net/amnezia-kmod: Update 2.0.12 => 3.1.0
Changelog:
* if_amn: add AmneziaWG v3 protocol support
* Extend the FreeBSD kernel module with the protocol and configuration
features required for interoperability with AmneziaWG v3, while retaining
compatibility with existing AWG2 userspace.
* Implement AWG3 header protection using a small standalone ChaCha20-IETF
implementation. Use the random junk prefix as the 96-bit nonce and apply
header protection to handshake, cookie, and transport headers. Require
S1-S4 to provide enough nonce material whenever a header protection key
is configured. Add a known-answer ChaCha20 self-test to the module's
existing cryptographic self-test suite.
* Add support for the new AWG3 configuration parameters:
- HeaderProtectionKey
- ContentPaddingAddition
- RekeyAfterTime
- RekeyTimeout
- RejectAfterTime
[11 lines not shown]
security/p5-Crypt-PasswdMD5: Fix build caused by wrong LICENSE_FILE
While here, also define same license file
for ART10, since it contains both.
PR: 298881
Approved by: portmgr (blanket, fix build)
Approved by: osa, vvd (Mentors, implicit)
Co-authored-by: Kousuke Kannagi <mce at FreeBSD.org>
ports-mgmt/pkg-be-plugin: new port
pkg-be-plugin is a pkg(8) plugin that automatically creates a ZFS
boot environment before each install, upgrade, or deinstall
transaction. If a transaction leaves the system in a broken state,
the pre-transaction BE provides a clean rollback point.
The plugin uses libbe(3) directly with no subprocess invocations of
bectl(8) or zfs(8). Boot environments are pruned automatically based
on a configurable keep count and minimum age.
Co-authored-by: Michael Osipov <michaelo at FreeBSD.org>
PR: 295305