mail/fetchmailconf 6.6.5

mail/fetchmail{,conf}: Update 6.6.4 => 6.6.5 (vulnerability fix)

Fetchmail 6.6.5 is the sixth fetchmail 6.6 release on 2026-06-17, it
fixed a buffer sizing bug in the RPA code that could crash fetchmail
due to a buffer overrun when long user names and service realm and
challenges were used, POP3 was used, the username contained
@compuserve.com and the server would offer a non-standard
"AUTH"-without-arguments request that would list RPA
(case-insensitively) as supported authentication option.

Changelog:
https://sourceforge.net/projects/fetchmail/files/branch_6.6/

Improve mail/fetchmailconf:
- Replace PORTVERSION with DISTVERSION.
- Fix antipattern "BUILD_DEPENDS=RUN_DEPENDS".
- Fix warnings from portclippy.

PR:		296204 283227
Approved by:	Corey Halpin <chalpin@cs.wisc.edu> (maintainer)
Sponsored by:	UNIS Labs
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
MFH:		2026Q2

mail/fetchmail{,conf}: Update 6.6.3 => 6.6.4

News:
https://gitlab.com/fetchmail/fetchmail/-/blob/6.6.4/NEWS

While here remove GNU_CONFIGURE_MANPREFIX - this is default value.

PR:		295178
Sponsored by:	UNIS Labs

mail/fetchmail: security update to 6.5.6

To fix https://www.fetchmail.info/fetchmail-SA-2025-01.txt

and the Error: Orphaned: %%PYTHON_SITELIBDIR%%/__pycache__/fetchmailconf%%PYTHON_TAG%%.opt-2.pyc
from

Approved by:	Corey Halpin (maintainer)
PR:		289823
PR:		289979
Security:	21fba35e-a05f-11f0-a8b8-a1ef31191bc1
MFH:		2025Q4

mail/fetchmail*: update to 6.5.0

Improve upon the prior opie handling and use the port on FreeBSD 14.
For the FreeBSD 13 base OpenSSL 1.x version, allow it by patching
socket.c, and also simplify the EVP_MD* API update check which will go
upstream.

PR:		282413
Approved by:	Corey Halpin <chalpin@cs.wisc.edu> (maintainer)

mail/fetchmailconf: Moved man to share/man

Approved by:    portmgr (blanket)

Fix WWW in parent/child ports

Many of the WWW are overwritten later which means the wrong value
is used. This did not happen before where the children were either
 a) just using the pkg-descr from the parents
 b) or had their own separate pkg-descr with custom WWW

Use WWW?= in parents when the child's WWW is different.

Children that use the same WWW as the parent can just inherit it,
i.e., the child WWW can be removed.

Approved by:	portmgr (implicit)

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)

mail/fetchmail: update 6.4.25, add WOLFSSL support

WOLFSSL is a GPLv2+ licensed SSL library with OpenSSL compatibility
layer. This is to permit shipping fetchmail under a clean GPLv2+
license with OpenSSL 1.1.1.

mail/fetchmail: update to 6.4.24 and block LibreSSL.

Now really 6.4.24 and not a 6.4.25 WIP.

fetchmail cannot legally be linked with LibreSSL,
because there is no GPLv2 clause 2b exemption for
LibreSSL, only for OpenSSL.

Correct LICENSE and remove LICENSE_COMB.
Add comment on FSF dynamic linking dynamically
suggested by Corey Halpin in the approval.

Remove LibreSSL patch.

Related to:
PR:             259214

Update:
PR:             259945
MFH:		2021Q4

Approved by:	chalpin@cs.wisc.edu (maintainer)

Revert "mail/fetchmail: update to 6.4.24 and block LibreSSL."

This reverts commit 30e97245f9dd9ddef1bffd874a9035a6fe9b6817.
That wasn't the approved patch, but a later WIP one. Fixing up.

mail/fetchmail: update to 6.4.24 and block LibreSSL.

fetchmail cannot legally be linked with LibreSSL,
because there is no GPLv2 clause 2b exemption for
LibreSSL, only for OpenSSL.

Correct LICENSE and remove LICENSE_COMB.
Remove LibreSSL patch.

Add FSF comment suggested by Corey Halpin in PR.

Related to:
PR:             259214

Update:
PR:             259945
MFH:		2021Q4

Approved by:	chalpin@cs.wisc.edu (maintainer)

mail/fetchmailconf: avoid polluting BUILD_DEPENDS

The RUN_DEPENDS+=BUILD_DEPENDS may pull ccache in as run-time requisite,
so let's flip the assignments and make BUILD_DEPENDS use RUN_DEPENDS to
avoid just this pollution.

PR:		256242
Approved by:	Corey Halpin (maintainer)

One more small cleanup, forgotten yesterday. Reported by:	lwhsu

all: Remove all other $FreeBSD keywords.

Remove # $FreeBSD$ from Makefiles.

mail/fetchmail: avoid rc.conf overriding daemon interval, many other fixes

Authors: CH = Corey Halpin, MA = Matthias Andree

- fetchmail's rc script now queries the daemon interval from the
  configuration, and falls back to the rc.conf value if given. [CH]
- Similarly, the logging facility will be taken from the configuration [MA]
- Add documentation to the rcfile's header comments. [MA]
- Drop support for fetchmail_home_prefix in rc.conf, and query the
  respective users' home directories with getent instead. [MA]
- In the rc scripts, redirect input from /dev/null so it will not ask
  for passwords. [MA]
- Add support for the typical 12.1 rc.conf ${name}_... keywords. [MA]
- Make script execution easier to follow by simplifying if...else logic. [CH]
- Fix rcscript's exit code to be 1 if one of the per-user calls fails. [CH]
- Add relevant notes to UPDATING. [MA]

PR:		249860
Submitted by:	Corey Halpin (maintainer)
Reported by:	Chris James (on fetchmail-users mailing list)
Approved by:	Corey Halpin (maintainer)

mail/fetchmail: update to 6.4.10

while here, switch distfile back to xz format and update
the > 2^31 "long long" fix so it patches the right place of the NEWS file.

- adds Romanian translation
- minor manual page fix to add "MD5" hash to sslfingerprint documentation

PR:		248954
Approved by:	Corey Halpin (maintainer)

mail/fetchmail, fetchmailconf: update to 6.4.3-rc2 (bug fixes)

Add a patch to document --sslproto tls1.3+ and tls1.3 through the manpage,
which hasn't made 6.4.3-rc2 but works since 6.4.0 assuming that the SSL library
supports TLSv1.3.

Remove fetchmailconf patch that is now part of the upstream code.

Switch to .lz downloads, a tiny bit smaller.

Upstream changelog:
## BUGFIXES:
* Plug memory leaks when parts of the configuration (defaults, rcfile, command
  line) override one another.
* fetchmail terminated the placeholder command string too late and included
  garbage from the heap at the end of the string. Workaround: don't use place-
  holders %h or %p in the --plugin string. Bug added in 6.4.0 when merging
  Gitlab merge request !5 in order to fix an input buffer overrun.
  Faulty commit 418cda65f752e367fa663fd13884a45fcbc39ddd.
  Reported by Stefan Thurner, Gitlab issue #16.
* Fetchmail now checks for errors when trying to read the .idfile,
  Gitlab issue #3.

## CHANGES:
* Fetchmail documentation was updated to require OpenSSL 1.1.1.
  OpenSSL 1.0.2 reached End Of Life status at the end of the year 2019.
  Fetchmail will tolerate, but warn about, 1.0.2 for now on the assumption that
  distributors backport security fixes as the need arises.
  Fetchmail will also warn if another SSL library that is API-compatible
  with OpenSSL lacks TLS v1.3 support.
* If the trust anchor is missing, fetchmail refers the user to README.SSL.

PR:		245187
Submitted by:	mandree@
Approved by:	Corey Halpin (maintainer)

mail/fetchmail: mail/fetchmailconf: update to 6.4.2, make Python 3 compatible

Fetchmail updated to new revision 6.4.2
- one bugfix
- manual page updates
- update of Chinese (simplified) translation
- massive fetchmailconf overhaul
  + Python 3 compatible (requires py-future)
  + Supports IPv6 and SSL probing
- remove two patches for fetchmail that are in the upstream release
- add a smoke test to fetchmailconf's post-install,
  and a patch to support that running without X11 $DISPLAY.

PR:		244130
Submitted by:	mandree@
Reviewed by:	Corey Halpin <chalpin@cs.wisc.edu> (maintainer)
Approved by:	Corey Halpin <chalpin@cs.wisc.edu> (maintainer)
MFH:		2020Q1 (bugfixes and fetchmailconf update and Python3 compat.)

UNBREAK. Do not dare mark broken again sooner than four hours before this commit.

The file has been re-uploaded and sourceforge.net is dealing out the same
file to its mirrors. This should be fixed soon.

Else restrict mastersites to FreeBSD's distcache, this will then be solved
with the 6.4.2 update from https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=244130

Mark BROKEN again, it is still unfetchable

Unbreak. Un-deprecate due to PR 244130.

See: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=244130

While here, fix TARGET -> ALL_TARGET to avoid building the C stuff,
and drop the unused obsolete distinfo file.

Approved by: (blanket, unbreak a port)

Deprecate a few broken ports

With hat:	portmgr

Mark a few ports BROKEN (unfetchable)

mail/fetchmail: update to 6.4.1.

Release notes: https://sourceforge.net/projects/fetchmail/files/branch_6.4/

While here, remove fetchmail64 port, now no longer needed.

PR:		240908
Submitted by:	chalpin@cs.wisc.edu (maintainer)

mail/fetchmailconf: fix use by simplifing the search for Tkinter etc

When the fetchmailconf port was split off from fetchmail, it inherited
some python version detection logic that had been intended to let
fetchmail be installed with or without python and work either way.
However, this logic 1) no longer works with current python packaging,
and 2) doesn't really make sense in the context of a 'fetchmailconf'
port that already depends on python.

This patch simplifies out that logic.

PR:		239248
Submitted by:	Corey Halpin <chalpin@cs.wisc.edu> (maintainer)
Reported by:	gerard_seibert@outlook.com

fetchmailconf is not compatible with python 3.x

PR:		234633

mail/fetchmail depends overhaul, new fetchmailconf port

* Bring back SNI (server name indication) support for TLS connections,
  lost in 6.3.26_10 (PORTREVISION=10) as a regression over _9.
  Pointy hat: mandree@
* Drop the X11 option, remove the Python dependency, and create a new
  mail/fetchmailconf slave port/package that installs the fetchmailconf
  configurator. Note that the _DEPENDS of the ports reflects a technical
  dependence (fetchmailconf needs fetchmail), and we cannot keep an
  X11 option that depends on fetchmailconf, since that would create
  a circular dependency, which we must avoid.
* Patch configure instead of configure.ac with Cy's Kerberos fix, drop
  autoreconf from USES, and add a new configure check directly to set
  HAVE_DECL_SSLV3_CLIENT_METHOD to cover the various TLS providers
  (currently five, base, openssl, openssl111, libressl, libressl-devel)
* Add -Wl,--as-needed to LDFLAGS so as not to pull in unneeded .so
  libraries, for instance, libcom_err when compiling under GSSAPI_NONE.
* Bump PORTREVISION.

Very fruitful and nice collaboration with and
Approved by:	chalpin@cs.wisc.edu (maintainer)