| Port details |
- openssl31-quictls QUIC capable fork of OpenSSL
- 3.1.5_3 security
 =1       3.1.5_2Version of this port present on the latest quarterly branch. - Maintainer: brnrd@FreeBSD.org
- Port Added: 2023-10-28 21:03:09
- Last Update: 2024-04-24 21:21:15
- Commit Hash: 208fb31
- People watching this port, also watch:: tmux, libjxl, tcpdump, vigenere
- Also Listed In: devel
- License: APACHE20
- WWW:
- https://www.github.com/quictls/openssl
- Description:
- This is a fork of OpenSSL to enable QUIC. This fork adds API that can be
used by QUIC implementations for connection handshakes.
There is a community need for a QUIC capable TLS library. This fork is
intended as stopgap solution to enable higher level frameworks and runtimes
to use QUIC with the proven and reliable TLS functionality from OpenSSL.
This fork will be maintained until OpenSSL officially provides reasonable
support for QUIC implementations.
  ¦  ¦  ¦  ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- openssl31-quictls>0:security/openssl31-quictls
- Conflicts:
- CONFLICTS_INSTALL:
- boringssl
- libressl
- libressl-devel
- openssl
- openssl111
- openssl3*
- openssl-quictls
- Conflicts Matches:
-
There are no Conflicts Matches for this port. This is usually an error.
- To install the port:
- cd /usr/ports/security/openssl31-quictls/ && make install clean
- To add the package, run one of these commands:
- pkg install security/openssl31-quictls
- pkg install openssl31-quictls
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: openssl31-quictls
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1710593356
SHA256 (quictls-openssl-openssl-3.1.5-quic1_GH0.tar.gz) = 928a0c484fca5a5b9ae484e7b14e6691e946220d77d86ac4031cbb408655b644
SIZE (quictls-openssl-openssl-3.1.5-quic1_GH0.tar.gz) = 15826997
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- perl5>=5.36<5.37 : lang/perl5.36
- There are no ports dependent upon this port
Configuration Options:- ===> The following configuration options are available for openssl31-quictls-3.1.5_3:
ASYNC=on: Asynchronous mode
CT=on: Certificate Transparency Support
KTLS=on: Use in-kernel TLS (FreeBSD >13)
MAN3=on: Install API manpages (section 3, 7)
RFC3779=off: RFC3779 support (BGP)
SHARED=on: Build shared libraries
ZLIB=off: zlib compression support
====> Block Cipher Support
ARIA=off: ARIA (South Korean standard)
DES=on: (Triple) Data Encryption Standard
GOST=on: GOST (Russian standard)
IDEA=off: International Data Encryption Algorithm
SM4=off: SM4 128bit (Chinese standard)
RC2=on: RC2 (unsafe)
RC4=on: RC4 (unsafe)
RC5=off: RC5 (patented)
WEAK-SSL-CIPHERS=off: Weak cipher support (unsafe)
====> Hash Function Support
MD2=off: MD2 (obsolete) (requires LEGACY)
MD4=on: MD4 (unsafe)
MDC2=off: MDC-2 (patented, requires DES)
RMD160=on: RIPEMD-160
SM2=off: SM2 Elliptic Curve DH (Chinese standard)
SM3=off: SM3 256bit (Chinese standard)
====> Provider modules
FIPS=on: Build FIPS provider (Note: NOT yet FIPS validated)
LEGACY=off: Older algorithms
====> Optimizations
ASM=on: Assembler code
SSE2=on: Runtime SSE2 detection
THREADS=on: Threading support
EC=on: Optimize NIST elliptic curves
====> Protocol Support
NEXTPROTONEG=on: Next Protocol Negotiation (SPDY)
SCTP=on: SCTP (Stream Control Transmission)
SSL3=off: SSLv3 (unsafe)
TLS1=on: TLSv1.0 (requires TLS1_1, TLS1_2)
TLS1_1=on: TLSv1.1 (requires TLS1_2)
TLS1_2=on: TLSv1.2
===> Use 'make config' to modify these settings
- Options name:
- security_openssl31-quictls
- USES:
- cpe perl5
- pkg-message:
- For install:
-
This QUIC capable OpenSSL fork is in an ALPHA stage
Do NOT use for production!
- If upgrading
-
This QUIC capable OpenSSL fork is in an ALPHA stage
Do NOT use for production!
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
3.1.5_3
24 Apr 2024 21:21:15
 |
Piotr Kubaj (pkubaj) |
security/openssl31-quictls: correctly detect architecture on powerpc64* /
riscv64 |
3.1.5_2
14 Apr 2024 19:22:29
|
Bernard Spil (brnrd) |
security/openssl31-quictls: Security update for CVE-2024-2511
Security: 7c217849-f7d7-11ee-a490-84a93843eb75
MFH: 2024Q2 |
3.1.5_1
31 Mar 2024 13:04:52
|
Bernard Spil (brnrd) |
security/openssl: Fix for POSIX_VERSION 200809L
* See https://github.com/openssl/openssl/pull/23885
PR: 273869
Reported by: imp
Submitted by: vvd |
3.1.5
21 Mar 2024 14:09:20
 |
Bernard Spil (brnrd) |
security/openssl: Chase addition of openssl33 in conflicts
* While here use proper tag for openssl31-quictls |
3.1.5
02 Mar 2024 14:01:25
|
Mathieu Arnold (mat) |
cleanup: (ir)regular GH_TAGNAME cleanup |
3.1.5
31 Jan 2024 19:40:07
|
Bernard Spil (brnrd) |
security/openssl31-quictls: Security update to 3.1.5
* Note that this is a security rollup of four previously reported CVEs
Security: 10dee731-c069-11ee-9190-84a93843eb75
Security: 8337251b-b07b-11ee-b0d7-84a93843eb75
Security: a5956603-7e4f-11ee-9df6-84a93843eb75
MFH: 2024Q1 |
3.1.4_3
21 Jan 2024 02:02:46
|
Muhammad Moinur Rahman (bofh) |
security/openssl31-quictls: Sanitize MANPREFIX
Approved by: portmgr (blanket) |
3.1.4_2
11 Jan 2024 12:46:47
|
Bernard Spil (brnrd) |
security/openssl31-quictls: Security fix for POLY1305 on ppc
Security: 8337251b-b07b-11ee-b0d7-84a93843eb75
MFH: 2024Q1 |
3.1.4_1
31 Dec 2023 00:37:05
|
Muhammad Moinur Rahman (bofh) |
*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree
- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
Also move conditional flags for non sparc64/arm ARCH to fixed flags.
Reviewed by: brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068 |
3.1.4_1
26 Nov 2023 14:33:45
|
Bernard Spil (brnrd) |
security/openssl: Set portscout limits |
3.1.4_1
08 Nov 2023 16:25:08
|
Bernard Spil (brnrd) |
security/openssl31-quictls: Security fix for CVE-2023-5678
Security: a5956603-7e4f-11ee-9df6-84a93843eb75
MFH: 2023Q4 |
3.1.4
28 Oct 2023 21:02:23
|
Bernard Spil (brnrd) |
security/openssl31-quictls: Add QUIC enabled OpenSSL 3.1 |
As an Amazon Associate I earn from qualifying purchases.