dns/opendnssec22.1.14_2

*/*: Bump consumers of dns/ldns after update to 1.9.0

Force rebuild comsumers - upstream changed ABI without bump soname.

ldns 1.9.0 inserted LDNS_RDF_TYPE_INT64 at enum position 5, shifting
every subsequent value by +1. But port kept the shared library as
libldns.so.3.6.0 - no SONAME bump - so consumers wasn't flagged for
rebuild and still has the old 1.8.x enum constants baked in.

Example of error for opendnssec:
[adapter] error parsing RR at line 2 (Syntax error, could not parse
the RR's rdata)

PR:		291573
Reported by:	bdrewery (via email)
Sponsored by:	UNIS Labs
MFH:		2026Q2

libxml2: chase libxml soversion bump

*/*: Use Gnome helper for defining libxml2 dependency

Replace LIB_DEPENDS with USES= gnome, USE_GNOME= libxml2

Approved by:	portmgr (blanket)

dns/opendnssec2: Update 2.1.13 → 2.1.14

News:
https://www.opendnssec.org/2024/08/opendnssec-2-1-14/

Also:
- Repalace http with https in MASTER_SITES
- Remove GNU_CONFIGURE_MANPREFIX
- Formatting

PR:	281078

dns/opendnssec2: make the rc script service jails aware

PR:		279634
Approved by:	maintainer timeout (1 month)

dns/opendnssec2: Moved man to share/man

Approved by:    portmgr (blanket)

*/*: Refactor with IGNORE_WITH_MYSQL

- There are multiple ports which has MYSQL options and are non-DEFAULT.
  Most of the time committers actually forget to check with the OPTION
  enabled and in some cases they are BROKEN with newr versions of mysql.
  So test with different versions of mysql and mark IGNOPRE_WITH_MYSQL
  appropriately. Due to the EOL of 5.7 this has not been checked.
- Unbreak sysutils/cfengine* with MySQL 8.0 and later
- The primary purpose of running this check is having statistics of the
  MySQL usability over MariaDB to explore the future possibility of
  shifting to MariaDB as the default as major ports upstream have moved
  their codebase to support MariaDB over MySQL.
- The following actions will also be taken after the sunset of MySQL 5.7
  If a port is broken on all instances of MySQL/MariaDB:
  - If a port has the option of multiple DB backends and MySQL is the
    default then the DEFAULT will be changed to PGSQL/SQLITE before
    2024Q1. And the OPTION will be removed before 2024Q2. If a
    MAINTAINER is aware about such cases and want to prefer PGSQL over
    SQLITE or vice versa please do so at your own accord. Otherwise
    PGSQL will be preferred over SQLITE.
  - If a port has the option of multiple DB backends and MySQL is not
    the default then the the OPTION will be removed before 2024Q1.

Approved by:	portmgr (blanket)

dns/opendnssec2: Update t0 2.1.7

ChangeLog: https://www.opendnssec.org/2023/06/opendnssec-2-1-13/

This release fixes a bug that affects both signer and enforcer command
line handling. Under heavy usage of the command line there was a small
change for a crash.
Furthermore there is a small behavioural change for users of the "keep"
policy. The back-off for retrying a sign task change is now equal to
the resign period in case the input file isn't available or updated.
This because users nearly always will emit an external sign command for
this period. This will reduce logging errors.

PR:		272254
Reported by:	jaap@NLnetLabs.nl (maintainer)

dns/opendnssec2: update to 2.1.12

Changelog: https://www.opendnssec.org/2022/11/opendnssec-2-1-12

PR:		270931

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)

dns: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Alex Samorukov <samm@freebsd.org>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Allan Jude <allanjude@freebsd.org>
  *  Amar Takhar <verm@drunkmonk.net>
  *  Anders Nordby <anders@fix.no>
  *  Andrew Greenwood <greenwood.andy@gmail.com>
  *  Anton Berezin <tobez@FreeBSD.org>
  *  Ashish SHUKLA <ashish@FreeBSD.org>
  *  Attila Nagy <bra@fsn.hu>
  *  Bas Kruit <baskruit@bsltwr.dhis.org>
  *  Bruce M. Simpson <bms@FreeBSD.org>
  *  Carlos J Puga Medina <cpm@fbsd.es>
  *  Chris St Denis (<chris@ctgameinfo.com>)
  *  Clement Laforet <clement@FreeBSD.org>
  *  Clement Laforet <sheepkiller@cultdeadsheep.org>
  *  Dan Langille <dvl@FreeBSD.org>
  *  Dan Pelleg <daniel+mdnsd@pelleg.org>
  *  Dan Smith <dan@algenta.com>
  *  David O'Brien (obrien@NUXI.com)
  *  Dean Hollister <dean@odyssey.apana.org.au>
  *  Dirk Froemberg <dirk@FreeBSD.org>
  *  Dmitry Pryadko <d.pryadko@rambler-co.ru>
  *  Dmitry Sivachenko <mitya@yandex-team.ru>
  *  Dominik Brettnacher <domi@saargate.de>
  *  Douglas Thrift <douglas@douglasthrift.net>
  *  Edwin Groothuis (edwin@mavetju.org)
  *  Edwin Groothuis <edwin@mavetju.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@critical.ch>
  *  Eyal Soha <esoha@attbi.com>
  *  Filip Parag <filip@parag.rs>
  *  Filippo Natali <filippo.natali@gmail.com>
  *  Frank Behrens
  *  Gea-Suan Lin <gslin@gslin.org>
  *  Geoffroy Desvernay <dgeo@centrale-marseille.fr>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Goran Mekić <meka@tilda.center>
  *  Hajimu UMEMOTO <ume@FreeBSD.org>
  *  Herve Quiroz <hq@FreeBSD.org>
  *  Hirohisa Yamaguchi <umq@ueo.co.jp>
  *  Hye-Shik Chang <perky@fallin.lv>
  *  Jaap Akkerhuis <jaap@NLnetLabs.nl>
  *  James FitzGibbon <jfitz@FreeBSD.org>
  *  Jase Thew <freebsd@beardz.net>
  *  Jimmy Bergman jimmy@sigint.se
  *  Jin-Shan Tseng <tjs@cdpa.nsysu.edu.tw>
  *  Joe Barbish
  *  Jov <amutu@amutu.com>
  *  Jui-Nan Lin <jnlin@freebsd.cs.nctu.edu.tw>
  *  Karl Dietz (Karl.Dietz@frankfurt.netsurf.de)
  *  Kirill Ponomarew <ponomarew@oberon.net>
  *  Koen Martens <gmc@sonologic.nl>
  *  Konstantin Saurbier <saurbier@math.uni-bielefeld.de>
  *  Kostya Lukin <lukin@okbmei.msk.su>
  *  Kris Kennaway <kris@FreeBSD.org>
  *  Kubilay Kocak <koobs@FreeBSD.org>
  *  Kurt Jaeger <fbsd-ports@opsec.eu>
  *  Leo Vandewoestijne <freebsd@dns-lab.com>
  *  Leo Vandewoestijne <freebsd@dns.company>
  *  MIHIRA Yoshiro <sanpei@jp.FreeBSD.org>
  *  Marcin Gondek <drixter@e-utp.net>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Felder <feld@FreeBSD.org>
  *  Mark Linimon <linimon@lonesome.com>
  *  Mark Pulford <mark@kyne.com.au>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Matthew Hunt <mph@pobox.com>
  *  Matthew Seaman
  *  Michael Cardell Widerkrantz <mc@hack.org>
  *  Moritz Warning <moritzwarning@web.de>
  *  Natacha Porte <natbsd@instinctive.eu>
  *  Neil Blakey-Milner
  *  Olivier Duchateau
  *  Paul Chvostek <paul@it.ca>
  *  Paul Dlug <paul@aps.org>
  *  Philippe Pepiot <phil@philpep.org>
  *  Piotr Kubaj <pkubaj@FreeBSD.org>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Rafal Lesniak <fbsd@grid.einherjar.de>
  *  Roman Shterenzon <roman@xpert.com>
  *  Rong-En Fan <rafan@FreeBSD.org>
  *  Roy Marples <roy@marples.name>
  *  Ryan Steinmetz <rpsfa@rit.edu>
  *  Ryan Steinmetz <zi@FreeBSD.org>
  *  Sahil Tandon <sahil@tandon.net>
  *  Seamus Venasse <svenasse@polaris.ca>
  *  Sergei Kolobov <sergei@FreeBSD.org>
  *  Sergei Kolobov <sergei@kolobov.com>
  *  Sergey Matveychuk <sem@FreeBSD.org>
  *  Sergey Skvortsov <skv@protey.ru>
  *  Simon Dick <simond@irrelevant.org>
  *  Stefan Esser <se@FreeBSD.org>
  *  Steve Wills <swills@FreeBSD.org>
  *  Steve Wills <swills@freebsd.org>
  *  Steven Honson
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
  *  Timothy Beyer <beyert@cs.ucr.edu>
  *  Waitman Gobble <waitman@waitman.net>
  *  Wen Heping <wen@FreeBSD.org>
  *  Wen Heping <wenheping@gmail.com>
  *  Zane C, Bowers <vvelox@vvelox.net>
  *  adamw
  *  alexis
  *  andrew@ugh.net.au
  *  bkhl
  *  clsung
  *  clsung@dragon2.net
  *  dglo@ssec.wisc.edu
  *  dnscheckengine-port@academ.com (Stan Barber)
  *  fenner
  *  geniusj@ods.org
  *  ijliao
  *  ismail.yenigul@endersys.com.tr
  *  krion
  *  mark@foster.cc
  *  n@nectar.com
  *  roam@FreeBSD.org
  *  rodrigc@FreeBSD.org
  *  rpsfa@rit.edu
  *  sten@blinkenlights.nl

With hat:	portmgr

textproc/libxml2: bump all LIB_DEPENDS consumers

This is a separate commit to facilitate easier cherry-picking for
quarterly.

PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)

textproc/libxml2: bump all dependencies

This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246

dns/opendnssec2: Update to 2.1.10

* Pet portclippy
* Reformat Makefile with portfmt

ReleaseNotes:	https://www.opendnssec.org/2021/09/opendnssec-2-1-10/
PR:		258631
Approved by:	ygy (mentor)
Differential Revision:	https://reviews.freebsd.org/D32536

dns/opendnssec2: Add CPE information

Approved by:    portmgr (blanket)

dns/opendnssec2: Update to 2.1.9

Changes: https://www.opendnssec.org/2021/05/opendnssec-2-1-9/

PR:	255615

all: Remove all other $FreeBSD keywords.

Remove # $FreeBSD$ from Makefiles.

dns/opendnssec2: Add missing patch to fix the build

PR:		254075
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)

dns/opendnssec2: Update to 2.1.8

Changes: https://www.opendnssec.org/2021/02/opendnssec-2-1-8/

PR:		253795
Submitted by:	Jaap Akkerhuis <jaap AT NLnetLabs DOT nl> (maintainer)

dns/opendnssec2: Update to 2.1.7

Patches removed were incorporated upstream.

Changelog:	https://www.opendnssec.org/2020/10/opendnssec-2-1-7/

PR:		250293
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
MFH:		2020Q4 (blanket: bugfix release)

Fix build with -fno-common

While here use INSTALL_TARGET=install-strip to install stripped binaries.

dns/opendnssec2: upgrade 2.1.4 -> 2.1.6

This release of 2.1.6 fixes some issues regarding the key list
wrongfully displayed (a regression bug in 2.1.5) as well as a small
leak in the enforcer (which can add up when you bang the enforcer
with a lot of commands. And as well as a serious signing error when
using Combined Signing Keys (CSKs), this is only relevant if you
combine KSK and ZSK in one. Especially users of CSKs need this fix
now. Another nice fix is a reconnect to a MySQL/MariaDB database
you you don't have to tweak database parameters.

PR:		244047
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Relnotes:	https://www.opendnssec.org/2019/11/opendnssec-2-1-5/
		https://www.opendnssec.org/2020/02/opendnssec-2-1-6/

dns/opendnsssec*: switch to openhsm2 to the HSM option.

Bump PORTREVISION on ldns consumers

Shared lib version changed in update

Reported by:	sunpoet

Convert to UCL & cleanup pkg-message (categories d)

Update to 2.1.4

PR:		237988
Sponsored by:	Netzkommune GmbH

Update to 2.1.3:

As of today version 2.1.3 of OpenDNSSEC has been released. No special
migration steps are required when upgrading from a previous 2.x.x
release. It includes fixes to the build system, some regressions w.r.t.
OpenDNSSEC 1.4 and a signing bug. Please note that version 2.1.2 was
skipped for release.

Build fixes:

* OPENDNSSEC-904: autoconfigure fails to properly identify functions in
  ssl library on some distributions. This caused the "tsig unknown
  algorithm hmac-sha256" error.
* OPENDNSSEC-894: repair configuration script to allow excluding the
  build of the enforcer.

Regressions:

* OPENDNSSEC-508: Tag <RolloverNotification> was not functioning
  correctly
* OPENDNSSEC-901: Enforcer would ignore <ManualKeyGeneration/> tag in
  conf.xml
* OPENDNSSEC-906: Tag <AllowExtraction> tag included from late 1.4
  development

Bugs Fixed:

* OPENDNSSEC-886: Improper time calculation on 32 bits machine causes
  purge of keys not being scheduled. The purge would happen but some
  time later than expected.
* OPENDNSSEC-890: Mismatching TTLs in record sets would cause bogus
  signatures.
* OPENDNSSEC-908: Warn when TTL of resource record exceeds KASP's
  MaxZoneTTL. Formerly the signer would cap such TTLs to prevent
  situations where those records could get bogus during ZSK rollover.
  However it has been realized that this can potentially lead to failing
  IXFRs. We intend to bring back this feature in the near future when
  our internal data representation allows this.

PR:		221515
Submitted by:	jaap@NLnetLabs.nl (maintainer)

* Bump Revision * Fix typo in the Port's Makefile, causes a failure in a conversion script * Added license file * Cleanup Makefile

PR:		221144
Submitted by:	<jaap@NLnetLabs.nl> (maintainer)
Reviewed by:	matthew (mentor)
Approved by:	matthew (mentor)
MFH:		2017Q3
Differential Revision:	https://reviews.freebsd.org/D11898

Fix OPTIONS_DEFAULT: remove DOCS which is added by framework

Approved by:	portmgr (blanket)

dns/opendnssec2: update 2.1.0 -> 2.1.1

- OPENDNSSEC-889: MySQL migration script didnt work for all database
  and MySQL versions.
- OPENDNSSEC-887: Segfault on extraneous tag.
- OPENDNSSEC-880: Command line parsing for import key command failed.
- OPENDNSSEC-890: Bogus signatures upon wrong zone input when TTLs
  for same rrset are mismatching.

PR:		218995
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)

dns/opendnssec2: update 2.0.3 -> 2.1.0

- Fix DB scripts from docs

PR:		217563
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
MFH:		2017Q1

- Chase ldns shlip bump

PR:		217495

dns/opendnssec2: update 2.0.1 -> 2.0.3

PR:		213610
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
MFH:		2016Q4

dns/opendnssecs: Add SSL flags and honor them, configure SSL base too

Approved by:	SSL blanket

- Update to 2.0.1 - Switch to options helpers

This release is primarily focused on ironing out the issues on the migration path from 1.4 to 2.0. Besides that there are no functional changes.


* Fixed crash and linking issue in ods-migrate.
* Fixed case where 2.0.0 could not read backup files from 1.4.10.
* Fixed bug in migration script where key state in the database wasn't transformed properly.

PR:		211403
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Sponsored by:	DK Hostmaster A/S

The current opendnssec porthas seen a massive rewrite by the upstream so it was rechristened opendnssec Version 2. To quote the announcement at <https://www.opendnssec.org>:

"OpenDNSSEC got a entire re-write of the enforcer. This part of
OpenDNSSEC controls changing signing keys in the right way to perform
a roll-over. Before, the enforcer would perform a roll-over according
to a strict paradigm. One scenario in which deviations would not be
possible.

The new enforcer is more aware of the zone changes being propagated in
the Internet. It can therefore decide when it is safe to make changes,
rather than to rely upon a given scenario.

PR:		211018
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl>
Sponsored by:	DK Hostmaster A/S