[pkgsrc/trunk]: pkgsrc/security/bearssl Import bearssl-0.3 as security/bearssl.

[wiz <wiz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/217652afa38b
branches:  trunk
changeset: 360549:217652afa38b
user:      wiz <wiz%pkgsrc.org@localhost>
date:      Sat Apr 01 17:01:51 2017 +0000

description:
Import bearssl-0.3 as security/bearssl.

BearSSL is an implementation of the SSL/TLS protocol (RFC 5246)
written in C. It aims at offering the following features:

* Be correct and secure. In particular, insecure protocol versions
  and choices of algorithms are not supported, by design;
  cryptographic algorithm implementations are constant-time by
  default.

* Be small, both in RAM and code footprint. For instance, a minimal
  server implementation may fit in about 20 kilobytes of compiled
  code and 25 kilobytes of RAM.

* Be highly portable. BearSSL targets not only "big" operating
  systems like Linux and Windows, but also small embedded systems
  and even special contexts like bootstrap code.

* Be feature-rich and extensible. SSL/TLS has many defined cipher
  suites and extensions; BearSSL should implement most of them,
  and allow extra algorithm implementations to be added afterwards,
  possibly from third parties.

bearssl is considered alpha-quality software, which means that it
runs but it probably has bugs, some of which being certainly
exploitable vulnerabilities.

diffstat:

 security/bearssl/DESCR    |  24 ++++++++++++++++++++++++
 security/bearssl/Makefile |  28 ++++++++++++++++++++++++++++
 security/bearssl/PLIST    |  15 +++++++++++++++
 security/bearssl/distinfo |   6 ++++++
 4 files changed, 73 insertions(+), 0 deletions(-)

diffs (89 lines):

diff -r 71e7c11a9aeb -r 217652afa38b security/bearssl/DESCR
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/security/bearssl/DESCR    Sat Apr 01 17:01:51 2017 +0000
@@ -0,0 +1,24 @@
+BearSSL is an implementation of the SSL/TLS protocol (RFC 5246)
+written in C. It aims at offering the following features:
+
+* Be correct and secure. In particular, insecure protocol versions
+  and choices of algorithms are not supported, by design;
+  cryptographic algorithm implementations are constant-time by
+  default.
+
+* Be small, both in RAM and code footprint. For instance, a minimal
+  server implementation may fit in about 20 kilobytes of compiled
+  code and 25 kilobytes of RAM.
+
+* Be highly portable. BearSSL targets not only "big" operating
+  systems like Linux and Windows, but also small embedded systems
+  and even special contexts like bootstrap code.
+
+* Be feature-rich and extensible. SSL/TLS has many defined cipher
+  suites and extensions; BearSSL should implement most of them,
+  and allow extra algorithm implementations to be added afterwards,
+  possibly from third parties.
+
+bearssl is considered alpha-quality software, which means that it
+runs but it probably has bugs, some of which being certainly
+exploitable vulnerabilities.
diff -r 71e7c11a9aeb -r 217652afa38b security/bearssl/Makefile
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/security/bearssl/Makefile Sat Apr 01 17:01:51 2017 +0000
@@ -0,0 +1,28 @@
+# $NetBSD: Makefile,v 1.1 2017/04/01 17:01:51 wiz Exp $
+
+DISTNAME=      bearssl-0.3
+CATEGORIES=    security
+MASTER_SITES=  https://bearssl.org/
+
+MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
+HOMEPAGE=      https://bearssl.org/
+COMMENT=       Implementation of the SSL/TLS protocol (RFC 5246)
+LICENSE=       mit
+
+INSTALLATION_DIRS=     bin include lib
+
+do-install:
+       cd ${WRKSRC}/build && \
+               ${INSTALL_DATA} brssl ${DESTDIR}${PREFIX}/bin
+       cd ${WRKSRC}/inc && \
+               ${INSTALL_DATA} *.h ${DESTDIR}${PREFIX}/include
+       cd ${WRKSRC}/build && \
+               ${INSTALL_LIB} libbearssl.* ${DESTDIR}${PREFIX}/lib
+
+do-test:
+       cd ${WRKSRC} && \
+               ./build/testcrypto all && \
+               ./build/testspeed all && \
+               ./build/testx509
+
+.include "../../mk/bsd.pkg.mk"
diff -r 71e7c11a9aeb -r 217652afa38b security/bearssl/PLIST
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/security/bearssl/PLIST    Sat Apr 01 17:01:51 2017 +0000
@@ -0,0 +1,15 @@
+@comment $NetBSD: PLIST,v 1.1 2017/04/01 17:01:51 wiz Exp $
+bin/brssl
+include/bearssl.h
+include/bearssl_block.h
+include/bearssl_ec.h
+include/bearssl_hash.h
+include/bearssl_hmac.h
+include/bearssl_pem.h
+include/bearssl_prf.h
+include/bearssl_rand.h
+include/bearssl_rsa.h
+include/bearssl_ssl.h
+include/bearssl_x509.h
+lib/libbearssl.a
+lib/libbearssl.so
diff -r 71e7c11a9aeb -r 217652afa38b security/bearssl/distinfo
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/security/bearssl/distinfo Sat Apr 01 17:01:51 2017 +0000
@@ -0,0 +1,6 @@
+$NetBSD: distinfo,v 1.1 2017/04/01 17:01:51 wiz Exp $
+
+SHA1 (bearssl-0.3.tar.gz) = 2f16a6b14b0e43cdacaf89aea47836a8da685f7e
+RMD160 (bearssl-0.3.tar.gz) = 9c2562eecbdf8c777fd605c32b7d61ebb47c4734
+SHA512 (bearssl-0.3.tar.gz) = 137540dfed9a281e8599c9c74951662733e7e53c7b8556e4b940dea556299ef008ac49c8c499d8439884842d9a07f95de01a323229f882748c64ee9e10ebc691
+Size (bearssl-0.3.tar.gz) = 612642 bytes