security/openssl-devel: Security update to 3.0.4

Security:	4eeb93bf-f204-11ec-8fbd-d4c9ef517024
MFH:		2022Q2

security/openssl-devel: https://reviews.freebsd.org/D35190

Reported by:	jhb
Differential Revision:	https://reviews.freebsd.org/D35190

security/openssl-devel: Security update to 3.0.3

Security:	fceb2b08-cb76-11ec-a06f-d4c9ef517024
MFH:		2022Q2

security/openssl-devel: fix build on powerpc*

Bring back the patches removed earlier.

security/openssl-devel: Security update to 3.0.2

Security:	ea05c456-a4fd-11ec-90de-1c697aa5a594
MFH:		2022Q1

security/openssl-devel: Fix typo in PORTREVISION

security/openssl: add boringssl to CONFLICTS_INSTALL

Approved by:	portmgr (implicit)

Fix CONFLICTS entries of multiple ports

There have been lots of missing CONFLICTS_INSTALL entries, either
because conflicting ports were added without updating existing ports,
due to name changes of generated packages, due to mis-understanding
the format and semantics of the conflicts entries, or just due to
typoes in package names.

This patch is the result of a comparison of all files contained in
the official packages with each other. This comparison was based on
packages built with default options and may therefore have missed
further conflicts with optionally installed files.

Where possible, version numbers in conflicts entries have been
generalized, some times taking advantage of the fact that a port

security/openssl-devel: add BSD-riscv64 target support

While here, remove checking for powerpc, it's detected automatically.

security/openssl-devel: Security update to 3.0.1

Security:	0132ca5b-5d11-11ec-8be6-d4c9ef517024
MFH:		2021Q4

security/openssl-devel: bump PORTREVISION

security/openssl-devel: merge upstream patch to enable assembly routines on
powerpc*

Since the architecture is misdetected as powerpc, manually set up target.

*/*: Remove redundant '-[0-9]*' from CONFLICTS_INSTALL

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Approved by: portmgr (blanket)

security/openssl-devel: Fix detection of ARM CPU features

Upstream:
 * https://github.com/openssl/openssl/pull/17082
 * https://github.com/openssl/openssl/pull/17084

PR:		259937
Submitted by:	allanjude
Differential Revision:	https://reviews.freebsd.org/D33062

security/openssl-devel: Bump portrevision

 * Previous commit changed MAN3 option
 * As per Porter's Handbook:
   "That includes changes that only affect a package built with
    non-default options."

security/openssl-devel: Fix MAN3 option extra-patch

security/openssl-devel: Update to 3.0.0 RELEASE

security/openssl-devel: unbreak on i386 via atomic stub

Submitted by:	jbeich

security/openssl-devel: Update to 3.0.0-beta2

 * Refactor MAN3 option plist generation

security/openssl-devel: Upadate to 3.0.0-beta1

security/openssl-devel: Update to 3.0.0alpha16

security/openssl-devel: Update to 3.0.0-alpha15

security/openssl-devel: Build fixes

 * fix CRYPTODEV issues on < 13
 * fix MAN3 issues when disabled

security/openssl-devel: Update to 3.0.0-alpha14

 * and fix cryptodev on < 13

PR:		254643
Reported by:	<cryx-freebsd h3q com>
Reviewed by:	wollman

Remove # $FreeBSD$ from Makefiles.

security/openssl-devel: Update to 3.0.0-alpha13

Remove redundant option descriptions that match the default ones

(ignoring case)

Reported by:	danfe (for net/mosquitto), portscan

security/openssl-devel: Security update to 3.0.0alpha12

MFH:		2021Q1
Security:	96a21236-707b-11eb-96d8-d4c9ef517024

security/openssl-devel: Update to 3.0.0-alpha11

security/openssl-devel: Update to 3.0.0alpha10

security/openssl-devel: Enable KTLS by default

 * Only for 13.x systems
 * Allows testing of nfs-over-tls

Reported by:	rickm

security/openssl-devel: Update to 3.0.0 alpha 9

security/openssl-devel: Update to 3.0.0-alpha3

security/openssl-devel: Update to 3.0.0-alpha7

security/openssl-devel: Update to 3.0.0-alpha6

 * Fix broken MAN3 option

security/openssl-devel: Update to 3.0.0-alpha5

 * target now determined in util/perl/OpenSSL/config.pm
 * Stop modifying Makefile twice

security/openssl-devel: Update to 3.0.0-alpha4

security/openssl-devel: Update to 3.0.0-alpha3

security/openssl-devel: Add modules options

Submitted by:	gordon@freebsd.org
Differential Revision:	https://reviews.freebsd.org/D24965

security/openssl-devel: Update to 3.0.0-alpha2

security/openssl-devel: Resurrect OpenSSL devel port

security/openssl-devel: Remove port

 - OpenSSL 1.1.1 is ABI compatible
 - Aligns with FreeBSD 12

Reviewed by:	bapt, rene
Differential Revision: https://reviews.freebsd.org/D17136

security/openssl-devel: Move patches

 - Add fix from upstream [1]

1: https://github.com/openssl/openssl/commit/003f1bfd

MFH:		2018Q4

security/openssl-devel: Fix vulnerabilities

MFH:		2018Q4
Security:	238ae7de-dba2-11e8-b713-b499baebfeaf

security/openssl-devel: Fix SHARED option

 - Fix linking with lld on i386
 - Fix ordering

PR:		231333
Reported by:	lev

Chase CONFLICTS after addition of security/openssl111

 - While here mark OpenSSL 1.1.0 deprecated
   see: https://www.openssl.org/policies/releasestrat.html

security/openssl-devel: Update to 1.1.0i

 - Includes vulnerability fixes that were already
   added to the port as patches

Fix a common grammar error: "can not" means the opposite of "cannot."

"Can not" means "it is possible not to," and "cannot" means "it is impossible
to."

security/openssl-devel: Security update

 - Upstream update for CVE-2018-0732

MFH:            2018Q2
Security:       c82ecac5-6e3f-11e8-8777-b499baebfeaf

security/openssl-devel: Security update for CVE-2018-0737

MFH:		2018Q2
Security:	8f353420-4197-11e8-8777-b499baebfeaf

security/openssl-devel: Security update to 1.1.0h

 - Update to 1.1.0h
 - Fix PREFIX [1]
 - Add DH option (default enabled)
 - Set EC default regardless (no-op if no EC option)
 - Upstream properly creates the symlinks, simplify strip

PR:		226967 [1]
Reported by:	demon [1]
MFH:		2018Q1
Security:	b7cff5a9-31cc-11e8-8f07-b499baebfeaf

security/openssl-devel: Security update to 1.1.0g

 - Add Async, TLSv1 and TLSv1.1 options
 - Juggle manpages

MFH:		2017Q4
Security:	f40f07aa-c00f-11e7-ac58-b499baebfeaf

Begin deorbit burn of ia64.  We have not attempted to build packages for
it for many years.

While here, alphabetize ARCHs, pet portlint, and modernize usages.

Approved by:	portmgr (tier-2 blanket)

The THREADS option is defined twice, remove one of them.

It makes poudriere think that options changed, and forces openssl to be
rebuilt at every bulk run.

Sponsored by:	Absolight

security/openssl-devel: Update to 1.1.0f

 - Bugfix update to 1.1.0f
 - Fix plist issues

security/openssl-devel: Upgrade to 1.1.0e

 - Vulnerability fix update to 1.1.0e

MFH:		2017Q1
Security:	1a802ba9-f444-11e6-9940-b499baebfeaf
Security:	CVE-2017-3733

security/openssl-devel: Update to 1.1.0d

  - Update to 1.1.0d
  - Adjust pkg-plist

MFH:		2017Q1
Security:	d455708a-e3d3-11e6-9940-b499baebfeaf

security/openssl-devel: Update to 1.1.0c

  - Update to 1.1.0c
  - Fix EC option
  - Fix added/removed man-pages

MFH:		2016Q4
Security:	CVE-2016-7054
Security:	CVE-2016-7053
Security:	CVE-2016-7055

security/openssl-devel: adjust conflicts like r422717 and r424947

This permits bundling when DEPENDS_TARGET != install e.g.,

  BUILD_DEPENDS += ${NONEXISTENT}:security/openssl-devel:stage

  CPPFLAGS+=		-I${WRKDIR}/openssl-devel/include
  LDFLAGS+=		-L${WRKDIR}/openssl-devel/lib

  pre-configure:
	@(cd `${MAKE} -V STAGEDIR -C ${PORTSDIR}/security/openssl-devel`${LOCALBASE} \
	    && ${COPYTREE_SHARE} . ${WRKDIR}/openssl-devel "! -name *.so*")

PR:		213889
Approved by:	portmgr blanket

security/openssl: Bump PORTREVISION

  - Make sure ports get rebuilt

PR:		209582
Reported by:	mat

security/openssl: Bump shared library version

  - Bump shlib version for security/openssl
  - Bump shlib version for security/openssl-devel
  - Add instructions to UPDATING

PR:		209582
Reported by:	Matthew D. Fuller <fullermd@over-yonder.net>
MFH:		2016Q4

security/openssl-devel: Align with security/openssl

  - Revert to default CPE_VERSION
  - Rework MAN3 option
  - Remove remnants of base SHLIBVER_BASE check

security/openssl-devel: Update to 1.1.0b

  - Update to 1.1.0b
  - Fixes CRITICAL Use After Free for large message sizes (CVE-2016-6309)
  - Make zlib and ssl3 options work
  - Remove jpake header (jpake removed completely)

MFH:		2016Q3
Security:	91a337d8-83ed-11e6-bf52-b499baebfeaf

security/openssl-devel: Revert to PORTVERSION

  - Delete DISTVERSION related variables
  - Add PORTVERSION variable

MFH:		2016Q3

security/openssl-devel: Bump portrevision

Security:	43eaa656-80bc-11e6-bf52-b499baebfeaf

security/openssl-devel: Update to 1.1.0a

  - Update to 1.1.0a fixing vulnerabilities
  - Sort OPTIONS_DEFINE alphabetically
  - Enable MD4 RC2 RC4 by default

MFH:		2016Q3
Security:	43eaa656-80bc-11e6-bf52-b499baebfeaf
Security:	CVE-2016-6304
Security:	CVE-2016-6305
Security:	CVE-2016-6307
Security:	CVE-2016-6308
Sponsored by:	EuroBSDCon 2016 DevSummit

ftp.openssl.org is being taken out.

https://mta.openssl.org/pipermail/openssl-announce/2016-September/000075.html

Sponsored by:	Absolight

security/openssl-devel: Fix EC option on DragonflyBSD

  - Allow Dragonfly to transform amd64 to x86_64

Submitted by:	John Marino <freebsd.contact@marino.st>
Reported by:	John Marino <freebsd.contact@marino.st>

security/openssl-devel: Fix index build failure on 9.x

  - Old fmake doesn't know :U modifier

security/openssl-devel: Configure, Build fixes

  - Do not pass asm to configure (upstream default ON), fixes configure
  - Disable EC optimizations on i386, fixes build
  - Split options activation into upstream-default-enabled and -disabled
  - Rework EC option handling
  - Align order of Makefile with security/openssl
  - Use improved patching from security/openssl
  - Improve options descriptions
  - Remove old PRECIOUSMAKEVARS
  - Add pkg-message

security/openssl-devel: Remove defunct pkg-message

  - Now RELEASE so remove message

security/openssl-devel: Update to 1.1.0-release

  - Update to 1.1.0 RELEASE
  - OPTIONS-ify NIST EC curves architectures
  - Remove dasync dynamic engine (as per upstream)
  - Fix man-page plist issues

security/openssl-devel: Update to 1.1.0-pre6

  - Update to 1.1.0-pre6 first BETA
  - Remove defunct post-patch target
  - pkg-message.in is now pkg-message
  - Replace ALPHA with BETA
  - Fix pkg-plist

Cleanup $() variables in ports Makefiles.

Mostly replace with ${}, but sometime, replace with $$() because it is
what was intended in the first place. (I think.)

Sponsored by:	Absolight

Add DEFAULT_VERSIONS=ssl=XXX

Move the openssl detection routine to bsd.default-version.mk.
Add warnings telling people to not use WITH_OPENSSL_PORT or
WITH_OPENSSL_BASE.

To ease maintainability, change the way the different ssl libraries
version numbers are checked.

PR:		210149
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	The FreeBSD Foundation, Absolight
Differential Revision:	https://reviews.freebsd.org/D6577

security/openssl-devel: Update to 1.1 BETA2 (1.1.0-pre5)

  - Update to first BETA of OpenSSL 1.1
  - Bump SHLIB_VERSION for 1.1 to 9
  - Add missing libressl-devel conflict
  - Mark jobs-safe
  - Add upstream clang fix (Issue 888)
  - Fix renamed shared engines (remove 'lib' prefix)
  - Remove "overwrite base" check
  - Do not install html docs

Reviewed by:	feld (mentor), koobs (mentor)
Approved by:	feld (mentor)
Differential Revision:	D5900

security/openssl-devel: Create OpenSSL 1.1.0 Alpha port

 - Delete files after repo-copy initial commit

Reviewed by:	koobs (mentor)
Approved by:	koobs (mentor)
Differential Revision:	D5484

security/openssl-devel: Create OpenSSL 1.1.0 Alpha port

 - Repo-copy of security/openssl
 - Remove unneeded USE_OPENSSL check
 - Add and normalize CONFLICTS
 - Put OPTIONS into GROUPS for ciphers, hashes, protocols and optimizations
 - Add more configurable ciphers, hashes and protocols
 - Sort <OPT>_DESC alphabetically
 - Reword <OPT>_DESC after grouping, add (comment)
 - Rewrite ${PORT_OPTIONS:M<OPT>} to <OPT>_<FEATURE>_* where possible
 - Rewrite ${PORT_OPTIONS:M<OPT>} to target-<OPT>-on where possible
 - Rewrite do-configure target to HAS_CONFIGURE/CONFIGURE_SCRIPT
 - Rewrite (regression-)test target to TEST_TARGET
 - Add NPN support patch from [1]
 - Remove 1.0.2 specific patches (Padlock and EVP_MD_CTX_FLAG_ONESHOT)
 - Disable obsolete, broken and obscure features

[1] https://github.com/openssl/openssl/pull/757

Reviewed by:	koobs (mentor)
Approved by:	koobs (mentor)
Differential Revision:	D5484