security/mbedtls: Move to security/mbedtls2

The port has expired but isn't removed yet because there are still too
many consumers.  Rename it because the name "security/mbedtls" makes it
look like it's the default version.

PR:		283792

4 files changed, 218 insertions, 0 deletions

diff --git a/security/mbedtls2/Makefile b/security/mbedtls2/Makefile
new file mode 100644
index 000000000000..4f198194a9e6
--- /dev/null
+++ b/security/mbedtls2/Makefile
@@ -0,0 +1,47 @@
+PORTNAME=	mbedtls
+DISTVERSION=	2.28.9
+CATEGORIES=	security devel
+MASTER_SITES=	https://github.com/Mbed-TLS/${PORTNAME}/releases/download/${DISTNAME}/
+PKGNAMESUFFIX=	2
+
+MAINTAINER=	tijl@FreeBSD.org
+COMMENT=	SSL/TLS and cryptography library
+WWW=		https://www.trustedfirmware.org/projects/mbed-tls/
+
+LICENSE=	APACHE20 GPLv2+
+LICENSE_COMB=	dual
+LICENSE_FILE=	${WRKSRC}/LICENSE
+
+DEPRECATED=	Upstream support ends at the end of 2024
+EXPIRATION_DATE=	2024-12-31
+
+USES=		cmake:testing pathfix python:build,test shebangfix tar:bz2
+USE_LDCONFIG=	yes
+
+SHEBANG_FILES=	scripts/*.py tests/scripts/*.py
+
+CMAKE_ON=	CMAKE_BUILD_RPATH_USE_ORIGIN \
+		ENABLE_PROGRAMS \
+		ENABLE_ZLIB_SUPPORT \
+		LINK_WITH_PTHREAD \
+		USE_SHARED_MBEDTLS_LIBRARY
+CMAKE_OFF=	ENABLE_TESTING
+CMAKE_TESTING_ON=	ENABLE_TESTING
+CMAKE_TESTING_PARALLEL_LEVEL=	1
+
+PORTSCOUT=	limit:^${DISTVERSION:R:S/./\./g}\.
+
+PLIST_SUB=	DISTVERSION=${DISTVERSION}
+
+pre-configure:
+	@${WRKSRC}/scripts/config.py -f ${WRKSRC}/include/mbedtls/config.h set MBEDTLS_SSL_DTLS_SRTP
+	@${WRKSRC}/scripts/config.py -f ${WRKSRC}/include/mbedtls/config.h set MBEDTLS_THREADING_C
+	@${WRKSRC}/scripts/config.py -f ${WRKSRC}/include/mbedtls/config.h set MBEDTLS_THREADING_PTHREAD
+
+post-install:
+	${RM} -r ${STAGEDIR}${PREFIX}/include/everest
+	@cd ${STAGEDIR}${PREFIX}/bin && for f in *; do \
+		${MV} "$$f" "mbedtls_$$f"; \
+	done
+
+.include <bsd.port.mk>
diff --git a/security/mbedtls2/distinfo b/security/mbedtls2/distinfo
new file mode 100644
index 000000000000..c5b03210ec41
--- /dev/null
+++ b/security/mbedtls2/distinfo
@@ -0,0 +1,3 @@
+TIMESTAMP = 1725116635
+SHA256 (mbedtls-2.28.9.tar.bz2) = e85ea97aaf78dd6c0a5ba2e54dd5932ffa15f39abfc189c26beef7684630c02b
+SIZE (mbedtls-2.28.9.tar.bz2) = 3357068
diff --git a/security/mbedtls2/pkg-descr b/security/mbedtls2/pkg-descr
new file mode 100644
index 000000000000..582aeb9f84d1
--- /dev/null
+++ b/security/mbedtls2/pkg-descr
@@ -0,0 +1,2 @@
+mbed TLS is a lightweight, portable, fully featured and standards compliant
+SSL/TLS and cryptography library.
diff --git a/security/mbedtls2/pkg-plist b/security/mbedtls2/pkg-plist
new file mode 100644
index 000000000000..c6f5d15fd541
--- /dev/null
+++ b/security/mbedtls2/pkg-plist
@@ -0,0 +1,166 @@
+bin/mbedtls_benchmark
+bin/mbedtls_cert_app
+bin/mbedtls_cert_req
+bin/mbedtls_cert_write
+bin/mbedtls_crl_app
+bin/mbedtls_crypt_and_hash
+bin/mbedtls_crypto_examples
+bin/mbedtls_dh_client
+bin/mbedtls_dh_genprime
+bin/mbedtls_dh_server
+bin/mbedtls_dtls_client
+bin/mbedtls_dtls_server
+bin/mbedtls_ecdh_curve25519
+bin/mbedtls_ecdsa
+bin/mbedtls_gen_entropy
+bin/mbedtls_gen_key
+bin/mbedtls_gen_random_ctr_drbg
+bin/mbedtls_gen_random_havege
+bin/mbedtls_generic_sum
+bin/mbedtls_hello
+bin/mbedtls_key_app
+bin/mbedtls_key_app_writer
+bin/mbedtls_key_ladder_demo
+bin/mbedtls_key_ladder_demo.sh
+bin/mbedtls_load_roots
+bin/mbedtls_metatest
+bin/mbedtls_mini_client
+bin/mbedtls_mpi_demo
+bin/mbedtls_pem2der
+bin/mbedtls_pk_decrypt
+bin/mbedtls_pk_encrypt
+bin/mbedtls_pk_sign
+bin/mbedtls_pk_verify
+bin/mbedtls_psa_constant_names
+bin/mbedtls_query_compile_time_config
+bin/mbedtls_req_app
+bin/mbedtls_rsa_decrypt
+bin/mbedtls_rsa_encrypt
+bin/mbedtls_rsa_genkey
+bin/mbedtls_rsa_sign
+bin/mbedtls_rsa_sign_pss
+bin/mbedtls_rsa_verify
+bin/mbedtls_rsa_verify_pss
+bin/mbedtls_selftest
+bin/mbedtls_ssl_client1
+bin/mbedtls_ssl_client2
+bin/mbedtls_ssl_context_info
+bin/mbedtls_ssl_fork_server
+bin/mbedtls_ssl_mail_client
+bin/mbedtls_ssl_pthread_server
+bin/mbedtls_ssl_server
+bin/mbedtls_ssl_server2
+bin/mbedtls_strerror
+bin/mbedtls_udp_proxy
+bin/mbedtls_zeroize
+include/mbedtls/aes.h
+include/mbedtls/aesni.h
+include/mbedtls/arc4.h
+include/mbedtls/aria.h
+include/mbedtls/asn1.h
+include/mbedtls/asn1write.h
+include/mbedtls/base64.h
+include/mbedtls/bignum.h
+include/mbedtls/blowfish.h
+include/mbedtls/bn_mul.h
+include/mbedtls/camellia.h
+include/mbedtls/ccm.h
+include/mbedtls/certs.h
+include/mbedtls/chacha20.h
+include/mbedtls/chachapoly.h
+include/mbedtls/check_config.h
+include/mbedtls/cipher.h
+include/mbedtls/cipher_internal.h
+include/mbedtls/cmac.h
+include/mbedtls/compat-1.3.h
+include/mbedtls/config.h
+include/mbedtls/config_psa.h
+include/mbedtls/constant_time.h
+include/mbedtls/ctr_drbg.h
+include/mbedtls/debug.h
+include/mbedtls/des.h
+include/mbedtls/dhm.h
+include/mbedtls/ecdh.h
+include/mbedtls/ecdsa.h
+include/mbedtls/ecjpake.h
+include/mbedtls/ecp.h
+include/mbedtls/ecp_internal.h
+include/mbedtls/entropy.h
+include/mbedtls/entropy_poll.h
+include/mbedtls/error.h
+include/mbedtls/gcm.h
+include/mbedtls/havege.h
+include/mbedtls/hkdf.h
+include/mbedtls/hmac_drbg.h
+include/mbedtls/md.h
+include/mbedtls/md2.h
+include/mbedtls/md4.h
+include/mbedtls/md5.h
+include/mbedtls/md_internal.h
+include/mbedtls/memory_buffer_alloc.h
+include/mbedtls/net.h
+include/mbedtls/net_sockets.h
+include/mbedtls/nist_kw.h
+include/mbedtls/oid.h
+include/mbedtls/padlock.h
+include/mbedtls/pem.h
+include/mbedtls/pk.h
+include/mbedtls/pk_internal.h
+include/mbedtls/pkcs11.h
+include/mbedtls/pkcs12.h
+include/mbedtls/pkcs5.h
+include/mbedtls/platform.h
+include/mbedtls/platform_time.h
+include/mbedtls/platform_util.h
+include/mbedtls/poly1305.h
+include/mbedtls/psa_util.h
+include/mbedtls/ripemd160.h
+include/mbedtls/rsa.h
+include/mbedtls/rsa_internal.h
+include/mbedtls/sha1.h
+include/mbedtls/sha256.h
+include/mbedtls/sha512.h
+include/mbedtls/ssl.h
+include/mbedtls/ssl_cache.h
+include/mbedtls/ssl_ciphersuites.h
+include/mbedtls/ssl_cookie.h
+include/mbedtls/ssl_internal.h
+include/mbedtls/ssl_ticket.h
+include/mbedtls/threading.h
+include/mbedtls/timing.h
+include/mbedtls/version.h
+include/mbedtls/x509.h
+include/mbedtls/x509_crl.h
+include/mbedtls/x509_crt.h
+include/mbedtls/x509_csr.h
+include/mbedtls/xtea.h
+include/psa/crypto.h
+include/psa/crypto_builtin_composites.h
+include/psa/crypto_builtin_primitives.h
+include/psa/crypto_compat.h
+include/psa/crypto_config.h
+include/psa/crypto_driver_common.h
+include/psa/crypto_driver_contexts_composites.h
+include/psa/crypto_driver_contexts_primitives.h
+include/psa/crypto_extra.h
+include/psa/crypto_platform.h
+include/psa/crypto_se_driver.h
+include/psa/crypto_sizes.h
+include/psa/crypto_struct.h
+include/psa/crypto_types.h
+include/psa/crypto_values.h
+lib/libmbedcrypto.a
+lib/libmbedcrypto.so
+lib/libmbedcrypto.so.%%DISTVERSION%%
+lib/libmbedcrypto.so.7
+lib/libmbedtls.a
+lib/libmbedtls.so
+lib/libmbedtls.so.14
+lib/libmbedtls.so.%%DISTVERSION%%
+lib/libmbedx509.a
+lib/libmbedx509.so
+lib/libmbedx509.so.1
+lib/libmbedx509.so.%%DISTVERSION%%
+libdata/pkgconfig/mbedcrypto.pc
+libdata/pkgconfig/mbedtls.pc
+libdata/pkgconfig/mbedx509.pc