security/cryptopp-modern: Add TOOLS option
TOOLS option will install cryptest toguether with TestData and TestVectors,
allowing the installed binary to run cryptest v and cryptest tv as post-install
checks.
PR: 297278
java/openjdk{8,11}: Remove USE_LDCONFIG from ports
OpenJDK loads the JVM and other JDK libraries explicitly from the
correct directories, so there's no need for adding them to ldconfig.
PR: 297282
Reviewed by: jrm
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D58841
Mk/bsd.port.mk: fix install-missing-packages without a tty
install-missing-packages runs xargs with -o, which reopens stdin from
/dev/tty so that pkg can prompt interactively. In automated or batch
runs there is no controlling terminal, so xargs fails with "can't open
/dev/tty: Device not configured".
Make the -o flag conditional on BATCH: keep the interactive pkg prompt
outside BATCH, and use pkg install -yA (auto-confirm) inside BATCH.
PR: 267416
Reported by: patmaddox at FreeBSD.org
Mk/Scripts/do-depends.sh: summarize dependency errors
Accumulate and number dependency resolution errors in do-depends.sh
instead of only setting a flag, so that a clear summary of all errors
is printed at the end of the run rather than being buried in the
output of the dependency traversal. (#257069)
Add a record_error() helper that increments an error counter, prints
each error to stderr, and accumulates the messages for the final
summary. Use printf "%b" with a literal format string to avoid
interpreting user-controlled data (origins, patterns) as format
specifiers.
PR: 257069
Submitted by: sobomax at FreeBSD.org
security/openvpn: bugfix update to 2.7.6
This is not security-relevant on FreeBSD, one security fix affects
Windows, the other one only affects builds against mbedTLS (which is not
currently supported by the port), and a third one (second bullet point)
turned out to not be exploitable.
Note that the --dev option defaults to "tun" (if not specified).
Note that --ping and --keepalive settings are now capped at 24 h.
TCP-based configurations now always enable TCP_NODELAY.
Changelog: https://github.com/OpenVPN/openvpn/releases/tag/v2.7.6
MFH: 2026Q3
Pull Request: https://github.com/freebsd/freebsd-ports/pull/584
(cherry picked from commit bbddd98141d38561ab0c715c737ed7dbd87688d6)
Mk/Scripts/qa.sh: readelf 1 file a time, baselibs()
...to repair detection of libssl/libcrypto usage inside a port,
to avoid a bogus "you may not need USES=ssl" warning from stage-qa
in ports that have USES=ssl and that do dynamically link against
libcrypto.so or libssl.so.
The cause is that the script currently feeds many files to readelf -d,
in lexiographical order from find -s, and might feed non-ELF
executables, such as scripts. In that case, readelf aborts without looking
at any other file, and the error message is sent 2>/dev/null,
we and may miss those files later in the list that do use crypto/ssl.
Fix: feed files individually to readelf -d
to make sure it really looks at each of them.
PR: 296889
Fixes: cfff850 Make baselibs QA check non recursive and activate it again
(The ldd -a used before the earlier more lenient and would process all files.)
security/openvpn: bugfix update to 2.7.6
This is not security-relevant on FreeBSD, one security fix affects
Windows, the other one only affects builds against mbedTLS (which is not
currently supported by the port), and a third one (second bullet point)
turned out to not be exploitable.
Note that the --dev option defaults to "tun" (if not specified).
Note that --ping and --keepalive settings are now capped at 24 h.
TCP-based configurations now always enable TCP_NODELAY.
Changelog: https://github.com/OpenVPN/openvpn/releases/tag/v2.7.6
MFH: 2026Q3
Pull Request: https://github.com/freebsd/freebsd-ports/pull/584
