summaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
Diffstat (limited to 'security')
-rw-r--r--security/Makefile3
-rw-r--r--security/beid/Makefile2
-rw-r--r--security/certmonger/Makefile1
-rw-r--r--security/clamav-lts/Makefile2
-rw-r--r--security/clamav/Makefile2
-rw-r--r--security/gsad/Makefile1
-rw-r--r--security/gvm-libs/Makefile2
-rw-r--r--security/kc/Makefile2
-rw-r--r--security/lasso/Makefile2
-rw-r--r--security/lastpass-cli/Makefile1
-rw-r--r--security/libcryptui/Makefile50
-rw-r--r--security/libcryptui/distinfo3
-rw-r--r--security/libcryptui/pkg-descr3
-rw-r--r--security/libcryptui/pkg-plist139
-rw-r--r--security/libpki/Makefile2
-rw-r--r--security/libsectok/Makefile48
-rw-r--r--security/libsectok/distinfo2
-rw-r--r--security/libsectok/pkg-descr3
-rw-r--r--security/linux-rl9-ca-certificates/Makefile69
-rw-r--r--security/linux-rl9-ca-certificates/pkg-plist446
-rw-r--r--security/modsecurity3/Makefile1
-rw-r--r--security/oath-toolkit/Makefile2
-rw-r--r--security/openca-ocspd/Makefile1
-rw-r--r--security/openconnect/Makefile2
-rw-r--r--security/pwman/Makefile2
-rw-r--r--security/py-xmlsec/Makefile1
-rw-r--r--security/sectok/Makefile41
-rw-r--r--security/sectok/distinfo2
-rw-r--r--security/sectok/files/patch-cyberflex.c61
-rw-r--r--security/sectok/pkg-descr3
-rw-r--r--security/stoken/Makefile2
-rw-r--r--security/vuxml/vuln/2025.xml28
-rw-r--r--security/xmlsec1/Makefile1
33 files changed, 554 insertions, 376 deletions
diff --git a/security/Makefile b/security/Makefile
index 709e49a80ab7..fd6b6dafa7ea 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -287,7 +287,6 @@
SUBDIR += libargon2
SUBDIR += libassuan
SUBDIR += libcaes
- SUBDIR += libcryptui
SUBDIR += libdecaf
SUBDIR += libecc
SUBDIR += libfcrypto
@@ -324,7 +323,6 @@
SUBDIR += libscep
SUBDIR += libscrypt
SUBDIR += libsecret
- SUBDIR += libsectok
SUBDIR += libsodium
SUBDIR += libssh
SUBDIR += libssh2
@@ -1283,7 +1281,6 @@
SUBDIR += seccure
SUBDIR += seclists
SUBDIR += secpanel
- SUBDIR += sectok
SUBDIR += secure_delete
SUBDIR += sedutil
SUBDIR += sequoia
diff --git a/security/beid/Makefile b/security/beid/Makefile
index 0729194afca3..0e3dee8dcd46 100644
--- a/security/beid/Makefile
+++ b/security/beid/Makefile
@@ -1,7 +1,7 @@
PORTNAME= beid
DISTVERSIONPREFIX= v
DISTVERSION= 5.1.21
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= security
MAINTAINER= tijl@FreeBSD.org
diff --git a/security/certmonger/Makefile b/security/certmonger/Makefile
index 6d992e7e3e51..8e086c03f98e 100644
--- a/security/certmonger/Makefile
+++ b/security/certmonger/Makefile
@@ -1,5 +1,6 @@
PORTNAME= certmonger
DISTVERSION= 0.79.20
+PORTREVISION= 1
CATEGORIES= security
MASTER_SITES= https://pagure.io/certmonger/archive/${DISTVERSION}/
diff --git a/security/clamav-lts/Makefile b/security/clamav-lts/Makefile
index d4a76df191c8..60a6937de18f 100644
--- a/security/clamav-lts/Makefile
+++ b/security/clamav-lts/Makefile
@@ -1,6 +1,6 @@
PORTNAME= clamav
DISTVERSION= 1.0.8
-PORTREVISION= 3
+PORTREVISION= 4
PORTEPOCH= 1
CATEGORIES= security
MASTER_SITES= https://www.clamav.net/downloads/production/
diff --git a/security/clamav/Makefile b/security/clamav/Makefile
index b0eeb25b33e2..dec2065af9ae 100644
--- a/security/clamav/Makefile
+++ b/security/clamav/Makefile
@@ -1,6 +1,6 @@
PORTNAME= clamav
DISTVERSION= 1.4.2
-PORTREVISION= 3
+PORTREVISION= 4
PORTEPOCH= 1
CATEGORIES= security
MASTER_SITES= https://www.clamav.net/downloads/production/
diff --git a/security/gsad/Makefile b/security/gsad/Makefile
index d09ccc640d2a..93105ab32e2e 100644
--- a/security/gsad/Makefile
+++ b/security/gsad/Makefile
@@ -1,6 +1,7 @@
PORTNAME= gsad
DISTVERSIONPREFIX= v
DISTVERSION= 24.3.0
+PORTREVISION= 1
CATEGORIES= security
MAINTAINER= acm@FreeBSD.org
diff --git a/security/gvm-libs/Makefile b/security/gvm-libs/Makefile
index f11ade33a8ca..9196b191731d 100644
--- a/security/gvm-libs/Makefile
+++ b/security/gvm-libs/Makefile
@@ -1,7 +1,7 @@
PORTNAME= gvm
DISTVERSIONPREFIX= v
DISTVERSION= 22.22.0
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= security
PKGNAMESUFFIX= -libs
diff --git a/security/kc/Makefile b/security/kc/Makefile
index 6d034b44451e..2d5086a34a0e 100644
--- a/security/kc/Makefile
+++ b/security/kc/Makefile
@@ -1,6 +1,6 @@
PORTNAME= kc
DISTVERSION= 2.5.3
-PORTREVISION= 2
+PORTREVISION= 3
CATEGORIES= security
MAINTAINER= leva@ecentrum.hu
diff --git a/security/lasso/Makefile b/security/lasso/Makefile
index a08a8ac302aa..b8cbb53f54e1 100644
--- a/security/lasso/Makefile
+++ b/security/lasso/Makefile
@@ -1,6 +1,6 @@
PORTNAME= lasso
PORTVERSION= 2.8.2
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= security
MASTER_SITES= https://dev.entrouvert.org/releases/lasso/
diff --git a/security/lastpass-cli/Makefile b/security/lastpass-cli/Makefile
index 2b94ac6a3b32..ce644ca1e0f7 100644
--- a/security/lastpass-cli/Makefile
+++ b/security/lastpass-cli/Makefile
@@ -1,5 +1,6 @@
PORTNAME= lastpass-cli
PORTVERSION= 1.6.1
+PORTREVISION= 1
CATEGORIES= security
MASTER_SITES= https://github.com/lastpass/lastpass-cli/releases/download/v${PORTVERSION}/
diff --git a/security/libcryptui/Makefile b/security/libcryptui/Makefile
deleted file mode 100644
index b1cbf9ef4783..000000000000
--- a/security/libcryptui/Makefile
+++ /dev/null
@@ -1,50 +0,0 @@
-PORTNAME= libcryptui
-PORTVERSION= 3.12.2
-PORTREVISION= 7
-CATEGORIES= security gnome
-MASTER_SITES= GNOME
-DIST_SUBDIR= gnome
-
-MAINTAINER= gnome@FreeBSD.org
-COMMENT= GNOME application for managing encryption keys (PGP, SSH)
-WWW= https://gitlab.gnome.org/GNOME/libcryptui
-
-DEPRECATED= abandoned project
-EXPIRATION_DATE=2025-06-30
-BROKEN= does not build with gpgme 2.x
-
-BUILD_DEPENDS= seahorse>=3.0.0:security/seahorse \
- gpg:security/gnupg
-LIB_DEPENDS= libgpgme.so:security/gpgme \
- libdbus-glib-1.so:devel/dbus-glib \
- libgnome-keyring.so:security/libgnome-keyring
-RUN_DEPENDS= seahorse>=3.0.0:security/seahorse \
- gpg:security/gnupg
-
-USES= gettext gmake gnome libtool pathfix pkgconfig tar:xz xorg
-USE_GNOME= intlhack gnomeprefix gtk30 introspection:build
-USE_XORG= sm ice
-USE_LDCONFIG= yes
-GNU_CONFIGURE= yes
-GNU_CONFIGURE_MANPREFIX=${PREFIX}/share
-CPPFLAGS+= -I${LOCALBASE}/include
-LDFLAGS+= -L${LOCALBASE}/lib
-INSTALL_TARGET= install-strip
-
-GLIB_SCHEMAS= org.gnome.seahorse.recipients.gschema.xml
-
-OPTIONS_DEFINE= NOTIFY
-
-.include <bsd.port.options.mk>
-
-.if ${PORT_OPTIONS:MNOTIFY}
-LIB_DEPENDS+= libnotify.so:devel/libnotify
-.else
-CONFIGURE_ARGS+=--disable-libnotify
-.endif
-
-post-patch:
- @${REINPLACE_CMD} -e 's|"1.2 1.4 2.0"|"1.2 1.4 2.0 2.1 2.2 2.3 2.4"|g' \
- ${WRKSRC}/configure
-
-.include <bsd.port.mk>
diff --git a/security/libcryptui/distinfo b/security/libcryptui/distinfo
deleted file mode 100644
index 9dd768797115..000000000000
--- a/security/libcryptui/distinfo
+++ /dev/null
@@ -1,3 +0,0 @@
-TIMESTAMP = 1657827035
-SHA256 (gnome/libcryptui-3.12.2.tar.xz) = 71ead1a7b496f07f6c5102ae79945dd2515b7b9342c6edefe58b47318be20866
-SIZE (gnome/libcryptui-3.12.2.tar.xz) = 1163784
diff --git a/security/libcryptui/pkg-descr b/security/libcryptui/pkg-descr
deleted file mode 100644
index 800ba3655572..000000000000
--- a/security/libcryptui/pkg-descr
+++ /dev/null
@@ -1,3 +0,0 @@
-Libcryptui: Interface components for OpenPGP
-
-libcryptui is a library used for prompting for PGP keys.
diff --git a/security/libcryptui/pkg-plist b/security/libcryptui/pkg-plist
deleted file mode 100644
index b43745d9b329..000000000000
--- a/security/libcryptui/pkg-plist
+++ /dev/null
@@ -1,139 +0,0 @@
-bin/seahorse-daemon
-include/libcryptui/cryptui-key-chooser.h
-include/libcryptui/cryptui-key-combo.h
-include/libcryptui/cryptui-key-list.h
-include/libcryptui/cryptui-key-store.h
-include/libcryptui/cryptui-keyset.h
-include/libcryptui/cryptui.h
-lib/girepository-1.0/CryptUI-0.0.typelib
-lib/libcryptui.a
-lib/libcryptui.so
-lib/libcryptui.so.0
-lib/libcryptui.so.0.0.0
-libdata/pkgconfig/cryptui-0.0.pc
-share/man/man1/seahorse-daemon.1.gz
-share/GConf/gsettings/org.gnome.seahorse.recipients.convert
-share/cryptui/ui/seahorse-notify.xml
-share/cryptui/ui/seahorse-pgp-generate.xml
-share/cryptui/ui/seahorse-progress.xml
-share/dbus-1/services/org.gnome.seahorse.service
-share/doc/libcryptui/ch01.html
-share/doc/libcryptui/home.png
-share/doc/libcryptui/index.html
-share/doc/libcryptui/index.sgml
-share/doc/libcryptui/left-insensitive.png
-share/doc/libcryptui/left.png
-share/doc/libcryptui/libcryptui-cryptui-defines.html
-share/doc/libcryptui/libcryptui-cryptui-key-chooser.html
-share/doc/libcryptui/libcryptui-cryptui-key-combo.html
-share/doc/libcryptui/libcryptui-cryptui-key-list.html
-share/doc/libcryptui/libcryptui-cryptui-key-store.html
-share/doc/libcryptui/libcryptui-cryptui-keyset.html
-share/doc/libcryptui/libcryptui-cryptui-marshal.html
-share/doc/libcryptui/libcryptui-cryptui.html
-share/doc/libcryptui/libcryptui.devhelp2
-share/doc/libcryptui/right-insensitive.png
-share/doc/libcryptui/right.png
-share/doc/libcryptui/style.css
-share/doc/libcryptui/up-insensitive.png
-share/doc/libcryptui/up.png
-share/gir-1.0/CryptUI-0.0.gir
-share/locale/ar/LC_MESSAGES/cryptui.mo
-share/locale/as/LC_MESSAGES/cryptui.mo
-share/locale/ast/LC_MESSAGES/cryptui.mo
-share/locale/az/LC_MESSAGES/cryptui.mo
-share/locale/be@latin/LC_MESSAGES/cryptui.mo
-share/locale/bg/LC_MESSAGES/cryptui.mo
-share/locale/bn/LC_MESSAGES/cryptui.mo
-share/locale/bn_IN/LC_MESSAGES/cryptui.mo
-share/locale/br/LC_MESSAGES/cryptui.mo
-share/locale/ca/LC_MESSAGES/cryptui.mo
-share/locale/ca@valencia/LC_MESSAGES/cryptui.mo
-share/locale/cs/LC_MESSAGES/cryptui.mo
-share/locale/cy/LC_MESSAGES/cryptui.mo
-share/locale/da/LC_MESSAGES/cryptui.mo
-share/locale/de/LC_MESSAGES/cryptui.mo
-share/locale/dz/LC_MESSAGES/cryptui.mo
-share/locale/el/LC_MESSAGES/cryptui.mo
-share/locale/en@shaw/LC_MESSAGES/cryptui.mo
-share/locale/en_CA/LC_MESSAGES/cryptui.mo
-share/locale/en_GB/LC_MESSAGES/cryptui.mo
-share/locale/eo/LC_MESSAGES/cryptui.mo
-share/locale/es/LC_MESSAGES/cryptui.mo
-share/locale/et/LC_MESSAGES/cryptui.mo
-share/locale/eu/LC_MESSAGES/cryptui.mo
-share/locale/fi/LC_MESSAGES/cryptui.mo
-share/locale/fr/LC_MESSAGES/cryptui.mo
-share/locale/ga/LC_MESSAGES/cryptui.mo
-share/locale/gl/LC_MESSAGES/cryptui.mo
-share/locale/gu/LC_MESSAGES/cryptui.mo
-share/locale/he/LC_MESSAGES/cryptui.mo
-share/locale/hi/LC_MESSAGES/cryptui.mo
-share/locale/hr/LC_MESSAGES/cryptui.mo
-share/locale/hu/LC_MESSAGES/cryptui.mo
-share/locale/id/LC_MESSAGES/cryptui.mo
-share/locale/it/LC_MESSAGES/cryptui.mo
-share/locale/ja/LC_MESSAGES/cryptui.mo
-share/locale/kn/LC_MESSAGES/cryptui.mo
-share/locale/ko/LC_MESSAGES/cryptui.mo
-share/locale/ku/LC_MESSAGES/cryptui.mo
-share/locale/lt/LC_MESSAGES/cryptui.mo
-share/locale/lv/LC_MESSAGES/cryptui.mo
-share/locale/mai/LC_MESSAGES/cryptui.mo
-share/locale/mk/LC_MESSAGES/cryptui.mo
-share/locale/ml/LC_MESSAGES/cryptui.mo
-share/locale/mr/LC_MESSAGES/cryptui.mo
-share/locale/ms/LC_MESSAGES/cryptui.mo
-share/locale/nb/LC_MESSAGES/cryptui.mo
-share/locale/ne/LC_MESSAGES/cryptui.mo
-share/locale/nl/LC_MESSAGES/cryptui.mo
-share/locale/nn/LC_MESSAGES/cryptui.mo
-share/locale/oc/LC_MESSAGES/cryptui.mo
-share/locale/or/LC_MESSAGES/cryptui.mo
-share/locale/pa/LC_MESSAGES/cryptui.mo
-share/locale/pl/LC_MESSAGES/cryptui.mo
-share/locale/pt/LC_MESSAGES/cryptui.mo
-share/locale/pt_BR/LC_MESSAGES/cryptui.mo
-share/locale/ro/LC_MESSAGES/cryptui.mo
-share/locale/ru/LC_MESSAGES/cryptui.mo
-share/locale/rw/LC_MESSAGES/cryptui.mo
-share/locale/si/LC_MESSAGES/cryptui.mo
-share/locale/sk/LC_MESSAGES/cryptui.mo
-share/locale/sl/LC_MESSAGES/cryptui.mo
-share/locale/sq/LC_MESSAGES/cryptui.mo
-share/locale/sr/LC_MESSAGES/cryptui.mo
-share/locale/sr@latin/LC_MESSAGES/cryptui.mo
-share/locale/sv/LC_MESSAGES/cryptui.mo
-share/locale/ta/LC_MESSAGES/cryptui.mo
-share/locale/te/LC_MESSAGES/cryptui.mo
-share/locale/th/LC_MESSAGES/cryptui.mo
-share/locale/tr/LC_MESSAGES/cryptui.mo
-share/locale/ug/LC_MESSAGES/cryptui.mo
-share/locale/uk/LC_MESSAGES/cryptui.mo
-share/locale/vi/LC_MESSAGES/cryptui.mo
-share/locale/zh_CN/LC_MESSAGES/cryptui.mo
-share/locale/zh_HK/LC_MESSAGES/cryptui.mo
-share/locale/zh_TW/LC_MESSAGES/cryptui.mo
-share/pixmaps/cryptui/22x22/seahorse-key-personal.png
-share/pixmaps/cryptui/22x22/seahorse-key-ssh.png
-share/pixmaps/cryptui/22x22/seahorse-key.png
-share/pixmaps/cryptui/22x22/seahorse-person.png
-share/pixmaps/cryptui/22x22/seahorse-sign-bad.png
-share/pixmaps/cryptui/22x22/seahorse-sign-ok.png
-share/pixmaps/cryptui/22x22/seahorse-sign.png
-share/pixmaps/cryptui/48x48/seahorse-key-personal.png
-share/pixmaps/cryptui/48x48/seahorse-key-ssh.png
-share/pixmaps/cryptui/48x48/seahorse-key.png
-share/pixmaps/cryptui/48x48/seahorse-person.png
-share/pixmaps/cryptui/48x48/seahorse-sign-bad.png
-share/pixmaps/cryptui/48x48/seahorse-sign-ok.png
-share/pixmaps/cryptui/48x48/seahorse-sign-unknown.png
-share/pixmaps/cryptui/48x48/seahorse-sign.png
-share/pixmaps/cryptui/scalable/seahorse-key-personal.svg
-share/pixmaps/cryptui/scalable/seahorse-key-ssh.svg
-share/pixmaps/cryptui/scalable/seahorse-key.svg
-share/pixmaps/cryptui/scalable/seahorse-person.svg
-share/pixmaps/cryptui/scalable/seahorse-sign-bad.svg
-share/pixmaps/cryptui/scalable/seahorse-sign-ok.svg
-share/pixmaps/cryptui/scalable/seahorse-sign-unknown.svg
-share/pixmaps/cryptui/scalable/seahorse-sign.svg
diff --git a/security/libpki/Makefile b/security/libpki/Makefile
index 1fc399318268..0fd4d9e05873 100644
--- a/security/libpki/Makefile
+++ b/security/libpki/Makefile
@@ -1,7 +1,7 @@
PORTNAME= libpki
DISTVERSIONPREFIX= v
DISTVERSION= 0.9.2
-PORTREVISION= 6
+PORTREVISION= 7
CATEGORIES= security
PATCH_SITES= https://github.com/openca/libpki/commit/
diff --git a/security/libsectok/Makefile b/security/libsectok/Makefile
deleted file mode 100644
index 6033a9ba69ac..000000000000
--- a/security/libsectok/Makefile
+++ /dev/null
@@ -1,48 +0,0 @@
-PORTNAME= libsectok
-DISTVERSION= 20030619
-PORTREVISION= 4
-CATEGORIES= security
-MASTER_SITES= http://www.citi.umich.edu/projects/smartcard/
-
-MAINTAINER= ports@FreeBSD.org
-COMMENT= ISO 7816 Smartcard API Library
-WWW= http://www.citi.umich.edu/projects/smartcard/sectok.html
-
-LICENSE= LicenseRef-UMich
-LICENSE_NAME= University of Michigan License
-LICENSE_FILE= ${WRKSRC}/LICENSE
-LICENSE_PERMS= dist-mirror dist-sell pkg-mirror pkg-sell auto-accept
-
-DEPRECATED= Last upstream release in 2003 and no longer maintained
-EXPIRATION_DATE= 2025-06-30
-
-USE_LDCONFIG= yes
-
-LDFLAGS+= -Wl,-soname=${PORTNAME}.so.3
-
-PLIST_FILES= include/sectok.h lib/libsectok.a lib/libsectok.so \
- lib/libsectok.so.3 share/man/man3/sectok.3.gz
-
-post-patch:
- @${REINPLACE_CMD} -e \
- '/^VERSION/s|3.1|3| ; \
- s|^CFLAGS=|CFLAGS+=| ; \
- s|-g |$${CPPFLAGS} | ; \
- s|^LDFLAGS=|LDFLAGS+=| ; \
- s|-x .* -shared|-shared| ; \
- s|^CC=|CC?=| ; \
- /^LD/s|ld|$$(CC)| ; \
- s|-fpic|-fPIC|' ${WRKSRC}/Makefile
-
-do-install:
- (cd ${WRKSRC} && ${INSTALL_DATA} sectok.h \
- ${STAGEDIR}${PREFIX}/include)
- (cd ${WRKSRC} && ${INSTALL_DATA} libsectok.a \
- ${STAGEDIR}${PREFIX}/lib)
- (cd ${WRKSRC} && ${INSTALL_LIB} libsectok.so.3 \
- ${STAGEDIR}${PREFIX}/lib)
- ${LN} -s libsectok.so.3 ${STAGEDIR}${PREFIX}/lib/libsectok.so
- (cd ${WRKSRC} && ${INSTALL_MAN} sectok.3 \
- ${STAGEDIR}${PREFIX}/share/man/man3)
-
-.include <bsd.port.mk>
diff --git a/security/libsectok/distinfo b/security/libsectok/distinfo
deleted file mode 100644
index 3fe44a7762c2..000000000000
--- a/security/libsectok/distinfo
+++ /dev/null
@@ -1,2 +0,0 @@
-SHA256 (libsectok-20030619.tar.gz) = f00b216af71969d90fca089ad7f4255ccff1d985813e0b932c42ce2df82b6d15
-SIZE (libsectok-20030619.tar.gz) = 26633
diff --git a/security/libsectok/pkg-descr b/security/libsectok/pkg-descr
deleted file mode 100644
index 29048936bd09..000000000000
--- a/security/libsectok/pkg-descr
+++ /dev/null
@@ -1,3 +0,0 @@
-This is the libsectok library from citi.umich.edu. Originally targeted
-for OpenBSD. This is a quick port of the library itself; it contains an
-API for working with ISO 7816 Smart Card devices.
diff --git a/security/linux-rl9-ca-certificates/Makefile b/security/linux-rl9-ca-certificates/Makefile
index 5adac7526364..b98e1abfce81 100644
--- a/security/linux-rl9-ca-certificates/Makefile
+++ b/security/linux-rl9-ca-certificates/Makefile
@@ -1,7 +1,7 @@
PORTNAME= ca-certificates
PORTVERSION= 2024.2.69
DISTVERSIONSUFFIX= _v8.0.303-91.4.el9_4
-PORTREVISION= 3
+PORTREVISION= 4
CATEGORIES= security linux
MAINTAINER= emulation@FreeBSD.org
@@ -15,14 +15,69 @@ USE_LINUX_RPM= noarch
OPTIONS_DEFINE= DOCS
+.include <bsd.port.pre.mk>
+
+# Here we perform a dance to properly regenerate the trust store
+
+# 1. We need to run these tools as a non-root user, otherwise they don't pick
+# up our config: https://github.com/p11-glue/p11-kit/blob/1bbd6db36b68cae074b35845c212c7d9a8ba19fe/p11-kit/conf.c#L249-L251
+.if ${UID} == 0
+SU_NOBODY= /usr/bin/su -m nobody -c
+.else
+SU_NOBODY= ${SH} -c
+.endif
+
post-stage:
- cd ${STAGEDIR} && ${LINUXBASE}/bin/sh \
- ./${PREFIX}/usr/bin/update-ca-trust extract \
- -o ./${PREFIX}/etc/pki/ca-trust/extracted
+# 2. Create a hacked copy of update-ca-trust that is permitted to look into
+# user-supplied config.
+ ${SED} '/export P11_KIT_NO_USER_CONFIG=1/d' \
+ ${STAGEDIR}/${PREFIX}/usr/bin/update-ca-trust > \
+ ${WRKDIR}/update-ca-trust-staging
+ ${CHMOD} +x ${WRKDIR}/update-ca-trust-staging
+# 3. Prevent update-ca-trust-staging from operating on ${LINUXBASE}. We want
+# it take inputs from ${STAGEDIR} and output into ${STAGEDIR}.
+# To achieve that, an undocumented feature is employed that can be tracked
+# through the following place in the code:
+# a. https://github.com/p11-glue/p11-kit/blob/1bbd6db36b68cae074b35845c212c7d9a8ba19fe/p11-kit/modules.c#L641-L658
+# b. https://github.com/p11-glue/p11-kit/blob/1bbd6db36b68cae074b35845c212c7d9a8ba19fe/trust/module.c#L409
+# c. https://github.com/p11-glue/p11-kit/blob/1bbd6db36b68cae074b35845c212c7d9a8ba19fe/trust/module.c#L293-L296
+# Without this hack the /bin/trust program always use hardcoded paths that
+# point to ${LINUXBASE} as evidenced by
+# d. https://github.com/p11-glue/p11-kit/blob/1bbd6db36b68cae074b35845c212c7d9a8ba19fe/trust/module.c#L416C77-L416C88
+ ${MKDIR} ${WRKDIR}/.config/pkcs11/modules
+ ${SED} "s|x-init-reserved:|x-init-reserved: paths=${STAGEDIR}/${LINUXBASE}/etc/pki/ca-trust/source:${STAGEDIR}/${LINUXBASE}/usr/share/pki/ca-trust-source|" \
+ ${LINUXBASE}/usr/share/p11-kit/modules/p11-kit-trust.module > \
+ ${WRKDIR}/.config/pkcs11/modules/p11-kit-trust.module
+# 4. If we're building as root, the nobody user wouldn't be able to write into
+# ${STAGEDIR}. Change the owner to allow that.
+.if ${UID} == 0
+ ${CHOWN} -R nobody ${STAGEDIR}
+.endif
+# 5. Run the actual generation step.
+ ${SU_NOBODY} 'cd ${STAGEDIR} && ${LINUXBASE}/bin/env XDG_CONFIG_HOME="${WRKDIR}/.config" \
+ ../update-ca-trust-staging extract \
+ -o ./${PREFIX}/etc/pki/ca-trust/extracted'
+# 6. Reforge symlinks into relative ones to prevent Linuxulator from resolving
+# them into /etc. We want symlink targets to point into /compat/linux/etc.
${FIND} ${STAGEDIR}${PREFIX} -type l -exec \
${SH} -c "tgt=\$$(readlink {}) ; [ \$$tgt != \$${tgt#/} ] && ${RLN} ${STAGEDIR}${PREFIX}\$$tgt {}" \; || ${TRUE}
- cd ${STAGEDIR}${PREFIX} && \
- ${FIND} etc/pki/ca-trust/extracted/pem/directory-hash -type f -or -type l >> ${TMPPLIST}
+# Verify that we actually generated something. To make sure that ${LINUXBASE}
+# does not affect the generation the testing should be performed this way:
+# 1. Get into jail:
+# poudriere testport -i
+# 2. Test with package installed:
+# make test
+# 3. Rebuild with package installed:
+# make clean stage
+# 4. Check that the result is the same:
+# make check-plist test
+# 5. Deinstall the package:
+# make deinstall
+# 6. Check that the result is the same:
+# make test
+do-test:
+ ${SU_NOBODY} '${LINUXBASE}/bin/env XDG_CONFIG_HOME="${WRKDIR}/.config" \
+ /bin/trust list' | wc -l | ((read count ; [ $$count != 0 ]) && ${ECHO_CMD} ok)
-.include <bsd.port.mk>
+.include <bsd.port.post.mk>
diff --git a/security/linux-rl9-ca-certificates/pkg-plist b/security/linux-rl9-ca-certificates/pkg-plist
index 12ad61e71023..b2dfac4665a9 100644
--- a/security/linux-rl9-ca-certificates/pkg-plist
+++ b/security/linux-rl9-ca-certificates/pkg-plist
@@ -8,6 +8,452 @@ etc/pki/ca-trust/extracted/java/cacerts
etc/pki/ca-trust/extracted/openssl/README
etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt
etc/pki/ca-trust/extracted/pem/README
+etc/pki/ca-trust/extracted/pem/directory-hash/002c0b4f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/01419da9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0179095f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/02265526.0
+etc/pki/ca-trust/extracted/pem/directory-hash/04f60c28.0
+etc/pki/ca-trust/extracted/pem/directory-hash/062cdee6.0
+etc/pki/ca-trust/extracted/pem/directory-hash/064e0aa9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/068570d1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/06dc52d5.0
+etc/pki/ca-trust/extracted/pem/directory-hash/073bfcc5.0
+etc/pki/ca-trust/extracted/pem/directory-hash/08063a00.0
+etc/pki/ca-trust/extracted/pem/directory-hash/09789157.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0a775a30.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0b1b94ef.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0b9bc432.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0bf05006.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0d69c7e1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0f5dc4f3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/0f6fa695.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1001acf7.0
+etc/pki/ca-trust/extracted/pem/directory-hash/10531352.0
+etc/pki/ca-trust/extracted/pem/directory-hash/106f3e4d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/128f4b91.0
+etc/pki/ca-trust/extracted/pem/directory-hash/14bc7599.0
+etc/pki/ca-trust/extracted/pem/directory-hash/18856ac4.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1ae85e5e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1b0f7e5c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1cef98f5.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1d3472b9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1df5a75f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1e08bfd1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1e09d511.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1e1eab7c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1e8e7201.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1ec40989.0
+etc/pki/ca-trust/extracted/pem/directory-hash/1f58a078.0
+etc/pki/ca-trust/extracted/pem/directory-hash/219d9499.0
+etc/pki/ca-trust/extracted/pem/directory-hash/228f89db.0
+etc/pki/ca-trust/extracted/pem/directory-hash/23f4c490.0
+etc/pki/ca-trust/extracted/pem/directory-hash/244b5494.0
+etc/pki/ca-trust/extracted/pem/directory-hash/252252d2.0
+etc/pki/ca-trust/extracted/pem/directory-hash/2923b3f9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/2add47b6.0
+etc/pki/ca-trust/extracted/pem/directory-hash/2ae6433e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/2b349938.0
+etc/pki/ca-trust/extracted/pem/directory-hash/2c63f966.0
+etc/pki/ca-trust/extracted/pem/directory-hash/2d21b73c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/2d9dafe4.0
+etc/pki/ca-trust/extracted/pem/directory-hash/302904dd.0
+etc/pki/ca-trust/extracted/pem/directory-hash/304d27c3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/31188b5e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/32888f65.0
+etc/pki/ca-trust/extracted/pem/directory-hash/33ee480d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/34d996fb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/35105088.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3513523f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/399e7759.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3ad48a91.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3afde786.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3bde41ac.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3c860d51.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3c899c73.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3c9a4d3b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3e359ba6.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3e7271e8.0
+etc/pki/ca-trust/extracted/pem/directory-hash/3fb36b73.0
+etc/pki/ca-trust/extracted/pem/directory-hash/40193066.0
+etc/pki/ca-trust/extracted/pem/directory-hash/4042bcee.0
+etc/pki/ca-trust/extracted/pem/directory-hash/40547a79.0
+etc/pki/ca-trust/extracted/pem/directory-hash/406c9bb1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/41a3f684.0
+etc/pki/ca-trust/extracted/pem/directory-hash/455f1b52.0
+etc/pki/ca-trust/extracted/pem/directory-hash/48a195d8.0
+etc/pki/ca-trust/extracted/pem/directory-hash/48bec511.0
+etc/pki/ca-trust/extracted/pem/directory-hash/4b718d9b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/4be590e0.0
+etc/pki/ca-trust/extracted/pem/directory-hash/4bfab552.0
+etc/pki/ca-trust/extracted/pem/directory-hash/4c3982f2.0
+etc/pki/ca-trust/extracted/pem/directory-hash/4f316efb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/4fd49c6c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5046c355.0
+etc/pki/ca-trust/extracted/pem/directory-hash/52b525c7.0
+etc/pki/ca-trust/extracted/pem/directory-hash/53a1b57a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5443e9e3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/54657681.0
+etc/pki/ca-trust/extracted/pem/directory-hash/57bcb2da.0
+etc/pki/ca-trust/extracted/pem/directory-hash/583d0756.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5860aaa6.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5931b5bc.0
+etc/pki/ca-trust/extracted/pem/directory-hash/595e996b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5a3f0ff8.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5acf816d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5ad8a5d6.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5cd81ad7.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5e98733a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5f15c80c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5f47b495.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5f618aec.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5f9a69fa.0
+etc/pki/ca-trust/extracted/pem/directory-hash/5fdd185d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/607986c7.0
+etc/pki/ca-trust/extracted/pem/directory-hash/60afe812.0
+etc/pki/ca-trust/extracted/pem/directory-hash/6187b673.0
+etc/pki/ca-trust/extracted/pem/directory-hash/626dceaf.0
+etc/pki/ca-trust/extracted/pem/directory-hash/63a2c897.0
+etc/pki/ca-trust/extracted/pem/directory-hash/653b494a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/68dd7389.0
+etc/pki/ca-trust/extracted/pem/directory-hash/69105f4f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/6b03dec0.0
+etc/pki/ca-trust/extracted/pem/directory-hash/6b483515.0
+etc/pki/ca-trust/extracted/pem/directory-hash/6b99d060.0
+etc/pki/ca-trust/extracted/pem/directory-hash/6d41d539.0
+etc/pki/ca-trust/extracted/pem/directory-hash/6f7454b3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/6fa5da56.0
+etc/pki/ca-trust/extracted/pem/directory-hash/706f604c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/749e9e03.0
+etc/pki/ca-trust/extracted/pem/directory-hash/75680d2e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/75d1b2ed.0
+etc/pki/ca-trust/extracted/pem/directory-hash/76579174.0
+etc/pki/ca-trust/extracted/pem/directory-hash/76faf6c0.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7719f463.0
+etc/pki/ca-trust/extracted/pem/directory-hash/773e07ad.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7892ad52.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7a3adc42.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7a780d93.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7a7c655d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7a819ef2.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7e067d03.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7f3d5d1d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/7fa05551.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8160b96c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/81b9768f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/81f2d2b1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/82223c44.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8312c4c1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/83e9984f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8508e720.0
+etc/pki/ca-trust/extracted/pem/directory-hash/85cde254.0
+etc/pki/ca-trust/extracted/pem/directory-hash/86212b19.0
+etc/pki/ca-trust/extracted/pem/directory-hash/865fbdf9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/869fbf79.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8794b4e3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/882de061.0
+etc/pki/ca-trust/extracted/pem/directory-hash/88950faa.0
+etc/pki/ca-trust/extracted/pem/directory-hash/89c02a45.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8cb5ee0f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8d10a21f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8d6437c3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8d86cdd1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8d89cda1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/8f103249.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9046744a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/90c5a3c8.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9282e51c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/930ac5d2.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9339512a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/93851c9e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/93bc0acc.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9479c8c3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9482e63a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9576d26b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9591a472.0
+etc/pki/ca-trust/extracted/pem/directory-hash/95aff9e3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9846683b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/985c1f52.0
+etc/pki/ca-trust/extracted/pem/directory-hash/988a38cb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/98aaf404.0
+etc/pki/ca-trust/extracted/pem/directory-hash/99e1b953.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9aef356c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9b46e03d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9b5697b0.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9bf03295.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9c8dfbd4.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9d04f354.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9d6523ce.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9ef4a08a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/9f727ac7.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ACCVRAIZ1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/AC_RAIZ_FNMT-RCM.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/ANF_Secure_Server_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Actalis_Authentication_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/AffirmTrust_Commercial.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/AffirmTrust_Networking.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/AffirmTrust_Premium.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/AffirmTrust_Premium_ECC.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Amazon_Root_CA_1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Amazon_Root_CA_2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Amazon_Root_CA_3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Amazon_Root_CA_4.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Atos_TrustedRoot_2011.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/BJCA_Global_Root_CA1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/BJCA_Global_Root_CA2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Baltimore_CyberTrust_Root.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Buypass_Class_2_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Buypass_Class_3_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/CA_Disig_Root_R2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/CFCA_EV_ROOT.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/COMODO_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/COMODO_ECC_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/COMODO_RSA_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certainly_Root_E1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certainly_Root_R1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certigna.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certigna_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certum_EC-384_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certum_Trusted_Network_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certum_Trusted_Network_CA_2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Certum_Trusted_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/CommScope_Public_Trust_ECC_Root-01.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/CommScope_Public_Trust_ECC_Root-02.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/CommScope_Public_Trust_RSA_Root-01.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/CommScope_Public_Trust_RSA_Root-02.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Comodo_AAA_Services_root.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/D-TRUST_BR_Root_CA_1_2020.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/D-TRUST_EV_Root_CA_1_2020.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/D-TRUST_Root_Class_3_CA_2_2009.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/D-TRUST_Root_Class_3_CA_2_EV_2009.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Assured_ID_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Assured_ID_Root_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Assured_ID_Root_G3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Global_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Global_Root_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Global_Root_G3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_High_Assurance_EV_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_TLS_ECC_P384_Root_G5.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_TLS_RSA4096_Root_G5.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/DigiCert_Trusted_Root_G4.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Entrust.net_Premium_2048_Secure_Server_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Entrust_Root_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Entrust_Root_Certification_Authority_-_EC1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Entrust_Root_Certification_Authority_-_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Entrust_Root_Certification_Authority_-_G4.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/FIRMAPROFESIONAL_CA_ROOT-A_WEB.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GDCA_TrustAUTH_R5_ROOT.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GLOBALTRUST_2020.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GTS_Root_R1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GTS_Root_R2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GTS_Root_R3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GTS_Root_R4.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_ECC_Root_CA_-_R4.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_ECC_Root_CA_-_R5.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_Root_CA_-_R3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_Root_CA_-_R6.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_Root_E46.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/GlobalSign_Root_R46.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Go_Daddy_Class_2_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Go_Daddy_Root_Certificate_Authority_-_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/HARICA_TLS_ECC_Root_CA_2021.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/HARICA_TLS_RSA_Root_CA_2021.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/HiPKI_Root_CA_-_G1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Hongkong_Post_Root_CA_3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/ISRG_Root_X1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/ISRG_Root_X2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/IdenTrust_Commercial_Root_CA_1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/IdenTrust_Public_Sector_Root_CA_1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Izenpe.com.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Microsec_e-Szigno_Root_CA_2009.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Microsoft_ECC_Root_Certificate_Authority_2017.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Microsoft_RSA_Root_Certificate_Authority_2017.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/NAVER_Global_Root_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/NetLock_Arany__Class_Gold__F__tan__s__tv__ny.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/OISTE_WISeKey_Global_Root_GB_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/OISTE_WISeKey_Global_Root_GC_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/QuoVadis_Root_CA_1_G3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/QuoVadis_Root_CA_2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/QuoVadis_Root_CA_2_G3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/QuoVadis_Root_CA_3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/QuoVadis_Root_CA_3_G3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_EV_Root_Certification_Authority_ECC.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_EV_Root_Certification_Authority_RSA_R2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_Root_Certification_Authority_ECC.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_Root_Certification_Authority_RSA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_TLS_ECC_Root_CA_2022.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SSL.com_TLS_RSA_Root_CA_2022.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SZAFIR_ROOT_CA2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Sectigo_Public_Server_Authentication_Root_E46.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Sectigo_Public_Server_Authentication_Root_R46.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SecureSign_RootCA11.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SecureTrust_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Secure_Global_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Security_Communication_ECC_RootCA1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Security_Communication_RootCA2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Security_Communication_RootCA3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Starfield_Class_2_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Starfield_Root_Certificate_Authority_-_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Starfield_Services_Root_Certificate_Authority_-_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SwissSign_Gold_CA_-_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/SwissSign_Silver_CA_-_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/T-TeleSec_GlobalRoot_Class_2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/T-TeleSec_GlobalRoot_Class_3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/TWCA_Global_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/TWCA_Root_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Telekom_Security_TLS_ECC_Root_2020.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Telekom_Security_TLS_RSA_Root_2023.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/TeliaSonera_Root_CA_v1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Telia_Root_CA_v2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/TrustAsia_Global_Root_CA_G3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/TrustAsia_Global_Root_CA_G4.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Trustwave_Global_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Trustwave_Global_ECC_P256_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/Trustwave_Global_ECC_P384_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/TunTrust_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/UCA_Extended_Validation_Root.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/UCA_Global_G2_Root.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/USERTrust_ECC_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/USERTrust_RSA_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/XRamp_Global_CA_Root.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/a2c66da8.0
+etc/pki/ca-trust/extracted/pem/directory-hash/a3418fda.0
+etc/pki/ca-trust/extracted/pem/directory-hash/a716d4ed.0
+etc/pki/ca-trust/extracted/pem/directory-hash/a81e292b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/a89d74c2.0
+etc/pki/ca-trust/extracted/pem/directory-hash/a94d09e5.0
+etc/pki/ca-trust/extracted/pem/directory-hash/a9d40e02.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ab5346f4.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ab59055e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/aee5f10d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b0e59380.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b0ed035a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b0f3e76e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b1159c4c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b30d5fda.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b3fb433b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b433981b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b66938e9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b727005e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b74d2bd5.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b7a5b843.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b7db1890.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b81b93f0.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b872f2b4.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b92fd57f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/b936d1c6.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ba8887ce.0
+etc/pki/ca-trust/extracted/pem/directory-hash/bc3f2570.0
+etc/pki/ca-trust/extracted/pem/directory-hash/bd43e1dd.0
+etc/pki/ca-trust/extracted/pem/directory-hash/bdacca6f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/bf53fb88.0
+etc/pki/ca-trust/extracted/pem/directory-hash/bf64f35b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/c01eb047.0
+etc/pki/ca-trust/extracted/pem/directory-hash/c28a8a30.0
+etc/pki/ca-trust/extracted/pem/directory-hash/c44cc0c0.0
+etc/pki/ca-trust/extracted/pem/directory-hash/c491639e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/c559d742.0
+etc/pki/ca-trust/extracted/pem/directory-hash/c7f1359b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/c90bc37d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ca-bundle.crt
+etc/pki/ca-trust/extracted/pem/directory-hash/ca-certificates.crt
+etc/pki/ca-trust/extracted/pem/directory-hash/ca6e4ad9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/cb1c3204.0
+etc/pki/ca-trust/extracted/pem/directory-hash/cbb3f32b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/cbf06781.0
+etc/pki/ca-trust/extracted/pem/directory-hash/cc450945.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ccc52f49.0
+etc/pki/ca-trust/extracted/pem/directory-hash/cd58d51e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/cd8c0d63.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ce5e74ef.0
+etc/pki/ca-trust/extracted/pem/directory-hash/certSIGN_ROOT_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/certSIGN_Root_CA_G2.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/cf701eeb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d06393bb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d16a5865.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d18e9066.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d39b0a2c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d41b5e2a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d4c339cb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d4dae3dd.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d52c538d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d59297b8.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d6325660.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d7746a63.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d7e8dc79.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d887a5bb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/d96b65e2.0
+etc/pki/ca-trust/extracted/pem/directory-hash/da0cfd1d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/da7377f6.0
+etc/pki/ca-trust/extracted/pem/directory-hash/dbc54cab.0
+etc/pki/ca-trust/extracted/pem/directory-hash/dbff3a01.0
+etc/pki/ca-trust/extracted/pem/directory-hash/dc4d6a89.0
+etc/pki/ca-trust/extracted/pem/directory-hash/dc99f41e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/dd8e9d41.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ddcda989.0
+etc/pki/ca-trust/extracted/pem/directory-hash/de6d66f3.0
+etc/pki/ca-trust/extracted/pem/directory-hash/dfc0fe80.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e-Szigno_Root_CA_2017.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/e071171e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e113c810.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e13665f9.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e18bfb83.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e35234b1.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e36a6752.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e442e424.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e48193cf.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e73d606e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e7c037b4.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e7dd1bc4.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e8651083.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e868b802.0
+etc/pki/ca-trust/extracted/pem/directory-hash/e8de2f56.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ePKI_Root_Certification_Authority.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/ecccd8db.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ed39abd0.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ed858448.0
+etc/pki/ca-trust/extracted/pem/directory-hash/edcbddb5.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ee37c333.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ee532fd5.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ee64a828.0
+etc/pki/ca-trust/extracted/pem/directory-hash/eed8c118.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ef954a4e.0
+etc/pki/ca-trust/extracted/pem/directory-hash/emSign_ECC_Root_CA_-_C3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/emSign_ECC_Root_CA_-_G3.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/emSign_Root_CA_-_C1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/emSign_Root_CA_-_G1.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/f013ecaf.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f058632f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f081611a.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f0c70a8d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f0cd152c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f249de83.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f30dd6ad.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f387163d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f39fc864.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f459871d.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f51bb24c.0
+etc/pki/ca-trust/extracted/pem/directory-hash/f8fc53da.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fa5da96b.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fb5fa911.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fb717492.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fc5a8f99.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fd08c599.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fd64f3fc.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fde84897.0
+etc/pki/ca-trust/extracted/pem/directory-hash/fe8a2cd8.0
+etc/pki/ca-trust/extracted/pem/directory-hash/feffd413.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ff34af3f.0
+etc/pki/ca-trust/extracted/pem/directory-hash/ffa7f1eb.0
+etc/pki/ca-trust/extracted/pem/directory-hash/vTrus_ECC_Root_CA.pem
+etc/pki/ca-trust/extracted/pem/directory-hash/vTrus_Root_CA.pem
etc/pki/ca-trust/extracted/pem/email-ca-bundle.pem
etc/pki/ca-trust/extracted/pem/objsign-ca-bundle.pem
etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
diff --git a/security/modsecurity3/Makefile b/security/modsecurity3/Makefile
index 15147e278ed0..186cfe1dc959 100644
--- a/security/modsecurity3/Makefile
+++ b/security/modsecurity3/Makefile
@@ -1,6 +1,7 @@
PORTNAME= modsecurity
DISTVERSIONPREFIX= v
DISTVERSION= 3.0.14
+PORTREVISION= 1
CATEGORIES= security www
MASTER_SITES= https://github.com/owasp-modsecurity/ModSecurity/releases/download/v${PORTVERSION}/
PKGNAMESUFFIX= 3
diff --git a/security/oath-toolkit/Makefile b/security/oath-toolkit/Makefile
index 645c44354cd5..6e7185c29f6b 100644
--- a/security/oath-toolkit/Makefile
+++ b/security/oath-toolkit/Makefile
@@ -1,6 +1,6 @@
PORTNAME= oath-toolkit
PORTVERSION= 2.6.9
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= security
MASTER_SITES= SAVANNAH
diff --git a/security/openca-ocspd/Makefile b/security/openca-ocspd/Makefile
index 9b07cdf85926..83338f75a91a 100644
--- a/security/openca-ocspd/Makefile
+++ b/security/openca-ocspd/Makefile
@@ -1,6 +1,7 @@
PORTNAME= openca-ocspd
DISTVERSIONPREFIX= v
DISTVERSION= 3.1.3
+PORTREVISION= 1
CATEGORIES= security
MAINTAINER= bruno@ruomad.net
diff --git a/security/openconnect/Makefile b/security/openconnect/Makefile
index dde1ab75f49e..729c3f55d101 100644
--- a/security/openconnect/Makefile
+++ b/security/openconnect/Makefile
@@ -1,6 +1,6 @@
PORTNAME= openconnect
PORTVERSION= 9.12
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= security net-vpn
MASTER_SITES= ftp://ftp.infradead.org/pub/openconnect/ \
ZI
diff --git a/security/pwman/Makefile b/security/pwman/Makefile
index f5ae9fa4c85f..ece00f434d62 100644
--- a/security/pwman/Makefile
+++ b/security/pwman/Makefile
@@ -1,6 +1,6 @@
PORTNAME= pwman
DISTVERSION= 0.4.5
-PORTREVISION= 4
+PORTREVISION= 5
CATEGORIES= security
MASTER_SITES= SF/${PORTNAME}/${PORTNAME}/${PORTNAME}-${PORTVERSION}
diff --git a/security/py-xmlsec/Makefile b/security/py-xmlsec/Makefile
index 188ed4360ba0..b657e758b557 100644
--- a/security/py-xmlsec/Makefile
+++ b/security/py-xmlsec/Makefile
@@ -1,5 +1,6 @@
PORTNAME= xmlsec
DISTVERSION= 1.3.15
+PORTREVISION= 1
CATEGORIES= security python
MASTER_SITES= PYPI
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
diff --git a/security/sectok/Makefile b/security/sectok/Makefile
deleted file mode 100644
index ed27ddb5ed4e..000000000000
--- a/security/sectok/Makefile
+++ /dev/null
@@ -1,41 +0,0 @@
-PORTNAME= sectok
-DISTVERSION= 20030825
-PORTREVISION= 4
-CATEGORIES= security
-MASTER_SITES= http://www.citi.umich.edu/projects/smartcard/
-
-MAINTAINER= ports@FreeBSD.org
-COMMENT= ISO 7816 Smartcard Utility
-WWW= http://www.citi.umich.edu/projects/smartcard/sectok.html
-
-LICENSE= LicenseRef-UMich
-LICENSE_NAME= University of Michigan License
-LICENSE_FILE= ${WRKSRC}/LICENSE
-LICENSE_PERMS= dist-mirror dist-sell pkg-mirror pkg-sell auto-accept
-
-DEPRECATED= Last upstream release in 2003 and no longer maintained
-EXPIRATION_DATE= 2025-06-30
-
-LIB_DEPENDS= libsectok.so:security/libsectok
-
-USES= ssl localbase tar:tgz
-USE_LDCONFIG= yes
-
-MAKE_ARGS= CC="${CC}" CFLAGS="${CFLAGS}"
-
-PLIST_FILES= bin/${PORTNAME} share/man/man1/${PORTNAME}.1.gz
-
-post-patch:
- @${REINPLACE_CMD} \
- -e '/^INCLUDES=/s|$$| ${CPPFLAGS}|' \
- -e '/^LIBS=/s|=|=${LDFLAGS} |' \
- -e '/^LIBS=/s|$$| ${LIBS}|' \
- ${WRKSRC}/Makefile
-
-do-install:
- (cd ${WRKSRC} && ${INSTALL_PROGRAM} ${PORTNAME} \
- ${STAGEDIR}${PREFIX}/bin)
- (cd ${WRKSRC} && ${INSTALL_MAN} ${PORTNAME}.1 \
- ${STAGEDIR}${PREFIX}/share/man/man1)
-
-.include <bsd.port.mk>
diff --git a/security/sectok/distinfo b/security/sectok/distinfo
deleted file mode 100644
index f4d0c56c397b..000000000000
--- a/security/sectok/distinfo
+++ /dev/null
@@ -1,2 +0,0 @@
-SHA256 (sectok-20030825.tgz) = 4951d2b9876d06cb119e3c913325764fa58ea93453252665d9f206378e501e5f
-SIZE (sectok-20030825.tgz) = 17323
diff --git a/security/sectok/files/patch-cyberflex.c b/security/sectok/files/patch-cyberflex.c
deleted file mode 100644
index 30bfa6e6f29c..000000000000
--- a/security/sectok/files/patch-cyberflex.c
+++ /dev/null
@@ -1,61 +0,0 @@
---- cyberflex.c.orig 2003-06-20 00:37:35.000000000 +0200
-+++ cyberflex.c 2015-02-28 15:57:55.093727371 +0100
-@@ -48,7 +48,13 @@
- #define SHA1Init SHA1_Init
- #define SHA1Update SHA1_Update
- #define SHA1Final SHA1_Final
--#else /* __linux */
-+#elif defined(__FreeBSD__)
-+#define SHA1_CTX SHA_CTX
-+#define SHA1Init SHA1_Init
-+#define SHA1Update SHA1_Update
-+#define SHA1Final SHA1_Final
-+#include <openssl/sha.h>
-+#else
- #include <sha1.h>
- #endif
- #else
-@@ -69,7 +75,7 @@
- #include "sc.h"
-
- #ifdef __sun
--#define des_set_key(key, schedule) des_key_sched(key, schedule)
-+#define DES_set_key(key, &schedule) DES_key_sched(key, &schedule)
- #endif
-
- #define JDIRSIZE 40
-@@ -91,7 +97,7 @@
-
- #ifndef __palmos__
- /* default signed applet key of Cyberflex Access */
--static des_cblock app_key = {0x6A, 0x21, 0x36, 0xF5, 0xD8, 0x0C, 0x47, 0x83};
-+static DES_cblock app_key = {0x6A, 0x21, 0x36, 0xF5, 0xD8, 0x0C, 0x47, 0x83};
- #endif
-
- static int
-@@ -663,8 +669,8 @@
- unsigned char aid[16], app_data[MAX_APP_SIZE], data[MAX_BUF_SIZE];
- int i, j, vflag = 0, gotprog = 0, gotcont = 0, fd_app, size, aidlen = 0, sw;
- int cont_size = 1152, inst_size = 1024;
-- des_cblock tmp;
-- des_key_schedule schedule;
-+ DES_cblock tmp;
-+ DES_key_schedule schedule;
- static unsigned char acl[] = {0x81, 0, 0, 0xff, 0, 0, 0, 0};
-
- optind = optreset = 1;
-@@ -777,12 +783,12 @@
- /* chain. DES encrypt one block, XOR the cyphertext with the next block,
- ... continues until the end of the buffer */
-
-- des_set_key (&app_key, schedule);
-+ DES_set_key (&app_key, &schedule);
-
- for (i = 0; i < size/BLOCK_SIZE; i++) {
- for (j = 0; j < BLOCK_SIZE; j++)
- tmp[j] = tmp[j] ^ app_data[i*BLOCK_SIZE + j];
-- des_ecb_encrypt (&tmp, &tmp, schedule, DES_ENCRYPT);
-+ DES_ecb_encrypt (&tmp, &tmp, &schedule, DES_ENCRYPT);
- }
-
- if (vflag) {
diff --git a/security/sectok/pkg-descr b/security/sectok/pkg-descr
deleted file mode 100644
index f71dcd17c35b..000000000000
--- a/security/sectok/pkg-descr
+++ /dev/null
@@ -1,3 +0,0 @@
-This is the sectok tool from citi.umich.edu. Originally targeted
-for OpenBSD. This is a quick port of the basic application; it relies
-upon the libsectok library for ISO 7816 Smart Card device communication.
diff --git a/security/stoken/Makefile b/security/stoken/Makefile
index eb0280267bd1..8d4eb834d47f 100644
--- a/security/stoken/Makefile
+++ b/security/stoken/Makefile
@@ -1,7 +1,7 @@
PORTNAME= stoken
DISTVERSIONPREFIX= v
DISTVERSION= 0.93
-PORTREVISION= 3
+PORTREVISION= 4
CATEGORIES= security
MAINTAINER= samm@FreeBSD.org
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index a13b0b1015ce..e9e2390a00f0 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -1,3 +1,31 @@
+ <vuln vid="6b1b8989-55b0-11f0-ac64-589cfc10a551">
+ <topic>podman -- TLS connection used to pull VM images was not validated</topic>
+ <affects>
+ <package>
+ <name>podman</name>
+ <range><lt>5.5.2</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>RedHat, Inc. reports:</p>
+ <blockquote cite="https://nvd.nist.gov/vuln/detail/CVE-2025-6032">
+ <p>A flaw was found in Podman. The podman machine init command fails to verify the TLS
+ certificate when downloading the VM images from an OCI registry. This issue results
+ in a Man In The Middle attack.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2025-6032</cvename>
+ <url>https://nvd.nist.gov/vuln/detail/CVE-2025-6032</url>
+ </references>
+ <dates>
+ <discovery>2025-06-30</discovery>
+ <entry>2025-06-30</entry>
+ </dates>
+ </vuln>
+
<vuln vid="5e64770c-52aa-11f0-b522-b42e991fc52e">
<topic>MongoDB -- Running certain aggregation operations with the SBE engine may lead to unexpected behavior</topic>
<affects>
diff --git a/security/xmlsec1/Makefile b/security/xmlsec1/Makefile
index a3c3fae2f27c..731d8f136cb4 100644
--- a/security/xmlsec1/Makefile
+++ b/security/xmlsec1/Makefile
@@ -1,5 +1,6 @@
PORTNAME= xmlsec1
DISTVERSION= 1.3.6
+PORTREVISION= 1
CATEGORIES= security
MASTER_SITES= https://github.com/lsh123/xmlsec/releases/download/xmlsec_${DISTVERSION:S,.,_,g}/ \
https://www.aleksey.com/xmlsec/download/