1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-10-19 19:59:43 +00:00

security/easy-rsa: Update to v3.0.7

FreeBSD-relevant ChangeLog extract since 3.0.6:
   * Remove RANDFILE environment variable (#261)
   * Workaround for bug in win32 mktemp (#247, #305, PR #312)
   * Handle IP address in SAN and renewals (#317)
   * Workaround for ash and no set -o echo (#319)
   * Shore up windows testing framework (#314)
   * Provide upgrade mechanism for older versions of EasyRSA (#349)
   * Add support for KDC certificates (#322)
   * Add support for Edward Curves (#354, #350)
   * Add support for EASYRSA_PASSIN and EASYRSA_PASSOUT env vars (#368)
   * Add support for RID to SAN (#362)

Update WWW: link in pkg-descr.

Remove patches that have been integrated upstream.

Shuffle USES=-line to please portlint.

Add NO_ARCH=yes, since this is all scripts and text.

Reported by:	Eric F Crist (upstream maintainer)
This commit is contained in:
Matthias Andree 2020-03-31 00:36:54 +00:00
parent c1ee475b94
commit 42d7973d56
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=529928
5 changed files with 11 additions and 66 deletions

View File

@ -1,10 +1,10 @@
# $FreeBSD$
PORTNAME= easy-rsa
DISTVERSION= 3.0.6
DISTVERSION= 3.0.7
CATEGORIES= security net-mgmt
MASTER_SITES= https://github.com/OpenVPN/easy-rsa/releases/download/v${DISTVERSION}/
DISTNAME= EasyRSA-unix-v${DISTVERSION}
DISTNAME= EasyRSA-${DISTVERSION}
# Eric F. Crist <ecrist@secure-computing.net> does not require my
# approval for changes to this package. -- mandree@FreeBSD.org
@ -13,19 +13,19 @@ COMMENT= Small RSA key management package based on openssl
LICENSE= GPLv2
USES= tar:tgz
CONFLICTS_INSTALL=easy-rsa2-*
USES= tar:tgz
NO_BUILD= yes
NO_ARCH= yes
WRKSRC= ${WRKDIR}/EasyRSA-v${DISTVERSION}
PATCH_STRIP= -p2
WRKSRC= ${WRKDIR}/EasyRSA-${DISTVERSION}
OPTIONS_DEFINE= DOCS EXAMPLES
PORTDATA= x509-types/
_pd_files= ChangeLog COPYING.md README.md README.quickstart.md
_pd_files= ChangeLog COPYING.md README.md README.quickstart.md mktemp.txt
_pd_dirs= doc/
PORTDOCS= ${_pd_files} ${_pd_dirs}

View File

@ -1,3 +1,3 @@
TIMESTAMP = 1553337199
SHA256 (EasyRSA-unix-v3.0.6.tgz) = cb29aed2d27824e59dbaad547f11dcab380a53c9fe05681249e804af436f1396
SIZE (EasyRSA-unix-v3.0.6.tgz) = 40840
TIMESTAMP = 1585614158
SHA256 (EasyRSA-3.0.7.tgz) = 157d2e8c115c3ad070c1b2641a4c9191e06a32a8e50971847a718251eeb510a8
SIZE (EasyRSA-3.0.7.tgz) = 48215

View File

@ -1,24 +0,0 @@
From 37edb7d1d724571508b4c1c55c6d53f3f768adb3 Mon Sep 17 00:00:00 2001
From: Eric F Crist <ecrist@secure-computing.net>
Date: Mon, 4 Feb 2019 13:01:09 -0600
Subject: [PATCH] Remove RANDFILE var from openssl-easyrsa.cnf
This fixes #261.
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
---
easyrsa3/openssl-easyrsa.cnf | 4 +---
1 file changed, 1 insertion(+), 3 deletions(-)
diff --git a/easyrsa3/openssl-easyrsa.cnf b/easyrsa3/openssl-easyrsa.cnf
index 1139414..22a1eda 100644
--- a/easyrsa3/openssl-easyrsa.cnf
+++ b/easyrsa3/openssl-easyrsa.cnf
@@ -1,6 +1,4 @@
-# For use with Easy-RSA 3.1 and OpenSSL or LibreSSL
-
-RANDFILE = $ENV::EASYRSA_PKI/.rnd
+# For use with Easy-RSA 3.0+ and OpenSSL or LibreSSL
####################################################################
[ ca ]

View File

@ -1,31 +0,0 @@
From 4ce6e9c8e4b681c739b179a506a8ad1ca6d6ebe4 Mon Sep 17 00:00:00 2001
From: Stefan Pietsch <mail.ipv4v6+gh@gmail.com>
Date: Fri, 8 Feb 2019 00:11:08 +0100
Subject: [PATCH] Fix typo
---
easyrsa3/openssl-easyrsa.cnf | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/easyrsa3/openssl-easyrsa.cnf b/easyrsa3/openssl-easyrsa.cnf
index 22a1eda..2184d4c 100644
--- a/easyrsa3/openssl-easyrsa.cnf
+++ b/easyrsa3/openssl-easyrsa.cnf
@@ -19,7 +19,7 @@ crl = $dir/crl.pem # The current CRL
private_key = $dir/private/ca.key # The private key
RANDFILE = $dir/.rand # private random number file
-x509_extensions = basic_exts # The extentions to add to the cert
+x509_extensions = basic_exts # The extensions to add to the cert
# This allows a V2 CRL. Ancient browsers don't like it, but anything Easy-RSA
# is designed for will. In return, we get the Issuer attached to CRLs.
@@ -57,7 +57,7 @@ default_bits = $ENV::EASYRSA_KEY_SIZE
default_keyfile = privkey.pem
default_md = $ENV::EASYRSA_DIGEST
distinguished_name = $ENV::EASYRSA_DN
-x509_extensions = easyrsa_ca # The extentions to add to the self signed cert
+x509_extensions = easyrsa_ca # The extensions to add to the self signed cert
# A placeholder to handle the $EXTRA_EXTS feature:
#%EXTRA_EXTS% # Do NOT remove or change this line as $EXTRA_EXTS support requires it

View File

@ -4,4 +4,4 @@ OpenVPN distribution. While this tool is primary concerned with key
management for the SSL VPN application space, it can also be used for
building web certificates.
WWW: https://community.openvpn.net/openvpn/wiki/GettingEasyRsa
WWW: https://github.com/OpenVPN/easy-rsa