From: David Uhden Collado Subject: Re: [UPDATE] net/i2pd: update to 2.61.0 To: ports@openbsd.org, openbsd@systemfailure.net, lucas@sexy.is Date: Wed, 22 Jul 2026 11:53:00 +0000 David Uhden Collado wrote: > David Uhden Collado wrote: >> Hello, >> >> Please consider the attached patch to update net/i2pd from 2.59.0 to >> 2.61.0. This supersedes the maintainer's previously submitted 2.60.0 >> update and includes all of its port changes. >> >> The upstream changes relevant to OpenBSD include: >> >> * Add post-quantum cryptography support with LibreSSL. >> * Use ML-KEM-768 as the default SSU2 cryptographic type when supported >>    by the cryptographic backend. >> * Add an option to disable pledge and unveil for configurations that >>    require access to additional system resources. >> * Add support for binding to IPv6 ULA addresses. >> * Fix issues affecting post-quantum sessions, offline signatures, >>    proxy handling, streaming connections, and tunnel recreation after >>    the router has been offline. >> * Update the reseed servers and certificates. >> >> The port changes carried over from the 2.60.0 update include: >> >> * Add boost_container to WANTLIB. >> * Remove the obsolete boost_system test dependency. >> * Disable the HTTP console by default. >> * Use syslog for logging by default. >> * Store configuration files under /etc/i2pd and runtime data under >>    /var/i2pd. >> * Update the rc script, PLIST, and package README for the new paths and >>    defaults. >> >> The PLIST has also been updated for the headers and reseed certificates >> added in 2.61.0, and distinfo contains the checksum and size of the new >> distfile. >> >> The port preserves the intended OpenBSD service defaults: syslog >> logging, the HTTP console disabled unless explicitly enabled, >> configuration under /etc/i2pd, and runtime data under /var/i2pd. >> >> The port applies cleanly, and the normal package build completes >> successfully. Regression tests were started, but the complete test run >> was not finished because the upstream test target performs a separate >> and lengthy build of the test suite. >> >> Regards, >> David. > Hello, > > The unveil support added in the latest i2pd release does not account for > the fact that OpenBSD commonly uses /var instead of /var/lib. > > I had to make a small code change so that unveil works correctly with > the default paths used by the OpenBSD port. > > I have attached the updated patch to this email. > > Best regards, > David. Hello, I found another issue related to the change from /var/lib/i2pd to /var/i2pd. The pkg/PLIST file incorrectly set the ownership of the entire /var directory to the _i2pd user and group. I have corrected this in the updated patch attached to this email. Best regards, David. ? patches Index: Makefile =================================================================== RCS file: /cvs/ports/net/i2pd/Makefile,v diff -u -p -u -p -r1.33 Makefile --- Makefile 21 Feb 2026 14:20:20 -0000 1.33 +++ Makefile 22 Jul 2026 11:47:06 -0000 @@ -2,7 +2,7 @@ COMMENT = client for the I2P anonymous n GH_ACCOUNT = PurpleI2P GH_PROJECT = i2pd -GH_TAGNAME = 2.59.0 +GH_TAGNAME = 2.61.0 CATEGORIES = net HOMEPAGE = https://i2pd.website @@ -12,9 +12,10 @@ MAINTAINER = SystemFailure