Page MenuHomeFreeBSD
Files F108561201

D11406.id30209.diff
No OneTemporary
Actions

D11406.id30209.diff
View Options

Index: security/testssl.sh/Makefile
===================================================================
--- /dev/null
+++ security/testssl.sh/Makefile
@@ -0,0 +1,72 @@
+# $FreeBSD$
+
+PORTNAME= testssl.sh
+PORTVERSION= 2.8
+CATEGORIES= security
+
+MAINTAINER= tobik@FreeBSD.org
+COMMENT= Test TLS/SSL encryption anywhere on any port
+
+LICENSE= GPLv2
+LICENSE_FILE= ${WRKSRC}/LICENSE
+
+RUN_DEPENDS= bash:shells/bash
+
+USES= perl5 shebangfix ssl:build
+USE_GITHUB= yes
+GH_TUPLE= drwetter:${PORTNAME}:${PORTVERSION}:testssl \
+ drwetter:openssl-pm-snapshot:a9396aaef81d5c1ed714fc625b593522d25914b1
+USE_PERL5= build
+
+SHEBANG_FILES= ${WRKSRC_testssl}/testssl.sh \
+ ${WRKSRC_testssl}/utils/* \
+
+# We deliberately want to build an OpenSSL binary with the most
+# insecure and obsolete ciphers available for testing purposes! See
+# ${WRKSRC_testssl}/bin/Readme.md and utils/make-openssl.sh for more
+# details.
+HAS_CONFIGURE= yes
+CONFIGURE_ARGS= --openssldir=${OPENSSLDIR} \
+ enable-zlib \
+ enable-ssl2 \
+ enable-ssl3 \
+ enable-ssl-trace \
+ enable-rc5 \
+ enable-rc2 \
+ enable-gost \
+ enable-cms \
+ enable-md2 \
+ enable-mdc2 \
+ enable-ec \
+ enable-ec2m \
+ enable-ecdh \
+ enable-ecdsa \
+ enable-seed \
+ enable-camellia \
+ enable-idea \
+ enable-rfc3779 \
+ enable-ec_nistp_64_gcc_128 \
+ experimental-jpake \
+ -DOPENSSL_USE_IPV6
+CONFIGURE_ENV= PERL="${PERL}"
+CONFIGURE_SCRIPT= config
+
+# The build randomly fails sometimes when building in parallel for
+# unknown reasons.
+MAKE_JOBS_UNSAFE= yes
+
+post-patch:
+ @${REINPLACE_CMD} -e '/elif test_openssl_suffix/d' \
+ -e 's@: \# 5. we tried.*$$@else OPENSSL="${PREFIX}/libexec/openssl.testssl.sh"@' \
+ -e 's@$${TESTSSL_INSTALL_DIR:-""}@$${TESTSSL_INSTALL_DIR:-"${DATADIR}"}@' \
+ -e '/^check_bsd_mount$$/d' \
+ ${WRKSRC_testssl}/testssl.sh
+
+do-install:
+ ${INSTALL_PROGRAM} ${WRKSRC}/apps/openssl ${STAGEDIR}${PREFIX}/libexec/openssl.testssl.sh
+ ${INSTALL_SCRIPT} ${WRKSRC_testssl}/testssl.sh ${STAGEDIR}${PREFIX}/bin
+ @${MKDIR} ${STAGEDIR}${DATADIR}/etc ${STAGEDIR}${DATADIR}/utils
+ @cd ${WRKSRC_testssl}/etc && ${COPYTREE_SHARE} . ${STAGEDIR}${DATADIR}/etc
+ @cd ${WRKSRC_testssl}/utils && ${COPYTREE_SHARE} . ${STAGEDIR}${DATADIR}/utils
+
+.include <bsd.port.mk>
Index: security/testssl.sh/distinfo
===================================================================
--- /dev/null
+++ security/testssl.sh/distinfo
@@ -0,0 +1,5 @@
+TIMESTAMP = 1498718555
+SHA256 (drwetter-openssl-pm-snapshot-2.8-a9396aaef81d5c1ed714fc625b593522d25914b1_GH0.tar.gz) = 798230c8dc8d7723fff5f6687b1150a3165254eb65c4f6875b7b6b66a53f9c47
+SIZE (drwetter-openssl-pm-snapshot-2.8-a9396aaef81d5c1ed714fc625b593522d25914b1_GH0.tar.gz) = 5491000
+SHA256 (drwetter-testssl.sh-2.8_GH0.tar.gz) = 76c1b21fcbaa4e625b77c9a9c7a137a2272cd84d07911fb213101aa6b9ce8cfa
+SIZE (drwetter-testssl.sh-2.8_GH0.tar.gz) = 8529555
Index: security/testssl.sh/pkg-descr
===================================================================
--- /dev/null
+++ security/testssl.sh/pkg-descr
@@ -0,0 +1,15 @@
+testssl.sh is a command line tool which checks a server's service on
+any port for the support of TLS/SSL ciphers, protocols as well as some
+cryptographic flaws. Key features:
+
+- Clear output: you can tell easily whether anything is good or bad
+- Flexibility: You can test any SSL/TLS enabled and STARTTLS service,
+ not only webservers at port 443
+- Toolbox: Several command line options help you to run YOUR test and
+ configure YOUR output
+- Reliability: features are tested thoroughly
+- Verbosity: If a particular check cannot be performed because of a
+ missing capability on your client side, you'll get a warning
+- Privacy: It's only you who sees the result, not a third party
+
+WWW: https://github.com/drwetter/testssl.sh
Index: security/testssl.sh/pkg-plist
===================================================================
--- /dev/null
+++ security/testssl.sh/pkg-plist
@@ -0,0 +1,20 @@
+bin/testssl.sh
+libexec/openssl.testssl.sh
+%%DATADIR%%/etc/Apple.pem
+%%DATADIR%%/etc/Linux.pem
+%%DATADIR%%/etc/Microsoft.pem
+%%DATADIR%%/etc/Mozilla.pem
+%%DATADIR%%/etc/README.md
+%%DATADIR%%/etc/ca_hashes.txt
+%%DATADIR%%/etc/curves.txt
+%%DATADIR%%/etc/mapping-rfc.txt
+%%DATADIR%%/etc/mapping.txt
+%%DATADIR%%/utils/ccs-injection.bash
+%%DATADIR%%/utils/checkcert.sh
+%%DATADIR%%/utils/create_ca_hashes.sh
+%%DATADIR%%/utils/curves.bash
+%%DATADIR%%/utils/heartbleed.bash
+%%DATADIR%%/utils/make-openssl.sh
+%%DATADIR%%/utils/parse_client_ciphers.pl
+%%DATADIR%%/utils/prototype.ssl2proto-check.bash
+%%DATADIR%%/utils/prototype.tls-protocol-checker.bash

File Metadata

Mime Type
text/plain
Expires
Mon, Jan 27, 8:43 AM (52 m, 27 s)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
16192505
Default Alt Text
D11406.id30209.diff (4 KB)

Event Timeline