Re: UPDATE: devel/tor to 0.3.1.7

On Sat, 23 Sep 2017 21:03:52 +0200, Klemens Nanni wrote:
> 0.3.0.11 fixed CVE-2017-0380, TROVE-2017-008 (only affects onion
> services with SafeLogging set to 0).
>
> Directory traffic can now be compressed, pkg-config is used to detect
> zstd and lzma at bulid time.
>
> There are lots of other important changes, see
> https://blog.torproject.org/tor-0317-now-released for a full changelog.
>
> My hidden services and clients continue to work after this update, both
> on running -CURRENT on amd64.
>
> Tests pass on amd64:
>
> =================================
> Testsuite summary for tor 0.3.1.7
> =================================
> # TOTAL: 18
> # PASS: 12
> # SKIP: 6
> # XFAIL: 0
> # FAIL: 0
> # XPASS: 0
> # ERROR: 0
> =================================
>
> More testing and feedback welcome.
>

This now picks up liblzma when installed. I think we want to disable
that unless someone really needs the feature. Thoughts?


Index: Makefile
===================================================================
RCS file: /cvs/ports/net/tor/Makefile,v
retrieving revision 1.105
diff -u -p -r1.105 Makefile
--- Makefile 3 Aug 2017 12:21:26 -0000 1.105
+++ Makefile 27 Sep 2017 13:11:40 -0000
@@ -2,7 +2,7 @@

COMMENT= anonymity service using onion routing

-DISTNAME= tor-0.3.0.10
+DISTNAME= tor-0.3.1.7
CATEGORIES= net
HOMEPAGE= https://www.torproject.org/

@@ -20,7 +20,8 @@ CONFIGURE_STYLE=gnu
# anyway on FRAME_GROWS_DOWN archs.
CONFIGURE_ARGS= --with-ssl-dir=/usr \
--with-libevent-dir="${LOCALBASE}" \
- --disable-gcc-hardening
+ --disable-gcc-hardening \
+ --disable-lzma
CONFIGURE_ENV+=ac_cv_member_struct_ssl_method_st_get_cipher_by_char=no

LIB_DEPENDS= devel/libevent2
Index: distinfo
===================================================================
RCS file: /cvs/ports/net/tor/distinfo,v
retrieving revision 1.86
diff -u -p -r1.86 distinfo
--- distinfo 3 Aug 2017 12:21:26 -0000 1.86
+++ distinfo 27 Sep 2017 13:11:40 -0000
@@ -1,2 +1,2 @@
-SHA256 (tor-0.3.0.10.tar.gz) = mo5uSaFoja5k3KEPhKQU7JpPOT+yJWrijgwuMjkYWrE=
-SIZE (tor-0.3.0.10.tar.gz) = 5845205
+SHA256 (tor-0.3.1.7.tar.gz) = HfXdSJS7L14NyWxGaVUUY1PPM6xQzZl8/Bso6j7ZwI8=
+SIZE (tor-0.3.1.7.tar.gz) = 6058284