Get Gentoo!
gentoo.org sites
gentoo.org Wiki Bugs Forums Packages
Planet Archives Sources
Infra Status
summaryrefslogtreecommitdiff
path: root/dev-libs/openssl
Commit message (Collapse)AuthorAgeFilesLines
* dev-libs/openssl: Stabilize 1.1.1t-r1 hppa, #893556Arthur Zamarin2023-03-301-1/+1
| | | | Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
* dev-libs/openssl: Stabilize 1.1.1t-r1 sparc, #893556Arthur Zamarin2023-03-301-1/+1
| | | | Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
* dev-libs/openssl: Revbump to 3.1.0-r2 for CVE-2023-0465, CVE-2023-0466Patrick McLean2023-03-283-0/+363
| | | | | | | | | | | | | | | | Upstream changelogs (dropped from NEWS due to conflicts): * Corrected documentation of X509_VERIFY_PARAM_add0_policy() to mention that it does not enable policy checking. Thanks to David Benjamin for discovering this issue. ([CVE-2023-0466]) *Tomáš Mráz* More information about vulnerabilities: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-0466 https://www.openssl.org/news/vulnerabilities.html#CVE-2023-0465 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* dev-libs/openssl: Revbump to 3.0.8-r3 for CVE-2023-0465, CVE-2023-0466Patrick McLean2023-03-283-0/+360
| | | | | | | | | | | | | | | | Upstream changelogs (dropped from NEWS due to conflicts): * Corrected documentation of X509_VERIFY_PARAM_add0_policy() to mention that it does not enable policy checking. Thanks to David Benjamin for discovering this issue. ([CVE-2023-0466]) *Tomáš Mráz* More information about vulnerabilities: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-0466 https://www.openssl.org/news/vulnerabilities.html#CVE-2023-0465 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* dev-libs/openssl: Revbump to 1.1.1t for CVE-2023-0465, CVE-2023-0466Patrick McLean2023-03-283-0/+358
| | | | | | | | | | | | | | | | Upstream changelogs (dropped from NEWS due to conflicts): * Corrected documentation of X509_VERIFY_PARAM_add0_policy() to mention that it does not enable policy checking. Thanks to David Benjamin for discovering this issue. ([CVE-2023-0466]) *Tomáš Mráz* More information about vulnerabilities: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-0466 https://www.openssl.org/news/vulnerabilities.html#CVE-2023-0465 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* dev-libs/openssl: Bump to 3.1.0-r1, add patch for CVE-2023-0464Patrick McLean2023-03-222-0/+488
| | | | Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* dev-libs/openssl: Bump to 3.0.8-r2, add patch for CVE-2023-0464Patrick McLean2023-03-222-0/+485
| | | | Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* dev-libs/openssl: Bump to 1.1.1t-r2, add patch for CVE-2023-0464Patrick McLean2023-03-222-0/+482
| | | | Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* dev-libs/openssl: remove unused fileMichael Mair-Keimberger2023-03-191-172/+0
| | | | | | Signed-off-by: Michael Mair-Keimberger <mmk@levelnine.at> Closes: https://github.com/gentoo/gentoo/pull/30156 Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: Stabilize 1.1.1t-r1 ppc64, #893556Arthur Zamarin2023-03-161-1/+1
| | | | Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
* dev-libs/openssl: add blocker on unpatched opensshSam James2023-03-151-2/+5
| | | | | | | | | | | | Unpatched OpenSSH will think it needs a rebuild before working. A blocker isn't perfect here but it's better than nothing. Note that it's likely the running sshd will still need a restart anyway if people haven't upgraded yet, so not keywording yet + will likely do a news item. Reference: 268d1040b0682edf6f042269a33a32315590547b Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: add 3.1.0 (unkeyworded)Sam James2023-03-142-0/+272
| | | | | | Briefly unkeyworded for some testing but I don't expect this to last long. Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: drop 3.0.7-r1, 3.0.7-r4Sam James2023-03-144-639/+0
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: update openpgp-keys versionSam James2023-03-133-5/+5
| | | | | Closes: https://bugs.gentoo.org/889712 Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: backport ebuild changes from 3.xMike Gilbert2023-03-111-39/+32
| | | | Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: drop commented KEYWORDSMike Gilbert2023-03-111-1/+0
| | | | Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: drop multilib_copy_sourcesMike Gilbert2023-03-111-3/+1
| | | | Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: drop sanity test from src_prepareMike Gilbert2023-03-111-16/+12
| | | | | | | | | Configure doesn't do anything special when we pass --test-sanity to it; it just ignores the option entirely. Also move more configurey things to src_configure. Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: generate fipsmodule.cnf in pkg_preinstMike Gilbert2023-03-111-0/+13
| | | | | | | | | | | | | | | | | This file contains an hash of the fips.so module, which may change after src_install due to automatic stripping by the package manager. README-FIPS.md says this file should be generated on each machine separately anyway. This will fail when cross-compiling since we call openssl from ${D}, but I don't see a better way to handle it. Only the primary ABI is handled currently: by the time we get to pkg_preinst, the tools from the secondary ABIs have been clobbered. Closes: https://bugs.gentoo.org/900625 Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: fix DoubleEmptyLineSam James2023-02-261-1/+0
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: Stabilize 1.1.1t-r1 arm64, #893556Arthur Zamarin2023-02-261-1/+1
| | | | Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
* dev-libs/openssl: gentoo.config-1.0.4 clang fixNicholas Vinson2023-02-221-2/+4
| | | | | | | | | Update gentoo.config-1.0.4 to better support clang compiler toolchains Closes: https://bugs.gentoo.org/885901 Signed-off-by: Nicholas Vinson <nvinson234@gmail.com> Closes: https://github.com/gentoo/gentoo/pull/29711 Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: fix Configure on mipsMike Gilbert2023-02-123-0/+36
| | | | | Closes: https://bugs.gentoo.org/894140 Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: remove unused patchMichael Mair-Keimberger2023-02-081-24/+0
| | | | | | Signed-off-by: Michael Mair-Keimberger <mmk@levelnine.at> Closes: https://github.com/gentoo/gentoo/pull/29488 Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: Stabilize 1.1.1t-r1 amd64, #893556Sam James2023-02-081-1/+1
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: Stabilize 1.1.1t-r1 arm, #893556Sam James2023-02-081-1/+1
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: forward ~ppc64Sam James2023-02-081-1/+1
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: Keyword 3.0.7-r4 ppc64, #886243Sam James2023-02-081-1/+1
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: Stabilize 1.1.1t-r1 x86, #893556Sam James2023-02-081-1/+1
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: Stabilize 1.1.1t-r1 ppc, #893556Sam James2023-02-081-1/+1
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: drop 1.1.1s-r2Sam James2023-02-071-340/+0
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: Keyword 3.0.7-r4, 3.0.8 arm, #886243Sam James2023-02-072-2/+2
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: update 1.1.1 match recent changes in 3.x ebuildsMike Gilbert2023-02-071-73/+6
| | | | Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: add 3.0.8Sam James2023-02-072-0/+262
| | | | | Bug: https://bugs.gentoo.org/893446 Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: keyword 1.1.1tSam James2023-02-071-2/+1
| | | | | | | Originally unkeyworded as we copied from 8263780cbef6fd6d62bdd57dc14373f869739e77. Bug: https://bugs.gentoo.org/893446 Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: add 1.1.1tSam James2023-02-072-0/+342
| | | | | Bug: https://bugs.gentoo.org/893446 Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: drop 1.1.1q, 3.0.7-r3Sam James2023-02-073-667/+0
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: drop obsolete 'emake depend'Mike Gilbert2023-02-031-4/+0
| | | | | | INSTALL.md claims this target is obsolete since OpenSSL 1.1.0. Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: drop Makefile CFLAGS hackeryMike Gilbert2023-02-031-22/+1
| | | | | | | From what I can tell, the current build system respects CFLAGS without any intervention. Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: optimize docs buildMike Gilbert2023-02-031-17/+13
| | | | | | | | Remove hacky sed to disable manpage buliding based on FEATURES. Skip building docs for non-native abis. Use upstream default manpage suffix "ossl". Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: remove broken code to prefix manpagesMike Gilbert2023-02-031-0/+293
| | | | | | | | | The man pages already have suffix applied to the section number which will prevent any collisions. Adding a prefix just makes the proper man pages harder to locate. Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: replace c_rehash with openssl rehashMike Gilbert2023-02-032-6/+5
| | | | | Bug: https://bugs.gentoo.org/855494 Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: tweak config/Configure for 1.1.1 branchMike Gilbert2023-01-141-11/+6
| | | | | | | | | | | | If gentoo.config succeeds, call "perl Configure ...". This uses perl from PATH to avoid issue on prefix, and bypasses the funky config shell script. If gentoo.config fails, call "sh config -v ...". This uses sh from PATH to avoid any issues on prefix, and produces verbose output for the build log. Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: always call Configure directlyMike Gilbert2023-01-141-19/+2
| | | | | | | | | | Since 2f44c815, config has been a wrapper that simply passes its arguments to Configure. We can call Configure directly, using perl from PATH to avoid any shebang issues on prefix. Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: fix config call in src_prepareMike Gilbert2023-01-131-2/+4
| | | | Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* dev-libs/openssl: Keyword 3.0.7-r2 ppc, #886243Arthur Zamarin2023-01-131-2/+2
| | | | Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
* dev-libs/openssl: backport configuration improvements to 1.1.1s-r1 (unkeyworded)Andreas K. Hüttel2023-01-081-0/+343
| | | | Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>
* dev-libs/openssl: check for CONFIG_CRYPTO_USER_API_SKCIPHERMatoro Mahri2022-12-232-1/+5
| | | | | | | | | test/recipes/30-test_afalg.t requires this kernel option to be enabled. Builtin or module is fine. Bug: https://bugs.gentoo.org/864793 Signed-off-by: Matoro Mahri <matoro@users.noreply.github.com> Signed-off-by: Sam James <sam@gentoo.org>
* dev-libs/openssl: keyword 3.0.7-r2 for ~hppaAndreas K. Hüttel2022-12-181-1/+1
| | | | Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>
* dev-libs/openssl: keyword 3.0.7-r2 for ~sparcAndreas K. Hüttel2022-12-181-1/+1
| | | | Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>