02
License
Apache-2.0
Categories
security, devel

Description

The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, full-featured, and Open Source toolkit implementing the Secure Sockets Layer (SSL v3) and Transport Layer Security (TLS v1, v1.1, v1.2, v1.3) protocols with full-strength cryptography world-wide. The project is managed by a worldwide community of volunteers that use the Internet to communicate, plan, and develop the OpenSSL tookit and its related documentation.

OpenSSL is based on the excellent SSLeay library developed by Eric A. Young and Tim J. Hudson. The OpenSSL toolkit is licensed under an Apache-style licence, which basically means that you are free to get and use it for commercial and non-commercial purposes subject to some simple license conditions.

In the other systems

SystemPortVersion
MidnightBSDsecurity/openssl363.6.5
FreeBSDsecurity/openssl363.6.5

Install

Binary package:

mport install openssl36

From mports:

cd /usr/mports/security/openssl36 && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	openssl36>0:security/openssl36
LIB_DEPENDS=	libcrypto.so:security/openssl36

Dependencies

No port depends on this one.

Configuration

Options name: security_openssl

OptionDefaultDescription
ARIAoffARIA (South Korean standard)
ASMonAssembler code
ASYNConAsynchronous mode
BROTLIoff
CTonCertificate Transparency Support
DESon(Triple) Data Encryption Standard
FIPSonBuild FIPS provider (Note: NOT yet FIPS validated)
FIPS-JITTERoff
GOSTonGOST (Russian standard)
IDEAoffInternational Data Encryption Algorithm
KTLSonUse in-kernel TLS (MidnightBSD >4)
LEGACYoffOlder algorithms
MAN3onInstall API manpages (section 3, 7)
MD2offMD2 (obsolete) (requires LEGACY)
MD4onMD4 (unsafe)
MDC2offMDC-2 (patented, requires DES)
ML-DSAon
ML-KEMon
NEXTPROTONEGonNext Protocol Negotiation (SPDY)
QUIConHTTP/3
RC2onRC2 (unsafe)
RC4onRC4 (unsafe)
RC5offRC5 (patented)
RFC3779onRFC3779 support (BGP)
RMD160onRIPEMD-160
SCTPoffSCTP (Stream Control Transmission)
SHAREDonBuild shared libraries
SLH-DSAon
SM2offSM2 Elliptic Curve DH (Chinese standard)
SM3offSM3 256bit (Chinese standard)
SM4offSM4 128bit (Chinese standard)
SSE2onRuntime SSE2 detection
SSL3offSSLv3 (unsafe)
THREADPOOLonThread Pooling support
THREADSon
TLS-DEPRECATED-ECoff
TLS1onTLSv1.0 (requires TLS1_1, TLS1_2)
TLS1_1onTLSv1.1 (requires TLS1_2)
TLS1_2onTLSv1.2
WEAK-SSL-CIPHERSoff
ZLIBoff
ZSTDoff
USES
cpe perl5
Service scripts
none
Conflicts with
boringssl libressl libressl-devel openssl openssl111 openssl3[1234] openssl*-quictls

Files

Manual pages 116
  • CA.pl(1)
  • asn1parse(1)
  • c_rehash(1)
  • ca(1)
  • ciphers(1)
  • cmp(1)
  • cms(1)
  • config(5)
  • crl(1)
  • crl2pkcs7(1)
  • dgst(1)
  • dhparam(1)
  • dsa(1)
  • dsaparam(1)
  • ec(1)
  • ecparam(1)
  • enc(1)
  • engine(1)
  • errstr(1)
  • fips_config(5)
  • gendsa(1)
  • genpkey(1)
  • genrsa(1)
  • info(1)
  • kdf(1)
  • mac(1)
  • nseq(1)
  • ocsp(1)
  • openssl(1)
  • openssl-asn1parse(1)
  • openssl-ca(1)
  • openssl-ciphers(1)
  • openssl-cmds(1)
  • openssl-cmp(1)
  • openssl-cms(1)
  • openssl-configutl(1)
  • openssl-crl(1)
  • openssl-crl2pkcs7(1)
  • openssl-dgst(1)
  • openssl-dhparam(1)
  • openssl-dsa(1)
  • openssl-dsaparam(1)
  • openssl-ec(1)
  • openssl-ecparam(1)
  • openssl-enc(1)
  • openssl-engine(1)
  • openssl-errstr(1)
  • openssl-fipsinstall(1)
  • openssl-format-options(1)
  • openssl-gendsa(1)
  • openssl-genpkey(1)
  • openssl-genrsa(1)
  • openssl-info(1)
  • openssl-kdf(1)
  • openssl-list(1)
  • openssl-mac(1)
  • openssl-namedisplay-options(1)
  • openssl-nseq(1)
  • openssl-ocsp(1)
  • openssl-passphrase-options(1)
  • openssl-passwd(1)
  • openssl-pkcs12(1)
  • openssl-pkcs7(1)
  • openssl-pkcs8(1)
  • openssl-pkey(1)
  • openssl-pkeyparam(1)
  • openssl-pkeyutl(1)
  • openssl-prime(1)
  • openssl-rand(1)
  • openssl-rehash(1)
  • openssl-req(1)
  • openssl-rsa(1)
  • openssl-rsautl(1)
  • openssl-s_client(1)
  • openssl-s_server(1)
  • openssl-s_time(1)
  • openssl-sess_id(1)
  • openssl-skeyutl(1)
  • openssl-smime(1)
  • openssl-speed(1)
  • openssl-spkac(1)
  • openssl-srp(1)
  • openssl-storeutl(1)
  • openssl-ts(1)
  • openssl-verification-options(1)
  • openssl-verify(1)
  • openssl-version(1)
  • openssl-x509(1)
  • passwd(1)
  • pkcs12(1)
  • pkcs7(1)
  • pkcs8(1)
  • pkey(1)
  • pkeyparam(1)
  • pkeyutl(1)
  • prime(1)
  • rand(1)
  • rehash(1)
  • req(1)
  • rsa(1)
  • rsautl(1)
  • s_client(1)
  • s_server(1)
  • s_time(1)
  • sess_id(1)
  • smime(1)
  • speed(1)
  • spkac(1)
  • srp(1)
  • storeutl(1)
  • ts(1)
  • tsget(1)
  • verify(1)
  • version(1)
  • x509(1)
  • x509v3_config(5)
pkg-plist 285
  • bin/c_rehash
  • bin/openssl
  • include/openssl/aes.h
  • include/openssl/asn1.h
  • include/openssl/asn1err.h
  • include/openssl/asn1t.h
  • include/openssl/async.h
  • include/openssl/asyncerr.h
  • include/openssl/bio.h
  • include/openssl/bioerr.h
  • include/openssl/blowfish.h
  • include/openssl/bn.h
  • include/openssl/bnerr.h
  • include/openssl/buffer.h
  • include/openssl/buffererr.h
  • include/openssl/byteorder.h
  • include/openssl/camellia.h
  • include/openssl/cast.h
  • include/openssl/cmac.h
  • include/openssl/cmp.h
  • include/openssl/cmp_util.h
  • include/openssl/cmperr.h
  • include/openssl/cms.h
  • include/openssl/cmserr.h
  • include/openssl/comp.h
  • include/openssl/comperr.h
  • include/openssl/conf.h
  • include/openssl/conf_api.h
  • include/openssl/conferr.h
  • include/openssl/configuration.h
  • include/openssl/conftypes.h
  • include/openssl/core.h
  • include/openssl/core_dispatch.h
  • include/openssl/core_names.h
  • include/openssl/core_object.h
  • include/openssl/crmf.h
  • include/openssl/crmferr.h
  • include/openssl/crypto.h
  • include/openssl/cryptoerr.h
  • include/openssl/cryptoerr_legacy.h
  • include/openssl/ct.h
  • include/openssl/cterr.h
  • include/openssl/decoder.h
  • include/openssl/decodererr.h
  • include/openssl/des.h
  • include/openssl/dh.h
  • include/openssl/dherr.h
  • include/openssl/dsa.h
  • include/openssl/dsaerr.h
  • include/openssl/dtls1.h
  • include/openssl/e_os2.h
  • include/openssl/e_ostime.h
  • include/openssl/ebcdic.h
  • include/openssl/ec.h
  • include/openssl/ecdh.h
  • include/openssl/ecdsa.h
  • include/openssl/ecerr.h
  • include/openssl/encoder.h
  • include/openssl/encodererr.h
  • include/openssl/engine.h
  • include/openssl/engineerr.h
  • include/openssl/err.h
  • include/openssl/ess.h
  • include/openssl/esserr.h
  • include/openssl/evp.h
  • include/openssl/evperr.h
  • include/openssl/fips_names.h
  • include/openssl/fipskey.h
  • include/openssl/hmac.h
  • include/openssl/hpke.h
  • include/openssl/http.h
  • include/openssl/httperr.h
  • include/openssl/idea.h
  • include/openssl/indicator.h
  • include/openssl/kdf.h
  • include/openssl/kdferr.h
  • include/openssl/lhash.h
  • include/openssl/macros.h
  • include/openssl/md2.h
  • include/openssl/md4.h
  • include/openssl/md5.h
  • include/openssl/mdc2.h
  • include/openssl/ml_kem.h
  • include/openssl/modes.h
  • include/openssl/obj_mac.h
  • include/openssl/objects.h
  • include/openssl/objectserr.h
  • include/openssl/ocsp.h
  • include/openssl/ocsperr.h
  • include/openssl/opensslconf.h
  • include/openssl/opensslv.h
  • include/openssl/ossl_typ.h
  • include/openssl/param_build.h
  • include/openssl/params.h
  • include/openssl/pem.h
  • include/openssl/pem2.h
  • include/openssl/pemerr.h
  • include/openssl/pkcs12.h
  • include/openssl/pkcs12err.h
  • include/openssl/pkcs7.h

The first 100 are listed.

distinfo 1
FileSizeSHA256
openssl-3.6.5.tar.gz5.5078161e+07a2157c2830efdec3788939b00c9b0638306d3f0bbb76dc4832ee503bb397df98
Master sites 1
  • https://github.com/openssl/openssl/releases/download/${DISTNAME}/

Commit history 2

DateCommitCreditsLog message
947bf18b02 Lucas Holt security/openssl36: update to 3.6.5 (#1862)
## Summary - Update `security/openssl36` from 3.6.3 to 3.6.5. The distinfo matches FreeBSD. - FreeBSD's PowerPC-only `patch-Configurations_10-main.conf` and its DEPRECATED/EXPIRES lines are not imported. ## Testing (amd64, MidnightBSD 4.0.9) - `bmake build fake package` passes. - `bmake test`: 2 failures, the same as `security/openssl` 3.5.9 (#1861). - `04-test_bio_dgram`: hung only while running concurrently with the 3.5.9 suite. Passes when run alone. - `30-test_evp`, `evpmac_common.txt:346`: a new upstream "FIPS legacy bridge rejects a non-FIPS cipher" vector uses ARIA-128-CBC. The port builds with `no-aria`, so `evp_test` skips the test, clears its error, and then reports "Succeeded but was expecting MAC_KEY_CREATE_ERROR". This is a harness artifact. …
b1c7684d24 Lucas Holt security/openssl36: update to 3.6.3 (#746)
## Summary - update OpenSSL 3.6 from 3.6.2 to 3.6.3 - refresh the MidnightBSD pthread compatibility patch for the new source layout - remove the PowerPC-only target patch, since MidnightBSD does not support PowerPC ## Validation - `bmake makesum` - `bmake patch` - `bmake` - `bmake fake` - `bmake package` - `bmake check-license` - full upstream test suite with the port default configuration: 4,648/4,649 passed; the single timing-sensitive QUIC radix failure passed on isolated rerun - `git diff --check` `portlint -C` reports existing structural/style findings in this port, including OPTIONS_EXCLUDE placement, MACHINE_ARCH use, and option false positives; this version update does not introduce them. ## Summary by Sourcery …