**Many patches need cleanup for PR and/or upstreaming**\\ 

"Up" to main [[/LibreSSL]] article

====== Helpful resources ======

%%OpenBSD%%'s ports required patching for %%LibreSSL%% as well (that's currently the only OS that uses %%LibreSSL%% as default SSL library). You can find patches ub[[http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/|OpenBSD CVS]]

There's a [[https://github.com/gentoo/libressl|Gentoo LibreSSL GitHub]] repository where patches for software are collected.

These resources can be a great starting point for a patch. Note that %%OpenBSD%% will rigorously remove EGD and Compression support. To get your modification accepted by a ports committer and by the upstream project you'll generally need to make your changes conditional.

====== LibreSSL 2.5 - 3.4 ======

  * [[LibreSSL/3.4|Issues with the introduction of 3.4]]
  * [[LibreSSL/2.8|Issues with the introduction of 2.8]]
  * [[LibreSSL/2.7|Issues with the introduction of 2.7]]
  * [[LibreSSL/2.6|Issues with the introduction of 2.6]]
  * [[LibreSSL/2.5|Issues with the introduction of 2.5]]

====== OpenSSL 1.1.0 ======

As %%OpenSSL%% released version 1.1.0 a lot of OPENSSL_VERSION_NUMBER checks have been added in projects. The following list documents the fixes that were required to fix these. This work is similar to the next chapter on OPENSSL_VERSION_NUMBER.

^  category/port  ^  Date/Version  ^  Ports Status  ^  Upstream status/Comment  ^
| databases/pecl-mongodb | 2017-02-12/1.2.3 | <del>[[https://bugs.freebsd.org/217028|PR217028]]</del> | [[https://svnweb.freebsd.org/changeset/ports/433962|In ports]] |
| dns/yadifa | 2017-02-25/2.2.3 | [[https://bugs.freebsd.org/217349|PR217349]] | [[https://github.com/yadifa/yadifa/pull/2|Upstream issue]] |
| ftp/proftpd | 2017-02-12/1.3.5d | [[https://bugs.freebsd.org/217023|PR217023]] |  |
| net-im/ricochet | 2017-02-25/1.1.4 | [[https://bugs.freebsd.org/217350|PR217350]] | [[https://github.com/ricochet-im/ricochet/pull/529|Upstream issue]] |
| net-mgmt/zabbix32 | 2017-02-11/3.2.3 | [[https://bugs.freebsd.org/217035|PR217035]] | [[https://support.zabbix.com/browse/ZBX-11803|Upstream issue]] |
| security/hitch | 2017-02-12/1.4.4 | <del>[[https://bugs.freebsd.org/217029|PR217029]]</del> | [[https://svnweb.freebsd.org/changeset/ports/433993|In ports]] [[https://github.com/varnish/hitch/commit/cc92c25|Upstream]] |
| security/certificate-transparency | 2017-02-11/20161015_7 | [[https://bugs.freebsd.org/217013|PR217013]] |  |
| security/krb5-115 | 2017-02-12/1.15 | <del>[[https://bugs.freebsd.org/217027|PR217027]]</del> | [[https://github.com/krb5/krb5/pull/607|Upstream issue]] |
| security/libp11 | 2017-02-11/0.4.4 | [[https://bugs.freebsd.org/217013|PR217006]] |  |
| security/openvpn | 2017-02-16/2.4.0 | [[https://bugs.freebsd.org/217140|PR217140]] | [[https://github.com/OpenVPN/openvpn/commit/dcfd3b6173d8cdb4658de23db1dd0bd932b390d2|Upstream]] |
| security/tor | 2017-02-06/0.2.9.9 | [[https://bugs.freebsd.org/216845|PR216845]] |  |
| sysutils/afflib | 2017-02-12/3.7.10 | <del>[[https://bugs.freebsd.org/217045|PR217045]]</del> | [[https://svnweb.freebsd.org/changeset/ports/434042|In ports]] [[https://github.com/sshock/AFFLIBv3/pull/22|Upstream]] |
| www/squid-devel | 2017-02-12/4.0.17 | <del>[[https://bugs.freebsd.org/217045|PR217045]]</del> | [[https://svnweb.freebsd.org/changeset/ports/433992|In ports]] |

====== Removal of OPENSSL_VERSION_NUMBER patch ======

%%HardenedBSD%% is testing replacing %%OpenSSL%% with %%LibreSSL%% in base. The replacement does **//not//** patch the ''%%OPENSSL_VERSION_NUMBER%%'' in ''%%openssl/opensslv.h%%'' so this is a test to see which ports fail with ''%%OPENSSL_VERSION_NUMBER= 0x20000000L%%''. This shows build problems that had not surfaced earlier.

These errors will also appear if you use the ''%%security/libressl-devel%%'' port as of version 2.4.0.

^  category/port  ^  Problem  ^  Ports Status  ^  Upstream status/Comment  ^
| dns/bind910 | OPENSSL_VERSION_NUMBER | fixed upstream | [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/3497f8b1b90ac2912106d0ef869185f8c6eaa978|Patch]] |
| dns/powerdns | OPENSSL_VERSION_NUMBER | <del>212016</del> | [[https://svnweb.freebsd.org/changeset/ports/420599|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/66e13d1151a333820f74361366ecb2a905c901d8|Patch]] |
| dns/powerdns-recursor | OPENSSL_VERSION_NUMBER | <del>212016</del> | [[https://svnweb.freebsd.org/changeset/ports/420599|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/66e13d1151a333820f74361366ecb2a905c901d8|Patch]] |
| ftp/curl | OPENSSL_VERSION_NUMBER | Fixed upstream | [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/edbf4afc9f4b62a747576a02f8b7434c2d55b695|Patch]] |
| mail/postfix | OPENSSL_VERSION_NUMBER | <del>211502</del> | [[https://svnweb.freebsd.org/changeset/ports/419488|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/f306187a012d296778c317ec459b8bf348b5dc4d|Patch]] |
| mail/postfix | OPENSSL_VERSION_NUMBER | <del>211502</del> | [[https://svnweb.freebsd.org/changeset/ports/419488|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/f306187a012d296778c317ec459b8bf348b5dc4d|Patch]] |
| mail/postfix | OPENSSL_VERSION_NUMBER | <del>212223</del> | [[https://svnweb.freebsd.org/changeset/ports/421091|In ports]] for 3.1.2 |
| mail/postfix-current | OPENSSL_VERSION_NUMBER |  | [[http://svnweb.freebsd.org/changeset/ports/416820|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/5dadfd8f8aeb037eec62d0735828c82b02b4b9de|Patch]] |
| mail/postfix-current | OPENSSL_VERSION_NUMBER | <del>212223</del> | [[https://svnweb.freebsd.org/changeset/ports/421104|In ports]] for 3.2.0.20160828 |
| mail/rspamd | OPENSSL_VERSION_NUMBER |  | [[https://github.com/vstakhov/rspamd/commit/3d048db398f3f1f9de10ad04ef249282020f6ffd|Upstream]] |
| net/asterisk13 | OPENSSL_VERSION_NUMBER | <del>[[https://bugs.freebsd.org/211707|PR211707]]</del> | [[http://svnweb.freebsd.org/changeset/ports/211707|In ports]] [[http://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/ports/telephony/asterisk/patches/patch-res_res_rtp_asterisk_c?rev=1.1&content-type=text/plain|OpenBSD patch]] |
| net/haproxy-devel | OPENSSL_VERSION_NUMBER |  | [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/b0c5e0fd15cdf9b6059e5c66e66f9e81b4e7f252|Patch]] |
| security/openconnect | OPENSSL_VERSION_NUMBER | <del>[[https://bugs.freebsd.org/212254|PR212254]]</del> | [[https://svnweb.freebsd.org/changeset/ports/421931|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/4ab13f610159ca24f8e7023dd56a61f2a86e69bd|Patch]] |
| security/openvpn | OPENSSL_VERSION_NUMBER | Fixed upstream | [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/0d42d3ab764222f52d4f4dc8ff42c975002494f2|Patch]] |
| security/strongswan | OPENSSL_VERSION_NUMBER | [[https://bugs.freebsd.org/212149|212149]] | [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/c2091a265c9c78401cd1f4135de97590c8e7c454|Patch]] |
| security/stunnel | OPENSSL_VERSION_NUMBER |  | [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/94bbec2b88bb4deb078e08bac1930cbdfc5102ae|Patch]] |
| security/wpa_supplicant | OPENSSL_VERSION_NUMBER | <del>2.6</del> | [[http://svnweb.freebsd.org/changeset/ports/426292|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/99ff0f607a11cbbedf09b05c7b1ead23a5f8b899|Patch]] Fixed upstream |
| security/xca | OPENSSL_VERSION_NUMBER |  | [[https://svnweb.freebsd.org/changeset/ports/421947|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/89c65280f22f251d1ee167297717bc9a75db5d52|Patch]] |

**List only, patches for already existing problem categories (EGD, DES, SSLv3) can be found in the reqular lists!**

^  category/port  ^  Problem  ^  Ports Status  ^  Upstream status/Comment  ^
| benchmarks/postal | SSLv3 |  |  |
| databases/mongodb32-tools | SSLv3 |  |  |
| databases/mongodb32 | SSLv3 |  |  |
| devel/tcl-trf | SHA-0 |  |  |
| finance/openhbci | DES_ |  |  |
| finance/php-tclink | overlapping methods |  | [[https://svnweb.freebsd.org/changeset/ports/421715|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/00ec92afcb87856faf1555e3f232b749a987d658|Patch]] |
| mail/emailrelay | SSLv3 |  |  |
| mail/mixmaster | EGD |  |  |
| mail/libesmtp | DES |  |  |
| mail/prayer | SSLv3 EGD |  |  |
| misc/skutils | SSLv3 |  |  |
| multimedia/oscam | SSLv3 |  |  |
| net/Sockets | SSLv3 |  |  |
| net/l4ip | EGD |  |  |
| net/netatalk | DES_ |  |  |
| net/netatalk3 | DES_ |  |  |
| net/openntpd | %%LibreSSL%% Port dep |  | [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/093cad2156cc06dfedd95d7071c76b590efe9f41|Patch]] |
| net/qt5-network | SSL_CTRL_SET_CURVES |  |  |
| net/ssltunnel-client | DES_ |  |  |
| net-mgmt/snmp++ | DES_ |  |  |
| net-p2p/shx | EGD |  |  |
| security/certificate-transparency | CMS |  |  |
| security/distcache | SSLv3 |  |  |
| security/openssl | Framework |  | [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/d691fea4d9dbe76799b815ee09b9115a4a32ffa9|Patch]] |
| security/openssl-devel | Framework |  | [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/26306f8127b52e0e38767230a1c340eafa225b03|Patch]] |
| security/rcracki_mt | DES_ |  |  |
| www/tomcat-native | SSLv3 |  |  |

====== Introduction of libressl-devel ======

^  category/port  ^  Problem  ^  Ports Status  ^  Upstream status/Comment  ^
| net/openbsc | conflict | <del>dep removed</del> | [[http://svnweb.freebsd.org/changeset/ports/404614|In ports]] |
| www/obhttpd | conflict |  |  |

====== SSLv3 / SHA-0 removal ======

This has been given its [[OpenSSL/No-SSLv3|own sub-page]] of the [[/OpenSSL]] section as the fallout is considered to be equal to ''%%--no-ssl3 --no-ssl3-method%%''

^  category/port  ^  Problem  ^  Ports Status  ^  Upstream status/Comment  ^
| <del>databases/galera</del> | Boost-libs ssl |  | see devel/boost-libs |
| devel/cargo | "libssl.so.8" not found |  |  |
| databases/mysql-connector-c | SSL detection |  | [[https://svnweb.freebsd.org/changeset/ports/422030|In ports]] [[https://github.com/trueos/ports/tree/master/databases/mysql-connector-c/Makefile|Patch]] |
| devel/qca-qt5 | SSLv3 SHA-0 |  | [[https://svnweb.freebsd.org/changeset/ports/417968|In ports]] [[https://github.com/Sp1l/freebsd-ports/blob/master/devel/qca-qt5/files/patch-plugins_qca-ossl_qca-ossl.cpp|Patch]] |
| devel/tcl-trf | SHA-0 | 2016-09-11 | [[https://svnweb.freebsd.org/changeset/ports/421879|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/83036bff063d96d9d508e4d25cf48285ca72d0fd|Patch]] |
| games/tinymux | SHA-0 | 2016-09-11 | [[https://svnweb.freebsd.org/changeset/ports/421894|In ports]] [[https://github.com/pcbsd/freebsd-ports/blob/master/games/tinymux/files/patch-player.cpp|Patch]] [[http://builds.pcbsd.org/avenger/data/pcbsd-101-RELEASE-master/2015-10-16_15h20m04s/logs/errors/tinymux-2.10.1.12_1.log|Build log]] [[brazilofmux@gmail.com|Mailed upstream]] |
| lang/pypy | COMP EGD | <del>[[https://bugs.freebsd.org/204743|204743]]</del> | Fixed upstream |
| lang/qore | SHA-0 | <del>0.8.12</del> | [[https://github.com/pcbsd/freebsd-ports/blob/master/lang/qore/files/patch-lib_ql__crypto.qpp|Patch]] [[http://builds.pcbsd.org/avenger/data/pcbsd-101-RELEASE-master/2015-10-16_15h20m04s/logs/errors/qore-0.8.11.log|Build log]] [[https://github.com/qorelanguage/qore/commit/fc181070ad1afbf49af2e8fc968b97328d690a86|Upstream patched]] |
| net-im/coccinella | libtls conflict |  | [[https://svnweb.freebsd.org/changeset/ports/398884|In ports]] [[https://reviews.freebsd.org/D3695|Patch review]] |
| net-im/tkabber | libtls conflict |  | [[https://svnweb.freebsd.org/changeset/ports/398884|In ports]] [[https://reviews.freebsd.org/D3695|Patch review]] |
| net-mgmt/netmagis-database | libtls conflict |  | [[https://svnweb.freebsd.org/changeset/ports/398884|In ports]] [[https://reviews.freebsd.org/D3695|Patch review]] |
| net-mgmt/netmagis-www | libtls conflict |  | [[https://svnweb.freebsd.org/changeset/ports/398884|In ports]] [[https://reviews.freebsd.org/D3695|Patch review]] |
| net-mgmt/nsca-ng | PSK |  | [[https://github.com/Sp1l/ports/tree/master/net-mgmt/nsca-ng|Patches]] Hard requires PSK |
| net-mgmt/nsca-ng-client | PSK |  | slave port of net-mgmt/nsca-ng |
| net-p2p/bitcoin |  |  | Detected %%LibreSSL%%: This is NOT supported |
| net-p2p/digitalcoin | SSLv3 |  | Won't fix, see net-p2p/bitcoin |
| net-p2p/dogecoin | SSLv3 |  | Won't fix, see net-p2p/bitcoin |
| <del>net-p2p/libtorrent-rasterbar</del> | boost-libs |  | Boost libs |
| net-p2p/litecoin-daemon | SSLv3 |  | Won't fix, see net-p2p/bitcoin |
| net-p2p/litecoin-utils | SSLv3 |  | Won't fix, see net-p2p/bitcoin |
| net-p2p/namecoin | SSLv3 |  | Won't fix, see net-p2p/bitcoin |
| net-p2p/namecoin-daemon | SSLv3 |  | Won't fix, see net-p2p/bitcoin |
| <del>net-p2p/twister</del> | boost-libs |  | Boost libs |
| net-p2p/zetacoin | SSLv3 |  | Won't fix, see net-p2p/bitcoin |
| net-p2p/zetacoin-nox11 | SSLv3 |  | Won't fix, see net-p2p/bitcoin |
| net/qt5-network | SSL_CTRL_SET_CURVES |  | Gentoo -> HBSD patch |
| net/yate | base libs | <del>[[https://reviews.freebsd.org/D4706|D4706]]</del> | [[https://svnweb.freebsd.org/changeset/ports/404445|In ports]] [[https://bugs.freebsd.org/205170|PR205170]] |
| net/x11vnc | SHA-0 |  | [[https://svnweb.freebsd.org/changeset/ports/417834|In ports]] [[https://github.com/Sp1l/freebsd-ports/blob/master/net/x11vnc/files/patch-x11vnc_enc.h|Patch]] [[xvml@karlrunge.com|Upstream mailed]] |
| science/orthanc | FIPS | [[https://bugs.freebsd.org/217352|PR217352]] | Added **2017-02-25** |
| security/john | SHA-0 |  | [[http://builds.pcbsd.org/avenger/data/pcbsd-101-RELEASE-master/2015-10-16_15h20m04s/logs/errors/john-1.7.9.j.7_1.log|Build log]] |
| security/nessus-libnasl | SHA-0 | deleted | [[https://svnweb.freebsd.org/changeset/ports/423021|In ports]] [[https://github.com/Sp1l/freebsd-ports/tree/master/security/nessus-libnasl/files|Patches]] |
| security/openscep | ASN1 methods |  |  |
| security/openssl_tpm_engine | Engine | Ignore | [[http://svnweb.freebsd.org/changeset/ports/422042|In ports]] [[https://github.com/Sp1l/freebsd-ports/blob/master/security/openssl_tpm_engine/files/patch-e_tpm.c|Patch]] |
| security/osiris | SHA-0 |  | [[https://github.com/pcbsd/freebsd-ports/tree/master/security/osiris/files|Patch]] Mailed project (<tsg@shmoo.com>) |
| <del>sysutils/osquery</del> | boost-libs |  |  |
| security/sguil | libtls conflict |  | [[https://svnweb.freebsd.org/changeset/ports/398884|In ports]] [[https://reviews.freebsd.org/D3695|Patch review]] |

====== PC-BSD 10.1.2 ports build ======

Legend:
  - category/port
  - Problem : refers to [[/LibreSSL#Types_of_Failures|Types of Failures]]
  - Ports Status
    * PR123456 : Link to PR with a patch for the port
    * <del>PR123456</del> : PR closed, fix in ports tree, link to SVN changeset or Phabricator review in Comments section
  - Upstream status/Comment
    * Link to upstreamed issue/bug/etc.
    * Link to SVN changeset if PR closed
    * Link to Phabricator review
    * Link to [[https://github.com/Sp1l|Sp1l's GitHub repo]]
    * **OPEN** -> TODO
    * Additional info

^  category/port  ^  Problem  ^  Ports Status  ^  Upstream status/Comment  ^
| tcltls | conflict | <del>[[https://bugs.freebsd.org/202676|PR202676]]</del> | Problematic file: /usr/local/include/tls.h |
| net-mgmt/nsca-ng | PSK | [[http://builds.pcbsd.org:8880/data/pcbsd-100-RELEASE-1012/2015-05-13_08h07m17s/logs/errors/nsca-ng-1.2.log|Build log]] |
| security/krb5-111 | patch |  | patch-src__plugins__preauth__pkinit__pkinit_crypto_openssl.c |

^  category/port  ^  Problem  ^  Ports Status  ^  Upstream status/Comment  ^
| comms/kermit | COMP+EGD | <del>[[https://bugs.freebsd.org/198980|PR198980]]</del> | [[https://svnweb.freebsd.org/changeset/ports/421877|In ports]] Included in 304 |
| databases/virtuoso | DES_ | <del>[[https://bugs.freebsd.org/198368|PR198368]]</del> | [[https://svnweb.freebsd.org/changeset/ports/381865|In ports]] Upstreamed via website |
| deskutils/growl-for-linux | DES_ | <del>[[https://bugs.freebsd.org/198243|PR198243]]</del> | [[https://svnweb.freebsd.org/changeset/ports/380720|In ports]] [[https://github.com/mattn/growl-for-linux/pull/51|upstreamed imported]] |
| devel/ace | EGD | <del>[[https://bugs.freebsd.org/198776|PR198776]]</del> | [[https://svnweb.freebsd.org/changeset/ports/382620|In ports]] |
| devel/dcmtk | EGD | <del>[[https://bugs.freebsd.org/198780|PR198780]]</del> | [[https://svnweb.freebsd.org/changeset/ports/382626|In ports]] |
| devel/ice | EGD | <del>[[https://bugs.freebsd.org/198781|PR198781]]</del> | [[https://svnweb.freebsd.org/changeset/ports/397092|In ports]][[https://github.com/Sp1l/ports/tree/master/devel/ice|GitHub]] |
| devel/libpdel | DES_ | <del>[[https://bugs.freebsd.org/196748|PR196748]]</del> | [[https://svnweb.freebsd.org/changeset/ports/379915|In ports]] |
| devel/qca | COMP | <del>[[https://bugs.freebsd.org/199134|PR199134]]</del> | [[https://svnweb.freebsd.org/changeset/ports/400975|In ports]] [[https://svnweb.freebsd.org/changeset/ports/417968|In ports]] |
| devel/subversion-static | arc4rand |  | **OPEN** |
| dns/knot | GOST | <del>[[https://bugs.freebsd.org/198981|PR198981]]</del> | [[http://svnweb.freebsd.org/ports?view=revision&revision=383940|In ports]] [[https://gitlab.labs.nic.cz/labs/knot/tree/v1.6.3|Fixed in 1.6.3]] |
| dns/ldns | Cryptodev | <del>[[https://bugs.freebsd.org/191853|PR191853]]</del> | [[https://svnweb.freebsd.org/changeset/ports/379920|In ports]] |
| ftp/curl | SRP | <del>[[https://bugs.freebsd.org/198397|PR198397]]</del> | [[https://svnweb.freebsd.org/changeset/ports/382461|In ports]] |
| ftp/pavuk | DES_ | <del>[[https://bugs.freebsd.org/198333|PR198333]]</del> | [[https://svnweb.freebsd.org/changeset/ports/416810|In ports]]  Upstream dead |
| ftp/wget | EGD | <del>[[https://bugs.freebsd.org/191988|PR191988]]</del> | [[https://svnweb.freebsd.org/changeset/ports/390119|In ports]] [[https://github.com/mirror/wget/commit/b5778699f0fd65efb78ac8fc0777128a7069b856|Upstream fixed in 1.6.3]] |
| finance/openhbci | DES_ | 2016-09-11 | [[http://svnweb.freebsd.org/changeset/ports/421880|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/843b63916936174b692f7887e3dc5959f61ca709|Patch]] |
| graphics/openimageio | port | <del>[[https://bugs.freebsd.org/198330|PR191988]]</del> | [[http://svnweb.freebsd.org/changeset/ports/397377|In ports]] Missing %%OpenSSL%% dependency |
| irc/unreal | EGD | <del>[[https://bugs.freebsd.org/198491|PR198491]]</del> | [[https://svnweb.freebsd.org/changeset/ports/382826|In ports]] [[https://github.com/unrealircd/unrealircd/pull/15|GitHub Merged]] |
| irc/charybdis | EGD | <del>[[https://bugs.freebsd.org/198504|PR198504]]</del> | [[https://svnweb.freebsd.org/changeset/ports/404377|In ports]] [[https://github.com/atheme/charybdis/pull/87|Upstream fixed]] |
| irc/ircd-hybrid | COMP+EGD | <del>[[https://bugs.freebsd.org/198505|PR198505]]</del> | [[https://svnweb.freebsd.org/changeset/ports/381273|In ports]] Upstream fixed |
| irc/ircd-ratbox | EGD | <del>[[https://bugs.freebsd.org/198506|PR198506]]</del> | Mailed [[ircd-ratbox@lists.ratbox.org|upstream]] |
| irc/ircd-ratbox-devel | EGD | <del>[[https://bugs.freebsd.org/198507|PR198507]]</del> | non-devel is newer |
| irc/znc | COMP | <del>[[https://bugs.freebsd.org/198387|PR198387]]</del> | [[https://svnweb.freebsd.org/changeset/ports/384113|In ports]] [[https://github.com/jimloco/Csocket/pull/49|Imported upstream]] |
| lang/pypy-devel | EGD | <del>[[http://svnweb.freebsd.org/changeset/ports/386702|deleted]]</del> | [[https://github.com/Sp1l/ports/tree/master/lang/pypy-devel|GitHub]] |
| lang/pypy3-devel | EGD | runaway | [[https://github.com/Sp1l/ports/tree/master/lang/pypy3-devel|GitHub]] |
| lang/python27 | EGD | <del>[[https://bugs.freebsd.org/192511|PR192511]]</del> | [[https://svnweb.freebsd.org/changeset/ports/391240|In ports]][[https://hg.python.org/cpython/rev/eddcb6671a48|fixed upstream]] |
| lang/python32 | EGD | <del>[[https://bugs.freebsd.org/195513|PR195513]]</del> | [[https://svnweb.freebsd.org/changeset/ports/404378|In ports]] [[https://hg.python.org/cpython/rev/6f23bc5d480e|fixed upstream]] |
| lang/python33 | EGD | <del>[[https://bugs.freebsd.org/195513|PR195511]]</del> | [[https://svnweb.freebsd.org/changeset/ports/404347|In ports]] [[https://hg.python.org/cpython/rev/6f23bc5d480e|fixed upstream]] |
| lang/python34 | EGD | <del>[[https://bugs.freebsd.org/195508|PR195508]]</del> | [[https://reviews.freebsd.org/D1991|In ports]] [[https://hg.python.org/cpython/rev/7f82f50fdad0|upstream]] |
| mail/courier | SSLv2 | <del>[[https://bugs.freebsd.org/198399|PR198399]]</del> | [[https://svnweb.freebsd.org/changeset/ports/382055|In ports]] |
| mail/dovecot | COMP | <del>[[https://bugs.freebsd.org/198386|PR198386]]</del> | [[https://svnweb.freebsd.org/changeset/ports/381606|In ports]] |
| mail/dovecot2 | COMP | <del>fixed upstream</del> |  |
| mail/mixmaster | EGD | <del>Broken</del> | HBSD [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/52122f4dd45bc5d149d3a5984b4d59f7832587a7|Patch]] |
| mail/heirloom-mailx | EGD | <del>[[https://bugs.freebsd.org/205540|PR205540]]</del> | [[https://svnweb.freebsd.org/changeset/ports/417925|In ports]] [[http://builds.pcbsd.org/avenger/data/pcbsd-101-RELEASE-master/2015-10-16_15h20m04s/logs/errors/heirloom-mailx-12.4_7.log|Build log]] |
| mail/libesmtp | DES | 2016-09-11 | [[https://svnweb.freebsd.org/changeset/ports/421883|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/0f85026f83b515dcd115ca63902cc98b3056db21|Patch]] |
| mail/opensmtpd-devel | SSL_CTX_use_cert_chain | <del>fixed upstream</del> | Mailed upstream |
| mail/up-imapproxy | EGD | <del>[[https://bugs.freebsd.org/200237|PR200237]]</del> | [[https://svnweb.freebsd.org/changeset/ports/417964|In ports]] [[http://article.gmane.org/gmane.mail.squirrelmail.imapproxy/139|Upstreamed]] |
| misc/linm | DES_ | <del>[[https://bugs.freebsd.org/198984|PR198984]]</del> | [[https://svnweb.freebsd.org/changeset/ports/383804|In ports]] |
| net/gq | DES_ | <del>[[https://bugs.freebsd.org/198340|PR198340]]</del> | [[https://svnweb.freebsd.org/changeset/ports/417927|In ports]] [[https://sourceforge.net/p/gqclient/bugs/153/|Upstreamed]] |
| net/l4ip | EGD |  | [[http://svnweb.freebsd.org/changeset/ports/421907|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/f42748ebe893763cbdbff752f81bc2e59e3d5b0c|Patch]] |
| net/miniupnpd | linking | <del>[[https://bugs.freebsd.org/199390|PR199390]]</del> | [[https://svnweb.freebsd.org/changeset/ports/390722|In ports]] |
| net/mosquitto | PSK | <del>[[https://bugs.freebsd.org/198988|PR198988]]</del> | [[https://svnweb.freebsd.org/changeset/ports/385971|In ports]] [[https://bugs.eclipse.org/bugs/show_bug.cgi?id=463366|Upstream bug]] |
| net/mpd5 | DES_ | <del>[[https://bugs.freebsd.org/196800|PR196800]]</del> | [[https://svnweb.freebsd.org/changeset/ports/379914|In ports]] |
| net/netatalk | DES_ |  | HBSD [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/f67633afd175c8d49217ce18b9332707664fe749|Patch]] |
| net/netatalk3 | DES_ | <del>3.1.9</del> | HBSD [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/498cbdbe9517e01ecdabd47d082fd5f26fef714c|Patch]] |
| net/openldap24-server | DES_ | <del>[[https://bugs.freebsd.org/194841|PR194841]]</del> | [[https://svnweb.freebsd.org/changeset/ports/372499|In ports]] |
| net/pipsecd | DES_ | <del>[[https://bugs.freebsd.org/198345|PR198345]]</del> | [[https://svnweb.freebsd.org/changeset/ports/391216|In ports]] Upstream dead |
| net/socat | EGD+COMP | <del>[[https://bugs.freebsd.org/197192|PR197192]]</del> | [[https://svnweb.freebsd.org/changeset/ports/414484|In ports]] Upstream accepted |
| net/ssltunnel-client | DES_ |  | [[http://svnweb.freebsd.org/changeset/ports/421934|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/4ad697fbffcd90dcdbe8b5cc931ea1eaee2c2604|Patch]] |
| net-mgmt/snmp++ | DES_ |  | [[https://svnweb.freebsd.org/changeset/ports/421896|In ports]] HBSD [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/23930a050949ba680e1e6f1b22c3e306c73cea22|Patch]] |
| net-mgmt/ettercap | DES_ | <del>[[https://bugs.freebsd.org/198184|PR198184]]</del> | [[https://svnweb.freebsd.org/ports?view=revision&revision=380379|In ports]] |
| net-mgmt/xymon-server | EGD | <del>[[https://bugs.freebsd.org/198522|PR198522]]</del> | [[https://svnweb.freebsd.org/ports?view=revision&revision=383000|In ports]] [[http://sourceforge.net/p/xymon/code/7597|Upstream fixed]] |
| net/zabbix3-client | PSK |  |  |
| net-mgmt/send | x509 struct |  | [[https://svnweb.freebsd.org/changeset/ports/428324|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/9250ccb15fd855609b1f4c6ed2dbfb75a8261aa6|Patch]] |
| net-p2p/shx | EGD |  | [[http://svnweb.freebsd.org/changeset/ports/421961|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/8f279b62da850af53a6a0627bace122090b8f3cb|Patch]] |
| net-p2p/transmission-cli | linking | <del>[[https://bugs.freebsd.org/186978|PR186978]]</del> | [[https://svnweb.freebsd.org/changeset/ports/391278|In ports]] |
| net-p2p/twister | include | <del>[[https://bugs.freebsd.org/199006|PR199006]]</del> | [[https://svnweb.freebsd.org/changeset/ports/382715|In ports]] [[https://github.com/miguelfreitas/twister-core/pull/327|Upstream imported]] |
| russian/ircd-hybrid | EGD | <del>[[https://bugs.freebsd.org/198771|PR198771]]</del> | [[https://svnweb.freebsd.org/changeset/ports/383222|In ports]] |
| security/chntpw | DES_ | <del>[[https://bugs.freebsd.org/198346|PR198346]]</del> | [[https://svnweb.freebsd.org/changeset/ports/383204|In ports]] |
| security/dsniff | DES_ | <del>[[https://reviews.freebsd.org/D7054|D7054]]</del> | [[http://svnweb.freebsd.org/changeset/ports/420225|In ports]] [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/30edce9459267e3a0ea8d72519c825e83414e05a|Patch]] |
| security/heimdal | EGD | <del>[[https://bugs.freebsd.org/198527|PR198527]]</del> | [[http://svnweb.freebsd.org/changeset/ports/421928|In ports]] [[https://github.com/heimdal/heimdal/pull/124|Upstream pull request]] |
| security/hydra | DES_ | <del>[[https://bugs.freebsd.org/198533|PR198533]]</del> | [[https://svnweb.freebsd.org/changeset/ports/383041|In ports]] |
| security/isakmpd | DES_ | <del>[[https://bugs.freebsd.org/198535|PR198535]]</del> | [[https://svnweb.freebsd.org/changeset/ports/403981|In ports]] Not upstreamed |
| security/john | DES_ | <del>[[https://bugs.freebsd.org/198348|PR198348]]</del> | [[https://svnweb.freebsd.org/changeset/ports/38263|In ports]] [[http://www.openwall.com/lists/john-dev/2015/03/06/8|Upstream]] |
| security/krb5-111 | CMS | <del>[[https://bugs.freebsd.org/198749|PR198749]]</del> | [[https://svnweb.freebsd.org/changeset/ports/382023|In ports]] |
| security/krb5-112 | CMS | <del>[[https://bugs.freebsd.org/198750|PR198750]]</del> | [[https://svnweb.freebsd.org/changeset/ports/382023|In ports]] |
| security/nessus-libraries | SSLv2 | <del>[[https://bugs.freebsd.org/198992|PR198992]]</del> | [[https://svnweb.freebsd.org/changeset/ports/397032|In ports]]%%|%%[[https://github.com/Sp1l/ports/tree/master/security/nessus-libraries|GitHub]] |
| <del>security/nessus-libnasl</del> | SSLv2 | <del>nvt</del> | Fixed by nessus/nessus-libraries |
| <del>security/nessus</del> | SSLv2 | <del>nvt</del> | Fixed by nessus/nessus-libraries |
| security/opencryptoki | DES_ | <del>[[https://bugs.freebsd.org/198351|PR198351]]</del> | [[https://svnweb.freebsd.org/changeset/ports/421968|In ports]] [[https://github.com/joylatten/opencryptoki/pull/115|Upstream patch]] |
| security/openssl_tpm_engine | include | <del>Ignore</del> | [[https://github.com/Sp1l/freebsd-ports/blob/master/security/openssl_tpm_engine/files/patch-e_tpm.c|Patch]] |
| security/ophcrack | DES_ | <del>[[https://bugs.freebsd.org/198352|PR198352]]</del> | [[https://svnweb.freebsd.org/changeset/ports/382632|In ports]] No upstream |
| security/p5-Business-%%PayPal%%-EWP | %%OpenSSL%% string | <del>[[https://bugs.freebsd.org/199176|PR199176]]</del> | [[https://svnweb.freebsd.org/changeset/ports/417963|In ports]] [[https://github.com/Sp1l/ports/tree/master/security/p5-Business-PayPal-EWP|GitHub]] Notified [[https://rt.cpan.org/Ticket/Display.html?id=103321|Upstream issue]] |
| security/p5-Crypt-SMIME | port | <del>[[https://bugs.freebsd.org/198111|PR198111]]</del> | [[https://svnweb.freebsd.org/changeset/ports/380790|In ports]] |
| security/p5-openxpki | %%OpenSSL%% string | <del>[[https://bugs.freebsd.org/199179|PR199179]]</del> | [[http://svnweb.freebsd.org/changeset/ports/403777|In ports]] [[https://github.com/openxpki/openxpki/pull/287|Upstream imported]] |
| security/py-cryptography | EGD, COMP, ALPN | <del>[[https://bugs.freebsd.org/197049|PR197049]]</del> | [[https://svnweb.freebsd.org/changeset/ports/384640|In ports]] [[https://github.com/pyca/cryptography/pull/1679|Fixed upstream]] |
| security/pidentd | DES_ | <del>[[https://bugs.freebsd.org/198364|PR198364]]</del> | [[https://svnweb.freebsd.org/changeset/ports/380875|In ports]]Mailed upstream |
| security/pond | %%ChaCha20%% | <del>Broken</del> | **OPEN** |
| security/proxytunnel | MD5_ | <del>[[https://bugs.freebsd.org/198754|PR198754]]</del> | [[https://svnweb.freebsd.org/changeset/ports/381960|In ports]] |
| security/rcracki_mt | DES |  | [[http://svnweb.freebsd.org/changeset/ports/421904|In ports]] |
| security/sectok | DES_ | <del>[[https://bugs.freebsd.org/198366|PR198366]]</del> | [[https://svnweb.freebsd.org/changeset/ports/386986|In ports]]Mailed upstream |
| security/softhsm2 | GOST | <del>[[https://bugs.freebsd.org/199008|PR199008]]</del> | [[https://svnweb.freebsd.org/changeset/ports/386127|In ports]] [[https://github.com/Sp1l/ports/tree/master/security/softhsm2|GitHub]] |
| security/sslscan | SSLv2 | <del>[[https://bugs.freebsd.org/198401|PR198401]]</del> | [[https://svnweb.freebsd.org/changeset/ports/382059|In ports]] |
| security/sslwrap | SSLv2 | <del>[[https://bugs.freebsd.org/198400|PR198400]]</del> | [[https://svnweb.freebsd.org/changeset/ports/383166|In ports]] |
| security/stunnel | EGD | <del>[[https://bugs.freebsd.org/198997|PR198997]]</del> | [[https://svnweb.freebsd.org/changeset/ports/398889|In ports]] Upstream fixed |
| security/rcracki_mt | DES_ |  | HBSD [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/6a05988d736384e24063f94ee8bf94d99cd217f0|Patch]] |
| security/tlswrap | EGD | <del>[[https://bugs.freebsd.org/198767|PR198767]]</del> | [[https://svnweb.freebsd.org/changeset/ports/384291|In ports]] [[https://github.com/Sp1l/ports/tree/master/security/tlswrap|GitHub]] |
| security/tor-devel | COMP | <del>fixed upstream</del> | Fixed version [[https://svnweb.freebsd.org/ports?view=revision&revision=382650|in ports]] |
| sysutils/bacula5-client-static | arc4rand |  | **OPEN** |
| sysutils/bacula-client-static | arc4rand |  | **OPEN** |
| sysutils/condor | DES_ | <del>[[https://bugs.freebsd.org/198370|PR198370]]</del> | [[https://svnweb.freebsd.org/changeset/ports/383528|In ports]] Mailed upstream |
| sysutils/ipmitools | linking | <del>[[https://bugs.freebsd.org/199389|PR199389]]</del> | [[https://svnweb.freebsd.org/changeset/ports/390727|In ports]] |
| sysutils/webjob | arc4rand | <del>[[https://bugs.freebsd.org/203701|PR203701]]</del> | [[http://svnweb.freebsd.org/changeset/ports/416817|In ports]] |
| www/apache22 | EGD, SSL_CTX | <del>[[https://bugs.freebsd.org/196256|PR196256]]</del> | [[https://svnweb.freebsd.org/changeset/ports/380216|In ports]] |
| www/apache24 | EGD, SSL_CTX | <del>[[https://bugs.freebsd.org/196139|PR196139]]</del> | [[https://svnweb.freebsd.org/changeset/ports/378215|In ports]] |
| www/elinks | EGD | <del>[[https://bugs.freebsd.org/198764|PR198764]]</del> | [[https://svnweb.freebsd.org/changeset/ports/417921|In ports]] [[https://github.com/Sp1l/ports/tree/master/www/elinks|GitHub]] |
| www/links | EGD | <del>[[https://bugs.freebsd.org/198765|PR198765]]</del> | [[https://svnweb.freebsd.org/changeset/ports/417907|In ports]] [[https://github.com/Sp1l/ports/tree/master/www/links|GitHub]] |
| www/links1 | EGD | <del>[[https://bugs.freebsd.org/210727|PR210727]]</del> | [[https://svnweb.freebsd.org/changeset/ports/417917|In ports]] |
| www/links-hacked | EGD | <del>[[https://bugs.freebsd.org/198766|PR198766]]</del> | [[https://svnweb.freebsd.org/changeset/ports/417919|In ports]] [[https://github.com/Sp1l/ports/tree/master/www/links-hacked|GitHub]] |
| www/mod_spdy | SSL_CTX_use_cert_chain | wontfix | use mod_http2-devel |
| www/tomcat-native | SSL_CTX_use_cert_chain | [[https://bugs.freebsd.org/215196|PR215196]] | [[https://github.com/HardenedBSD/hardenedbsd-ports/commit/5ec21470cbecf7523a778b7ccdecb0a5079ad414|GitHub]] |
| www/w3m | EGD | <del>[[https://bugs.freebsd.org/191956|PR191956]]</del> | [[http://svnweb.freebsd.org/changeset/ports/363883|In ports]] |
| www/webstone-ssl | SSLv2 | <del>[[https://bugs.freebsd.org/199019|PR199019]]</del> | [[http://svnweb.freebsd.org/changeset/ports/416813|In ports]] [[https://github.com/Sp1l/ports/tree/master/www/webstone-ssl|GithHub]] |

====== Other fixes/PRs ======

| [[https://bugs.freebsd.org/194400|PR194400]] | Fix EC ciphers support in %%LibreSSL%% 2.1.0 (fixed by %%LibreSSL%% 2.1.1) |
| [[https://bugs.freebsd.org/196445|PR196445]] | [[https://svnweb.freebsd.org/changeset/ports/376068|Fix]] SHLIBVER detection in Mk/bsd.openssl.mk |
| [[https://bugs.freebsd.org/197005|PR197005]] | [[https://svnweb.freebsd.org/changeset/ports/377668|Update]] %%LibreSSL%% to 2.1.3 |
| [[https://bugs.freebsd.org/198269|PR198269]] | [[https://svnweb.freebsd.org/changeset/ports/380424|Update]] %%LibreSSL%% to 2.1.4 |
| [[https://bugs.freebsd.org/198270|PR198270]] | [[https://svnweb.freebsd.org/changeset/ports/380424|Bump]] SHLIBVER in Mk/bsd.openssl.mk |
| [[https://bugs.freebsd.org/198651|PR198651]] | [[https://svnweb.freebsd.org/changeset/ports/381534|LibreSSL to 2.1.5]] |
| [[https://bugs.freebsd.org/198681|PR198681]] | [[https://svnweb.freebsd.org/changeset/ports/381603|Backport of CVE-2015-0209 & CVE-2015-0288]] low rated vulns |
| [[https://bugs.freebsd.org/198651|PR198651]] | [[https://svnweb.freebsd.org/changeset/ports/381701|LibreSSL to 2.1.6]] fixing vulns |
| [[https://reviews.freebsd.org/D2654|D2654]] | Backport OPENSSL_NO_EGD to %%LibreSSL%% 2.1.6 |
| [[https://reviews.freebsd.org/D2770|D2770]] | Update %%LibreSSL%% to 2.2.0 |
| [[https://reviews.freebsd.org/D2963|D2963]] | Update %%LibreSSL%% to 2.2.1 |
| [[https://reviews.freebsd.org/D2963|D2963]] | Update %%LibreSSL%% to 2.2.2 |
| [[https://reviews.freebsd.org/D3537|D3537]] | Update to 2.2.3 |
| [[https://bugs.freebsd.org/200894|PR200894]] | [[https://svnweb.freebsd.org/changeset/ports/397017|Fix AESNI support]] |
| [[https://reviews.freebsd.org/D3695|D3695]] | Fix devel/tcltls conflict on include/libtls.h |
| [[https://reviews.freebsd.org/D3585|D3585]] | Add next-stable %%LibreSSL%% 2.3.1 port (security/libressl-devel) |
| [[https://reviews.freebsd.org/D3916|D3916]] | Fix memory leak and buffer overflow %%DoS%% vulnerability / Update to 2.2.4 |
| [[https://reviews.freebsd.org/D4393|D4393]] | Update to 2.2.5 |

====== TODO ======

Thanks to the EDGE build of PC-BSD we now have a list of the remaining build fall-out with %%LibreSSL%%.

All ports that don't have a PR linked and **OPEN** in comments in table below require work. Your assistance would be highly appreciated!