<feed xmlns='http://www.w3.org/2005/Atom'>
<title>src/krb5/util, branch main</title>
<subtitle>FreeBSD source tree</subtitle>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/'/>
<entry>
<title>krb5: append to LDFLAGS instead of replacing</title>
<updated>2026-03-20T17:19:35+00:00</updated>
<author>
<name>Chuck Silvers</name>
<email>chs@FreeBSD.org</email>
</author>
<published>2026-03-20T17:19:35+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=632ddb864ee89c275ff5f8f9079522dec33c0d3c'/>
<id>632ddb864ee89c275ff5f8f9079522dec33c0d3c</id>
<content type='text'>
Sponsored by:	Netflix
Reviewed by:	imp
Differential Revision:	https://reviews.freebsd.org/D55335
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Sponsored by:	Netflix
Reviewed by:	imp
Differential Revision:	https://reviews.freebsd.org/D55335
</pre>
</div>
</content>
</entry>
<entry>
<title>krb5: Expose missing symbols</title>
<updated>2026-01-20T13:41:02+00:00</updated>
<author>
<name>Cy Schubert</name>
<email>cy@FreeBSD.org</email>
</author>
<published>2025-12-18T00:50:44+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=1876de606eb876b7a97beccfe6fcc89e60a72a25'/>
<id>1876de606eb876b7a97beccfe6fcc89e60a72a25</id>
<content type='text'>
Add symbols found in the port but not in base. This requires replacing
a shared libkrb5profile.so with libkrb5profile.a (with -fPIC so it can
be used by shared libraries). We do this by making libkrb5profile
INTERNALLIB.

Base currently has libkrb5profile in a shared library. The patch moves
those functions to the various "consumer" libraries as the port does.

Symbols that should be in the other libraries are in libkrb5profile.so.
This is causing some ports issues.

PR:		291695
Reported by:	michaelo, markj,  Chris Inacio &lt;inacio@andrew.cmu.edu&gt;
Tested by:	michaelo
Fixes:		ae07a5805b19
Reviewed by:	michaelo (previous version)
MFC after:	2 weeks
Differential revision:	https://reviews.freebsd.org/D54323
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Add symbols found in the port but not in base. This requires replacing
a shared libkrb5profile.so with libkrb5profile.a (with -fPIC so it can
be used by shared libraries). We do this by making libkrb5profile
INTERNALLIB.

Base currently has libkrb5profile in a shared library. The patch moves
those functions to the various "consumer" libraries as the port does.

Symbols that should be in the other libraries are in libkrb5profile.so.
This is causing some ports issues.

PR:		291695
Reported by:	michaelo, markj,  Chris Inacio &lt;inacio@andrew.cmu.edu&gt;
Tested by:	michaelo
Fixes:		ae07a5805b19
Reviewed by:	michaelo (previous version)
MFC after:	2 weeks
Differential revision:	https://reviews.freebsd.org/D54323
</pre>
</div>
</content>
</entry>
<entry>
<title>krb5: Remove extraneous exports file</title>
<updated>2025-12-18T18:16:39+00:00</updated>
<author>
<name>Cy Schubert</name>
<email>cy@FreeBSD.org</email>
</author>
<published>2025-12-18T18:15:12+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=f74173b5da3df22ec49c3bf6e8d10bcffdd1f4d3'/>
<id>f74173b5da3df22ec49c3bf6e8d10bcffdd1f4d3</id>
<content type='text'>
We use version.map in the FreeBSD MIT KRB5 build. The exports file is
a lefteover from when the version map file was created.

MFC after:	1 week
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
We use version.map in the FreeBSD MIT KRB5 build. The exports file is
a lefteover from when the version map file was created.

MFC after:	1 week
</pre>
</div>
</content>
</entry>
<entry>
<title>krb5: Use sh to run mk_cmds</title>
<updated>2025-11-24T14:28:42+00:00</updated>
<author>
<name>Mark Johnston</name>
<email>markj@FreeBSD.org</email>
</author>
<published>2025-11-21T17:54:38+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=673924122470463dfb9089e12b1b4496783a77b8'/>
<id>673924122470463dfb9089e12b1b4496783a77b8</id>
<content type='text'>
Otherwise etcupdate apparently can fail if its private object directory
under /var/db is in a filesystem mounted noexec.  We shouldn't be
building this target at all, but for now, just apply this workaround.

PR:		291043
Reviewed by:	ivy, cy, des
MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D53861
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Otherwise etcupdate apparently can fail if its private object directory
under /var/db is in a filesystem mounted noexec.  We shouldn't be
building this target at all, but for now, just apply this workaround.

PR:		291043
Reviewed by:	ivy, cy, des
MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D53861
</pre>
</div>
</content>
</entry>
<entry>
<title>krb5: Update to 1.22.1</title>
<updated>2025-08-26T14:33:03+00:00</updated>
<author>
<name>Cy Schubert</name>
<email>cy@FreeBSD.org</email>
</author>
<published>2025-08-21T05:38:21+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=621e0e7f27303452c2f5b5fcf93aaf72e2b036a6'/>
<id>621e0e7f27303452c2f5b5fcf93aaf72e2b036a6</id>
<content type='text'>
Reviewed by:		des
Differential revision:	https://reviews.freebsd.org/D52100

Merge commit 'e5fe63eaf1d35ebbeac17eeed04cf873fbb9b3da' into main
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Reviewed by:		des
Differential revision:	https://reviews.freebsd.org/D52100

Merge commit 'e5fe63eaf1d35ebbeac17eeed04cf873fbb9b3da' into main
</pre>
</div>
</content>
</entry>
<entry>
<title>packages: Improve handling of -lib packages</title>
<updated>2025-08-23T00:57:23+00:00</updated>
<author>
<name>Lexi Winter</name>
<email>ivy@FreeBSD.org</email>
</author>
<published>2025-08-22T23:50:20+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=929f5966a9fd3d050c7b604513c6fb4ac9b5d335'/>
<id>929f5966a9fd3d050c7b604513c6fb4ac9b5d335</id>
<content type='text'>
For some packages (OpenSSL, Kerberos) we want to ship runtime libraries
in a separate package, e.g. openssl and openssl-lib.  Currently this is
done using PACKAGE=openssl-lib, but that creates packages with strange
names like openssl-lib-lib32.

Instead, add a new LIB_PACKAGE option to bsd.lib.mk that causes runtime
libraries to be placed in a new -lib subpackage.  This significantly
improves the set of packages we create; for example, OpenSSL goes from:

	FreeBSD-openssl
	FreeBSD-openssl-dbg
	FreeBSD-openssl-lib
	FreeBSD-openssl-lib-dbg
	FreeBSD-openssl-lib-dbg-lib32
	FreeBSD-openssl-lib-dev
	FreeBSD-openssl-lib-dev-lib32
	FreeBSD-openssl-lib-lib32
	FreeBSD-openssl-lib-man
	FreeBSD-openssl-man

to:

	FreeBSD-openssl
	FreeBSD-openssl-dbg
	FreeBSD-openssl-dbg-lib32
	FreeBSD-openssl-dev
	FreeBSD-openssl-dev-lib32
	FreeBSD-openssl-lib
	FreeBSD-openssl-lib32
	FreeBSD-openssl-man

While here, move /usr/bin/krb5-config and /usr/bin/compile_et into
the kerberos-dev package.

Reviewed by:	des
Differential Revision:	https://reviews.freebsd.org/D51925
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
For some packages (OpenSSL, Kerberos) we want to ship runtime libraries
in a separate package, e.g. openssl and openssl-lib.  Currently this is
done using PACKAGE=openssl-lib, but that creates packages with strange
names like openssl-lib-lib32.

Instead, add a new LIB_PACKAGE option to bsd.lib.mk that causes runtime
libraries to be placed in a new -lib subpackage.  This significantly
improves the set of packages we create; for example, OpenSSL goes from:

	FreeBSD-openssl
	FreeBSD-openssl-dbg
	FreeBSD-openssl-lib
	FreeBSD-openssl-lib-dbg
	FreeBSD-openssl-lib-dbg-lib32
	FreeBSD-openssl-lib-dev
	FreeBSD-openssl-lib-dev-lib32
	FreeBSD-openssl-lib-lib32
	FreeBSD-openssl-lib-man
	FreeBSD-openssl-man

to:

	FreeBSD-openssl
	FreeBSD-openssl-dbg
	FreeBSD-openssl-dbg-lib32
	FreeBSD-openssl-dev
	FreeBSD-openssl-dev-lib32
	FreeBSD-openssl-lib
	FreeBSD-openssl-lib32
	FreeBSD-openssl-man

While here, move /usr/bin/krb5-config and /usr/bin/compile_et into
the kerberos-dev package.

Reviewed by:	des
Differential Revision:	https://reviews.freebsd.org/D51925
</pre>
</div>
</content>
</entry>
<entry>
<title>krb5: Fix the installed compile_et</title>
<updated>2025-08-19T13:20:16+00:00</updated>
<author>
<name>Mark Johnston</name>
<email>markj@FreeBSD.org</email>
</author>
<published>2025-08-19T13:02:00+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=5105e1ebecc784dcf8101ec6f3c79b27c43b004b'/>
<id>5105e1ebecc784dcf8101ec6f3c79b27c43b004b</id>
<content type='text'>
We now build compile_et from krb5/util/compile_et.  The compile_et make
target runs compile_et.sh through a preprocessor that does some
substitution on the script, in particular it defines the directory where
compile_et can find et_h.awk and et_c.awk.

We build compile_et as a bootstrap tool since it's used to build krb5.
It also gets installed by installworld, presumably because we did that
with Heimdal Kerberos too and there's some chance that third-party
projects are using it.

There are two problems, both fixed by this patch:

First, we don't actually install those awk scripts anywhere, so
/usr/sbin/compile_et isn't usable on an installed system.  Let's simply
install them to /usr/share/et, which is where upstream puts them.

Second, compile_et is a bootstrap tool and gets installed into WORLDTMP
during the bootstrap phase of the build.  At that point we preprocess it
to set the directory where it can find those awk scripts.  That
directory is currently set with `KRB5_ETDIR?= ${DESTDIR}/usr/share/et`,
but DESTDIR points into the object directory, so this value is bogus.

Since all build-time invocations of compile_et explicitly specify the
script directory with the -d option, let's just update the path to point
to the installed script directory.  In particular, avoid fixing DESTDIR
in the script, since we don't do that generally.

PR:		288929
Reviewed by:	ivy, cy
Sponsored by:	The FreeBSD Foundation
Sponsored by:	Klara, Inc.
Differential Revision:	https://reviews.freebsd.org/D52004
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
We now build compile_et from krb5/util/compile_et.  The compile_et make
target runs compile_et.sh through a preprocessor that does some
substitution on the script, in particular it defines the directory where
compile_et can find et_h.awk and et_c.awk.

We build compile_et as a bootstrap tool since it's used to build krb5.
It also gets installed by installworld, presumably because we did that
with Heimdal Kerberos too and there's some chance that third-party
projects are using it.

There are two problems, both fixed by this patch:

First, we don't actually install those awk scripts anywhere, so
/usr/sbin/compile_et isn't usable on an installed system.  Let's simply
install them to /usr/share/et, which is where upstream puts them.

Second, compile_et is a bootstrap tool and gets installed into WORLDTMP
during the bootstrap phase of the build.  At that point we preprocess it
to set the directory where it can find those awk scripts.  That
directory is currently set with `KRB5_ETDIR?= ${DESTDIR}/usr/share/et`,
but DESTDIR points into the object directory, so this value is bogus.

Since all build-time invocations of compile_et explicitly specify the
script directory with the -d option, let's just update the path to point
to the installed script directory.  In particular, avoid fixing DESTDIR
in the script, since we don't do that generally.

PR:		288929
Reviewed by:	ivy, cy
Sponsored by:	The FreeBSD Foundation
Sponsored by:	Klara, Inc.
Differential Revision:	https://reviews.freebsd.org/D52004
</pre>
</div>
</content>
</entry>
<entry>
<title>krb5: Update version strings</title>
<updated>2025-08-19T02:03:18+00:00</updated>
<author>
<name>Cy Schubert</name>
<email>cy@FreeBSD.org</email>
</author>
<published>2025-08-19T02:03:18+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=cb3eac927b5dc5621f102149d3751b72e6fd7e81'/>
<id>cb3eac927b5dc5621f102149d3751b72e6fd7e81</id>
<content type='text'>
Fixes:	f1c4c3daccba
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Fixes:	f1c4c3daccba
</pre>
</div>
</content>
</entry>
<entry>
<title>krb5: Fix typo "SPDX-License-Idendifier"</title>
<updated>2025-08-17T21:17:06+00:00</updated>
<author>
<name>Lexi Winter</name>
<email>ivy@FreeBSD.org</email>
</author>
<published>2025-08-17T21:13:48+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=18a870751b036f1dc78b36084ccb993d139a11bb'/>
<id>18a870751b036f1dc78b36084ccb993d139a11bb</id>
<content type='text'>
sed -e s/SPDX-License-Idendifier/SPDX-License-Identifier/
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
sed -e s/SPDX-License-Idendifier/SPDX-License-Identifier/
</pre>
</div>
</content>
</entry>
<entry>
<title>krb5: Move compile_et to /usr/bin as it was with Heimdal</title>
<updated>2025-08-05T16:33:03+00:00</updated>
<author>
<name>Cy Schubert</name>
<email>cy@FreeBSD.org</email>
</author>
<published>2025-08-01T06:21:42+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=9a726ef241344d5a67bb0c465a43fcf79f94a33f'/>
<id>9a726ef241344d5a67bb0c465a43fcf79f94a33f</id>
<content type='text'>
Fixes:		ee3960cba106
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Fixes:		ee3960cba106
</pre>
</div>
</content>
</entry>
</feed>
