security/gnutls 3.8.13

Update to 1.4.5.

- Chase libgpg-error version bump [1] - Add explicit version to libgpg-error dependency where missing [2] - Bump PORTREVISION [1]

Approved by:	maintainers (arved, lofi, novel,
		ports at mcdermottroe dot com) [1]
Suggested by:	novel, lofi [2]

- Update to 1.4.4 - Replace INSTALLS_SHLIB with USE_LDCONFIG

Update to 1.4.3.

Update to 1.4.2.

- Update to 1.4.1 - Remove --with-included-libtasn1 from CONFIGURE_ARGS (should have   been done that earlier actually)

Update to 1.4.0.

Fix libtasn1 dependency.

PR:		97487
Submitted by:	Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
Pointyhat to:	tmclaugh

Move opencdk and libtasn1 detection to after bsd.port.pre.mk so they can be properly detected if already installed.

- Update to 1.2.11 - Order MASTER_SITEs by relevance - Allow using libtasn1 from ports (disabled in previous commit due to   problems)

Temporary allow using included libtasn1 only to fix build.

PR:		96838, 96833
Submitted by:	Carl Fongheiser <kf0yn@mchsi.com>,
		Kyryll A Mirnenko <mirya@matrix.ua>

Chase security/libtasn1 shlib version bump.

- Chase libgpg-error shlib version bump (.1 -> .2) - Bump PORTREVISION

- Depend on texinfo from ports only when it is really needed [1] - Remove USE_REINPLACE

Submitted by:	nork [1]

Conversion to a single libtool environment.

Approved by:	portmgr (kris)

Update to 1.2.10 - a security release which fixes bugs in libtasn1's DER decoder

Update to 1.2.9.

Mass-conversion to the USE_AUTOTOOLS New World Order.  The code present in bsd.autotools.mk essentially makes this a no-op given that all the old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in exactly the same way as USE_AUTOTOOLS itself.

Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.

Preliminary documentation can be found at:
	http://people.FreeBSD.org/~ade/autotools.txt

which is in the process of being SGMLized before introduction into the
Porters Handbook.

Light blue touch-paper.  Run.

- Revive CONFLICTS with gnutls-devel [1] - Do not build static libraries [2]

Requested by:	kris [1]
		vs [2]

Don't CONFLICTS with gnutls-devel since it has been removed.

- Pass maintainership of gnutls, libtasn1 and opencdk ports to   Roman Bogorodskiy (novel) who kindly agreed to look after them

At Kris's request, back out the MACHINE_ARCH spelling correction until after 5.4-RELEASE.

Assist getting more ports working on AMD64 by obeying the Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.

- Depend on pkg-config to allow for clean package deinstallation   (due to presence of files installed into ${PREFIX}/libdata/pkgconfig) - Remove patches in favor of simpler REINPLACE substitution

PR:		ports/77279 (based on)
Submitted by:	Roman Bogorodskiy <bogorodskiy@inbox.ru>

- Add 2 new patches missed in the previous commit   (needed to fix pkg-config files installation)

- Update to 1.0.24 [1] - Install pkg-config files into a proper directory

PR:             ports/76905 [1]
Submitted by:   Roman Bogorodskiy <bogorodskiy@inbox.ru> [1]

Update libgcrypt to 1.2.1. Changes:         * made the code try to lock secure memory pool not only when running as           root,         * fixed type usage in Serpent,         * made the code mix the PID into the entropy pool for better protection           after a fork,         * fixed memory leak in RSA.         * fixed alignment problems in Rijndael,         * fixed memory leak in gcry_pk_si

- Update to 1.0.21 - Make security/libtasn1 and security/opencdk into optional dependencies,   enabled by knobs: WITH_LIBTASN1 and WITH_OPENCDK, respectively.   Default to using their included versions

- Update to 1.0.20, fixing GnuTLS certificate chain verification DoS   vulnerability (portaudit ID: 84ab58cf-e4ac-11d8-9b0a-000347a4fa7d),   described in the following advisories:   - http://www.hornik.sk/SA/SA-20040802.txt   - http://secunia.com/advisories/12156

PR:		ports/71502
Submitted by:	Koop Mast <kwm@rainbow-runner.nl>
Approved by:	portmgr (eik, marcus)

Apply a big libtool patch to allow porters to use the libtool installed by the libtoolX ports instead of the one included with each port.  Ports that set USE_LIBTOOL_VER=X will now use the ports version of libtool instead of the included version.  To restore previous behavior, use the new macro, USE_INC_LIBTOOL_VER.  Both macros accept the same argument: a libtool version.

For example, to use the ports version of libtool-1.5, add the following to
your Makefile:

USE_LIBTOOL_VER=        15

To use the included version of libtool with extra hacks provided by
libtool-1.5, add the following to your Makefile:

USE_INC_LIBTOOL_VER=    15

With this change, ports that had to add additional libtool hacks to prevent
.la files from being installed or to fix certain threading issues can now
delete those hacks (after appropriate testing, of course).

PR:		63944
Based on work by:eik and marcus
Approved by:	ade (autotools maintainer)
Tested by:	kris on pointyhat
Bound to be hidden problems:	You bet

- Update to 1.0.13 (latest stable version) [1] - Switch to libtool-1.5 - NOTE: shlib version was downgraded from 13 to 12

PR:		ports/66331 [1]
Submitted by:	Brian Candler <B.Candler@pobox.com>

Update libgcrypt to the new stable version 1.2.0 Retire libgcrypt-devel

Switch back to security/libgcrypt and bump PORTREVISION for
- gnutls
- gnutls-devel
- gsasl
- opencdk
- vpnc

libggz:
- Remove dependency on libgcrypt, because the port does not yet
work with the new libgcrypt

libksba:
- Update to 0.9.5
- Pass maintainership to lofi, who already maintains the other
aegypten ports.

Approved by:	lofi

wmbiff:
Switch to security/libgcrypt but no PORTREVISION bump, because the
dependency is optional and the port does not work with the new
libgcrypt and needs to be updated.

No action, because ports don't work with the new libgcrypt and need
to be updated, maintainers informed:
security/newpg
security/pinentry
security/dirmngr
emulators/fuse
emulators/libspectrum

Whoa there, boy, that's a mighty big commit y'all have there...

Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".

For ports-in-waiting:

	USE_LIBTOOL=YES		->	USE_LIBTOOL_VER=13
	USE_AUTOCONF=YES	->	USE_AUTOCONF_VER=213
	USE_AUTOMAKE=YES	->	USE_AUTOMAKE_VER=14

Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.

- Update to 1.0.8 - Always depend on libtasn1 and opencdk - Add libgcrypt-devel and libgpg-error dependencies - Add explicit USE_ICONV and USE_GETTEXT to properly register   shared library dependencies - Add CONFLICTS to prevent installation over gnutls-devel

SIZE *DOES* MATTER.

Change to my @FreeBSD.org address.

Approved by:	krion

- Make security/opencdk and security/libtasn1 dependencies   optional, enabled by WITH_OPENCDK and WITH_LIBTASN1 knobs,   respectively.  NOTE: several people reported that using   external libtasn1 breaks (at least some) GnuTLS functionality,   so using WITH_LIBTASN1 is NOT recommended for now. - Remove patch-configure as it breaks proper shared library build - Build include lzo library by default

PR:		57346
Submitted by:	Sergei Kolobov <sergei@kolobov.com> (maintainer)

- Chase library to actual opencdk dependency

Submitted by:	maintainer

- Chase shared library version

Pointed out by:	KATO Tsuguru

- Update to 0.8.10

PR:		57140
Submitted by:	maintainer

Update to 0.8.6

PR: 50289
Submitted by: MAINTAINER

- Update to 0.8.1 - Remove WITH_OPENCDK knob - require security/opencdk by default - Use DOCSDIR and EXAMPLESDIR in pkg-plist

PR:		48706
Submitted by:	Sergei Kolobov <sergei@kolobov.com>

Add missing directory

De-pkg-comment.

Use MASTER_SITE_GNUPG

- Add a knob for OpenCDK support (WITH_OPENCDK=yes), disabled by default - Bump PORTREVISION - although there are no changes with the default options,   hint users to upgrade to take advantage of OpenCDK support - Re-sort MASTER_SITES (ftp.gnutls.org is temporarily unavailable) - Allow user to specify their own CPPFLAGS and LDFLAGS - Remove useless .la files - Re-sort pkg-plist

PR:		ports/47525
Submitted by:	Sergei Kolobov <sergei@kolobov.com> (maintainer)

Update to 0.6.0

PR:		47102
Submitted by:	Sergei Kolobov <sergei@kolobov.com>

GnuTLS is a portable ANSI C based library which implements the TLS 1.0 and SSL 3.0 protocols. The library does not include any patented algorithms and is available under the GNU Lesser GPL license.

Important features of the GnuTLS library include:
- Thread safety
- Support for both TLS 1.0 and SSL 3.0 protocols
- Support for both X.509 and OpenPGP certificates
- Support for basic parsing and verification of certificates
- Support for SRP for TLS authentication
- Support for TLS Extension mechanism
- Support for TLS Compression Methods

Additionaly GnuTLS provides an emulation API for the widely used
OpenSSL library, to ease integration with existing applications.

WWW:	http://www.gnutls.org/

PR:		ports/45348
Submitted by:	Sergei Kolobov <sergei@kolobov.com>