Imported Debian patch 3.10.2+dfsg-2

2017-05-11 14:01:47 +02:00
19 changed files with 1805 additions and 0 deletions
--- a/debian/README.source
+++ b/debian/README.source
@@ -0,0 +1,2 @@
+Some files were removed for DFSG compliance.
+Please check 'copyright' for details.
--- a/debian/changelog
+++ b/debian/changelog
@@ -0,0 +1,98 @@
+wolfssl (3.10.2+dfsg-2) unstable; urgency=medium
+
+  * Updated debian/copyright (Closes: #860046)
+  * Disabled CRL monitor for all architectures (Closes: #860514)
+
+ -- Felix Lechner <felix.lechner@lease-up.com>  Sat, 22 Apr 2017 17:48:29 -0700
+
+wolfssl (3.10.2+dfsg-1) unstable; urgency=medium
+
+  * New upstream release.
+  * New major version is 10
+  * New maintainer email address
+  * Fixes a low level vulnerability for buffer overflow when loading a
+    malformed temporary DH file
+  * Fixes a medium level vulnerability for processing of OCSP response
+  * Fixes CVE-2017-6076, a low level vulnerability for a potential
+    cache attack on RSA operations (Closes: #856114)
+  * Enabled SHA-224 for all architectures, as advised by upstream
+
+ -- Felix Lechner <felix.lechner@lease-up.com>  Sat, 08 Apr 2017 14:09:21 -0700
+
+wolfssl (3.9.10+dfsg-1) unstable; urgency=medium
+
+  * New upstream release (Closes: #793134)
+  * Fixed CVE-2015-6925 (Closes: #801120)
+  * No longer installing arch-dependent options.h (Closes: #792626)
+  * New major number is 3
+  * Using '--enable-distro' to define ABI
+  * Removed all ABI-related build options selecting features
+  * Upgraded Build-Depends: debhelper >=10; bumped compat to 10
+  * Removed Build-Depends: dh-exec
+  * Switched to automatic generation of debug package (dbgsym)
+  * Changed package descriptions and capitalized wolfSSL correctly
+  * Deleted compatibility links for libcyassl5
+  * Removed control file references to libcyassl5
+  * Disabled examples and tests for building without network
+  * Removed duplicate license names from debian/copyright
+  * Updated watch file for upstream's new version tagging scheme on GitHub
+  * Added public key signature verification in watch file
+  * Updated Standard-Version: 3.9.8
+
+ -- Felix Lechner <felix.lechner@lease-up.com>  Fri, 02 Dec 2016 20:51:20 -0800
+
+wolfssl (3.4.8+dfsg-1) unstable; urgency=medium
+
+  * Name of package changed from 'cyassl' to 'wolfssl'
+  * New upstream release
+  * Disabled automatic downgrade to SSLv3 in release 3.2.0 (Closes: #769905)
+  * Fixed CVE-2014-2901, CVE-2014-2902, CVE-2014-2903 and CVE-2014-2904
+      in release 3.2.0 (Closes: #770229)
+  * Fixed TEMP-0000000-2D36D7 in release 3.2.0
+  * Added build option '--enable-chacha'
+  * Added build option '--enable-poly1305'
+  * Added build option '--enable-hashdrbg'
+  * Added build option '--use-fastmath'
+  * Added build option '--enable-ecc25519'
+  * Added build flag TFM_TIMING_RESISTANT
+  * Added build flag TFM_NO_ASM
+  * Added Build-Depends: libpcap0.8-dev for sniffer testing
+  * Removed obsolete build option '--enable-gcc-hardening'
+  * Removed LT_LIB_M in configure.ac to avoid linking uselessly with libm
+  * Enabled tests
+  * Added Exclude-Files: in 'copyright' for automatic repackaging
+  * Added repacksuffix=+dfsg in 'watch'
+  * Updated to Standards-Version: 3.9.6
+  * Added dummy package for 'libcyassl5'
+  * Replaces: libcyassl5 (<< 3.4.2-1~)
+  * Breaks: libcyassl5 (<< 3.4.2-1~)
+  * Provides: libcyassl5
+  * Created compatibility symlinks for libcyassl.so.5.0.0
+
+ -- Felix Lechner <felix.lechner@lease-up.com>  Sun, 26 Apr 2015 08:23:52 -0700
+
+cyassl (2.9.4+dfsg-3) unstable; urgency=medium
+
+  * Removed build option '--use-fastmath'
+  * Turned off fastmath for amd64, where it is default
+  * Fixed typedef for socklen_t on hurd-i386
+  * Marked debug and development packages as Multi-Arch:same
+
+ -- Felix Lechner <felix.lechner@lease-up.com>  Wed, 01 Oct 2014 10:34:34 -0700
+
+cyassl (2.9.4+dfsg-2) unstable; urgency=medium
+
+  * Disabled build option '--enable-aesni' (Closes: #760320, #760321)
+  * Disabled build option '--enable-crl-monitor' (Closes: #760322)
+  * Fixed symbol file to reflect '+' added to previous package version
+  * Switched to standard build flags for correct symbol generation and
+    hardening.
+  * Disabled tests that failed (due to expired certificates).
+
+ -- Felix Lechner <felix.lechner@lease-up.com>  Tue, 30 Sep 2014 10:57:53 -0700
+
+cyassl (2.9.4+dfsg-1) unstable; urgency=low
+
+  * Initial release (Closes: #598391)
+
+ -- Felix Lechner <felix.lechner@lease-up.com>  Wed, 09 Apr 2014 17:43:28 -0700
--- a/debian/compat
+++ b/debian/compat
@@ -0,0 +1 @@
+10
--- a/debian/control
+++ b/debian/control
@@ -0,0 +1,56 @@
+Source: wolfssl
+Priority: optional
+Maintainer: Felix Lechner <felix.lechner@lease-up.com>
+Build-Depends:
+ debhelper (>= 10),
+ autotools-dev,
+ dh-autoreconf,
+ libpcap0.8-dev,
+ openssl
+Standards-Version: 3.9.8
+Section: libs
+Homepage: http://www.wolfssl.com/yaSSL/Products-wolfssl.html
+
+Package: libwolfssl10
+Architecture: any
+Multi-Arch: same
+Pre-Depends: ${misc:Pre-Depends}
+Depends:
+ ${shlibs:Depends},
+ ${misc:Depends}
+Description: wolfSSL encryption library
+ wolfSSL is a small, portable, embedded SSL/TLS programming library
+ targeted for use by embedded systems developers. It was formerly
+ known as CyaSSL.
+ .
+ It is an open source, dual licensed implementation of SSL/TLS
+ (SSL 3.0, TLS 1.0, 1.1, 1.2, DTLS 1.0 and 1.2) written in the C
+ language.  wolfSSL includes both a client and server implementation,
+ progressive cipher support, key and certificate generation, OCSP
+ and CRL, access to the underlying cryptography modules, and more.
+ .
+ wolfSSL also includes an OpenSSL compatibility interface with the
+ most commonly used OpenSSL functions.
+
+Package: libwolfssl-dev
+Section: libdevel
+Architecture: any
+Multi-Arch: same
+Depends:
+ libwolfssl10 (= ${binary:Version}),
+ ${misc:Depends}
+Description: Development files for the wolfSSL encryption library
+ wolfSSL is a small, portable, embedded SSL/TLS programming library
+ targeted for use by embedded systems developers. It was formerly
+ known as CyaSSL.
+ .
+ It is an open source, dual licensed implementation of SSL/TLS
+ (SSL 3.0, TLS 1.0, 1.1, 1.2, DTLS 1.0 and 1.2) written in the C
+ language.  wolfSSL includes both a client and server implementation,
+ progressive cipher support, key and certificate generation, OCSP
+ and CRL, access to the underlying cryptography modules, and more.
+ .
+ wolfSSL also includes an OpenSSL compatibility interface with the
+ most commonly used OpenSSL functions.
+ .
+ This package contains the development files.
--- a/debian/copyright
+++ b/debian/copyright
@@ -0,0 +1,222 @@
+Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: wolfssl
+Upstream-Contact: David Garske <david@wolfssl.com>
+Source: https://github.com/wolfssl/wolfssl/releases
+Comment: Some files were excluded for licenses possibly not DFSG-compliant.
+Files-Excluded:
+ IDE/*
+ mcapi/*
+ mplabx/*
+ mqx/*
+ tirtos/*
+
+Files:
+ *
+Copyright:
+ 2006-2017 wolfSSL Inc.
+License: GPL-2+
+
+Files:
+ wolfcrypt/src/camellia.c
+ wolfssl/wolfcrypt/camellia.h
+Copyright:
+ 2006-2007 NTT (Nippon Telegraph and Telephone Corporation)
+ 2006-2016 wolfSSL Inc.
+License: GPL-2+
+
+Files:
+ COPYING
+Copyright:
+ 1989, 1991 Free Software Foundation, Inc.
+License: No-Modify
+
+Files:
+ m4/ax_append_link_flags.m4
+Copyright:
+ 2011 Maarten Bosmans <mkbosmans@gmail.com>
+License: GPL-3+-with-autoconf
+
+Files:
+ m4/ax_pthread.m4
+Copyright:
+ 2008 Steven G. Johnson <stevenj@alum.mit.edu>
+ 2011 Daniel Richard G. <skunk@iSKUNK.ORG>
+License: GPL-3+-with-autoconf
+
+Files:
+ m4/ax_check_library.m4
+Copyright:
+ 2012 Brian Aker <brian@tangent.org>
+ 2010 Diego Elio Petteno` <flameeyes@gmail.com>
+License: GPL-3+-with-autoconf
+
+Files:
+ m4/ax_append_flag.m4
+ m4/ax_check_compile_flag.m4
+ m4/ax_check_link_flag.m4
+Copyright:
+ 2008 Guido U. Draheim <guidod@gmx.de>
+ 2011 Maarten Bosmans <mkbosmans@gmail.com>
+License: GPL-3+-with-autoconf
+
+Files:
+ m4/ax_append_compile_flags.m4
+Copyright:
+ 2011 Maarten Bosmans <mkbosmans@gmail.com>
+License: GPL-3+-with-autoconf
+
+Files:
+ m4/ax_tls.m4
+Copyright:
+ 2008 Alan Woodland <ajw05@aber.ac.uk>
+ 2010 Diego Elio Petteno` <flameeyes@gmail.com>
+License: GPL-3+-with-autoconf
+
+Files:
+ m4/ax_create_generic_config.m4
+Copyright:
+ 2008 Guido U. Draheim <guidod@gmx.de>
+License: GPL-3+-with-autoconf
+
+Files:
+ m4/ax_compiler_version.m4
+ m4/ax_debug.m4
+ m4/ax_harden_compiler_flags.m4
+ m4/ax_vcs_checkout.m4
+Copyright:
+ 2012 Brian Aker
+License: BSD-3-clause
+
+Files:
+ m4/ax_append_to_file.m4
+ m4/ax_file_escapes.m4
+ m4/ax_print_to_file.m4
+Copyright:
+ 2008 Tom Howard <tomhoward@users.sf.net
+License: FSFAP
+
+Files:
+ m4/ax_add_am_macro.m4
+Copyright:
+ 2009 Tom Howard <tomhoward@users.sf.net
+License: FSFAP
+
+Files:
+ m4/ax_am_jobserver.m4
+Copyright:
+ 2008 Michael Paul Bailey <jinxidoru@byu.net>
+License: FSFAP
+
+Files:
+ m4/ax_am_macros.m4
+Copyright:
+ 2009 Tom Howard <tomhoward@users.sf.net
+License: FSFAP
+
+Files:
+ m4/ax_count_cpus.m4
+Copyright:
+ 2012 Brian Aker <brian@tangent.org>
+ 2008 Michael Paul Bailey <jinxidoru@byu.net>
+ 2008 Christophe Tournayre <turn3r@users.sourceforge.net>
+License: FSFAP
+
+Files:
+ m4/wolfssl_darwin_clang.m4
+Copyright:
+ 2013 John Safranek <john@wolfssl.com>
+License: FSFAP
+
+Files:
+ debian/*
+Copyright:
+ 2014-2017 Felix Lechner <felix.lechner@lease-up.com>
+License: GPL-2+
+
+
+License: FSFAP
+ Copying and distribution of this file, with or without modification, are
+ permitted in any medium without royalty provided the copyright notice
+ and this notice are preserved. This file is offered as-is, without any
+ warranty.
+
+
+License: GPL-2+
+ This package is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 2 of the License, or
+ (at your option) any later version.
+ .
+ This package is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU General Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <http://www.gnu.org/licenses/>
+ .
+ On Debian systems, the complete text of the GNU General
+ Public License version 2 can be found in "/usr/share/common-licenses/GPL-2".
+
+
+License: GPL-3+-with-autoconf
+ This program is free software; you can redistribute it and/or modify it
+ under the terms of the GNU General Public License as published by the
+ Free Software Foundation; either version 3 of the License, or (at your
+ option) any later version.
+ .
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General
+ Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License along
+ with this program. If not, see <http://www.gnu.org/licenses/>.
+ .
+ As a special exception, the respective Autoconf Macro's copyright owner
+ gives unlimited permission to copy, distribute and modify the configure
+ scripts that are the output of Autoconf when processing the Macro. You
+ need not follow the terms of the GNU General Public License when using
+ or distributing such scripts, even though portions of the text of the
+ Macro appear in them. The GNU General Public License (GPL) does govern
+ all other use of the material that constitutes the Autoconf Macro.
+ .
+ This special exception to the GPL applies to versions of the Autoconf
+ Macro released by the Autoconf Archive. When you make and distribute a
+ modified version of the Autoconf Macro, you may extend this special
+ exception to the GPL to apply to your modified version as well.
+
+
+License: BSD-3-clause
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions are
+ met:
+ .
+     * Redistributions of source code must retain the above copyright
+ notice, this list of conditions and the following disclaimer.
+ .
+     * Redistributions in binary form must reproduce the above
+ copyright notice, this list of conditions and the following disclaimer
+ in the documentation and/or other materials provided with the
+ distribution.
+ .
+     * The names of its contributors may not be used to endorse or
+ promote products derived from this software without specific prior
+ written permission.
+ .
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+ A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+ LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+License: No-Modify
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
--- a/debian/libwolfssl-dev.docs
+++ b/debian/libwolfssl-dev.docs
@@ -0,0 +1,3 @@
+NEWS
+README
+doc/README.txt
--- a/debian/libwolfssl-dev.install
+++ b/debian/libwolfssl-dev.install
@@ -0,0 +1,4 @@
+usr/include/*
+usr/lib/*/lib*.a
+usr/lib/*/lib*.so
+usr/lib/*/pkgconfig/*
--- a/debian/libwolfssl10.install
+++ b/debian/libwolfssl10.install
@@ -0,0 +1 @@
+usr/lib/*/lib*.so.*
--- a/debian/libwolfssl10.symbols
+++ b/debian/libwolfssl10.symbols
--- a/debian/patches/dfsg.patch
+++ b/debian/patches/dfsg.patch
@@ -0,0 +1,31 @@
+Description: Strike references to removed non-DFSG sources from build files
+Forwarded: no
+From: Felix Lechner <felix.lechner@lease-up.com>
+--- a/Makefile.am
+++ b/Makefile.am
+@@ -101,25 +101,6 @@ include tests/include.am
+ include sslSniffer/sslSnifferTest/include.am
+ include rpm/include.am
+ 
+-# Exclude references to non-DFSG sources from build files
+-if !BUILD_DISTRO
+-include mqx/util_lib/Sources/include.am
+-include mqx/wolfcrypt_benchmark/Sources/include.am
+-include mqx/wolfcrypt_test/Sources/include.am
+-include mqx/wolfssl/include.am
+-include mqx/wolfssl_client/Sources/include.am
+-include mplabx/include.am
+-include mplabx/wolfcrypt_benchmark.X/nbproject/include.am
+-include mplabx/wolfcrypt_test.X/nbproject/include.am
+-include mplabx/wolfssl.X/nbproject/include.am
+-include mcapi/include.am
+-include mcapi/wolfcrypt_mcapi.X/nbproject/include.am
+-include mcapi/wolfcrypt_test.X/nbproject/include.am
+-include mcapi/wolfssl.X/nbproject/include.am
+-include mcapi/zlib.X/nbproject/include.am
+-include tirtos/include.am
+-include IDE/include.am
+-endif
+ include scripts/include.am
+ 
+ if USE_VALGRIND
--- a/debian/patches/disable-crl-monitor.patch
+++ b/debian/patches/disable-crl-monitor.patch
@@ -0,0 +1,17 @@
+Description: Disable CRL monitor on all architectures
+ CRL monitor is unvailable on Debian architecture kFreeBSD, causes FTBFS
+Author: Felix Lechner <felix.lechner@lease-up.com>
+Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860514
+Last-Update: 2017-04-22
+---
+This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
+--- a/configure.ac
+++ b/configure.ac
+@@ -175,7 +175,6 @@ then
+     enable_ocspstapling=yes
+     enable_ocspstapling2=yes
+     enable_crl=yes
+-    enable_crl_monitor=yes
+     enable_sni=yes
+     enable_maxfragment=yes
+     enable_alpn=yes
--- a/debian/patches/fix-hurd-i386-flags.patch
+++ b/debian/patches/fix-hurd-i386-flags.patch
@@ -0,0 +1,18 @@
+Description: Fix type definition for socklen_t on hurd-i386
+ Based on http://bugs.mysql.com/bug.php?id=22326
+Author: Felix Lechner <felix.lechner@lease-up.com>
+Forwarded: no
+Last-Update: 2017-04-22
+---
+This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
+--- a/wolfssl/test.h
+++ b/wolfssl/test.h
+@@ -152,7 +152,7 @@
+ #endif
+ #endif /* WOLFSSL_SOCKET_IS_INVALID */
+ 
+-#if defined(__MACH__) || defined(USE_WINDOWS_API)
+#if defined(USE_WINDOWS_API)
+     #ifndef _SOCKLEN_T
+         typedef int socklen_t;
+     #endif
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -0,0 +1,4 @@
+dfsg.patch
+fix-hurd-i386-flags.patch
+turn-off-fastmath-for-amd64.patch
+disable-crl-monitor.patch
--- a/debian/patches/turn-off-fastmath-for-amd64.patch
+++ b/debian/patches/turn-off-fastmath-for-amd64.patch
@@ -0,0 +1,21 @@
+Description: Turn off fastmath for amd64, where it is default
+ Enabling fastmath just for amd64 causes the shared library symbols to
+ become architecture-dependent.
+Author: Felix Lechner <felix.lechner@lease-up.com>
+Forwarded: not-needed
+Last-Update: 2017-04-22
+---
+This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
+--- a/configure.ac
+++ b/configure.ac
+@@ -2481,10 +2481,6 @@ fi
+ # set fastmath default
+ FASTMATH_DEFAULT=no
+ 
+-if test "$host_cpu" = "x86_64"
+-then
+-    FASTMATH_DEFAULT=yes
+-fi
+ 
+ # fastmath
+ AC_ARG_ENABLE([fastmath],
--- a/debian/rules
+++ b/debian/rules
@@ -0,0 +1,27 @@
+#!/usr/bin/make -f
+# -*- makefile -*-
+
+# Uncomment this to turn on verbose mode.
+#export DH_VERBOSE=1
+
+# Uncomment this to change the hardening options
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
+VERSION=$(shell dpkg-parsechangelog |grep ^Version:|cut -d ' ' -f 2)
+
+%:
+	dh $@ --with autotools-dev
+#	dh $@ --with autotools-dev --with autoreconf --with dkms
+
+override_dh_auto_configure:
+	dh_auto_configure -- \
+		--enable-sha224 \
+		--enable-distro \
+		--disable-examples \
+		--disable-silent-rules
+
+override_dh_strip:
+	dh_strip --dbgsym-migration='libwolfssl3-dbg (<< 3.9.10-1~)'
+
+#override_dh_dkms:
+#	dh_dkms -V $(VERSION)
--- a/debian/source/format
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (quilt)
--- a/debian/upstream/signing-key.asc
+++ b/debian/upstream/signing-key.asc
@@ -0,0 +1,62 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=RxMm
+-----END PGP PUBLIC KEY BLOCK-----
--- a/debian/watch
+++ b/debian/watch
@@ -0,0 +1,8 @@
+version=4
+
+opts=\
+dversionmangle=s/\+dfsg$//,\
+filenamemangle=s/.+\/v?(\d\S*)\.tar\.gz/wolfssl-$1\.tar\.gz/,\
+pgpsigurlmangle=s/archive\/v(\d\S+)\.tar\.gz/releases\/download\/v$1\/wolfssl-$1\.tar\.gz\.asc/,\
+repacksuffix=+dfsg \
+  https://github.com/wolfSSL/wolfssl/releases .*/v(\d\S*)-stable\.tar\.gz
--- a/debian/wolfssl-dkms.dkms
+++ b/debian/wolfssl-dkms.dkms
@@ -0,0 +1,2 @@
+PACKAGE_NAME="wolfssl"
+PACKAGE_VERSION=#MODULE_VERSION#