net/openntpd7.9p1,2

net/openntpd: update to 7.9p1

Miscellaneous minor bug fixes.

Changelog:
https://www.openntpd.org/txt/release-7.9p1.txt

net/openntpd: conditionalize ca_root_nss dependency on FreeBSD version

__FreeBSD_version >= 1500063 already includes a certificate bundle

PR:		289323
Reported by:	Herbert J. Skuhra <herbert@gojira.at>

*/*: Remove GNU_CONFIGURE_MANPREFIX

After 9fd7ee1cdf6c remove GNU_CONFIGURE_MANPREFIX from my ports.

net/openntpd: Sanitize MANPREFIX

Approved by:    portmgr (blanket)

security/libretls: update 3.8.1

Bump portrevision of consumers

net/openntpd: fix for NICs with hardware timestamp support

OpenNTPD enables the reception of a timestamp with datagrams.
Network adapters that support hardware timestamping of packets,
e.g. mlx5en(4), create a SCM_TIME_INFO control message in addition
to the SCM_TIMESTAMP one.  Provide a sufficiently large buffer to
accommodate this and avoid a MSG_CTRUNC error.

PR:		271224
Obtained from:	Dmitry Wagin <dmitry.wagin@ya.ru>

security/libretls: update to 3.7.0

net/openntpd: remove no-op configure argument

Drop the --with-cacert configure option, which does nothing at all.
OpenNTPD always loads the root CA file from the path returned by
tls_default_ca_cert_file(), i.e., /etc/ssl/cert.pem.

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)

libretls: bump portrevision of dependent port due to shlib number change

Reported by:	jbeich
PointyHat:	bapt

security/libretls: upgrade to 3.5.0

Bump portrevision of each dependant port because the SONAME changes

security/libretls: update to 3.4.1

Bump revision on consumers

cleanup: drop support for EOL FreeBSD 11.X

Search criteria used:
- 11.4
- OSREL*
- OSVER*
- *_FreeBSD_11

Input from:
- adridg: devel/qca-legacy
- jbeich: _WITH_DPRINTF, _WITH_GETLINE, GNU bfd workarounds
- sunpoet: security/p5-*OpenSSL*

Reviewed by:	doceng, kde, multimedia, perl, python, ruby, rust
Differential Revision: https://reviews.freebsd.org/D32008
Test Plan: make index

net/openntpd: Add CPE information

Approved by:	portmgr (blanket)

One more small cleanup, forgotten yesterday. Reported by:	lwhsu

all: Remove all other $FreeBSD keywords.

Remove # $FreeBSD$ from Makefiles.

net/openntpd: switch to libretls on FreeBSD 12+

When using LibreSSL use its own libtls but when using OpenSSL use
libtls from libretls.

Reworked from
PR:		252802
Submitted by:	jbeich

security/libressl: re-link static library consumers after r557713

Update to 6.8p1.  This is a large catch-up release.

Configuration changes:
* Servers can be marked as "trusted" to skip constraints processing.
* The -s and -S options are no-ops and will be removed in the future.

http://www.openntpd.org/txt/release-6.8p1.txt

Merge back fixes from OpenBSD 6.8-beta: If no replies are received for a while due to connectivity issues, go into unsynced mode.

PR:		221282
Reported by:	Rene Wagner <rw@nelianur.org>
Obtained from:	OpenBSD

Zap double definitions to fix build with -fno-common.

Obtained from:	upstream

Only pass -E to find(1) when passing -regex or -iregex

The -E flag tells find(1) to interpret regular expressions which were
passed as arguments to -regex and -iregex as extended regular expressions.
It has no effect on other otherwise. Let's not invoke find(1) with -E if
not necessary.

Approved by:	portmgr (blanket approval)

net/ntpsec: Add CONFLICTS between net/{ntp,ntp-devel,openntpd,ntpsec} because they all install sbin/ntpd

Also remove -* for versions because this isn't needed.

PR:		246553
Reported by:	naddy
Approved by:	portmgr (port compliance, infrastructure)

Add a note in pkg-message that you need to override the manual search path to view the correct ntpd(8) man page.

PR:		246484

Rebuild statically linked security/libressl consumers after r534416

Rebuild statically linked security/libressl consumers after r514815

Rebuild statically linked security/libressl consumers after r502277

Rebuild statically linked security/libressl consumers after r499667

Move the numerical ID for the "_ntp" user, required for net/openntpd's privilege separation, after its value was usurped by the new "ntpd" user in 12.0-CURRENT.

PR:		229936

Update to 6.2p3.  No changes on FreeBSD.

Register conflict with ntp, ntp-devel.

Update to 6.2p2: upstream has incorporated the fixes for the "query from" feature.

Add a missing initialization and correct a memcpy size to fix the new "query from" feature.

Reported by:	Roger Marquis <marquis@roble.com>

Update to 6.2p1.  Noteworthy changes: * Added option "query from <ip>" to ntpd.conf, to specify a local IP   address for outgoing NTP queries.

Add a periodic script for daily status.

Submitted by:	Alexander Milanov <a@amilanov.com>

security/libressl: Bump static library consumers

Reported by:	jbeich

Belated revision bump after libressl 2.5.3 update. This approach doesn't work, does it?

security/libressl: chase r432997 in static lib consumers

Pointy hat to:	brnrd

- Remove always-true/false conditions after FreeBSD 9, 10.1, 10.2 EOL

Approved by:	portmgr blanket

Belated PORTREVISION bump after security/libressl 2.4.4 update.

PR:		215522
Submitted by:	Rene Wagner <rw@nelianur.org>

Fix building when libressl is not the default.

PR:		215150
Sponsored by:	Absolight

Do not use post-stage.  Use post-install instead.

The only reason to use post-stage is because the port needs to do
"things" at a later time, like some plist manipulation.
While there, fold post-install in do-install targets when they are
defined.

PR:		214780
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight

Unblock the package build via static libressl.  Adapted from [1].

OpenNTPD requires libtls, which is only available from LibreSSL.
If LibreSSL is not the default SSL library, link with a static copy
of the LibreSSL libraries.  This approach has the drawback that
whenever there is an update to libressl, the openntpd port will
require a PORTREVISION bump, otherwise it will not pick up the fixed
library and continue to use the old code.

Drop the RESSL option as LibreSSL is now always available.

PR:		213691 [1]
Submitted by:	jbeich

Most commonly used build systems support silent builds, when they hide actual commands executed and only show short summary line (like "CC foo.c"). CMake and ninja enable this by default, some autotools using ports do as well. This is unacceptable because we need complete build logs at any time, so we now switch to verbose build logs unconditionally. Note that this change deliberately affects ALL 

Change summary:

- Always do verbose builds for cmake, ninja and GNU configure (the
  latter includes check if --disable-silent-rules is actually supported
  by the configure script; there are isolated cases when it's not true)
- Remove CMAKE_VERBOSE, NINJA_VERBOSE and
  CONFIGURE_ARGS=--disable-silent-rules from all ports which set them
  for this is no longer needed
- Revert hacks for --disable-silent-rules support priorly committed
  to biology/ncbi-blast+ and net-p2p/mldonkey - no longer needed as well

Submitted by:	amdmi3
Reviewed by:	mat
Exp-run by:	antoine
Approved by:	portmgr (mat, antoine)
Differential Revision:	D7534

Minor changes/improvements: * switch to USES=ssl * use the paths set by Mk/Uses/ssl.mk * move post-install to post-stage

Submitted by:	brnrd

Fix dangling backslash after r418011.

Committed under just-fix-it.

Fix ports depending on security/(open|libre)ssl directly.

Sponsored by:	Absolight

Add support for changing the location of ntpd.conf (openntpd_config), and add a 'configtest' rc(8) target. Also note openntpd_flags in the comments at the top of the rc(8) script.

PORTREVISION bump for rc(8) script change.

PR:		210153
Approved by:	naddy (maintainer)