dns/dnstable-convert0.14.0_1

security/libsodium: Update to 1.0.21

The API remains compatible but bumping all dependent ports as SHLIB
has changed.

Changelog: https://github.com/jedisct1/libsodium/releases/tag/1.0.21-RELEASE
Security: https://00f.net/2025/12/30/libsodium-vulnerability/
PR: 279347

dns/dnstable-convert: Upgrade to 0.14.0

dnstable-convert (0.14.0)

  * dnstable_convert: Add -t <COUNT> option to specify the maximum number of
  threads to use for the internal MTBL writer and sorter.

  * dnstable_convert: Add -b <DNS_BSIZE[,DNSSEC_BSIZE]> option to set
  DNS (and optionally DNSSEC) data block size.

Sponsored by:	DomainTools LLC

devel/mtbl: Upgrade to version 1.7.1

1.7.1:

 * Incremented version for new tarball.

1.7.0:

  * Add public mtbl_threadpool API, enabling multithreaded functionality
    for mtbl_writer and mtbl_sorter objects; see mtbl_threadpool manpage
    for more info.

  * Add mtbl_writer_options_set_threadpool() to enable multithreaded
    data block compression.

  * Add mtbl_sorter_options_set_threadpool() to enable multithreaded
    sorting.

  * Add -t option for setting the preferred number of threads to use in
    an mtbl_threadpool object used for writing in mtbl_merge.

Bump PORTREVISION of dependent ports.

Sponsored by:	DomainTools LLC

net/nmsg: Upgrade to version 1.3.0

nmsg (1.3.0):

  * Added external configuration for Kafka IO.

  * Stop IO when output fails.

  * Add support and API for statistics module.

  * Remove prometheus integration.

  * Add NMSG_STATSMOD_CONFIG environment variable.

  * Bug fixes.

  * Documentation fixes.

Bump PORTREVISION of dependent ports.

Sponsored by:	DomainTools LLC

net/nmsg: Bump PORTREVSION of dependent ports

The last uprade of net/nmsg changed its shared library version.  Bump
PORTREVISION of its dependent ports to force package rebuilds.

Sponsored by:	DomainTools LLC

dns/dnstable-convert: Upgrade to 0.13.0

* Add optional generation of source information metadata.

  * Add optional indexing of SOA rdata by rname.

Sponsored by:	DomainTools LLC

security/libsodium: update to 1.0.19, bump dependent ports

PR:	278259
Reported by:	Andrey Korobkov <alster-vinterdalen.se>

dns/dnstable-convert: Move man pages to share/man

Move the man pages.  We no longer need post-install to install them.

Sponsored by:	DomainTools LLC

net/nmsg: 1.1.0

1.1.0:
 * Multiple performance improvements to JSON formatting.

 * Multiple performance and concurrency improvements in nmsg_io loop.

 * Add new dnsobs message type for raw passive DNS observations.

 * Format DNS messages as JSON in base:dnsqr, base:dnstap, and
   base:dnsobs.

 * Format base:encode payload in human readable form in JSON output.

 * Replace yajl with json-c for JSON parsing.

 * nmsgtool: exit with nonzero status when interrupted by signal.

 * Correct container size calculation when sequencing.

 * Address doxygen deprecations.

Build fails with JSON_C option turned off, mark BROKEN.  Reported
upstream.

Bump PORTREVISION of dependent ports

MFH:		2023Q3
Sponsored by:	DomainTools LLC

dns/dnstable-convert: Upgrade to 0.12.0

* dnstable_convert: add -p option to not remove generated mtbl file
  with no records.

* dnstable_convert: additional logging at startup and exit.

* dnstable_convert: increase file descriptor resource limit at startup.

* dnstable_unconvert: sort rdata values in "wdns_sort_rrset" order
  for consistency with other dnstable data sources.

The problem fixed by patch-dnstable__convert.c has been fixed upstream.

Sponsored by:	DomainTools LLC

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)

dns/wdns: Upgrade to version 0.11.0

* Improve support for CAA records. (CAA was previously rendered as a
    "generic" rdata type.)

  * Bug fix for NSEC/NSEC3/CSYNC: do not output empty rrtype bitmaps
    per RFC6840 section 6.4.

  * Fix parsing of A6 records that ommit and address portion. Correct
    parsing of A6 records with prefix length 0. Correct handling of
    A6 address bytes. The address bytes of an A6 record are an address
    suffix relative to the prefix represented by the domain name, and
    so must be copied to and from the lower order bytes of the internal
    address representation. These A6 code updates were for the purposes
    of clearing "round trip" test errors in the existing code base.
    (A6 is deprecated and was moved to historic status.)

  * Fix bug in IPv6 prefix length processing in
    _wdns_str_to_rdata_ubuf().

  * Add support for SVCB and HTTPS resource record types. This is based
    on an Internet-Draft but is widely used in the real world.
    https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-svcb-https-08

Bump PORTREVISION of dependent ports due to shared library version
change.

Sponsored by:	DomainTools

dns/dnstable-convert: Upgrade to version 0.11.0

dnstable-convert 0.11.0:

  * Add new tool dnstable_unconvert which converts the RRSET entries of
    a dnstable file to the equivalent NMSG format.

  * Add SVCB and HTTPS records indexing support, based upon
    draft-ietf-dnsop-svcb-https-07. Note that the hostname portion in
    the RDATA is downcased in the sliced encoding and reversed name
    entry.

  * Put CDS, CDNSKEY, and TA resource record types into dnssec.*
    output files. To duplicate these three DNSSEC types to the dns.*
    output files for compatibility, use the new dnstable_convert -D
    option.

  * Put RRtype in the currently empty value portion of RRSET_NAME_FWD
    and RDATA_NAME_REV indexes if it's in range (1 to 65535). Use an
    8-bit integer if it is less than 256, else uses a 16-bit little
    endian integer.

  * Generate ENTRY_TYPE_TIME_RANGE and ENTRY_TYPE_VERSION metadata
    entries in output dnstable files.

  * The versions of the following entries are:

    ENTRY_TYPE_RRSET = 0
    // Initial version.

    ENTRY_TYPE_RRSET_NAME_FWD = 1
    // Add rrtype union as value.

    ENTRY_TYPE_RDATA = 1
    // Fix the SRV slicing and add SVCB/HTTPS sliced entries.

    ENTRY_TYPE_RDATA_NAME_REV = 1
    // Add SOA, SVCB, and HTTPS name indexing; add rrtype union
    // as value.

  * dnstable_convert: use input file - (dash) for standard input
    (stdin).

  * dnstable_convert: add -c compression option to set type of
    compression used. This defaults to zlib.

  * dnstable_convert: add -l compression option to set compression
    level.

  * dnstable_convert: add -m option to specify maximum megabytes of
    memory to use for in-memory sorting. It defaults to 2048 MB.

  * Various changes to the status output from dnstable_convert when it
    runs.

  * Documentation and testing improvements.

Sponsored by:	Farsight Security, Inc.

net/nmsg: upgrade to version 1.0.0

The network encapsulation library, nmsg, version 1.0.0 is released.
  This release deprecates Crossroads I/O (libxs) support in favor of
  ZeroMQ (libzmq). Note command-line updates enabling ZeroMQ socket
  connections for nmsgtool, as described in its man page. In addition
  the treatment of unknown rrtypes was amended for nmsgtool JSON
  output. In detail:

    Replace libXS with ZeroMQ and associated calls.

    Developer API functions nmsg_input_open_xs(),
    nmsg_input_open_xs_endpoint(), nmsg_io_add_input_xs_channel(),
    nmsg_output_open_xs(), and nmsg_output_open_xs_endpoint() are
    deprecated and replaced with respectively: nmsg_input_open_zmq(),
    nmsg_input_open_zmq_endpoint(), nmsg_io_add_input_zmq_channel(),
    nmsg_output_open_zmq(), and nmsg_output_open_zmq_endpoint().

    Update nmsgtool command-line options: --readzchan replaces --readzsock,
    --writezsock replaces --writexsock, --readzsock replaces --readxsock.

    Change format of unknown rrtypes in nmsgtool JSON output to "TYPE"
    followed by number.

Expose --without-yajl and --without-libzmq configure flags as port options.

This upgrade changes the libnmsg.so version number, bump PORTREVISION
of the dependent ports.

Sponsored by:	Farsight Security, Inc.

One more small cleanup, forgotten yesterday. Reported by:	lwhsu

Remove # $FreeBSD$ from Makefiles.

New port dns/dnstable_convert.  It was split out of dnstable to reduce the dependencies of dnstable.

dnstable_convert is a conversion utility for passive DNS data in
dnstable format.

Sponsored by:	Farsight Security, Inc.