security/cyrus-sasl2 2.1.28_6

security/cyrus-sasl2: Fix build with databases/lmdb.

security/cyrus-sasl2{,-saslauthd}: Fix build after lmdb update.

security/cyrus-sasl2{,-saslauthd}: add LMDB0 option on by default for backward compatibility

databases/lmdb0: Add port for LMDB 0.9.x legacy ABI

LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.

Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.

This commit introduces databases/lmdb0 as a holding port for the 0.9.35
release, pinned to the 0.x branch with PORTSCOUT=limit:^0. and mutually
conflicting with databases/lmdb, which retains 1.0. The two packages
cannot be installed simultaneously, but having lmdb0 available means:

* Ports known to require the 0.9 ABI can declare an explicit dependency
  on databases/lmdb0 until they are validated against 1.0.
* Users with existing databases in the 0.9 format can still access the
  mdb_dump and mdb_load utilities to migrate data before upgrading.
* The package conflict prevents accidental mixing.

All 50 direct dependents of databases/lmdb are redirected to
databases/lmdb0 for now with a PORTREVISION bump, effectively restoring
the tree to the state prior to the LMDB 1.0 update. Once all dependent
ports are validated against LMDB 1.0, they will be moved back to
databases/lmdb and databases/lmdb0 will be removed.

PR:             ports/296530

all: drop support for FreeBSD 13, mips and risc64sf

Reviewed by:            many (*)
Differential Revision:  https://reviews.freebsd.org/D55624
Differential Revision:  https://reviews.freebsd.org/D55642 (merged in from bofh)

many (*)
  acm arrowd brooks cmt dch decke dinoex eduardo fluffy fuz gahr garga
  jbeich joerg jrm kai kenrap martymac matthew mfechner michaelo mizhka
  nobutaka pkubaj se tagattie thj

  Anton Saietskii
  GenericRikka
  Gert Doering
  Jan Bramkamp
  Oleh Hushchenkov
  Oleksandr Kryvulia
  Ralf van der Enden
  Yamagi

  desktop kde python tcltk office

security/cyrus-sasl2: respect CFLAGS

Currently CFLAGS are not respected, which may result in various crashes, e.g. CPUTYPE is not respected, which results in SIGILL on QorIQ E5500 CPU.

Reported by:	AmigaBSD (on #powerpc64 IRC)

security/cyrus-sasl2: Remove GNU_CONFIGURE_MANPREFIX after move man pages to share/man

security/cyrus-sasl2: Better usage for gmake.

PR:		277955
Reported by:	O. Hartmann <ohartmann@walstatt.org>

security/cyrus-sasl2: Add OPIE option for FreeBSD 14 and later.

Reported by:	Jonathan Chen <jonc@chen.org.nz>

security/cyrus-sasl2{,-saslauthd}: Restore GNU_CONFIGURE

security/cyrus-sasl2{,-saslauthd}: Move manpages to ${PREFIX}/share

security/cyrus-sasl2: Make DIGEST-MD5 work with OpenSSL 3.

Obtained from:	https://src.fedoraproject.org/rpms/cyrus-sasl/blob/84a6dfd794269883983287d5c7c764175a10b76f/f/cyrus-sasl-2.1.27-cumulative-digestmd5.patch

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)

security/cyrus-sasl2{,-saslauthd}: lmdb did not work for postfix

- sasldb2-lock requires write permission for mail group
- introduce SASLDB_IN_VAR option which places sasldb into /var/db

Reported by:	Herbert J. Skuhra <herbert@gojira.at>

security/cyrus-sasl2: Remove INVALID_BDB_VER from Makefile.common

PR:		263012
Reported by:	yasu

security/cyrus-sasl2: Update to 2.1.28.

PR:		262133
Relnotes:	https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
Security:	CVE-2019-19906, CVE-2022-24407

security/cyrus-sasl2-sql: Escape password for SQL insert/update commands

Obtained from:	https://github.com/cyrusimap/cyrus-sasl/commit/2d2e97b0eb53fa7f87a3bf1529d8f712dd954480
Security:	CVE-2022-24407

security/cyrus-sasl2-gssapi: remove patch-plugins_gssapi.c

PR:		260017
Reported by:	Michael Osipov
Discussed with: hrs
MFH:		2021Q4

security/cyrus-sasl2: Disable sphinx build.

PR:		257877

security/cyrus-sasl2: Respect CC.

PR:		257566

net/openldap24-server: Make SASL permanent for OpenLDAP port.

PR:		ports/257374
Reviewed by:	obrien
Approved by:	portmgr (exp-run by antoine)
Differential Revision: https://reviews.freebsd.org/D31301

One more small cleanup, forgotten yesterday. Reported by:	lwhsu

all: Remove all other $FreeBSD keywords.

Remove # $FreeBSD$ from Makefiles.

Repo. was moved.

Reported by:	 Odhiambo Washington <odhiambo@gmail.com>

Revert r15574. It was wrong, and was not approved by the maintainer.

Reported by:	jkim

- Call gss_acquire_cred() before gss_init_sec_context()   in gssapi_client_mech_step() - Fix a bug which prevented the client from retrieving   a credential from CCACHE.

These patches were already merged into upstream.

  https://github.com/cyrusimap/cyrus-sasl/pull/575
  https://github.com/cyrusimap/cyrus-sasl/pull/591

Submitted by:	hrs

bump PORTREVISION for my previous change.

check exit status of sasldblistusers2 when deinstalling cyrus-sasl2 package.

PR:		243363
Reported by:	hsakamt__at__tsnr.com

security/cyrus-sasl2: unbreak building with stock OpenSSL for stable/11

Sendmail bundled with FreeBSD has SASL support and the Handbook tells
how to rebuild the Sendmail with SASL enabled if you have installed
cyrus-sasl2 that links with OpenSSL's libcrypto.

Sendmail uses old OpenSSL 1.0.2 API, so cyrus-sasl2 should be built
with stock libcrypto even if newer OpenSSL is installed for Ports.

This change adds new option SSL to the port (enabled by default).
If disabled, cyrus-sasl2 is built witch stock libcrypto not depending
on ports version of OpenSSL.

PORTREVISION not changed as default build is not affected.

Drop the ipv6 virtual category for s* category as it is not relevant anymore

Convert to UCL & cleanup pkg-message (categories s)

Fix sanity for cyrus-sasl2 plugins

Update to 2.1.27.

Update `databases/gdbm' to version 1.18.1, an important bugfix release which restores compatibility with old databases (version 1.8) and some later versions which were built without mmap(2) support.  Due to shlib version change, bump port revisions of the consumer ports.

PR:		233059
Exp-run by:	antoine
Approved by:	maintainer (johans, numerous timeouts)

Fix build the saslauthd when the OPENLDAP option is enabled.

PR:		231871
Reported by:	Nathan <ndowens [...] yahoo.com>

Add OpenSSL 1.1.0 support for saslauthd. There are the patches to support OpenSSL 1.1.0 in cyrus-sasl2 port, already.  But, it was incomplete for saslauthd.

PR:		231647
Submitted by:	dewayne [...] heuristicsystems.com.au (with some modifications)

- Backport from 2.1.27-rc7 OpenSSL 1.1 fixes - Fix WWW

PR:		225891
Submitted by:	brnrd

Make local DB-errors more descriptive. This patch will be included into comming 2.1.27.

PR:		198323
Submitted by:	Mikhail Teterin

Remove support for variables that have been deprecated for a while.

variables                  deprecation       revision
WITHOUT_NLS                2013-12-13        r336337
WITH_/WITHOUT_             2014-02-24        r345870
NOPORT(DOC|EXAMPLE)S       2014-04-19        r351587
WITH_BDB_VER               2016-05-02        r414444
OVERRIDE_LINUX_BASE_PORT   2016-09-05        r421387
WITH_OPENSSL_(BASE|PORT)   2016-06-16        r416965

While there, add an ERROR variable that works like DEV_ERROR, but for
user facing errors, and move NOPORTDOCS,
NOPORTEXAMPLES and WITHOUT_NLS to it.

Cleanup bsd.sanity.mk a bit.

Fix fallout.

PR:		224613
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D13490

security/cyrus-sasl2: separate sql plugins into security/cyrus-sasl2-sql Fix circular-dependency problem happens after SASL/LDAP was added as plugin to mysql57-client in r446496

Reviewed by:	bapt, mat (mentor), ume (maintainer)
Approved by:	mat (mentor), ume (maintainer)
MFH:		2017Q3
Differential Revision:	https://reviews.freebsd.org/D11805

Unbreak, do not overwrite USES

Remove all USE_OPENSSL occurrences.

Sponsored by:	Absolight

Use USES=bdb and USES=mysql.

Remove USE_SQLITE from bsd.databases.mk, replaced by USES=sqlite.

While there replace USE_SQLITE=x by USES=sqlite:x.

PR:		208971
Submitted by:	mat
Exp-run by:	antoine
With hat:	portmgr
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D5951

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

Make it buildable with GDBM on.

PR:		208194
Reported by:	vas__at__mpeks.tomsk.su

Add the forgot patch at my previous commit.

- Make SASLdb excludable. - Make SASLdb buildable with GDBM. - Make sure to disable the plugins where it is not required.