Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 25 Feb 2014 13:31:55 GMT
From:      Fabian Keil <fk@fabiankeil.de>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   ports/187033: New port: sysutils/tlsdate - Secure parasitic rdate replacement
Message-ID:  <201402251331.s1PDVtwI059997@cgiserv.freebsd.org>
Resent-Message-ID: <201402251340.s1PDe0Rg060778@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         187033
>Category:       ports
>Synopsis:       New port: sysutils/tlsdate - Secure parasitic rdate replacement
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Tue Feb 25 13:40:00 UTC 2014
>Closed-Date:
>Last-Modified:
>Originator:     Fabian Keil
>Release:        HEAD
>Organization:
>Environment:
FreeBSD r500.local 11.0-CURRENT FreeBSD 11.0-CURRENT #632 r262341+c524d9f(fk): Sun Feb 23 21:28:22 CET 2014     fk@r500.local:/usr/obj/usr/src/sys/ZOEY  amd64

>Description:
tlsdate sets the local clock by securely connecting with TLS to remote
servers and extracting the remote time out of the secure handshake. Unlike
ntpdate, tlsdate uses TCP, for instance connecting to a remote HTTPS or TLS
enabled service, and provides some protection against adversaries that try to
feed you malicious time information.

WWW: https://github.com/ioerror/tlsdate

---

Redports logs are available at:
https://redports.org/buildarchive/20140225105224-68617/

>How-To-Repeat:

>Fix:


Patch attached with submission follows:

# This is a shell archive.  Save it in a file, remove anything before
# this line, and then unpack it by entering "sh file".  Note, it may
# create directories; files and directories will be owned by you and
# have default permissions.
#
# This archive contains:
#
#	sysutils/tlsdate/
#	sysutils/tlsdate/pkg-descr
#	sysutils/tlsdate/pkg-plist
#	sysutils/tlsdate/files
#	sysutils/tlsdate/files/patch-src-include.am
#	sysutils/tlsdate/Makefile
#	sysutils/tlsdate/distinfo
#
echo c - sysutils/tlsdate/
mkdir -p sysutils/tlsdate/ > /dev/null 2>&1
echo x - sysutils/tlsdate/pkg-descr
sed 's/^X//' >sysutils/tlsdate/pkg-descr << '79234367abeb225c618bfb14154afcf9'
Xtlsdate sets the local clock by securely connecting with TLS to remote
Xservers and extracting the remote time out of the secure handshake. Unlike
Xntpdate, tlsdate uses TCP, for instance connecting to a remote HTTPS or TLS
Xenabled service, and provides some protection against adversaries that try to
Xfeed you malicious time information.
X
XWWW: https://github.com/ioerror/tlsdate
79234367abeb225c618bfb14154afcf9
echo x - sysutils/tlsdate/pkg-plist
sed 's/^X//' >sysutils/tlsdate/pkg-plist << 'a257754f680d0eda8489385db25ce980'
Xbin/tlsdate
Xbin/tlsdate-helper
Xetc/tlsdate/ca-roots/tlsdate-ca-roots.conf
Xman/man1/tlsdate-helper.1.gz
Xman/man1/tlsdate.1.gz
X%%PORTDOCS%%%%DOCSDIR%%/AUTHORS
X%%PORTDOCS%%%%DOCSDIR%%/CHANGELOG
X%%PORTDOCS%%%%DOCSDIR%%/README
X%%PORTDOCS%%%%DOCSDIR%%/TODO
Xshare/licenses/%%PKGNAME%%/LICENSE
X%%PORTDOCS%%@dirrm %%DOCSDIR%%
X@dirrmtry etc/tlsdate/ca-roots
X@dirrmtry share/licenses/%%PKGNAME%%
a257754f680d0eda8489385db25ce980
echo c - sysutils/tlsdate/files
mkdir -p sysutils/tlsdate/files > /dev/null 2>&1
echo x - sysutils/tlsdate/files/patch-src-include.am
sed 's/^X//' >sysutils/tlsdate/files/patch-src-include.am << 'c89d1297492cfd18766d0cb8416f4fcd'
XFrom 5eb482ca5657a91b7641b97ec503ade881889d49 Mon Sep 17 00:00:00 2001
XFrom: Fabian Keil <fk@fabiankeil.de>
XDate: Sat, 11 Jan 2014 21:58:37 +0100
XSubject: [PATCH] Use fmemopen reimplementation on FreeBSD systems that need it
X
XApparently FreeBSD 8.4 does.
X---
X src/include.am | 7 +++++++
X 1 file changed, 7 insertions(+)
X
Xdiff --git src/include.am src/include.am
Xindex 259d618..6f230d7 100644
X--- src/include.am
X+++ src/include.am
X@@ -231,6 +231,13 @@ endif
X check_PROGRAMS+= src/proxy-bio_unittest
X noinst_PROGRAMS+= src/proxy-bio_unittest
X endif
X+# XXX This conditional should apply for any system where we're building
X+# conf_unittest, but I don't know how to tell that to automake.
X+if !HAVE_FMEMOPEN
X+if HAVE_FUNOPEN
X+src_conf_unittest_SOURCES+= src/common/fmemopen-funopen.c
X+endif
X+endif
X endif
X 
X if TARGET_NETBSD
X-- 
X1.8.5.2
X
XFrom ebfa24395c046e3e732d5be4475f412165bef679 Mon Sep 17 00:00:00 2001
XFrom: Fabian Keil <fk@fabiankeil.de>
XDate: Sun, 12 Jan 2014 21:02:37 +0100
XSubject: [PATCH] Only compile event_unittest when targetting GNU/Linux
X
XIt tests code that currently doesn't compile on FreeBSD and
Xit looks like it won't compile on the other non-GNU/Linux
Xtargets either.
X---
X src/include.am | 2 ++
X 1 file changed, 2 insertions(+)
X
Xdiff --git src/include.am src/include.am
Xindex 6f230d7..c164627 100644
X--- src/include.am
X+++ src/include.am
X@@ -439,11 +439,13 @@ endif
X endif
X endif
X 
X+if TARGET_LINUX
X src_event_unittest_SOURCES = src/event.c
X src_event_unittest_SOURCES+= src/event-unittest.c
X src_event_unittest_SOURCES+= src/routeup.c
X src_event_unittest_SOURCES+= src/util.c
X check_PROGRAMS+= src/event_unittest
X+endif
X 
X if !TARGET_OSX
X check_PROGRAMS+= src/test/proxy-override src/test/return-argc \
X-- 
X1.8.5.2
X
c89d1297492cfd18766d0cb8416f4fcd
echo x - sysutils/tlsdate/Makefile
sed 's/^X//' >sysutils/tlsdate/Makefile << 'dcdd1d06d8c2120db62f5003075db237'
X# $FreeBSD$
X
XPORTNAME=	tlsdate
XPORTVERSION=	0.0.7
XCATEGORIES=	sysutils
XMASTER_SITES=	GH
XDISTNAME=	${GH_ACCOUNT}-${GH_PROJECT}-${PORTVERSION}-${GH_COMMIT}
X
XMAINTAINER=	fk@fabiankeil.de
XCOMMENT=	Secure parasitic rdate replacement
X
XUSE_GITHUB=	yes
XGH_ACCOUNT=	ioerror
X# Technically tlsdate 0.0.7 is 004f6f6, but a couple of follow-up
X# commits are required to fix the build on FreeBSD.
XGH_COMMIT=	44fa3b7
XGH_TAGNAME=	${GH_COMMIT}
X
XUSE_AUTOTOOLS=	autoconf aclocal automake libtool
XUSES=		pkgconfig
X
XOPTIONS_DEFINE=	DOCS
X
XPLIST_SUB+=    PKGNAME=${PKGNAME}
X
X.include <bsd.port.options.mk>
X
Xpost-patch:
X.if !${PORT_OPTIONS:MDOCS}
X	@${REINPLACE_CMD} -e 's@^doc_DATA.*@@' ${WRKSRC}/Makefile.am
X.endif
X# Required for FreeBSD 8.4
X	@${REINPLACE_CMD} -e 's@AC_MSG_ERROR(\[M@AC_MSG_WARN([M@' ${WRKSRC}/configure.ac
X
Xpre-configure:
X	@(cd ${WRKSRC} && ./autogen.sh)
X
Xpost-install:
X	@${MKDIR} ${STAGEDIR}/${PREFIX}/share/licenses/${PKGNAME}
X	${INSTALL_DATA} ${WRKSRC}/LICENSE ${STAGEDIR}${PREFIX}/share/licenses/${PKGNAME}
X
Xregression-test: build
X	@cd ${WRKSRC} && make test
X
X.include <bsd.port.mk>
dcdd1d06d8c2120db62f5003075db237
echo x - sysutils/tlsdate/distinfo
sed 's/^X//' >sysutils/tlsdate/distinfo << '18ec3d28830cc84f0c9da48f6c3304e9'
XSHA256 (ioerror-tlsdate-0.0.7-44fa3b7.tar.gz) = 7a1a7f7c64b830c71783df38af4ce10fe0732e83526b6459c3a6e5db4340e309
XSIZE (ioerror-tlsdate-0.0.7-44fa3b7.tar.gz) = 239975
18ec3d28830cc84f0c9da48f6c3304e9
exit



>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201402251331.s1PDVtwI059997>