CVS commit: pkgsrc/security/mbedtls4

["Jonathan Schleifer" <js%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   js
Date:           Thu Jan 22 19:29:11 UTC 2026

Added Files:
        pkgsrc/security/mbedtls4: DESCR Makefile PLIST buildlink3.mk distinfo

Log Message:
Add security/mbedtls4


To generate a diff of this commit:
cvs rdiff -u -r0 -r1.1 pkgsrc/security/mbedtls4/DESCR \
    pkgsrc/security/mbedtls4/Makefile pkgsrc/security/mbedtls4/PLIST \
    pkgsrc/security/mbedtls4/buildlink3.mk pkgsrc/security/mbedtls4/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Added files:

Index: pkgsrc/security/mbedtls4/DESCR
diff -u /dev/null pkgsrc/security/mbedtls4/DESCR:1.1
--- /dev/null   Thu Jan 22 19:29:11 2026
+++ pkgsrc/security/mbedtls4/DESCR      Thu Jan 22 19:29:11 2026
@@ -0,0 +1,7 @@
+mbed TLS (formerly known as PolarSSL) makes it trivially easy for
+developers to include cryptographic and SSL/TLS capabilities in
+their (embedded) products, facilitating this functionality with a
+minimal coding footprint.
+
+This contains major version 4 of the library, which is not backwards
+compatible to version 2 or 3.
Index: pkgsrc/security/mbedtls4/Makefile
diff -u /dev/null pkgsrc/security/mbedtls4/Makefile:1.1
--- /dev/null   Thu Jan 22 19:29:11 2026
+++ pkgsrc/security/mbedtls4/Makefile   Thu Jan 22 19:29:11 2026
@@ -0,0 +1,56 @@
+# $NetBSD: Makefile,v 1.1 2026/01/22 19:29:11 js Exp $
+
+DISTNAME=      mbedtls-4.0.0
+PKGNAME=       ${DISTNAME:S/mbedtls/mbedtls4/}
+CATEGORIES=    security
+MASTER_SITES=  ${MASTER_SITE_GITHUB:=Mbed-TLS/mbedtls/releases/download/mbedtls-${PKGVERSION_NOREV}/}
+EXTRACT_SUFX=  .tar.bz2
+
+MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
+HOMEPAGE=      https://github.com/Mbed-TLS/mbedtls
+COMMENT=       Lightweight, modular cryptographic and SSL/TLS library (4.x branch)
+LICENSE=       apache-2.0 OR gnu-gpl-v2
+
+CONFLICTS+=    mbedtls-[0-9]*
+CONFLICTS+=    mbedtls3-[0-9]*
+CONFLICTS+=    polarssl-[0-9]*
+SUPERSEDES+=   polarssl-[0-9]*
+
+USE_TOOLS+=    pkg-config
+
+GCC_REQD+=     4.4
+
+USE_CC_FEATURES=       c99
+
+CMAKE_CONFIGURE_ARGS+= -Wno-dev
+CMAKE_CONFIGURE_ARGS+= -DUSE_SHARED_MBEDTLS_LIBRARY=ON
+CMAKE_CONFIGURE_ARGS+= -DENABLE_PROGRAMS=ON
+
+# Fails to build full suite on NetBSD due to strange tricks with stdout
+CMAKE_CONFIGURE_ARGS.NetBSD+=  -DENABLE_TESTING=OFF
+
+CMAKE_CONFIGURE_ARGS+= -DMBEDTLS_FATAL_WARNINGS=OFF
+CMAKE_CONFIGURE_ARGS+= -DCMAKE_POLICY_VERSION_MINIMUM=3.5
+
+MAKE_ENV+=     RANLIB=${RANLIB:Q}
+
+LDFLAGS.SunOS+=        -lsocket
+
+PYTHON_FOR_BUILD_ONLY= tool
+
+PYTHON_VERSIONS_INCOMPATIBLE=  27
+
+# Prefix bundled programs so they don't conflict with other packages
+post-install:
+       cd ${DESTDIR}${PREFIX}/bin && for f in *; do \
+               ${MV} "$$f" "mbedtls_$$f"; \
+       done
+
+do-test:
+       LD_LIBRARY_PATH=${WRKSRC}/library \
+           ${WRKSRC}/programs/test/selftest
+
+.include "../../devel/cmake/build.mk"
+.include "../../lang/python/tool.mk"
+.include "../../mk/pthread.buildlink3.mk"
+.include "../../mk/bsd.pkg.mk"
Index: pkgsrc/security/mbedtls4/PLIST
diff -u /dev/null pkgsrc/security/mbedtls4/PLIST:1.1
--- /dev/null   Thu Jan 22 19:29:11 2026
+++ pkgsrc/security/mbedtls4/PLIST      Thu Jan 22 19:29:11 2026
@@ -0,0 +1,167 @@
+@comment $NetBSD: PLIST,v 1.1 2026/01/22 19:29:11 js Exp $
+bin/mbedtls_aead_demo
+bin/mbedtls_cert_app
+bin/mbedtls_cert_req
+bin/mbedtls_cert_write
+bin/mbedtls_crl_app
+bin/mbedtls_crypto_examples
+bin/mbedtls_dtls_client
+bin/mbedtls_dtls_server
+bin/mbedtls_hmac_demo
+bin/mbedtls_key_ladder_demo
+bin/mbedtls_key_ladder_demo.sh
+bin/mbedtls_load_roots
+bin/mbedtls_metatest
+bin/mbedtls_mini_client
+bin/mbedtls_pem2der
+bin/mbedtls_psa_constant_names
+bin/mbedtls_psa_hash
+bin/mbedtls_query_compile_time_config
+bin/mbedtls_query_included_headers
+bin/mbedtls_req_app
+bin/mbedtls_selftest
+bin/mbedtls_ssl_client1
+bin/mbedtls_ssl_client2
+bin/mbedtls_ssl_context_info
+bin/mbedtls_ssl_fork_server
+bin/mbedtls_ssl_mail_client
+bin/mbedtls_ssl_pthread_server
+bin/mbedtls_ssl_server
+bin/mbedtls_ssl_server2
+bin/mbedtls_strerror
+bin/mbedtls_udp_proxy
+bin/mbedtls_zeroize
+include/mbedtls/asn1.h
+include/mbedtls/asn1write.h
+include/mbedtls/base64.h
+include/mbedtls/build_info.h
+include/mbedtls/compat-3-crypto.h
+include/mbedtls/config_adjust_legacy_crypto.h
+include/mbedtls/constant_time.h
+include/mbedtls/debug.h
+include/mbedtls/error.h
+include/mbedtls/lms.h
+include/mbedtls/mbedtls_config.h
+include/mbedtls/md.h
+include/mbedtls/memory_buffer_alloc.h
+include/mbedtls/net_sockets.h
+include/mbedtls/nist_kw.h
+include/mbedtls/oid.h
+include/mbedtls/pem.h
+include/mbedtls/pk.h
+include/mbedtls/pkcs7.h
+include/mbedtls/platform.h
+include/mbedtls/platform_time.h
+include/mbedtls/platform_util.h
+include/mbedtls/private/aes.h
+include/mbedtls/private/aria.h
+include/mbedtls/private/bignum.h
+include/mbedtls/private/block_cipher.h
+include/mbedtls/private/camellia.h
+include/mbedtls/private/ccm.h
+include/mbedtls/private/chacha20.h
+include/mbedtls/private/chachapoly.h
+include/mbedtls/private/cipher.h
+include/mbedtls/private/cmac.h
+include/mbedtls/private/config_adjust_legacy_from_psa.h
+include/mbedtls/private/config_adjust_ssl.h
+include/mbedtls/private/config_adjust_test_accelerators.h
+include/mbedtls/private/config_adjust_x509.h
+include/mbedtls/private/config_psa.h
+include/mbedtls/private/ctr_drbg.h
+include/mbedtls/private/ecdh.h
+include/mbedtls/private/ecdsa.h
+include/mbedtls/private/ecjpake.h
+include/mbedtls/private/ecp.h
+include/mbedtls/private/entropy.h
+include/mbedtls/private/error_common.h
+include/mbedtls/private/gcm.h
+include/mbedtls/private/hmac_drbg.h
+include/mbedtls/private/md5.h
+include/mbedtls/private/pkcs5.h
+include/mbedtls/private/poly1305.h
+include/mbedtls/private/ripemd160.h
+include/mbedtls/private/rsa.h
+include/mbedtls/private/sha1.h
+include/mbedtls/private/sha256.h
+include/mbedtls/private/sha3.h
+include/mbedtls/private/sha512.h
+include/mbedtls/private_access.h
+include/mbedtls/psa_util.h
+include/mbedtls/ssl.h
+include/mbedtls/ssl_cache.h
+include/mbedtls/ssl_ciphersuites.h
+include/mbedtls/ssl_cookie.h
+include/mbedtls/ssl_ticket.h
+include/mbedtls/threading.h
+include/mbedtls/timing.h
+include/mbedtls/version.h
+include/mbedtls/x509.h
+include/mbedtls/x509_crl.h
+include/mbedtls/x509_crt.h
+include/mbedtls/x509_csr.h
+include/psa/crypto.h
+include/psa/crypto_adjust_auto_enabled.h
+include/psa/crypto_adjust_config_dependencies.h
+include/psa/crypto_adjust_config_derived.h
+include/psa/crypto_adjust_config_key_pair_types.h
+include/psa/crypto_adjust_config_synonyms.h
+include/psa/crypto_builtin_composites.h
+include/psa/crypto_builtin_key_derivation.h
+include/psa/crypto_builtin_primitives.h
+include/psa/crypto_compat.h
+include/psa/crypto_config.h
+include/psa/crypto_driver_common.h
+include/psa/crypto_driver_contexts_composites.h
+include/psa/crypto_driver_contexts_key_derivation.h
+include/psa/crypto_driver_contexts_primitives.h
+include/psa/crypto_driver_random.h
+include/psa/crypto_extra.h
+include/psa/crypto_platform.h
+include/psa/crypto_sizes.h
+include/psa/crypto_struct.h
+include/psa/crypto_types.h
+include/psa/crypto_values.h
+include/tf-psa-crypto/build_info.h
+include/tf-psa-crypto/private/everest/everest/Hacl_Curve25519.h
+include/tf-psa-crypto/private/everest/everest/everest.h
+include/tf-psa-crypto/private/everest/everest/kremlib.h
+include/tf-psa-crypto/private/everest/everest/kremlib/FStar_UInt128.h
+include/tf-psa-crypto/private/everest/everest/kremlib/FStar_UInt64_FStar_UInt32_FStar_UInt16_FStar_UInt8.h
+include/tf-psa-crypto/private/everest/everest/kremlin/c_endianness.h
+include/tf-psa-crypto/private/everest/everest/kremlin/internal/builtin.h
+include/tf-psa-crypto/private/everest/everest/kremlin/internal/callconv.h
+include/tf-psa-crypto/private/everest/everest/kremlin/internal/compat.h
+include/tf-psa-crypto/private/everest/everest/kremlin/internal/debug.h
+include/tf-psa-crypto/private/everest/everest/kremlin/internal/target.h
+include/tf-psa-crypto/private/everest/everest/kremlin/internal/types.h
+include/tf-psa-crypto/private/everest/everest/kremlin/internal/wasmsupport.h
+include/tf-psa-crypto/private/everest/everest/vs2013/Hacl_Curve25519.h
+include/tf-psa-crypto/private/everest/everest/x25519.h
+include/tf-psa-crypto/version.h
+lib/cmake/MbedTLS/MbedTLSConfig.cmake
+lib/cmake/MbedTLS/MbedTLSConfigVersion.cmake
+lib/cmake/MbedTLS/MbedTLSTargets-noconfig.cmake
+lib/cmake/MbedTLS/MbedTLSTargets.cmake
+lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoConfig.cmake
+lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoConfigVersion.cmake
+lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoTargets-noconfig.cmake
+lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoTargets.cmake
+lib/libmbedcrypto.a
+lib/libmbedcrypto.so.${PKGVERSION}
+lib/libmbedtls.a
+lib/libmbedtls.so
+lib/libmbedtls.so.22
+lib/libmbedtls.so.${PKGVERSION}
+lib/libmbedx509.a
+lib/libmbedx509.so
+lib/libmbedx509.so.${PKGVERSION}
+lib/libmbedx509.so.8
+lib/libtfpsacrypto.a
+lib/libtfpsacrypto.so
+lib/libtfpsacrypto.so.1
+lib/libtfpsacrypto.so.1.0.0
+lib/pkgconfig/mbedcrypto.pc
+lib/pkgconfig/mbedtls.pc
+lib/pkgconfig/mbedx509.pc
+lib/pkgconfig/tfpsacrypto.pc
Index: pkgsrc/security/mbedtls4/buildlink3.mk
diff -u /dev/null pkgsrc/security/mbedtls4/buildlink3.mk:1.1
--- /dev/null   Thu Jan 22 19:29:11 2026
+++ pkgsrc/security/mbedtls4/buildlink3.mk      Thu Jan 22 19:29:11 2026
@@ -0,0 +1,14 @@
+# $NetBSD: buildlink3.mk,v 1.1 2026/01/22 19:29:11 js Exp $
+
+BUILDLINK_TREE+=       mbedtls4
+
+.if !defined(MBEDTLS3_BUILDLINK3_MK)
+MBEDTLS3_BUILDLINK3_MK:=
+
+BUILDLINK_API_DEPENDS.mbedtls4+=       mbedtls4>=4.0.0
+BUILDLINK_ABI_DEPENDS.mbedtls4?=       mbedtls4>=4.0.0
+BUILDLINK_PKGSRCDIR.mbedtls4?=         ../../security/mbedtls4
+
+.endif # MBEDTLS3_BUILDLINK3_MK
+
+BUILDLINK_TREE+=       -mbedtls4
Index: pkgsrc/security/mbedtls4/distinfo
diff -u /dev/null pkgsrc/security/mbedtls4/distinfo:1.1
--- /dev/null   Thu Jan 22 19:29:11 2026
+++ pkgsrc/security/mbedtls4/distinfo   Thu Jan 22 19:29:11 2026
@@ -0,0 +1,5 @@
+$NetBSD: distinfo,v 1.1 2026/01/22 19:29:11 js Exp $
+
+BLAKE2s (mbedtls-4.0.0.tar.bz2) = d7a973c6eefab652e590f680612b644a6d0c6f1c0d0f7d0d69dc01278620dc66
+SHA512 (mbedtls-4.0.0.tar.bz2) = cc62c99a82f2f85ee4caa6488804648e81358e59f1498b6a97b034114e531bf44b05ae3d50db797ada939b6d4ac90bde29cd2363a36631af9e5fdfef57bfb267
+Size (mbedtls-4.0.0.tar.bz2) = 6342607 bytes