security/gnutls 3.8.13

security/gnutls: Update to 3.8.13

security/gnutls: Stop fetching ktls_utils.h

It was missing from distfiles in previous versions but this has been
fixed now.

security/gnutls: Update to 3.8.12

PR:		293509

security/gnutls: Update to 3.8.11

security/gnutls: Update to 3.8.10

- Fetch ktls_utils.h missing from distfile, needed by tests.
- Support TLS 1.3 certificate compression with brotli and zstd.

security/gnutls: Fix build with SRP option

Prevent regeneration of srptool.1 man page.

Reported by:	nork

security/gnutls: Update to 3.8.9

security/gnutls: Update to 3.8.8

ReleaseNotes:	https://lists.gnutls.org/pipermail/gnutls-help/2024-November/004865.html
PR:		282723
Approved by:	tijl (maintainer)

security/gnutls: Update to 3.8.7.1

patch-configure derived from
https://gitlab.com/gnutls/gnutls/-/commit/74e505e986dd

security/gnutls: Update to 3.8.6

security/gnutls: Fix RSAES-PKCS1-v1_5

Add upstream patch to fix RSAES-PKCS1-v1_5 when configuration file is
missing.

Pet portlint/portclippy/portfmt.

PR:		279571

security/gnutls: Enable OpenSSL compatibility layer

PR:		279592

security/gnutls: initialise libpthread

To ensure thread-safety libgnutls calls libpthread functions but to
avoid the overhead for single-threaded programs it does not link with
libpthread.  It only calls libpthread if the executable or another
library links to it.

Since 3.8.0 libgnutls calls pthread_key_create from its init function
but because it does not link with libpthread libpthread might not have
been initialised yet.  Patch the libgnutls init function so it
initialises libpthread.

PR:		278076

security/gnutls: Update to 3.8.5

Add SRP option.  Upstream disabled it by default in 3.8.0
"because the SRP authentication in TLS is not up to date with
the latest TLS standards and its ciphersuites are based on
the CBC mode and SHA-1."

security/gnutls: Fix zlib support

PR:		278104

security/gnutls: Add KTLS option and a few improvements

* Switch to DISTFILES
* Do some light rearrangement of Makefile for better readability and
  consistency
* Remove --disable-guile from CONFIGURE_ARGS
* Add --without-included-libtasn1 to CONFIGURE_ARGS
* Add KTLS option
  https://lists.gnupg.org/pipermail/gnutls-help/2023-November/004837.html
  See also https://gnutls.org/manual/html_node/Enabling_002fDisabling-system_002facceleration-protocols.html#Enabling-KTLS

PR:		278083
Reviewed by:	tijl

security/gnutls: Update to 3.8.4

ChangeLog:	https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html
PR:		277984
Approved by:	tijl (maintainer)
Exp-run by:	antoine

security/gnutls: fix build with lld 17

Since lld17 the default is to have the LDFLAGS --no-undefined-version
activated by default, which means that versions scripts should not
contain undefined symbols

2 bugs in gnutls:
1/ the configure scripts tests an empty binary against a list of version
symbols, meaning it breaks in configure (hence the activation of
--enable-ld-version-scripts) which means currently provided gnutls
packages are build without version scripts which breaks existing
installations...
2/ the version script used to link the binary can contain undefined
symbols depending on the options used to build (hence the addition of
the LDFLAGS.

security/gnutls: Moved man to share/man

Approved by:    portmgr (blanket)

security/gnutls: Update to 3.7.10

security/gnutls: Update to 3.7.9

Security:	https://gnutls.org/security-new.html#GNUTLS-SA-2020-07-14

*/*: Bump PORTREVISION for consumers of libunistring

Reported by:	jbeich

security/gnutls: Update to 3.7.8

ChangeLog:	https://lists.gnupg.org/pipermail/gnutls-help/2022-September/004765.html
PR:		266746
Approved by:	tijl (maintainer)

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)

security/gnutls: Update to 3.7.7

ChangeLog:	https://lists.gnupg.org/pipermail/gnutls-help/2022-July/004746.html
PR:		265726
Approved by:	tijl (maintainer)
MFH:		2022Q3
Security:	CVE-2022-2509

security/gnutls: update to 3.7.6

security/gnutls: update to 3.7.5

security/gnutls: update to 3.7.4

Switch from security/ca_root_nss to base system certificate store.
Disable obsolete TPM 1.2 support.

PR:		257995, 260723, 263107, 263131
Exp-run by:	antoine

security/gnutls: Remove -Wa,-march=all for clang on aarch64

PR:		260078

security/gnutls: update to 3.6.16

One more small cleanup, forgotten yesterday. Reported by:	lwhsu

Remove # $FreeBSD$ from Makefiles.

Update to 3.6.15.

MFH:		2020Q3
Security:	https://gnutls.org/security-new.html#GNUTLS-SA-2020-09-04

Chase security/p11-kit update

After switch to meson libp11-kit.so no longer has symbols
in the LIBP11_KIT_1.0 namespace. As a workaround, bump
PORTREVISION of consumers to get those rebuilt.

See more details in the comments of the linked PR.

PR:		248819
Reported by:	John Hein

security/gnutls: Add MAN3 option

There are over 1,000 man3 pages. This adds a MAN3 option to
control their installation, similar to the openssl and libressl
ports.

PR:		248841
Approved by:	maintainer (tijl)

Update to 3.6.14.

MFH:		2020Q2
Security:	https://gnutls.org/security-new.html#GNUTLS-SA-2020-06-03

Bump PORTREVISION for security/nettle shlib change

Update to 3.6.13.

Security:	https://gnutls.org/security-new.html#GNUTLS-SA-2020-03-31

Update to 3.6.12.

Update to 3.6.11.1, white space fix, and https WWW.

Update to 3.6.10.

Also revert r508194 (-Wl,-z,notext on i386).  The problem has been fixed
upstream.

Fix build on i386.  Some asm code isn't position independent.

Reported by:	cy

Update to 3.6.9.

Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330

Update security/nettle to 3.5.1

- Bump PORTREVISION of dependent ports for shlib change
- Fix build of devel/pijul [1]

Changes:	https://git.lysator.liu.se/nettle/nettle/blob/master/NEWS
PR:		238991
Exp-run by:	antoine
Thanks to:	tobik [1]

Update to 3.6.8.

- Prevent detection of autogen.  It causes some files to be regenerated   and then they require a newer header than is provided with gnutls. - Remove ZLIB option.  It's no longer available.

PR:		237419
Reported by:	Kevin Oberman <rkoberman@gmail.com>

Update to 3.6.7.

MFH:		2019Q2
Security:	https://www.gnutls.org/security-new.html#GNUTLS-SA-2019-03-27

- Let gnutls look for its configuration files in PREFIX/etc instead of /etc. - Use --with-default-trust-store-file to set the location of the root   certificates so configure doesn't have to autodetect this and the   build dependency can be removed. - Define TEST_TARGET. - Remove DOCSDIR.  The files are also in PREFIX/share/info. - Use p11-kit-trust as the default PKCS#11 trust store.

PR:		235703
Reported by:	mi