./security/bearssl, Implementation of the SSL/TLS protocol (RFC 5246)

[ Image CVSweb ] [ Image Homepage ] [ Image RSS ] [ Image Required by ] [ Image Add to tracker ]

Branch: CURRENT, Version: 0.6nb1, Package name: bearssl-0.6nb1, Maintainer: pkgsrc-users

BearSSL is an implementation of the SSL/TLS protocol (RFC 5246)
written in C. It aims at offering the following features:

* Be correct and secure. In particular, insecure protocol versions
and choices of algorithms are not supported, by design;
cryptographic algorithm implementations are constant-time by
default.

* Be small, both in RAM and code footprint. For instance, a minimal
server implementation may fit in about 20 kilobytes of compiled
code and 25 kilobytes of RAM.

* Be highly portable. BearSSL targets not only "big" operating
systems like Linux and Windows, but also small embedded systems
and even special contexts like bootstrap code.

* Be feature-rich and extensible. SSL/TLS has many defined cipher
suites and extensions; BearSSL should implement most of them,
and allow extra algorithm implementations to be added afterwards,
possibly from third parties.

bearssl is considered alpha-quality software, which means that it
runs but it probably has bugs, some of which being certainly
exploitable vulnerabilities.


Required to build:
[pkgtools/cwrappers]

Master sites:

Filesize: 747.162 KB

Version history: (Expand)

CVS history: (Expand)


   2025-05-31 04:20:32 by Amitai Schleier | Files touched by this commit (1) 
Log message:
bearssl: USE_TOOLS+=gmake to fix Tiger and Snow Leopard builds.

Apple gcc 4.2.1's linker can't handle e.g. "-obuild/libbearssl.dylib",
but the build wasn't trying to do that. The intentional trailing
whitespace in LDOUT and LDDLLOUT was getting lost. gmake avoids this.

NFCI on other platforms. Build-tested on Sequoia and NetBSD.
   2025-05-06 14:07:36 by Thomas Klausner | Files touched by this commit (124) 
Log message:
*: SOEXT -> SHLIB_EXT
   2021-10-26 13:18:07 by Nia Alarie | Files touched by this commit (605) 
Log message:
security: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Unfetchable distfiles (fetched conditionally?):
./security/cyrus-sasl/distinfo \ 
cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2
   2021-10-07 16:54:50 by Nia Alarie | Files touched by this commit (606) 
Log message:
security: Remove SHA1 hashes for distfiles
   2020-11-27 20:52:11 by Amitai Schleier | Files touched by this commit (2) 
Log message:
Quell packaging warning by installing the shlib with ${INSTALL_LIB}.
   2020-11-16 08:43:26 by Amitai Schleier | Files touched by this commit (2) 
Log message:
Pre-create the build's OBJDIR, to be MAKE_JOBS_SAFE on at least Darwin.
(Otherwise a few objects fail pretty early in the build.) Install the
shared library as .dylib on Darwin. Set MASTER_SITES=${HOMEPAGE}. Sort
PLIST and chmod -x libbearssl.a to quell pkglint warnings.
   2020-11-15 22:01:22 by Amitai Schleier | Files touched by this commit (1) 
Log message:
Add a buildlink3.mk.
   2020-07-28 10:49:54 by Thomas Klausner | Files touched by this commit (3) 
Log message:
bearssl: honor CFLAGS and LDFLAGS