CVS commit: pkgsrc/security/bearssl

["Alistair G. Crooks" <agc%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   agc
Date:           Mon Jan 21 06:59:58 UTC 2019

Modified Files:
        pkgsrc/security/bearssl: Makefile PLIST distinfo
        pkgsrc/security/bearssl/patches: patch-conf_Unix.mk

Log Message:
Update security/bearssl from 0.5 to 0.6

Changes since previous version:

+ Added general-purpose implementations of EAX and CCM modes (including
shared precomputation support for EAX).
+ Added general-purpose RSA/OAEP implementation.
+ Added general-purpose HKDF implementation.
+ Added support for CCM and CCM_8 TLS cipher suites (RFC 6655 and RFC 7251).
+ Added RSA and EC key generation.
+ Added private key encoding support ("raw" and PKCS#8 formats, both
in DER and PEM, for RSA and EC key pairs).
+ Made Base64 encoding/decoding constant-time (with regards to the
encoded data bytes).
+ Added a generic API for random seed providers.
+ Added an extra DRBG based on AES/CTR + Hirose construction for reseeding.
+ Some cosmetic fixes to avoid warnings with picky compilers.
+ Makefile fix to achieve compatibility with OpenBSD.
+ Fixed a bug in bit length computation for big integers (this was
breaking RSA signatures with some specific implementations and key lengths).
+ Made SSL/TLS client stricter in cipher suite selection (to align with
server behaviour).


To generate a diff of this commit:
cvs rdiff -u -r1.5 -r1.6 pkgsrc/security/bearssl/Makefile
cvs rdiff -u -r1.2 -r1.3 pkgsrc/security/bearssl/PLIST
cvs rdiff -u -r1.4 -r1.5 pkgsrc/security/bearssl/distinfo
cvs rdiff -u -r1.1 -r1.2 pkgsrc/security/bearssl/patches/patch-conf_Unix.mk

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/bearssl/Makefile
diff -u pkgsrc/security/bearssl/Makefile:1.5 pkgsrc/security/bearssl/Makefile:1.6
--- pkgsrc/security/bearssl/Makefile:1.5        Wed Feb  7 11:52:56 2018
+++ pkgsrc/security/bearssl/Makefile    Mon Jan 21 06:59:58 2019
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.5 2018/02/07 11:52:56 maya Exp $
+# $NetBSD: Makefile,v 1.6 2019/01/21 06:59:58 agc Exp $
 
-DISTNAME=      bearssl-0.5
+DISTNAME=      bearssl-0.6
 CATEGORIES=    security
 MASTER_SITES=  https://bearssl.org/
 

Index: pkgsrc/security/bearssl/PLIST
diff -u pkgsrc/security/bearssl/PLIST:1.2 pkgsrc/security/bearssl/PLIST:1.3
--- pkgsrc/security/bearssl/PLIST:1.2   Wed Feb  7 11:52:56 2018
+++ pkgsrc/security/bearssl/PLIST       Mon Jan 21 06:59:58 2019
@@ -1,10 +1,11 @@
-@comment $NetBSD: PLIST,v 1.2 2018/02/07 11:52:56 maya Exp $
+@comment $NetBSD: PLIST,v 1.3 2019/01/21 06:59:58 agc Exp $
 bin/brssl
 include/bearssl.h
 include/bearssl_aead.h
 include/bearssl_block.h
 include/bearssl_ec.h
 include/bearssl_hash.h
+include/bearssl_kdf.h
 include/bearssl_hmac.h
 include/bearssl_pem.h
 include/bearssl_prf.h

Index: pkgsrc/security/bearssl/distinfo
diff -u pkgsrc/security/bearssl/distinfo:1.4 pkgsrc/security/bearssl/distinfo:1.5
--- pkgsrc/security/bearssl/distinfo:1.4        Wed Feb  7 11:52:56 2018
+++ pkgsrc/security/bearssl/distinfo    Mon Jan 21 06:59:58 2019
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.4 2018/02/07 11:52:56 maya Exp $
+$NetBSD: distinfo,v 1.5 2019/01/21 06:59:58 agc Exp $
 
-SHA1 (bearssl-0.5.tar.gz) = c2c202803454c35a4a271d9f5e518295b8d76e01
-RMD160 (bearssl-0.5.tar.gz) = 5974baced77d83aace5a5eea31a3810d93a26e28
-SHA512 (bearssl-0.5.tar.gz) = 1bd510f62f36620cda5317509e72bd0c6f3538c30aca2695e80c26d1ea7270d174ed3fbb6d690b3ced5d51ce3f6bfc776d78a196492900296a452bc4c8185e45
-Size (bearssl-0.5.tar.gz) = 666905 bytes
-SHA1 (patch-conf_Unix.mk) = 452629d96619ddd63a726b2ae933610187d31a68
+SHA1 (bearssl-0.6.tar.gz) = 443761821576544cd539206b1aba99a647b3137a
+RMD160 (bearssl-0.6.tar.gz) = 15cbb065fcccfac434e097a98e054d3b0498e2ea
+SHA512 (bearssl-0.6.tar.gz) = f9ed25683cfc6c4abe7f1203a2b82ed101ee4c9e0f9ab60755b6a09c8d1e8e4f64d413624e7bb9c4b0033f909a2e4568a1d916cc6ce4736222900691e1f8359a
+Size (bearssl-0.6.tar.gz) = 765094 bytes
+SHA1 (patch-conf_Unix.mk) = 5f85f1803b1e631a6011e3f8fc70aea2c1305d7a

Index: pkgsrc/security/bearssl/patches/patch-conf_Unix.mk
diff -u pkgsrc/security/bearssl/patches/patch-conf_Unix.mk:1.1 pkgsrc/security/bearssl/patches/patch-conf_Unix.mk:1.2
--- pkgsrc/security/bearssl/patches/patch-conf_Unix.mk:1.1      Fri Sep 22 22:00:57 2017
+++ pkgsrc/security/bearssl/patches/patch-conf_Unix.mk  Mon Jan 21 06:59:58 2019
@@ -1,12 +1,13 @@
-$NetBSD: patch-conf_Unix.mk,v 1.1 2017/09/22 22:00:57 wiedi Exp $
+$NetBSD: patch-conf_Unix.mk,v 1.2 2019/01/21 06:59:58 agc Exp $
 
 Don't overwrite LDFLAGS
---- conf/Unix.mk.orig  2017-04-03 19:42:14.000000000 +0000
-+++ conf/Unix.mk
-@@ -53,7 +53,7 @@ LDDLLOUT = -o
+
+--- conf/Unix.mk.orig  2018-08-14 13:41:54.000000000 -0700
++++ conf/Unix.mk       2019-01-20 22:50:36.191161113 -0800
+@@ -53,7 +53,7 @@
  
  # Static linker.
- LD = gcc
+ LD = cc
 -LDFLAGS = 
 +#LDFLAGS = 
  LDOUT = -o