CVS commit: pkgsrc/security/openssl

[Tobias Nygren <tnn%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tnn
Date:           Thu Jan 17 06:42:52 UTC 2008

Modified Files:
        pkgsrc/security/openssl: DESCR Makefile PLIST.common PLIST.darwin
            buildlink3.mk builtin.mk distinfo options.mk
        pkgsrc/security/openssl/patches: patch-aa patch-ac patch-ad patch-ae
            patch-af patch-ak patch-al
Added Files:
        pkgsrc/security/openssl/patches: patch-ag
Removed Files:
        pkgsrc/security/openssl/patches: patch-ah patch-ai patch-am patch-an
            patch-ao patch-ap patch-aq patch-ar patch-as patch-at patch-au
            patch-av patch-aw

Log Message:
Update to openssl-0.9.8g. Provided by Jukka Salmi in pkgsrc-wip.

pkgsrc notes:
  o Tested on NetBSD/i386 (Jukka Salmi), Mac OSX 10.5 (Adrian Portelli),
    Linux (Jeremy C. Reed), Tru64 5.1b (tnn), HP-UX 11i (tnn).
    Because the Makefile system has been rewamped, other
    platforms may require fixes. Please test if you can.
  o OpenSSL can now be built with installation to DESTDIR.

Overview of important changes since 0.9.7i:
  o Add gcc 4.2 support.
  o DTLS improvements.
  o RFC4507bis support.
  o TLS Extensions support.
  o RFC3779 support.
  o New cipher Camellia
  o Updated ECC cipher suite support.
  o New functions EVP_CIPHER_CTX_new() and EVP_CIPHER_CTX_free().
  o Zlib compression usage fixes.
  o Major work on the BIGNUM library for higher efficiency and to
    make operations more streamlined and less contradictory.  This
    is the result of a major audit of the BIGNUM library.
  o Addition of BIGNUM functions for fields GF(2^m) and NIST
    curves, to support the Elliptic Crypto functions.
  o Major work on Elliptic Crypto; ECDH and ECDSA added, including
    the use through EVP, X509 and ENGINE.
  o New ASN.1 mini-compiler that's usable through the OpenSSL
    configuration file.
  o Added support for ASN.1 indefinite length constructed encoding.
  o New PKCS#12 'medium level' API to manipulate PKCS#12 files.
  o Complete rework of shared library construction and linking
    programs with shared or static libraries, through a separate
    Makefile.shared.
  o Rework of the passing of parameters from one Makefile to another.
  o Changed ENGINE framework to load dynamic engine modules
    automatically from specifically given directories.
  o New structure and ASN.1 functions for CertificatePair.
  o Changed the key-generation and primality testing "progress"
    mechanism to take a structure that contains the ticker
    function and an argument.
  o New engine module: GMP (performs private key exponentiation).
  o New engine module: VIA PadLOck ACE extension in VIA C3
    Nehemiah processors.
  o Added support for IPv6 addresses in certificate extensions.
    See RFC 1884, section 2.2.
  o Added support for certificate policy mappings, policy
    constraints and name constraints.
  o Added support for multi-valued AVAs in the OpenSSL
    configuration file.
  o Added support for multiple certificates with the same subject
    in the 'openssl ca' index file.
  o Make it possible to create self-signed certificates using
    'openssl ca -selfsign'.
  o Make it possible to generate a serial number file with
    'openssl ca -create_serial'.
  o New binary search functions with extended functionality.
  o New BUF functions.
  o New STORE structure and library to provide an interface to all
    sorts of data repositories.  Supports storage of public and
    private keys, certificates, CRLs, numbers and arbitrary blobs.
    This library is unfortunately unfinished and unused withing
    OpenSSL.
  o New control functions for the error stack.
  o Changed the PKCS#7 library to support one-pass S/MIME
    processing.
  o New FIPS 180-2 algorithms (SHA-224, -256, -384 and -512).
  o New X509_VERIFY_PARAM structure to support parametrisation
    of X.509 path validation.
  o Change the default digest in 'openssl' commands from MD5 to
    SHA-1.
  o Added support for DTLS.
  o New BIGNUM blinding.
  o Added support for the RSA-PSS encryption scheme
  o Added support for the RSA X.931 padding.
  o Added support for files larger than 2GB.
  o Added alternate pkg-config files.


To generate a diff of this commit:
cvs rdiff -r1.2 -r1.3 pkgsrc/security/openssl/DESCR
cvs rdiff -r1.130 -r1.131 pkgsrc/security/openssl/Makefile
cvs rdiff -r1.11 -r1.12 pkgsrc/security/openssl/PLIST.common
cvs rdiff -r1.5 -r1.6 pkgsrc/security/openssl/PLIST.darwin
cvs rdiff -r1.38 -r1.39 pkgsrc/security/openssl/buildlink3.mk
cvs rdiff -r1.24 -r1.25 pkgsrc/security/openssl/builtin.mk
cvs rdiff -r1.56 -r1.57 pkgsrc/security/openssl/distinfo
cvs rdiff -r1.3 -r1.4 pkgsrc/security/openssl/options.mk
cvs rdiff -r1.19 -r1.20 pkgsrc/security/openssl/patches/patch-aa
cvs rdiff -r1.31 -r1.32 pkgsrc/security/openssl/patches/patch-ac
cvs rdiff -r1.15 -r1.16 pkgsrc/security/openssl/patches/patch-ad
cvs rdiff -r1.7 -r1.8 pkgsrc/security/openssl/patches/patch-ae
cvs rdiff -r1.20 -r1.21 pkgsrc/security/openssl/patches/patch-af
cvs rdiff -r0 -r1.10 pkgsrc/security/openssl/patches/patch-ag
cvs rdiff -r1.6 -r0 pkgsrc/security/openssl/patches/patch-ah \
    pkgsrc/security/openssl/patches/patch-ai
cvs rdiff -r1.5 -r1.6 pkgsrc/security/openssl/patches/patch-ak
cvs rdiff -r1.3 -r1.4 pkgsrc/security/openssl/patches/patch-al
cvs rdiff -r1.3 -r0 pkgsrc/security/openssl/patches/patch-am
cvs rdiff -r1.1 -r0 pkgsrc/security/openssl/patches/patch-an \
    pkgsrc/security/openssl/patches/patch-ap \
    pkgsrc/security/openssl/patches/patch-aq \
    pkgsrc/security/openssl/patches/patch-ar \
    pkgsrc/security/openssl/patches/patch-as \
    pkgsrc/security/openssl/patches/patch-at \
    pkgsrc/security/openssl/patches/patch-au \
    pkgsrc/security/openssl/patches/patch-av \
    pkgsrc/security/openssl/patches/patch-aw
cvs rdiff -r1.2 -r0 pkgsrc/security/openssl/patches/patch-ao

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.