CVS commit: pkgsrc/security/bearssl

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sat Apr  1 17:01:51 UTC 2017

Added Files:
        pkgsrc/security/bearssl: DESCR Makefile PLIST distinfo

Log Message:
Import bearssl-0.3 as security/bearssl.

BearSSL is an implementation of the SSL/TLS protocol (RFC 5246)
written in C. It aims at offering the following features:

* Be correct and secure. In particular, insecure protocol versions
  and choices of algorithms are not supported, by design;
  cryptographic algorithm implementations are constant-time by
  default.

* Be small, both in RAM and code footprint. For instance, a minimal
  server implementation may fit in about 20 kilobytes of compiled
  code and 25 kilobytes of RAM.

* Be highly portable. BearSSL targets not only "big" operating
  systems like Linux and Windows, but also small embedded systems
  and even special contexts like bootstrap code.

* Be feature-rich and extensible. SSL/TLS has many defined cipher
  suites and extensions; BearSSL should implement most of them,
  and allow extra algorithm implementations to be added afterwards,
  possibly from third parties.

bearssl is considered alpha-quality software, which means that it
runs but it probably has bugs, some of which being certainly
exploitable vulnerabilities.


To generate a diff of this commit:
cvs rdiff -u -r0 -r1.1 pkgsrc/security/bearssl/DESCR \
    pkgsrc/security/bearssl/Makefile pkgsrc/security/bearssl/PLIST \
    pkgsrc/security/bearssl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Added files:

Index: pkgsrc/security/bearssl/DESCR
diff -u /dev/null pkgsrc/security/bearssl/DESCR:1.1
--- /dev/null   Sat Apr  1 17:01:51 2017
+++ pkgsrc/security/bearssl/DESCR       Sat Apr  1 17:01:51 2017
@@ -0,0 +1,24 @@
+BearSSL is an implementation of the SSL/TLS protocol (RFC 5246)
+written in C. It aims at offering the following features:
+
+* Be correct and secure. In particular, insecure protocol versions
+  and choices of algorithms are not supported, by design;
+  cryptographic algorithm implementations are constant-time by
+  default.
+
+* Be small, both in RAM and code footprint. For instance, a minimal
+  server implementation may fit in about 20 kilobytes of compiled
+  code and 25 kilobytes of RAM.
+
+* Be highly portable. BearSSL targets not only "big" operating
+  systems like Linux and Windows, but also small embedded systems
+  and even special contexts like bootstrap code.
+
+* Be feature-rich and extensible. SSL/TLS has many defined cipher
+  suites and extensions; BearSSL should implement most of them,
+  and allow extra algorithm implementations to be added afterwards,
+  possibly from third parties.
+
+bearssl is considered alpha-quality software, which means that it
+runs but it probably has bugs, some of which being certainly
+exploitable vulnerabilities.
Index: pkgsrc/security/bearssl/Makefile
diff -u /dev/null pkgsrc/security/bearssl/Makefile:1.1
--- /dev/null   Sat Apr  1 17:01:51 2017
+++ pkgsrc/security/bearssl/Makefile    Sat Apr  1 17:01:51 2017
@@ -0,0 +1,28 @@
+# $NetBSD: Makefile,v 1.1 2017/04/01 17:01:51 wiz Exp $
+
+DISTNAME=      bearssl-0.3
+CATEGORIES=    security
+MASTER_SITES=  https://bearssl.org/
+
+MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
+HOMEPAGE=      https://bearssl.org/
+COMMENT=       Implementation of the SSL/TLS protocol (RFC 5246)
+LICENSE=       mit
+
+INSTALLATION_DIRS=     bin include lib
+
+do-install:
+       cd ${WRKSRC}/build && \
+               ${INSTALL_DATA} brssl ${DESTDIR}${PREFIX}/bin
+       cd ${WRKSRC}/inc && \
+               ${INSTALL_DATA} *.h ${DESTDIR}${PREFIX}/include
+       cd ${WRKSRC}/build && \
+               ${INSTALL_LIB} libbearssl.* ${DESTDIR}${PREFIX}/lib
+
+do-test:
+       cd ${WRKSRC} && \
+               ./build/testcrypto all && \
+               ./build/testspeed all && \
+               ./build/testx509
+
+.include "../../mk/bsd.pkg.mk"
Index: pkgsrc/security/bearssl/PLIST
diff -u /dev/null pkgsrc/security/bearssl/PLIST:1.1
--- /dev/null   Sat Apr  1 17:01:51 2017
+++ pkgsrc/security/bearssl/PLIST       Sat Apr  1 17:01:51 2017
@@ -0,0 +1,15 @@
+@comment $NetBSD: PLIST,v 1.1 2017/04/01 17:01:51 wiz Exp $
+bin/brssl
+include/bearssl.h
+include/bearssl_block.h
+include/bearssl_ec.h
+include/bearssl_hash.h
+include/bearssl_hmac.h
+include/bearssl_pem.h
+include/bearssl_prf.h
+include/bearssl_rand.h
+include/bearssl_rsa.h
+include/bearssl_ssl.h
+include/bearssl_x509.h
+lib/libbearssl.a
+lib/libbearssl.so
Index: pkgsrc/security/bearssl/distinfo
diff -u /dev/null pkgsrc/security/bearssl/distinfo:1.1
--- /dev/null   Sat Apr  1 17:01:51 2017
+++ pkgsrc/security/bearssl/distinfo    Sat Apr  1 17:01:51 2017
@@ -0,0 +1,6 @@
+$NetBSD: distinfo,v 1.1 2017/04/01 17:01:51 wiz Exp $
+
+SHA1 (bearssl-0.3.tar.gz) = 2f16a6b14b0e43cdacaf89aea47836a8da685f7e
+RMD160 (bearssl-0.3.tar.gz) = 9c2562eecbdf8c777fd605c32b7d61ebb47c4734
+SHA512 (bearssl-0.3.tar.gz) = 137540dfed9a281e8599c9c74951662733e7e53c7b8556e4b940dea556299ef008ac49c8c499d8439884842d9a07f95de01a323229f882748c64ee9e10ebc691
+Size (bearssl-0.3.tar.gz) = 612642 bytes