From root@eu.route.mx  Sat Sep 24 20:15:16 2011
Return-Path: <root@eu.route.mx>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 82DE21065670
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 24 Sep 2011 20:15:16 +0000 (UTC)
	(envelope-from root@eu.route.mx)
Received: from eu.route.mx (eu.route.mx [46.137.95.40])
	by mx1.freebsd.org (Postfix) with ESMTP id E2ABF8FC12
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 24 Sep 2011 20:15:15 +0000 (UTC)
Received: (qmail 4912 invoked by uid 0); 24 Sep 2011 20:15:14 -0000
Message-Id: <20110924201514.4911.qmail@eu.route.mx>
Date: 24 Sep 2011 20:15:14 -0000
From: Nicolas de Bari Embriz <nbari@dalmp.com>
Reply-To: nbari@dalmp.com
To: FreeBSD-gnats-submit@freebsd.org
Cc: nbari@dalmp.com
Subject: New port: security/sqlcipher
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         160993
>Category:       ports
>Synopsis:       New port: security/sqlcipher
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Sat Sep 24 20:20:10 UTC 2011
>Closed-Date:    Thu Feb 28 16:58:09 UTC 2013
>Last-Modified:  Thu Feb 28 16:58:09 UTC 2013
>Originator:     Nicolas de Bari Embriz <nbari@dalmp.com>
>Release:        3.7.2
>Organization:
>Environment:


	
>Description:
Open Source Full Database Encryption for SQLite
SQLCipher is an SQLite extension that provides transparent 256-bit AES encryption of database files. Pages are encrypted before being written to disk and are decrypted when read back. Due to the small footprint and great performance it???s ideal for protecting embedded application databases and is well suited for mobile development.

Blazing fast performance with as little as 5-15% overhead for encryption on many operations
100% of data in the database file is encrypted
Uses good security practices (CBC mode, key derivation)
Zero-configuration and application level cryptography
Broad platform support: works with C/C++, Obj-C, QT, Win32/.NET, Java, Python, Ruby, etc on Windows, Linux, iPhone/iOS???
Algorithms provided by the peer reviewed OpenSSL crypto library.
>How-To-Repeat:
	
>Fix:

	

--- sqlcipher.shar begins here ---
# This is a shell archive.  Save it in a file, remove anything before
# this line, and then unpack it by entering "sh file".  Note, it may
# create directories; files and directories will be owned by you and
# have default permissions.
#
# This archive contains:
#
#	sqlcipher
#	sqlcipher/distinfo
#	sqlcipher/Makefile
#	sqlcipher/pkg-plist
#	sqlcipher/pkg-descr
#
echo c - sqlcipher
mkdir -p sqlcipher > /dev/null 2>&1
echo x - sqlcipher/distinfo
sed 's/^X//' >sqlcipher/distinfo << 'ddfe836619e9f8607a240c7de55b3e30'
XSHA256 (sqlcipher-3.7.2.tar.bz2) = 6e8e20368fe4cea358a3d7db8064c64e4c1c05aa5657843b3e6edac8515fac02
XSIZE (sqlcipher-3.7.2.tar.bz2) = 2541898
ddfe836619e9f8607a240c7de55b3e30
echo x - sqlcipher/Makefile
sed 's/^X//' >sqlcipher/Makefile << '02cbbe415cb50af33832680aaee93734'
X# New ports collection makefile for:	sqlcipher
X# Date created:		24 Sep 2011
X# Whom:			Nicolas de Bari Embriz <nbari@dalmp.com>
X#
X# $FreeBSD$
X
XPORTNAME=	sqlcipher
XPORTVERSION=	3.7.2
XCATEGORIES=	security
XMASTER_SITES=	https://github.com/downloads/nbari/${PORTNAME}/ \
Xhttp://cloud.github.com/downloads/nbari/${PORTNAME}/
X
XMAINTAINER=	nbari@dalmp.com
XCOMMENT=	Open Source Full Database Encryption for SQLite
X
XLICENSE=	BSD
X
XLIB_DEPENDS=	sqlite3.8:${PORTSDIR}/databases/sqlite3
X
XUSE_BZIP2=	YES
X
XUSE_LDCONFIG=yes
XUSE_TCL_BUILD=	84+
X
XCFLAGS+=	-DSQLITE_HAS_CODEC
XLDFLAGS+=	-lcrypto
X
XGNU_CONFIGURE=	yes
XCONFIGURE_ARGS=	--enable-tempstore=yes
XCONFIGURE_ARGS+=	CFLAGS="${CFLAGS}"
XCONFIGURE_ARGS+=	LDFLAGS="${LDFLAGS}"
X
X.include <bsd.port.mk>
02cbbe415cb50af33832680aaee93734
echo x - sqlcipher/pkg-plist
sed 's/^X//' >sqlcipher/pkg-plist << 'b202677015bcee270a7c14aec024ffac'
Xbin/sqlite3
Xinclude/sqlite3.h
Xinclude/sqlite3ext.h
Xlib/libsqlite3.a
Xlib/libsqlite3.la
Xlib/libsqlite3.so
Xlib/libsqlite3.so.8
Xlib/pkgconfig/sqlite3.pc
X@dirrm lib/pkgconfig
b202677015bcee270a7c14aec024ffac
echo x - sqlcipher/pkg-descr
sed 's/^X//' >sqlcipher/pkg-descr << 'a0af3cb6a2e2ea56609c66d5469bcf1f'
XOpen Source Full Database Encryption for SQLite
X
X- 100% of data in the database file is encrypted
X- Uses good security practices (CBC mode, key derivation)
X- Zero-configuration and application level cryptography
X- Algorithms provided by the peer reviewed OpenSSL crypto library.
X
XWWW:  http://sqlcipher.net/
a0af3cb6a2e2ea56609c66d5469bcf1f
exit
--- sqlcipher.shar ends here ---


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-ports-bugs->crees 
Responsible-Changed-By: crees 
Responsible-Changed-When: Sat Sep 24 20:59:05 UTC 2011 
Responsible-Changed-Why:  
I'll take it. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=160993 
State-Changed-From-To: open->feedback 
State-Changed-By: crees 
State-Changed-When: Sun Oct 9 20:07:16 UTC 2011 
State-Changed-Why:  
Hey Nicolas, 

I'm at a loss... 

http://www.bayofrum.net/tb/index.php?action=display_markup_log&build=9-clang-local&id=1414 

Does this port actually overwrite the sqlite binaries? 

Chris 

http://www.freebsd.org/cgi/query-pr.cgi?pr=160993 
Responsible-Changed-From-To: crees->freebsd-ports-bugs 
Responsible-Changed-By: crees 
Responsible-Changed-When: Sat Dec 17 12:03:05 UTC 2011 
Responsible-Changed-Why:  
Sorry Nicolas, I've been trying to think of a way to get this to work, 
and it's unfair of me to hold onto it for so long. 

Perhaps if you were to bring it up on ports@, someone may have a bright 
idea. 

My thoughts so far are: 

a) slave/option to sqlite (kinda like php-suhosin) b) different names to 
avoid clashes, such as sqlite-sqlcipher (I know it should be a drop-in 
replacement, but it doesn't work like that here) 

http://www.freebsd.org/cgi/query-pr.cgi?pr=160993 
State-Changed-From-To: feedback->suspended 
State-Changed-By: scheidell 
State-Changed-When: Sun Jun 24 09:52:17 UTC 2012 
State-Changed-Why:  
9 month old PR, suspended waiting for someone who needs a big project to find a solution. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=160993 
State-Changed-From-To: suspended->closed 
State-Changed-By: miwi 
State-Changed-When: Thu Feb 28 16:57:12 UTC 2013 
State-Changed-Why:  
close submitter timeout. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=160993 
>Unformatted:
