Commit 4a8f5ab4 authored by Rene Ladan's avatar Rene Ladan
Browse files

security/openssl33: Remove expired port 

2026-03-31 security/openssl33: Please use security/openssl35 (LTS)
parent 049c73e5

MOVED

+1 −0
Original line number Diff line number Diff line
@@ -5221,3 +5221,4 @@ databases/postgresql-cstore_fdw||2026-03-31|Has expired: Columnar storage is now 
sysutils/alfio||2026-03-31|Has expired: Upstream abandoned the project and does not distribute it anymore

devel/py-absl|devel/py-absl-py|2026-03-31|Has expired: Use devel/py-absl-py

security/openssl33-quictls||2026-03-31|Removed: Upstream project has been archived

security/openssl33||2026-03-31|Has expired: Please use security/openssl35 (LTS)

security/Makefile

+0 −1
Original line number Diff line number Diff line
@@ -457,7 +457,6 @@ 
    SUBDIR += openssl-pkcs11provider

    SUBDIR += openssl-unsafe

    SUBDIR += openssl111

    SUBDIR += openssl33

    SUBDIR += openssl34

    SUBDIR += openssl35

    SUBDIR += openssl36

security/openssl33/Makefile

deleted100644 → 0
+0 −200
Original line number Diff line number Diff line 
PORTNAME=	openssl

PORTVERSION=	3.3.6

CATEGORIES=	security devel

PKGNAMESUFFIX=	33

MASTER_SITES=	https://github.com/openssl/openssl/releases/download/${DISTNAME}/



MAINTAINER=	brnrd@FreeBSD.org

COMMENT=	TLSv1.3 capable SSL and crypto library

WWW=		https://www.openssl.org/



LICENSE=	APACHE20

LICENSE_FILE=	${WRKSRC}/LICENSE.txt



DEPRECATED=		Please use security/openssl35 (LTS)

EXPIRATION_DATE=	2026-03-31



CONFLICTS_INSTALL=	boringssl libressl libressl-devel openssl openssl[14]* openssl3[1245] openssl*-quictls



HAS_CONFIGURE=	yes

CONFIGURE_SCRIPT=	config

CONFIGURE_ENV=	PERL="${PERL}"

CONFIGURE_ARGS=	--openssldir=${OPENSSLDIR} \

		--prefix=${PREFIX}



USES=		cpe perl5

USE_PERL5=	build

TEST_TARGET=	test



LDFLAGS_i386=	-Wl,-znotext



MAKE_ARGS+=	WHOLE_ARCHIVE_FLAG=--whole-archive CNF_LDFLAGS="${LDFLAGS}"

MAKE_ENV+=	LIBRPATH="${PREFIX}/lib" GREP_OPTIONS=



EXTRA_PATCHES+=	${.CURDIR}/../openssl/files/patch-crypto_async_arch_async__posix.h



OPTIONS_GROUP=		CIPHERS COMPRESSION HASHES MODULES OPTIMIZE PROTOCOLS

OPTIONS_GROUP_CIPHERS=	ARIA DES GOST IDEA SM4 RC2 RC4 RC5 WEAK-SSL-CIPHERS

OPTIONS_GROUP_COMPRESSION=	BROTLI ZLIB ZSTD

OPTIONS_GROUP_HASHES=	MD2 MD4 MDC2 RMD160 SM2 SM3

OPTIONS_GROUP_OPTIMIZE=	ASM SSE2 THREADS THREADPOOL

OPTIONS_GROUP_MODULES=	FIPS LEGACY

OPTIONS_DEFINE_i386=	I386

OPTIONS_GROUP_PROTOCOLS=NEXTPROTONEG QUIC SCTP SSL3 TLS1 TLS1_1 TLS1_2



OPTIONS_DEFINE=	ASYNC CT KTLS MAN3 RFC3779 SHARED



OPTIONS_DEFAULT=ASM ASYNC CT DES EC FIPS GOST MAN3 MD4 NEXTPROTONEG \

		QUIC RFC3779 RC2 RC4 RMD160 SCTP SHARED SSE2 \

		THREADPOOL THREADS TLS1 TLS1_1 TLS1_2

#OPTIONS_DEFAULT+=	KTLS pending updated KTLS patch



OPTIONS_GROUP_OPTIMIZE_amd64=	EC



.if ${MACHINE_ARCH} == "amd64"

OPTIONS_GROUP_OPTIMIZE+=	EC

.elif ${MACHINE_ARCH} == "mips64el"

OPTIONS_GROUP_OPTIMIZE+=	EC

.endif



OPTIONS_SUB=	yes



ARIA_DESC=	ARIA (South Korean standard)

ASM_DESC=	Assembler code

ASYNC_DESC=	Asynchronous mode

CIPHERS_DESC=	Block Cipher Support

COMPRESSION_DESC=	Compression Support

CT_DESC=	Certificate Transparency Support

DES_DESC=	(Triple) Data Encryption Standard

EC_DESC=	Optimize NIST elliptic curves

FIPS_DESC=	Build FIPS provider (Note: NOT yet FIPS validated)

GOST_DESC=	GOST (Russian standard)

HASHES_DESC=	Hash Function Support

I386_DESC=	i386 (instead of i486+)

IDEA_DESC=	International Data Encryption Algorithm

KTLS_DESC=	Use in-kernel TLS (FreeBSD >13)

LEGACY_DESC=	Older algorithms

MAN3_DESC=	Install API manpages (section 3, 7)

MD2_DESC=	MD2 (obsolete) (requires LEGACY)

MD4_DESC=	MD4 (unsafe)

MDC2_DESC=	MDC-2 (patented, requires DES)

MODULES_DESC=	Provider modules

NEXTPROTONEG_DESC=	Next Protocol Negotiation (SPDY)

OPTIMIZE_DESC=	Optimizations

PROTOCOLS_DESC=	Protocol Support

QUIC_DESC=	HTTP/3

RC2_DESC=	RC2 (unsafe)

RC4_DESC=	RC4 (unsafe)

RC5_DESC=	RC5 (patented)

RMD160_DESC=	RIPEMD-160

RFC3779_DESC=	RFC3779 support (BGP)

SCTP_DESC=	SCTP (Stream Control Transmission)

SHARED_DESC=	Build shared libraries

SM2_DESC=	SM2 Elliptic Curve DH (Chinese standard)

SM3_DESC=	SM3 256bit (Chinese standard)

SM4_DESC=	SM4 128bit (Chinese standard)

SSE2_DESC=	Runtime SSE2 detection

SSL3_DESC=	SSLv3 (unsafe)

TLS1_DESC=	TLSv1.0 (requires TLS1_1, TLS1_2)

TLS1_1_DESC=	TLSv1.1 (requires TLS1_2)

TLS1_2_DESC=	TLSv1.2

THREADPOOL_DESC=Thread Pooling support

WEAK-SSL-CIPHERS_DESC=	Weak cipher support (unsafe)



# Upstream default disabled options

.for _option in brotli fips md2 ktls rc5 sctp ssl3 weak-ssl-ciphers zlib zstd

${_option:tu}_CONFIGURE_ON=	enable-${_option}

.endfor



# Upstream default enabled options

.for _option in aria asm async ct des gost idea md4 mdc2 legacy \

	nextprotoneg quic rc2 rc4 rfc3779 rmd160 shared sm2 sm3 sm4 \

	sse2 threads tls1 tls1_1 tls1_2

${_option:tu}_CONFIGURE_OFF=	no-${_option}

.endfor



MD2_IMPLIES=	LEGACY

MDC2_IMPLIES=	DES

TLS1_IMPLIES=	TLS1_1

TLS1_1_IMPLIES=	TLS1_2



BROTLI_CFLAGS=		-I${PREFIX}/include

BROTLI_CONFIGURE_ON=	enable-brotli-dynamic

BROTLI_LIB_DEPENDS=	libbrotlicommon.so:archivers/brotli

EC_CONFIGURE_ON=	enable-ec_nistp_64_gcc_128

FIPS_VARS=		shlibs+=lib/ossl-modules/fips.so

I386_CONFIGURE_ON=	386

KTLS_BROKEN=		Pending updated KTLS patch

KTLS_EXTRA_PATCHES=	${FILESDIR}/extra-patch-ktls

LEGACY_VARS=		shlibs+=lib/ossl-modules/legacy.so

MAN3_EXTRA_PATCHES_OFF=	${FILESDIR}/extra-patch-util_find-doc-nits

SHARED_MAKE_ENV=	SHLIBVER=${OPENSSL_SHLIBVER}

SHARED_PLIST_SUB=	SHLIBVER=${OPENSSL_SHLIBVER}

SHARED_USE=		ldconfig=yes

SHARED_VARS=		shlibs+="lib/libcrypto.so.${OPENSSL_SHLIBVER} \

				lib/libssl.so.${OPENSSL_SHLIBVER} \

				lib/engines-${OPENSSL_SHLIBVER}/capi.so \

				lib/engines-${OPENSSL_SHLIBVER}/devcrypto.so \

				lib/engines-${OPENSSL_SHLIBVER}/padlock.so"

SSL3_CONFIGURE_ON=	enable-ssl3-method

THREADPOOL_CONFIGURE_OFF=	no-thread-pool

ZLIB_CONFIGURE_ON=	zlib-dynamic

ZSTD_CFLAGS=		-I${PREFIX}/include

ZSTD_CONFIGURE_ON=	enable-zstd-dynamic

ZSTD_LIB_DEPENDS=	libzstd.so:archivers/zstd



SHLIBS=			lib/engines-${OPENSSL_SHLIBVER}/loader_attic.so



PORTSCOUT=		limit:^${DISTVERSION:R:S/./\./g}\.



.include <bsd.port.options.mk>



.if ${ARCH} == powerpc64

CONFIGURE_ARGS+=	BSD-ppc64

.elif ${ARCH} == powerpc64le

CONFIGURE_ARGS+=	BSD-ppc64le

.elif ${ARCH} == riscv64

CONFIGURE_ARGS+=	BSD-riscv64

.endif



.include <bsd.port.pre.mk>

.if ${PREFIX} == /usr

IGNORE=	the OpenSSL port can not be installed over the base version

.endif



OPENSSLDIR?=	${PREFIX}/openssl

PLIST_SUB+=	OPENSSLDIR=${OPENSSLDIR:S=^${PREFIX}/==}



.include "version.mk"



post-patch:

	${REINPLACE_CMD} -Ee 's|^(build\|install)_docs: .*|\1_docs: \1_man_docs|' \

		${WRKSRC}/Configurations/unix-Makefile.tmpl

	${REINPLACE_CMD} 's|SHLIB_VERSION=3|SHLIB_VERSION=${OPENSSL_SHLIBVER}|' \

		${WRKSRC}/VERSION.dat



post-configure:

	( cd ${WRKSRC} ; ${PERL} configdata.pm --dump )



post-configure-MAN3-off:

	${REINPLACE_CMD} \

		-e 's|^build_man_docs:.*|build_man_docs: $$(MANDOCS1) $$(MANDOCS5)|' \

		-e 's|dummy $$(MANDOCS[37]); do |dummy; do |' \

		${WRKSRC}/Makefile



post-install-SHARED-on:

.for i in ${SHLIBS}

	-@${STRIP_CMD} ${STAGEDIR}${PREFIX}/$i

.endfor



post-install-SHARED-off:

	${RMDIR} ${STAGEDIR}${PREFIX}/lib/engines-12



post-install:

	${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/openssl



post-install-MAN3-on:

	( cd ${STAGEDIR}/${PREFIX} ; find share/man/man3 -not -type d ; \

		find share/man/man7 -not -type d ) | sed 's/$$/.gz/' >> ${TMPPLIST}



.include <bsd.port.post.mk>

security/openssl33/distinfo

deleted100644 → 0
+0 −3
Original line number Diff line number Diff line 
TIMESTAMP = 1769528841

SHA256 (openssl-3.3.6.tar.gz) = 22db04f3c8f9a808c9795dcf7d2713ff40c12c410ea2d1f6435c6c9c8558958b

SIZE (openssl-3.3.6.tar.gz) = 18035615

security/openssl33/files/extra-patch-ktls

deleted100644 → 0
+0 −540

File deleted.

Preview size limit exceeded, changes collapsed.