lang/rust: Bump revisions after 1.99.0 PR: 2990169c878207a1
net/krill -- DoS vulnerabilityentered 2023-01-23
RPKI daemon, Certificate Authority and Publication Server
pkg audit reports nothing for this version.lang/rust: Bump revisions after 1.99.0 PR: 2990169c878207a1
lang/rust: Bump revisions after 1.98.1 PR: 2981397316461925
lang/rust: Bump revisions after 1.97.1 PR: 2966459c892d2601
lang/rust: Bump revisions after 1.96.0 PR: 295694e29b5eeec3
net/krill: enable on powerpc64*a8467bd505
lang/rust: Bump revisions after 1.95.0 PR: 29461517bf498fd2
lang/rust: Bump revisions after 1.94.0 PR: 29361543f5b4a72f
net/krill: Update to 0.16.0
While here:
- do not install same program configuration twice.
- use .for loop instead for ${INSTALL_MAN}.
Changelog:
https://github.com/NLnetLabs/krill/releases/tag/v0.16.0
PR: 293598
Reported by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Approved by: maintainer, vvd (mentor)58725421b3Revert "net/krill: Update to 0.16.0" This reverts commit 7b854e3d29be1f47e77fee755edb9a5dce7ba131. This was pushed by accident. For now it must stay in bug #293598.4e5e0bc915
net/krill: Update to 0.16.0 While here: - do not install same program configuration twice. - reduce number of INSTALL_MAN calls using several entries. PR: 293598 Reported by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer) Reviewed by: ? Approved by: ? Differential Revision: ?7b854e3d29
lang/rust: Bump revisions after 1.93.0 PR: 2923603d631100e8
net/krill: Update to 0.15.1 Version 0.15.1 'Contains Adult Language' Bug fixes * Fixed a bug introduced in 0.15.0 where CAs do to not clear fulfilled certification requests causing them to re-request a certificate every time they contact their parent. ([#1345]) Other changes * Updated dependencies. Release Announcement: https://nlnetlabs.nl/news/2026/Jan/19/krill-0.15.1-released/ Changelog: https://github.com/NLnetLabs/krill/releases/tag/v0.15.1 PR: 292605 Reported by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)1482995eb0
lang/rust: Bump revisions after 1.92.0 PR: 2915825e496c7707
lang/rust: Bump revisions after 1.91.1 PR: 290816d6b6027df6
lang/rust: Bump revisions after 1.90.0 PR: 28970997b5de4ffc
lang/rust: Bump revisions after 1.89.0 PR: 288923b21956d7db
net/krill: update to 0.15.0
Changelog: https://nlnetlabs.nl/news/2025/Aug/12/krill-0.15.0-released/
Breaking Changes
* Refactored command line options processing for all binaries. As a result, options for both krillc and krillta have slightly changed. For
krillc, the --server, --token, --format, and --api options are now before the first subcommand (since they affect all commands). For krillta,
those options are now after krillta proxy but before the next subcommand, while --format is now after krillta signer. (#1228)
* Removed support for RTA in krillc. Support is currently still present in the Krill server, though behind a (non-default) feature flag. (#1228)
* Changed how authorization works with OpenID Connect and configuration files. Custom profiles have been replaced with a straightforward mapping
from access permission to roles and assigning roles to users. For configuration file-based authentication, the file format has slightly changed
but the current format is still accepted. If you are using OpenID Connect, you will have to update your configuration. Please, see the manual
for details. (#1232)
* Replaced downloading of RISwhois file for ROA analysis with calls to the Roto API. This can be controlled via new configuration settings
bgp_api_enabled, bgp_api_uri, and bgp_api_cache_seconds. (#1233, #1266)
New
* Added a command to re-initialize the trust anchor signer with different timing values or TAL URLs. (#1255)
* Disables the protection against early re-issuance for CA certificates that have the full resource set, typically TA certificates. (#1281)
Bug Fixes
* Fixed a potential infinite recursion in PKCS11 error handling. (#1215)
* Open ID connect: Re-initialize the connection after 60s to pick up configuration changes at the provider. (#1226)
* Fixed the naming of the trust anchor timing configuration. It was expected to be timing_config for the config used by Krill and ta_timing if
used by the Krill TA signer. It is now ta_timing in both cases while timing_config is accepted as an alias in both cases. (#1241)
* Improve performance by using buffered reading and writing in the store. (#1300, #1301)
Other changes
* Refactored Prometheus metrics generation which resulted in a slightly different formatting but should still be syntactically correct. (#1249)
* Upgraded the bundled Krill UI to release 0.9.0. (#1295)
* Added packaging support for Ubuntu Noble, RHEL 10, Debian Trixie; removed packaging support for Ubuntu Xenial and Bionic, and Debian Stretch.
(#1239, #1297, #1308)
* The minimum supported Rust version is now 1.85. (#1288)
PR: 288837
Reported by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)333c57ca78lang/rust: Bump revisions after 1.88.0 PR: 287766f3f7e555b0
lang/rust: Bump revisions after 1.87.0 PR: 2868293ed29b8185
net/krill: Update to version 0.14.6 Fixed the naming of the trust anchor timing configuration. It was expected to be timing_config for the config used by Krill and ta_timing if used by the Krill TA signer. It is now ta_timing in both cases while timing_config is accepted as an alias in both cases. Other changes PR: 286007 Reported by: jaap@NLnetLabs.nl (maintainer)a30ef34b54
lang/rust: Bump revisions after 1.86.0 PR: 2858402a5976aebe
lang/rust: Bump revisions after 1.85.0 PR: 284884cf7c4b037d
lang/rust: Bump revisions after 1.84.0 PR: 283962fccaa1b326
lang/rust: Bump revisions after 1.83.0 PR: 2830001d1fd15a3e
lang/rust: Bump revisions after 1.82.0 PR: 282516ca048c2884
lang/rust: Bump revisions after 1.81.0 PR: 28130089ab81d0e2
*/*: remove STRIP_CMD calls in rust based ports This is not needed after bc4fedc1fec0d359365c04d43be9e32bf101a50e PR: 246993 Differential Revision: https://reviews.freebsd.org/D46503c0d07f1127
lang/rust: Bump revisions after 1.80.1 PR: 2804907a55f95425
net/krill: Update to version 0.14.5 ChangeLog: https://nlnetlabs.nl/news/2024/Jun/27/krill-0.13.2-0.14.5-released/ Not merging to quarterly since the branching of the ports tree is very near. PR: 280035 Reported by: jaap@NLnetLabs.nl (maintainer)e658a38096
lang/rust: Bump revisions after 1.79.0 PR: 27970721476ca8a9
lang/rust: Bump revisions after 1.78.0 PR: 2788342322b66100
lang/rust: Bump revisions after 1.77.0 PR: 277786d632fbe55e
net/krill: Moved man to share/man Approved by: portmgr (blanket)1762f45b54
lang/rust: Bump revisions after 1.76.0 PR: 2769207f5a7b0e52
lang/rust: Bump revisions after 1.75.0 PR: 276033109c3d4629
net/krill: Update version 0.14.3=>0.14.4 Changelog: https://github.com/NLnetLabs/krill/releases PR: 275779 Approved by: submitter is maintainer751740a176
net/krill: Update version 0.14.2=>0.14.3 Changelog: https://github.com/NLnetLabs/krill/releases/tag/v0.14.3 PR: 275633 Approved by: submitter is maintainer759aafff62
lang/rust: Bump revisions after 1.74.1 PR: 275243b2afd89fb2
net/krill: Update to Version 0.14.2 Changelog: https://github.com/NLnetLabs/krill/releases/tag/v0.14.1 Changelog: https://github.com/NLnetLabs/krill/releases/tag/v0.14.2 PR: 274907f72b97af8e
lang/rust: Bump revisions after 1.73.0 PR: 274499dd10dc88a7
lang/rust: Bump revisions after 1.72.0 PR: 273331aba8da2be1
lang/rust: Bump revisions after 1.71.0 PR: 272449cdf28617b4
lang/rust: Bump revisions after 1.70.0 PR: 271797e1d1045bc7
net/krill: Update to Version 0.13.1 The Krill UI includes a CA selection dropdown in case you have multiple CAs. This dropdown used to have a scrollbar, which accidentally got lost in the UI overhaul we did in version 0.13.0. This is now fixed (#1071) Changelog: https://github.com/NLnetLabs/krill/releases/tag/v0.13.1 PR: 2718225de5895130
net/krill: Upgrade to Version 0.13 This update to 0.13.0 includes Krill 0.12.3 'Sakura'. This release contains a feature that enables Publication Server operators to remove unwanted, surplus, files from their repository. This feature was cherry-picked from the upcoming major release branch so that Publication Server operators can use this without delay. Note that if you do not use Krill to operate a Publication Server, then there is no need to upgrade to this version now. From the announcement for Krill 0.13.0 'DRY'. This release contains an important fix for an issue affecting v0.12.x Publication Servers (see PR #1023). It is recommended that affected installations are upgraded as soon as possible. The user interface was completely re-implemented in this release resulting in a smaller browser footprint. Functionality is mostly unchanged, except that users can now have an optional comment with each of their ROA configurations. These comments are not part of published ROA objects - they are meant for local bookkeeping only. ASPA objects are now supported through the CLI by default. We hope to add UI support later this year. You can read more about ASPA support here: https://krill.docs.nlnetlabs.nl/en/0.13.0/manage-aspas.html Krill can now be used as a full RPKI Trust Anchor, using a detached (possibly offline) signer for Trust Anchor key operations. Changelog: https://github.com/NLnetLabs/krill/releases/tag/v0.13.0 PR: 271672 MFH: 2023Q209123c95d4
lang/rust: Bump revisions after 1.69.0 PR: 2709533db55c4e97
lang/rust: Bump revisions after 1.68.0 PR: 270080ebf29acc6c
lang/rust: Bump revisions after 1.67.1 PR: 269336109e35fd59
net/krill: Update to 0.12.1 ChangeLog: https://www.nlnetlabs.nl/news/2023/Jan/17/krill.0.12.1-released/ Firstly, this release fixes [CVE-2023-0158](https://nlnetlabs.nl/downloads/routinator/CVE-2023-0158.txt) Secondly, locking was added in this release to ensure that updates to the repository content are always applied sequentially. This fixes a concurrency issue introduced in Krill 0.12.0 that could result in rejecting an update from a publishing CA. PR: 269050 Reported by: jaap@NLnetLabs.nl (maintainer) MFH: 2023Q1 (security fix) Security: CVE-2023-0158bb104a8ee1
*/*: Bump rust (cargo) ports to reflect on WITH_LTO Bump ports in tree so they get rebuilt with new default settings for cargo ports12f1c627d4