head 1.35; access; symbols pkgsrc-2023Q4:1.34.0.2 pkgsrc-2023Q4-base:1.34 pkgsrc-2023Q3:1.27.0.2 pkgsrc-2023Q3-base:1.27 pkgsrc-2023Q2:1.26.0.12 pkgsrc-2023Q2-base:1.26 pkgsrc-2023Q1:1.26.0.10 pkgsrc-2023Q1-base:1.26 pkgsrc-2022Q4:1.26.0.8 pkgsrc-2022Q4-base:1.26 pkgsrc-2022Q3:1.26.0.6 pkgsrc-2022Q3-base:1.26 pkgsrc-2022Q2:1.26.0.4 pkgsrc-2022Q2-base:1.26 pkgsrc-2022Q1:1.26.0.2 pkgsrc-2022Q1-base:1.26 pkgsrc-2021Q4:1.24.0.2 pkgsrc-2021Q4-base:1.24 pkgsrc-2021Q3:1.23.0.2 pkgsrc-2021Q3-base:1.23 pkgsrc-2021Q2:1.20.0.2 pkgsrc-2021Q2-base:1.20 pkgsrc-2021Q1:1.19.0.2 pkgsrc-2021Q1-base:1.19 pkgsrc-2020Q4:1.17.0.4 pkgsrc-2020Q4-base:1.17 pkgsrc-2020Q3:1.17.0.2 pkgsrc-2020Q3-base:1.17 pkgsrc-2020Q2:1.16.0.4 pkgsrc-2020Q2-base:1.16 pkgsrc-2020Q1:1.16.0.2 pkgsrc-2020Q1-base:1.16 pkgsrc-2019Q4:1.15.0.4 pkgsrc-2019Q4-base:1.15 pkgsrc-2019Q3:1.14.0.6 pkgsrc-2019Q3-base:1.14 pkgsrc-2019Q2:1.14.0.4 pkgsrc-2019Q2-base:1.14 pkgsrc-2019Q1:1.14.0.2 pkgsrc-2019Q1-base:1.14 pkgsrc-2018Q4:1.13.0.2 pkgsrc-2018Q4-base:1.13 pkgsrc-2018Q3:1.12.0.2 pkgsrc-2018Q3-base:1.12 pkgsrc-2018Q2:1.7.0.2 pkgsrc-2018Q2-base:1.7 pkgsrc-2018Q1:1.5.0.8 pkgsrc-2018Q1-base:1.5 pkgsrc-2017Q4:1.5.0.6 pkgsrc-2017Q4-base:1.5 pkgsrc-2017Q3:1.5.0.4 pkgsrc-2017Q3-base:1.5 pkgsrc-2017Q2:1.4.0.12 pkgsrc-2017Q2-base:1.4 pkgsrc-2017Q1:1.4.0.10 pkgsrc-2017Q1-base:1.4 pkgsrc-2016Q4:1.4.0.8 pkgsrc-2016Q4-base:1.4 pkgsrc-2016Q3:1.4.0.6 pkgsrc-2016Q3-base:1.4 pkgsrc-2016Q2:1.4.0.4 pkgsrc-2016Q2-base:1.4 pkgsrc-2016Q1:1.4.0.2 pkgsrc-2016Q1-base:1.4 pkgsrc-2015Q4:1.2.0.26 pkgsrc-2015Q4-base:1.2 pkgsrc-2015Q3:1.2.0.24 pkgsrc-2015Q3-base:1.2 pkgsrc-2015Q2:1.2.0.22 pkgsrc-2015Q2-base:1.2 pkgsrc-2015Q1:1.2.0.20 pkgsrc-2015Q1-base:1.2 pkgsrc-2014Q4:1.2.0.18 pkgsrc-2014Q4-base:1.2 pkgsrc-2014Q3:1.2.0.16 pkgsrc-2014Q3-base:1.2 pkgsrc-2014Q2:1.2.0.14 pkgsrc-2014Q2-base:1.2 pkgsrc-2014Q1:1.2.0.12 pkgsrc-2014Q1-base:1.2 pkgsrc-2013Q4:1.2.0.10 pkgsrc-2013Q4-base:1.2 pkgsrc-2013Q3:1.2.0.8 pkgsrc-2013Q3-base:1.2 pkgsrc-2013Q2:1.2.0.6 pkgsrc-2013Q2-base:1.2 pkgsrc-2013Q1:1.2.0.4 pkgsrc-2013Q1-base:1.2 pkgsrc-2012Q4:1.2.0.2 pkgsrc-2012Q4-base:1.2 pkgsrc-2012Q3:1.1.1.1.0.6 pkgsrc-2012Q3-base:1.1.1.1 pkgsrc-2012Q2:1.1.1.1.0.4 pkgsrc-2012Q2-base:1.1.1.1 pkgsrc-2012Q1:1.1.1.1.0.2 pkgsrc-2012Q1-base:1.1.1.1 pkgsrc-base:1.1.1.1 TNF:1.1.1; locks; strict; comment @# @; 1.35 date 2024.01.26.03.15.16; author riastradh; state Exp; branches; next 1.34; commitid n33nbfbx5E0cjUVE; 1.34 date 2023.11.27.09.38.16; author jperkin; state Exp; branches; next 1.33; commitid Yu0dqywTT528meOE; 1.33 date 2023.11.23.15.31.39; author jperkin; state Exp; branches; next 1.32; commitid 6KkiBrKYHmzkrKNE; 1.32 date 2023.11.16.12.11.27; author adam; state Exp; branches; next 1.31; commitid hQYuuq2V95jAyPME; 1.31 date 2023.11.16.07.51.41; author mrg; state Exp; branches; next 1.30; commitid c3lIbYhbk0Ys7OME; 1.30 date 2023.11.15.20.47.45; author wiz; state Exp; branches; next 1.29; commitid iB4zVQ6U1BdJrKME; 1.29 date 2023.11.15.20.46.28; author wiz; state Exp; branches; next 1.28; commitid b6gts5oNxKjirKME; 1.28 date 2023.11.09.19.45.46; author nia; state Exp; branches; next 1.27; commitid tRYxYjxEzK1qiYLE; 1.27 date 2023.07.05.20.02.42; author wiz; state Exp; branches; next 1.26; commitid zUkaAWE9YjxltEvE; 1.26 date 2022.02.07.08.05.05; author wiz; state Exp; branches; next 1.25; commitid lx2SoAyLG12rZErD; 1.25 date 2022.01.23.22.17.51; author wiz; state Exp; branches; next 1.24; commitid bpM9adfU8RAUbOpD; 1.24 date 2021.12.08.16.02.34; author adam; state Exp; branches; next 1.23; commitid 2PyWjHx5T8rqARjD; 1.23 date 2021.08.24.15.07.28; author manu; state Exp; branches; next 1.22; commitid JjoPSWy5o9G1He6D; 1.22 date 2021.08.19.12.56.22; author manu; state Exp; branches; next 1.21; commitid k990v5EiXzDM7A5D; 1.21 date 2021.07.03.21.02.45; author thor; state Exp; branches; next 1.20; commitid V4ZwD5RQWoFtkAZC; 1.20 date 2021.06.10.10.20.50; author wiz; state Exp; branches; next 1.19; commitid r0spxnbBb21mwzWC; 1.19 date 2021.01.08.21.09.08; author triaxx; state Exp; branches; next 1.18; commitid zzpjOzKuBc5z0YCC; 1.18 date 2021.01.04.11.43.47; author wiz; state Exp; branches; next 1.17; commitid coGIYeMnK5aI1pCC; 1.17 date 2020.09.09.07.29.29; author wiz; state Exp; branches 1.17.4.1; next 1.16; commitid XyCjySrIKHDDnlnC; 1.16 date 2020.03.08.16.42.30; author bsiegert; state Exp; branches; next 1.15; commitid zwKxhaUg2qJlnCZB; 1.15 date 2019.11.04.21.12.56; author rillig; state Exp; branches; next 1.14; commitid G51T39p39YNQTzJB; 1.14 date 2019.03.24.18.03.54; author ryoon; state Exp; branches; next 1.13; commitid 1QPISxdtrC5u5EgB; 1.13 date 2018.12.12.22.29.36; author leot; state Exp; branches; next 1.12; commitid 4r01oPaTzcQDPy3B; 1.12 date 2018.09.05.08.34.10; author prlw1; state Exp; branches; next 1.11; commitid 3wtEzVcCGP1wmTQA; 1.11 date 2018.09.02.07.49.51; author tnn; state Exp; branches; next 1.10; commitid Yp34TJ6v0cu1dvQA; 1.10 date 2018.08.19.05.00.41; author wiz; state Exp; branches; next 1.9; commitid lXYIQB3Ga8EfJGOA; 1.9 date 2018.07.13.11.21.29; author prlw1; state Exp; branches; next 1.8; commitid YlgsR7xECfUT0YJA; 1.8 date 2018.07.06.15.33.39; author prlw1; state Exp; branches; next 1.7; commitid j0pQbrGKlNLXD5JA; 1.7 date 2018.04.18.00.46.25; author schmonz; state Exp; branches; next 1.6; commitid gj5PCKnT1RQ6hRyA; 1.6 date 2018.04.17.13.26.15; author wiz; state Exp; branches; next 1.5; commitid jySio2yKId5GvNyA; 1.5 date 2017.08.24.14.50.19; author jperkin; state Exp; branches; next 1.4; commitid 1skNaKZ1p1BLyt4A; 1.4 date 2016.04.04.17.34.56; author joerg; state Exp; branches; next 1.3; commitid lmsG6UNqEFxJLk1z; 1.3 date 2016.03.13.03.10.36; author ryoon; state Exp; branches; next 1.2; commitid vFz8VViB93Q7HqYy; 1.2 date 2012.10.23.18.16.39; author asau; state Exp; branches; next 1.1; 1.1 date 2012.02.03.14.43.12; author drochner; state Exp; branches 1.1.1.1; next ; 1.17.4.1 date 2021.01.04.17.27.43; author bsiegert; state Exp; branches; next 1.17.4.2; commitid vy1VQVbyS96IVqCC; 1.17.4.2 date 2021.01.27.19.40.46; author spz; state Exp; branches; next ; commitid Tknc6LwdZ4IwVoFC; 1.1.1.1 date 2012.02.03.14.43.12; author drochner; state Exp; branches; next ; desc @@ 1.35 log @security/p11-kit: Needs libtasn1 asn1Parser at build-time as tool. Fixes cross-build. @ text @# $NetBSD: Makefile,v 1.34 2023/11/27 09:38:16 jperkin Exp $ DISTNAME= p11-kit-0.25.3 CATEGORIES= security MASTER_SITES+= ${MASTER_SITE_GITHUB:=p11-glue/} GITHUB_RELEASE= ${PKGVERSION_NOREV} EXTRACT_SUFX= .tar.xz MAINTAINER= pkgsrc-users@@NetBSD.org HOMEPAGE= https://p11-glue.freedesktop.org/p11-kit.html COMMENT= PKCS\#11 module manager LICENSE= modified-bsd TOOL_DEPENDS+= ${BUILDLINK_API_DEPENDS.libtasn1:=:../../security/libtasn1} DEPENDS+= mozilla-rootcerts>=1.0.20150804nb1:../../security/mozilla-rootcerts MESON_ARGS+= -Dtrust_paths=${PREFIX}/share/mozilla-rootcerts/cacert.pem USE_CC_FEATURES= c99 USE_FEATURES+= strndup strnlen USE_LANGUAGES= c USE_TOOLS+= msgfmt pkg-config readlink # dirfd(3) CFLAGS.NetBSD+= -D_NETBSD_SOURCE # reallocarray(3) CFLAGS.NetBSD+= -D_OPENBSD_SOURCE CFLAGS.SunOS+= -D_POSIX_PTHREAD_SEMANTICS -D__EXTENSIONS__ LDFLAGS.SunOS+= -lsocket -lnsl DLEXT.dylib= dylib DLEXT= ${DLEXT.${SHLIB_TYPE}:Uso} PLIST_SUBST+= DLEXT=${DLEXT:Q} TEST_ENV+= LD_LIBRARY_PATH=${WRKSRC}/output/p11-kit:${WRKSRC}/output/trust PKGCONFIG_OVERRIDE+= p11-kit/p11-kit-1.pc.in CONF_FILES+= share/examples/p11-kit/pkcs11.conf.example \ ${PKG_SYSCONFDIR}/pkcs11.conf INSTALLATION_DIRS+= share/examples/p11-kit post-install: ${MV} ${DESTDIR}${PKG_SYSCONFDIR}/pkcs11/pkcs11.conf.example \ ${DESTDIR}${PREFIX}/share/examples/p11-kit .include "../../devel/gettext-lib/buildlink3.mk" .include "../../devel/libffi/buildlink3.mk" .include "../../devel/meson/build.mk" .include "../../security/libtasn1/buildlink3.mk" .include "../../mk/bsd.pkg.mk" @ 1.34 log @p11-kit: Requires msgfmt. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.33 2023/11/23 15:31:39 jperkin Exp $ d14 2 @ 1.33 log @p11-kit: SunOS needs -D__EXTENSIONS__. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.32 2023/11/16 12:11:27 adam Exp $ d21 1 a21 1 USE_TOOLS+= pkg-config readlink @ 1.32 log @p11-kit: updated to 0.25.3 0.25.3 (stable) * rpc: fix serialization of NULL mechanism pointer * fix meson build failure in macOS (appleframeworks not found) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.31 2023/11/16 07:51:41 mrg Exp $ d29 1 a29 1 CFLAGS.SunOS+= -D_POSIX_PTHREAD_SEMANTICS @ 1.31 log @use PKG_SYSCONFDIR instead of PREFIX/usr. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.30 2023/11/15 20:47:45 wiz Exp $ d3 1 a3 1 DISTNAME= p11-kit-0.25.2 a4 1 #MASTER_SITES= http://p11-glue.freedesktop.org/releases/ d18 2 a20 1 USE_CC_FEATURES= c99 a21 1 USE_FEATURES+= strndup strnlen d46 1 a46 1 mv ${DESTDIR}${PKG_SYSCONFDIR}/pkcs11/pkcs11.conf.example \ d49 1 a51 1 .include "../../devel/gettext-lib/buildlink3.mk" @ 1.30 log @p11-kit: update to 0.25.2. 0.25.2 (stable) * fix error code checking of readpassphrase for --login option [PR#595] * build fixes [PR#594] * test fixes [PR#596] 0.25.1 (stable) * fix probing of C_GetInterface [PR#535] * p11-kit: add command to list tokens [PR#581] * p11-kit: add command to list mechanisms supported by a token [PR#576] * p11-kit: add command to generate private-public keypair on a token [PR#551, PR#582] * p11-kit: add commands to import/export certificates and public keys into/from a token [PR#543, PR#549, PR#568, PR#588] * p11-kit: add commands to list and delete objects of a token [PR#533, PR#544, PR#571] * p11-kit: add --login option to login into a token with object and profile management commands [PR#587] * p11-kit: adjust behavior of PKCS#11 profile management commands [PR#558, PR#560, PR#583, PR#591] * p11-kit: print PKCS#11 URIs in list-modules [PR#532] * bug and build fixes [PR#528 PR#529, PR#534, PR#537, PR#540, PR#541, PR#545, PR#547, PR#550, PR#557, PR#572, PR#575, PR#579, PR#585, PR#586, PR#590] * test fixes [PR#553, PR#580] @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.29 2023/11/15 20:46:28 wiz Exp $ d47 1 a47 1 mv ${DESTDIR}${PREFIX}/etc/pkcs11/pkcs11.conf.example \ @ 1.29 log @p11-kit: convert to meson Bump PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.28 2023/11/09 19:45:46 nia Exp $ d3 1 a3 2 DISTNAME= p11-kit-0.25.0 PKGREVISION= 1 @ 1.28 log @p11-kit: Set USE_FEATURES. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.27 2023/07/05 20:02:42 wiz Exp $ d4 1 d18 1 a18 1 CONFIGURE_ARGS+= --with-trust-paths=${PREFIX}/share/mozilla-rootcerts/cacert.pem d20 4 a23 7 GNU_CONFIGURE= yes USE_LANGUAGES= c99 USE_LIBTOOL= yes USE_TOOLS+= pkg-config readlink USE_FEATURES+= strndup strnlen TEST_TARGET= check d38 2 a41 1 PKG_SYSCONFSUBDIR= pkcs11 d52 1 @ 1.27 log @p11-kit: update to 0.25.0. 0.25.0 (stable) * add PKCS#11 3.0 support [PR#458, PR#461, PR#462, PR#463, PR#464, PR#467, PR#469, PR#470, PR#475, PR#485, PR#486] * add support for profile objects [PR#479] * add ability to adjust module and config paths at run-time via system environmental exports [PR#442] * make terminal output nicer [PR#509, PR#510] * p11-kit: add command to print merged configuration [PR#446, PR#489] * p11-kit: add commands to list, add and delete profiles of a token [PR#500, PR#503, PR#506] * trust: add command to check format of .p11-kit files [PR#476, PR#483] * virtual: fix libffi type signatures for PKCS#11 3.0 functions [PR#492] * server: fix umask setting when --group is specified [PR#478] * server: check SHELL only when neither --sh nor --csh is specified [PR#438] * rpc: use space string in C_InitToken [PR#514] * rpc: fix two off-by-one errors identified by asan [PR#456] * modules: make logging message more translatable [PR#436] * pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms [PR#421] * pkcs11.h: add IBM specific mechanism and attributes [PR#415] * pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms [PR#487] * pkcs11.h: add AES-GCM mechanism parameters for message-based encryption [PR#481] * po: update translations from Transifex [PR#439] * bug and build fixes [PR#412, PR#414, PR#417, PR#418, PR#420, PR#426, PR#427, PR#428, PR#448, PR#451, PR#459, PR#496, PR#505, PR#511, PR#512, PR#513, PR#516, PR#517, PR#524, PR#521] * test fixes [PR#424, PR#441, PR#444, PR#443, PR#460, PR#472, PR#474, PR#465, PR#473, PR#487, PR#499, PR#519, PR#525, PR#526] @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.26 2022/02/07 08:05:05 wiz Exp $ d23 1 @ 1.26 log @p11-kit: add readlink to tools From Claes Nästén in PR 56697 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.25 2022/01/23 22:17:51 wiz Exp $ d3 1 a3 1 DISTNAME= p11-kit-0.24.1 @ 1.25 log @p11-kit: update to 0.24.1. 0.24.1 (stable) * rpc: Support protocol version negotiation [PR#371, PR#385] * proxy: Support copying attribute array recursively [PR#368] * Link libp11-kit so that it cannot unload [PR#383] * Translation improvements [PR#381] * Build fixes [PR#372, PR#373, PR#375, PR#377, PR#384, PR#407] @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.24 2021/12/08 16:02:34 adam Exp $ d22 1 a22 1 USE_TOOLS+= pkg-config @ 1.24 log @revbump for icu and libffi @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.23 2021/08/24 15:07:28 manu Exp $ d3 1 a3 2 DISTNAME= p11-kit-0.24.0 PKGREVISION= 4 d45 6 @ 1.23 log @Only use -z nodelete linker flag if it is available. This should fix the build on platforms that do not use GNU ld such as MacOSX. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.22 2021/08/19 12:56:22 manu Exp $ d4 1 a4 1 PKGREVISION= 3 @ 1.22 log @Prevent dynamic unload of libp11-kit.so The library sets up a pthread_atfork() hook. If we let be unload, we get a callback to stale memory. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.21 2021/07/03 21:02:45 thor Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.21 log @security/p11-kit: make gettext-lib dependency explicit It uses gettext, libintl. Enough said. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.20 2021/06/10 10:20:50 wiz Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.20 log @p11-kit: update to 0.24.0. 0.24.0 (stable) * Use inclusive language on certificate distrust. Note: This changes the directory and attribute names to distrust certain CAs to "blocklist" [PR#324] * Fix issues spotted by coverity and ASan [PR#349, PR#351] * Integrate gettext with tools more tightly [PR#358] * rpc: Forbid use of array of attributes [PR#365, PR#367] * Build fixes [PR#342, PR#344, PR#345, PR#353, PR#362, PR#364] @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.19 2021/01/08 21:09:08 triaxx Exp $ d4 1 d47 1 @ 1.19 log @p11-kit: Fix build on FreeBSD The build step failed on FreeBSD due to undeclared SIZE_MAX. This error has been fixed upstream (https://github.com/p11-glue/p11-kit/commit/507c394) and the patch could be removed at the next update. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.18 2021/01/04 11:43:47 wiz Exp $ d3 1 a3 2 DISTNAME= p11-kit-0.23.22 PKGREVISION= 1 @ 1.18 log @p11-kit: update to 0.23.22. 0.23.22 (stable) * Fix memory-safety issues that affect the RPC protocol (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered and fixed by David Cook * anchor: Prefer persistent format when storing anchor [PR#329] * common: Fix infloop in p11_path_build [PR#326, PR#327] * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325] * common: Check for a NULL locale before freeing it [PR#321] * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323, PR#330, PR#333, PR#334, PR#335, PR#338, PR#339] @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.17 2020/09/09 07:29:29 wiz Exp $ d4 1 @ 1.17 log @p11-kit: update to 0.23.21. 0.23.21 (stable) * proxy: Do not assign duplicate slot IDs [PR#282] * common: Get program name based on executable path if possible [PR#307] * anchor: Exit with non-zero code, if any error occurs [PR#304] * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299, PR#305, PR#306, PR#309, PR#311] 0.23.20 (stable) * Revert "Fix RPC when length-s are 0" changes [PR#276] 0.23.19 (stable) * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255] * Add simple bash completion for provided commands [PR#258] * Unbreak list matching in enable-in and disable-in [PR#262] * Fix RPC when length-s are 0 [PR#259] * rpc: Add vsock transport support [PR#270] * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265] * Build fixes [PR#271, PR#272, PR#273, ...] 0.23.18 (stable) * rpc: Allow empty CK_DATE value [PR#253] * build: Meson fixes [PR#245] * build: Adjust feature parity between meson and autotools [PR#247] 0.23.17 (stable) * common: Fix uClibc-ng compilation [PR#237] * trust: do not allow daylight to invalidate date validation [PR#236] * build: Port to meson build system [PR#231, PR#234] * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232] * doc: Add 'server' command in help [PR#229] * Build and test fixes [PR#230] 0.23.16 (stable) * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225] * conf: Ignore user configuration if the program is running as root [PR#226] * proxy: Refresh slot list on every C_GetSlotList call [PR#224] * modules: Fix index used in call to p11_dict_remove() [PR#219] * Fix Win32 p11_dl_error crash [PR#218] * modules: check gl.modules before iterates on it when freeing [PR#217] * trust: Ignore unreadable content in anchors [PR#215] * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213] @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.16 2020/03/08 16:42:30 bsiegert Exp $ d3 1 a3 1 DISTNAME= p11-kit-0.23.21 @ 1.17.4.1 log @Pullup ticket #6390 - requested by wiz security/p11-kit: security fix Revisions pulled up: - security/p11-kit/Makefile 1.18 - security/p11-kit/distinfo 1.13 --- Module Name: pkgsrc Committed By: wiz Date: Mon Jan 4 11:43:48 UTC 2021 Modified Files: pkgsrc/security/p11-kit: Makefile distinfo Log Message: p11-kit: update to 0.23.22. 0.23.22 (stable) * Fix memory-safety issues that affect the RPC protocol (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered and fixed by David Cook * anchor: Prefer persistent format when storing anchor [PR#329] * common: Fix infloop in p11_path_build [PR#326, PR#327] * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325] * common: Check for a NULL locale before freeing it [PR#321] * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323, PR#330, PR#333, PR#334, PR#335, PR#338, PR#339] @ text @d1 1 a1 1 # $NetBSD$ d3 1 a3 1 DISTNAME= p11-kit-0.23.22 @ 1.17.4.2 log @Pullup ticket #6414 - requested by sborrill security/p11-kit: build fix for FreeBSD Revisions pulled up: - security/p11-kit/Makefile 1.19 - security/p11-kit/distinfo 1.14 - security/p11-kit/patches/patch-p11-kit_lists.c 1.1 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: triaxx Date: Fri Jan 8 21:09:08 UTC 2021 Modified Files: pkgsrc/security/p11-kit: Makefile distinfo Added Files: pkgsrc/security/p11-kit/patches: patch-p11-kit_lists.c Log Message: p11-kit: Fix build on FreeBSD The build step failed on FreeBSD due to undeclared SIZE_MAX. This error has been fixed upstream (https://github.com/p11-glue/p11-kit/commit/507c394) and the patch could be removed at the next update. To generate a diff of this commit: cvs rdiff -u -r1.18 -r1.19 pkgsrc/security/p11-kit/Makefile cvs rdiff -u -r1.13 -r1.14 pkgsrc/security/p11-kit/distinfo cvs rdiff -u -r0 -r1.1 pkgsrc/security/p11-kit/patches/patch-p11-kit_lists.c @ text @a3 1 PKGREVISION= 1 @ 1.16 log @Revbump packages depending on libffi after .so version change. Requested by Matthias Ferdinand and Oskar on pkgsrc-users. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.15 2019/11/04 21:12:56 rillig Exp $ d3 1 a3 2 DISTNAME= p11-kit-0.23.15 PKGREVISION= 1 d8 1 @ 1.15 log @security: align variable assignments pkglint -Wall -F --only aligned --only indent -r No manual corrections. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14 2019/03/24 18:03:54 ryoon Exp $ d4 1 @ 1.14 log @Update to 0.23.15 Changelog: trust: Improve error handling if backed trust file is corrupted [#206] url: Prefer upper-case letters in hex characters when encoding [#193] trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [#202] virtual: Prefer fixed closures to libffi closures [#196] Fix issues spotted by coverity and cppcheck [#194, #204] Build and test fixes [#164, #191, #199, #201] @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.13 2018/12/12 22:29:36 leot Exp $ d40 3 a42 3 PKG_SYSCONFSUBDIR= pkcs11 CONF_FILES+= share/examples/p11-kit/pkcs11.conf.example \ ${PKG_SYSCONFDIR}/pkcs11.conf @ 1.13 log @p11-kit: Use `+=' to append to DEPENDS (not `=') (NFC) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.12 2018/09/05 08:34:10 prlw1 Exp $ d3 1 a3 1 DISTNAME= p11-kit-0.23.14 @ 1.12 log @Update p11-kit to 0.23.14 0.23.14 (stable) * proxy: Avoid invalid memory access when unloading proxy module [PR#180] * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181] * build: Restore libpthread dependency [PR#183] * Build fixes [PR#188] @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.11 2018/09/02 07:49:51 tnn Exp $ d14 1 a14 1 DEPENDS= mozilla-rootcerts>=1.0.20150804nb1:../../security/mozilla-rootcerts @ 1.11 log @p11-kit: Hide getauxval(). PR pkg/53387 (related to port-arm/53386) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.10 2018/08/19 05:00:41 wiz Exp $ d3 1 a3 2 DISTNAME= p11-kit-0.23.13 PKGREVISION= 1 @ 1.10 log @p11-kit: update to 0.23.13. 0.23.13 (stable) * server: Enable socket activation through systemd [PR#173] * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules [PR#174] * proxy: Fail early if there is no slot mapping [PR#175] * Remove hard dependency on libpthread on glibc systems [PR#177] * Build fixes [PR#170, PR#176] @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.9 2018/07/13 11:21:29 prlw1 Exp $ d4 1 @ 1.9 log @reallocarray exists in NetBSD's libc, so AC_CHECK_LIB will find it. For some reason it is hidden in stdlib.h by _OPENBSD_SOURCE, so add that to p11-kit's Makefile to avoid coredumps. Fixes PR pkg/53426. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.8 2018/07/06 15:33:39 prlw1 Exp $ d3 1 a3 2 DISTNAME= p11-kit-0.23.12 PKGREVISION= 1 d23 2 @ 1.8 log @Update p11-kit to 0.23.12 0.23.12 (stable) * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160] * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167] * Build and test fixes on macOS [PR#162, PR#168] 0.23.11 (stable) * trust: Add extractor for edk2/cacerts.bin [PR#139] * modules: Add option to control module visibility from proxy [PR#140] * trust: Prevent trust module being loaded by proxy module [PR#142] * library: Use dedicated locale object for printing error [PR#148] * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134] * Improve const correctness for P11KitUri [PR#152] * PKCS#11 URI scheme comparison is now case insensitive [PR#156] * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135] @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.7 2018/04/18 00:46:25 schmonz Exp $ d4 1 d27 3 @ 1.7 log @Fix PLIST on Darwin. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.6 2018/04/17 13:26:15 wiz Exp $ d3 1 a3 1 DISTNAME= p11-kit-0.23.10 @ 1.6 log @p11-kit: update to 0.23.10. This is a development release, but gnutls needs at least 0.23.x, so take the latest development release. 0.23.10 (devel) * filter: Respect "write-protected" vendor-specific attribute in PKCS#11 URI [PR#129] * server: Improve shell integration and documentation [PR#107, PR#108] * proxy: Reuse existing slot ID mapping in after fork() [PR#120] * trust: Forcibly mark "Default Trust" read-only [PR#123] * New function p11_kit_override_system_files() which can be used for testing [PR#110] * trust: Filter out duplicate extensions [PR#69] * Update translations [PR#128] * Bug fixes [PR#125, PR#126] 0.23.9 (devel) * Fix p11-kit server regressions [PR#103, PR#104] * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99] * Build fixes related to reallocarray [PR#96, PR#98, PR#100] 0.23.8 (devel) * Improve vendor query attributes handling in PKCS#11 URI [PR#92] * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91] * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user configurations [PR#87] * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86] 0.23.7 (devel) * Fix memory issues with "p11-kit server" [PR#78] * Build fixes [PR#77 ...] 0.23.6 (devel) * Port "p11-kit server" to Windows and portability fixes of the RPC protocol [PR#67, PR#72, PR#74] * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71] * Build fixes [PR#63 ...] 0.23.5 (devel) * Fix license notice of common/unix-peer.c [PR#58] * Remove systemd unit files for now [PR#60] * Build fixes for FreeBSD [PR#56] 0.23.4 (devel) * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31, PR#37, PR#52] * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY attribute, used by Firefox [#99453, PR#46] * Add 'trust dump' command to dump all PKCS#11 objects in the persistence format [PR#44] * New experimental 'p11-kit server' command that allows PKCS#11 forwarding through a Unix domain socket. A client-side module p11-kit-client.so is also provided [PR#15] * Add systemd unit files for exporting the proxy module through a Unix domain socket [PR#35] * New P11KitIter API to iterate over slots, tokens, and modules in addition to objects [PR#28] * libffi dependency is now optional [PR#9] * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45] 0.23.3 (devel) * Install private executables in libexecdir [#98817] * Fix link error of proxy module on macOS [#98022] * Use new PKCS#11 URI specification for URIs [#97245] * Support x-init-reserved argument of C_Initialize() in remote modules [#80519] * Incorporate changes from PKCS#11 2.40 specification * Bump libtool library version * Documentation fixes * Build fixes [#87192 ...] 0.23.2 (devel) * Fix forking issues with libffi [#90289 ...] * Updated translations * Build fixes [#90827 #89081 #92434 #92520 #92445 #92551 #92843 #92842 #92807 #93211 ...] 0.23.1 (devel) * Use new PKCS#11 URI draft fields for URIs [#86474 #87582] * Add pem-directory-hash extract format * Build fixes @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 2017/08/24 14:50:19 jperkin Exp $ d29 4 @ 1.5 log @Fix build on SunOS. From Thomas Merkel in NetBSD/pkgsrc#13. @ text @d1 1 a1 2 # $NetBSD: Makefile,v 1.4 2016/04/04 17:34:56 joerg Exp $ # d3 1 a3 2 DISTNAME= p11-kit-0.22.1 PKGREVISION= 1 d5 3 a7 1 MASTER_SITES= http://p11-glue.freedesktop.org/releases/ d11 1 a11 1 COMMENT= PKCS#11 module manager @ 1.4 log @Explicitly depend on the mozilla CA list for providing a trust anchor. NetBSD doesn't ship a CA bundle by default. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2016/03/13 03:10:36 ryoon Exp $ d19 1 d26 3 @ 1.3 log @Update to 0.22.1 Changelog: 0.22.1 (stable) * Use SubjectKeyIdentifier for CKA_ID when available [#84761] * Allow 'BEGIN PuBLIC KEY' PEM blocks in .p11-kit files * Bump libtool library version * Build fixes [#84665 ...] 0.22.0 (stable) * Remove the 'isolated = yes' option due to unclear semantics replacement forth coming in later versions. * Use secure_getenv() where necessary * Run separate binary for 'p11-kit remote' command 0.21.3 (unstable) * New public pkcs11x.h header containing extensions [#83495] * Export necessary defines to lookup attached extensions [#83495] * Use term 'attached extensions' rather than 'stabled extensions' * Make proxy module respect 'critical = no' [#83651] * Show public-key-info in 'trust list --details' * Build fixes [#75674 ...] 0.21.2 (unstable) * Don't use invalid keys for looking up stapled extensions [#82328] * Better error messages when invalid certificate extensions * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files * Fix some leaks, and memory issues * Silence some clang scanner warnings * Fix build against older pthread implementations [#82617] * Move to a non-recursive Makefile * Can now specify which tests to run on command line 0.21.1 (unstable) * Add new 'isolate' pkcs11 config option [#80472] * Add 'p11-kit remote' command for isolating modules [#54105] * Don't complain about C_Finalize after a fork * Other minor fixes 0.20.3 (stable) * Fix problems reinitializing managed modules after fork * Fix bad bookeeping when fail initializing one of the modules * Fix case where module would be unloaded while in use [#74919] * Remove assertions when module used before initialized [#74919] * Fix handling of mmap failure and mapping empty files [#74773] * Stable p11_kit_be_quiet() and p11_kit_be_loud() functions * Require automake 1.12 or later * Build fixes for Windows [#76594 #74149] 0.20.2 (stable) * Fix bug where blacklist didn't affect extracted ca-anchors if the anchor and blacklist were not in the same trust path (regression) [#73558] * Check for race in BasicConstraints stapled extension [#69314] * autogen.sh now runs configure as srcdir != builddir by default * Build fixes and cleanup 0.20.1 (stable) * Extract compat trust data after we've changes * Skip compat extraction if running as non-root * Better failure messages when removing anchors * Build cleanup 0.20.0 (stable) * Doc fixes 0.19.4 (unstable) * 'trust anchor' now adds/removes certificate anchors * 'trust list' lists trust policy stuff * 'p11-kit extract' is now 'trust extract' * 'p11-kit extract-trust' is now 'trust extract-compat' * Workarounds for working on broken zfsonlinux.org [#68525] * Add --with-module-config parameter to the configure script [#68122] * Add support for removing stored PKCS#11 objects in trust module * Various debugging tweaks 0.19.3 (unstable) * Fix up problems with automake testing * Fix a bunch of memory leaks in newly refactored code * Don't use _GNU_SOURCE and the unportability it brings * Testing fixes 0.19.2 (unstable) * Add basic 'trust anchor' command to store a new anchor * Support for writing out trust token objects * Port to use CKA_PUBLIC_KEY_INFO and updated trust store spec * Add option to use freebl for hashing * Implement reloading of token data * Fix warnings and possible minor bugs higlighted by code scanners * Don't load configs in home directories when running setuid or setgid * Support treating ~/.config as $XDG_CONFIG_HOME * Use $XDG_DATA_HOME/pkcs11 as default user config directory * Use $TMPDIR instead of $TEMP while testing * Open files and fds with O_CLOEXEC * Abort initialization if a critical module fails to load * Don't use thread-unsafe functions: strerror, getpwuid * Fix p11_kit_space_strlen() result when empty string * Refactoring of where various components live * Build fixes 0.19.1 (unstable) * Refactor API to be able to handle managed modules * Deprecate much of old p11-kit API * Implement concept of managed modules * Make C_CloseAllSessions function work for multiple callers * New dependency on libffi * Fix possible threading problems reported by hellgrind * Add log-calls option * Mark p11_kit_message() as a stable function * Use our own unit testing framework 0.18.3 (stable) * Fix reinitialization of trust module [#65401] * Fix crash in trust module C_Initialize * Mac OS fixes [#57714] 0.18.2 (stable) * Build fixes [#64378 ...] 0.18.1 (stable) * Put the external tools in $libdir/p11-kit * Documentation build fixes 0.18.0 (stable) * Fix use of trust module with gcr and empathy [#62896] * Further tweaks to trust module date parsing * Fix unaligned memory reads [#62819] * Win32 fixes [#63062, #63046] * Debug and logging tweaks [#62874] * Other build fixes 0.17.5 (unstable) * Don't try to guess at overflowing time values on 32-bit systems [#62825] * Test fixes [#927394] 0.17.4 (unstable) * Check for duplicate certificates in a token, warn and discard [#62548] * Implement a proper index so we have decent load performance 0.17.3 (unstable) * Use descriptive labels for the trust module tokens [#62534] * Remove the temporary built in distrust objects * Make extracted output directories and files read-only [#61898] * Don't export unneccessary ABI * Build fixes [#62479] 0.17.2 (unstable) * Fix build on 32-bit linux * Fix several crashers 0.17.1 (unstable) * Support a p11-kit specific PKCS#11 attribute persistance format [#62156] * Use the SHA1 hash of SPKI as the CKA_ID in the trust module by default [#62329] * Refactor a trust builder which builds objects out of parsed data [#62329] * Combine trust policy when extracting certificates [#61497] * The extract --comment option adds comments to PEM bundles [#62029] * A new 'priority' config option for ordering modules [#61978] * Make each configured path its own trust module token [#61499] * Use --with-trust-paths to configure trust module [#62327] * Fix bug decoding some PEM files * Better debug output for trust module lookups * Work around bug in NSS when doing serial number lookups * Work around broken strndup() function in firefox * Fix the nickname for the distrusted attribute * Build fixes 0.16.4 (stable) * Display per command help again [#62153] * Don't always print tools debug output [#62152] 0.16.3 (stable) * When iterating don't skip tokens without the CKF_TOKEN_INITIALIZED flag * Hardcode some distrust records for NSS temporarily * Parse global options better in the p11-kit command * Better debugging 0.16.2 (stable) * Fix regression in 'p11-kit extract --purpose' option [#62009] * Documentation updates * Build fixes [#62001, ...] 0.16.1 (stable) * Don't break when cA field of BasicConstraints is missing [#61975] * Documentation fixes and updates * p11-kit extract-trust is a placeholder script now 0.16.0 (stable) * Update the pkcs11.h header for new mechanisms * Fix build and tests on mingw64 (ie: win32) * Relicense LGPL code to BSD license * Documentation tweaks * Pull translations from Transifex [#60792] * Build fixes [#61739, #60894, #61740] 0.15.2 (unstable) * Add German and Finish translations * Better define the libtasn1 dependency * Crasher and bug fixes * Build fixes 0.15.1 (unstable) * Fix some memory leaks * Add a location for packages to drop module configs * Documentation updates and fixes * Add command line tool manual page * Remove unused err() function and friends * Move more code into common/ directory and refactor * Add a system trust policy module * Refactor how the p11-kit command line tool works * Add p11-kit extract and extract-trust commands * Don't complain if we cannot access ~/.pkcs11/pkcs11.conf * Refuse to load the p11-kit-proxy.so as a registered module * Don't fail initialization if last initialized module fails 0.14 * Change default for user-config to merge * Always URI-encode the 'id' attribute in PKCS#11 URIs * Expect a .module extension on module configs * Windows compatibility fixes * Testing fixes * Build fixes 0.13 * Don't allow reading of PIN files larger than 4096 bytes * If a module is not marked as critical then ignore init failure * Use preconditions to check for input problems and out of memory * Add enable-in and disable-in options to module config * Fix the flags in pin.h * Use gcc extensions to check varargs during compile * Fix crasher when a duplicate module is present * Fix broken hashmap behavior * Testing fixes * Win32 build fixes * 'p11-kit -h' now works * Documentation fixes 0.12 * Build fix 0.11 * Remove automatic reinitialization of PKCS#11 after fork @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2 2012/10/23 18:16:39 asau Exp $ d5 1 d14 4 @ 1.2 log @Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1.1.1 2012/02/03 14:43:12 drochner Exp $ d4 1 a4 1 DISTNAME= p11-kit-0.10 d9 1 a9 1 HOMEPAGE= http://p11-glue.freedesktop.org/ d15 4 d26 2 @ 1.1 log @Initial revision @ text @d1 1 a1 1 # $NetBSD$ a12 2 PKG_DESTDIR_SUPPORT= user-destdir @ 1.1.1.1 log @add p11-kit-0.10, a PKCS#11 module manager, needed by gnome3 components @ text @@