Please find enclosed a diff for bringing mbedtls to 2.8.0, which fixes various security issues. See https://github.com/ARMmbed/mbedtls/blob/development/ChangeLog
Bumped minor of mbedcrypto as symbols have been added. make test runs successfully. net/openvpn,mbedtls builds, and tests ok. Comments/OK? Index: Makefile =================================================================== RCS file: /cvs/ports/security/polarssl/Makefile,v retrieving revision 1.19 diff -u -p -r1.19 Makefile --- Makefile 6 Feb 2018 10:26:31 -0000 1.19 +++ Makefile 2 Apr 2018 09:06:17 -0000 @@ -2,13 +2,13 @@ COMMENT= SSL library with an intuitive API and readable source code -DISTNAME= mbedtls-2.7.0 +DISTNAME= mbedtls-2.8.0 EXTRACT_SUFX= -gpl.tgz # check SOVERSION -SHARED_LIBS += mbedtls 3.1 # 2.7 -SHARED_LIBS += mbedcrypto 2.0 # 2.7 -SHARED_LIBS += mbedx509 1.0 # 2.7 +SHARED_LIBS += mbedtls 3.1 # 2.8 +SHARED_LIBS += mbedcrypto 2.1 # 2.8 +SHARED_LIBS += mbedx509 1.0 # 2.8 CATEGORIES= security Index: distinfo =================================================================== RCS file: /cvs/ports/security/polarssl/distinfo,v retrieving revision 1.12 diff -u -p -r1.12 distinfo --- distinfo 6 Feb 2018 10:26:31 -0000 1.12 +++ distinfo 2 Apr 2018 09:06:17 -0000 @@ -1,2 +1,2 @@ -SHA256 (mbedtls-2.7.0-gpl.tgz) = LG/iibS1C/Z7SDnoGwf89SoZ9RKdAkHSqk1Jyx7xHk8= -SIZE (mbedtls-2.7.0-gpl.tgz) = 2092971 +SHA256 (mbedtls-2.8.0-gpl.tgz) = ZJ6ycYcVRZDt2lKUOn9GjnQOwIgH5b9o/0X06P/WiSM= +SIZE (mbedtls-2.8.0-gpl.tgz) = 2121103 Index: patches/patch-include_mbedtls_config_h =================================================================== RCS file: /cvs/ports/security/polarssl/patches/patch-include_mbedtls_config_h,v retrieving revision 1.3 diff -u -p -r1.3 patch-include_mbedtls_config_h --- patches/patch-include_mbedtls_config_h 6 Feb 2018 10:26:31 -0000 1.3 +++ patches/patch-include_mbedtls_config_h 2 Apr 2018 09:06:17 -0000 @@ -6,7 +6,7 @@ www/hiawatha. Index: include/mbedtls/config.h --- include/mbedtls/config.h.orig +++ include/mbedtls/config.h -@@ -1433,7 +1433,7 @@ +@@ -1458,7 +1458,7 @@ * * Uncomment this to enable pthread mutexes. */ @@ -15,7 +15,7 @@ Index: include/mbedtls/config.h /** * \def MBEDTLS_VERSION_FEATURES -@@ -2510,7 +2510,7 @@ +@@ -2538,7 +2538,7 @@ * * Enable this layer to allow use of mutexes within mbed TLS */
