New port: security/testssl.sh

[tobik]

Summary

New port: security/testssl.sh

testssl.sh is a command line tool which checks a server's service on
any port for the support of TLS/SSL ciphers, protocols as well as some
cryptographic flaws.  Key features:

- Clear output: you can tell easily whether anything is good or bad
- Flexibility: You can test any SSL/TLS enabled and STARTTLS service,
  not only webservers at port 443
- Toolbox: Several command line options help you to run YOUR test and
  configure YOUR output
- Reliability: features are tested thoroughly
- Verbosity: If a particular check cannot be performed because of a
  missing capability on your client side, you'll get a warning
- Privacy: It's only you who sees the result, not a third party

WWW: https://github.com/drwetter/testssl.sh

Approved by:	??? (mentor)
Differential Revision:	https://reviews.freebsd.org/D?????

Test Plan

poudriere testport 11.0/amd64 ok

[mat]

security/testssl.sh/Makefile

17–18 ↗

(On Diff #30209)

So, the port is called testssl, but its default distfile is openssl-pm-snapshot ? seems strange.

I think you messed up things, this should be:

USE_GITHUB=        yes
GH_ACCOUNT=        drwetter
​GH_TUPLE=        drwetter:openssl-pm-snapshot:a9396aaef81d5c1ed714fc625b593522d25914b1:openssl

And then change later to use WRKSRC instead of WRKSRC_testssl, and WRKSRC_openssl instead of WRKSRC.

And set CONFIGURE_WRKSRC and BUILD_WRKSRC to WRKSRC_openssl.

[tobik]

• "Flip" distfiles and WRKSRCs

[mat]

security/testssl.sh/Makefile

15 ↗

(On Diff #30212)

Why does it need ssl:build ?

it actually builds openssl itself.

[tobik]

security/testssl.sh/Makefile

15 ↗

(On Diff #30212)

For OPENSSLDIR but I'm not sure if it's actually needed. Maybe I should just set it to /etc/ssl.

[mat]

security/testssl.sh/Makefile

15 ↗

(On Diff #30212)

Mmm, I missed that, right. I don't know, I think there may be like 5 people on the planet that ever edit the openssl configuration files :-)