libssh2 is a client-side C library implementing the SSH2 protocol. It supports
regular terminal, SCP and SFTP sessions; port forwarding; password, key-based
and keyboard-interactive authentication.
===> The following configuration options are available for libssh2-1.11.1_1,3:
STATIC=off: Build static executables and/or libraries
TRACE=off: Enable debug packet traces
====> SSL protocol support: you have to select exactly one of them
GCRYPT=off: Use GNU crypt library instead of OpenSSL
OPENSSL=on: SSL/TLS support via OpenSSL
===> Use 'make config' to modify these settings
security/libssh2: Remove zlib leftover menu option definition
Remove zlib definition from OPTIONS_DEFAULT as there's no port logic left
Approved by: blanket
security/libssh2: Update to 1.11.1
* Update MASTER_SITES, use GitHub as primary and upstream main website as
fallback
* Fixes CVE-2023-48795
* Convert to CMake for faster builds and cleaner port Makefile
* Make static library option (non default)
* Enable OpenSSL support by default (optional)
PR: 282147
Approved by: portmgr (maintainer timeout, 2+ weeks)
security/libssh2: Import upstream libressl-3.5 fix
Backport upstream commit instead of using own local patch. Also bump
port revision, it will change the binary when built with libressl.
Approved by: sbz (maintainer, timeout), tcberner (mentor)
Differential Revision: https://reviews.freebsd.org/D37278
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security/libssh2: fix the GCRYPT option
The port uses the old crypto configure flags:
--with-libgcrypt and --with-openssl. These flags
are no longer supported.
Besides from the obvious effect of the actual port configuration
not matching user intent, it also produces incorrect pkg-config
file for the given set of dependencies, and other ports that
depend on libssh2 fail when it's configured with GCRYPT=on.
Fix by using the proper configure arguments:
--with-crypto=libgcrypt and --with-crypto=openssl.
PR: 248164
Submitted by: [email protected] (bug report), James French (patch)
Approved by: maintainer timeout
security/libssh2: fix build on GCC architectures and check-plist
Add USES=compiler:c11 to fix build on GCC architectures.
While here, also add two missing manpages to fix make check-plist.
Assume "pkg-config --static zlib" works after 9.x EOL
Many hacks simply removed dependency on zlib which broke static linking
if it was actually supported.
Fix usage of WITH_OPENSSL_BASE, WITH_OPENSSL_PORT and OPENSSL_PORT.
WITH_OPENSSL_* can't be set after bsd.port.pre.mk.
Fold all other usage into using SSL_DEFAULT == foo
PR: 210149
Submitted by: mat
Exp-run by: antoine
Sponsored by: The FreeBSD Foundation, Absolight
Differential Revision: https://reviews.freebsd.org/D6577
By default libtool replaces -export-symbols <file> with -retain-symbols-file
<file> on ELF systems, but this doesn't really do what -export-symbols is
meant to do. On GNU ELF systems it converts <file> to a simple version
script first and then uses -version-script instead of -retain-symbols-file.
Let USES=libtool patch libtool scripts to do this on all systems with GNU
ld(1).
Bump PORTREVISION on all ports where the build log contains -export-symbols.
audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions. Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to. Fix a number of other issues in the same
(Only the first 15 lines of the commit message are shown above )
security/libgcrypt: 1.6.1 -> 1.6.2, bump depends
Changes:
- src/sexp.c (do_vsexp_sscan): Return error for invalid args.
- cipher/md.c (_gcry_md_info): Fix a segv in case of calling
with wrong parameters.
- cipher/primegen.c (_gcry_generate_elg_prime): Change to return an
error code, possible NULL deref in call to prime generator.
- cipher/dsa.c (generate): Take care of new return code.
- cipher/elgamal.c (generate): Change to return an error code. Take
care of _gcry_generate_elg_prime return code.
- ecc: Support the non-standard 0x40 compression flag for EdDSA.
- mpi: Extend the internal mpi_get_buffer.
- mpi: Fix regression for powerpc-apple-darwin detection.
- Fix bug inhibiting the use of the sentinel attribute in src/gcrypt.h.in
(Only the first 15 lines of the commit message are shown above )
security/libssh2:
- Convert to USES=libtool and USES=pathfix
- Add INSTALL_TARGET=install-strip
- Only depend on openssl if GCRYPT option is off
- Sanitize libssh2.pc
devel/libvirt:
- Remove workaround for broken libssh2.pc
- Add USES=libtool and bump dependent ports
- Convert to INSTALL_TARGET=install-strip
devel/libvirt-glib:
- Convert to USES=libtool
Approved by: portmgr (implicit, bump unstaged port)
Argh. So, the update notifier was wrong, and 0.2 is not a new release
(of course), but I was fooled because there's a separate project called
libssh which *did* just have a new release. 1.0 is the real update.
Pointed out by: J. Johnston
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.
To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.
To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.
Changes to Mk/*:
- Add runtime detection magic in bsd.port.mk
(Only the first 15 lines of the commit message are shown above )
- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script
supports them. This is determined by running ``configure --help'' in
do-configure target and set the shell variable _LATE_CONFIGURE_ARGS
which is then passed to CONFIGURE_ARGS.
- Remove --mandir and --infodir in ports' Makefile where applicable
Few ports use REINPLACE_CMD to achieve the same effect, remove them too.
- Correct some manual pages location from PREFIX/man to MANPREFIX/man
- Define INFO_PATH where necessary
- Document that .info files are installed in a subdirectory relative to
PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and
subdirectory detection.
PR: ports/111470
Approved by: portmgr
Discussed with: stas (Mk/*), gerald (info related stuffs)
Tested by: pointyhat exp run
- Provide a patch to fix a bug in the configure script that caused the include
and library directory flags to gcc to be wrong
- Bump PORTREVISION
PR: 102920
Submitted by: David Thiel <[email protected]> (maintainer)
libssh2 is a library implementing the SSH2 protocol as defined by
Internet Drafts: SECSH-TRANS(22), SECSH-USERAUTH(25), SECSH-CONNECTION(23),
SECSH-ARCH(20), SECSH-FILEXFER(06)*, SECSH-DHGEX(04), and SECSH-NUMBERS(10).
