CVS commit: pkgsrc/security

["Taylor R Campbell" <riastradh%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   riastradh
Date:           Mon Oct 26 12:20:31 UTC 2026

Modified Files:
        pkgsrc/security: Makefile
Added Files:
        pkgsrc/security/pkcs11-provider: DESCR Makefile PLIST distinfo

Log Message:
security/pkcs11-provider: Import pkcs11-provider 1.3.0

Quoting from the README:

> This is an OpenSSL 3.x provider to access Hardware and Software
> Tokens using the PKCS#11 Cryptographic Token Interface.  Access to
> tokens depends on loading an appropriate PKCS#11 driver that knows
> how to talk to the specific token.  The PKCS#11 provider is a
> connector that allows OpenSSL to make proper use of such drivers.
> This code targets PKCS#11 version 3.2 but is backwards compatible to
> version 3.1, 3.0 and 2.40 as well.

This can replace the pkcs11 engine for OpenSSL from security/libp11.
`Engines' are the deprecated legacy interface; `providers' are the
modern shiny interface.


To generate a diff of this commit:
cvs rdiff -u -r1.1032 -r1.1033 pkgsrc/security/Makefile
cvs rdiff -u -r0 -r1.1 pkgsrc/security/pkcs11-provider/DESCR \
    pkgsrc/security/pkcs11-provider/Makefile \
    pkgsrc/security/pkcs11-provider/PLIST \
    pkgsrc/security/pkcs11-provider/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/Makefile
diff -u pkgsrc/security/Makefile:1.1032 pkgsrc/security/Makefile:1.1033
--- pkgsrc/security/Makefile:1.1032     Mon Oct 19 08:40:15 2026
+++ pkgsrc/security/Makefile    Mon Oct 26 12:20:30 2026
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.1032 2026/10/19 08:40:15 wiz Exp $
+# $NetBSD: Makefile,v 1.1033 2026/10/26 12:20:30 riastradh Exp $
 #
 
 COMMENT=       Security and cryptography tools and libraries
@@ -453,6 +453,7 @@ SUBDIR+=    pinentry-qt6
 SUBDIR+=       pinepgp
 SUBDIR+=       pius
 SUBDIR+=       pkcs11-helper
+SUBDIR+=       pkcs11-provider
 SUBDIR+=       pks
 SUBDIR+=       plasma6-ksshaskpass
 SUBDIR+=       plasma6-polkit-kde-agent

Added files:

Index: pkgsrc/security/pkcs11-provider/DESCR
diff -u /dev/null pkgsrc/security/pkcs11-provider/DESCR:1.1
--- /dev/null   Mon Oct 26 12:20:31 2026
+++ pkgsrc/security/pkcs11-provider/DESCR       Mon Oct 26 12:20:30 2026
@@ -0,0 +1,7 @@
+This is an OpenSSL 3.x provider to access Hardware and Software Tokens
+using the PKCS#11 Cryptographic Token Interface.  Access to tokens
+depends on loading an appropriate PKCS#11 driver that knows how to talk
+to the specific token.  The PKCS#11 provider is a connector that allows
+OpenSSL to make proper use of such drivers.  This code targets PKCS#11
+version 3.2 but is backwards compatible to version 3.1, 3.0 and 2.40 as
+well.
Index: pkgsrc/security/pkcs11-provider/Makefile
diff -u /dev/null pkgsrc/security/pkcs11-provider/Makefile:1.1
--- /dev/null   Mon Oct 26 12:20:31 2026
+++ pkgsrc/security/pkcs11-provider/Makefile    Mon Oct 26 12:20:30 2026
@@ -0,0 +1,17 @@
+# $NetBSD: Makefile,v 1.1 2026/10/26 12:20:30 riastradh Exp $
+
+DISTNAME=      pkcs11-provider-1.3.0
+CATEGORIES=    security
+MASTER_SITES=  ${MASTER_SITE_GITHUB:=openssl-projects/pkcs11-provider/releases/download/v1.3.0/}
+EXTRACT_SUFX=  .tar.xz
+
+MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
+HOMEPAGE=      https://github.com/openssl-projects/pkcs11-provider
+COMMENT=       OpenSSL provider for PKCS\#11 modules
+LICENSE=       apache-2.0
+
+USE_TOOLS+=    pkg-config
+
+.include "../../devel/meson/build.mk"
+.include "../../security/openssl/buildlink3.mk"
+.include "../../mk/bsd.pkg.mk"
Index: pkgsrc/security/pkcs11-provider/PLIST
diff -u /dev/null pkgsrc/security/pkcs11-provider/PLIST:1.1
--- /dev/null   Mon Oct 26 12:20:31 2026
+++ pkgsrc/security/pkcs11-provider/PLIST       Mon Oct 26 12:20:30 2026
@@ -0,0 +1,3 @@
+@comment $NetBSD: PLIST,v 1.1 2026/10/26 12:20:30 riastradh Exp $
+lib/ossl-modules/pkcs11.so
+man/man7/provider-pkcs11.7
Index: pkgsrc/security/pkcs11-provider/distinfo
diff -u /dev/null pkgsrc/security/pkcs11-provider/distinfo:1.1
--- /dev/null   Mon Oct 26 12:20:31 2026
+++ pkgsrc/security/pkcs11-provider/distinfo    Mon Oct 26 12:20:31 2026
@@ -0,0 +1,5 @@
+$NetBSD: distinfo,v 1.1 2026/10/26 12:20:31 riastradh Exp $
+
+BLAKE2s (pkcs11-provider-1.3.0.tar.xz) = 496732ebac367453eb4181ffc6897f3103b300fbb2a985fcd4b20b269859f411
+SHA512 (pkcs11-provider-1.3.0.tar.xz) = 5a2af2ab09cf8088ea05b07f6feed90b9df57ec6201a64f9c06cde447d3f9faf532a07094b5f62617163374bb03f974d62b11e27b48ba2a83e4459339d32b157
+Size (pkcs11-provider-1.3.0.tar.xz) = 236628 bytes