security/openssl-quictls: Remove expired port

graphics/py-cairo|graphics/py-pycairo|2026-02-12|Use correct Python package name

java/openjdk19||2026-02-14|Has expired: No longer supported by upstream

emulators/firebird-emu|emulators/firebird|2026-02-14|Align with upstream project name

security/openssl-quictls|security/openssl33-quictls|2026-02-14|Has expired: Upstream project has been archived, use security/openssl33-quictls

    SUBDIR += openssl

    SUBDIR += openssl-agent

    SUBDIR += openssl-oqsprovider

    SUBDIR += openssl-quictls

    SUBDIR += openssl-unsafe

    SUBDIR += openssl111

    SUBDIR += openssl33

PORTNAME=	openssl

DISTVERSIONPREFIX=	${PORTNAME}-

PORTVERSION=	3.0.15

PORTREVISION=	1

DISTVERSIONSUFFIX=	-quic1

CATEGORIES=	security devel

PKGNAMESUFFIX=	-${GH_ACCOUNT}

MAINTAINER=	brnrd@FreeBSD.org

COMMENT=	QUIC capable fork of OpenSSL

WWW=		https://www.github.com/quictls/openssl

LICENSE=	APACHE20

LICENSE_FILE=	${WRKSRC}/LICENSE.txt

CONFLICTS_INSTALL=	boringssl libressl libressl-devel openssl openssl111 openssl3* openssl31-quictls

BROKEN_i386=	ld: error: undefined symbol: __atomic_is_lock_free

DEPRECATED=	Upstream project has been archived, use security/quictls

EXPIRATION_DATE=2025-12-31

HAS_CONFIGURE=	yes

CONFIGURE_SCRIPT=	config

CONFIGURE_ENV=	PERL="${PERL}"

CONFIGURE_ARGS=	--openssldir=${OPENSSLDIR} \

		--prefix=${PREFIX}

USES=		cpe perl5

USE_PERL5=	build

USE_GITHUB=	yes

GH_ACCOUNT=	quictls

TEST_TARGET=	test

LDFLAGS_i386=	-Wl,-znotext

MAKE_ARGS+=	WHOLE_ARCHIVE_FLAG=--whole-archive CNF_LDFLAGS="${LDFLAGS}"

MAKE_ENV+=	LIBRPATH="${PREFIX}/lib" GREP_OPTIONS=

OPTIONS_GROUP=		CIPHERS HASHES MODULES OPTIMIZE PROTOCOLS

OPTIONS_GROUP_CIPHERS=	ARIA DES GOST IDEA SM4 RC2 RC4 RC5 WEAK-SSL-CIPHERS

OPTIONS_GROUP_HASHES=	MD2 MD4 MDC2 RMD160 SM2 SM3

OPTIONS_GROUP_OPTIMIZE=	ASM SSE2 THREADS

OPTIONS_GROUP_MODULES=	FIPS LEGACY

OPTIONS_DEFINE_i386=	I386

OPTIONS_GROUP_PROTOCOLS=NEXTPROTONEG SCTP SSL3 TLS1 TLS1_1 TLS1_2

OPTIONS_DEFINE=	ASYNC CT KTLS MAN3 RFC3779 SHARED ZLIB

OPTIONS_DEFAULT=ASM ASYNC CT DES EC FIPS GOST KTLS MAN3 MD4 NEXTPROTONEG \

		RC2 RC4 RMD160 SCTP SHARED SSE2 THREADS TLS1 TLS1_1 TLS1_2

OPTIONS_EXCLUDE_i386=	FIPS

OPTIONS_GROUP_OPTIMIZE_amd64=	EC

.if ${MACHINE_ARCH} == "amd64"

OPTIONS_GROUP_OPTIMIZE+=	EC

.elif ${MACHINE_ARCH} == "mips64el"

OPTIONS_GROUP_OPTIMIZE+=	EC

.endif

OPTIONS_SUB=	yes

ARIA_DESC=	ARIA (South Korean standard)

ASM_DESC=	Assembler code

ASYNC_DESC=	Asynchronous mode

CIPHERS_DESC=	Block Cipher Support

CT_DESC=	Certificate Transparency Support

DES_DESC=	(Triple) Data Encryption Standard

EC_DESC=	Optimize NIST elliptic curves

FIPS_DESC=	Build FIPS provider (Note: NOT yet FIPS validated)

GOST_DESC=	GOST (Russian standard)

HASHES_DESC=	Hash Function Support

I386_DESC=	i386 (instead of i486+)

IDEA_DESC=	International Data Encryption Algorithm

KTLS_DESC=	Use in-kernel TLS (FreeBSD >13)

LEGACY_DESC=	Older algorithms

MAN3_DESC=	Install API manpages (section 3, 7)

MD2_DESC=	MD2 (obsolete) (requires LEGACY)

MD4_DESC=	MD4 (unsafe)

MDC2_DESC=	MDC-2 (patented, requires DES)

MODULES_DESC=	Provider modules

NEXTPROTONEG_DESC=	Next Protocol Negotiation (SPDY)

OPTIMIZE_DESC=	Optimizations

PROTOCOLS_DESC=	Protocol Support

RC2_DESC=	RC2 (unsafe)

RC4_DESC=	RC4 (unsafe)

RC5_DESC=	RC5 (patented)

RMD160_DESC=	RIPEMD-160

RFC3779_DESC=	RFC3779 support (BGP)

SCTP_DESC=	SCTP (Stream Control Transmission)

SHARED_DESC=	Build shared libraries

SM2_DESC=	SM2 Elliptic Curve DH (Chinese standard)

SM3_DESC=	SM3 256bit (Chinese standard)

SM4_DESC=	SM4 128bit (Chinese standard)

SSE2_DESC=	Runtime SSE2 detection

SSL3_DESC=	SSLv3 (unsafe)

TLS1_DESC=	TLSv1.0 (requires TLS1_1, TLS1_2)

TLS1_1_DESC=	TLSv1.1 (requires TLS1_2)

TLS1_2_DESC=	TLSv1.2

WEAK-SSL-CIPHERS_DESC=	Weak cipher support (unsafe)

# Upstream default disabled options

.for _option in fips md2 ktls rc5 sctp ssl3 weak-ssl-ciphers zlib

${_option:tu}_CONFIGURE_ON=	enable-${_option}

.endfor

# Upstream default enabled options

.for _option in aria asm async ct des gost idea md4 mdc2 legacy \

	nextprotoneg rc2 rc4 rfc3779 rmd160 shared sm2 sm3 sm4 sse2 \

	threads tls1 tls1_1 tls1_2

${_option:tu}_CONFIGURE_OFF=	no-${_option}

.endfor

MD2_IMPLIES=	LEGACY

MDC2_IMPLIES=	DES

TLS1_IMPLIES=	TLS1_1

TLS1_1_IMPLIES=	TLS1_2

EC_CONFIGURE_ON=	enable-ec_nistp_64_gcc_128

FIPS_VARS=		shlibs+=lib/ossl-modules/fips.so

I386_CONFIGURE_ON=	386

LEGACY_VARS=		shlibs+=lib/ossl-modules/legacy.so

MAN3_EXTRA_PATCHES_OFF=	${FILESDIR}/extra-patch-util_find-doc-nits

SHARED_MAKE_ENV=	SHLIBVER=${OPENSSL_SHLIBVER}

SHARED_PLIST_SUB=	SHLIBVER=${OPENSSL_SHLIBVER}

SHARED_USE=		ldconfig=yes

SHARED_VARS=		shlibs+="lib/libcrypto.so.${OPENSSL_SHLIBVER} \

				lib/libssl.so.${OPENSSL_SHLIBVER} \

				lib/engines-${OPENSSL_SHLIBVER}/capi.so \

				lib/engines-${OPENSSL_SHLIBVER}/devcrypto.so \

				lib/engines-${OPENSSL_SHLIBVER}/padlock.so"

SSL3_CONFIGURE_ON+=	enable-ssl3-method

ZLIB_CONFIGURE_ON=	zlib-dynamic

SHLIBS=			lib/engines-${OPENSSL_SHLIBVER}/loader_attic.so

PORTSCOUT=		limit:^${DISTVERSION:R:S/./\./g}\.

.include <bsd.port.pre.mk>

.if ${PREFIX} == /usr

IGNORE=	the OpenSSL port can not be installed over the base version

.endif

OPENSSLDIR?=	${PREFIX}/openssl

PLIST_SUB+=	OPENSSLDIR=${OPENSSLDIR:S=^${PREFIX}/==}

.include "version.mk"

post-patch:

	${REINPLACE_CMD} -Ee 's|^(build\|install)_docs: .*|\1_docs: \1_man_docs|' \

		${WRKSRC}/Configurations/unix-Makefile.tmpl

	${REINPLACE_CMD} 's|^SHLIB_VERSION=.*$$|SHLIB_VERSION=${OPENSSL_SHLIBVER}|' \

		${WRKSRC}/VERSION.dat

post-configure:

	( cd ${WRKSRC} ; ${PERL} configdata.pm --dump )

post-configure-MAN3-off:

	${REINPLACE_CMD} \

		-e 's|^build_man_docs:.*|build_man_docs: $$(MANDOCS1) $$(MANDOCS5)|' \

		-e 's|dummy $$(MANDOCS[37]); do |dummy; do |' \

		${WRKSRC}/Makefile

post-install-SHARED-on:

.for i in ${SHLIBS}

	-@${STRIP_CMD} ${STAGEDIR}${PREFIX}/$i

.endfor

post-install-SHARED-off:

	${RMDIR} ${STAGEDIR}${PREFIX}/lib/engines-${OPENSSL_SHLIBVER}

post-install:

	${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/openssl

post-install-MAN3-on:

	( cd ${STAGEDIR}/${PREFIX} ; find share/man/man3 -not -type d ; \

		find share/man/man7 -not -type d ) | sed 's/$$/.gz/' >> ${TMPPLIST}

.include <bsd.port.post.mk>

TIMESTAMP = 1727803672

SHA256 (quictls-openssl-openssl-3.0.15-quic1_GH0.tar.gz) = 8da73f504ce174d5b798515433244c08353dd7c61ead1e3db457cb9d267d13eb

SIZE (quictls-openssl-openssl-3.0.15-quic1_GH0.tar.gz) = 15484134

--- util/find-doc-nits.orig	2023-08-03 13:45:48 UTC

+++ util/find-doc-nits

@@ -80,7 +80,7 @@ my $temp = '/tmp/docnits.txt';

 my $OUT;

 my $status = 0;

-$opt_m = "man1,man3,man5,man7" unless $opt_m;

+$opt_m = "man1,man5" unless $opt_m;

 die "Argument of -m option may contain only man1, man3, man5, and/or man7"

     unless $opt_m =~ /^(man[1357][, ]?)*$/;

 my @sections = ( split /[, ]/, $opt_m );

@@ -725,7 +725,7 @@ sub check {

         next if $target eq '';                  # Skip if links within page, or

         next if $target =~ /::/;                #   links to a Perl module, or

         next if $target =~ /^https?:/;          #   is a URL link, or

-        next if $target =~ /\([1357]\)$/;       #   it has a section

+        next if $target =~ /\([15]\)$/;       #   it has a section

         err($id, "Missing man section number (likely, $mansect) in L<$target>")

     }

     # Check for proper links to commands.