On 2026/10/26 15:40, Theo Buehler wrote: > On Wed, Oct 21, 2026 at 10:53:58AM +0100, Stuart Henderson wrote: > > On 2026/10/21 13:50, Stuart Lamble wrote: > > > Currently, OpenBSD only has botan2 in the ports tree. This went end of > > > life at the start of 2025. As part of my work to get patches into the > > > upstream for Kea, I was told that botan3 will be required very soon for > > > RADIUS support, so I've done some preliminary work to that end (see > > > attached tarball, intended to be unpacked into /usr/ports/security.) This > > > is based on the existing botan2 port as a starting point. There are > > > likely to be artefacts from that; this is very much an unpolished first > > > cut. > > > > cc bluhm (botan2 maintainer), I wonder if you're interested in > > taking maintainer of this as well (no problem if not, I thought it > > would be polite to ask). > > > > > Current state: > > > - It compiles. > > > - "make check" succeeds - all tests are reported to pass. (At least on > > > my virtual aarch64 instance.) > > > - I am uncertain about several of the patches from botan2 (in the > > > patches_orig directory): they appear to be patching CPU capability checks > > > for ARM and PPC, but I am not confident enough in my reading of the > > > upstream code to know whether they are still necessary. I don't THINK > > > they are, but I can't swear to it. > > > > these were committed upstream, but directory layout changed. > > > > > - I am not certain what to do about the build-data/os/openbsd.txt > > > patch. I can get it to apply cleanly if I remove the elf_aux_info > > > addition, but I'm certain that it's not quite correct. I'd appreciate > > > some commentary from the more seasoned hands here. > > > > new tgz attached adapts this for botan-3. > > > > > I'm not confident enough in my skills to formally take on maintaining > > > this port (cryptography libraries give me the screaming heebie jeebies, > > > mostly because I know how easily security can be broken without realising > > > it), but I see a need if Kea is going to stay in the ports tree. > > > > > > Comments, feedback, suggestions for improvement, etc. are most definitely > > > desired here. > > > > > > (I should also note that there should be a new release of botan3 very > > > soon - probably the next two weeks - so it might be worth waiting for > > > that to drop before officially committing things into ports.) > > > > I don't see a need to wait for that. > > > > I've checked build, packaging and make test (all tests succeed) on > > i386 amd64 aarch64. > > > > The only thing I see searching for it in bulk build so far is Kea and > > I can take care of that. > > > > any OKs to import? > > > > Is that `uname -sr` thing in the Makefile really necessary? This means > we will need to bump this port whenever we have a new release.
Just copied from botan2, but good point. > Other than that I'm ok with importing this. Thanks. I noticed a couple of other small issues, so will fix those + change to "OpenBSD" and commit.
