security/opensaml2

Update Shibboleth to 3.0.2

Also update the toolchain to latest versions. This includes a security fix for
apache-xml-security-c.

Releaseinfo:    https://wiki.shibboleth.net/confluence/display/SP3/ReleaseNotes
Security:       5786185a-9a43-11e8-b34b-6cc21735f730
Security:       https://shibboleth.net/community/advisories/secadv_20180803.txt

devel/boost-*: update to 1.67.0

Changes:	http://www.boost.org/users/history/version_1_67_0.html
PR:		227427
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D15030

devel/boost-*: update to 1.66.0

Changes:	http://www.boost.org/users/history/version_1_66_0.html
PR:		223922
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D13279

Shibboleth Service Provider Security Advisory [15 November 2017]

An updated version of the Shibboleth Service Provider software
is available which corrects a critical security issue in the
"Dynamic" metadata provider plugin.

Deployers making use of the affected feature should apply the
relevant update at the soonest possible moment.

Security:	b4b7ec7d-ca27-11e7-a12d-6cc21735f730

devel/boost-*: update to 1.65.1

Changes:	http://www.boost.org/users/history/version_1_65_1.html
PR:		218835
Approved by:	maintainer timeout (1.65.1: 2 weeks; 1.65.0: 1 month)
Tested by:	jhibbits (on powerpc64, earlier version)
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D11582

devel/boost-*: enable C++11 features

PR:		218835
Obtained from:	https://github.com/DragonFlyBSD/DeltaPorts/pull/690
Approved by:	maintainer timeout (2 months)
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D11582

devel/boost-*: update to 1.64.0

Changes:	http://www.boost.org/users/history/version_1_64_0.html
PR:		218835
Approved by:	office (bapt)
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D10472

devel/boost-*: update to 1.63.0

Changes:	http://www.boost.org/users/history/version_1_63_0.html
PR:		215598
Exp-run by:	antoine
Approved by:	office (bapt)
MFH:		2017Q1

devel/boost-*: update to 1.62.0

- Enable `long double` C99 math usage
- Switch 9.x back to building with GCC

Changes:	http://www.boost.org/users/history/
PR:		199601
Submitted by:	Chen Xu, bapt, amdmi3, truckman (based on)
Reviewed by:	rakuco (kde) (earlier version)
Exp-run by:	antoine (3 tries), truckman (consumers only, earlier versions)
Approved by:	bapt (office)

Upgrade shibboleth-sp 2.6 and its tool chain

- Fix trailing whitespace in pkg-descrs, categories [p-x]*

Approved by:	portmgr blanket

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

- Switch to options helpers - Add some NO_ARCHes - Fix and unsilence some installation commands - Other minor fixes

Approved by:	portmgr blanket

Shibboleth SP software crashes on well-formed but invalid XML.

The Service Provider software contains a code path with an uncaught
exception that can be triggered by an unauthenticated attacker by
supplying well-formed but schema-invalid XML in the form of SAML
metadata or SAML protocol messages. The result is a crash and so
causes a denial of service.

You must rebuild opensaml and shibboleth with xmltooling-1.5.5 or later.
The easiest way to do so is to update the whole chain including
shibboleth-2.5.5 an opensaml2.5.5.

URL:    	http://shibboleth.net/community/advisories/secadv_20150721.txt
Security:	CVE-2015-2684

Update Shibboleth and opensaml to latest version.

Remove $FreeBSD$ from patches files everywhere.

With hat:	portmgr
Sponsored by:	Absolight

- Add empty directory to plist

Approved by:	portmgr blanket

Add USES=libtool

Modernize LIB_DEPENDS

With hat:	portmgr

Remove NOPORTDOCS and NOPORTEXAMPLES.

- Stage support

Add NO_STAGE all over the place in preparation for the staging support (cat: security)

Add an expicit dependency on pkgconf

- Update to 7.31.0 - Bump PORTREVISION for ftp/curl shlib change - Add TEST_DEPENDS - Convert to new options framework - Adjust options:   - Add COOKIES   - Add CYASSL, NSS, POLARSSL, THREADED_RESOLVER, TLS_SRP [1]   - Add GSSAPI and SPNEGO [2]   - Remove KERBEROS4   - Rename LIBIDN to IDN   - Remove TRACKMEMORY [1] - Sort option handler - Add SLAVEDIRS: ftp/curl-hiphop - Cosmetic change - Cleanup

Changes:	http://curl.haxx.se/changes.html
PR:		ports/172325 (-exp run), ports/177369 (based on) [1]
Submitted by:	Hirohisa Yamaguchi <umq@ueo.co.jp> [1], hrs (via email) [2]
Exp run by:	miwi

Security update for apache-xml-security-c. Dependant ports, especially shibboleth2-sp, opensaml2, xmltooling and log4shib should all be updated.

Security: CVE-2013-2156

Add build dependency on boost for shibboleth and opensaml. PR:	ports/179431

Update Shibboleth-sp and its tool chain to 2.5.1.

Note that from 2.5, shibd is run as the user shibd.  The port tries to fix the
key file ownership but if you have changed the file name of the key from the
default sp-key.pem, make sure you chown your key file(s) to user shibd.

Also, take maintainership of the entire tool chain (approved by all previous
maintainers).

Incorporates the ideas suggested by Craig Leres [177668], making sure that the
ssl key is not added to the package.

PR:	177668, 178694

- Change MAINTAINER address - Trim headers while I am here - Clean up some trailing whitespace

- Fix typos in COMMENT - Enforce the now clarified rules from the Porter's Handbook (e.g. no dots, no   A/An, etc.)

- Use xerces-c 3 [1] - Pass maintainership back to Janos Mohacsi <janos.mohacsi@bsd.hu> [2]

PR:		ports/159715 [1]
Submitted by:	Janos Mohacsi <janos.mohacsi@bsd.hu> [1]
Approved by:	maintainer (me) [2]

- Update to 2.4.3 to fix security issue - Update home page while here - Take maintainership while here

Approved by:	linimon
Security:	CVE-2011-1411

- Add another forgotten patch

Reported by:	pavmail

- Update to latest versions

PR:		ports/157822
Submited by:	Palle Girgensohn <girgen@FreeBSD.org>
Approved by:	maintainer timeout

Chase the ftp/curl shlib version bump.

- Update to 2.3

PR:		ports/142325
Submitted by:	Steve Wills <steve@mouf.net>
Approved by:	maintainer timeout

Chase xmltooling shared lib

Forgotten by:	pgollucci
Submitted by:	pointyhat

- Update to 2.2

PR:		ports/136032
Submitted by:	Steve Wills <steve@mouf.net>
Approved by:	maintainer

Bump the version of the curl shared library after the ftp/curl update to 7.19.2. Bump PORTREVISION, even on the ports that do not have a versioned dependency, since the binaries will most probably still stop working.

- Add missing patch

- Update to 2.1

PR:		127400
Submitted by:	Janos Mohacsi <janos.mohacsi@bsd.hu>

- Update to 1.1.1 - Reassign to ports@

PR:		ports/123900
Submitted by:	Tony Maher <tonymaher optusnet.com.au>

- Mark BROKEN: error: `ENDLINE' is not a member of `log4cpp::CategoryStream'

Reported by:	pointyhat

- Update WWW

- Update to 1.1b - Fix checksum problem, authors replaced the 1.1 distfile with 1.1b's

Reported by:	pointyhat
Approved by:	maintainer (implicit)

Add opensaml 1.1, open source implentation of SAML.

PR:		ports/109113
Submitted by:	Tony Maher