BSD Commit Log Search

   switch net/kea from openssl to botan3

   avoid botan2 conflict in manpage

   avoid using using GH_* and then overriding SITES, DISTNAME, PKGNAME, WRKSRC...

   reenable md5/dsa, security/rnp needs them

   Rename gcc4.port.mk -> gcc.port.mk

   OK: sthen@

   Rename gcc4.port.mk -> gcc.port.mk

   OK: sthen@

   missed bump

   build botan with --disable-deprecated-features, let's start with this in a
   cleaner state

   build with boost; kea wants asio

   arrow-cpp: rm the files which are currently @comment'ed

   (a new file under a removed dir had been added in an update before,
   resulting in a file entry without an associated dir entry in the PLIST).

   avoid installing tests and static library; pkg goes from 73MB/2200 files to 5M/289

   +botan3
   drop commented-out pecl-mcrypt,php84 while there

   import ports/security/botan3, from Stuart Lamble based on botan2 port,
   some tweaks by me, feedback/ok tb@

   Botan (Japanese for peony) is a BSD-licensed cryptography library
   written in C++20.

   Botan's goal is to be the best option for production cryptography
   by offering the tools necessary to implement a range of practical
   systems, such as TLSv1.3, X.509 PKI, modern AEAD ciphers, support
   for PKCS#11 and TPM hardware, memory-hard password hashing, and post
   quantum cryptography. All of this is covered by an extensive test suite,
   including an automated system for detecting side channels. The modular
   build system allows enabling or disabling features in a fine-grained
   way, and amalgamation builds are also supported.

   It comes out of the box with C++, C, and Python APIs, and several
   other language bindings are available. The library is accompanied by a
   featureful command line interface. Consult the documentation for more
   information.

   Start using jdk-ca-certs to address CVE-2026-114820. ok sthen@ tb@

   Fix loading networks via mrt and bulk endpoints.

   When refactoring the filterset code in the RDE these endpoints were
   not adjusted to use imsg_send_filterset() and so the transmitted
   network was dropped in the RDE.

   Reported and initial fix provided by René Ammerlaan
   OK tb@

   Don't use the alpha definitions; They require the CPU_SET() family of
   functions, which OpenBSD doesn't support. Removing the alpha-specific
   codepath makes it fall into the "generic" path, which does build.

   OK sthen@

   add comment about previous commit, disable gtest BDEP

   Obvious fix for arm

   Tests there would be welcome

   Update to gdb-18.1

   Tested on: amd64 arm64 i386 riscv64 sparc64
   sparc64 tests & ok tb@

   Redisable tests to unbreak on archs where char is unsigned

   Spotted on arm64. Issue mentioned in
   https://github.com/jbeder/yaml-cpp/pull/1513 but instead of adding
   a patch let's see what upstream thinks.

   ok tb

   Handle protected frames in the rx and tx path for MT7925

   In mt7925_mac_fill_rx() set IEEE80211_RXI_HWDEC if the frame was decrypted
   in HW. Also apply the same workaround for the stripped IV and MIC as done
   for the MT7921 side.

   In mt7925_mac_write_txwi() set the protected frame bit in the txd if the
   packet is marked as protected. Also sync the function with the linux code
   and add all the NOTYET bits.

   With this my mt7925 seems to be happy on both encrypted and unencrypted
   networks.

   Fix build with ICU >=79.

   Update to py3-ICU-2.17.

   Update to icu4c-79.1.

   Better: disable linux/input.h header in autoconf. Similar to how it is
   disabled in devel/sdl2. With this, drop dependency on
   wayland/libinput-openbsd again. Based on discussion with co-maintainer
   Andrii and diff from fabien@ - thanks!

   Update to PowerDNS Recusorsor 5.4.9

   Clang built packages are not affected by problem fixed in this release

   lang/gcc/16: enable ada at sparc64

   Add a flag to keep the cursor column when moving lines in copy mode,
   from Michael Grant.

   Report 52 in DA if set-clipboard is enabled, from me at kitty dot sh.

   Add refresh-client -q to query terminal size, useful for terminals which
   do not respond to SIGWINCH (such as serial). GitHub issue 5766 from
   Charlie Stanley.

   rpki-client: tweak sha256 parameter handling

   This makes cbs_is_sha256_algorithmIdentifier_value() use the same logic
   as is used for for sha256WithRSAEncryption a few lines below. For the
   latter this is now simply an RFC requirement as ARIN fixed their objects
   with absent parameters in sha256WithRSAEncryption. However, they still
   have tons of sha256 with incorrectly encoded parameters (as do many
   others).

   ok claudio job